diff --git a/.plans/service-fees/GOAL.md b/.plans/service-fees/GOAL.md
new file mode 100644
index 0000000000..0dcf0bdaf9
--- /dev/null
+++ b/.plans/service-fees/GOAL.md
@@ -0,0 +1,356 @@
+# Stripe service fees
+
+## Status
+
+Agreed product goal. Created 2026-08-06 from product decisions and codebase analysis. Implementation is being delivered as a stacked PR series.
+
+This file is the product requirements source. `SPEC.md` defines the technical design, `VALIDATION.md` defines the end-to-end proof, and `docs/adr/0004-stripe-service-fee-assessment.md` records the architectural decisions and invariants.
+
+## Goal
+
+Charge a 5% service fee on eligible Stripe-funded credit purchases for billing objects created at or after `2026-11-01T00:00:00Z`.
+
+The fee is an additional charge. It does not increase or reduce the credits or Kilo Pass entitlement received. Stripe must show a positive fee as a separate line item named `Service fee (5%)`.
+
+The change must support organization-specific historical exemptions, retain an auditable fee decision for each commercial billing event, keep product and fee revenue separate, and avoid blocking an underlying payment if fee processing fails.
+
+## Definitions
+
+- **Eligible product subtotal**: The aggregate net positive amount for fee-bearing credit products after eligible discounts and proration credits, before tax. It excludes seats, direct KiloClaw charges, the service fee itself, taxes, and unrelated invoice adjustments.
+- **Service fee assessment**: The durable decision for one commercial billing event. It records the calculation inputs, cutoff and exemption decisions, expected and charged fee, outcome, settlement, refunds, and related Stripe identities.
+- **Commercial billing event**: One customer purchase or subscription invoice, even when Stripe represents it with several objects such as a Checkout Session, Invoice, PaymentIntent, and Charge.
+- **Organization exemption**: An internal, exact-organization exception that suppresses service fees on eligible purchases billed to that organization's Stripe customer.
+- **Missed fee**: A positive fee that should have been charged but was omitted because fee processing failed open.
+
+## Eligible transactions
+
+The service fee applies to:
+
+- Personal credit top-ups
+- Organization credit top-ups
+- The initial payment when enabling personal auto-top-up
+- The initial payment when enabling organization auto-top-up
+- Subsequent personal and organization automatic top-ups
+- All Stripe-managed Personal Kilo Pass charges
+- Self-service Kilo Pass for Organizations charges
+
+Kilo Pass coverage includes:
+
+- Initial purchases
+- Renewals
+- Upgrades
+- Prorations
+- Organization capacity increases
+- Eligible future invoices for subscriptions created before the activation instant
+
+All Stripe-managed Personal Kilo Pass subscriptions are treated as self-service. Kilo Pass for Organizations is eligible only when its purchase channel is self-service.
+
+## Excluded transactions
+
+The service fee does not apply to:
+
+- Team or Enterprise seat charges
+- Direct KiloClaw subscriptions
+- App Store, Google Play, or other store-managed Kilo Pass purchases
+- Manual or sales-assisted Kilo Pass for Organizations agreements
+
+When an invoice contains both seats and Kilo Pass for Organizations, only the net eligible Kilo Pass amount forms the fee base. Seat charges and seat-only discounts must not affect the fee.
+
+## Activation and timing
+
+Fee eligibility is fixed when the applicable Stripe billing object is created.
+
+- A billing object created at or after `2026-11-01T00:00:00Z` is eligible.
+- A billing object created before that instant remains fee-free even if payment settles later.
+- Interactive purchases use Checkout Session creation time.
+- The initial invoice produced by an interactive Checkout inherits the Checkout Session's fee decision.
+- Transactions without a Checkout Session use invoice creation time.
+- Renewal and proration invoices use their own creation time.
+
+Existing Kilo Pass subscriptions are not automatically grandfathered. Their eligible invoices created after activation carry the fee unless the exact billed organization is exempt.
+
+## Fee calculation
+
+For each commercial billing event:
+
+1. Sum the net positive eligible product subtotal after discounts and proration credits.
+2. Exclude tax, seats, KiloClaw charges, the service fee, and unrelated adjustments.
+3. Calculate 5% of the aggregate subtotal.
+4. Round once to the nearest cent using round-half-up.
+5. Omit the fee line if the rounded fee is zero.
+
+Discounts allocated to an eligible Kilo Pass charge must reduce its service fee proportionally. A seat-only discount must not reduce the Kilo Pass fee.
+
+Proportional reduction is what the customer receives, regardless of the mechanism. On interactive Checkout the fee line is itself discountable, so a promotion code reduces product and fee by the same factor and the 5% ratio is preserved arithmetically. On invoices the fee is calculated from already-discounted lines and attached as non-discountable. Both produce the same result.
+
+A discount reduces the fee base. A prepaid credit balance does not: the fee follows recognized product value, not cash received. A customer who redeems prepaid credit against an eligible purchase still owes the fee on the full product amount.
+
+Examples:
+
+| Billing event | Service fee |
+|---|---:|
+| $100.00 credit top-up | $5.00 |
+| $49.00 Kilo Pass | $2.45 |
+| $49.00 Kilo Pass with a 20% eligible discount | $1.96 |
+| $30.00 positive Kilo Pass proration | $1.50 |
+| $720.00 seats plus $49.00 Kilo Pass | $2.45 |
+| $0.01 eligible subtotal | $0.00; omit the fee line |
+
+The customer receives the selected credit principal or normal Kilo Pass entitlement. For example, a `$100.00` top-up charges `$105.00` before tax and grants exactly `$100.00` in credits.
+
+The service fee follows the eligible product's Stripe tax treatment. The fee base itself is calculated before tax. Finance/tax treatment was confirmed on 2026-08-11: the 5% service-fee line uses the same Stripe `tax_behavior` as the eligible product it accompanies.
+
+If resolving or applying that treatment fails, fee processing fails open: the payment proceeds without a fee. A fee-domain failure never blocks a customer payment.
+
+## Stripe presentation
+
+A positive fee must appear as a separate Stripe line item named:
+
+`Service fee (5%)`
+
+Exempt, pre-activation, zero-rounded, and fail-open billing events omit the line. Stripe must not display a zero-value or "waived" fee line.
+
+Stripe Checkout, hosted invoices, PDFs, and receipts remain the authoritative itemized billing records.
+
+## Organization exemptions
+
+A platform admin can grant or revoke an exemption from the organization's Admin UI record.
+
+Exemption rules:
+
+- The exemption applies only to purchases owned and billed by the exact organization.
+- It does not inherit to a parent or child organization.
+- It does not apply to members' personal purchases.
+- Granting or revoking an exemption requires a reason.
+- A change affects only billing objects created afterward.
+- Existing invoices are not changed, refunded, credited, or charged retroactively.
+- Exemption status, reason, actor, and history are visible only to platform admins.
+- Customer-facing organization APIs and organization audit logs must not expose exemption data.
+- Exempt customers simply receive Stripe billing objects without a fee line.
+
+The exemption feature and Admin UI must be deployed before activation. Platform admins will enter the approved historical exemptions and reasons through the Admin UI. The system must not infer exemptions from fields such as seat requirements, sponsorship, plan, hierarchy, or trial settings. There is no source-controlled organization allowlist.
+
+## Durable assessments
+
+The system must persist one idempotent service fee assessment per commercial billing event. Related Stripe objects enrich the same assessment and must not create duplicate assessments or fee revenue.
+
+An assessment must retain enough information to explain and reconcile the decision, including:
+
+- Commercial event and flow type
+- Applicable user or exact organization owner
+- Checkout Session, invoice, PaymentIntent, and charge identifiers when available
+- Billing-object creation time and cutoff result
+- Eligible subtotal
+- Expected fee
+- Charged fee
+- Exemption decision
+- Outcome, including charged, exempt, pre-activation, zero-rounded, or missed
+- Settlement state and settled amounts
+- Cumulative principal and fee refunds
+- Operational failure reason where applicable
+
+The assessment is a service-fee sidecar, not a product or payment ledger. It is the source for fee reporting, reconciliation, and refund calculations. Product values are retained only as inputs to fee calculation, fee reconciliation, and fee refunds. `credit_transactions` remains the record of credits granted and the source of the existing credit-revenue series. Stripe remains the source for actual charges, invoices, refunds, disputes, and invoice presentation.
+
+## Failure behavior
+
+Fee processing fails open.
+
+If fee calculation, exemption lookup, or fee attachment fails:
+
+- The underlying purchase, automatic top-up, renewal, or proration proceeds without the fee.
+- Credits and entitlements follow their normal settlement rules.
+- The assessment records the expected fee and missed outcome.
+- The missed fee is never charged retroactively or carried into another billing event.
+- Each processing retry sends another notification through the existing Admin Slack notification system. Retry alerts are intentionally not deduplicated.
+- Slack delivery failure does not block payment processing.
+- Notifications may contain non-sensitive billing identifiers, amounts, flow type, and reason codes. They must not contain tokens, payment credentials, sensitive headers, or other secrets.
+
+There is no runtime kill switch. Disabling service fees requires a deployment rollback or code change.
+
+## Credit settlement
+
+Credit settlement must use the trusted credit principal, not the gross Stripe amount.
+
+Today, top-up settlement uses `charge.amount` or `invoice.amount_paid`, both of which will include the service fee after this change. Those values must not determine credits granted. A `$100.00 + $5.00` payment must create only `$100.00` of credits.
+
+Personal Kilo Pass entitlement remains based on its configured tier rules rather than invoice total. Kilo Pass reporting and affiliate calculations must use product amounts that exclude the service fee.
+
+## Refunds
+
+The service fee is refundable in proportion to the eligible product principal refunded.
+
+- A full refund returns the full service fee.
+- A partial refund returns the corresponding portion of the service fee.
+- Multiple partial refunds use cumulative proportional rounding: calculate the total fee that should have been refunded for cumulative eligible principal refunded, round half-up, then subtract fee already refunded.
+- A fully refunded purchase must return exactly the full original fee, without rounding drift.
+- Settled refunds reduce collected service-fee revenue.
+
+This work does not add a general partial-refund Admin UI. Existing Kilo-initiated full-refund paths must include the full gross payment, including the fee. Operators issuing partial refunds directly in Stripe must include the proportional fee according to the operator runbook. Stripe refund events update the durable assessment with observed refund amounts.
+
+A chargeback reverses the fee in the same way a refund does, because the money leaves the account. A dispute later resolved in Kilo's favor restores it. The disputed fee is tracked separately from refunds because a dispute outcome can move in either direction; the assessment does not track disputed product revenue.
+
+The system must not automatically issue a second refund when an operator's Stripe partial refund appears not to include a proportional fee because the operator's intended gross-versus-principal amount cannot be inferred safely.
+
+## Revenue and affiliate reporting
+
+Service-fee revenue is separate from product revenue.
+
+- Credits and Kilo Pass product revenue exclude the fee.
+- Affiliate-commissionable amounts exclude the fee.
+- Gross-payment and fraud telemetry may include the full charge.
+- Collected service-fee revenue is recognized only after Stripe confirms payment settlement.
+- Unpaid or abandoned billing objects do not count as collected, missed, or exempted revenue.
+- Settled refunds and withdrawn chargebacks reduce collected fee revenue.
+- Collected fee revenue is measured from the fee Stripe actually settled, not the fee Kilo requested. On discounted interactive purchases these differ.
+
+The Admin revenue dashboard keeps its existing paid, free, multiplied, and unmultiplied credit-transaction semantics, including their current limitations. Assessment-backed top-ups remain in those series. Separately, settled assessments report:
+
+- Collected service-fee revenue
+- Expected but missed fee value
+- Exempted fee value
+- Disputed fee value
+- Charged, missed, and exempt assessment counts
+
+The fee series does not make the dashboard a complete Stripe product-revenue report and must not be added to credit revenue to claim authoritative gross revenue. Kilo Pass product revenue remains outside the current query and requires separate product and accounting work. Unpaid and abandoned assessments remain available for audit but do not count as fee revenue or leakage.
+
+## Customer communications
+
+### Existing top-up emails
+
+Existing personal, organization, and automatic top-up confirmation emails must itemize the following when a positive fee was charged:
+
+- Credits added
+- `Service fee (5%)`
+- Total paid
+
+When no fee was charged, the email omits the fee row and does not reveal whether the reason was exemption, pre-activation timing, zero rounding, or a fail-open error.
+
+### Kilo Pass emails
+
+This change does not introduce new Personal Kilo Pass or Kilo Pass for Organizations payment or renewal emails. If such emails are added later and state an eligible payment amount, they should itemize product principal, service fee, and gross payment.
+
+### Kilo UI and billing history
+
+Kilo's pre-purchase price controls and auto-top-up settings remain unchanged. Stripe Checkout discloses the fee before an interactive payment.
+
+Kilo billing-history tables continue to show the gross invoice amount without a fee breakdown. Customers can use the linked Stripe invoice or PDF for authoritative line-item details.
+
+## Operational constraint: product-restricted coupons
+
+A Stripe coupon restricted to specific products (`applies_to`) would discount an eligible product without discounting the fee line, making the customer pay more than the published 5%. Because the customer enters promotion codes on Stripe's hosted page, this cannot be detected before the fact, and a dashboard-created coupon requires no deployment.
+
+Therefore: never create a coupon restricted to a fee-bearing product. This is an operational rule with a scheduled detection check and a settlement-time effective-rate alert, not something code can prevent.
+
+## Out of scope
+
+- Service fees on seats or direct KiloClaw subscriptions
+- Store-managed Kilo Pass fees
+- Fees on manual or sales-assisted agreements
+- Personal-user fee exemptions
+- Parent, child, or member inheritance of organization exemptions
+- A customer-facing exemption indicator
+- A general partial-refund Admin UI
+- New Kilo Pass payment or renewal emails
+- A runtime fee kill switch
+- Retroactive fee collection
+- Changes to Kilo pre-purchase price presentation or billing-history itemization
+
+## Codebase impact identified during analysis
+
+This is a cross-cutting billing change, not a Checkout-only change.
+
+### Stripe creation and lifecycle paths
+
+Expected areas include:
+
+- `apps/web/src/lib/stripe/index.ts`
+  - Manual top-up Checkout
+  - Personal auto-top-up setup Checkout
+  - Credit settlement and webhook dispatch
+- `apps/web/src/lib/organizations/organization-auto-top-up.ts`
+  - Organization auto-top-up setup Checkout
+- `apps/web/src/lib/autoTopUp.ts`
+  - Subsequent off-session automatic invoices
+- `apps/web/src/routers/kilo-pass-router.ts`
+  - Personal Kilo Pass Checkout and subscription changes
+- `apps/web/src/lib/kilo-pass-org/stripe-adapter.ts`
+  - Organization Kilo Pass add-on invoices and mixed seat invoices
+- `apps/web/src/routers/organizations/organization-subscription-router.ts`
+  - Seat and Kilo Pass capacity changes and schedules
+
+Existing recurring subscriptions need invoice-time fee handling. Updating only new Checkout Sessions would miss renewals for subscriptions created before activation.
+
+### Persistence and Admin UI
+
+Expected areas include:
+
+- `packages/db/src/schema.ts` and generated migrations
+- Internal exemption state and history
+- Service fee assessments and Stripe identity links
+- `apps/web/src/routers/organizations/organization-admin-router.ts`
+- `apps/web/src/app/admin/components/OrganizationAdmin/`
+
+Exemption history must not use a customer-visible organization audit stream.
+
+### Reporting, alerts, and email
+
+Expected areas include:
+
+- `apps/web/src/lib/revenueKpi.ts`
+- Admin revenue dashboard components
+- `apps/web/src/lib/slack/admin-notifications.ts`
+- Existing top-up email sending contracts and template
+
+### Classification risks
+
+A service-fee line must never be mistaken for:
+
+- A Kilo Pass for Organizations subscription add-on
+- A seat item
+- A direct KiloClaw item
+- Credit principal
+
+This is especially important in organization Kilo Pass code that currently treats a non-seat subscription item as the Kilo Pass item.
+
+## Acceptance criteria
+
+The implementation plan must provide verification for at least these cases:
+
+1. Exact activation-boundary behavior for Checkout-created and invoice-created transactions.
+2. Correct fees for manual top-ups, auto-top-up setup, subsequent auto-top-ups, Personal Kilo Pass, and self-service Kilo Pass for Organizations.
+3. No fee for seats, direct KiloClaw, store purchases, or manual organization agreements.
+4. Mixed seat and Kilo Pass invoices charge only on the net eligible Kilo Pass portion.
+5. Eligible product discounts proportionally reduce the fee; seat-only discounts do not.
+6. Aggregate half-up rounding and omission of zero-cent fee lines.
+7. Credit grants use principal rather than gross payment.
+8. Existing subscriptions receive fees on post-activation invoices.
+9. Exact-organization exemption behavior and Admin-only grant, revoke, reason, and history access.
+10. One assessment across related Checkout, invoice, PaymentIntent, and charge objects.
+11. Idempotent settlement and reporting across webhook retries.
+12. Fail-open payment behavior, durable missed-fee records, and a repeated Admin Slack alert on every retry.
+13. Existing credit-revenue semantics remain unchanged, while collected, missed, exempted, and disputed fee values use settled assessments only.
+14. Affiliate amounts exclude fees while gross fraud telemetry can include them.
+15. Full and cumulative partial-refund calculations return no more or less than the original fee.
+16. Fee-bearing top-up emails itemize Credits added, `Service fee (5%)`, and Total paid; fee-free emails omit the fee row.
+17. Billing-history summaries remain unchanged and Stripe invoices contain the authoritative fee line.
+18. Fee lines do not interfere with existing seat, Kilo Pass, KiloClaw, invoice, or refund classifiers.
+
+## Release prerequisites
+
+- Finance/tax confirmed on 2026-08-11 that the fee receives the same Stripe tax treatment as the eligible product.
+- The schema, Admin exemption controls, assessment pipeline, reporting, and alerting are deployed before activation.
+- Platform admins enter and verify all approved historical organization exemptions before `2026-11-01T00:00:00Z`.
+- Operators have a documented procedure for proportional partial refunds in Stripe and for responding to missed-fee Slack alerts.
+- Rollout verification confirms that existing Personal Kilo Pass and self-service Kilo Pass for Organizations invoices created after activation receive the correct fee.
+
+## Main implementation risks
+
+1. Attaching recurring fees to invoices for existing subscriptions.
+2. Preserving an exact 5% net fee after Stripe discounts and mixed-invoice allocation.
+3. Keeping seat charges and seat-only discounts out of the fee base.
+4. Separating gross payment from credit principal everywhere credits are granted.
+5. Preventing fee lines from being misclassified as products.
+6. Updating one durable assessment across asynchronous Stripe objects and retries.
+7. Reporting fail-open leakage without counting unpaid or duplicate events.
+8. Reconciling cumulative partial refunds without rounding drift.
+9. Validating the confirmed mirrored tax treatment in Stripe test mode before release.
diff --git a/.plans/service-fees/SPEC.md b/.plans/service-fees/SPEC.md
new file mode 100644
index 0000000000..f8cae87594
--- /dev/null
+++ b/.plans/service-fees/SPEC.md
@@ -0,0 +1,1253 @@
+# Stripe service fee technical integration specification
+
+## Status and authority
+
+Implementation specification for `.plans/service-fees/GOAL.md`, prepared from the repository state on 2026-08-06.
+
+`GOAL.md` is authoritative for product behavior. This document fixes the technical design and execution order. If implementation reveals that a step cannot preserve the goal, stop and revise the spec rather than weakening the behavior in code.
+
+Before changing a scoped area, read its nearest `AGENTS.md`. Database changes must follow `packages/db/AGENTS.md` and the `database-migrations` skill. React changes must follow `apps/web/AGENTS.md` and the `kilo-design-cloud` skill. Test work must follow the `testing-principles` skill.
+
+## Decision record
+
+`docs/adr/0004-stripe-service-fee-assessment.md` is authoritative for architectural decisions and invariants. The table below is a working summary. Update the ADR and this specification when a decision changes.
+
+Resolved during spec review on 2026-08-08. Each entry supersedes earlier drafts of this document.
+
+| ID | Decision | Rationale |
+|---|---|---|
+| D1 | The fee base follows **recognized product value**. Discounts reduce it; prepaid credit-balance consumption does not. | Preserves the invariant that collected fee equals 5% of product revenue, which is what makes the assessment table reconcilable. Kilo does not use Stripe Billing credit grants today, so this is a forward-looking guard. |
+| D2 | **Keep hosted promotion-code entry** for Personal Kilo Pass. Compute the fee from list price and accept that the fee line is discounted along with the product. | Proportional allocation makes the result arithmetically exact for unrestricted coupons, so `GOAL.md`'s proportional-reduction requirement is met without server-side discount knowledge. Avoids private-preview dependencies and avoids rewriting a live payments path. Cost: product-restricted coupons must be prevented operationally. |
+| D3 | Chargebacks **reverse the fee** on `charge.dispute.funds_withdrawn`, tracked in the dedicated non-monotonic fee-dispute column. | The money left the account, so leaving it in collected fee revenue overstates the one number this subsystem exists to produce. Keeping the fee consequence separate preserves refund monotonicity when a won dispute restores funds. |
+| D4 | On any failure to resolve or apply the confirmed mirrored tax treatment, **fail open in production** exactly as in non-production. | Applies the document's existing fail-open principle consistently. Not collecting a fee for that event is strictly better than mis-taxing customers or blocking payments. |
+
+Two defects were also corrected without requiring a decision: the Stripe wire API version was never pinned, and automatic top-up invoices had two competing fee-attachment paths. Both are addressed below.
+
+## Tax treatment
+
+Finance/tax treatment was confirmed on 2026-08-11: the 5% service-fee line uses the same Stripe `tax_behavior` as the eligible product it accompanies. Keep tax behavior resolution isolated in `tax.ts`.
+
+The repository sets no per-request tax parameters today. There is no `automatic_tax`, `tax_behavior`, `default_tax_rates`, or `tax_rates` in production code; only `tax_id_collection` is used (`apps/web/src/lib/stripe/index.ts`, three call sites, and `apps/web/src/routers/kilo-pass-router.ts`, one). Stripe tax behavior is therefore configured at the account and Price level, not by this codebase. That narrows the work to mirroring, not selecting, a treatment:
+
+- **Top-ups with an explicit amount** build the principal as inline `price_data` with no `tax_behavior` (`apps/web/src/lib/stripe/index.ts:1503-1513`). A fee line built the same way inherits identical treatment by construction. Nothing to decide and no way for the two to diverge.
+- **Default top-up** (`price: STRIPE_TOP_UP_PRICE_ID`) and **Kilo Pass** (`getStripePriceIdForKiloPass()`) reference Price objects that may carry a dashboard-set `tax_behavior`. Here the principal is a Price and the fee is inline `price_data`, so they can diverge. `tax.ts` must retrieve the eligible Price, read its `tax_behavior`, and set the same value on the fee line.
+
+That treatment was confirmed on 2026-08-11 and is recorded in ADR 0004.
+
+**On any tax-resolution or application failure: fail open, identically to non-production.** If the eligible Price cannot be read, its `tax_behavior` is not explicitly `inclusive` or `exclusive`, or the fee line cannot apply the mirrored behavior, do not construct the fee line. The payment proceeds without a fee, the assessment records `missed` with the normal `fee_application_failed` code, and Slack alerts. Do not fail closed on a payment for a fee-domain reason, add a runtime switch, or deploy a guessed fallback.
+
+The design uses explicit fee lines rather than a recurring Stripe subscription item. A fee line is classified by metadata and by the durable assessment, never by its display description alone.
+
+## Fixed constants and vocabulary
+
+Create `apps/web/src/lib/service-fees/constants.ts` with these code-owned constants:
+
+```ts
+export const SERVICE_FEE_RATE_BASIS_POINTS = 500;
+export const SERVICE_FEE_RATE_DENOMINATOR = 10_000;
+export const SERVICE_FEE_ACTIVATION_UNIX_SECONDS = 1_793_491_200; // 2026-11-01T00:00:00Z
+export const SERVICE_FEE_DESCRIPTION = 'Service fee (5%)';
+export const SERVICE_FEE_METADATA_TYPE = 'kilo-service-fee';
+export const SERVICE_FEE_VERSION = '2026-11-01-v1';
+```
+
+Do not add an environment variable, PostHog flag, database setting, or other runtime global switch. Rollback is the emergency off mechanism.
+
+### Pin the Stripe API version first
+
+`apps/web/src/lib/stripe-client.ts:13` constructs the client as `new Stripe(stripeSecretKey)` with no `apiVersion`. The string `2025-10-29.clover` is only the SDK's compiled-in default (`node_modules/stripe/cjs/apiVersion.js:5`); it is **not** a pin. Without an explicit `apiVersion`, requests use the Stripe **account** default, which can differ from the installed typings and can be changed from the Stripe dashboard without a deploy.
+
+Every line-shape assumption in this document — `discount_amounts` versus `pretax_credit_amounts`, `pricing.price_details.price`, `parent.subscription_item_details` — depends on that wire contract. Pin it before any fee work:
+
+```ts
+export const client: Stripe = new Stripe(stripeSecretKey, { apiVersion: '2025-10-29.clover' });
+```
+
+This is Phase 1 step 0. Run the existing Stripe suites immediately after pinning and before adding fee behavior, so any pre-existing drift between the account version and the typings surfaces as an isolated change rather than inside the fee diff.
+
+Use integer minor units throughout the fee domain. The first release supports the current eligible currency, USD.
+
+For an eligible non-USD commercial event, do not compute a fee: skip fee construction, persist outcome `unsupported_currency` with zero amounts, and alert. Do not record `missed`, because `missed` requires a computed `expected_fee_minor > 0` and no trustworthy expected fee exists for an unsupported currency. Never apply USD assumptions to another currency.
+
+### Flow values
+
+Use a closed TypeScript value set and a database check constraint for:
+
+- `personal_top_up`
+- `organization_top_up`
+- `personal_auto_top_up_setup`
+- `organization_auto_top_up_setup`
+- `personal_auto_top_up`
+- `organization_auto_top_up`
+- `personal_kilo_pass`
+- `organization_kilo_pass`
+
+### Outcome values
+
+Use a closed value set and `enumCheck()` for:
+
+- `pending`
+- `charged`
+- `exempt`
+- `pre_activation`
+- `zero_rounded`
+- `unsupported_currency`
+- `missed`
+
+This is the only fee-decision state column. There is no separate `application_state`.
+
+The outcome is the fee decision, not payment state. Settlement and refunds have separate columns.
+
+## Architecture
+
+Create a server-only service-fee module under `apps/web/src/lib/service-fees/`:
+
+| File | Responsibility |
+|---|---|
+| `constants.ts` | Activation, rate, label, metadata keys, version |
+| `types.ts` | Closed flow/outcome/owner types and result contracts |
+| `calculation.ts` | Pure integer fee and refund calculations |
+| `stripe-lines.ts` | Stripe line pagination, classification, net eligible subtotal, tax input extraction |
+| `assessments.ts` | Assessment create/upsert/link/settle/refund persistence |
+| `checkout.ts` | Checkout assessment preparation and positive fee line construction |
+| `invoice-created.ts` | Draft invoice assessment and fee-line attachment |
+| `settlement.ts` | Resolve assessment from invoice, PaymentIntent, or charge and mark settlement |
+| `refunds.ts` | Observe cumulative Stripe refunds and update assessment state |
+| `alerts.ts` | Best-effort Admin Slack notification for missed fees |
+| `organization-exemptions.ts` | Exact-organization exemption read and mutation support |
+
+Keep pure arithmetic and line classification free of database and Stripe clients. Pass Stripe and database dependencies into integration helpers where practical so tests do not replace the behavior under test with mocks.
+
+### Processing model
+
+There are three fee-attachment paths:
+
+1. **Interactive Checkout, fee computed before creation**: top-ups and Personal Kilo Pass. Compute the fee from the known list principal before `checkout.sessions.create()`, add a one-time fee line, then persist the returned Checkout Session ID. The returned `created` timestamp is authoritative for the activation boundary.
+2. **Kilo-owned invoice billing**: automatic top-ups. Kilo creates the invoice with `auto_advance: false` and pays it directly, so the fee item is attached before `invoices.pay()` and the `invoice.created` webhook must not touch it. See Ownership of invoice fee attachment.
+3. **Stripe-owned invoice billing**: renewals, prorations, and capacity changes. Handle `invoice.created` while the invoice is still draft, compute from all invoice lines, attach one non-discountable fee invoice item, persist the assessment, and acknowledge the webhook even when fee work fails.
+
+Settlement uses the assessment prepared by one of these paths. Settlement never recalculates the fee from the gross paid amount.
+
+### Discountable initial fee lines
+
+Subscription-mode Checkout supports neither `add_invoice_items` nor a `discountable` flag on line items (verified against the installed SDK: `SessionCreateParams` has no `add_invoice_items`; `SessionCreateParams.LineItem` has no `discountable`). A one-time fee line on a Checkout Session is therefore **always discountable**, and a promotion code the customer enters on Stripe's hosted page will discount it along with the product.
+
+**This is accepted behavior, not a defect.** For a coupon that discounts the whole invoice, it is arithmetically exact. The fee line sits inside the discounted subtotal, so both lines scale by the same factor and the ratio survives:
+
+`0.05 x list x (1 - d) === 0.05 x (list x (1 - d))`
+
+Worked example, $49.00 Kilo Pass with a 20% promotion code and the fee computed from list price:
+
+| Line | Amount |
+|---|---:|
+| Kilo Pass | $49.00 |
+| Service fee (5%) | $2.45 |
+| Subtotal | $51.45 |
+| 20% off | -$10.29 |
+| **Total** | **$41.16** |
+
+Product recognized $39.20; fee collected $1.96; and 5% of $39.20 is $1.96. `GOAL.md`'s requirement that eligible discounts proportionally reduce the fee is satisfied without the server knowing the discount in advance. A fixed-amount coupon allocated proportionally behaves the same way.
+
+Two consequences follow, and both are load-bearing.
+
+**`expected_fee_minor` is provisional on this path.** It is computed from list price and will exceed the amount actually collected whenever a coupon applies. `charged_fee_minor` must be read from the **settled invoice fee line**, never from what was sent to Stripe. The equality constraint between expected and charged fees does not apply to Checkout-created assessments; see the amount and state checks.
+
+**Product-restricted coupons overcharge and must be prevented operationally.** `Coupon.applies_to.products` limits a coupon to specific products. Such a coupon discounts the Kilo Pass line and leaves the fee line untouched: product $49.00 becomes $39.20, the fee stays $2.45, and the customer pays an effective 6.25% against a published 5%. The restriction cannot be detected before the customer enters the code, and a dashboard-created coupon needs no deploy, so no test in this repository can catch it. Required mitigations:
+
+- Operator runbook entry: never create a coupon with a non-null `applies_to` that covers a fee-bearing product.
+- A scheduled read-only check that lists coupons whose `applies_to.products` intersects Kilo Pass or top-up products and alerts Admin Slack.
+- An effective-rate assertion at settlement: when `charged_fee_minor` deviates from 5% of `settled_product_minor` by more than one cent, record `service_fee_rate_deviation` and alert. This is the restricted-coupon signature.
+
+Current exposure is low but unverified from this repository. The only coupon in code or `ENVIRONMENT.md` is `STRIPE_KILOCLAW_EARLYBIRD_COUPON_ID` (`apps/web/src/lib/config.server.ts:417`), and KiloClaw is fee-exempt. The two-month Kilo Pass promotion is an internal credits mechanism (`apps/web/src/lib/kilo-pass/usage-triggered-bonus.ts`), not a Stripe coupon. Customer-redeemable promotion codes live in the Stripe dashboard and are invisible here, so treat low exposure as a snapshot, not a guarantee.
+
+A 100% coupon zeroes both lines. That is the correct economic outcome and must be recorded as outcome `charged` with `charged_fee_minor = 0`, not as `missed`.
+
+Renewal and proration invoices are unaffected: they compute from actual discounted draft lines and attach the fee with `discountable: false`, so they are exact by construction. The resulting asymmetry is intentional — initial invoices self-correct through proportional allocation, later invoices are exact because the discount is already known.
+
+### Activation-boundary replacement
+
+Exemption drift needs no special handling: resolving the latest exemption-log row at or before `eligibility_created_at` is already correct for any delivery delay.
+
+Only the activation instant can genuinely straddle a single request. For a Checkout created within one minute of `SERVICE_FEE_ACTIVATION_UNIX_SECONDS`, compare the prepared decision against the returned `session.created`; if they disagree, expire the session and create one replacement with the correct decision. If the replacement also disagrees, fail open with a fee-free session and a missed assessment. Outside that window, do not add an expire/replace round trip to every purchase.
+
+## Database design
+
+Add the following tables to `packages/db/src/schema.ts`. Follow `packages/db/AGENTS.md`.
+
+Use the repository's existing idioms rather than inventing new ones:
+
+- Primary keys: use `assessment_key` directly for assessments. Reuse the shared `idPrimaryKeyColumn` (`packages/db/src/schema.ts:2688`) for exemption-log row IDs. Do not use `defaultRandom()`.
+- Timestamps: `timestamp({ withTimezone: true, mode: 'string' })`, with `.defaultNow().notNull()`, and an `$onUpdateFn` returning `now()` for `updated_at`.
+
+```ts
+// packages/db/src/schema.ts:2688, reuse for exemption-log IDs rather than redefine
+const idPrimaryKeyColumn = uuid()
+  .default(sql`pg_catalog.gen_random_uuid()`)
+  .primaryKey()
+  .notNull();
+```
+- Closed value sets: use the existing `enumCheck()` helper (`packages/db/src/schema.ts:180`) with a TypeScript enum and `$type<...>()`, as `stripe_dispute_cases` does. Do not hand-roll `check()` for enum columns.
+- Amounts: `integer()` minor units.
+
+Generate the migration with `pnpm drizzle generate`. Do not hand-write or edit generated DDL, snapshots, or journal entries. Prefer one generated migration for this branch.
+
+These tables store no user or account PII — only actor foreign keys — so `softDeleteUser` needs no change. State that conclusion in the PR rather than leaving it open.
+
+### `organization_service_fee_exemptions`
+
+Append-only internal exemption log. The newest row is current state; a false row records revocation:
+
+| Column | Type | Rules |
+|---|---|---|
+| `id` | UUID | Primary key |
+| `organization_id` | UUID | Not null; FK to `organizations.id`; `onDelete: restrict` |
+| `is_exempt` | boolean | Not null |
+| `reason` | text | Not null; trimmed non-empty |
+| `changed_by_kilo_user_id` | text nullable | FK to `kilocode_users.id`, `onDelete: set null` |
+| `created_at` | timestamptz string | Not null, default now |
+
+Index `(organization_id, created_at desc)`. Resolve current state and historical state with the same deterministic order: `created_at desc, id desc`. Keep the organization-scoped advisory lock around each append. Assessments point directly to the exact exemption row used for their decision.
+
+This table is not `organization_audit_logs`; it must be returned only by `adminProcedure` endpoints. Do not add these fields to `organizations.settings` or expose them through ordinary organization contracts. When an admin is soft-deleted, nulling the actor FK is sufficient. Do not store actor email or name.
+
+### `stripe_service_fee_assessments`
+
+One row per commercial billing event:
+
+| Column | Type | Rules |
+|---|---|---|
+| `assessment_key` | text | Primary key; not null and immutable |
+| `version` | text | Not null; initial value `2026-11-01-v1` |
+| `flow` | text | Not null; checked against flow values |
+| `outcome` | text | Not null; `enumCheck` against outcome values |
+| `currency` | text | Not null, lowercase ISO code |
+| `kilo_user_id` | text nullable | FK to `kilocode_users.id`, `onDelete: set null` |
+| `organization_id` | UUID nullable | FK to `organizations.id`, `onDelete: restrict` |
+| `stripe_customer_id` | text nullable | Indexed |
+| `stripe_checkout_session_id` | text nullable | Partial unique index |
+| `stripe_invoice_id` | text nullable | Partial unique index |
+| `stripe_payment_intent_id` | text nullable | Partial unique index |
+| `stripe_charge_id` | text nullable | Partial unique index |
+| `stripe_fee_price_id` | text nullable | Checkout-generated fee Price identity |
+| `stripe_checkout_fee_line_item_id` | text nullable | Partial unique index |
+| `stripe_invoice_fee_line_item_id` | text nullable | Partial unique index |
+| `eligibility_created_at` | timestamptz string | Not null; Checkout or invoice creation instant used for cutoff |
+| `eligible_subtotal_minor` | integer | Not null, non-negative |
+| `expected_fee_minor` | integer | Not null, non-negative; provisional for Checkout flows |
+| `charged_fee_minor` | integer | Not null, default 0, non-negative; from the settled fee line |
+| `gross_paid_minor` | integer | Not null, default 0, non-negative |
+| `settled_product_minor` | integer | Not null, default 0, non-negative |
+| `settled_at` | timestamptz string nullable | Set only after positive/zero successful settlement |
+| `refunded_product_minor` | integer | Not null, default 0, non-negative; monotonic |
+| `refunded_fee_minor` | integer | Not null, default 0, non-negative; monotonic |
+| `refunded_gross_minor` | integer | Not null, default 0, non-negative; monotonic |
+| `disputed_fee_minor` | integer | Not null, default 0, non-negative; not monotonic |
+| `exemption_id` | UUID nullable | FK to the exact exemption log row, `onDelete: restrict` |
+| `failure_code` | text nullable | Stable internal reason code, no secret or raw provider payload |
+| `metadata` | JSONB | Not null, default `{}`; only non-sensitive reconciliation facts |
+| `created_at` | timestamptz string | Not null, default now |
+| `updated_at` | timestamptz string | Not null, default now, update hook |
+
+Owner check:
+
+- Personal flows require `kilo_user_id` and forbid `organization_id`.
+- Organization flows require `organization_id`; `kilo_user_id` may record the initiating user.
+
+`outcome` is the single decision-state column. Both the earlier `application_state` design and the separate `eligibility` column were removed because they were derivable from `outcome`, expected amount, and attachment success. Outcome values:
+
+| Outcome | Meaning |
+|---|---|
+| `pending` | Decision made, provider attachment not yet confirmed |
+| `charged` | A fee line was accepted by Stripe |
+| `exempt` | Suppressed by an exact-organization exemption |
+| `pre_activation` | Billing object created before the activation instant |
+| `zero_rounded` | Eligible, but 5% rounded to zero cents |
+| `unsupported_currency` | Eligible event in a currency this release does not support |
+| `missed` | Positive fee should have been charged; fee processing failed open |
+
+Amount and state checks:
+
+- `refunded_fee_minor <= charged_fee_minor` and `refunded_product_minor <= settled_product_minor`. Both refund columns are monotonic.
+- `disputed_fee_minor <= charged_fee_minor`. It is **not** monotonic; a dispute resolved in Kilo's favor clears it.
+- `outcome = pending` requires `charged_fee_minor = 0` and no settlement.
+- `outcome = charged` requires a settled or attached fee line. `charged_fee_minor` may be zero only when `settled_product_minor` is also zero, which is the fully discounted purchase case.
+- `outcome = missed` requires `expected_fee_minor > 0`, `charged_fee_minor = 0`, and a non-empty `failure_code`.
+- `outcome = zero_rounded` requires `expected_fee_minor = 0`.
+- `outcome IN (exempt, pre_activation, zero_rounded, unsupported_currency)` requires `charged_fee_minor = 0`.
+- `outcome = exempt` requires `exemption_id`; every other outcome forbids it.
+- **Do not constrain `charged_fee_minor <= expected_fee_minor`, and do not require equality.** For Checkout flows `expected_fee_minor` is computed from list price and the collected fee is typically lower because a promotion code discounted the fee line proportionally. Equality holds only for invoice-attached fees. Enforce the relationship through the settlement-time effective-rate assertion instead of a database check.
+- Guarded update predicates must reject settlement of a `pending` assessment; it must first reach a terminal outcome. Admin monitoring reports stale pending rows. No cron later attaches their fee.
+
+Assessment keys:
+
+- Checkout: generate `checkout:<uuid>` before the Stripe call and put the UUID in Checkout and PaymentIntent/subscription metadata. It becomes the assessment's `assessment_key`.
+- Invoice-only: `invoice:<stripe_invoice_id>`.
+- The initial subscription invoice from Checkout must bind to the existing Checkout assessment via propagated assessment metadata, not create an `invoice:*` assessment.
+
+Do not store email, billing address, tax ID, card data, or webhook bodies in the assessment.
+
+### Migration checks
+
+After generation:
+
+1. Confirm the migration creates only the two intended tables, checks, FKs, and indexes.
+2. Confirm there is no destructive DDL.
+3. Run `pnpm drizzle:verify-bootstrap` if the branch migration changes bootstrap behavior.
+4. Run `packages/db/src/schema.test.ts` and package typecheck.
+
+## Pure calculation contracts
+
+Implement and unit-test these functions in `calculation.ts`.
+
+### Fee rounding
+
+```ts
+calculateServiceFeeMinor(eligibleSubtotalMinor: number): number
+```
+
+Requirements:
+
+- Input is a non-negative safe integer.
+- Return `floor((eligibleSubtotalMinor * 500 + 5_000) / 10_000)` using `bigint` intermediates, then convert back only after a safe-integer check.
+- This is round-half-up for a positive 5% amount.
+- Calculate once on the aggregate eligible subtotal, not once per line.
+- Return zero for a zero or sub-ten-cent subtotal where 5% rounds below one cent.
+
+Do not use binary floating-point multiplication by `0.05` for persisted amounts.
+
+### Net line amount
+
+```ts
+getNetPretaxLineAmountMinor(line: Stripe.InvoiceLineItem): number
+```
+
+Use the Stripe line's signed pretax amount after discounts only. On the pinned Stripe API version, `discount_amounts` are also represented as `pretax_credit_amounts` entries of type `discount`; subtract each economic adjustment exactly once:
+
+```text
+line.amount
+- sum(line.pretax_credit_amounts[] where type === 'discount' -> amount)
+```
+
+If a fixture/provider shape has `discount_amounts` but no matching discount pretax-credit entries, subtract the `discount_amounts` fallback. Never subtract both representations of the same discount.
+
+**The `type === 'discount'` filter is required, not an optimization.** `PretaxCreditAmount.type` is `'credit_balance_transaction' | 'discount'` (`node_modules/stripe/types/InvoiceLineItems.d.ts:168`). The fee tracks **recognized product value**, not cash received, so prepaid balance consumption must not shrink the fee base:
+
+- A **discount** reduces the price, so it reduces the fee base.
+- A **credit balance transaction** (Stripe Billing credit grant) is a payment method, not a price reduction. A customer redeeming $49 of prepaid credit against a $49 Kilo Pass still generates $49 of product revenue and owes a $2.45 fee.
+- Customer credit balance from credit notes or overpayment does not appear in this field at all; it reduces `amount_due` through `invoice.starting_balance`. It is recorded only as reduced cash in `gross_paid_minor`.
+
+This preserves the invariant that collected fee equals 5% of recognized product revenue, which is what makes the assessment table reconcilable and what the expected-versus-charged checks assume. `GOAL.md` names "eligible discounts and proration credits" as the two reducing adjustments; a credit grant is neither.
+
+Kilo does not use Stripe Billing credit grants today (no `creditGrants` or `credit_balance` usage in `apps/web/src`), so this is a forward-looking guard. Revisit the policy if credit grants are adopted, and add a fixture with a `credit_balance_transaction` entry so a future adoption cannot silently change the fee base.
+
+Clamp only the final event subtotal to zero. Preserve negative eligible lines while summing so proration credits offset positive eligible lines. Do not include tax fields. Assert safe integers and matching currency. Add fixtures for the actual pinned API version so a Stripe version change cannot silently double-subtract discounts.
+
+The implementation must retrieve all invoice lines through `stripe.invoices.listLineItems()` when `invoice.lines.has_more` is true. Never calculate from the first embedded page only.
+
+### Cumulative refund rounding
+
+```ts
+calculateCumulativeFeeRefundMinor({
+  originalProductMinor,
+  originalFeeMinor,
+  cumulativeProductRefundMinor,
+}): number
+```
+
+Requirements:
+
+- Return zero when no product principal has been refunded.
+- Return zero when `originalProductMinor` is zero. Guard the division explicitly; a fully discounted purchase settles at zero product and zero fee, so this input is reachable.
+- Return the complete original fee when cumulative principal reaches original principal.
+- Otherwise return round-half-up of `originalFeeMinor * cumulativeProductRefundMinor / originalProductMinor` using `bigint` intermediates.
+- The incremental fee refund is cumulative target minus `refunded_fee_minor` already recorded.
+- Never return a negative incremental refund or more than the remaining fee.
+
+## Stripe metadata contract
+
+Use namespaced string metadata. Keep each value under Stripe limits.
+
+### Fee line metadata
+
+Every positive fee line must contain:
+
+```ts
+{
+  type: 'kilo-service-fee',
+  serviceFeeVersion: '2026-11-01-v1',
+  serviceFeeAssessmentKey: assessmentKey,
+  serviceFeeRateBasisPoints: '500',
+}
+```
+
+### Commercial object metadata
+
+Add these facts to the object available for the flow:
+
+- `serviceFeeAssessmentKey`
+- `serviceFeeVersion`
+- `serviceFeeFlow`
+- `serviceFeePrincipalMinor` for top-ups
+- `serviceFeeOrganizationId` for organization flows
+
+Preserve existing metadata. Do not overwrite Kilo Pass, KiloClaw, seat, affiliate, or scheduled-change metadata.
+
+### Classifier rules
+
+Add shared helpers:
+
+- `isServiceFeeMetadata(metadata)`
+- `isServiceFeeInvoiceLine(line)`
+- `isServiceFeeCheckoutLine(line)` where needed
+- `isKnownKiloPassInvoiceLine(line)`
+- `isSeatInvoiceLine(line, subscription?)`
+- `isKiloClawInvoiceLine(line)`
+
+A line is a service fee only when the namespaced metadata marker and version are present, or when its line/Price identity is linked to an assessment during reconciliation. The description alone is insufficient.
+
+Checkout does not provide line-item metadata directly on the pinned API. Put the marker in inline `price_data.product_data.metadata`; after Session creation, list Checkout lines with `data.price.product` expanded, identify the marked line, and persist its line and Price IDs. Reconcile the generated invoice line by the persisted Price ID, then store its invoice-line ID. Invoice items created directly use invoice-item metadata.
+
+Update every "first non-seat item" assumption in `apps/web/src/lib/kilo-pass-org/stripe-adapter.ts`. Resolve the organization Kilo Pass item in this order:
+
+1. Persisted `provider_seat_add_on_item_id`.
+2. Known Kilo Pass price ID on a non-seat subscription item.
+3. Metadata-backed Kilo Pass item when unbound.
+
+A service-fee invoice item is not a subscription item, but invoice scanning must still explicitly exclude it. Keep seat and Kilo Pass subscription-item resolution independent of invoice line order.
+
+Update invoice classifiers so:
+
+- Kilo Pass remains recognized by known recurring price or subscription metadata.
+- KiloClaw remains recognized only by its known prices/metadata.
+- Seats remain recognized by seat product/known prices.
+- A fee-only line can never make an invoice look like one of those products.
+
+## Assessment API
+
+Implement these server-only contracts in `assessments.ts` and `settlement.ts`.
+
+### Prepare a decision
+
+```ts
+type PrepareAssessmentInput = {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  currency: string;
+  eligibilityCreatedAt: Date;
+  eligibleSubtotalMinor: number;
+  kiloUserId?: string;
+  organizationId?: string;
+  stripeCustomerId?: string;
+};
+```
+
+Decision order:
+
+1. Validate flow owner and currency. A non-USD eligible event terminates as `unsupported_currency`.
+2. Resolve the decision at `eligibilityCreatedAt`. If it precedes activation, the outcome is `pre_activation`. For organization flows, find the latest exemption row at or before that instant; the outcome is `exempt` only when that exact row grants exemption. Never use current exemption state to decide a delayed invoice webhook.
+3. Compute `expected_fee_minor` from the eligible subtotal in all cases, including exempt and pre-activation events. Leakage and audit reporting need it. The subtotal is always known at this point: top-ups and Kilo Pass Checkout use list price, invoices use actual draft lines.
+4. If the event is pre-activation, outcome is `pre_activation`.
+5. If the exact organization is exempt, outcome is `exempt`.
+6. If the expected fee is zero, outcome is `zero_rounded`.
+7. Otherwise persist outcome `pending` while attaching the provider line.
+8. After Stripe accepts the fee line, move to `charged`. For invoice-attached fees set `charged_fee_minor` to the attached amount, which equals `expected_fee_minor`. For Checkout-created fees leave `charged_fee_minor` at zero until settlement reads the settled fee line, because a promotion code may have reduced it.
+9. If attachment fails, atomically set outcome `missed`, charged fee zero, and a stable failure code.
+
+For Checkout, persist after Stripe returns a real session so an abandoned API call does not leave an assessment that looks customer-visible. For invoice handling, insert/upsert before attempting the fee line so failure can be recorded.
+
+### Upsert and conflict behavior
+
+- Use `assessment_key` as the primary application idempotency identity.
+- Enrich nullable Stripe IDs only when absent or identical.
+- If a retry presents a different owner, flow, currency, eligible subtotal, expected fee, or non-null conflicting Stripe ID, throw an assessment conflict error and report it. Do not silently overwrite financial facts.
+- A settled assessment is immutable except for additional Stripe links, monotonic cumulative refund fields, and dispute fields.
+- `pending` may become `charged`, a terminal omitted outcome, or `missed`.
+- `missed` never transitions to `charged`. The omission is not collected later.
+- `pre_activation`, `exempt`, `zero_rounded`, and `unsupported_currency` never transition to `charged`.
+
+### Fail-open wrapper
+
+Each eligible creation path calls one wrapper that returns either:
+
+```ts
+type FeeApplicationResult = {
+  assessmentId: string | null;
+  assessmentKey: string;
+  outcome: ServiceFeeOutcome;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  chargedFeeMinor: number;
+  checkoutLineItem?: Stripe.Checkout.SessionCreateParams.LineItem;
+};
+```
+
+or a `missed` result. It must catch fee-domain and exemption failures, persist a missed assessment where enough identity is available, send a best-effort Slack alert, and let the base payment path continue without a fee.
+
+Do not wrap the base Stripe call itself. A failure to create or pay the underlying purchase retains existing behavior.
+
+## Interactive Checkout integration
+
+### Top-ups
+
+Change these functions:
+
+- `getStripeTopUpCheckoutUrl()` in `apps/web/src/lib/stripe/index.ts`
+- `createAutoTopUpSetupCheckoutSession()` in the same file
+- `createOrgAutoTopUpSetupCheckoutSession()` in `apps/web/src/lib/organizations/organization-auto-top-up.ts`
+
+For all three:
+
+1. Resolve the principal in cents before creating Checkout. For the default top-up price, retrieve the Stripe Price once per request and require a fixed USD `unit_amount`; do not infer principal from the later gross charge.
+2. Generate an assessment key.
+3. Prepare the service-fee decision using the current creation attempt instant and exact owner.
+4. Build the existing principal line unchanged.
+5. When the computed fee is positive, append a one-time `price_data` line with product name `Service fee (5%)`, USD amount, fee metadata, and the tax input from `tax.ts`.
+6. Put the trusted principal and assessment key in PaymentIntent metadata. Put the same assessment key and flow in Checkout Session metadata. Preserve existing type metadata.
+7. Create the Checkout Session.
+8. Persist the session ID and Stripe `created` timestamp. Apply the activation-boundary replacement rule only inside the one-minute window.
+9. On assessment preparation or fee-line construction failure, create Checkout with only the principal line, persist `missed`, and notify Slack.
+
+Top-ups have no hosted promotion-code entry, so their Checkout fee equals the settled fee and the effective-rate assertion should always hold exactly.
+
+For an organization Checkout, resolve the exact-organization exemption before creating the Session. An exempt organization omits the fee line and persists the expected fee plus the exact exemption history link. Personal purchases have no exemption lookup.
+
+### Personal Kilo Pass Checkout
+
+Hosted promotion-code entry is retained. The fee is computed from list price before session creation and is allowed to be discounted along with the product, as specified under Discountable initial fee lines.
+
+Change `kiloPass.createCheckoutSession` in `apps/web/src/routers/kilo-pass-router.ts`:
+
+1. Resolve the Kilo Pass list price for the requested tier and cadence through `getStripePriceIdForKiloPass()` and retrieve its `unit_amount`.
+2. Generate an assessment key and compute the fee from the list `unit_amount`.
+3. Keep the recurring Kilo Pass price line and `allow_promotion_codes: true` unchanged (`apps/web/src/routers/kilo-pass-router.ts:2432`).
+4. When the computed fee is positive, append one one-time `price_data` fee line. It will be discountable; that is intended. Per the installed SDK, one-time prices in subscription mode appear on the initial invoice only, so this line does not recur.
+5. Put assessment metadata on the Checkout Session and on `subscription_data.metadata` so the initial invoice and all later renewals can bind to an assessment.
+6. Create the Session, then persist the assessment with the returned `created` timestamp, `eligible_subtotal_minor` from list price, and provisional `expected_fee_minor`.
+
+Do not persist outcome `charged` at creation time. The fee actually collected is unknown until settlement.
+
+After Checkout completes, bind the initial invoice to the same assessment from subscription metadata and read the settled fee line:
+
+- Set `charged_fee_minor` from the marked fee line on the settled invoice, not from the value sent to Stripe.
+- Set `settled_product_minor` from the net eligible Kilo Pass lines on the same invoice.
+- When `charged_fee_minor` deviates from 5% of `settled_product_minor` by more than one cent, record `service_fee_rate_deviation`, alert Admin Slack, and leave the assessment settled with the observed amounts. Do not issue a corrective charge or refund, and do not grant extra credits.
+- A zero settled fee with a zero settled product is outcome `charged` with both amounts zero, not `missed`.
+
+Renewals for these subscriptions are handled by `invoice.created` and receive an exact non-discountable fee.
+
+### Seats and KiloClaw
+
+Do not add fee preparation to:
+
+- `getStripeSeatsCheckoutUrl()`
+- KiloClaw Checkout or KiloClaw subscription changes
+- Store Kilo Pass purchase paths
+- Manual Kilo Pass for Organizations agreements
+
+Add regression tests proving these calls remain fee-free.
+
+## Invoice-created integration
+
+Add `invoice.created` to `processStripePaymentEventHook()` in `apps/web/src/lib/stripe/index.ts`. Handle it before settlement events.
+
+### Invoice retrieval
+
+The webhook object may contain only the first line page or unexpanded references. Retrieve the invoice with all fields needed for classification, then paginate all lines. Preserve the event's `created` only for event telemetry; use `invoice.created` for fee eligibility.
+
+### Ownership of invoice fee attachment
+
+Exactly one code path attaches a fee to any given invoice. Automatic top-up invoices are created and paid by Kilo, not by Stripe's automatic advancement:
+`apps/web/src/lib/autoTopUp.ts:267-289` calls `invoices.create({ auto_advance: false, ... })`, then `invoiceItems.create()`, then `invoices.pay()`. Those invoices still emit `invoice.created`, and the webhook can be delivered while the creating request is between its create and pay calls. Assessment-key uniqueness does not serialize this, because both paths would derive the same `invoice:<id>` key and race on insert.
+
+**The creating code owns the fee for Kilo-created invoices. `invoice.created` must skip them.** Skip the invoice when its metadata `type` is `auto-topup` or `org-auto-topup`. Treat this as a named exclusion with its own regression test, not as an incidental consequence of classification order.
+
+### Classification order
+
+Classify the invoice into one of:
+
+1. **Kilo-owned invoice, skip entirely**: invoice metadata `type` is `auto-topup` or `org-auto-topup`. The creating path in `autoTopUp.ts` already attached the fee. Do not create, upsert, or modify an assessment here.
+2. Existing Checkout assessment, identified by `serviceFeeAssessmentKey` in subscription or PaymentIntent/invoice metadata.
+3. Personal Kilo Pass by known price or Kilo Pass subscription metadata.
+4. Kilo Pass for Organizations by `kilo-pass-org` subscription metadata and a self-service agreement.
+5. Excluded seat-only, KiloClaw, manual organization agreement, store, or unknown.
+
+Case 1 must be evaluated first. Unknown invoices are ignored. A recognized eligible invoice with insufficient evidence fails open and records `missed`.
+
+### Eligible subtotal for invoices
+
+For Kilo Pass invoices:
+
+- Include lines whose price is a known Kilo Pass price and whose subscription context is Kilo Pass.
+- Include positive and negative Kilo Pass proration lines.
+- Exclude service-fee lines.
+- Exclude every seat line, including free-seat prices.
+- Exclude KiloClaw lines and unrelated invoice items.
+- Sum each line's net pretax amount through `getNetPretaxLineAmountMinor()` so discounts represented in both Stripe arrays are counted once.
+- Clamp the aggregate at zero, then calculate the fee once.
+
+Automatic top-up invoices never reach this path; their fee is computed by the creating code from `config.amount_cents`. At settlement the trusted principal is `invoice.metadata.serviceFeePrincipalMinor`, which must match the marked principal invoice item. Do not use `invoice.amount_paid`.
+
+### Recurring and ordinary draft invoices
+
+For draft invoices that are not already bound to a Checkout assessment:
+
+1. Create/upsert `invoice:<id>` assessment using `invoice.created`.
+2. Apply the exact organization's exemption history effective at `invoice.created`, not the exemption state at webhook delivery.
+3. If outcome is charged, call `stripe.invoiceItems.create()` with `invoice: invoice.id`, the positive fee amount, description `Service fee (5%)`, fee metadata, `discountable: false`, and the tax input from `tax.ts`.
+4. Store the returned invoice-item ID.
+5. Do not call `invoices.finalizeInvoice()` from the webhook. Let existing Stripe automatic advancement continue.
+6. On attachment failure, mark missed, alert Slack, and return success from the webhook.
+
+If the invoice is already finalized by the time the event is handled, record `missed` with `invoice_not_draft` and acknowledge the event. Do not add the fee to a later invoice.
+
+### Synchronous subscription updates
+
+Stripe documents that some subscription creations and updates finalize or attempt payment synchronously, without the normal draft delay. The repository has such paths:
+
+- `createOrganizationKiloPassCheckout()` with `proration_behavior: 'always_invoice'` (`apps/web/src/lib/kilo-pass-org/stripe-adapter.ts:133`)
+- `handleUpdateSeatCount()` when a shared seat/Kilo Pass subscription increases capacity. **This function is defined in `apps/web/src/lib/stripe/index.ts:1789`**, not in `organization-subscription-router.ts`; the router only imports it. Edit it at its definition.
+- Kilo Pass cadence/tier transitions that generate an immediate invoice
+
+Do not rely on `invoice.created` alone for these paths.
+
+For every eligible synchronous update:
+
+1. Create an invoice preview with a fixed `proration_date` where Stripe supports it.
+2. Compute the net eligible Kilo Pass subtotal from preview lines.
+3. Attach the fee to the resulting draft invoice with `invoiceItems.create({ discountable: false })`. Do not use `add_invoice_items`, which cannot express `discountable` in the installed SDK.
+4. Use the same `proration_date` in the actual update so preview and actual proration match.
+5. Put the assessment key on subscription/update metadata and the fee line.
+6. Reconcile the returned/latest invoice to the assessment.
+7. If fee preparation fails before the update, perform the base update without a fee, persist missed, and notify Slack.
+
+`SubscriptionUpdateParams.add_invoice_items` does not expose `discountable` in the installed SDK (verified: `node_modules/stripe/types/SubscriptionsResource.d.ts:1122-1150`). `invoiceItems.create()` does (`InvoiceItemsResource.d.ts:29`), and so does the `Stripe.InvoiceLineItem` read model (`InvoiceLineItems.d.ts:44`). Prefer `invoiceItems.create()` against the draft invoice so `discountable: false` is explicit. Do not rely on an undocumented default for financial correctness.
+
+When `handleUpdateSeatCount()` changes a shared subscription:
+
+- Seat increase proration remains excluded.
+- The matching increase in organization Kilo Pass capacity is eligible.
+- Preview and calculate only Kilo Pass lines.
+- A seat-only subscription update gets no assessment and no fee.
+
+**Do not add Stripe or database round trips inside the advisory lock.** `handleUpdateSeatCount()` runs entirely inside `db.transaction` holding `pg_advisory_xact_lock` on a pooled connection (`apps/web/src/lib/stripe/index.ts:1793-1798`), and already performs `subscriptions.retrieve`, `subscriptions.update`, `finalizeInvoice`, and `invoices.pay` under it. Adding an invoice preview plus assessment writes would extend that hold further. Compute the fee decision and persist the assessment **outside** the transaction, and pass the prepared values in. If a preview must occur inside, record the added hold time as an accepted cost in the PR description.
+
+### Existing subscriptions
+
+No subscription backfill should create a charge, proration, or pending invoice item before activation. Recurring fees are added per invoice, not by adding a persistent fee subscription item. This automatically covers existing subscriptions on post-activation invoices without modifying them in advance.
+
+Add a read-only pre-release audit script that lists active Stripe-managed Personal Kilo Pass and self-service organization Kilo Pass subscriptions and validates that each can be classified. The script must not update Stripe subscriptions.
+
+## Settlement integration
+
+Settlement links Stripe objects and records revenue. It does not decide whether to charge.
+
+### Checkout one-time payments
+
+In `handleSuccessfulChargeWithPayment()`:
+
+1. Resolve `serviceFeeAssessmentKey` and `serviceFeePrincipalMinor` from trusted PaymentIntent metadata.
+2. Load and validate the assessment against customer, owner, flow, charge, and PaymentIntent.
+3. Use `serviceFeePrincipalMinor` as `creditAmountInCents` for manual and setup top-ups.
+4. Never use `charge.amount` for credit principal after this feature.
+5. Pass principal, charged fee, and gross paid to the email scheduling path.
+6. Mark the assessment settled with gross charge, product principal, PaymentIntent, charge, and settlement time.
+7. Existing credit transaction idempotency remains keyed by its existing Stripe identity.
+
+For pre-activation legacy events without service-fee metadata, preserve current settlement behavior. Gate that fallback by the assessment cutoff identity, not `charge.created`: for Checkout payments retrieve the Checkout Session associated with the PaymentIntent and use `session.created`; for invoice-only payments use `invoice.created`. Metadata-free post-activation eligible top-ups are an operational error and must not silently grant gross credits. Record/alert the missing assessment and derive principal only from existing trusted `amountCents` metadata or a marked principal line.
+
+### Automatic top-ups
+
+In `invoice.paid` auto-top-up branches:
+
+1. Load assessment by invoice ID/key.
+2. Use assessment `eligible_subtotal_minor` or trusted invoice principal metadata as the credit amount.
+3. Do not pass `invoice.amount_paid` to `processTopUp()` or `processTopupForOrganization()`.
+4. Mark settlement before scheduling revenue-dependent side effects.
+5. Preserve attempt-lock completion/release behavior.
+6. Duplicate webhook processing must not duplicate assessment settlement, credits, or emails.
+
+### Personal Kilo Pass
+
+At the start of `handleKiloPassInvoicePaid()` after classification:
+
+1. Resolve and validate the assessment.
+2. Mark it settled in the same database transaction as the Kilo Pass invoice-paid mutations. Pass the existing Drizzle transaction into the assessment helper. Do not commit Kilo Pass credits without the corresponding settlement update when an assessment exists.
+3. Continue deriving base entitlement from tier config, never gross invoice amount.
+4. Replace all product/affiliate amounts currently using `invoice.amount_paid` with the assessment's settled product amount.
+5. PostHog purchase telemetry may add separate `service_fee_usd` and `gross_paid_usd` properties, but the existing `amount_paid_usd` product property must exclude the fee.
+6. The duplicate-card and welcome-promo positive-settlement checks use the gross Stripe settlement only to determine whether payment occurred. They must not treat the fee as product value.
+
+Change `enqueueKiloPassAffiliateSaleForInvoice()` to accept an explicit product amount in minor units. Do not recompute it from the invoice. Update `.specs/impact-affiliate-tracking.md` rule 17 so Kilo Pass reported amount explicitly excludes the service-fee line.
+
+### Kilo Pass for Organizations
+
+Before `handleOrganizationKiloPassInvoicePaid()` activates an agreement:
+
+1. Resolve and mark the service-fee assessment settled.
+2. Continue selecting the Kilo Pass line through the bound subscription item, not line order.
+3. Do not use the fee line for paid period, capacity, or supplement calculations.
+
+### Settlement meaning
+
+Set:
+
+- `settled_at` from Stripe's paid timestamp when available, otherwise webhook observation time.
+- `gross_paid_minor` from Stripe's authoritative paid amount.
+- `settled_product_minor` to the eligible product subtotal actually settled. Cap it at `eligible_subtotal_minor`; a discounted purchase settles **below** that value, which is expected and is not a mismatch.
+
+For a charged event, establish collection from the finalized invoice line and invoice settlement state. Do not require cash `amount_paid` to equal product plus fee: Stripe customer credit balances can settle invoice lines without the same cash amount. Record gross cash paid separately, require the marked fee line to be present for `charged_fee_minor`, and require `invoice.status = paid` (or equivalent successful Checkout settlement) before recognizing fee revenue. If the fee line or settlement evidence is missing, report a reconciliation failure and do not recognize the fee until evidence is resolved.
+
+For exempt and missed outcomes, set settlement and product amount so leakage reporting can count expected values only after payment succeeds.
+
+## Organization exemption Admin API and UI
+
+### Router
+
+Add admin-only procedures to `apps/web/src/routers/organizations/organization-admin-router.ts`:
+
+```ts
+getServiceFeeExemption({ organizationId });
+setServiceFeeExemption({ organizationId, isExempt, reason });
+```
+
+Contracts:
+
+- `reason`: trimmed string, minimum 3, maximum 500 characters.
+- `get` returns current state, last reason/actor/time, and history newest first.
+- Normalize database timestamps to UTC ISO before returning them.
+- `set` runs in one database transaction, takes an organization-scoped advisory transaction lock, and appends one exemption-log row. Current state is that newest row.
+- Repeating the same state with a new reason is allowed and creates history because the stated reason is an auditable admin decision.
+- Reject deleted or missing organizations.
+- Never write `organization_audit_logs`.
+
+### Hooks
+
+Add React Query/tRPC hooks in `apps/web/src/app/admin/api/organizations/hooks.ts`. On mutation success, invalidate only the exemption query and admin organization details that display it.
+
+### Component
+
+Add `OrganizationAdminServiceFeeExemption.tsx` and render it on `OrganizationAdminDashboard.tsx` near billing controls.
+
+UI requirements:
+
+- Use the existing Card, Button, Dialog, Label, Textarea, and status primitives.
+- Show `Exempt` or `Fees apply` as compact current state.
+- Require a reason in a confirmation dialog for both grant and revoke.
+- Action labels are `Grant exemption` and `Revoke exemption`.
+- Disable controls and preserve layout while saving.
+- Show mutation errors in the dialog and keep the reason for retry.
+- Show internal history with actor ID or `Deleted admin`, reason, resulting state, and UTC timestamp rendered in the admin's local timezone.
+- Do not expose this component or its data through customer organization routes.
+- Verify keyboard focus, Escape behavior, visible labels, 375px layout, and long reason wrapping.
+
+The design skill has no dedicated card/dialog recipe. Follow its Cloud overlay, interaction-quality, and voice guidance plus neighboring Organization Admin cards.
+
+### Authorization tests
+
+Test that:
+
+- Non-admin procedures cannot read or mutate exemption state.
+- A platform admin can grant and revoke with history.
+- Blank/oversized reasons fail.
+- Parent, child, and member personal purchases do not inherit exemption.
+- Customer organization APIs do not include exemption fields.
+
+## Refund reconciliation
+
+### Automatic observation
+
+Extend the `charge.refunded` webhook branch. Fee refund observation must run before branches that return early for affiliate classification.
+
+1. Resolve the assessment by charge ID, PaymentIntent, or expanded invoice.
+2. Retrieve all refunds for the charge if the event does not contain a complete list.
+3. Persist the observed cumulative gross refunded amount in a typed `refunded_gross_minor` column, not in `metadata`. Every other financial fact in this table is a typed column and this one is used for reconciliation arithmetic.
+4. For Stripe Credit Notes, map refunded eligible product and fee lines directly.
+5. A Charge Refund does not carry invoice-line allocation. Treat it as a full refund only when cumulative gross refunded equals the charge amount; then set `refunded_product_minor = settled_product_minor` and `refunded_fee_minor = charged_fee_minor`.
+6. For partial Charge Refunds, update principal and fee fields only when Kilo supplied and persisted the allocation at refund creation or an associated Credit Note provides it. Otherwise record `refund_allocation_unresolved`, alert operations, and do not create another Stripe refund automatically.
+7. Add `credit_note.created` and `credit_note.updated` webhook handling because the operator procedure in `kilo-org/on-call` uses credit notes for invoice-line attribution.
+8. Refund and credit-note webhooks are idempotent and cumulative; later events may resolve a previously partial state.
+
+### Disputes and chargebacks
+
+A chargeback removes money from the account, so it must reduce collected fee revenue exactly as a refund does. The webhook plumbing already exists: `charge.dispute.created`, `.updated`, `.closed`, and `.funds_withdrawn` are handled at `apps/web/src/lib/stripe/index.ts:998, 1068-1069, 1354`, and disputes persist to `stripe_dispute_cases` with `amount_minor_units` (`packages/db/src/schema.ts:757-816`). Only the fee-revenue consequence is new.
+
+Use the dedicated `disputed_fee_minor` column, **not** the refund columns. It is not monotonic: a dispute Kilo wins restores the fee, which would require decrementing `refunded_fee_minor` and breaking its monotonic invariant and tests. Product dispute state remains owned by Stripe and the existing `stripe_dispute_cases` flow.
+
+1. On `charge.dispute.funds_withdrawn`, resolve the assessment by charge or PaymentIntent. Set `disputed_fee_minor = charged_fee_minor`. A dispute reverses the whole charge, so the full fee is withdrawn even when an earlier partial refund overlaps it.
+2. On `charge.dispute.closed` with an outcome in Kilo's favor, reset `disputed_fee_minor` to zero.
+3. Reuse the refund arithmetic; do not add a second calculator.
+4. Dispute handling is idempotent and must not alter `outcome`. A disputed charge remains `charged`; the money movement is reported separately.
+
+### Kilo-initiated refunds
+
+In `apps/web/src/lib/kilo-pass/cancel-and-refund.ts`, the no-amount `refunds.create({ payment_intent })` call already requests a full remaining refund. Keep this behavior. After Stripe returns, update the assessment or rely on the webhook, but never double count.
+
+If a future Kilo partial-refund path is added, it must call the cumulative refund calculator and issue a gross refund of:
+
+```text
+incremental product refund + incremental service-fee refund
+```
+
+There is no new partial-refund Admin UI in this change.
+
+### Operator runbook
+
+Publish the service-fee operator procedure in `kilo-org/on-call`, which owns Kilo Engineering runbooks. It must cover:
+
+- How to identify the assessment from a Stripe invoice/charge.
+- How to calculate cumulative fee refund.
+- How to issue principal plus fee in Stripe.
+- Why the system does not auto-correct ambiguous operator refunds.
+- How to clear a reconciliation alert after verifying Stripe state.
+
+## Top-up emails
+
+Change `sendCreditsTopUpEmail()` and `creditsTopUp.html`.
+
+### Contract
+
+Replace ambiguous `amountCents` semantics with explicit fields:
+
+```ts
+{
+  principalCents: number;
+  serviceFeeCents: number;
+  grossPaidCents: number;
+  creditsCents: number;
+}
+```
+
+For positive fees, render rows:
+
+- `Credit principal`
+- `Service fee (5%)`
+- `Total paid`
+- `Credits`
+- `Date`
+
+For fee-free events, omit the fee row. Continue showing the current amount/credits summary without revealing exemption or failure reasons. Build the optional fee row in `email.ts` as escaped `RawHtml`; do not add conditional template syntax.
+
+Pass amounts from the settled assessment. Do not derive fee as gross minus credits in the email layer.
+
+Update `apps/web/src/emails/AGENTS.md` template variable documentation and `apps/web/src/lib/purchase-emails.test.ts`. Preserve existing email marker/idempotency behavior.
+
+No Kilo Pass payment email is added.
+
+## Revenue and leakage reporting
+
+### Query model
+
+`RevenueKpiData` keeps its existing paid/free/multiplier fields and adds a separate settled-fee series:
+
+- `collected_service_fee_dollars`
+- `missed_service_fee_dollars`
+- `exempted_service_fee_dollars`
+- `disputed_service_fee_dollars`
+- `service_fee_charged_count`
+- `service_fee_missed_count`
+- `service_fee_exempt_count`
+
+`credit_transactions` remains the sole source for the existing credit-revenue fields. Assessment-backed top-ups remain in those fields, and there is no join or anti-join between assessments and credit transactions.
+
+Calculate collected fee per assessment as `GREATEST(charged_fee_minor - refunded_fee_minor - disputed_fee_minor, 0)` before summing. Refund and dispute values can overlap when a dispute withdraws the whole charge after a partial refund; overlap must not make a row negative or reduce another row's collected fee.
+
+Only rows with `settled_at IS NOT NULL` contribute to collected, missed, exempt, or disputed fee values. For missed and exempt amounts use `expected_fee_minor`. The historical charged count includes every settled `outcome = charged` assessment even after refunds or disputes.
+
+Group service-fee metrics by the UTC calendar date of `settled_at` and push the requested date range into that aggregate. Legacy metrics retain `created_at::date` and its existing session-time-zone semantics. A full outer date merge allows a Kilo Pass assessment to create a fee-only day with zero-valued credit fields, but the assessment does not contribute Kilo Pass product revenue.
+
+The two series have different coverage and date semantics. Do not add fee figures to credit figures to claim authoritative gross revenue. Kilo Pass product revenue remains outside this query and requires separate product and accounting work.
+
+### Admin UI
+
+Update:
+
+- `apps/web/src/app/admin/components/RevenueStats.tsx`
+- `apps/web/src/app/admin/components/RevenueDailyChart.tsx`
+- CSV export through the extended response shape
+
+Keep the existing credit table and chart series under their existing meaning. Show collected, missed, exempted, and disputed fees plus charged, missed, and exempt assessment counts in a clearly separate Service fees section labelled by settled date in UTC. State that these figures do not make the dashboard a complete Stripe product-revenue report and that Kilo Pass product revenue is not added. Use tabular numbers and semantic tokens; keep leakage series subdued.
+
+Fix two existing empty-data hazards while here:
+
+- `RevenueStats.tsx:12-13` reads `data[data.length - 1]` with no length check.
+- `RevenueDailyChart.tsx:128-137` computes `Math.max(...chartData.map(...))`, which yields `-Infinity` on an empty array. Its CSV export is already guarded.
+
+### Affiliate reporting
+
+Service fees are never commissionable. Update every eligible Kilo Pass affiliate/referral conversion amount to use product amount from the assessment. Seat and KiloClaw affiliate behavior is unchanged because they do not carry the fee.
+
+`.specs/impact-affiliate-tracking.md:150-152` rule 17 currently reads:
+
+> Kilo Pass SALE amounts MUST use the positive settled invoice paid amount, not catalog price or credit issuance value.
+
+That directly contradicts excluding the fee, because the settled paid amount now includes it. Amend rule 17 explicitly rather than relying on the new behavior to imply the change. The amended rule must say that Kilo Pass SALE amounts use the settled **eligible product** amount calculated from eligible Stripe product lines, excluding any service-fee line. The same value may support fee settlement, but the assessment does not become an affiliate or product-revenue ledger.
+
+The implementation dependency is `enqueueKiloPassAffiliateSaleForInvoice()` (`apps/web/src/lib/kilo-pass/affiliate-sale.ts:137`), which currently reports `invoice.amount_paid / 100` at `:167` and gates on `invoice.amount_paid <= 0` at `:144`. Change it to accept an explicit product amount in minor units. Note that `getReportablePromoCode()` at `:123-135` reads `invoice.discounts` and is unaffected by fee changes.
+
+## Alerts and observability
+
+Create `sendMissedServiceFeeAlert()` in `alerts.ts` using `sendAdminSlackNotification()`.
+
+Each fail-open processing attempt sends one alert. Do not persist or check a dedupe marker before sending. A retry sends another alert by design.
+
+Slack payload includes only:
+
+- `assessment_key`
+- flow
+- non-sensitive owner ID
+- Stripe object IDs
+- eligible subtotal, expected fee, currency
+- stable failure code
+- processing attempt timestamp
+
+Do not include metadata dumps, webhook payloads, headers, customer email, billing address, card details, Stripe secret-bearing errors, or Slack URL.
+
+Wrap Slack in `try/catch`. Capture only `AdminSlackNotificationError.kind/status` and assessment identifiers. Slack failure must not change the assessment outcome or webhook response.
+
+Use structured Sentry tags for:
+
+- `service_fee_missed`
+- `service_fee_assessment_conflict`
+- `service_fee_settlement_mismatch`
+- `service_fee_refund_allocation_unresolved`
+- `service_fee_rate_deviation`
+- `service_fee_restricted_coupon_detected`
+- `service_fee_application_failed`
+
+Do not enable default PII or attach RPC input.
+
+## Webhook response semantics
+
+The existing Stripe route returns a non-2xx response when `processStripePaymentEventHook()` throws. Fee attachment has different behavior:
+
+- Expected fee-domain failures in `invoice.created` are caught, recorded as missed, alerted, and acknowledged with 200.
+- A Slack failure is caught and acknowledged with 200.
+- A database failure that prevents recording the assessment should still fail open for the payment. Capture and alert if possible, then acknowledge the invoice-created event. This is the one case where durable assessment may be absent; use the assessment key and Stripe metadata for later audit.
+- Existing non-fee product handler failures retain their current retry behavior.
+- Settlement assessment conflicts throw because continuing could grant the wrong credits or report the wrong revenue.
+
+This distinction is required: failure to charge the fee must not delay invoice finalization, while failure to identify trusted top-up principal must not grant gross credits.
+
+## Implementation sequence
+
+Follow these steps in order. Keep commits small enough to review independently.
+
+### Phase 0: pin the provider contract
+
+1. Add an explicit `apiVersion` to `apps/web/src/lib/stripe-client.ts`.
+2. Run the existing Stripe test suites and resolve any drift between the account default version and the installed typings.
+
+Exit condition: the wire API version is pinned and green, as a standalone reviewable commit before any fee logic exists.
+
+### Phase 1: arithmetic, types, and persistence
+
+1. Add closed service-fee types/constants.
+2. Implement pure fee, line-net, and cumulative-refund calculations with unit tests, including the `type === 'discount'` filter and the zero-product refund guard.
+3. Add the two database tables and generated migration, using `assessment_key` as the assessment primary key and `enumCheck()`.
+4. Add assessment repository functions and database integration tests.
+5. Add exact-organization exemption read/mutation functions and tests.
+6. Verify schema, migration bootstrap, package typecheck, and format.
+
+Exit condition: decisions and assessments can be persisted idempotently without any Stripe path charging a fee.
+
+### Phase 2: Admin exemption controls
+
+1. Add admin tRPC get/set procedures.
+2. Add hooks and Organization Admin card/dialog/history.
+3. Add authorization, mutation, history, and component tests.
+4. Deploy this phase before activation and enter historical exemptions.
+
+Exit condition: an admin can manage exact-organization exemptions with required reasons and internal-only history.
+
+### Phase 3: top-up Checkout and safe principal settlement
+
+1. Integrate personal/org manual and setup Checkout lines.
+2. Add assessment metadata and boundary handling.
+3. Change one-time settlement to trusted principal.
+4. Change automatic top-up invoice creation to add fee and principal metadata directly before `invoices.pay()`; because Kilo owns this invoice lifecycle and `auto_advance` is false, create the principal and fee items before payment without waiting for `invoice.created`. Land the `invoice.created` skip rule for `auto-topup` and `org-auto-topup` metadata in the same commit so the two paths can never both attach a fee.
+5. Change automatic top-up settlement to trusted principal.
+6. Add fee-aware top-up emails.
+7. Add flow tests and regression tests for legacy pre-activation events.
+
+Exit condition: every top-up flow charges correctly without over-crediting.
+
+### Phase 4: Kilo Pass Checkout, invoices, and mixed subscriptions
+
+1. **Run the coupon-allocation sandbox matrix first** (see Stripe sandbox contract tests). Percent-off, fixed-amount, product-restricted, and 100%-off coupons against a Kilo Pass Checkout with a fee line. If fixed-amount coupons do not allocate proportionally across product and fee lines, stop: the discountable-fee-line design does not hold and the spec needs revision before code.
+2. Add line classifiers and remove first-non-seat assumptions.
+3. Integrate Personal Kilo Pass initial Checkout with a list-price fee line.
+4. Add `invoice.created` handler for recurring invoices, including the Kilo-owned skip rule.
+5. Integrate synchronous Personal Kilo Pass changes that can invoice immediately.
+6. Integrate Kilo Pass for Organizations initial add-on and capacity changes.
+7. Handle mixed seat/Kilo Pass invoices and organization exemptions.
+8. Add settlement linkage, read `charged_fee_minor` from the settled fee line, add the effective-rate assertion, and update affiliate/PostHog product amounts.
+9. Add the restricted-coupon detection check and its alert.
+
+Exit condition: initial, renewal, upgrade, proration, and organization capacity events carry exactly one correct fee; seats never enter the base.
+
+### Phase 5: refunds, reporting, and operations
+
+1. Add cumulative refund calculation integration and charge-refunded observation.
+2. Update full-refund assessment reconciliation.
+3. Add dispute fee reversal on `charge.dispute.funds_withdrawn` and restoration on a won `charge.dispute.closed`.
+4. Add fee-only revenue/leakage/dispute query fields without joining assessments to credit transactions.
+5. Update Admin revenue components and CSV, including the empty-data fixes and explicit labelling of adjusted versus legacy series.
+6. Add missed-fee Slack alerts; publish the response procedure in `kilo-org/on-call`.
+7. Add the read-only subscription classification audit script.
+
+Exit condition: settled fees and leakage reconcile, refunds and disputes reduce revenue, and failures are operationally visible.
+
+### Phase 6: rollout hardening
+
+1. Run full targeted test matrix.
+2. Use Stripe test clocks or sandbox subscriptions to cross renewal and activation boundaries.
+3. Verify historical exemptions are entered.
+4. Validate the confirmed mirrored `tax_behavior` in Stripe test mode and retain the decision record in ADR 0004.
+5. Audit live Stripe coupons for `applies_to` restrictions covering fee-bearing products.
+6. Deploy before activation and monitor assessment outcomes.
+7. At activation, verify one example of each eligible flow and one excluded seat/KiloClaw flow.
+8. Keep rollback artifact/commit ready; do not add a runtime switch.
+
+## Test plan
+
+Use the lightest honest test for each contract. Pure arithmetic and classification belong in unit tests. Persistence, webhook idempotency, and reporting queries require the test PostgreSQL database. A small Stripe sandbox suite validates provider behavior that mocks cannot prove.
+
+### Pure unit tests
+
+Add `apps/web/src/lib/service-fees/calculation.test.ts` and classifier tests for:
+
+- `0 -> 0`
+- `$0.01 -> $0.00`
+- `$0.10 -> $0.01` at the half-cent boundary
+- `$19.00 -> $0.95`
+- `$49.00 -> $2.45`
+- `$199.00 -> $9.95`
+- `$100.00 -> $5.00`
+- Aggregate rounding differs from per-line rounding and aggregate wins
+- Positive and negative Kilo Pass prorations net before fee calculation
+- Discount amounts reduce eligible line value
+- A `pretax_credit_amounts` entry of type `discount` reduces the line; an entry of type `credit_balance_transaction` does **not**
+- A line carrying both `discount_amounts` and a matching discount pretax-credit entry is subtracted once, not twice
+- Seat-only discounts do not touch Kilo Pass value
+- Tax fields do not enter subtotal
+- Service-fee lines are excluded
+- Pagination combines all invoice lines
+- Cumulative partial refunds have no drift and end at the full original fee
+- Cumulative refund with zero original product returns zero rather than dividing by zero
+- Invalid/non-safe integers fail explicitly
+
+### Database integration tests
+
+Cover:
+
+- One assessment key under concurrent inserts
+- Stale pending rows are observable and cannot settle or trigger later fee collection
+- Retry enrichment of Stripe IDs
+- Conflicting owner/amount/Stripe ID rejection
+- Eligibility, outcome, and amount checks
+- Pending can finalize to charged, an omitted terminal outcome, or missed; terminal outcomes cannot be recollected
+- A charged assessment tolerates `charged_fee_minor < expected_fee_minor` without violating a constraint, which is the discounted-Checkout case
+- Settlement idempotency
+- Monotonic refund updates
+- Disputed fee set on funds withdrawn and cleared on a won dispute, without altering `outcome` and without breaking refund monotonicity
+- Exact organization exemption and no hierarchy inheritance
+- Grant/revoke history ordering and actor nulling semantics
+- Settled-only revenue recognition
+- Refunds and disputes reduce collected fee revenue
+- Unpaid missed/exempt rows do not enter dashboard totals
+- Assessment-backed credit transactions retain the existing paid/free/multiplier semantics; fee metrics remain separate
+
+### Checkout and webhook tests
+
+Extend existing suites:
+
+- `apps/web/src/lib/stripe/index.test.ts`
+- `apps/web/src/lib/autoTopUp.test.ts`
+- `apps/web/src/routers/organizations/organization-auto-top-up-router.test.ts`
+- `apps/web/src/routers/kilo-pass-router.test.ts`
+- `apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.test.ts`
+- `apps/web/src/lib/kilo-pass-org/stripe-adapter.test.ts`
+- `apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.test.ts`
+- `apps/web/src/lib/kiloclaw/stripe-invoice-classifier.server.test.ts`
+
+Workflows:
+
+1. Checkout created one second before activation has no fee.
+2. Checkout created exactly at activation has the fee.
+3. Invoice created one second before and exactly at activation follows the same boundary.
+4. Request straddling activation expires/replaces the incorrect Checkout once, and a request outside the one-minute window performs no expire/replace round trip.
+5. Personal/org manual and setup top-ups grant principal, not gross.
+6. Automatic top-up adds principal and fee before pay and grants principal.
+7. **`invoice.created` for an `auto-topup` or `org-auto-topup` invoice creates no assessment and attaches no second fee item**, including when the webhook is delivered between `invoices.create()` and `invoices.pay()`.
+8. Exempt org top-up has no line but has settled exempt assessment.
+9. Personal Kilo Pass initial Checkout has recurring product plus one-time fee computed from list price.
+10. Existing subscription renewal receives a draft invoice fee equal to expected.
+11. A discounted Kilo Pass Checkout settles with `charged_fee_minor` below `expected_fee_minor` and an effective rate within one cent of 5%, recorded as `charged` without a deviation alert.
+12. A 100% coupon settles as `charged` with zero product and zero fee, not `missed`.
+13. A simulated product-restricted coupon produces an effective rate above 5% and raises `service_fee_rate_deviation` without issuing a corrective charge or refund.
+14. Mixed seats plus Kilo Pass charges only Kilo Pass.
+15. Organization capacity increase charges only the Kilo Pass proration.
+16. Negative/zero net Kilo Pass proration omits the fee.
+17. Seat-only, KiloClaw, store, and manual agreement events create no assessment.
+18. Fee-line presence does not alter product classifiers or bound subscription item lookup.
+19. Invoice-created fee attachment failure returns normally, records missed, and calls Slack once per invocation.
+20. Slack failure returns normally.
+21. Tax-resolution or fee-application failure records missed with `fee_application_failed` and the payment still proceeds.
+22. Retry does not attach a second fee line; a missed retry alerts again but never attempts later collection.
+23. Paid webhooks link invoice, PaymentIntent, and charge to one assessment.
+24. Duplicate paid webhook does not duplicate credits, revenue, email, or affiliate event.
+25. Affiliate sale and product analytics exclude the fee.
+26. Full Kilo Pass refund observes the complete fee refund.
+27. Ambiguous partial operator refund records unresolved allocation without issuing another refund.
+28. Dispute funds withdrawn removes the fee from collected revenue; a won dispute restores it.
+
+### Email and UI tests
+
+- Fee-positive top-up email contains principal, exact fee label, total paid, and credits.
+- Fee-free email omits the fee row.
+- Existing email marker prevents duplicates.
+- Admin exemption card renders loading, current, error, grant, revoke, and history states.
+- Reason is required and retained after a failed mutation.
+- Revenue totals handle empty data and show separate product/fee/gross/leakage values.
+
+### Stripe sandbox contract tests
+
+Mocks cannot establish Stripe's discount, tax, draft-finalization, or line-allocation behavior. Before release, use Stripe sandbox/test clocks to prove:
+
+**Coupon allocation matrix — run this before writing Phase 4 code.** The discountable-fee-line design depends on Stripe allocating a coupon proportionally across the product and fee lines. That is standard behavior and consistent with per-line `discount_amounts`, but it is inferred from the API surface and is not provable from this repository. Prove each case against a real Kilo Pass Checkout carrying a fee line:
+
+| Coupon | Expected result |
+|---|---|
+| 20% off, unrestricted | Fee discounted proportionally; effective rate exactly 5% of net product |
+| Fixed $10 off, unrestricted | Allocated across both lines; effective rate exactly 5% of net product |
+| Percent off restricted via `applies_to.products` | Product discounted, fee not; effective rate above 5% and deviation alert fires |
+| 100% off | Both lines zero; assessment `charged` with zero amounts |
+
+If fixed-amount coupons do not allocate proportionally, this design does not hold and the spec must be revised before implementation. Record the observed allocation for each case in the PR.
+
+Also prove:
+
+- Checkout fee line label and metadata, including `price_data.product_data.metadata` survival onto the generated invoice line.
+- A draft renewal invoice accepts the non-discountable fee before finalization.
+- Synchronous subscription update/proration includes the fee on the same invoice and explicitly marks it non-discountable.
+- Mirroring the eligible Price's `tax_behavior` onto the fee line yields the same treatment on both lines.
+- Hosted invoice and PDF show one `Service fee (5%)` line.
+- Full refund returns product, fee, and tax according to Stripe's configured behavior.
+
+If any provider contract differs from this spec, do not compensate with post-settlement credit math. Revise the Stripe construction so the customer is charged correctly.
+
+## Verification commands
+
+Read root, web, and DB package manifests before running commands. Start/migrate test PostgreSQL if required:
+
+```bash
+docker compose -f dev/docker-compose.yml ps postgres
+pnpm test:db # only when the repository-managed DB is not ready
+```
+
+During implementation, run narrow checks:
+
+```bash
+pnpm --filter @kilocode/db typecheck
+pnpm --filter web typecheck
+pnpm --filter web test -- --runInBand <affected-test-files>
+pnpm drizzle:verify-bootstrap
+scripts/typecheck-all.sh --changes-only
+pnpm --filter web lint
+pnpm format
+pnpm format:check
+git diff --check
+```
+
+`packages/db` has no `test` script. `packages/db/src/schema.test.ts` runs under web's Jest config, which includes `<rootDir>/../../packages/db/src/**/*.test.ts` (`apps/web/jest.config.ts:38`), so run it through `pnpm --filter web test`.
+
+Report targeted checks as targeted, not as full validation.
+
+Before the final commit, run React Doctor because this work changes React admin/revenue components. Compare its score to the starting score and fix regressions caused by this change. React Doctor is an agent-environment capability, not a repository script; do not present it as a repository command in the PR.
+
+## File impact checklist
+
+Expected new files:
+
+- `apps/web/src/lib/service-fees/constants.ts`
+- `apps/web/src/lib/service-fees/types.ts`
+- `apps/web/src/lib/service-fees/calculation.ts`
+- `apps/web/src/lib/service-fees/stripe-lines.ts`
+- `apps/web/src/lib/service-fees/assessments.ts`
+- `apps/web/src/lib/service-fees/checkout.ts`
+- `apps/web/src/lib/service-fees/invoice-created.ts`
+- `apps/web/src/lib/service-fees/settlement.ts`
+- `apps/web/src/lib/service-fees/refunds.ts`
+- `apps/web/src/lib/service-fees/tax.ts`
+- `apps/web/src/lib/service-fees/alerts.ts`
+- `apps/web/src/lib/service-fees/organization-exemptions.ts`
+- `apps/web/src/lib/service-fees/disputes.ts`
+- Corresponding focused tests
+- `apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.tsx`
+- One generated migration and generated metadata
+- A read-only pre-release classification audit script
+- A read-only restricted-coupon audit check
+- A corresponding operator partial-refund runbook in `kilo-org/on-call`
+
+Expected modified files:
+
+- `apps/web/src/lib/stripe-client.ts` — pin `apiVersion` (Phase 0)
+- `packages/db/src/schema.ts`
+- `packages/db/src/schema-types.ts` if shared enum exports are used
+- `apps/web/src/lib/stripe/index.ts` — includes `handleUpdateSeatCount()` at line 1789
+- `apps/web/src/lib/autoTopUp.ts`
+- `apps/web/src/lib/organizations/organization-auto-top-up.ts`
+- `apps/web/src/lib/credits.ts`
+- `apps/web/src/lib/organizations/organization-billing.ts`
+- `apps/web/src/routers/kilo-pass-router.ts`
+- `apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.ts`
+- `apps/web/src/lib/kilo-pass/affiliate-sale.ts`
+- `apps/web/src/lib/kilo-pass/cancel-and-refund.ts`
+- `apps/web/src/lib/kilo-pass-org/stripe-adapter.ts`
+- `apps/web/src/routers/organizations/organization-subscription-router.ts`
+- `apps/web/src/routers/organizations/organization-admin-router.ts`
+- `apps/web/src/app/admin/api/organizations/hooks.ts`
+- `apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminDashboard.tsx`
+- `apps/web/src/lib/email.ts`
+- `apps/web/src/emails/creditsTopUp.html`
+- `apps/web/src/emails/AGENTS.md`
+- `apps/web/src/lib/revenueKpi.ts`
+- `apps/web/src/app/admin/components/RevenueStats.tsx`
+- `apps/web/src/app/admin/components/RevenueDailyChart.tsx`
+- `.specs/impact-affiliate-tracking.md`
+- Existing focused test files named above
+
+Do not change pre-purchase Kilo pricing UI, Kilo billing-history itemization, Kilo Pass payment email behavior, store billing, seat pricing, or KiloClaw pricing.
+
+## Completion checklist
+
+Implementation is complete only when all statements are true:
+
+- [ ] Every included flow has a positive Stripe fee line when eligible.
+- [ ] Every excluded flow remains fee-free.
+- [ ] The cutoff uses returned Checkout creation time or invoice creation time exactly.
+- [ ] Existing subscriptions receive post-activation invoice fees without pre-activation prorations.
+- [ ] Discounts and proration credits produce an exact aggregate net 5% fee, whether by proportional allocation on Checkout or by exact calculation on invoices.
+- [ ] The Stripe wire `apiVersion` is explicitly pinned.
+- [ ] Exactly one code path attaches a fee to any given invoice, proven for Kilo-created auto-top-up invoices.
+- [ ] Prepaid credit-balance consumption does not shrink the fee base.
+- [ ] Mixed seat/Kilo Pass invoices never include seats in the base.
+- [ ] Credits and entitlements use product principal, never gross paid amount.
+- [ ] Exact-organization exemptions are admin-only, reasoned, audited, and non-inherited.
+- [ ] One durable assessment links all related Stripe identities.
+- [ ] Fee failure proceeds without the fee, never retries collection, and alerts on every processing attempt.
+- [ ] Slack failure cannot block payment.
+- [ ] Tax-resolution or fee-application failure fails open in production without blocking payment.
+- [ ] Collected fee revenue is recognized only after settlement and reduced by refunds and disputes.
+- [ ] `charged_fee_minor` comes from the settled Stripe fee line, never from the value sent.
+- [ ] The effective-rate deviation alert fires for a restricted coupon and no corrective charge or refund is issued.
+- [ ] Missed and exempted values count only after underlying settlement.
+- [ ] Affiliate amounts exclude the fee and rule 17 is amended.
+- [ ] Full and cumulative partial refund calculations have no rounding drift.
+- [ ] Top-up emails itemize positive fees and omit fee-free rows.
+- [ ] Fee lines cannot be mistaken for seats, Kilo Pass, KiloClaw, or credit principal.
+- [x] Finance confirmation of the mirrored tax treatment is recorded in ADR 0004.
+- [ ] The coupon-allocation sandbox matrix is recorded before activation.
+- [ ] Historical exemptions are entered and verified before activation.
+- [ ] Live Stripe coupons are audited for `applies_to` restrictions on fee-bearing products.
+- [ ] Rollback requires deployment rollback; no runtime global switch exists.
diff --git a/.plans/service-fees/VALIDATION.md b/.plans/service-fees/VALIDATION.md
new file mode 100644
index 0000000000..c7a1e00211
--- /dev/null
+++ b/.plans/service-fees/VALIDATION.md
@@ -0,0 +1,1806 @@
+# Service fee end-to-end validation
+
+## Status and authority
+
+Browser-and-database validation contract for `.plans/service-fees/GOAL.md` and
+`.plans/service-fees/SPEC.md`.
+
+`GOAL.md` is authoritative for product behavior. `SPEC.md` is authoritative for
+technical design. This file is authoritative for **how we prove the behavior
+with a real local app, a real Stripe test-mode Checkout, the local PostgreSQL
+database, and a video of each journey**.
+
+This is not a substitute for the unit, database, webhook, and Stripe sandbox
+suites in `SPEC.md`. Those remain required. This file covers only what a person
+(or an agent driving a browser) can honestly observe by acting as a user or
+admin and then inspecting durable state.
+
+Implementation is present, but the browser/database/video evidence pack is not yet complete.
+Labels, routes, and table names below reflect the current app plus the spec. If implementation
+changes a user-visible label or a column name, update this file in the same change.
+
+## What "done" means here
+
+A journey passes only when all four are true:
+
+1. An operator followed the listed actor steps in a real browser session.
+2. The UI showed the expected customer or admin outcome.
+3. Local PostgreSQL contained the expected assessment, credit, exemption, or
+   revenue rows.
+4. Each required clip was produced by loading and following the
+   `video-evidence` skill, and that skill's output contract is attached to the
+   journey evidence pack.
+
+A screenshot, a unit test, or a mocked Stripe client is not evidence for this
+file. Stripe Dashboard or CLI output is supporting evidence, not a replacement
+for the browser session. An unedited raw WebM, a screen recording that includes
+login or debugging, or a file written inside the repository is not a passing
+video artifact.
+
+## What this file does not cover
+
+These are required by `SPEC.md` and must stay in automated tests. They are not
+honest user journeys:
+
+- Pure rounding and pretax-line arithmetic
+- Concurrent assessment-key inserts
+- Webhook retry / idempotency storms
+- `invoice.created` racing a Kilo-owned auto-top-up invoice
+- Slack alert payload shape and Slack-failure isolation
+- Restricted-coupon scheduled audit script
+- Store-managed App Store / Google Play Kilo Pass
+- Manual or sales-assisted organization Kilo Pass agreements
+
+Hybrid journeys (renewal, dispute, operator partial refund) still start from a
+browser-created purchase. The non-browser step is named and then the result is
+verified again in the browser and the database.
+
+---
+
+## 1. Environment
+
+### 1.1 Local stack
+
+Reuse the current worktree session. Do not start a second stack.
+
+```bash
+pnpm dev:status --json
+```
+
+Required:
+
+| Service | Why |
+|---|---|
+| Web app on the reported port | Every browser step |
+| Worktree Postgres from `.env.local` `POSTGRES_URL` | Assessment, credit, exemption, revenue checks |
+| Stripe webhook forwarder | Settlement, emails, subscription activation |
+| Applied service-fee migration | Assessment and exemption tables exist |
+
+Confirm webhook forwarding is live (`pnpm --filter web stripe` if `dev:start`
+skipped it). Without it, Checkout can succeed and the database will stay empty.
+`pnpm dev:status --json` may report the portless Stripe listener as `down` even
+while `stripe listen` is forwarding correctly. Check the actual listener
+process and its `--forward-to` URL. The URL must use this worktree's web port.
+
+Read the web port from `pnpm dev:status`. Never assume `3000`. Worktree
+PostgreSQL also uses a worktree-specific port; use `POSTGRES_URL` rather than a
+root-worktree or default `5432` value.
+
+```text
+BASE=http://localhost:<web-port>
+```
+
+### 1.2 Activation clock
+
+Fees apply only to billing objects created at or after
+`2026-11-01T00:00:00Z` (`SERVICE_FEE_ACTIVATION_UNIX_SECONDS`).
+
+| Wall clock | How to run this file |
+|---|---|
+| On or after 2026-11-01 UTC | Use the committed constant. Run V30 only if a pre-activation fixture still exists. |
+| Before 2026-11-01 UTC | Keep the committed constant for V30. For every "fee applies" journey, use a **local uncommitted** override of `SERVICE_FEE_ACTIVATION_UNIX_SECONDS` to `0`. Record the override in the run log. Revert it before any commit. |
+
+There is no production runtime switch. The override is a validation-only local
+edit. If a journey is run before activation without the override, a
+`pre_activation` outcome is a pass for V30 and a fail for every fee-applies
+journey.
+
+Treat the override as a guarded local fault:
+
+1. Record the committed value in `evidence/RUN.md` before changing it.
+2. Run V30 before applying the override when the wall clock permits.
+3. Keep the override uncommitted and mark it clearly in the source line.
+4. Before pausing, handing off, committing, or ending the run, restore the
+   committed value.
+5. Restart the web process after restoration. If restart cannot complete,
+   stop the process and record that it is stopped; do not leave a process
+   running with the override loaded.
+6. Confirm the source diff no longer contains the override.
+
+### 1.3 Stripe test mode
+
+Use the account already configured in `.env.local`.
+
+| Item | Value |
+|---|---|
+| Success card | `4242 4242 4242 4242` |
+| Expiry | Any future month |
+| CVC | Any 3 digits |
+| ZIP | Any 5 digits |
+| Decline card | `4000 0000 0000 0341` (negative payment only; not a fee journey) |
+
+Before V8, V9, and V32, create these Stripe test-mode promotion codes. They are
+operator fixtures, not product features:
+
+| Code | Coupon | Restriction |
+|---|---|---|
+| `VALIDATE20` | 20% off, unrestricted, redeemable on Checkout | None |
+| `VALIDATE100` | 100% off, unrestricted | None |
+| `VALIDATEKPONLY` | 20% off, `applies_to` = Personal Kilo Pass product only | Must not apply to the fee product |
+
+Never leave `VALIDATEKPONLY` on a live coupon that customers can discover.
+Delete it after V32.
+
+If Stripe Tax is enabled on the test account, Checkout totals include tax.
+Assert pretax line amounts and assessment columns, not the Checkout grand
+total.
+
+#### 1.3.1 Price tax-behavior audit
+
+Before any Kilo Pass journey, retrieve every configured Kilo Pass Price used by
+the run. Each Price must have an explicit Stripe `tax_behavior` of `inclusive`
+or `exclusive`. `unspecified` is a release blocker: the service-fee code must
+fail open because it cannot mirror an unknown product treatment.
+
+```bash
+stripe prices retrieve <price_...> \
+  | jq '{id,active,product,unit_amount,currency,recurring,tax_behavior}'
+```
+
+Audit all monthly and yearly tier Prices, not only the tier selected in V7.
+Record the IDs and results in `evidence/v0.md`. A successful local journey with
+a replacement Price does not clear the release blocker for configured
+production or shared test Prices.
+
+Do not mutate a shared Price merely to make validation pass. If a configured
+test Price is `unspecified`, create a disposable test-mode Price only after the
+intended explicit tax behavior is known. It must use the same product,
+currency, amount, and recurrence. Override only the ignored local environment,
+restart the web process, record the original and replacement IDs, and archive
+the disposable Price and remove the override after the Kilo Pass journeys.
+
+An unpaid Checkout that exercises the `unspecified` path is diagnostic
+evidence only. Expire it, verify no entitlement or payment was created, and
+record the expected `missed` assessment separately from accepted journey
+evidence.
+
+#### 1.3.2 Kilo Pass payment fingerprints
+
+Kilo Pass has an intentional duplicate-card anti-abuse path. A fresh user is
+not sufficient isolation: reusing the same Stripe test-card fingerprint across
+V7, V8, V9, or V32 can block the later user, cancel the subscription, and
+refund the charge before entitlement issuance.
+
+Assign a different Stripe test payment method to every Kilo Pass buyer. Use
+Stripe-documented test methods and verify the resulting
+`payment_method_details.card.fingerprint` differs from earlier Kilo Pass
+charges. Record only the non-secret test method label and fingerprint in
+`evidence/v0.md`; never record real payment data. If duplicate-card protection
+fires, preserve the refund/reconciliation evidence, mark the journey
+`BLOCKED`, and repeat with a fresh user and a genuinely different fingerprint.
+Do not disable anti-abuse logic to force a pass.
+
+### 1.4 Personas
+
+Create fresh fake users for each validation run. Do not reuse leftover Stripe
+customers from earlier experiments. V7, V8, V9, and V32 each require a separate
+user with no Kilo Pass and a separate payment fingerprint. Add those
+supplemental personas to the run log; do not overload `P-PERSONAL` after V7.
+
+| Persona | Fake email pattern | Role |
+|---|---|---|
+| `P-ADMIN` | `kilo-<user>-<timestamp>@admin.example.com` | Platform admin |
+| `P-OWNER` | `kilo-<user>-<timestamp>-owner@example.com` | Org owner / billing |
+| `P-MEMBER` | `kilo-<user>-<timestamp>-member@example.com` | Org member, no billing |
+| `P-CHILD` | `kilo-<user>-<timestamp>-child@example.com` | Owner of a child org |
+| `P-PERSONAL` | `kilo-<user>-<timestamp>-solo@example.com` | No org, personal top-ups |
+| `P-V7` | `kilo-<user>-<timestamp>-v7@example.com` | Fresh Personal Kilo Pass buyer |
+| `P-V8` | `kilo-<user>-<timestamp>-v8@example.com` | Fresh 20% promo buyer |
+| `P-V9` | `kilo-<user>-<timestamp>-v9@example.com` | Fresh 100% promo buyer |
+| `P-V32` | `kilo-<user>-<timestamp>-v32@example.com` | Fresh restricted-coupon buyer |
+
+Login:
+
+```text
+$BASE/users/sign_in?fakeUser=<email>&callbackPath=<path>
+```
+
+Wait until the account-creation spinner finishes. If `/customer-source-survey`
+appears, click `Skip`.
+
+Admin bootstrap requires the `@admin.example.com` suffix. A fake
+`someone@kilocode.ai` is not an admin.
+
+### 1.5 Organizations
+
+Create from `$BASE/organizations/new` while signed in as `P-OWNER`:
+
+| Org | Name | Purpose |
+|---|---|---|
+| `ORG-A` | `Fee Validate A <timestamp>` | Fee-paying org |
+| `ORG-B` | `Fee Validate B <timestamp>` | Exemption target |
+| `ORG-CHILD` | created from `ORG-B` admin hierarchy as a child | Proves exemptions do not inherit |
+
+After creating `ORG-A` and `ORG-B`, invite `P-MEMBER` to `ORG-B` as a member
+without billing permission. Create `ORG-CHILD` from
+`/admin/organizations/<ORG-B id>` hierarchy controls, then make `P-CHILD` its
+owner.
+
+Record each org UUID in the run log. All later SQL uses those IDs.
+
+### 1.6 Historical exemptions and release audits
+
+Browser journeys prove that exemption management and coupon detection work;
+they do not populate or clear production release gates.
+
+Before production activation:
+
+1. A platform admin must enter every approved historical organization
+   exemption and its reason through the Admin UI. Do not infer exemptions from
+   plan, seats, sponsorship, hierarchy, trial state, or a source-controlled
+   allowlist.
+2. A second operator must verify each current exemption against the approved
+   source and confirm that the newest exemption row is the expected state.
+   Record the organization IDs, exemption IDs, and verification time without
+   copying contract text or unrelated customer data into the evidence pack.
+3. Run the read-only Kilo Pass classification audit using the service-fee
+   runbook in `kilo-org/on-call` against the release environment.
+4. Run the read-only restricted-coupon audit from that runbook. A finding is a
+   release blocker. Delete or replace the unsafe coupon and rerun until clean.
+5. Never add mutating flags or turn the audit into an implicit cleanup tool.
+   Dashboard coupon changes require the audit to be rerun.
+
+Record command names, environment, timestamps, exit status, and redacted
+findings in `evidence/RUN.md`. Local `VALIDATEKPONLY` evidence does not satisfy
+or replace the live read-only audit.
+
+### 1.7 Database access
+
+```bash
+set -a && source .env.local && set +a
+psql "$POSTGRES_URL"
+```
+
+Do not use port `5432` unless `POSTGRES_URL` says so. A worktree database is
+empty until migrated.
+
+Identifying the current actor:
+
+```sql
+SELECT id, google_user_email, is_admin
+FROM kilocode_users
+WHERE google_user_email LIKE 'kilo-%@%'
+ORDER BY created_at DESC;
+```
+
+---
+
+## 2. Recording and evidence
+
+### 2.1 Video is produced only through the `video-evidence` skill
+
+Every required clip in this file **must** be captured, edited, and validated by
+loading and following the `video-evidence` skill. Do not improvise a recording
+procedure, and do not treat a raw `agent-browser record` WebM as the final
+artifact.
+
+Before any browser command for a clip:
+
+1. Load the `video-evidence` skill and follow it completely. Do not invent a
+   shorter recording procedure from this file.
+2. From that skill, load the installed agent-browser workflow so commands
+   match that version: `agent-browser skills get core --full`.
+3. Follow the skill for workspace, shot list, dry-run, capture, inspection,
+   edit, technical validation, privacy, and the output contract.
+
+The skill is the source of truth for how video is made. This file only names
+which clips exist, what each clip must prove, and what it does not prove.
+
+Non-negotiable mappings from that skill onto this validation run:
+
+- One source take per final clip. Split personas, permissions, and unrelated
+  scenarios. A journey that needs an admin action and a customer action is at
+  least two clips.
+- Dry-run the journey without recording. Record only after selectors, Stripe
+  redirect, settlement wait, and final UI are known to work.
+- Do not record service startup, seeding, fake login, account or org creation,
+  Stripe promo-code setup, SQL, logs, selector repair, or failed attempts.
+  Navigate to the ready starting page, then start recording.
+- Keep media outside the repository. Use the skill's temporary working
+  directory. Do not write raw or final video under `.plans/`, `apps/`, or any
+  other repo path unless a later human explicitly asks to commit a specific
+  file.
+- Final artifact is the skill's validated H.264 MP4 (`yuv420p`, even
+  dimensions, `+faststart`), not the raw WebM.
+- Stripe test card `4242…` is non-secret test data and may appear. Never record
+  real card numbers, auth cookies, `POSTGRES_URL`, webhook secrets, or live
+  customer data.
+- If a recorded take needed troubleshooting or material intervention, discard
+  it, restore state, and record a clean take. Editing must not turn an assisted
+  run into apparent success.
+- Start a clean take by giving `record start` the ready starting URL. Recorder
+  startup may reload the page or close a transient dialog. Refresh the
+  accessibility snapshot after recording starts, then open the dialog or
+  perform the first action on camera. A coordinate click is acceptable only
+  when it targets the same visible control and the reason is documented; all
+  subsequent interaction should use refreshed semantic references.
+- Use a 1440x1200 viewport for hosted Checkout unless the journey explicitly
+  tests another size. If Stripe opens Link, choose `Pay without Link`. Leave
+  the optional phone field empty and enter the billing address manually.
+- Stripe Checkout conditionally renders controls. Use `check`, not a plain
+  click, for the first AI-agent checkbox, refresh the snapshot, then check the
+  newly rendered acknowledgment. Refresh references after every conditional
+  state change rather than reusing stale refs.
+- If Stripe presents a local-currency conversion, select USD when available so
+  the source amounts are readable. Stripe API and PostgreSQL minor units remain
+  authoritative when the hosted page still shows converted amounts.
+- A browser-command timeout during a static redirect or processing wait does
+  not prove payment failure. Check the current URL, Stripe Session or invoice,
+  assessment state, and final Kilo UI before deciding the outcome.
+- Inspect video locally. Use `ffprobe`, full-decode checks, targeted frames,
+  scene/freeze analysis, and local OCR. Do not send full-resolution frames or
+  contact sheets to the model. If an image is ever necessary, use only a
+  targeted low-resolution frame, normally 480 px wide and below about
+  1000x800. Keep original-resolution evidence on disk.
+- Cuts may remove static setup, redirect, or processing waits, but must preserve
+  chronology. Do not reorder events or combine actions from different
+  commercial events.
+- If cross-origin capture or animation prevents one clip from showing the whole
+  result, use complementary clips only when they refer to the same durable
+  event. Record the shared Stripe or assessment identity and state exactly what
+  each clip proves. Do not imply that either clip alone proves the full journey.
+- A failed product outcome may be kept as diagnostic evidence. It still needs
+  the skill's output contract and must be labeled `FAIL` or `BLOCKED`, not
+  edited into a pass.
+
+Checkout-specific proof points the skill's shot list must include when the
+journey charges or omits a fee:
+
+1. Kilo starting page with the purchase control visible.
+2. Initiating click (`$100`, `Buy now`, `Enable automatic top up`, and so on).
+3. Stripe Checkout or hosted invoice with every relevant line readable,
+   including `Service fee (5%)` or its proven absence.
+4. Return to Kilo and the user-visible result (credits, subscription, toast,
+   exemption state).
+5. A reload or revisit when persistence is part of the claim.
+
+State in the shot list what the clip does **not** prove (other accounts,
+webhooks, SQL, emails not shown, other orgs).
+
+### 2.2 Evidence pack
+
+Written notes may live in `.plans/service-fees/evidence/<journey-id>.md`.
+Video files must not.
+
+```markdown
+# <journey-id>
+- Started: <ISO-8601>
+- Actor emails:
+- Org IDs:
+- Stripe Checkout / invoice / charge IDs:
+- Assessment key:
+- Result: PASS | FAIL | N/A | BLOCKED
+- Notes:
+
+## Video-evidence output record
+Paste one skill output contract per clip:
+
+path:
+label:
+claim:
+limits:
+source_duration:
+final_duration:
+size_bytes:
+format:
+validation:
+repository_state: not committed
+```
+
+Paste the SQL result and the Stripe line summary into that file. The video
+`path` is the absolute path returned by the skill, outside the repository.
+Keep diagnostic events, dry runs, and accepted commercial events distinct. A
+dry run that proves selectors or a failure path does not become PASS evidence
+for a later successful event, even if its Stripe amounts were correct.
+
+### 2.3 Shared browser session names
+
+| Session | Persona |
+|---|---|
+| `sf-admin` | `P-ADMIN` |
+| `sf-owner` | `P-OWNER` |
+| `sf-member` | `P-MEMBER` |
+| `sf-child` | `P-CHILD` |
+| `sf-personal` | `P-PERSONAL` |
+
+Reuse a named session across journeys for the same persona so login is not
+repeated on camera. Authenticate and land on the starting page **before**
+`record start`. Each clip still gets its own raw take and final MP4.
+
+---
+
+## 3. Shared verification helpers
+
+Run these after every payment journey. Values in angle brackets come from that
+journey.
+
+### 3.1 Wait for settlement
+
+Do not query immediately after Stripe says paid. The success page polls; the
+webhook may still be in flight.
+
+Poll up to 30 s:
+
+```sql
+SELECT assessment_key, flow, outcome,
+       currency,
+       eligible_subtotal_minor, expected_fee_minor, charged_fee_minor,
+       settled_product_minor, gross_paid_minor,
+       refunded_product_minor, refunded_fee_minor,
+       disputed_fee_minor,
+       stripe_checkout_session_id, stripe_invoice_id,
+       stripe_payment_intent_id, stripe_charge_id,
+       failure_code, settled_at, exemption_id
+FROM stripe_service_fee_assessments
+WHERE kilo_user_id = '<user-id>'
+   OR organization_id = '<org-id>'
+ORDER BY created_at DESC
+LIMIT 5;
+```
+
+A journey that expects a charged fee is not settled until `outcome = 'charged'`,
+`settled_at IS NOT NULL`, and `stripe_charge_id` or `stripe_invoice_id` is set.
+
+### 3.2 Credits must equal principal
+
+```sql
+SELECT id, amount_microdollars, stripe_payment_id, description, created_at
+FROM credit_transactions
+WHERE kilo_user_id = '<user-id>'
+   OR organization_id = '<org-id>'
+ORDER BY created_at DESC
+LIMIT 5;
+```
+
+`amount_microdollars` is principal only. A `$100.00` top-up is `100000000`,
+never `105000000`. Join to the assessment with:
+
+```sql
+SELECT a.assessment_key, a.settled_product_minor, a.charged_fee_minor,
+       a.gross_paid_minor, ct.amount_microdollars,
+       ct.stripe_payment_id
+FROM stripe_service_fee_assessments a
+JOIN credit_transactions ct
+  ON ct.stripe_payment_id IN (
+    a.stripe_charge_id,
+    a.stripe_invoice_id,
+    a.stripe_payment_intent_id
+  )
+WHERE a.assessment_key = '<assessment-key>';
+```
+
+Expect `ct.amount_microdollars = a.settled_product_minor * 10000` for top-ups
+(microdollars vs minor units). Kilo Pass entitlement is not this table; check
+the Kilo Pass UI and `kilo_pass` subscription state instead.
+
+### 3.3 Stripe line item
+
+From the assessment's Checkout or invoice ID:
+
+```bash
+stripe checkout sessions retrieve <cs_...>
+stripe invoices retrieve <in_...>
+```
+
+Pass only if there is exactly one line whose description is `Service fee (5%)`
+and whose amount equals `charged_fee_minor` after settlement. Exempt,
+pre-activation, zero-rounded, and missed events must have **zero** such lines.
+Stripe must not show a `$0.00` or "waived" fee line.
+
+### 3.4 Top-up email
+
+Local mail is written under `dev/logs/emails/`, not sent.
+
+```bash
+ls -lt dev/logs/emails | head
+```
+
+Open the newest HTML for that user. Fee-positive mails must contain rows
+labelled `Credits added`, `Service fee (5%)`, and `Total paid`.
+Fee-free mails omit the fee row and must not mention exemption, activation, or
+failure.
+
+### 3.5 One assessment per commercial event
+
+```sql
+SELECT assessment_key, count(*)
+FROM stripe_service_fee_assessments
+WHERE stripe_checkout_session_id = '<cs_...>'
+   OR stripe_invoice_id = '<in_...>'
+   OR stripe_payment_intent_id = '<pi_...>'
+   OR stripe_charge_id = '<ch_...>'
+GROUP BY assessment_key;
+```
+
+Expect one row and one key. Related Stripe IDs enrich that row.
+
+### 3.6 Amount cheat sheet
+
+| Principal | Expected fee | Customer pays before tax |
+|---:|---:|---:|
+| $10.00 | $0.50 | $10.50 |
+| $20.00 | $1.00 | $21.00 |
+| $49.00 | $2.45 | $51.45 |
+| $50.00 | $2.50 | $52.50 |
+| $100.00 | $5.00 | $105.00 |
+| $500.00 | $25.00 | $525.00 |
+| $1,000.00 | $50.00 | $1,050.00 |
+| $49.00 with 20% unrestricted coupon | $1.96 collected | $41.16 |
+| $49.00 with 100% coupon | $0.00 | $0.00 |
+| $0.01 | $0.00; omit line | $0.01 |
+
+`FIRST_TOPUP_BONUS_AMOUNT` is currently `0`. If that changes, credits may
+include a bonus; the fee base is still the paid principal, not the bonus.
+
+### 3.7 Post-journey cleanup checkpoint
+
+After every completed, failed, or abandoned payment attempt:
+
+1. Expire every open Checkout Session that will not be paid.
+2. Confirm whether Stripe created a payment, invoice, subscription, refund, or
+   dispute before retrying. Do not infer failure from the browser alone.
+3. Verify no assessment remains `pending`:
+
+```sql
+SELECT assessment_key, flow, outcome, stripe_checkout_session_id,
+       stripe_invoice_id, failure_code, created_at
+FROM stripe_service_fee_assessments
+WHERE outcome = 'pending'
+ORDER BY created_at;
+```
+
+4. Record abandoned and diagnostic assessments in the journey notes. Do not
+   delete them or count them as the accepted commercial event.
+5. Verify a failed Kilo Pass attempt did not leave an active subscription or
+   entitlement. If anti-abuse canceled and refunded it, verify both the Stripe
+   refund and the assessment's refund columns.
+6. Before recording a retry, create a clean commercial event. Do not splice a
+   diagnostic take into the accepted clip.
+
+Run database-backed Jest suites sequentially during this validation work.
+Concurrent suites can collide on shared test-database names and create false
+failures.
+
+---
+
+## 4. Journey index
+
+| ID | Journey | Invariant |
+|---|---|---|
+| V0 | Fixtures: users, orgs, Stripe promos | Later journeys have clean actors |
+| V1 | Personal $100 top-up | Fee $5; credits $100 |
+| V2 | Organization $100 top-up | Fee $5; org credits $100 |
+| V3 | Personal auto-top-up setup | Initial charge includes fee; credits = principal |
+| V4 | Subsequent personal auto-top-up | Off-session invoice has one fee; credits = principal |
+| V5 | Organization auto-top-up setup | Same as V3 for the org |
+| V6 | Subsequent organization auto-top-up | Same as V4 for the org |
+| V7 | Personal Kilo Pass $49 monthly | Recurring product + one-time fee; entitlement unchanged |
+| V8 | Personal Kilo Pass + 20% promo | Fee discounted proportionally to $1.96 |
+| V9 | Personal Kilo Pass + 100% promo | Charged, zero product, zero fee, not missed |
+| V10 | Org Kilo Pass on existing seats | Fee only on Kilo Pass, never seats |
+| V11 | Seat increase with org Kilo Pass | Fee only on Kilo Pass proration |
+| V12 | Seat-only purchase | No assessment, no fee line |
+| V13 | Direct KiloClaw subscribe | N/A — new provisioning deprecated |
+| V16 | Admin grants exemption | Reason required; history visible only to admin |
+| V17 | Exempt org top-up | No fee line; outcome `exempt`; credits = principal |
+| V18 | Member personal top-up while org exempt | Personal fee still charged |
+| V19 | Child org top-up while parent exempt | Child is charged |
+| V20 | Revoke exemption, then org top-up | New purchase is charged |
+| V21 | Non-admin exemption access | Hidden / unauthorized |
+| V22 | Customer org surfaces | No exemption fields or copy |
+| V23 | Fee-positive top-up email | Credits added, fee, total paid |
+| V24 | Fee-free top-up email | Fee row omitted |
+| V25 | Billing history vs Stripe invoice | Kilo shows gross; Stripe itemizes fee |
+| V26 | Admin revenue dashboard | Existing credit series plus separate settled service-fee metrics |
+| V27 | Admin cancel-and-refund Kilo Pass | Full product + fee refunded |
+| V28 | Operator partial refund in Stripe | Assessment follows runbook; no auto-correcting refund |
+| V29 | Chargeback then win | Dispute columns set then cleared; outcome stays `charged` |
+| V30 | Pre-activation purchase | No fee; outcome `pre_activation` |
+| V32 | Product-restricted coupon | Effective rate > 5%; deviation recorded; no corrective charge |
+| V33 | Fail-open (local fault) | Payment succeeds; outcome `missed`; Slack attempt |
+
+V13 (new KiloClaw provisioning), V14 (store Kilo Pass), and V15 (manual org
+agreement) cannot be performed in this web app. Record them as `N/A` with the
+reason. Do not fake them. Existing KiloClaw invoices stay fee-exempt in
+classifier tests; do not invent a Checkout.
+
+Acceptance-criteria map from `GOAL.md`:
+
+| Goal criterion | Journeys |
+|---|---|
+| 1 Activation boundary | V30, and any fee-applies journey after the override or after 2026-11-01 |
+| 2 Eligible flows | V1–V7, V10 |
+| 3 Excluded flows | V12; V13 N/A; V14/V15 N/A |
+| 4 Mixed seat + Kilo Pass | V10, V11 |
+| 5 Discounts reduce fee; seat discounts do not | V8, V10, V11 |
+| 7 Credits use principal | V1–V6, V17 |
+| 8 Existing subscriptions after activation | V4, V6, plus a renewal if a test clock is used |
+| 9 Exact-org exemption | V16–V22 |
+| 10 One assessment across Stripe objects | every payment journey, helper 3.5 |
+| 13 Dashboard settled-only | V26 |
+| 15 Refunds | V27, V28, V29 |
+| 16 Top-up emails | V23, V24 |
+| 17 Billing history unchanged | V25 |
+
+---
+
+## 5. Journeys
+
+Each journey uses the same shape: actor, preconditions, browser steps, UI
+expect, database expect, supporting Stripe/email expect, video-evidence clips,
+pass rule. Every **Video** block is a required `video-evidence` clip list.
+Produce those clips only through that skill.
+
+### V0 — Fixtures
+
+**Actor:** operator, then each persona.
+
+**Steps**
+
+1. Confirm section 1.
+2. Fake-login each persona. Skip the survey.
+3. As `P-OWNER`, create `ORG-A` and `ORG-B` at `/organizations/new`.
+4. Invite `P-MEMBER` to `ORG-B`.
+5. As `P-ADMIN`, open `/admin/organizations`, open `ORG-B`, create `ORG-CHILD`,
+   and assign `P-CHILD`.
+6. Create the three Stripe promotion codes in section 1.3.
+7. Audit all configured Kilo Pass Price tax behaviors as described in 1.3.1.
+8. Create fresh V7, V8, V9, and V32 users. Assign each a different documented
+   Stripe test payment method and record the observed fingerprints after use.
+
+**UI expect:** each persona lands on `/profile` or an organization page. Admin
+can open `/admin/organizations`.
+
+**Database expect:** all nine persona rows listed in section 1.4 and three
+organizations.
+
+**Video:** none. V0 is setup (login, account creation, org seeding, Stripe
+promo codes). The `video-evidence` skill forbids recording that work. Note the
+IDs and promo codes in `evidence/v0.md` only.
+
+---
+
+### V1 — Personal $100 credit top-up
+
+**Invariant:** customer pays $105 before tax, receives $100 credits, Stripe
+shows `Service fee (5%)` $5.00, one `personal_top_up` assessment settles
+charged.
+
+**Actor:** `P-PERSONAL`.
+
+**Steps**
+
+1. Sign in as `P-PERSONAL` with `callbackPath=/credits` **before recording**.
+2. Start the `video-evidence` take on `/credits` with Buy Credits visible.
+3. Click `$100`.
+4. On Stripe Checkout, hold until the credit line and `Service fee (5%)`
+   `$5.00` are readable, then pay with `4242…`.
+5. Wait through `Processing Payment` on `/payments/topup/success`.
+6. Land on `/credits?transaction_id=<id>` and hold the success card.
+
+**UI expect**
+
+- Checkout shows principal $100.00 and `Service fee (5%)` $5.00.
+- Kilo pre-purchase buttons still show `$100`, not `$105`.
+- Success card: `$100.00 in credits added`.
+- Current balance increases by $100.00, not $105.00.
+- `/invoices` shows a paid row whose displayed total is the gross (at least
+  $105.00 before any tax). The row is not itemized.
+
+**Database expect**
+
+| Column | Value |
+|---|---|
+| `flow` | `personal_top_up` |
+| `outcome` | `charged` |
+| `eligible_subtotal_minor` | `10000` |
+| `expected_fee_minor` | `500` |
+| `charged_fee_minor` | `500` |
+| `settled_product_minor` | `10000` |
+| `gross_paid_minor` | `10500` plus tax if present |
+| `organization_id` | `NULL` |
+| `kilo_user_id` | `P-PERSONAL` |
+| `settled_at` | non-null |
+
+Matching `credit_transactions.amount_microdollars = 100000000`.
+
+**Stripe expect:** one fee line, metadata `type=kilo-service-fee`.
+
+**Email:** V23 may reuse this mail.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V1 personal $100 top-up`
+- claim: Checkout shows `$100.00` plus `Service fee (5%)` `$5.00`, and Kilo
+  then shows `$100.00 in credits added`.
+- limits: Does not prove other amounts, org top-ups, emails, or revenue KPI.
+
+**Pass:** UI credits $100 and DB charged $5. Fail if credits are $105 or Checkout
+has no fee line.
+
+---
+
+### V2 — Organization $100 credit top-up
+
+**Invariant:** same economics as V1, owned by `ORG-A`.
+
+**Actor:** `P-OWNER`.
+
+**Steps**
+
+1. Sign in with `callbackPath=/organizations/<ORG-A>`.
+2. Click `Buy More Credits` (or open `/organizations/<ORG-A>/payment-details`
+   and use the $100 preset).
+3. Complete Stripe Checkout. Confirm the fee line before paying.
+4. Return to the organization. Balance / toast should show $100, not $105.
+
+**UI expect:** organization balance +$100. Payment history gross includes the
+fee. `View` opens the Stripe invoice with the fee line.
+
+**Database expect:** `flow = organization_top_up`, `organization_id = ORG-A`,
+`kilo_user_id` may be `P-OWNER`, amounts as V1.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V2 organization $100 top-up`
+- claim: Org Checkout shows the $5.00 fee, and the organization balance rises
+  by $100.00.
+- limits: Does not prove personal top-ups, exemption, or auto-top-up.
+
+---
+
+### V3 — Personal auto-top-up setup
+
+**Invariant:** enabling auto-top-up performs an immediate verification charge
+of the selected principal plus 5%. Credits equal the principal.
+
+**Actor:** `P-PERSONAL` after V1 (already has a Stripe customer).
+
+**Steps**
+
+1. Open `/profile` or `/credits`.
+2. Click `Configure automatic top-up`.
+3. Leave the default amount `$50` unless the UI forces another listed amount.
+4. Click `Enable automatic top up`. If redirected to Stripe, complete Checkout
+   and confirm the fee line.
+5. Return to `/profile?auto_topup_setup=success` (or equivalent). Reload until
+   the toggle shows auto-top-up on.
+
+**UI expect:** auto-top-up enabled. Balance increased by the principal ($50),
+not $52.50. Kilo settings still show `$50`, not `$52.50`.
+
+**Database expect**
+
+| Column | Value |
+|---|---|
+| `flow` | `personal_auto_top_up_setup` |
+| `outcome` | `charged` |
+| `eligible_subtotal_minor` | `5000` |
+| `expected_fee_minor` / `charged_fee_minor` | `250` |
+| `settled_product_minor` | `5000` |
+
+`auto_top_up_configs` for the user is enabled with `amount_cents = 5000`.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V3 personal auto-top-up setup`
+- claim: Enabling auto-top-up charges principal plus 5%, and the balance rises
+  by the principal only.
+- limits: Does not prove a later off-session auto-top-up.
+
+---
+
+### V4 — Subsequent personal auto-top-up
+
+**Invariant:** the off-session invoice is Kilo-owned, carries exactly one fee,
+and grants principal only. `invoice.created` must not attach a second fee.
+
+**Actor:** `P-ADMIN`, then `P-PERSONAL`.
+
+**Preconditions:** V3 passed. Personal balance is above $5.
+
+**Steps**
+
+1. As `P-ADMIN`, open `/admin/users`, find `P-PERSONAL`, use
+   `Grant / Decrement Credits` to reduce purchased balance below $5.00. Use a
+   reason `service-fee validation drain`.
+2. As `P-PERSONAL`, open `/credits`. Loading balance triggers
+   `maybePerformAutoTopUp`.
+3. Wait and reload until purchased credits increase by the configured
+   principal.
+
+**UI expect:** balance rises by $50 (or the configured amount), not $52.50.
+No second Checkout. No error toast.
+
+**Database expect:** a new row, `flow = personal_auto_top_up`, `outcome =
+charged`, `stripe_invoice_id` set, `stripe_checkout_session_id` null, amounts
+matching the configured principal. Exactly one assessment for that invoice.
+`charged_fee_minor` equals `expected_fee_minor`.
+
+**Stripe expect:** invoice has principal item + one `Service fee (5%)` item.
+Invoice metadata `type = auto-topup`.
+
+**Video** (`video-evidence`, two clips; split personas)
+
+1. label: `V4 admin drain below auto-top-up threshold`
+   claim: Admin decrements the user's purchased credits below $5.00.
+   limits: Does not prove the subsequent charge.
+2. label: `V4 personal subsequent auto-top-up`
+   claim: Reloading `/credits` credits the configured principal, not principal
+   plus fee, with no second Checkout.
+   limits: Does not prove invoice-line ownership; confirm that in Stripe/SQL.
+
+**Pass:** one fee, principal credits. Fail if two fee items exist or credits
+include the fee.
+
+---
+
+### V5 — Organization auto-top-up setup
+
+Same shape as V3 on `/organizations/<ORG-A>/payment-details`.
+
+Default principal is `$500` (`50000` cents) → fee `$25.00`.
+
+`flow = organization_auto_top_up_setup`.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V5 organization auto-top-up setup`
+- claim: Enabling org auto-top-up charges principal plus 5%, and org balance
+  rises by the principal only.
+- limits: Does not prove a later off-session org auto-top-up.
+
+---
+
+### V6 — Subsequent organization auto-top-up
+
+Same shape as V4. Admin nullifies `ORG-A` credits from
+`/admin/organizations/<ORG-A>` (`Confirm Nullification`). As the owner, open
+`/organizations/<ORG-A>/app-builder`. Its organization eligibility check reads
+the member's organization balance and schedules the off-session auto-top-up.
+A plain reload of the organization details or payment-details page does not
+exercise that balance boundary and is not a valid trigger.
+
+After the invoice settles, reload `/organizations/<ORG-A>` or payment-details
+to confirm the new balance.
+
+`flow = organization_auto_top_up`. Invoice metadata `type = org-auto-topup`.
+Exactly one fee item.
+
+**Video** (`video-evidence`, two clips; split personas)
+
+1. label: `V6 admin nullify org credits`
+   claim: Admin nullifies `ORG-A` credits.
+   limits: Does not prove the subsequent charge.
+2. label: `V6 organization subsequent auto-top-up`
+   claim: Opening organization App Builder triggers the configured off-session
+   top-up, and the organization page then shows the configured principal.
+   limits: Does not prove invoice-line ownership; confirm that in Stripe/SQL.
+
+---
+
+### V7 — Personal Kilo Pass, $49 monthly
+
+**Invariant:** Checkout has a recurring Kilo Pass price plus a one-time
+`Service fee (5%)` $2.45. Entitlement follows the tier, not $51.45.
+
+**Actor:** a fresh personal user, or `P-PERSONAL` if they have no Kilo Pass.
+
+**Preconditions:** the selected recurring Kilo Pass Price has explicit Stripe
+`tax_behavior`. The actor's planned payment fingerprint has not been used by
+another Kilo Pass validation buyer.
+
+**Steps**
+
+1. Open `/subscriptions/kilo-pass` or `/profile`.
+2. Select the $49 monthly tier. Click `Buy now`.
+3. On Stripe Checkout confirm: Kilo Pass $49.00 recurring, `Service fee (5%)`
+   $2.45 one-time. Do not enter a promotion code.
+4. Pay. Wait on `/payments/kilo-pass/awarding`.
+5. Open `/subscriptions/kilo-pass` and confirm the active card.
+
+**UI expect:** Kilo UI still advertises $49. Active subscription is the $49
+tier. Credit grant / threshold matches the $49 tier, not $51.45.
+
+**Database expect**
+
+| Column | Value |
+|---|---|
+| `flow` | `personal_kilo_pass` |
+| `outcome` | `charged` |
+| `eligible_subtotal_minor` | `4900` |
+| `expected_fee_minor` | `245` |
+| `charged_fee_minor` | `245` |
+| `settled_product_minor` | `4900` |
+
+One assessment. Checkout session, subscription invoice, PaymentIntent, and
+charge all point at it.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V7 personal Kilo Pass $49`
+- claim: Checkout shows recurring $49.00 plus one-time `Service fee (5%)`
+  $2.45, and Kilo activates the $49 tier.
+- limits: Does not prove renewals, discounts, or org Kilo Pass.
+
+---
+
+### V8 — Personal Kilo Pass with unrestricted 20% promo
+
+**Invariant:** hosted promotion-code entry remains. Product and fee both drop
+20%. Collected fee is $1.96. Outcome stays `charged`. No deviation alert.
+
+**Actor:** a user with no Kilo Pass. Do not reuse V7's user or payment
+fingerprint.
+
+**Preconditions:** verify the planned test payment method has a fingerprint
+different from V7 and any prior Kilo Pass purchase. If duplicate-card
+protection fires, the discount allocation may still be valid supporting
+evidence, but V8 is `BLOCKED` until a clean attempt retains the active `$49`
+tier entitlement.
+
+**Steps**
+
+1. Repeat V7 through Stripe Checkout.
+2. Enter `VALIDATE20`. Apply.
+3. Confirm Kilo Pass $39.20, fee $1.96, total $41.16 before tax.
+4. Pay and wait for the active subscription.
+
+**UI expect:** Checkout shows the discounted fee. Kilo still grants the $49
+tier entitlement, not a discounted entitlement.
+
+**Database expect:** `expected_fee_minor = 245` (list). `charged_fee_minor =
+196`. `settled_product_minor = 3920`. `outcome = charged`. No
+`service_fee_rate_deviation` in `metadata` / `failure_code`.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V8 personal Kilo Pass 20% promo`
+- claim: Applying `VALIDATE20` shows Kilo Pass $39.20 and fee $1.96 before
+  pay, then the $49 tier activates.
+- limits: Does not prove restricted coupons or 100% off.
+
+**Fail if:** fee stays $2.45 after the code, or entitlement is reduced, or the
+assessment is `missed`.
+
+---
+
+### V9 — Personal Kilo Pass with 100% promo
+
+**Actor:** a fresh user with no Kilo Pass. Do not reuse a V7/V8 user or payment
+fingerprint. If Stripe does not collect a payment method for the zero-dollar
+subscription, record that provider behavior rather than trying to manufacture
+a fingerprint.
+
+**Steps:** same as V8 with `VALIDATE100`. Both lines become $0.00.
+
+**Database expect:** `outcome = charged`, `charged_fee_minor = 0`,
+`settled_product_minor = 0`. This is not `missed` and not `zero_rounded`.
+
+**UI expect:** subscription still activates if a 100% coupon is a valid
+purchase in Stripe test mode. If Stripe refuses a $0 subscription, record the
+provider behavior in `evidence/v9.md` and stop; do not invent a workaround.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V9 personal Kilo Pass 100% promo`
+- claim: Applying `VALIDATE100` zeroes product and fee lines, and the
+  assessment is not presented as a failed payment.
+- limits: Does not prove Stripe will always accept a $0 subscription.
+
+---
+
+### V10 — Organization Kilo Pass on existing seats
+
+**Invariant:** mixed invoice. Fee base is Kilo Pass only.
+
+**Preconditions:** `ORG-A` has a paid Teams/Enterprise seat subscription from
+V12, or buy seats first without asserting V12 if V12 is run later. Prefer
+running V12 immediately before this journey on `ORG-A` if it has no seats.
+
+**Actor:** `P-OWNER`.
+
+**Steps**
+
+1. Open `/organizations/<ORG-A>/subscriptions`.
+2. Click `Add Kilo Pass`.
+3. On `/organizations/<ORG-A>/subscriptions/kilo-pass/setup` choose the lowest
+   tier, keep current paid seats, click `Purchase Kilo Pass`.
+4. Complete Stripe / `handleNextAction` if shown.
+5. Land on `/organizations/<ORG-A>/subscriptions/kilo-pass`.
+6. Open the Stripe invoice from org billing history `View`.
+
+**UI expect:** Kilo Pass is active. Invoice total is seats (if present on the
+same invoice) + Kilo Pass + 5% of Kilo Pass only. Hosted invoice contains
+exactly one `Service fee (5%)` line. That line equals 5% of the Kilo Pass
+amount, not 5% of seats.
+
+**Database expect:** `flow = organization_kilo_pass`, `charged_fee_minor =
+round_half_up(kilo_pass_subtotal * 5%)`, `settled_product_minor` equals the
+Kilo Pass net, not seats.
+
+**Video** (`video-evidence`, two clips if the hosted invoice opens a new
+context)
+
+1. label: `V10 org Kilo Pass purchase`
+   claim: Purchasing org Kilo Pass succeeds and the product is active.
+   limits: Does not by itself prove the fee base excluded seats.
+2. label: `V10 org Kilo Pass hosted invoice`
+   claim: The hosted invoice has exactly one `Service fee (5%)` line equal to
+   5% of Kilo Pass, not of seats.
+   limits: Does not prove later capacity changes.
+
+---
+
+### V11 — Seat increase while organization Kilo Pass is attached
+
+**Invariant:** increasing seats prorates both products. Fee applies only to
+the Kilo Pass proration.
+
+**Actor:** `P-OWNER` on `ORG-A` after V10.
+
+**Steps**
+
+1. Open `/organizations/<ORG-A>/subscriptions/seats`.
+2. Increase paid seats by 1. Confirm. Complete SCA if asked.
+3. Open the new invoice.
+
+**UI expect:** success toast `Seats updated successfully!`. Hosted invoice fee
+equals 5% of the Kilo Pass proration line(s), not the seat proration.
+
+**Database expect:** new `organization_kilo_pass` assessment.
+`settled_product_minor` matches Kilo Pass proration only. Seat-only negative
+control: if the Kilo Pass proration nets to less than $0.10, outcome may be
+`zero_rounded` and there is no fee line.
+
+**Video** (`video-evidence`, one or two clips if the invoice is a separate
+page)
+
+- label: `V11 org seat increase with Kilo Pass`
+- claim: Increasing seats succeeds, and the new invoice fee equals 5% of the
+  Kilo Pass proration only.
+- limits: Does not prove a seat-only subscription.
+
+---
+
+### V12 — Seat-only purchase (excluded)
+
+**Actor:** `P-OWNER` on an org with no Kilo Pass. Use `ORG-B` if `ORG-A` already
+has Kilo Pass, or run this before V10 on `ORG-A`.
+
+**Steps**
+
+1. Open `/organizations/<org>/subscriptions`.
+2. Choose Teams, monthly, 1 seat. Click `Purchase Teams Plan`.
+3. Complete Stripe Checkout.
+4. Confirm seats are active.
+
+**UI expect:** Checkout has seat lines only. No `Service fee (5%)`.
+
+**Database expect:** no `stripe_service_fee_assessments` row for the Checkout
+session, invoice, PaymentIntent, or charge.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V12 seat-only purchase`
+- claim: Teams seat Checkout has no `Service fee (5%)` line and seats become
+  active.
+- limits: Does not prove mixed seat + Kilo Pass invoices.
+
+---
+
+### V13 — Direct KiloClaw subscribe (excluded) — N/A
+
+New KiloClaw instance provisioning is deprecated. `/claw` and
+`/subscriptions#kiloclaw` tell a fresh user that new instances are unavailable
+and that a current subscription is required. There is no PlanSelectionDialog or
+Stripe Checkout to inspect.
+
+Record `N/A`. Do not create a leftover instance or point the local stack at a
+KiloClaw API to force a Checkout. Classifier tests remain the proof that a
+KiloClaw invoice line is not fee-bearing.
+
+---
+
+### V16 — Admin grants an exemption
+
+**Actor:** `P-ADMIN`. Target: `ORG-B`.
+
+**Steps**
+
+1. Open `/admin/organizations`, search `Fee Validate B`, open the record.
+2. Find the service-fee card near billing controls. Current state `Fees apply`.
+3. Click `Grant exemption`.
+4. In the dialog, leave reason blank and try to confirm. Expect validation.
+5. Enter reason `Validation grant: contracted prepaid 2026`. Confirm.
+6. Confirm current state `Exempt`. History shows the grant, actor, reason, and
+   a local-time timestamp.
+
+**UI expect:** reason is required (min 3, max 500). Controls disable while
+saving. Escape closes the dialog without saving when cancelled. Layout works
+at 375 px; long reasons wrap.
+
+**Database expect**
+
+```sql
+SELECT id, is_exempt, reason, changed_by_kilo_user_id, created_at
+FROM organization_service_fee_exemptions
+WHERE organization_id = '<ORG-B>'
+ORDER BY created_at DESC, id DESC;
+```
+
+Newest row has `is_exempt = true` and a non-empty reason. No new row in
+`organization_audit_logs` exists for this action.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V16 grant organization exemption`
+- claim: An admin must enter a reason, then the org card shows `Exempt` and
+  history lists the grant.
+- limits: Does not prove a later purchase is fee-free.
+
+---
+
+### V17 — Exempt organization top-up
+
+**Actor:** `P-OWNER` on `ORG-B` after V16.
+
+**Steps:** repeat V2 against `ORG-B`.
+
+**UI expect:** Checkout has **no** `Service fee (5%)` line. Total is $100
+before tax. Org balance +$100.
+
+**Database expect:** `flow = organization_top_up`, `outcome = exempt`,
+`expected_fee_minor = 500`, `charged_fee_minor = 0`, `exemption_id` = the V16
+exemption row, `settled_at` non-null after
+payment. Credits $100.
+
+**Email:** reuse for V24.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V17 exempt organization top-up`
+- claim: Exempt org Checkout has no fee line, and org balance rises by $100.
+- limits: Does not prove personal or child-org purchases.
+
+---
+
+### V18 — Member personal purchase while org is exempt
+
+**Actor:** `P-MEMBER`, who belongs to exempt `ORG-B`.
+
+**Steps:** personal $20 top-up from `/credits`. Do not use org purchase.
+
+**UI expect:** Checkout fee $1.00. Personal balance +$20.
+
+**Database expect:** `flow = personal_top_up`, `organization_id IS NULL`,
+`outcome = charged`, `charged_fee_minor = 100`. No exemption link.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V18 member personal top-up while org exempt`
+- claim: The member's personal Checkout still shows a 5% fee.
+- limits: Does not prove org billing for that member.
+
+---
+
+### V19 — Child organization does not inherit exemption
+
+**Actor:** `P-CHILD` on `ORG-CHILD`. Parent `ORG-B` is exempt.
+
+**Steps:** $100 org top-up for `ORG-CHILD`.
+
+**UI expect:** fee $5.00 present.
+
+**Database expect:** `organization_id = ORG-CHILD`, `outcome = charged`,
+`exemption_id IS NULL`.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V19 child org top-up while parent exempt`
+- claim: Child-org Checkout shows a $5.00 fee.
+- limits: Does not prove parent exemption state beyond this purchase.
+
+---
+
+### V20 — Revoke exemption, then charge
+
+**Actor:** `P-ADMIN`, then `P-OWNER`.
+
+**Steps**
+
+1. Admin opens `ORG-B`, clicks `Revoke exemption`, reason
+   `Validation revoke: contract ended`.
+2. History shows grant then revoke. Current state `Fees apply`.
+3. Owner buys another $100 org top-up for `ORG-B`.
+
+**UI expect:** this Checkout has the $5.00 fee. The earlier V17 invoice is
+unchanged.
+
+**Database expect:** second assessment `outcome = charged`, `charged_fee_minor
+= 500`. V17 row remains `exempt`. The exemption log has two rows and its
+newest row is the revoke row with `is_exempt = false`.
+
+**Video** (`video-evidence`, two clips; split personas)
+
+1. label: `V20 revoke organization exemption`
+   claim: Admin revokes with a reason; current state is `Fees apply`.
+   limits: Does not prove the next purchase.
+2. label: `V20 org top-up after revoke`
+   claim: The next `ORG-B` Checkout shows a $5.00 fee.
+   limits: Does not prove the earlier V17 invoice changed.
+
+---
+
+### V21 — Non-admin cannot manage exemptions
+
+**Actor:** `P-OWNER`.
+
+**Steps**
+
+1. Open `/admin/organizations/<ORG-B>`. Expect redirect to
+   `/admin/unauthorized` or no admin shell.
+2. Open `/organizations/<ORG-B>` and `/organizations/<ORG-B>/payment-details`.
+
+**UI expect:** no `Grant exemption`, no `Exempt` / `Fees apply` service-fee
+card, no exemption history.
+
+**Database expect:** no new exemption-log rows from this actor.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V21 non-admin exemption hidden`
+- claim: A non-admin cannot open the admin exemption controls or see exemption
+  copy on customer org pages.
+- limits: Does not prove API payload absence; that is the supporting network
+  note in V22.
+
+---
+
+### V22 — Customer organization APIs do not expose exemption
+
+**Actor:** `P-OWNER` on `ORG-B` (exempt or not).
+
+**Steps**
+
+1. After login, start the `video-evidence` take on `/organizations/<ORG-B>`.
+2. Open org settings, billing, members, and audit log pages.
+3. Search the pages for `exempt`, `service fee exemption`, and the V16 reason.
+
+**UI expect:** no matches.
+
+**Supporting check (not a substitute for the browser):** in DevTools network,
+org tRPC responses must not contain exemption fields. Note the request names
+in `evidence/v22.md`. Do not record DevTools.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V22 customer org surfaces hide exemption`
+- claim: Customer org settings, billing, members, and audit log show no
+  exemption copy.
+- limits: Does not prove tRPC payload shape; that is the written network note.
+
+---
+
+### V23 — Fee-positive top-up email
+
+**Actor:** operator, using the V1 or V2 mail.
+
+**Steps**
+
+1. Open the newest `dev/logs/emails/*.html` for that purchase in the browser
+   **before recording**.
+2. Start the `video-evidence` take on that tab and hold the itemized rows.
+
+**UI expect:** rows `Credits added` $100.00, `Service fee (5%)` $5.00, and
+`Total paid` $105.00 (plus tax if present).
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V23 fee-positive top-up email`
+- claim: The captured top-up email itemizes `Credits added`, `Service fee (5%)`,
+  and `Total paid`.
+- limits: Does not prove provider delivery; local capture only.
+
+---
+
+### V24 — Fee-free top-up email
+
+Use the V17 mail.
+
+**UI expect:** principal and credits, no `Service fee (5%)` row, no
+"exempt" / "waived" / "error" explanation.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V24 fee-free top-up email`
+- claim: The exempt top-up email has no `Service fee (5%)` row and does not
+  explain why.
+- limits: Does not prove other fee-free reasons (pre-activation, missed).
+
+---
+
+### V25 — Billing history stays coarse; Stripe itemizes
+
+**Actor:** `P-PERSONAL` after V1, and `P-OWNER` after V2.
+
+**Steps**
+
+1. Open `/invoices` (personal) and org `Payment History`.
+2. Confirm Kilo shows a single gross amount and status. No fee breakdown.
+3. Click `View`. On the Stripe hosted invoice, confirm the fee line.
+4. Optionally click `PDF` and confirm the same line.
+
+**Video** (`video-evidence`, two clips if Stripe hosted invoice is a separate
+context)
+
+1. label: `V25 Kilo billing history is gross only`
+   claim: `/invoices` or org payment history shows a single gross amount with
+   no fee breakdown.
+   limits: Does not prove Stripe line items.
+2. label: `V25 Stripe hosted invoice itemizes the fee`
+   claim: `View` opens a Stripe invoice that includes `Service fee (5%)`.
+   limits: Does not prove PDF contents unless the PDF is opened in this clip.
+
+---
+
+### V26 — Admin revenue dashboard
+
+**Actor:** `P-ADMIN` after V1, V2, V17, and ideally V8.
+
+**Steps**
+
+1. Open `/admin/revenue`.
+2. Set the range to include today. If the dashboard excludes today by default
+   ("ends yesterday"), use Custom and include the validation day.
+3. Read the existing credit-revenue figures and the separate collected,
+   missed, exempted, and disputed service-fee figures and counts.
+4. Export CSV if the button exists.
+
+**UI expect**
+
+- Existing paid/free/multiplied/unmultiplied credit figures keep their old semantics.
+- Assessment-backed V1/V2 top-ups remain in paid credit totals and contribute $5.00 each to the separate collected-fee total.
+- V17 contributes to exempted fee ($5.00) and not to collected fee.
+- No product or gross assessment revenue is shown; Kilo Pass product revenue remains outside this dashboard.
+- Abandoned / unpaid Checkouts from a cancelled attempt do not appear in fee metrics.
+- Empty-state does not crash if you pick a date range with no data. Check that
+  by switching to a future-empty custom range, then switch back.
+
+**Database expect:** dashboard figures match
+
+```sql
+SELECT
+  sum(greatest(charged_fee_minor - refunded_fee_minor - disputed_fee_minor, 0))
+    AS collected_fee_minor,
+  sum(CASE WHEN outcome = 'missed' THEN expected_fee_minor ELSE 0 END)
+    AS missed_fee_minor,
+  sum(CASE WHEN outcome = 'exempt' THEN expected_fee_minor ELSE 0 END)
+    AS exempt_fee_minor,
+  sum(disputed_fee_minor) AS disputed_fee_minor,
+  count(*) FILTER (WHERE outcome = 'charged') AS charged_count
+FROM stripe_service_fee_assessments
+WHERE settled_at IS NOT NULL
+  AND (settled_at AT TIME ZONE 'UTC')::date = CURRENT_DATE;
+```
+
+Unpaid rows must not be in those sums.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V26 admin revenue dashboard`
+- claim: The dashboard preserves the existing credit series, shows separate
+  fee collection and leakage values for the validation day, and an empty range does not crash.
+- limits: Does not prove SQL arithmetic beyond what is on screen.
+
+---
+
+### V27 — Admin full cancel-and-refund of Personal Kilo Pass
+
+**Invariant:** existing Kilo-initiated full refund returns product and fee.
+No new partial-refund UI is added.
+
+**Actor:** `P-ADMIN`. Target: the V7 user (undiscounted $49 + $2.45).
+
+**Steps**
+
+1. Open `/admin/users/<V7 user>`.
+2. On the Kilo Pass card, cancel and refund with a reason
+   `service-fee validation full refund`.
+3. Confirm the toast includes a refund amount of $51.45 (plus tax if charged).
+4. As the customer, reload `/subscriptions/kilo-pass` and `/invoices`.
+
+**UI expect:** subscription cancelled / blocked per existing admin behavior.
+Stripe invoice or receipt shows product and fee refunded.
+
+**Database expect:** same assessment, `outcome` remains `charged`,
+`refunded_product_minor = 4900`, `refunded_fee_minor = 245`. Refund columns
+never decrease after this.
+
+**Video** (`video-evidence`, two clips; split personas)
+
+1. label: `V27 admin cancel and refund Kilo Pass`
+   claim: Admin cancel-and-refund reports about $51.45 (plus tax if charged).
+   limits: Does not prove the customer UI.
+2. label: `V27 customer Kilo Pass after full refund`
+   claim: The customer subscription/invoice state reflects the cancellation
+   and refund.
+   limits: Does not prove partial refunds.
+
+---
+
+### V28 — Operator partial refund in Stripe
+
+**Invariant:** this product does not add a partial-refund Admin UI. An
+operator refunds in Stripe. The assessment records what can be allocated and
+does not silently issue a second refund.
+
+**Actor:** operator in Stripe Dashboard / CLI, then `P-ADMIN` / customer.
+
+**Preconditions:** a settled V2 charge that has not been refunded.
+
+**Steps**
+
+1. In Stripe test mode, refund **$20.00** of the V2 charge without a credit
+   note that allocates lines, unless the runbook says otherwise.
+2. Wait for `charge.refunded`.
+3. Reload org payment history and `/admin/revenue`.
+
+**Database expect:** follow the operator runbook in `kilo-org/on-call`. If the
+refund cannot be allocated to product vs fee, `refund_allocation_unresolved`
+is recorded, `refunded_fee_minor` is unchanged, and Stripe shows only the
+$20.00 refund the operator created — no second automatic refund.
+
+If the operator instead issues a credit note that refunds $20.00 product and
+$1.00 fee, the assessment should show `refunded_product_minor = 2000` and
+`refunded_fee_minor = 100`.
+
+**Video** (`video-evidence`, two clips; split Stripe Dashboard vs Kilo)
+
+1. label: `V28 operator partial refund in Stripe`
+   claim: The operator issues the documented partial refund.
+   limits: Does not prove Kilo assessment state.
+2. label: `V28 Kilo after partial refund`
+   claim: Org history and revenue reload without a second automatic refund.
+   limits: Does not prove every runbook allocation case.
+
+---
+
+### V29 — Chargeback then win
+
+**Actor:** HITL operator in Stripe Dashboard (test mode), then admin in Kilo.
+The Stripe CLI cannot attach a dispute to an existing charge. Do not use
+`stripe trigger charge.dispute.created` — that creates a new unrelated charge.
+
+**Preconditions:** a settled fee-positive assessment that has not been refunded
+or disputed. Prefer a dedicated `$100` personal top-up if V1's user was later
+blocked (V27 Nuke Pass). Record the charge id, assessment key, and whether
+`/credits` is reachable.
+
+**Steps**
+
+1. In Stripe Dashboard test mode, open the target Payment and create a test
+   dispute. Advance it until `charge.dispute.funds_withdrawn` is forwarded.
+2. Reload `/credits` if the user is not blocked, and `/admin/revenue` with a
+   Custom range that includes the settlement day.
+3. Close the dispute in Kilo's favor (Dashboard win / submit evidence so
+   status becomes `won` and `charge.dispute.closed` fires).
+4. Reload revenue.
+
+**UI expect:** customer credits are not silently increased by the fee. Revenue
+collected-fee drops after withdrawal and returns after the win. Existing credit-revenue figures do not change because of the dispute.
+
+**Database expect:** after withdrawal, `disputed_fee_minor = 500`, `outcome = charged`, and refund columns are unchanged. After a win, `disputed_fee_minor = 0`.
+
+**Video** (`video-evidence`, two or three clips; do not record Stripe helper
+setup in the Kilo clip)
+
+1. label: `V29 revenue after funds withdrawn`
+   claim: After the dispute withdrawal, collected fee on `/admin/revenue`
+   drops for the V1 payment.
+   limits: Does not prove the Stripe dispute UI.
+2. label: `V29 revenue after dispute won`
+   claim: After a win, collected fee is restored and the assessment remains
+   charged.
+   limits: Does not prove refund-column monotonicity; that is SQL.
+
+---
+
+### V30 — Pre-activation purchase
+
+**Invariant:** a billing object created before `2026-11-01T00:00:00Z` is
+fee-free even if it pays later.
+
+**How to run**
+
+- If wall-clock is before activation: **remove** any local activation
+  override, then repeat V1.
+- If wall-clock is after activation: do not fake this in production data.
+  Create one Checkout with a local override of the constant to the future,
+  or keep a pre-recorded pre-activation fixture. Document which method was
+  used.
+
+**UI expect:** Checkout has no fee line. Credits equal the button amount.
+
+**Database expect:** `outcome = pre_activation`, `expected_fee_minor = 500`
+for a $100 top-up,
+`charged_fee_minor = 0`, `settled_at` set after pay.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V30 pre-activation personal top-up`
+- claim: Checkout has no fee line, and Kilo credits the button amount.
+- limits: Does not prove post-activation behavior.
+
+---
+
+### V32 — Product-restricted coupon (operational defect signature)
+
+**Invariant:** a coupon that discounts only Kilo Pass overcharges relative to
+the published 5%. The system does not "fix" the customer. It settles observed
+amounts and alerts.
+
+**Actor:** a fresh user. Operator created `VALIDATEKPONLY`. Do not reuse a
+V7/V8/V9 user or payment fingerprint.
+
+**Steps**
+
+1. Start Personal Kilo Pass Checkout as in V7.
+2. Apply `VALIDATEKPONLY`.
+3. Confirm product $39.20 and fee still $2.45 (effective 6.25%).
+4. Pay.
+
+**UI expect:** Checkout shows the uneven discount. Kilo grants the normal $49
+tier. No extra charge or refund appears later.
+
+**Database expect:** `charged_fee_minor = 245`, `settled_product_minor = 3920`,
+`outcome = charged`. Deviation recorded (`service_fee_rate_deviation` in
+metadata or the agreed column). No second assessment and no automatic refund.
+
+**Video** (`video-evidence`, one clip)
+
+- label: `V32 product-restricted coupon`
+- claim: `VALIDATEKPONLY` discounts Kilo Pass and leaves the fee at $2.45;
+  the $49 tier still activates with no later corrective charge.
+- limits: Does not prove the Slack deviation alert; note that in SQL/logs.
+
+Delete `VALIDATEKPONLY` after the take.
+
+---
+
+### V33 — Fail open (local fault)
+
+**Invariant:** a fee-domain failure must not block payment.
+
+This is the one journey that may use a local uncommitted fault. Preferred
+fault: make `tax.ts` throw during tax-behavior resolution, or point the Price retrieve at an
+invalid price, then create a top-up.
+
+**Steps**
+
+1. Introduce the fault. Restart web if needed.
+2. Repeat V1.
+3. Remove the fault immediately after the take.
+
+**UI expect:** Checkout has **no** fee line. Payment succeeds. Credits $100.
+
+**Database expect:** `outcome = missed`, `expected_fee_minor = 500`,
+`charged_fee_minor = 0`, `failure_code = fee_application_failed`,
+`settled_at` set after pay.
+
+**Supporting:** Admin Slack attempt is logged. Slack failure, if simulated,
+still leaves the payment successful.
+
+**Video** (`video-evidence`, one clip; do not record injecting or reverting
+the local fault)
+
+- label: `V33 fail-open top-up`
+- claim: With the fee fault in place, Checkout has no fee line, payment
+  succeeds, and Kilo credits $100.
+- limits: Does not prove Slack delivery or the failure code; those are SQL
+  and logs.
+
+If a safe local fault cannot be introduced without risking other journeys,
+mark V33 `BLOCKED` and rely on the SPEC webhook tests. Do not skip the note.
+
+---
+
+## 6. Hybrid renewal (optional, recommended before activation)
+
+Existing Personal and org Kilo Pass subscriptions must pick up the fee on the
+first invoice created after activation. That invoice is Stripe-owned.
+
+**Mechanism:** Stripe test clock on the V7 or V10 subscription, advance to
+renewal, then:
+
+1. Customer opens `/invoices` or org billing history.
+2. `View` the renewal invoice.
+3. Confirm one `Service fee (5%)` line, `discountable = false` on the invoice
+   item, amount = 5% of that invoice's Kilo Pass net.
+
+**Database:** new assessment, `assessment_key = invoice:<id>`, not a second
+`checkout:*` row. `charged_fee_minor = expected_fee_minor`.
+
+**Video** (`video-evidence`, one clip; do not record advancing the test clock)
+
+- label: `V-renewal hosted invoice`
+- claim: The post-activation renewal invoice shows one `Service fee (5%)`
+  line equal to 5% of that invoice's Kilo Pass net.
+- limits: Does not prove test-clock setup or pre-activation invoices.
+
+If test clocks are unavailable, schedule this as the first production
+activation check in `SPEC.md` Phase 6 rather than inventing a clock in app
+code.
+
+---
+
+## 7. Suggested run order
+
+Execute the run in this order so later journeys can reuse state. Produce each
+journey's `video-evidence` clips only after that journey's dry-run succeeds:
+
+1. V0 fixtures, including the Kilo Pass Price tax audit and distinct Kilo Pass
+   payment-method plan
+2. V30 if wall-clock is before activation and the real constant is still set
+3. Apply the local activation override if needed and restart the web process
+4. V1, V23, V25 (personal path)
+5. V3, V4
+6. V2, V5, V6
+7. V12 then V10 then V11 on `ORG-A`
+8. V7, V27
+9. V8, V9, V32 on fresh users
+10. V16, V17, V24, V18, V19, V20, V21, V22 on `ORG-B` / child / member
+11. V13 is N/A (deprecated new KiloClaw provisioning); record the reason
+12. V26
+13. V28, then V29 with HITL Dashboard access
+14. V33 last, because it mutates local code
+15. Expire abandoned Checkouts and confirm no assessment remains `pending`
+16. Revert any activation override, local Price-ID override, and V33 fault;
+    restart or stop the web process so it cannot retain a local mutation
+17. Archive disposable Stripe fixtures when no remaining journey needs them
+18. Enter and independently verify approved historical exemptions
+19. Run the release-environment read-only Kilo Pass classification and
+    restricted-coupon audits; all findings must be cleared
+20. Optional renewal test clock
+
+Do not parallelize journeys that share an organization or Stripe customer.
+Run DB-backed test suites sequentially.
+
+---
+
+## 8. Run log template
+
+Copy to `.plans/service-fees/evidence/RUN.md` at the start of a validation
+run.
+
+```markdown
+# Service fee validation run
+
+- Date:
+- Operator:
+- Web base URL:
+- Postgres (host/port only, no password):
+- Stripe mode: test
+- Activation constant used for fee-applies journeys:
+- Original activation constant:
+- Activation override restored and web process restarted/stopped:
+- Activation override committed? no
+- Configured Kilo Pass Price tax audit:
+- Disposable Price IDs and local overrides, if any:
+- Abandoned Checkout Sessions expired:
+- Pending assessment count at pause/handoff:
+- Historical exemptions entered and independently verified:
+- Kilo Pass classification audit environment/time/result:
+- Restricted-coupon audit environment/time/result:
+
+## Personas
+| Persona | Email | User id |
+| --- | --- | --- |
+| P-ADMIN |  |  |
+| P-OWNER |  |  |
+| P-MEMBER |  |  |
+| P-CHILD |  |  |
+| P-PERSONAL |  |  |
+| P-V7 |  |  |
+| P-V8 |  |  |
+| P-V9 |  |  |
+| P-V32 |  |  |
+
+## Kilo Pass test payment methods
+| Journey | Non-secret test method label | Observed card fingerprint |
+| --- | --- | --- |
+| V7 |  |  |
+| V8 |  |  |
+| V9 |  |  |
+| V32 |  |  |
+
+## Organizations
+| Org | Name | UUID |
+| --- | --- | --- |
+| ORG-A |  |  |
+| ORG-B |  |  |
+| ORG-CHILD |  |  |
+
+## Video workspace
+- video-evidence workdir (outside repo):
+- repository_state: not committed
+
+## Results
+| ID | Result | video-evidence labels | Assessment key | Notes |
+| --- | --- | --- | --- | --- |
+| V0 |  |  |  |  |
+| V1 |  |  |  |  |
+| V2 |  |  |  |  |
+| V3 |  |  |  |  |
+| V4 |  |  |  |  |
+| V5 |  |  |  |  |
+| V6 |  |  |  |  |
+| V7 |  |  |  |  |
+| V8 |  |  |  |  |
+| V9 |  |  |  |  |
+| V10 |  |  |  |  |
+| V11 |  |  |  |  |
+| V12 |  |  |  |  |
+| V13 |  |  |  |  |
+| V16 |  |  |  |  |
+| V17 |  |  |  |  |
+| V18 |  |  |  |  |
+| V19 |  |  |  |  |
+| V20 |  |  |  |  |
+| V21 |  |  |  |  |
+| V22 |  |  |  |  |
+| V23 |  |  |  |  |
+| V24 |  |  |  |  |
+| V25 |  |  |  |  |
+| V26 |  |  |  |  |
+| V27 |  |  |  |  |
+| V28 |  |  |  |  |
+| V29 |  |  |  |  |
+| V30 |  |  |  |  |
+| V32 |  |  |  |  |
+| V33 |  |  |  |  |
+```
+
+A validation run is complete when every row is `PASS`, `N/A` with reason, or
+`BLOCKED` with a SPEC-test pointer. Any `FAIL` blocks calling the feature
+done, even if automated suites are green.
+
+---
+
+## 9. Implementation notes for later
+
+When the feature exists, drive the browser with `agent-browser` and produce
+every required clip by loading and following the `video-evidence` skill. Do
+not use Playwright for these journeys, and do not submit a raw WebM or an
+in-repo recording as evidence. Current `apps/web/tests/e2e` coverage is
+visual/accessibility and does not complete Stripe Checkout.
+
+If a user-visible label in this file is wrong after UI implementation, change
+this file. Do not weaken a database assertion to match a product bug.
+
+Do not add a runtime fee kill switch to make validation easier. The only
+allowed local mutations are the uncommitted activation override, a documented
+ignored local Kilo Pass Price-ID replacement for explicit-tax test fixtures,
+and the V33 fault. Revert all of them before commit or handoff. Restart the web
+process after reverting; if restart fails, stop it and record that state rather
+than leaving a process with stale validation configuration.
diff --git a/.specs/impact-affiliate-tracking.md b/.specs/impact-affiliate-tracking.md
index 63541952db..38b9ca2df5 100644
--- a/.specs/impact-affiliate-tracking.md
+++ b/.specs/impact-affiliate-tracking.md
@@ -51,7 +51,8 @@ BCP 14 [RFC 2119] [RFC 8174] keywords apply only when they appear in all capital
   governed by KiloClaw billing. Zero-dollar periods, fully comped periods, organization-scoped KiloClaw activity, and
   admin-only interventions are excluded.
 - **Affiliate-eligible Kilo Pass invoice settlement**: Kilo Pass Stripe invoice settlement for an attributed user with
-  positive paid amount and resolvable Kilo Pass tier and cadence. Initial purchases and renewals can qualify.
+  a positive settled eligible product amount and resolvable Kilo Pass tier and cadence. The eligible product amount
+  excludes any service-fee line. Initial purchases and renewals can qualify.
 - **Reported amount**: Monetary amount represented in the payment currency's major units from the authoritative
   monetized amount for the eligible event. Catalog/list price and Kilo Pass credit issuance amounts are not substitutes.
 - **Kilo Pass tier**: Eligible package level `19`, `49`, or `199`.
@@ -148,8 +149,10 @@ after the winning attribution is established.
     payment period or invoice they represent.
 
 17. SALE events MUST report the eligible event's reported amount and payment currency. KiloClaw SALE amounts MUST use
-    the monetized KiloClaw payment-period amount. Kilo Pass SALE amounts MUST use the positive settled invoice paid
-    amount, not catalog price or credit issuance value.
+    the monetized KiloClaw payment-period amount. Kilo Pass SALE amounts MUST use the settled eligible product amount,
+    excluding any service-fee line. That product amount is the service-fee assessment's `settled_product_minor`
+    converted to major units, not the gross settled invoice paid amount, catalog price, or credit issuance value. A
+    zero settled product amount MUST NOT produce a SALE.
 
 18. The reported amount MUST be normalized to the payment currency's major units without changing the authoritative
     settled or monetized value. Any rounding needed by a provider integration must preserve that business amount.
@@ -252,6 +255,11 @@ after the winning attribution is established.
 
 ## Changelog
 
+### 2026-08-11 -- Kilo Pass SALE amount excludes the service fee
+
+Amended rule 17 so Kilo Pass SALE amounts use the assessment's settled eligible product amount
+(`settled_product_minor`), not the gross settled invoice paid amount. A zero product amount suppresses SALE.
+
 ### 2026-05-28 -- Enforced EFW refund reversals
 
 Expanded adverse SALE reversal to enforced Stripe Early Fraud Warning refunds so proactive refunds can reverse a full eligible affiliate commission without waiting for a dispute, while preserving reversal identity and deduplication requirements.
diff --git a/apps/web/src/app/admin/api/organizations/hooks.ts b/apps/web/src/app/admin/api/organizations/hooks.ts
index d8ef9ef136..4daa5e535f 100644
--- a/apps/web/src/app/admin/api/organizations/hooks.ts
+++ b/apps/web/src/app/admin/api/organizations/hooks.ts
@@ -152,6 +152,36 @@ export function useAdminOrganizationKiloPassSummary(organizationId: string) {
   );
 }
 
+export function useAdminOrganizationServiceFeeExemption(organizationId: string) {
+  const trpc = useTRPC();
+  return useQuery(
+    trpc.organizations.admin.getServiceFeeExemption.queryOptions({
+      organizationId,
+    })
+  );
+}
+
+export function useSetOrganizationServiceFeeExemption() {
+  const trpc = useTRPC();
+  const queryClient = useQueryClient();
+  return useMutation(
+    trpc.organizations.admin.setServiceFeeExemption.mutationOptions({
+      onSuccess: (_data, variables) => {
+        void queryClient.invalidateQueries({
+          queryKey: trpc.organizations.admin.getServiceFeeExemption.queryKey({
+            organizationId: variables.organizationId,
+          }),
+        });
+        void queryClient.invalidateQueries({
+          queryKey: trpc.organizations.admin.getDetails.queryKey({
+            organizationId: variables.organizationId,
+          }),
+        });
+      },
+    })
+  );
+}
+
 export function useAdminOrganizationHierarchy(organizationId: string, enabled: boolean) {
   const trpc = useTRPC();
   return useQuery(
diff --git a/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminDashboard.tsx b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminDashboard.tsx
index abb0cba396..8db527e84e 100644
--- a/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminDashboard.tsx
+++ b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminDashboard.tsx
@@ -8,6 +8,7 @@ import { OrganizationAdminCreditTransactions } from './OrganizationAdminCreditTr
 import { OrganizationAdminDelete } from './OrganizationAdminDelete';
 import { OrganizationAdminCreditGrant } from './OrganizationAdminCreditGrant';
 import { OrganizationAdminCreditNullify } from './OrganizationAdminCreditNullify';
+import { OrganizationAdminServiceFeeExemption } from './OrganizationAdminServiceFeeExemption';
 import { OrganizationAdminCreatedBy } from './OrganizationAdminCreatedBy';
 import { OrganizationAdminHierarchyManagement } from './OrganizationAdminHierarchyManagement';
 import { OrganizationAdminKiloPass } from './OrganizationAdminKiloPass';
@@ -66,6 +67,7 @@ export function OrganizationAdminDashboard({ organizationId }: { organizationId:
                 <OrganizationAdminCreatedBy organizationId={organizationId} />
                 <OrganizationAdminCreditGrant organizationId={organizationId} />
                 <OrganizationAdminCreditNullify organizationId={organizationId} />
+                <OrganizationAdminServiceFeeExemption organizationId={organizationId} />
                 <OrganizationWorkOSCard organizationId={organizationId} />
               </div>
               <div className="space-y-8 lg:col-span-2">
diff --git a/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.test.ts b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.test.ts
new file mode 100644
index 0000000000..feab451bcc
--- /dev/null
+++ b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.test.ts
@@ -0,0 +1,83 @@
+import { describe, expect, it } from '@jest/globals';
+import {
+  canSubmitServiceFeeExemption,
+  resolveServiceFeeExemptionDialogOpenChange,
+  SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH,
+  SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH,
+  shouldBlockServiceFeeExemptionDialogDismiss,
+} from './OrganizationAdminServiceFeeExemption.dialog-state';
+
+describe('resolveServiceFeeExemptionDialogOpenChange', () => {
+  it('ignores close requests while the mutation is pending', () => {
+    expect(
+      resolveServiceFeeExemptionDialogOpenChange({ requestedOpen: false, isMutationPending: true })
+    ).toBeNull();
+  });
+
+  it('ignores reopen requests while the mutation is pending so state is never reset mid-flight', () => {
+    expect(
+      resolveServiceFeeExemptionDialogOpenChange({ requestedOpen: true, isMutationPending: true })
+    ).toBeNull();
+  });
+
+  it('resets the mutation only when the dialog opens while idle', () => {
+    expect(
+      resolveServiceFeeExemptionDialogOpenChange({ requestedOpen: true, isMutationPending: false })
+    ).toEqual({ open: true, resetMutation: true });
+  });
+
+  it('closes without resetting the mutation while idle', () => {
+    expect(
+      resolveServiceFeeExemptionDialogOpenChange({
+        requestedOpen: false,
+        isMutationPending: false,
+      })
+    ).toEqual({ open: false, resetMutation: false });
+  });
+});
+
+describe('shouldBlockServiceFeeExemptionDialogDismiss', () => {
+  it('blocks Escape, overlay pointer-down, and outside interaction only while pending', () => {
+    expect(shouldBlockServiceFeeExemptionDialogDismiss({ isMutationPending: true })).toBe(true);
+    expect(shouldBlockServiceFeeExemptionDialogDismiss({ isMutationPending: false })).toBe(false);
+  });
+});
+
+describe('canSubmitServiceFeeExemption', () => {
+  it('rejects a pending mutation even with a valid reason to prevent duplicates', () => {
+    expect(
+      canSubmitServiceFeeExemption({
+        trimmedReasonLength: SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH,
+        isMutationPending: true,
+      })
+    ).toBe(false);
+  });
+
+  it('enforces the trimmed reason length bounds while idle', () => {
+    const idle = { isMutationPending: false };
+    expect(
+      canSubmitServiceFeeExemption({
+        trimmedReasonLength: SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH - 1,
+        ...idle,
+      })
+    ).toBe(false);
+    expect(
+      canSubmitServiceFeeExemption({
+        trimmedReasonLength: SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH,
+        ...idle,
+      })
+    ).toBe(true);
+    expect(
+      canSubmitServiceFeeExemption({
+        trimmedReasonLength: SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH,
+        ...idle,
+      })
+    ).toBe(true);
+    expect(
+      canSubmitServiceFeeExemption({
+        trimmedReasonLength: SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH + 1,
+        ...idle,
+      })
+    ).toBe(false);
+  });
+});
diff --git a/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.ts b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.ts
new file mode 100644
index 0000000000..f18ffce1c5
--- /dev/null
+++ b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.dialog-state.ts
@@ -0,0 +1,65 @@
+/**
+ * Pure dialog-state rules for OrganizationAdminServiceFeeExemption, extracted
+ * so the pending-mutation dismiss guards are testable without a DOM (the repo
+ * has no component-test runner).
+ */
+
+// Mirrors ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_* in
+// @/lib/service-fees/organization-exemptions, which is server-only and cannot
+// be imported from a client component. The router remains the enforcement
+// boundary; these only drive client-side enablement and hints.
+export const SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH = 3;
+export const SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH = 500;
+
+export type ServiceFeeExemptionDialogOpenChange = {
+  open: boolean;
+  resetMutation: boolean;
+};
+
+/**
+ * Radix fires onOpenChange for the trigger, Cancel, the close button, Escape,
+ * and overlay pointer-down. While the set-exemption mutation is in flight,
+ * every open/close request must be ignored: closing would discard the pending
+ * UI, and a close-then-reopen would reset the mutation state, clear the
+ * isPending guard, and allow a duplicate mutation.
+ *
+ * Returns null when the request must be ignored, otherwise the next dialog
+ * state. The mutation is reset only on a fresh open so a previous error does
+ * not leak into the next attempt.
+ */
+export function resolveServiceFeeExemptionDialogOpenChange(input: {
+  requestedOpen: boolean;
+  isMutationPending: boolean;
+}): ServiceFeeExemptionDialogOpenChange | null {
+  if (input.isMutationPending) return null;
+  return { open: input.requestedOpen, resetMutation: input.requestedOpen };
+}
+
+/**
+ * Guarding onOpenChange alone is not enough for a controlled dialog: Radix
+ * processes Escape and overlay pointer-down in its own handlers before asking
+ * React, so DialogContent must also preventDefault those events while the
+ * mutation is pending. This predicate drives all three content-level guards
+ * (onEscapeKeyDown, onPointerDownOutside, onInteractOutside).
+ */
+export function shouldBlockServiceFeeExemptionDialogDismiss(input: {
+  isMutationPending: boolean;
+}): boolean {
+  return input.isMutationPending;
+}
+
+/**
+ * Confirm stays inert until the trimmed reason is within the allowed length
+ * and no mutation is in flight, so double-clicks or repeated Enter presses
+ * cannot fire a duplicate mutation.
+ */
+export function canSubmitServiceFeeExemption(input: {
+  trimmedReasonLength: number;
+  isMutationPending: boolean;
+}): boolean {
+  return (
+    !input.isMutationPending &&
+    input.trimmedReasonLength >= SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH &&
+    input.trimmedReasonLength <= SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH
+  );
+}
diff --git a/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.tsx b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.tsx
new file mode 100644
index 0000000000..fce265cc2f
--- /dev/null
+++ b/apps/web/src/app/admin/components/OrganizationAdmin/OrganizationAdminServiceFeeExemption.tsx
@@ -0,0 +1,277 @@
+'use client';
+
+import { Badge } from '@/components/ui/badge';
+import { Button } from '@/components/ui/button';
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from '@/components/ui/dialog';
+import { Label } from '@/components/ui/label';
+import { Skeleton } from '@/components/ui/skeleton';
+import { Textarea } from '@/components/ui/textarea';
+import {
+  useAdminOrganizationServiceFeeExemption,
+  useSetOrganizationServiceFeeExemption,
+} from '@/app/admin/api/organizations/hooks';
+import { Receipt } from 'lucide-react';
+import { useState } from 'react';
+import { toast } from 'sonner';
+import {
+  canSubmitServiceFeeExemption,
+  resolveServiceFeeExemptionDialogOpenChange,
+  SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH,
+  SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH,
+  shouldBlockServiceFeeExemptionDialogDismiss,
+} from './OrganizationAdminServiceFeeExemption.dialog-state';
+
+function formatLocalTimestamp(isoTimestamp: string): string {
+  return new Date(isoTimestamp).toLocaleString(undefined, {
+    dateStyle: 'medium',
+    timeStyle: 'short',
+  });
+}
+
+function ExemptionStateBadge({ isExempt }: { isExempt: boolean }) {
+  return (
+    <Badge variant={isExempt ? 'new' : 'secondary-outline'}>
+      {isExempt ? 'Exempt' : 'Fees apply'}
+    </Badge>
+  );
+}
+
+export function OrganizationAdminServiceFeeExemption({
+  organizationId,
+}: {
+  organizationId: string;
+}) {
+  const exemptionQuery = useAdminOrganizationServiceFeeExemption(organizationId);
+  const setExemptionMutation = useSetOrganizationServiceFeeExemption();
+
+  const [isDialogOpen, setIsDialogOpen] = useState(false);
+  const [reason, setReason] = useState('');
+
+  if (exemptionQuery.isPending) {
+    return <Skeleton className="h-44 w-full rounded-xl" />;
+  }
+
+  if (exemptionQuery.isError) {
+    return (
+      <Card className="border-destructive/40">
+        <CardHeader>
+          <CardTitle>Service fee exemption</CardTitle>
+          <CardDescription>Unable to load the organization service fee exemption.</CardDescription>
+        </CardHeader>
+        <CardContent>
+          <Button variant="outline" size="sm" onClick={() => void exemptionQuery.refetch()}>
+            Retry
+          </Button>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  const { current, history } = exemptionQuery.data;
+  const isExempt = current?.isExempt ?? false;
+  const actionLabel = isExempt ? 'Revoke exemption' : 'Grant exemption';
+  const pendingLabel = isExempt ? 'Revoking exemption…' : 'Granting exemption…';
+  const isMutationPending = setExemptionMutation.isPending;
+  const trimmedReasonLength = reason.trim().length;
+  const canSubmit = canSubmitServiceFeeExemption({ trimmedReasonLength, isMutationPending });
+  const blockDismiss = shouldBlockServiceFeeExemptionDialogDismiss({ isMutationPending });
+
+  const handleConfirm = () => {
+    if (!canSubmit) return;
+
+    setExemptionMutation.mutate(
+      {
+        organizationId,
+        isExempt: !isExempt,
+        reason,
+      },
+      {
+        onSuccess: () => {
+          toast.success(
+            isExempt ? 'Service fee exemption revoked' : 'Service fee exemption granted'
+          );
+          setReason('');
+          setIsDialogOpen(false);
+        },
+        // On error the dialog stays open and the reason is kept so the admin
+        // can retry without retyping.
+      }
+    );
+  };
+
+  return (
+    <Card>
+      <CardHeader className="pb-3">
+        <div className="flex flex-wrap items-start justify-between gap-3">
+          <div className="space-y-1.5">
+            <CardTitle className="flex items-center gap-2">
+              <Receipt className="size-4" aria-hidden />
+              Service fee exemption
+            </CardTitle>
+            <CardDescription>
+              Waive Stripe service fees on this organization&apos;s new purchases. Exemptions are
+              not inherited by parent or child organizations.
+            </CardDescription>
+          </div>
+          <ExemptionStateBadge isExempt={isExempt} />
+        </div>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        {current ? (
+          <div className="space-y-1 rounded-lg border p-3">
+            <p className="type-label text-muted-foreground">Current reason</p>
+            <p className="type-body break-words whitespace-pre-wrap">{current.reason}</p>
+            <p className="text-muted-foreground text-xs">
+              By{' '}
+              <span className="font-mono break-all">
+                {current.changedByKiloUserId ?? 'Deleted admin'}
+              </span>{' '}
+              on {formatLocalTimestamp(current.createdAt)}
+            </p>
+          </div>
+        ) : null}
+
+        <Dialog
+          open={isDialogOpen}
+          onOpenChange={requestedOpen => {
+            // While the mutation is in flight every close/reopen request
+            // (Cancel, close button, Escape, overlay) is ignored so the
+            // dialog cannot be dismissed, reset, or reopened mid-request.
+            const next = resolveServiceFeeExemptionDialogOpenChange({
+              requestedOpen,
+              isMutationPending,
+            });
+            if (!next) return;
+            if (next.resetMutation) {
+              setExemptionMutation.reset();
+            }
+            setIsDialogOpen(next.open);
+          }}
+        >
+          <DialogTrigger asChild>
+            <Button
+              variant={isExempt ? 'outline' : 'default'}
+              size="sm"
+              className="w-full sm:w-auto"
+            >
+              {actionLabel}
+            </Button>
+          </DialogTrigger>
+          <DialogContent
+            // onOpenChange fires after Radix's own handlers, so Escape and
+            // overlay clicks must be prevented at the content level, and the
+            // close button is hidden, while the mutation is pending.
+            showCloseButton={!isMutationPending}
+            aria-busy={isMutationPending}
+            onEscapeKeyDown={event => {
+              if (blockDismiss) event.preventDefault();
+            }}
+            onPointerDownOutside={event => {
+              if (blockDismiss) event.preventDefault();
+            }}
+            onInteractOutside={event => {
+              if (blockDismiss) event.preventDefault();
+            }}
+          >
+            <DialogHeader>
+              <DialogTitle>
+                {isExempt ? 'Revoke service fee exemption' : 'Grant service fee exemption'}
+              </DialogTitle>
+              <DialogDescription>
+                {isExempt
+                  ? 'Stripe service fees apply to this organization’s new purchases again.'
+                  : 'New purchases by this organization skip the Stripe service fee.'}{' '}
+                The reason is recorded in the admin-only exemption history.
+              </DialogDescription>
+            </DialogHeader>
+
+            <div className="space-y-1.5">
+              <Label htmlFor="service-fee-exemption-reason">Reason (required)</Label>
+              <Textarea
+                id="service-fee-exemption-reason"
+                value={reason}
+                onChange={event => setReason(event.target.value)}
+                minLength={SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH}
+                maxLength={SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH}
+                rows={3}
+                required
+                disabled={isMutationPending}
+                aria-describedby={
+                  setExemptionMutation.isError
+                    ? 'service-fee-exemption-reason-hint service-fee-exemption-error'
+                    : 'service-fee-exemption-reason-hint'
+                }
+                className="break-words"
+              />
+              <p id="service-fee-exemption-reason-hint" className="text-muted-foreground text-xs">
+                {SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH} to{' '}
+                {SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH} characters. Visible to platform admins
+                only.
+              </p>
+              {setExemptionMutation.isError ? (
+                <p
+                  id="service-fee-exemption-error"
+                  role="alert"
+                  className="text-status-destructive text-sm"
+                >
+                  {setExemptionMutation.error.message}
+                </p>
+              ) : null}
+            </div>
+
+            <DialogFooter>
+              <Button
+                variant="outline"
+                onClick={() => setIsDialogOpen(false)}
+                disabled={isMutationPending}
+              >
+                Cancel
+              </Button>
+              <Button onClick={handleConfirm} disabled={!canSubmit}>
+                {isMutationPending ? pendingLabel : actionLabel}
+              </Button>
+            </DialogFooter>
+          </DialogContent>
+        </Dialog>
+
+        <div className="space-y-2 border-t pt-4">
+          <p className="type-label text-muted-foreground">History</p>
+          {history.length === 0 ? (
+            <p className="text-muted-foreground type-body">No exemption changes yet.</p>
+          ) : (
+            <ul className="space-y-2">
+              {history.map(entry => (
+                <li
+                  key={entry.id}
+                  className="flex flex-wrap items-start justify-between gap-2 rounded-lg border p-3"
+                >
+                  <div className="min-w-0 space-y-1">
+                    <div className="flex flex-wrap items-center gap-2">
+                      <ExemptionStateBadge isExempt={entry.isExempt} />
+                      <span className="text-muted-foreground text-xs tabular-nums">
+                        {formatLocalTimestamp(entry.createdAt)}
+                      </span>
+                    </div>
+                    <p className="type-body break-words whitespace-pre-wrap">{entry.reason}</p>
+                    <p className="text-muted-foreground font-mono text-xs break-all">
+                      {entry.changedByKiloUserId ?? 'Deleted admin'}
+                    </p>
+                  </div>
+                </li>
+              ))}
+            </ul>
+          )}
+        </div>
+      </CardContent>
+    </Card>
+  );
+}
diff --git a/apps/web/src/app/admin/components/RevenueDailyChart.tsx b/apps/web/src/app/admin/components/RevenueDailyChart.tsx
index 79487a3bba..2669260f75 100644
--- a/apps/web/src/app/admin/components/RevenueDailyChart.tsx
+++ b/apps/web/src/app/admin/components/RevenueDailyChart.tsx
@@ -1,5 +1,6 @@
 'use client';
 
+import { Button } from '@/components/ui/button';
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
 import {
   ComposedChart,
@@ -21,6 +22,67 @@ type ApiResponse = {
   showFreeCredits: boolean;
 };
 
+type ChartDataPoint = {
+  day: string;
+  paidRevenue: number;
+  freeCredits: number;
+  multipliedRevenue: number;
+  unmultipliedRevenue: number;
+  paidPercentage: number;
+  serviceFee: number;
+  missedFees: number;
+  exemptedFees: number;
+  disputedFees: number;
+};
+
+type TooltipPayload = {
+  payload: ChartDataPoint;
+  dataKey: string;
+  value: number;
+  name: string;
+  color: string;
+};
+
+type CustomTooltipProps = {
+  active?: boolean;
+  payload?: TooltipPayload[];
+  label?: string;
+};
+
+function RevenueTooltip({ active, payload, label }: CustomTooltipProps) {
+  if (!active || !payload?.length) return null;
+
+  const data = payload[0]?.payload;
+  if (!data) return null;
+
+  return (
+    <div className="bg-background rounded-lg border p-3 shadow-sm">
+      <p className="text-sm font-medium">{label}</p>
+      <div className="mt-2 space-y-1">
+        {[
+          ['Paid Revenue', data.paidRevenue],
+          ['Free Credits', data.freeCredits],
+          ['Multiplied Revenue', data.multipliedRevenue],
+          ['Unmultiplied Revenue', data.unmultipliedRevenue],
+          ['Collected Service Fees', data.serviceFee],
+          ['Missed Fees', data.missedFees],
+          ['Exempted Fees', data.exemptedFees],
+          ['Disputed Fees', data.disputedFees],
+        ].map(([name, value]) => (
+          <p key={name} className="text-sm">
+            <span className="text-muted-foreground">{name}:</span>{' '}
+            <span className="font-medium tabular-nums">{formatDollars(value as number)}</span>
+          </p>
+        ))}
+        <p className="text-sm">
+          <span className="text-muted-foreground">Paid Credits %:</span>{' '}
+          <span className="font-medium tabular-nums">{data.paidPercentage.toFixed(1)}%</span>
+        </p>
+      </div>
+    </div>
+  );
+}
+
 export function RevenueDailyChart({ data, showFreeCredits }: ApiResponse) {
   const downloadData = () => {
     if (data.length === 0) return;
@@ -46,7 +108,7 @@ export function RevenueDailyChart({ data, showFreeCredits }: ApiResponse) {
   };
 
   // Transform data for the chart
-  const chartData = data.map(item => {
+  const chartData: ChartDataPoint[] = data.map(item => {
     const paidRevenue = item.paid_total_dollars;
     const freeCredits = item.free_total_dollars;
     const totalCredits = paidRevenue + freeCredits;
@@ -56,86 +118,31 @@ export function RevenueDailyChart({ data, showFreeCredits }: ApiResponse) {
       day: format(parseISO(item.transaction_day), 'MM/dd'),
       paidRevenue: paidRevenue,
       freeCredits: freeCredits,
-      multipliedRevenue: item.multiplied_total_dollars || 0,
+      multipliedRevenue: item.multiplied_total_dollars,
       unmultipliedRevenue: item.unmultiplied_total_dollars,
       paidPercentage: paidPercentage,
+      serviceFee: item.collected_service_fee_dollars,
+      missedFees: item.missed_service_fee_dollars,
+      exemptedFees: item.exempted_service_fee_dollars,
+      disputedFees: item.disputed_service_fee_dollars,
     };
   });
 
-  // Custom tooltip with type-safe access to raw data
-  type ChartDataPoint = {
-    day: string;
-    paidRevenue: number;
-    freeCredits: number;
-    multipliedRevenue: number;
-    unmultipliedRevenue: number;
-    paidPercentage: number;
-  };
-
-  type TooltipPayload = {
-    payload: ChartDataPoint;
-    dataKey: string;
-    value: number;
-    name: string;
-    color: string;
-  };
-
-  type CustomTooltipProps = {
-    active?: boolean;
-    payload?: TooltipPayload[];
-    label?: string;
-  };
-
-  const CustomTooltip = ({ active, payload, label }: CustomTooltipProps) => {
-    if (active && payload && payload.length > 0) {
-      // Access the raw data object directly - much more type-safe!
-      const data = payload[0]?.payload;
-
-      if (!data) return null;
-
-      return (
-        <div className="bg-background rounded-lg border p-3 shadow-sm">
-          <p className="text-sm font-medium">{label}</p>
-          <div className="mt-2 space-y-1">
-            <p className="text-sm">
-              <span className="text-muted-foreground">Paid Revenue:</span>{' '}
-              <span className="font-medium">{formatDollars(data.paidRevenue)}</span>
-            </p>
-            <p className="text-sm">
-              <span className="text-muted-foreground">Free Credits:</span>{' '}
-              <span className="font-medium">{formatDollars(data.freeCredits)}</span>
-            </p>
-            <p className="text-sm">
-              <span className="text-muted-foreground">Multiplied Revenue:</span>{' '}
-              <span className="font-medium">{formatDollars(data.multipliedRevenue)}</span>
-            </p>
-            <p className="text-sm">
-              <span className="text-muted-foreground">Unmultiplied Revenue:</span>{' '}
-              <span className="font-medium">{formatDollars(data.unmultipliedRevenue)}</span>
-            </p>
-            <p className="text-sm">
-              <span className="text-muted-foreground">Paid Credits %:</span>{' '}
-              <span className="font-medium">{data.paidPercentage.toFixed(1)}%</span>
-            </p>
-          </div>
-        </div>
-      );
-    }
-    return null;
-  };
-
   // Calculate dynamic Y-axis domain for better visualization
-  const maxRevenue = Math.max(
-    ...chartData.map(d =>
-      Math.max(
-        d.paidRevenue,
-        showFreeCredits ? d.freeCredits : 0,
-        d.multipliedRevenue,
-        d.unmultipliedRevenue
-      )
-    )
-  );
-  const yAxisMax = Math.ceil(maxRevenue * 1.1); // Add 10% padding
+  const maxRevenue =
+    chartData.length > 0
+      ? Math.max(
+          ...chartData.map(d =>
+            Math.max(
+              d.paidRevenue,
+              showFreeCredits ? d.freeCredits : 0,
+              d.serviceFee,
+              d.missedFees + d.exemptedFees + d.disputedFees
+            )
+          )
+        )
+      : 0;
+  const yAxisMax = Math.max(Math.ceil(maxRevenue * 1.1), 1); // Add 10% padding
 
   return (
     <Card>
@@ -143,12 +150,12 @@ export function RevenueDailyChart({ data, showFreeCredits }: ApiResponse) {
         <div className="flex items-center justify-between">
           <div>
             <CardTitle>Daily Revenue Trend</CardTitle>
-            <CardDescription>Daily breakdown of revenue metrics</CardDescription>
+            <CardDescription>
+              Credit revenue keeps its existing transaction-date semantics. Service fees are a
+              separate series grouped by settled date (UTC); Kilo Pass product revenue is not added.
+            </CardDescription>
           </div>
-          <button
-            onClick={downloadData}
-            className="hover:bg-background inline-flex items-center rounded-md border border-gray-300 bg-white px-3 py-2 text-sm font-medium text-gray-700 focus:ring-2 focus:ring-blue-500 focus:ring-offset-2 focus:outline-none"
-          >
+          <Button onClick={downloadData} variant="outline" size="sm">
             <svg
               className="mr-2 h-4 w-4"
               fill="none"
@@ -164,85 +171,119 @@ export function RevenueDailyChart({ data, showFreeCredits }: ApiResponse) {
               />
             </svg>
             Download CSV
-          </button>
+          </Button>
         </div>
       </CardHeader>
       <CardContent>
-        <div className="h-[400px] w-full">
-          <ResponsiveContainer width="100%" height="100%">
-            <ComposedChart data={chartData} margin={{ top: 20, right: 80, left: 20, bottom: 60 }}>
-              <CartesianGrid strokeDasharray="3 3" className="stroke-muted" />
-              <XAxis
-                dataKey="day"
-                angle={-45}
-                textAnchor="end"
-                height={100}
-                className="text-xs"
-                tick={{ fontSize: 10 }}
-              />
-              <YAxis
-                yAxisId="left"
-                className="text-xs"
-                tick={{ fontSize: 10 }}
-                label={{
-                  value: 'Revenue (USD)',
-                  angle: -90,
-                  position: 'insideLeft',
-                  style: { fontSize: 12 },
-                }}
-                domain={[0, yAxisMax]}
-                tickFormatter={value => `$${value.toFixed(0)}`}
-              />
-              <YAxis
-                yAxisId="right"
-                orientation="right"
-                className="text-xs"
-                tick={{ fontSize: 10 }}
-                label={{
-                  value: 'Paid Credits (%)',
-                  angle: 90,
-                  position: 'insideRight',
-                  style: { fontSize: 12 },
-                }}
-                domain={[0, 100]}
-                tickFormatter={value => `${value.toFixed(0)}%`}
-              />
-              <Tooltip content={<CustomTooltip />} />
-              <Legend />
-              <Bar
-                yAxisId="left"
-                dataKey="unmultipliedRevenue"
-                stackId="paid"
-                fill="#16a34a"
-                name="Revenue Without Multipliers"
-              />
-              <Bar
-                yAxisId="left"
-                dataKey="multipliedRevenue"
-                stackId="paid"
-                fill="#dc2626"
-                name="Revenue Due to Multipliers"
-              />
-              {showFreeCredits && (
+        {chartData.length === 0 ? (
+          <p className="text-muted-foreground py-4 text-sm">No revenue data for this range.</p>
+        ) : (
+          <div className="h-[400px] w-full">
+            <ResponsiveContainer width="100%" height="100%">
+              <ComposedChart data={chartData} margin={{ top: 20, right: 80, left: 20, bottom: 60 }}>
+                <CartesianGrid strokeDasharray="3 3" className="stroke-muted" />
+                <XAxis
+                  dataKey="day"
+                  angle={-45}
+                  textAnchor="end"
+                  height={100}
+                  className="text-xs"
+                  tick={{ fontSize: 10 }}
+                />
+                <YAxis
+                  yAxisId="left"
+                  className="text-xs"
+                  tick={{ fontSize: 10 }}
+                  label={{
+                    value: 'Revenue (USD)',
+                    angle: -90,
+                    position: 'insideLeft',
+                    style: { fontSize: 12 },
+                  }}
+                  domain={[0, yAxisMax]}
+                  tickFormatter={value => `$${value.toFixed(0)}`}
+                />
+                <YAxis
+                  yAxisId="right"
+                  orientation="right"
+                  className="text-xs"
+                  tick={{ fontSize: 10 }}
+                  label={{
+                    value: 'Paid Credits (%)',
+                    angle: 90,
+                    position: 'insideRight',
+                    style: { fontSize: 12 },
+                  }}
+                  domain={[0, 100]}
+                  tickFormatter={value => `${value.toFixed(0)}%`}
+                />
+                <Tooltip content={<RevenueTooltip />} />
+                <Legend />
                 <Bar
                   yAxisId="left"
-                  dataKey="freeCredits"
-                  fill="#f59e0b"
-                  name="Free Credits Issued"
+                  dataKey="unmultipliedRevenue"
+                  stackId="legacy"
+                  fill="#16a34a"
+                  name="Revenue Without Multipliers"
                 />
-              )}
-              <Line
-                yAxisId="right"
-                type="monotone"
-                dataKey="paidPercentage"
-                stroke="#2563eb"
-                strokeWidth={2}
-                dot={{ r: 2 }}
-                name="Paid Credits %"
-              />
-            </ComposedChart>
-          </ResponsiveContainer>
-        </div>
+                <Bar
+                  yAxisId="left"
+                  dataKey="multipliedRevenue"
+                  stackId="legacy"
+                  fill="#dc2626"
+                  name="Revenue From Multipliers"
+                />
+                {showFreeCredits && (
+                  <Bar
+                    yAxisId="left"
+                    dataKey="freeCredits"
+                    fill="#f59e0b"
+                    name="Free Credits Issued"
+                  />
+                )}
+                <Bar
+                  yAxisId="left"
+                  dataKey="serviceFee"
+                  fill="#94a3b8"
+                  name="Collected Service Fees"
+                />
+                <Bar
+                  yAxisId="left"
+                  dataKey="missedFees"
+                  stackId="leakage"
+                  fill="#b45309"
+                  fillOpacity={0.55}
+                  name="Missed Fees (Expected)"
+                />
+                <Bar
+                  yAxisId="left"
+                  dataKey="exemptedFees"
+                  stackId="leakage"
+                  fill="#78716c"
+                  fillOpacity={0.55}
+                  name="Exempted Fees (Expected)"
+                />
+                <Bar
+                  yAxisId="left"
+                  dataKey="disputedFees"
+                  stackId="leakage"
+                  fill="#b91c1c"
+                  fillOpacity={0.55}
+                  name="Disputed Fees"
+                />
+                <Line
+                  yAxisId="right"
+                  type="monotone"
+                  dataKey="paidPercentage"
+                  stroke="#2563eb"
+                  strokeWidth={2}
+                  dot={{ r: 2 }}
+                  name="Paid Credits %"
+                />
+              </ComposedChart>
+            </ResponsiveContainer>
+          </div>
+        )}
       </CardContent>
     </Card>
   );
diff --git a/apps/web/src/app/admin/components/RevenueStats.tsx b/apps/web/src/app/admin/components/RevenueStats.tsx
index 003a95c623..1c62a142b4 100644
--- a/apps/web/src/app/admin/components/RevenueStats.tsx
+++ b/apps/web/src/app/admin/components/RevenueStats.tsx
@@ -3,169 +3,208 @@
 import { Card, CardContent } from '@/components/ui/card';
 import type { RevenueKpiData } from '@/lib/revenueKpi';
 import { formatDollars } from '@/lib/utils';
-import { parseISO, format } from 'date-fns';
+import { format, parseISO } from 'date-fns';
 
 type ApiResponse = {
   data: RevenueKpiData[];
 };
 
-export function RevenueStats({ data }: ApiResponse) {
-  const latestData = data[data.length - 1];
+type NumericKey = Exclude<keyof RevenueKpiData, 'transaction_day'>;
 
-  const totals = data.reduce(
-    (acc, item) => ({
-      paid_total_dollars: acc.paid_total_dollars + item.paid_total_dollars,
-      free_total_dollars: acc.free_total_dollars + item.free_total_dollars,
-      multiplied_total_dollars: acc.multiplied_total_dollars + item.multiplied_total_dollars,
-      unmultiplied_total_dollars: acc.unmultiplied_total_dollars + item.unmultiplied_total_dollars,
-      paid_transaction_count: acc.paid_transaction_count + item.paid_transaction_count,
-      free_transaction_count: acc.free_transaction_count + item.free_transaction_count,
-      multiplied_transaction_count:
-        acc.multiplied_transaction_count + item.multiplied_transaction_count,
-      unmultiplied_transaction_count:
-        acc.unmultiplied_transaction_count + item.unmultiplied_transaction_count,
-    }),
-    {
-      paid_total_dollars: 0,
-      free_total_dollars: 0,
-      multiplied_total_dollars: 0,
-      unmultiplied_total_dollars: 0,
-      paid_transaction_count: 0,
-      free_transaction_count: 0,
-      multiplied_transaction_count: 0,
-      unmultiplied_transaction_count: 0,
-    }
-  );
+function sumKey(data: RevenueKpiData[], key: NumericKey): number {
+  return data.reduce((sum, item) => sum + item[key], 0);
+}
 
-  const averages =
-    data.length > 0
-      ? {
-          paid_total_dollars: totals.paid_total_dollars / data.length,
-          free_total_dollars: totals.free_total_dollars / data.length,
-          multiplied_total_dollars: totals.multiplied_total_dollars / data.length,
-          unmultiplied_total_dollars: totals.unmultiplied_total_dollars / data.length,
-          paid_transaction_count: totals.paid_transaction_count / data.length,
-          free_transaction_count: totals.free_transaction_count / data.length,
-          multiplied_transaction_count: totals.multiplied_transaction_count / data.length,
-          unmultiplied_transaction_count: totals.unmultiplied_transaction_count / data.length,
-        }
-      : {
-          paid_total_dollars: 0,
-          free_total_dollars: 0,
-          multiplied_total_dollars: 0,
-          unmultiplied_total_dollars: 0,
-          paid_transaction_count: 0,
-          free_transaction_count: 0,
-          multiplied_transaction_count: 0,
-          unmultiplied_transaction_count: 0,
-        };
+export function RevenueStats({ data }: ApiResponse) {
+  if (data.length === 0) {
+    return (
+      <Card>
+        <CardContent>
+          <p className="text-muted-foreground py-4 text-sm">No revenue data for this range.</p>
+        </CardContent>
+      </Card>
+    );
+  }
+
+  const latestData = data[data.length - 1];
+  const latestDay = format(parseISO(latestData.transaction_day), 'yyyy-MM-dd');
+  const totals = (key: NumericKey) => sumKey(data, key);
+  const averages = (key: NumericKey) => sumKey(data, key) / data.length;
 
   return (
     <Card>
-      <CardContent>
-        <div className="overflow-x-auto">
-          <table className="w-full border-collapse text-sm">
-            <thead>
-              <tr className="border-b">
-                <th className="text-muted-foreground py-2 pr-3 text-left font-medium">Period</th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">
-                  Paid Revenue
-                </th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">
-                  Free Credits
-                </th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">
-                  Multiplied Revenue
-                </th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">
-                  Unmultiplied Revenue
-                </th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">Paid Tx</th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">Free Tx</th>
-                <th className="text-muted-foreground px-3 py-2 text-right font-medium">
-                  Multiplied Tx
-                </th>
-                <th className="text-muted-foreground py-2 pl-3 text-right font-medium">
-                  Unmultiplied Tx
-                </th>
-              </tr>
-            </thead>
-            <tbody>
-              <tr className="border-b">
-                <td className="py-2 pr-3">
-                  Latest day ({format(parseISO(latestData.transaction_day), 'yyyy-MM-dd')})
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(latestData.paid_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(latestData.free_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(latestData.multiplied_total_dollars ?? 0)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(latestData.unmultiplied_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">{latestData.paid_transaction_count}</td>
-                <td className="px-3 py-2 text-right">{latestData.free_transaction_count}</td>
-                <td className="px-3 py-2 text-right">
-                  {latestData.multiplied_transaction_count ?? 0}
-                </td>
-                <td className="py-2 pl-3 text-right">
-                  {latestData.unmultiplied_transaction_count}
-                </td>
-              </tr>
-
-              <tr className="border-b">
-                <td className="py-2 pr-3">
-                  Total ({data.length} {data.length === 1 ? 'day' : 'days'})
-                </td>
-                <td className="px-3 py-2 text-right">{formatDollars(totals.paid_total_dollars)}</td>
-                <td className="px-3 py-2 text-right">{formatDollars(totals.free_total_dollars)}</td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(totals.multiplied_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(totals.unmultiplied_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">{totals.paid_transaction_count}</td>
-                <td className="px-3 py-2 text-right">{totals.free_transaction_count}</td>
-                <td className="px-3 py-2 text-right">{totals.multiplied_transaction_count}</td>
-                <td className="py-2 pl-3 text-right">{totals.unmultiplied_transaction_count}</td>
-              </tr>
+      <CardContent className="space-y-6">
+        <div>
+          <div className="overflow-x-auto">
+            <table className="w-full border-collapse text-sm">
+              <thead>
+                <tr className="border-b">
+                  <th className="text-muted-foreground py-2 pr-3 text-left font-medium">Period</th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Paid Revenue
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Free Credits
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Multiplied Revenue
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Unmultiplied Revenue
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Paid Tx
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Free Tx
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Multiplied Tx
+                  </th>
+                  <th className="text-muted-foreground py-2 pl-3 text-right font-medium">
+                    Unmultiplied Tx
+                  </th>
+                </tr>
+              </thead>
+              <tbody>
+                <CreditRow
+                  label={`Latest day (${latestDay})`}
+                  value={key => latestData[key]}
+                  countDecimals={false}
+                />
+                <CreditRow
+                  label={`Total (${data.length} ${data.length === 1 ? 'day' : 'days'})`}
+                  value={totals}
+                  countDecimals={false}
+                />
+                <CreditRow label="Average per day" value={averages} countDecimals />
+              </tbody>
+            </table>
+          </div>
+          <p className="text-muted-foreground mt-2 text-xs">
+            These credit-transaction figures keep their existing semantics, including no refund or
+            dispute adjustment.
+          </p>
+        </div>
 
-              <tr>
-                <td className="py-2 pr-3">Average per day</td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(averages.paid_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(averages.free_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(averages.multiplied_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {formatDollars(averages.unmultiplied_total_dollars)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {averages.paid_transaction_count.toFixed(1)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {averages.free_transaction_count.toFixed(1)}
-                </td>
-                <td className="px-3 py-2 text-right">
-                  {averages.multiplied_transaction_count.toFixed(1)}
-                </td>
-                <td className="py-2 pl-3 text-right">
-                  {averages.unmultiplied_transaction_count.toFixed(1)}
-                </td>
-              </tr>
-            </tbody>
-          </table>
+        <div>
+          <h3 className="mb-2 text-sm font-medium">Service fees (settled date, UTC)</h3>
+          <div className="overflow-x-auto">
+            <table className="w-full border-collapse text-sm">
+              <thead>
+                <tr className="border-b">
+                  <th className="text-muted-foreground py-2 pr-3 text-left font-medium">Period</th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Collected Fees
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Missed Fees
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Exempted Fees
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Disputed Fees
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">
+                    Charged
+                  </th>
+                  <th className="text-muted-foreground px-3 py-2 text-right font-medium">Missed</th>
+                  <th className="text-muted-foreground py-2 pl-3 text-right font-medium">Exempt</th>
+                </tr>
+              </thead>
+              <tbody>
+                <FeeRow
+                  label={`Latest day (${latestDay} UTC)`}
+                  value={key => latestData[key]}
+                  countDecimals={false}
+                />
+                <FeeRow
+                  label={`Total (${data.length} ${data.length === 1 ? 'day' : 'days'})`}
+                  value={totals}
+                  countDecimals={false}
+                />
+                <FeeRow label="Average per day" value={averages} countDecimals />
+              </tbody>
+            </table>
+          </div>
+          <p className="text-muted-foreground mt-2 text-xs">
+            Fee figures include settled assessments only. They do not make this dashboard a complete
+            Stripe product-revenue report; Kilo Pass product revenue is not added here.
+          </p>
         </div>
       </CardContent>
     </Card>
   );
 }
+
+type RowProps = {
+  label: string;
+  value: (key: NumericKey) => number;
+  countDecimals: boolean;
+};
+
+function formatCount(value: number, decimals: boolean): string | number {
+  return decimals ? value.toFixed(1) : value;
+}
+
+function CreditRow({ label, value, countDecimals }: RowProps) {
+  return (
+    <tr className="border-b last:border-b-0">
+      <td className="py-2 pr-3">{label}</td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('paid_total_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('free_total_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('multiplied_total_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('unmultiplied_total_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatCount(value('paid_transaction_count'), countDecimals)}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatCount(value('free_transaction_count'), countDecimals)}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatCount(value('multiplied_transaction_count'), countDecimals)}
+      </td>
+      <td className="py-2 pl-3 text-right tabular-nums">
+        {formatCount(value('unmultiplied_transaction_count'), countDecimals)}
+      </td>
+    </tr>
+  );
+}
+
+function FeeRow({ label, value, countDecimals }: RowProps) {
+  return (
+    <tr className="border-b last:border-b-0">
+      <td className="py-2 pr-3">{label}</td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('collected_service_fee_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('missed_service_fee_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('exempted_service_fee_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatDollars(value('disputed_service_fee_dollars'))}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatCount(value('service_fee_charged_count'), countDecimals)}
+      </td>
+      <td className="px-3 py-2 text-right tabular-nums">
+        {formatCount(value('service_fee_missed_count'), countDecimals)}
+      </td>
+      <td className="py-2 pl-3 text-right tabular-nums">
+        {formatCount(value('service_fee_exempt_count'), countDecimals)}
+      </td>
+    </tr>
+  );
+}
diff --git a/apps/web/src/app/admin/revenue/page.tsx b/apps/web/src/app/admin/revenue/page.tsx
index 99c8def7b5..40cc032326 100644
--- a/apps/web/src/app/admin/revenue/page.tsx
+++ b/apps/web/src/app/admin/revenue/page.tsx
@@ -8,6 +8,7 @@ import type { RevenueKpiResponse } from '@/lib/revenueKpi';
 import { format, subDays } from 'date-fns';
 import AdminPage from '@/app/admin/components/AdminPage';
 import { BreadcrumbItem, BreadcrumbPage } from '@/components/ui/breadcrumb';
+import { revenueDashboardStatus } from '@/app/admin/revenue/revenue-dashboard-status';
 
 const breadcrumbs = (
   <>
@@ -60,6 +61,7 @@ export default function RevenuePage() {
     refetchInterval: 60000,
   });
 
+  const status = revenueDashboardStatus({ isLoading, error, data });
   const multiplierCategoriesNote = data?.multiplierCategories ? (
     <div className="rounded-lg border border-blue-200 bg-blue-50 p-3">
       <div className="mb-1 text-sm font-medium text-blue-800">Multiplier Categories</div>
@@ -69,51 +71,6 @@ export default function RevenuePage() {
     </div>
   ) : null;
 
-  if (isLoading) {
-    return (
-      <AdminPage breadcrumbs={breadcrumbs}>
-        <div className="flex w-full flex-col gap-y-4">
-          <div className="flex items-center justify-between">
-            <h2 className="text-2xl font-bold">Revenue KPI Dashboard</h2>
-          </div>
-          <div className="text-muted-foreground space-y-2">
-            <p>
-              This dashboard provides insights into revenue metrics, trends, and performance
-              indicators.
-            </p>
-          </div>
-          <div>Loading...</div>
-        </div>
-      </AdminPage>
-    );
-  }
-
-  if (error || !data || !data.data.length) {
-    return (
-      <AdminPage breadcrumbs={breadcrumbs}>
-        <div className="flex w-full flex-col gap-y-4">
-          <div className="flex items-center justify-between">
-            <h2 className="text-2xl font-bold">Revenue KPI Dashboard</h2>
-          </div>
-          <div className="text-muted-foreground space-y-2">
-            <p>
-              This dashboard provides insights into revenue metrics, trends, and performance
-              indicators.
-            </p>
-          </div>
-          <div className="text-red-500">
-            Error:{' '}
-            {error instanceof Error
-              ? error.message
-              : !data
-                ? 'Response missing'
-                : 'An error occurred'}
-          </div>
-        </div>
-      </AdminPage>
-    );
-  }
-
   return (
     <AdminPage breadcrumbs={breadcrumbs}>
       <div className="flex w-full flex-col gap-y-4">
@@ -225,8 +182,28 @@ export default function RevenuePage() {
 
         {multiplierCategoriesNote}
 
-        <RevenueStats {...data} />
-        <RevenueDailyChart {...data} showFreeCredits={showFreeCredits} />
+        {status === 'loading' ? <div>Loading...</div> : null}
+        {status === 'error' ? (
+          <div className="text-red-500">
+            Error:{' '}
+            {error instanceof Error
+              ? error.message
+              : !data
+                ? 'Response missing'
+                : 'An error occurred'}
+          </div>
+        ) : null}
+        {status === 'empty' ? (
+          <div className="text-muted-foreground text-sm">
+            No revenue in this range. Choose Custom to include today; presets end yesterday.
+          </div>
+        ) : null}
+        {status === 'ready' && data ? (
+          <>
+            <RevenueStats {...data} />
+            <RevenueDailyChart {...data} showFreeCredits={showFreeCredits} />
+          </>
+        ) : null}
       </div>
     </AdminPage>
   );
diff --git a/apps/web/src/app/admin/revenue/revenue-dashboard-status.test.ts b/apps/web/src/app/admin/revenue/revenue-dashboard-status.test.ts
new file mode 100644
index 0000000000..5818685e3b
--- /dev/null
+++ b/apps/web/src/app/admin/revenue/revenue-dashboard-status.test.ts
@@ -0,0 +1,48 @@
+import { describe, expect, test } from '@jest/globals';
+import { revenueDashboardStatus } from './revenue-dashboard-status';
+import type { RevenueKpiResponse } from '@/lib/revenueKpi';
+
+const emptyResponse = { data: [] } as unknown as RevenueKpiResponse;
+const readyResponse = { data: [{ date: '2026-08-11' }] } as unknown as RevenueKpiResponse;
+
+describe('revenueDashboardStatus', () => {
+  test('treats an empty daily series as empty, not an error', () => {
+    expect(
+      revenueDashboardStatus({
+        isLoading: false,
+        error: null,
+        data: emptyResponse,
+      })
+    ).toBe('empty');
+  });
+
+  test('keeps fetch failures as errors', () => {
+    expect(
+      revenueDashboardStatus({
+        isLoading: false,
+        error: new Error('Failed to fetch daily revenue statistics'),
+        data: undefined,
+      })
+    ).toBe('error');
+  });
+
+  test('treats a missing response without an error as loading', () => {
+    expect(
+      revenueDashboardStatus({
+        isLoading: false,
+        error: null,
+        data: undefined,
+      })
+    ).toBe('loading');
+  });
+
+  test('is ready when the series has rows', () => {
+    expect(
+      revenueDashboardStatus({
+        isLoading: false,
+        error: null,
+        data: readyResponse,
+      })
+    ).toBe('ready');
+  });
+});
diff --git a/apps/web/src/app/admin/revenue/revenue-dashboard-status.ts b/apps/web/src/app/admin/revenue/revenue-dashboard-status.ts
new file mode 100644
index 0000000000..962aa9db9d
--- /dev/null
+++ b/apps/web/src/app/admin/revenue/revenue-dashboard-status.ts
@@ -0,0 +1,15 @@
+import type { RevenueKpiResponse } from '@/lib/revenueKpi';
+
+export type RevenueDashboardStatus = 'loading' | 'error' | 'empty' | 'ready';
+
+export function revenueDashboardStatus(input: {
+  isLoading: boolean;
+  error: unknown;
+  data: RevenueKpiResponse | undefined;
+}): RevenueDashboardStatus {
+  if (input.isLoading) return 'loading';
+  if (input.error) return 'error';
+  if (!input.data) return 'loading';
+  if (input.data.data.length === 0) return 'empty';
+  return 'ready';
+}
diff --git a/apps/web/src/emails/AGENTS.md b/apps/web/src/emails/AGENTS.md
index a618ca490f..66bcdad129 100644
--- a/apps/web/src/emails/AGENTS.md
+++ b/apps/web/src/emails/AGENTS.md
@@ -97,7 +97,7 @@ Every template must include this branding footer below the content table:
 | `accountDeletionRequest.html` | `email`, `year` | — |
 | `userDataExportReady.html` | `data_exports_url`, `expiry_date`, `year` | — |
 | `dataExportDownloadCode.html` | `code`, `email`, `expires_in`, `year` | — |
-| `creditsTopUp.html` | `heading`, `intro`, `amount_usd`, `credits_usd`, `purchase_date`, `credits_url`, `receipt_section`, `year`. Org variants render org-specific copy into `intro` before template rendering; when provided, the organization name is interpolated there rather than passed as a separate template variable. | — |
+| `creditsTopUp.html` | `heading`, `intro`, `amount_label`, `amount_usd`, `service_fee_section`, `credits_row_section`, `purchase_date`, `credits_url`, `receipt_section`, `year`. `amount_label` is `Amount` when there is no service fee and `Credits added` when `serviceFeeCents > 0`. `service_fee_section` and `credits_row_section` are escaped RawHtml built in `email.ts`: fee-free top-ups keep the current Amount/Credits/Date summary, and a charged fee replaces that with Credits added / Service fee (5%) / Total paid / Date. Do not put exemption or fee-failure reasons in this email. Org variants render org-specific copy into `intro` before template rendering; when provided, the organization name is interpolated there rather than passed as a separate template variable. | — |
 | `kiloClawSubscriptionStarted.html` | `plan_name`, `price_usd`, `billing_period`, `next_billing_date`, `manage_url`, `year` | — |
 | `securityFindingNew.html` | `severity`, `repository_name`, `finding_title`, `finding_description`, `finding_details`, `action_url`, `manage_notifications_url`, `year` | — |
 | `securityFindingSlaWarning.html` | `severity`, `repository_name`, `finding_title`, `finding_description`, `finding_details`, `sla_deadline`, `action_url`, `manage_notifications_url`, `year` | — |
diff --git a/apps/web/src/emails/creditsTopUp.html b/apps/web/src/emails/creditsTopUp.html
index 0af90f31ac..505a0bb8e8 100644
--- a/apps/web/src/emails/creditsTopUp.html
+++ b/apps/web/src/emails/creditsTopUp.html
@@ -77,21 +77,10 @@
                             sans-serif;
                         "
                       >
-                        <strong style="color: #1a1a1a">Amount:</strong> ${{ amount_usd }} USD
-                      </p>
-                      <p
-                        style="
-                          margin: 0 0 8px;
-                          font-size: 13px;
-                          line-height: 20px;
-                          color: #555;
-                          font-family:
-                            -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial,
-                            sans-serif;
-                        "
-                      >
-                        <strong style="color: #1a1a1a">Credits:</strong> ${{ credits_usd }} USD
+                        <strong style="color: #1a1a1a">{{ amount_label }}:</strong>
+                        ${{ amount_usd }} USD
                       </p>
+                      {{ service_fee_section }} {{ credits_row_section }}
                       <p
                         style="
                           margin: 0;
diff --git a/apps/web/src/lib/autoTopUp.test.ts b/apps/web/src/lib/autoTopUp.test.ts
index 31be4296cb..0c161f0e7d 100644
--- a/apps/web/src/lib/autoTopUp.test.ts
+++ b/apps/web/src/lib/autoTopUp.test.ts
@@ -38,6 +38,7 @@ jest.mock('@/lib/stripe-client', () => {
     client: {
       invoices: {
         create: jest.fn(function (this: void) {}),
+        update: jest.fn(function (this: void) {}),
         pay: jest.fn(function (this: void) {}),
       },
       invoiceItems: {
@@ -639,7 +640,14 @@ describe('maybePerformAutoTopUp with Kilo Pass', () => {
     });
 
     const { client } = await import('@/lib/stripe-client');
-    (client.invoices.create as jest.Mock).mockResolvedValue({ id: 'inv_test_1' });
+    (client.invoices.create as jest.Mock).mockResolvedValue({
+      id: 'inv_test_1',
+      created: 1_700_000_000,
+    });
+    (client.invoices.update as jest.Mock).mockResolvedValue({
+      id: 'inv_test_1',
+      created: 1_700_000_000,
+    });
     (client.invoiceItems.create as jest.Mock).mockResolvedValue({ id: 'ii_test_1' });
     (client.invoices.pay as jest.Mock).mockResolvedValue({ status: 'paid' });
 
@@ -673,7 +681,14 @@ describe('invoice metadata includes traceId', () => {
     });
 
     const { client } = await import('@/lib/stripe-client');
-    (client.invoices.create as jest.Mock).mockResolvedValue({ id: 'inv_trace_test' });
+    (client.invoices.create as jest.Mock).mockResolvedValue({
+      id: 'inv_trace_test',
+      created: 1_700_000_000,
+    });
+    (client.invoices.update as jest.Mock).mockResolvedValue({
+      id: 'inv_trace_test',
+      created: 1_700_000_000,
+    });
     (client.invoiceItems.create as jest.Mock).mockResolvedValue({ id: 'ii_trace_test' });
     (client.invoices.pay as jest.Mock).mockResolvedValue({ id: 'inv_trace_test', status: 'paid' });
 
@@ -687,9 +702,28 @@ describe('invoice metadata includes traceId', () => {
       expect.objectContaining({
         metadata: expect.objectContaining({
           traceId: expect.stringMatching(uuidPattern),
+          type: 'auto-topup',
+          serviceFeePrincipalMinor: '5000',
+          serviceFeeFlow: 'personal_auto_top_up',
+        }),
+      })
+    );
+    expect(client.invoices.update).toHaveBeenCalledWith(
+      'inv_trace_test',
+      expect.objectContaining({
+        metadata: expect.objectContaining({
+          serviceFeePrincipalMinor: '5000',
+          serviceFeeAssessmentKey: expect.stringMatching(/^invoice:inv_trace_test$/),
         }),
       })
     );
+    expect(client.invoiceItems.create).toHaveBeenCalledTimes(1);
+    expect(client.invoiceItems.create).toHaveBeenCalledWith(
+      expect.objectContaining({
+        amount: 5000,
+        description: 'Kilo automatic top up',
+      })
+    );
   });
 });
 
diff --git a/apps/web/src/lib/autoTopUp.ts b/apps/web/src/lib/autoTopUp.ts
index 39c54e147c..6c27b28e05 100644
--- a/apps/web/src/lib/autoTopUp.ts
+++ b/apps/web/src/lib/autoTopUp.ts
@@ -27,6 +27,29 @@ import {
   ORG_AUTO_TOP_UP_THRESHOLD_DOLLARS,
   DEFAULT_AUTO_TOP_UP_AMOUNT_CENTS,
 } from '@/lib/autoTopUpConstants';
+import {
+  attachPreparedAutoTopUpInvoiceFee,
+  mergeServiceFeeCommercialMetadata,
+  prepareAutoTopUpInvoiceFee,
+  type ServiceFeeCheckoutDependencies,
+} from '@/lib/service-fees/checkout';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import { getEffectiveOrganizationServiceFeeExemption } from '@/lib/service-fees/organization-exemptions';
+
+function createAutoTopUpFeeDeps(): ServiceFeeCheckoutDependencies {
+  const stores = createServiceFeeStores();
+  return {
+    store: stores.assessments,
+    findEffectiveExemption: async (organizationId, at) =>
+      getEffectiveOrganizationServiceFeeExemption({
+        store: stores.exemptions,
+        organizationId,
+        at,
+      }),
+    stripe: client,
+    createInvoiceItem: params => client.invoiceItems.create(params),
+  };
+}
 
 const ATTEMPT_LOCK_TIMEOUT_SECONDS = 60 * 60 * 2; // 2 hours (covers delayed webhook delivery)
 
@@ -264,13 +287,48 @@ async function performAutoTopUpForEntity(
         ? { type: 'auto-topup', kiloUserId: entity.user.id, traceId }
         : { type: 'org-auto-topup', organizationId: entity.organization.id, traceId };
 
+    const flow = entity.type === 'user' ? 'personal_auto_top_up' : 'organization_auto_top_up';
     const invoice = await client.invoices.create({
       customer: stripe_customer_id,
       auto_advance: false,
-      metadata: invoiceMetadata,
+      metadata: {
+        ...invoiceMetadata,
+        serviceFeePrincipalMinor: String(amountCents),
+        serviceFeeFlow: flow,
+      },
       description: 'Kilo automatic top up',
     });
 
+    const feeDeps = createAutoTopUpFeeDeps();
+    const preparedFee = await prepareAutoTopUpInvoiceFee({
+      flow,
+      invoiceId: invoice.id,
+      principalMinor: amountCents,
+      kiloUserId: entity.type === 'user' ? entity.user.id : undefined,
+      organizationId: entity.type === 'organization' ? entity.organization.id : undefined,
+      stripeCustomerId: stripe_customer_id,
+      invoiceCreated: invoice.created ? new Date(invoice.created * 1000) : undefined,
+      taxPrincipal: { kind: 'inline' },
+      deps: feeDeps,
+    });
+
+    try {
+      await client.invoices.update(invoice.id, {
+        metadata: mergeServiceFeeCommercialMetadata(
+          {
+            ...invoiceMetadata,
+            serviceFeePrincipalMinor: String(amountCents),
+          },
+          preparedFee.commercialMetadata
+        ),
+      });
+    } catch (metadataError) {
+      captureException(metadataError, {
+        tags: { source: 'auto_top_up_service_fee_metadata' },
+        extra: { invoice_id: invoice.id, flow },
+      });
+    }
+
     // Attach the line item directly to this invoice.
     // (Creating a pending invoice item and then creating an invoice can produce a $0 invoice,
     // depending on Stripe's pending_invoice_items_behavior defaults.)
@@ -281,6 +339,10 @@ async function performAutoTopUpForEntity(
       currency: 'usd',
       description: 'Kilo automatic top up',
     });
+    await attachPreparedAutoTopUpInvoiceFee({
+      prepared: preparedFee,
+      deps: feeDeps,
+    });
 
     // Pay the invoice. The PaymentIntent is created during payment, not finalization.
     const paidInvoice = await client.invoices.pay(invoice.id, {
diff --git a/apps/web/src/lib/credits.test.ts b/apps/web/src/lib/credits.test.ts
index 2d369c9fa7..4bfc75ecf6 100644
--- a/apps/web/src/lib/credits.test.ts
+++ b/apps/web/src/lib/credits.test.ts
@@ -10,6 +10,10 @@ jest.mock('@/lib/firstTopupBonus', () => ({
   processFirstTopupBonus: jest.fn(),
 }));
 
+jest.mock('@/lib/email', () => ({
+  sendCreditsTopUpEmail: jest.fn(async () => ({ sent: true })),
+}));
+
 describe('processTopUp', () => {
   beforeEach(() => {
     jest.clearAllMocks();
diff --git a/apps/web/src/lib/credits.ts b/apps/web/src/lib/credits.ts
index a2c0110e0f..e4e4a6a7e9 100644
--- a/apps/web/src/lib/credits.ts
+++ b/apps/web/src/lib/credits.ts
@@ -20,6 +20,15 @@ type ProcessTopUpOptions = {
   /** If true, this is a native auto top-up (not Orb) */
   isAutoTopUp?: boolean;
 
+  /** Observed service fee in minor units. Omitted or 0 hides the email fee row. */
+  serviceFeeCents?: number;
+
+  /** Gross amount paid in minor units, including fee and tax when present. */
+  grossPaidCents?: number;
+
+  /** Credits granted in minor units. Defaults to the trusted principal. */
+  creditsCents?: number;
+
   /**
    * Optional transaction handle.
    *
@@ -66,6 +75,9 @@ export async function processTopUp(
     creditDescription: creditDescriptionOverride,
     creditTransactionId: creditTransactionIdOverride,
     skipPostTopUpFreeStuff = false,
+    serviceFeeCents = 0,
+    grossPaidCents = amountInCents,
+    creditsCents = amountInCents,
   } = options;
 
   const creditDescription =
@@ -117,6 +129,9 @@ export async function processTopUp(
       await recoverTopUpConfirmationEmailIfMissing({
         user,
         amountInCents,
+        serviceFeeCents,
+        grossPaidCents,
+        creditsCents,
         stripeChargeOrInvoiceId: config.stripe_payment_id,
         isAutoTopUp,
       });
@@ -178,6 +193,9 @@ export async function processTopUp(
     await maybeSendTopUpConfirmationEmail({
       user,
       amountInCents,
+      serviceFeeCents,
+      grossPaidCents,
+      creditsCents,
       stripeChargeOrInvoiceId: config.stripe_payment_id,
       isAutoTopUp,
     });
@@ -245,11 +263,23 @@ async function runPostTopUpBestEffortStep(params: {
 async function maybeSendTopUpConfirmationEmail(params: {
   user: User;
   amountInCents: number;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
   stripeChargeOrInvoiceId: string;
   isAutoTopUp: boolean;
   purchaseDate?: Date;
 }): Promise<void> {
-  const { user, amountInCents, stripeChargeOrInvoiceId, isAutoTopUp, purchaseDate } = params;
+  const {
+    user,
+    amountInCents,
+    serviceFeeCents = 0,
+    grossPaidCents = amountInCents,
+    creditsCents = amountInCents,
+    stripeChargeOrInvoiceId,
+    isAutoTopUp,
+    purchaseDate,
+  } = params;
   try {
     const insertResult = await db
       .insert(transactional_email_log)
@@ -269,8 +299,10 @@ async function maybeSendTopUpConfirmationEmail(params: {
     const sendResult = await sendCreditsTopUpEmail({
       to: user.google_user_email,
       variant: isAutoTopUp ? 'auto' : 'manual',
-      amountCents: amountInCents,
-      creditsCents: amountInCents,
+      principalCents: amountInCents,
+      serviceFeeCents,
+      grossPaidCents,
+      creditsCents,
       purchaseDate: purchaseDate ?? new Date(),
       receiptUrl,
     });
@@ -306,6 +338,9 @@ async function maybeSendTopUpConfirmationEmail(params: {
 async function recoverTopUpConfirmationEmailIfMissing(params: {
   user: User;
   amountInCents: number;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
   stripeChargeOrInvoiceId: string;
   isAutoTopUp: boolean;
 }): Promise<void> {
diff --git a/apps/web/src/lib/email.ts b/apps/web/src/lib/email.ts
index 2eaeaa6f16..d55bffcd76 100644
--- a/apps/web/src/lib/email.ts
+++ b/apps/web/src/lib/email.ts
@@ -528,7 +528,9 @@ export type CreditsTopUpVariant = keyof typeof CREDITS_TOPUP_COPY;
 
 type BaseSendCreditsTopUpEmailProps = {
   to: string;
-  amountCents: number;
+  principalCents: number;
+  serviceFeeCents: number;
+  grossPaidCents: number;
   creditsCents: number;
   purchaseDate: Date;
   receiptUrl?: string | null;
@@ -567,6 +569,42 @@ function formatUsd(cents: number): string {
   return (cents / 100).toFixed(2);
 }
 
+const TOP_UP_INFO_ROW_STYLE =
+  "margin: 0 0 8px; font-size: 13px; line-height: 20px; color: #555; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif";
+
+export function buildCreditsTopUpInfoRow(label: string, value: string): string {
+  return `<p style="${TOP_UP_INFO_ROW_STYLE}"><strong style="color: #1a1a1a">${escapeHtml(label)}:</strong> ${escapeHtml(value)}</p>`;
+}
+
+// Optional fee + total-paid rows. Fee-free callers get empty HTML so the
+// template can keep the Amount/Credits summary with no exemption copy.
+export function buildCreditsTopUpServiceFeeSection(params: {
+  serviceFeeCents: number;
+  grossPaidCents: number;
+}): RawHtml {
+  if (params.serviceFeeCents <= 0) {
+    return new RawHtml('');
+  }
+
+  return new RawHtml(
+    buildCreditsTopUpInfoRow('Service fee (5%)', `$${formatUsd(params.serviceFeeCents)} USD`) +
+      buildCreditsTopUpInfoRow('Total paid', `$${formatUsd(params.grossPaidCents)} USD`)
+  );
+}
+
+// Fee itemization already labels the granted amount as Credits added, so this
+// row is omitted when a fee is charged. Fee-free callers keep Credits.
+export function buildCreditsTopUpCreditsRowSection(params: {
+  creditsCents: number;
+  hasServiceFee: boolean;
+}): RawHtml {
+  if (params.hasServiceFee) {
+    return new RawHtml('');
+  }
+
+  return new RawHtml(buildCreditsTopUpInfoRow('Credits', `$${formatUsd(params.creditsCents)} USD`));
+}
+
 function formatDate(date: Date): string {
   // Dates surfaced to end-users; the server locale is stable (UTC in prod) so
   // explicit en-US formatting avoids surprise month-name changes in tests.
@@ -592,6 +630,7 @@ export async function sendCreditsTopUpEmail(
   const credits_url = isOrgVariant
     ? props.creditsUrl || `${NEXTAUTH_URL}/organizations/${props.organizationId}/payment-details`
     : `${NEXTAUTH_URL}/credits`;
+  const hasServiceFee = props.serviceFeeCents > 0;
   return send({
     to: props.to,
     templateName: 'creditsTopUp',
@@ -599,8 +638,16 @@ export async function sendCreditsTopUpEmail(
     templateVars: {
       heading: copy.heading,
       intro: copy.intro(organizationName),
-      amount_usd: formatUsd(props.amountCents),
-      credits_usd: formatUsd(props.creditsCents),
+      amount_label: hasServiceFee ? 'Credits added' : 'Amount',
+      amount_usd: formatUsd(props.principalCents),
+      service_fee_section: buildCreditsTopUpServiceFeeSection({
+        serviceFeeCents: props.serviceFeeCents,
+        grossPaidCents: props.grossPaidCents,
+      }),
+      credits_row_section: buildCreditsTopUpCreditsRowSection({
+        creditsCents: props.creditsCents,
+        hasServiceFee,
+      }),
       purchase_date: formatDate(props.purchaseDate),
       credits_url,
       receipt_section: buildCreditsTopUpReceiptSection(props.receiptUrl),
diff --git a/apps/web/src/lib/kilo-pass-org/stripe-adapter.test.ts b/apps/web/src/lib/kilo-pass-org/stripe-adapter.test.ts
index 4e72bee5cd..308a83c947 100644
--- a/apps/web/src/lib/kilo-pass-org/stripe-adapter.test.ts
+++ b/apps/web/src/lib/kilo-pass-org/stripe-adapter.test.ts
@@ -1,5 +1,29 @@
 import { beforeEach, describe, expect, jest, test } from '@jest/globals';
 import type Stripe from 'stripe';
+import { SEAT_PRODUCT_IDS } from '@/lib/organizations/stripe-seat-line-items';
+import {
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  createInvoiceServiceFeeAssessmentKey,
+  SERVICE_FEE_FAILURE_APPLICATION,
+} from '@/lib/service-fees/checkout';
+import type { KiloPassInvoiceCreatedDependencies } from '@/lib/service-fees/invoice-created';
+import { buildServiceFeeLineMetadata } from '@/lib/service-fees/stripe-lines';
+import type { KiloPassServiceFeeSettlementStripe } from '@/lib/service-fees/settlement';
+import type { OrganizationKiloPassSeatCapacityStripe } from '@/lib/kilo-pass-org/stripe-adapter';
 
 const retrieve =
   jest.fn<
@@ -14,6 +38,33 @@ const invoicePaymentsList =
   jest.fn<
     (params: Stripe.InvoicePaymentListParams) => Promise<Stripe.ApiList<Stripe.InvoicePayment>>
   >();
+const invoiceItemCreate =
+  jest.fn<
+    (params: Stripe.InvoiceItemCreateParams) => Promise<Pick<Stripe.InvoiceItem, 'id' | 'amount'>>
+  >();
+const invoiceItemDel = jest.fn<(id: string) => Promise<unknown>>();
+
+function createdInvoiceItemAssessmentKey(): string | undefined {
+  const metadata = invoiceItemCreate.mock.calls[0]?.[0]?.metadata;
+  if (!metadata || typeof metadata !== 'object') return undefined;
+  const value = metadata.serviceFeeAssessmentKey;
+  return typeof value === 'string' ? value : undefined;
+}
+const listLineItems =
+  jest.fn<
+    (
+      invoiceId: string,
+      params?: Stripe.InvoiceListLineItemsParams
+    ) => Promise<Pick<Stripe.ApiList<Stripe.InvoiceLineItem>, 'data' | 'has_more'>>
+  >();
+const createPreview =
+  jest.fn<
+    (
+      params: Stripe.InvoiceCreatePreviewParams
+    ) => Promise<
+      Pick<Stripe.Invoice, 'id' | 'currency' | 'customer' | 'created' | 'status' | 'lines'>
+    >
+  >();
 const select = jest.fn();
 const selectOrderBy = jest.fn();
 const updateDb = jest.fn();
@@ -28,6 +79,8 @@ jest.mock('@/lib/stripe-client', () => ({
   client: {
     subscriptions: { retrieve, update },
     invoicePayments: { list: invoicePaymentsList },
+    invoiceItems: { create: invoiceItemCreate, del: invoiceItemDel },
+    invoices: { listLineItems, createPreview },
     subscriptionSchedules: {
       create: scheduleCreate,
       update: scheduleUpdate,
@@ -52,9 +105,16 @@ jest.mock('@/lib/kilo-pass/stripe-price-ids.server', () => ({
   getKnownStripePriceIdsForKiloPass: () => ['price_pass'],
   getStripePriceIdForKiloPass: () => 'price_pass',
 }));
-jest.mock('@/lib/organizations/stripe-seat-line-items', () => ({
-  isSeatLineItem: (item: { id: string }) => item.id === 'si_seat',
-}));
+jest.mock('@/lib/organizations/stripe-seat-line-items', () => {
+  const actual = jest.requireActual('@/lib/organizations/stripe-seat-line-items') as {
+    isSeatLineItem: (item: { id: string }) => boolean;
+    SEAT_PRODUCT_IDS: Set<string>;
+  };
+  return {
+    ...actual,
+    isSeatLineItem: (item: { id: string }) => item.id === 'si_seat',
+  };
+});
 
 const subscription = (overrides: Partial<Stripe.Subscription> = {}) =>
   ({
@@ -124,6 +184,9 @@ describe('organization Kilo Pass Stripe adapter', () => {
       has_more: false,
       url: '/v1/invoice_payments',
     });
+    listLineItems.mockResolvedValue({ data: [], has_more: false });
+    invoiceItemCreate.mockResolvedValue({ id: 'ii_fee', amount: 245 });
+    invoiceItemDel.mockResolvedValue({});
   });
 
   test('derives paid capacity and bridge issuance window from immutable invoice lines', async () => {
@@ -292,6 +355,68 @@ describe('organization Kilo Pass Stripe adapter', () => {
     );
   });
 
+  test('ignores unused-time proration quantity when remaining time is also on the invoice', async () => {
+    retrieve.mockResolvedValue(
+      subscription({
+        items: {
+          data: [
+            {
+              id: 'si_seat',
+              quantity: 2,
+              price: { id: 'price_seat', recurring: { interval: 'month' } },
+            },
+            {
+              id: 'si_pass',
+              quantity: 2,
+              price: { id: 'price_pass', recurring: { interval: 'month' } },
+            },
+          ],
+        } as Stripe.ApiList<Stripe.SubscriptionItem>,
+      })
+    );
+    const invoice = {
+      parent: { subscription_details: { subscription: 'sub_1' } },
+      lines: {
+        data: [
+          {
+            id: 'line_seat_unused',
+            amount: -1_798,
+            quantity: 1,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_seat' } },
+          },
+          {
+            id: 'line_pass_unused',
+            amount: -1_898,
+            quantity: 1,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+          },
+          {
+            id: 'line_seat_remaining',
+            amount: 3_595,
+            quantity: 2,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_seat' } },
+          },
+          {
+            id: 'line_pass_remaining',
+            amount: 3_795,
+            quantity: 2,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+          },
+        ],
+      },
+    } as unknown as Stripe.Invoice;
+    const { handleOrganizationKiloPassInvoicePaid } = await import('./stripe-adapter');
+
+    await expect(handleOrganizationKiloPassInvoicePaid({ invoice })).resolves.toBe(true);
+    expect(activatePaidAgreement).toHaveBeenCalledWith(
+      expect.objectContaining({ paidSeatCount: 2 })
+    );
+  });
+
   test('returns a PaymentIntent client secret for payment authentication', async () => {
     retrieve.mockResolvedValue(
       subscription({ items: { ...subscription().items, data: [subscription().items.data[0]!] } })
@@ -334,7 +459,7 @@ describe('organization Kilo Pass Stripe adapter', () => {
       expect.objectContaining({
         payment_behavior: 'allow_incomplete',
         proration_behavior: 'always_invoice',
-        expand: ['latest_invoice.confirmation_secret'],
+        expand: ['latest_invoice.confirmation_secret', 'latest_invoice.lines'],
       })
     );
     expect(invoicePaymentsList).toHaveBeenCalledWith({
@@ -1077,4 +1202,1488 @@ describe('organization Kilo Pass Stripe adapter', () => {
       cancellation_effective_at: null,
     });
   });
+
+  test('binds the persisted provider item instead of the first non-seat item', async () => {
+    const { resolveOrganizationKiloPassSubscriptionItem, handleOrganizationKiloPassInvoicePaid } =
+      await import('./stripe-adapter');
+    const mixed = subscription({
+      items: {
+        data: [
+          subscription().items.data[0]!,
+          {
+            id: 'si_other',
+            quantity: 1,
+            price: { id: 'price_other', recurring: { interval: 'month' } },
+            current_period_start: 1_767_225_600,
+            current_period_end: 1_769_904_000,
+          },
+          subscription().items.data[1]!,
+        ],
+      } as Stripe.ApiList<Stripe.SubscriptionItem>,
+    });
+    expect(
+      resolveOrganizationKiloPassSubscriptionItem({
+        subscription: mixed,
+        boundProviderItemId: 'si_pass',
+      })?.id
+    ).toBe('si_pass');
+
+    retrieve.mockResolvedValue(mixed);
+    const invoice = {
+      parent: { subscription_details: { subscription: 'sub_1' } },
+      lines: {
+        data: [
+          {
+            id: 'line_other',
+            quantity: 99,
+            period: { start: 1, end: 2 },
+            parent: { subscription_item_details: { subscription_item: 'si_other' } },
+          },
+          {
+            id: 'line_pass',
+            quantity: 2,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+          },
+          {
+            id: 'line_seat',
+            quantity: 5,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_seat' } },
+          },
+        ],
+      },
+    } as unknown as Stripe.Invoice;
+
+    await expect(handleOrganizationKiloPassInvoicePaid({ invoice })).resolves.toBe(true);
+    expect(activatePaidAgreement).toHaveBeenCalledWith(
+      expect.objectContaining({
+        paidSeatCount: 5,
+        paidFrom: new Date('2026-01-04T12:00:00.000Z'),
+        paidUntil: new Date('2026-02-01T00:00:00.000Z'),
+      })
+    );
+    expect(createParentSupplement).toHaveBeenCalledWith(
+      expect.objectContaining({ providerInvoiceLineId: 'line_pass' })
+    );
+  });
+
+  test('falls back to the known Kilo Pass price when the provider item is unbound', async () => {
+    const { resolveOrganizationKiloPassSubscriptionItem } = await import('./stripe-adapter');
+    const unbound = subscription({
+      items: {
+        data: [
+          subscription().items.data[0]!,
+          {
+            id: 'si_other',
+            quantity: 1,
+            price: { id: 'price_other', recurring: { interval: 'month' } },
+          },
+          subscription().items.data[1]!,
+        ],
+      } as Stripe.ApiList<Stripe.SubscriptionItem>,
+    });
+    expect(
+      resolveOrganizationKiloPassSubscriptionItem({
+        subscription: unbound,
+        boundProviderItemId: 'pending:sub_1',
+      })?.id
+    ).toBe('si_pass');
+  });
+
+  test('falls back to item metadata when the Kilo Pass price is unknown', async () => {
+    const { resolveOrganizationKiloPassSubscriptionItem } = await import('./stripe-adapter');
+    const legacy = subscription({
+      items: {
+        data: [
+          subscription().items.data[0]!,
+          {
+            id: 'si_legacy',
+            quantity: 9,
+            price: { id: 'price_legacy_pass', recurring: { interval: 'month' } },
+            metadata: {
+              type: 'kilo-pass-org',
+              organizationId: 'org_1',
+              kiloUserId: 'user_1',
+              tier: 'tier_19',
+              cadence: 'monthly',
+            },
+          },
+        ],
+      } as Stripe.ApiList<Stripe.SubscriptionItem>,
+    });
+    expect(
+      resolveOrganizationKiloPassSubscriptionItem({
+        subscription: legacy,
+        boundProviderItemId: 'pending:sub_1',
+      })?.id
+    ).toBe('si_legacy');
+  });
+
+  test('ignores a service-fee item when locating the bound Kilo Pass add-on', async () => {
+    const {
+      resolveOrganizationKiloPassSubscriptionItem,
+      handleOrganizationKiloPassSubscriptionEvent,
+    } = await import('./stripe-adapter');
+    const withFee = subscription({
+      items: {
+        data: [
+          subscription().items.data[0]!,
+          {
+            id: 'si_fee',
+            quantity: 1,
+            price: {
+              id: 'price_fee',
+              recurring: { interval: 'month' },
+              metadata: {
+                type: SERVICE_FEE_METADATA_TYPE,
+                serviceFeeVersion: SERVICE_FEE_VERSION,
+              },
+            },
+            metadata: {
+              type: SERVICE_FEE_METADATA_TYPE,
+              serviceFeeVersion: SERVICE_FEE_VERSION,
+            },
+          },
+          subscription().items.data[1]!,
+        ],
+      } as Stripe.ApiList<Stripe.SubscriptionItem>,
+    });
+    expect(
+      resolveOrganizationKiloPassSubscriptionItem({
+        subscription: withFee,
+        boundProviderItemId: 'pending:sub_1',
+      })?.id
+    ).toBe('si_pass');
+
+    await expect(handleOrganizationKiloPassSubscriptionEvent(withFee)).resolves.toBe(true);
+    expect(bindProviderSeatAddOnItem).not.toHaveBeenCalled();
+  });
+
+  test('does not use a service-fee invoice line for period, quantity, or capacity', async () => {
+    retrieve.mockResolvedValue(subscription());
+    const invoice = {
+      parent: { subscription_details: { subscription: 'sub_1' } },
+      lines: {
+        data: [
+          {
+            id: 'line_fee',
+            quantity: 99,
+            amount: 245,
+            period: { start: 10, end: 20 },
+            metadata: {
+              type: SERVICE_FEE_METADATA_TYPE,
+              serviceFeeVersion: SERVICE_FEE_VERSION,
+              serviceFeeAssessmentKey: 'invoice:in_1',
+              serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+            },
+            pricing: { price_details: { price: 'price_pass', product: 'prod_fee' } },
+            parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+          },
+          {
+            id: 'line_pass',
+            quantity: 2,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+          },
+          {
+            id: 'line_seat',
+            quantity: 5,
+            period: { start: 1_767_528_000, end: 1_769_904_000 },
+            parent: { subscription_item_details: { subscription_item: 'si_seat' } },
+          },
+        ],
+      },
+    } as unknown as Stripe.Invoice;
+    const { handleOrganizationKiloPassInvoicePaid } = await import('./stripe-adapter');
+
+    await expect(handleOrganizationKiloPassInvoicePaid({ invoice })).resolves.toBe(true);
+    expect(activatePaidAgreement).toHaveBeenCalledWith(
+      expect.objectContaining({
+        paidSeatCount: 5,
+        paidFrom: new Date('2026-01-04T12:00:00.000Z'),
+        paidUntil: new Date('2026-02-01T00:00:00.000Z'),
+      })
+    );
+    expect(createParentSupplement).toHaveBeenCalledWith(
+      expect.objectContaining({ providerInvoiceLineId: 'line_pass', paidSeatCount: 5 })
+    );
+  });
+
+  test('checkout still adds the pass when current tax is unapproved', async () => {
+    retrieve.mockResolvedValue(
+      subscription({ items: { ...subscription().items, data: [subscription().items.data[0]!] } })
+    );
+    createPendingAgreement.mockResolvedValue({ agreementId: 'agreement_1', created: true });
+    update.mockResolvedValue({
+      ...subscription(),
+      latest_invoice: {
+        id: 'in_draft',
+        status: 'draft',
+        amount_due: 4_900,
+        currency: 'usd',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        customer: 'cus_1',
+        confirmation_secret: { type: 'payment_intent', client_secret: 'pi_secret_1' },
+        parent: { subscription_details: { subscription: 'sub_1' } },
+        lines: {
+          data: [
+            {
+              id: 'line_pass',
+              amount: 4_900,
+              currency: 'usd',
+              period: { start: 1_767_528_000, end: 1_769_904_000 },
+              pricing: { price_details: { price: 'price_pass', product: 'prod_pass' } },
+              parent: { subscription_item_details: { subscription_item: 'si_pass' } },
+            },
+          ],
+          has_more: false,
+        },
+      } as unknown as Stripe.Invoice,
+    });
+    invoicePaymentsList.mockResolvedValue({
+      object: 'list',
+      data: [
+        {
+          status: 'open',
+          payment: {
+            type: 'payment_intent',
+            payment_intent: { status: 'requires_action' },
+          },
+        } as unknown as Stripe.InvoicePayment,
+      ],
+      has_more: false,
+      url: '/v1/invoice_payments',
+    });
+    const { createOrganizationKiloPassCheckout } = await import('./stripe-adapter');
+
+    await expect(
+      createOrganizationKiloPassCheckout({
+        organizationId: 'org_1',
+        actorUserId: 'user_1',
+        tier: 'tier_19',
+        allocations: [],
+        serviceFee: {
+          store: createMemoryAssessmentStore(),
+        },
+      })
+    ).resolves.toEqual({ kind: 'payment_action', clientSecret: 'pi_secret_1' });
+    expect(update).toHaveBeenCalledWith(
+      'sub_1',
+      expect.objectContaining({
+        items: [{ price: 'price_pass', quantity: 9 }],
+      })
+    );
+    expect(bindProviderSeatAddOnItem).toHaveBeenCalledWith({
+      agreementId: 'agreement_1',
+      providerSeatAddOnItemId: 'si_pass',
+    });
+    expect(invoiceItemCreate).not.toHaveBeenCalled();
+  });
+
+  test('initial add-on attaches one non-discountable fee on net Kilo Pass only', async () => {
+    retrieve.mockResolvedValue(
+      subscription({
+        customer: 'cus_1',
+        items: { ...subscription().items, data: [subscription().items.data[0]!] },
+      })
+    );
+    createPendingAgreement.mockResolvedValue({ agreementId: 'agreement_1', created: true });
+    const draftInvoice = mixedDraftInvoice({
+      id: 'in_add_on',
+      lines: [seatInvoiceLine(72_000), passInvoiceLine(4_900, { id: 'line_pass' })],
+    });
+    createPreview.mockResolvedValue({
+      id: 'in_preview_add_on',
+      currency: 'usd',
+      customer: 'cus_1',
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      status: 'draft',
+      lines: draftInvoice.lines,
+    });
+    update.mockResolvedValue({
+      ...subscription({ customer: 'cus_1' }),
+      latest_invoice: {
+        ...draftInvoice,
+        confirmation_secret: { type: 'payment_intent', client_secret: 'pi_secret_1' },
+      } as unknown as Stripe.Invoice,
+    });
+    invoicePaymentsList.mockResolvedValue({
+      object: 'list',
+      data: [
+        {
+          status: 'open',
+          payment: {
+            type: 'payment_intent',
+            payment_intent: { status: 'requires_action' },
+          },
+        } as unknown as Stripe.InvoicePayment,
+      ],
+      has_more: false,
+      url: '/v1/invoice_payments',
+    });
+    const { createOrganizationKiloPassCheckout } = await import('./stripe-adapter');
+
+    await expect(
+      createOrganizationKiloPassCheckout({
+        organizationId: 'org_1',
+        actorUserId: 'user_1',
+        tier: 'tier_19',
+        allocations: [],
+        serviceFee: {
+          store: createMemoryAssessmentStore(),
+          stripe: {
+            invoices: { listLineItems, createPreview },
+            invoiceItems: { create: invoiceItemCreate },
+            subscriptions: { retrieve },
+          } as OrganizationKiloPassSeatCapacityStripe,
+          deps: {
+            now: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+            getOrganizationPurchaseChannel: async () => 'self_serve',
+            resolveTaxInput: async () => ({
+              source: 'price',
+              taxBehavior: 'exclusive',
+            }),
+          },
+        },
+      })
+    ).resolves.toEqual({ kind: 'payment_action', clientSecret: 'pi_secret_1' });
+    expect(invoiceItemCreate).toHaveBeenCalled();
+    expect(invoiceItemCreate.mock.calls[0]?.[0]).toEqual(
+      expect.objectContaining({
+        amount: 245,
+        discountable: false,
+        description: SERVICE_FEE_DESCRIPTION,
+        tax_behavior: 'exclusive',
+        metadata: expect.objectContaining({
+          type: SERVICE_FEE_METADATA_TYPE,
+          serviceFeeVersion: SERVICE_FEE_VERSION,
+          serviceFeeAssessmentKey: expect.stringMatching(/^org-checkout:/),
+          serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+        }),
+      })
+    );
+    expect(invoiceItemCreate.mock.calls[0]?.[0].invoice).toBeUndefined();
+    expect(update).toHaveBeenCalledWith(
+      'sub_1',
+      expect.objectContaining({
+        metadata: expect.objectContaining({
+          type: 'kilo-pass-org',
+          organizationId: 'org_1',
+          kiloUserId: 'user_1',
+        }),
+      })
+    );
+    expect(update.mock.calls[0]?.[1].metadata).not.toHaveProperty('serviceFeeAssessmentKey');
+    expect(update.mock.calls[0]?.[1].metadata).not.toHaveProperty('serviceFeeFlow');
+  });
+
+  test('stages the fee before update so a paid invoice can still charge', async () => {
+    retrieve.mockResolvedValue(
+      subscription({
+        customer: 'cus_1',
+        items: { ...subscription().items, data: [subscription().items.data[0]!] },
+      })
+    );
+    createPendingAgreement.mockResolvedValue({ agreementId: 'agreement_1', created: true });
+    const previewLines = [seatInvoiceLine(72_000), passInvoiceLine(4_900, { id: 'line_pass' })];
+    createPreview.mockResolvedValue({
+      id: 'in_preview_paid',
+      currency: 'usd',
+      customer: 'cus_1',
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      status: 'draft',
+      lines: { object: 'list', data: previewLines, has_more: false, url: '/v1/invoices' },
+    });
+    const store = createMemoryAssessmentStore();
+    update.mockImplementation(async () => {
+      const assessmentKey = createdInvoiceItemAssessmentKey() ?? 'org-checkout:x';
+      return {
+        ...subscription({ customer: 'cus_1' }),
+        latest_invoice: mixedDraftInvoice({
+          id: 'in_paid_add_on',
+          status: 'paid',
+          amount_due: 0,
+          lines: [
+            ...previewLines,
+            passInvoiceLine(245, {
+              id: 'il_fee',
+              description: SERVICE_FEE_DESCRIPTION,
+              discountable: false,
+              metadata: {
+                type: SERVICE_FEE_METADATA_TYPE,
+                serviceFeeAssessmentKey: assessmentKey,
+                serviceFeeVersion: SERVICE_FEE_VERSION,
+                serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+              },
+            }),
+          ],
+        }),
+      };
+    });
+    const { createOrganizationKiloPassCheckout } = await import('./stripe-adapter');
+
+    await expect(
+      createOrganizationKiloPassCheckout({
+        organizationId: 'org_1',
+        actorUserId: 'user_1',
+        tier: 'tier_19',
+        allocations: [],
+        serviceFee: {
+          store,
+          stripe: {
+            invoices: { listLineItems, createPreview },
+            invoiceItems: { create: invoiceItemCreate, del: invoiceItemDel },
+            subscriptions: { retrieve },
+          } as OrganizationKiloPassSeatCapacityStripe,
+          deps: {
+            now: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+            getOrganizationPurchaseChannel: async () => 'self_serve',
+            resolveTaxInput: async () => ({
+              source: 'price',
+              taxBehavior: 'exclusive',
+            }),
+          },
+        },
+      })
+    ).resolves.toEqual({ kind: 'completed' });
+    expect(invoiceItemCreate).toHaveBeenCalledTimes(1);
+    expect(invoiceItemCreate.mock.calls[0]?.[0].invoice).toBeUndefined();
+    expect(invoiceItemDel).toHaveBeenCalledWith('ii_fee');
+    const assessmentKey = createdInvoiceItemAssessmentKey();
+    expect(assessmentKey).toEqual(expect.stringMatching(/^org-checkout:/));
+    expect(await store.findByAssessmentKey(assessmentKey ?? '')).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 245,
+    });
+  });
+
+  test('overlapping webhook does not create a second fee item when checkout already attached', async () => {
+    retrieve.mockResolvedValue(
+      subscription({
+        customer: 'cus_1',
+        items: { ...subscription().items, data: [subscription().items.data[0]!] },
+      })
+    );
+    createPendingAgreement.mockResolvedValue({ agreementId: 'agreement_1', created: true });
+    const draftInvoice = mixedDraftInvoice({
+      id: 'in_overlap',
+      lines: [seatInvoiceLine(72_000), passInvoiceLine(4_900, { id: 'line_pass_overlap' })],
+    });
+    createPreview.mockResolvedValue({
+      id: 'in_preview_overlap',
+      currency: 'usd',
+      customer: 'cus_1',
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      status: 'draft',
+      lines: draftInvoice.lines,
+    });
+    update.mockResolvedValue({
+      ...subscription({ customer: 'cus_1' }),
+      latest_invoice: {
+        ...draftInvoice,
+        confirmation_secret: { type: 'payment_intent', client_secret: 'pi_secret_overlap' },
+      } as unknown as Stripe.Invoice,
+    });
+    invoicePaymentsList.mockResolvedValue({
+      object: 'list',
+      data: [
+        {
+          status: 'open',
+          payment: {
+            type: 'payment_intent',
+            payment_intent: { status: 'requires_action' },
+          },
+        } as unknown as Stripe.InvoicePayment,
+      ],
+      has_more: false,
+      url: '/v1/invoice_payments',
+    });
+    const store = createMemoryAssessmentStore();
+    const { createOrganizationKiloPassCheckout } = await import('./stripe-adapter');
+
+    await createOrganizationKiloPassCheckout({
+      organizationId: 'org_1',
+      actorUserId: 'user_1',
+      tier: 'tier_19',
+      allocations: [],
+      serviceFee: {
+        store,
+        stripe: {
+          invoices: { listLineItems, createPreview },
+          invoiceItems: { create: invoiceItemCreate },
+          subscriptions: { retrieve },
+        } as OrganizationKiloPassSeatCapacityStripe,
+        deps: {
+          now: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+          resolveTaxInput: async () => ({
+            source: 'price',
+            taxBehavior: 'exclusive',
+          }),
+          getOrganizationPurchaseChannel: async () => 'self_serve',
+        },
+      },
+    });
+    const createsAfterCheckout = invoiceItemCreate.mock.calls.length;
+    expect(createsAfterCheckout).toBeGreaterThanOrEqual(1);
+    const assessmentKey = createdInvoiceItemAssessmentKey();
+    expect(assessmentKey).toEqual(expect.stringMatching(/^org-checkout:/));
+
+    const { handleKiloPassInvoiceCreated } = await import('@/lib/service-fees/invoice-created');
+    await handleKiloPassInvoiceCreated({
+      invoice: {
+        ...draftInvoice,
+        lines: {
+          ...draftInvoice.lines,
+          data: [
+            ...draftInvoice.lines.data,
+            {
+              ...passInvoiceLine(245, { id: 'il_overlap_fee' }),
+              discountable: false,
+              metadata: buildServiceFeeLineMetadata(String(assessmentKey)),
+            } as Stripe.InvoiceLineItem,
+          ],
+        },
+        parent: {
+          type: 'subscription_details',
+          quote_details: null,
+          subscription_details: {
+            metadata: {
+              type: 'kilo-pass-org',
+              organizationId: 'org_1',
+              kiloUserId: 'user_1',
+            },
+            subscription: 'sub_1',
+          },
+        },
+      } as Stripe.Invoice,
+      stripe: {
+        invoices: { listLineItems },
+        invoiceItems: { create: invoiceItemCreate },
+        subscriptions: { retrieve },
+      },
+      store,
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      },
+    });
+    expect(invoiceItemCreate).toHaveBeenCalledTimes(createsAfterCheckout);
+    expect(await store.findByAssessmentKey(String(assessmentKey))).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 245,
+    });
+  });
+});
+
+const SEAT_PRODUCT_ID = [...SEAT_PRODUCT_IDS][0] ?? 'prod_seat';
+const SEAT_PRICE_ID = process.env.STRIPE_TEAMS_MONTHLY_PRICE_ID ?? 'price_seat';
+
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata: { ...existing.metadata, ...(patch.metadata ?? {}) },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return Object.assign(store, {
+    async findByStripeInvoiceId(stripeInvoiceId: string) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripeInvoiceId === stripeInvoiceId
+      );
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+  });
+}
+
+function passInvoiceLine(
+  amount: number,
+  extra: Partial<Stripe.InvoiceLineItem> = {}
+): Stripe.InvoiceLineItem {
+  return {
+    id: extra.id ?? 'il_pass',
+    object: 'line_item',
+    amount,
+    currency: 'usd',
+    description: 'Kilo Pass',
+    discountable: true,
+    discount_amounts: null,
+    discounts: [],
+    invoice: 'in_test',
+    livemode: false,
+    metadata: extra.metadata ?? {
+      type: 'kilo-pass-org',
+      organizationId: 'org_1',
+      kiloUserId: 'user_1',
+      tier: 'tier_19',
+      cadence: 'monthly',
+    },
+    parent: extra.parent ?? {
+      type: 'subscription_item_details',
+      invoice_item_details: null,
+      subscription_item_details: {
+        invoice_item: null,
+        proration: false,
+        proration_details: { credited_items: null },
+        subscription: 'sub_1',
+        subscription_item: 'si_pass',
+      },
+    },
+    period: extra.period ?? { start: 1, end: 2 },
+    pretax_credit_amounts: null,
+    pricing: {
+      type: 'price_details',
+      unit_amount_decimal: String(amount),
+      price_details: { price: 'price_pass', product: 'prod_pass' },
+    },
+    quantity: extra.quantity ?? 1,
+    subscription: 'sub_1',
+    taxes: null,
+    ...extra,
+  } as Stripe.InvoiceLineItem;
+}
+
+function seatInvoiceLine(amount: number): Stripe.InvoiceLineItem {
+  return {
+    id: 'il_seat',
+    object: 'line_item',
+    amount,
+    currency: 'usd',
+    description: 'Seats',
+    discountable: true,
+    discount_amounts: null,
+    discounts: [],
+    invoice: 'in_test',
+    livemode: false,
+    metadata: {},
+    parent: {
+      type: 'subscription_item_details',
+      invoice_item_details: null,
+      subscription_item_details: {
+        invoice_item: null,
+        proration: false,
+        proration_details: { credited_items: null },
+        subscription: 'sub_1',
+        subscription_item: 'si_seat',
+      },
+    },
+    period: { start: 1, end: 2 },
+    pretax_credit_amounts: null,
+    pricing: {
+      type: 'price_details',
+      unit_amount_decimal: String(amount),
+      price_details: { price: SEAT_PRICE_ID, product: SEAT_PRODUCT_ID },
+    },
+    quantity: 9,
+    subscription: 'sub_1',
+    taxes: null,
+  } as Stripe.InvoiceLineItem;
+}
+
+function mixedDraftInvoice(
+  overrides: {
+    id?: string;
+    lines?: Stripe.InvoiceLineItem[];
+    metadata?: Stripe.Metadata;
+    status?: Stripe.Invoice.Status;
+    amount_due?: number;
+  } = {}
+): Stripe.Invoice {
+  const lines = overrides.lines ?? [seatInvoiceLine(72_000), passInvoiceLine(4_900)];
+  const metadata = overrides.metadata ?? {
+    type: 'kilo-pass-org',
+    organizationId: 'org_1',
+    kiloUserId: 'user_1',
+    tier: 'tier_19',
+    cadence: 'monthly',
+  };
+  return {
+    id: overrides.id ?? 'in_test',
+    object: 'invoice',
+    created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+    status: overrides.status ?? 'draft',
+    currency: 'usd',
+    customer: 'cus_1',
+    amount_due: overrides.amount_due ?? lines.reduce((sum, line) => sum + (line.amount ?? 0), 0),
+    amount_paid: 0,
+    parent: {
+      type: 'subscription_details',
+      quote_details: null,
+      subscription_details: {
+        metadata,
+        subscription: 'sub_1',
+      },
+    },
+    metadata,
+    lines: {
+      object: 'list',
+      data: lines,
+      has_more: false,
+      url: '/v1/invoices/in_test/lines',
+    },
+  } as Stripe.Invoice;
+}
+
+describe('organization Kilo Pass service-fee attachment', () => {
+  test('mixed seats and pass charge one fee on the net Kilo Pass product only', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params.amount).toBe(245);
+      expect(params.discountable).toBe(false);
+      return { id: 'ii_fee', amount: 245 };
+    });
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice(),
+      subscription: subscription(),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      },
+    });
+    expect(result.assessment).toMatchObject({
+      flow: 'organization_kilo_pass',
+      eligibleSubtotalMinor: 4_900,
+      chargedFeeMinor: 245,
+      organizationId: 'org_1',
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('capacity-increase proration attaches one fee on the positive Kilo Pass net', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params.amount).toBe(150);
+      expect(params.discountable).toBe(false);
+      return { id: 'ii_fee', amount: 150 };
+    });
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice({
+        id: 'in_increase',
+        lines: [seatInvoiceLine(8_000), passInvoiceLine(3_000, { id: 'il_pass_proration' })],
+      }),
+      subscription: subscription(),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      },
+    });
+    expect(result.assessment).toMatchObject({
+      eligibleSubtotalMinor: 3_000,
+      chargedFeeMinor: 150,
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('zero and negative net Kilo Pass omit the fee line', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 1 }));
+    const stripeClient = {
+      invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+      invoiceItems: { create },
+      subscriptions: { retrieve },
+    };
+    const deps = {
+      getOrganizationPurchaseChannel: async () => 'self_serve' as const,
+      resolveTaxInput: async () => ({
+        source: 'inline_inherit' as const,
+      }),
+    };
+
+    const zero = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice({
+        id: 'in_zero',
+        lines: [seatInvoiceLine(72_000), passInvoiceLine(0, { id: 'il_zero' })],
+      }),
+      store: createMemoryAssessmentStore(),
+      stripe: stripeClient,
+      deps,
+    });
+    const negative = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice({
+        id: 'in_negative',
+        lines: [
+          seatInvoiceLine(72_000),
+          passInvoiceLine(2_000, { id: 'il_pos' }),
+          passInvoiceLine(-5_000, { id: 'il_credit' }),
+        ],
+      }),
+      store: createMemoryAssessmentStore(),
+      stripe: stripeClient,
+      deps,
+    });
+
+    expect(zero.assessment).toMatchObject({
+      outcome: 'zero_rounded',
+      expectedFeeMinor: 0,
+      chargedFeeMinor: 0,
+    });
+    expect(negative.assessment).toMatchObject({
+      outcome: 'zero_rounded',
+      eligibleSubtotalMinor: 0,
+      chargedFeeMinor: 0,
+    });
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('exact organization exemption omits the fee and does not inherit', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const findEffectiveExemption: NonNullable<
+      KiloPassInvoiceCreatedDependencies['findEffectiveExemption']
+    > = jest.fn(async organizationId => {
+      expect(organizationId).toBe('org_1');
+      return { id: 'hist_exempt', isExempt: true };
+    });
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice(),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        findEffectiveExemption,
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      },
+    });
+    expect(findEffectiveExemption).toHaveBeenCalledWith(
+      'org_1',
+      new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000)
+    );
+    expect(result.assessment).toMatchObject({
+      outcome: 'exempt',
+      exemptionId: 'hist_exempt',
+      chargedFeeMinor: 0,
+      expectedFeeMinor: 245,
+    });
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('manual agreements stay fee-free', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice({ id: 'in_manual' }),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'manual',
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      },
+    });
+    expect(result.assessment).toBeNull();
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('tax resolution failure fails open as missed and does not attach a fee', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const sendAlert: NonNullable<KiloPassInvoiceCreatedDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice({ id: 'in_tax' }),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => {
+          throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+        },
+        sendAlert,
+      },
+    });
+    expect(result.status).toBe('missed');
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      chargedFeeMinor: 0,
+      expectedFeeMinor: 245,
+    });
+    expect(create).not.toHaveBeenCalled();
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: SERVICE_FEE_FAILURE_APPLICATION })
+    );
+  });
+
+  test('injected tax creates one positive non-discountable fee line', async () => {
+    const { attachOrganizationKiloPassServiceFeeToDraftInvoice } = await import('./stripe-adapter');
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params).toMatchObject({
+        customer: 'cus_1',
+        invoice: 'in_test',
+        amount: 245,
+        currency: 'usd',
+        description: SERVICE_FEE_DESCRIPTION,
+        discountable: false,
+        tax_behavior: 'exclusive',
+      });
+      return { id: 'ii_fee', amount: 245 };
+    });
+    const result = await attachOrganizationKiloPassServiceFeeToDraftInvoice({
+      invoice: mixedDraftInvoice(),
+      store: createMemoryAssessmentStore(),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        invoiceItems: { create },
+        subscriptions: { retrieve },
+      },
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      },
+    });
+    expect(result.status).toBe('charged');
+    expect(result.assessment?.chargedFeeMinor).toBe(245);
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+});
+
+describe('organization Kilo Pass seat-capacity fee preparation', () => {
+  const prorationDate = SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+  const now = new Date(prorationDate * 1000);
+
+  beforeEach(() => {
+    createPreview.mockReset();
+    invoiceItemCreate.mockReset();
+  });
+
+  function previewInvoice(lines: Stripe.InvoiceLineItem[]): Stripe.Invoice {
+    return {
+      id: 'in_preview',
+      object: 'invoice',
+      created: prorationDate,
+      status: 'draft',
+      currency: 'usd',
+      customer: 'cus_1',
+      lines: {
+        object: 'list',
+        data: lines,
+        has_more: false,
+        url: '/v1/invoices/upcoming/lines',
+      },
+    } as Stripe.Invoice;
+  }
+
+  function seatCapacityStripe(options: {
+    previewLines: Stripe.InvoiceLineItem[];
+    create?: typeof invoiceItemCreate;
+  }) {
+    createPreview.mockResolvedValue(previewInvoice(options.previewLines));
+    return {
+      invoices: {
+        createPreview,
+        listLineItems: async () => ({ data: [], has_more: false as const }),
+      },
+      invoiceItems: { create: options.create ?? invoiceItemCreate },
+    };
+  }
+
+  test('previews seat+pass quantities and charges only the Kilo Pass net', async () => {
+    const {
+      prepareOrganizationKiloPassSeatCapacityFee,
+      createSeatCapacityServiceFeeAssessmentKey,
+    } = await import('./stripe-adapter');
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params.amount).toBe(150);
+      expect(params.invoice).toBeUndefined();
+      return { id: 'ii_fee', amount: 150 };
+    });
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({ customer: 'cus_1' }),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store: createMemoryAssessmentStore(),
+      stripe: seatCapacityStripe({
+        previewLines: [seatInvoiceLine(8_000), passInvoiceLine(3_000, { id: 'il_pass_proration' })],
+        create,
+      }),
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      },
+    });
+
+    expect(createPreview).toHaveBeenCalledWith(
+      expect.objectContaining({
+        subscription: 'sub_1',
+        subscription_details: expect.objectContaining({
+          proration_date: prorationDate,
+          proration_behavior: 'always_invoice',
+          items: [
+            { id: 'si_seat', quantity: 10 },
+            { id: 'si_pass', quantity: 10 },
+          ],
+        }),
+      })
+    );
+    expect(prepared.shouldAttach).toBe(true);
+    expect(prepared.assessment).toMatchObject({
+      assessmentKey: createSeatCapacityServiceFeeAssessmentKey({
+        subscriptionId: 'sub_1',
+        prorationDate,
+        paidSeatQuantity: 10,
+      }),
+      eligibleSubtotalMinor: 3_000,
+      expectedFeeMinor: 150,
+      outcome: 'pending',
+    });
+    expect(prepared.feeInvoiceItem).toMatchObject({
+      amount: 150,
+      discountable: false,
+      tax_behavior: 'exclusive',
+    });
+    expect(prepared.feeInvoiceItem).not.toHaveProperty('invoice');
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('reuses a pending staged item for the same assessment', async () => {
+    const {
+      prepareOrganizationKiloPassSeatCapacityFee,
+      stagePreparedOrganizationKiloPassServiceFeeItem,
+    } = await import('./stripe-adapter');
+    const pendingItems: Stripe.InvoiceItem[] = [];
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      const item = {
+        id: 'ii_pending_fee',
+        amount: params.amount ?? 0,
+        metadata: params.metadata ?? {},
+      } as Stripe.InvoiceItem;
+      pendingItems.push(item);
+      return item;
+    });
+    const list = jest.fn(async () => ({ data: pendingItems, has_more: false }));
+    const stripeClient = {
+      ...seatCapacityStripe({
+        previewLines: [seatInvoiceLine(8_000), passInvoiceLine(3_000)],
+        create,
+      }),
+      invoiceItems: { create, list },
+    };
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({ customer: 'cus_1' }),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store: createMemoryAssessmentStore(),
+      stripe: stripeClient,
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      },
+    });
+
+    await expect(
+      stagePreparedOrganizationKiloPassServiceFeeItem({ prepared, stripe: stripeClient })
+    ).resolves.toBe('ii_pending_fee');
+    await expect(
+      stagePreparedOrganizationKiloPassServiceFeeItem({ prepared, stripe: stripeClient })
+    ).resolves.toBe('ii_pending_fee');
+    expect(create).toHaveBeenCalledTimes(1);
+    expect(list).toHaveBeenCalledTimes(2);
+  });
+
+  test('seat-only subscriptions skip preview and assessment', async () => {
+    const { prepareOrganizationKiloPassSeatCapacityFee } = await import('./stripe-adapter');
+    const store = createMemoryAssessmentStore();
+    const insert = jest.spyOn(store, 'insert');
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({
+        metadata: { type: 'seats', organizationId: 'org_1' },
+        items: {
+          object: 'list',
+          data: [
+            {
+              id: 'si_seat',
+              quantity: 5,
+              price: { id: 'price_seat', recurring: { interval: 'month' } },
+              current_period_start: 1_767_225_600,
+              current_period_end: 1_769_904_000,
+            },
+          ],
+          has_more: false,
+          url: '/v1/subscription_items',
+        },
+      } as unknown as Partial<Stripe.Subscription>),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store,
+      stripe: seatCapacityStripe({ previewLines: [seatInvoiceLine(8_000)] }),
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      },
+    });
+    expect(prepared.shouldAttach).toBe(false);
+    expect(prepared.assessment).toBeNull();
+    expect(createPreview).not.toHaveBeenCalled();
+    expect(insert).not.toHaveBeenCalled();
+  });
+
+  test('manual agreements skip preview and assessment', async () => {
+    const { prepareOrganizationKiloPassSeatCapacityFee } = await import('./stripe-adapter');
+    const store = createMemoryAssessmentStore();
+    const insert = jest.spyOn(store, 'insert');
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({ customer: 'cus_1' }),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store,
+      stripe: seatCapacityStripe({
+        previewLines: [seatInvoiceLine(8_000), passInvoiceLine(3_000)],
+      }),
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'manual',
+      },
+    });
+    expect(prepared.shouldAttach).toBe(false);
+    expect(prepared.assessment).toBeNull();
+    expect(createPreview).not.toHaveBeenCalled();
+    expect(insert).not.toHaveBeenCalled();
+  });
+
+  test('tax resolution failure persists missed and does not prepare an item', async () => {
+    const { prepareOrganizationKiloPassSeatCapacityFee } = await import('./stripe-adapter');
+    const sendAlert = jest.fn(async (_input: { failureCode: string }) => undefined);
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({ customer: 'cus_1' }),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store: createMemoryAssessmentStore(),
+      stripe: seatCapacityStripe({
+        previewLines: [seatInvoiceLine(8_000), passInvoiceLine(3_000)],
+      }),
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => {
+          throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+        },
+        sendAlert,
+      },
+    });
+    expect(prepared.shouldAttach).toBe(false);
+    expect(prepared.feeInvoiceItem).toBeNull();
+    expect(prepared.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      eligibleSubtotalMinor: 3_000,
+      expectedFeeMinor: 150,
+    });
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: SERVICE_FEE_FAILURE_APPLICATION })
+    );
+  });
+
+  test('attach uses the prepared item on the draft invoice and marks charged', async () => {
+    const {
+      prepareOrganizationKiloPassSeatCapacityFee,
+      attachPreparedOrganizationKiloPassServiceFee,
+    } = await import('./stripe-adapter');
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params).toMatchObject({
+        invoice: 'in_actual',
+        amount: 150,
+        discountable: false,
+      });
+      return { id: 'ii_fee', amount: 150 };
+    });
+    const prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+      subscription: subscription({ customer: 'cus_1' }),
+      paidSeatItemId: 'si_seat',
+      paidSeatQuantity: 10,
+      isIncreasingSeats: true,
+      prorationDate,
+      store,
+      stripe: seatCapacityStripe({
+        previewLines: [seatInvoiceLine(8_000), passInvoiceLine(3_000)],
+        create,
+      }),
+      deps: {
+        now,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      },
+    });
+    const charged = await attachPreparedOrganizationKiloPassServiceFee({
+      prepared,
+      invoice: mixedDraftInvoice({
+        id: 'in_actual',
+        lines: [seatInvoiceLine(8_000), passInvoiceLine(3_000)],
+      }),
+      store,
+      stripe: { invoiceItems: { create } },
+      deps: { now },
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+    expect(charged).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 150,
+      stripeInvoiceId: 'in_actual',
+      stripeInvoiceFeeLineItemId: 'ii_fee',
+    });
+  });
+});
+
+describe('organization Kilo Pass invoice.paid settlement', () => {
+  const organizationId = '11111111-1111-4111-8111-111111111111';
+
+  beforeEach(() => {
+    jest.resetAllMocks();
+    const rows = [dbAgreement({ parent_organization_id: organizationId })];
+    select.mockReturnValue({
+      from: () => ({
+        where: () => ({
+          limit: async () => rows,
+          orderBy: () => ({ limit: async () => rows }),
+        }),
+      }),
+    });
+    listLineItems.mockResolvedValue({ data: [], has_more: false });
+  });
+
+  async function persistOrgAssessment(input: {
+    store: ServiceFeeAssessmentStore;
+    invoiceId: string;
+    outcome: 'charged' | 'exempt' | 'missed';
+  }) {
+    const assessmentKey = createInvoiceServiceFeeAssessmentKey(input.invoiceId);
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey,
+        flow: 'organization_kilo_pass',
+        currency: 'usd',
+        eligibilityCreatedAt: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+        eligibleSubtotalMinor: 4_900,
+        kiloUserId: 'user_1',
+        organizationId,
+        stripeCustomerId: 'cus_1',
+      },
+      {
+        findEffectiveExemption:
+          input.outcome === 'exempt'
+            ? async () => ({ id: 'hist_exempt', isExempt: true })
+            : async () => null,
+      }
+    );
+    const record = await upsertServiceFeeAssessment({
+      store: input.store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: 'cus_1',
+        stripeInvoiceId: input.invoiceId,
+        stripeInvoiceFeeLineItemId:
+          input.outcome === 'charged' ? `il_fee_${input.invoiceId}` : null,
+      },
+    });
+    if (input.outcome === 'charged') {
+      return markServiceFeeAssessmentCharged({
+        store: input.store,
+        assessmentKey: record.assessmentKey,
+        chargedFeeMinor: 245,
+        stripeIds: { stripeInvoiceFeeLineItemId: `il_fee_${input.invoiceId}` },
+      });
+    }
+    if (input.outcome === 'missed' && decision.outcome === 'pending') {
+      return markServiceFeeAssessmentMissed({
+        store: input.store,
+        assessmentKey: record.assessmentKey,
+        failureCode: 'fee_application_failed',
+      });
+    }
+    return record;
+  }
+
+  function paidOrgInvoice(input: {
+    invoiceId: string;
+    assessmentKey: string;
+    includeFeeLine?: boolean;
+  }): Stripe.Invoice {
+    const lines = [
+      passInvoiceLine(4_900, {
+        id: 'line_pass_settle',
+        period: { start: 1_767_528_000, end: 1_769_904_000 },
+        quantity: 2,
+      }),
+      seatInvoiceLine(72_000),
+    ];
+    if (input.includeFeeLine !== false) {
+      lines.unshift({
+        ...passInvoiceLine(245, { id: `il_fee_${input.invoiceId}` }),
+        metadata: buildServiceFeeLineMetadata(input.assessmentKey),
+        pricing: null,
+      } as Stripe.InvoiceLineItem);
+    }
+    return {
+      ...mixedDraftInvoice({ id: input.invoiceId, lines }),
+      status: 'paid',
+      amount_paid: input.includeFeeLine === false ? 4_900 : 5_145,
+      status_transitions: {
+        finalized_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        marked_uncollectible_at: null,
+        paid_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 10,
+        voided_at: null,
+      },
+      parent: {
+        type: 'subscription_details',
+        quote_details: null,
+        subscription_details: {
+          metadata: {
+            type: 'kilo-pass-org',
+            organizationId,
+            kiloUserId: 'user_1',
+            serviceFeeAssessmentKey: input.assessmentKey,
+          },
+          subscription: 'sub_1',
+        },
+      },
+    } as Stripe.Invoice;
+  }
+
+  test.each(['charged', 'exempt', 'missed'] as const)(
+    'settles a %s assessment before activating the agreement',
+    async outcome => {
+      retrieve.mockResolvedValue(subscription());
+      const store = createMemoryAssessmentStore();
+      const invoiceId = `in_org_${outcome}`;
+      const record = await persistOrgAssessment({ store, invoiceId, outcome });
+      const invoice = paidOrgInvoice({
+        invoiceId,
+        assessmentKey: record.assessmentKey,
+        includeFeeLine: outcome === 'charged',
+      });
+      activatePaidAgreement.mockImplementation(async () => {
+        expect(await store.findByAssessmentKey(record.assessmentKey)).toMatchObject({
+          settledAt: expect.any(String),
+          outcome,
+          settledProductMinor: 4_900,
+        });
+      });
+      const { handleOrganizationKiloPassInvoicePaid } = await import('./stripe-adapter');
+
+      await expect(
+        handleOrganizationKiloPassInvoicePaid({
+          invoice,
+          serviceFee: {
+            store,
+            stripe: { invoices: { listLineItems } } as KiloPassServiceFeeSettlementStripe,
+          },
+        })
+      ).resolves.toBe(true);
+      expect(activatePaidAgreement).toHaveBeenCalled();
+      expect(await store.findByAssessmentKey(record.assessmentKey)).toMatchObject({
+        settledAt: expect.any(String),
+        outcome,
+      });
+    }
+  );
+
+  test('settlement before activation is idempotent', async () => {
+    retrieve.mockResolvedValue(subscription());
+    const store = createMemoryAssessmentStore();
+    const invoiceId = 'in_org_idempotent';
+    const record = await persistOrgAssessment({
+      store,
+      invoiceId,
+      outcome: 'charged',
+    });
+    const invoice = paidOrgInvoice({
+      invoiceId,
+      assessmentKey: record.assessmentKey,
+    });
+    const { handleOrganizationKiloPassInvoicePaid } = await import('./stripe-adapter');
+    const params = {
+      invoice,
+      serviceFee: {
+        store,
+        stripe: { invoices: { listLineItems } } as KiloPassServiceFeeSettlementStripe,
+      },
+    };
+
+    await handleOrganizationKiloPassInvoicePaid(params);
+    const first = await store.findByAssessmentKey(record.assessmentKey);
+    await handleOrganizationKiloPassInvoicePaid(params);
+    const second = await store.findByAssessmentKey(record.assessmentKey);
+    expect(second?.settledAt).toBe(first?.settledAt);
+    expect(second).toMatchObject({
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 245,
+      outcome: 'charged',
+    });
+    expect(activatePaidAgreement).toHaveBeenCalledTimes(2);
+  });
 });
diff --git a/apps/web/src/lib/kilo-pass-org/stripe-adapter.ts b/apps/web/src/lib/kilo-pass-org/stripe-adapter.ts
index 17f2298013..75cd018e18 100644
--- a/apps/web/src/lib/kilo-pass-org/stripe-adapter.ts
+++ b/apps/web/src/lib/kilo-pass-org/stripe-adapter.ts
@@ -1,11 +1,13 @@
 import 'server-only';
 
+import { randomUUID } from 'node:crypto';
 import type Stripe from 'stripe';
 import { and, desc, eq, ne } from 'drizzle-orm';
 import { kilo_pass_org_agreements, organization_seats_purchases } from '@kilocode/db/schema';
 import {
   KiloPassOrgAgreementState,
   KiloPassOrgProcessingCondition,
+  KiloPassOrgPurchaseChannel,
 } from '@kilocode/db/schema-types';
 import type { KiloPassCadence, KiloPassTier } from '@/lib/kilo-pass/enums';
 import { db } from '@/lib/drizzle';
@@ -15,6 +17,54 @@ import {
   getStripePriceIdForKiloPass,
 } from '@/lib/kilo-pass/stripe-price-ids.server';
 import { isSeatLineItem } from '@/lib/organizations/stripe-seat-line-items';
+import {
+  handleKiloPassInvoiceCreated,
+  SERVICE_FEE_FAILURE_APPLICATION,
+  type KiloPassInvoiceCreatedDependencies,
+  type KiloPassInvoiceCreatedResult,
+  type KiloPassInvoiceCreatedStripe,
+} from '@/lib/service-fees/invoice-created';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import { getEffectiveOrganizationServiceFeeExemption } from '@/lib/service-fees/organization-exemptions';
+import {
+  buildServiceFeeCommercialMetadata,
+  isEligibleKiloPassInvoiceLine,
+  isServiceFeeInvoiceLine,
+  isServiceFeeMetadata,
+  listAllInvoiceLineItems,
+  sumEligibleKiloPassSubtotalMinor,
+  type InvoiceLineItemListClient,
+} from '@/lib/service-fees/stripe-lines';
+import {
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+  type ServiceFeeStripeIds,
+} from '@/lib/service-fees/assessments';
+import { buildAutoTopUpServiceFeeInvoiceItem } from '@/lib/service-fees/checkout';
+import {
+  resolveServiceFeeTaxInput,
+  type ServiceFeeTaxInput,
+  type ServiceFeeTaxPrincipal,
+  type StripePriceTaxReader,
+} from '@/lib/service-fees/tax';
+import {
+  sendMissedServiceFeeAlert,
+  type MissedServiceFeeAlertInput,
+} from '@/lib/service-fees/alerts';
+import {
+  settleKiloPassInvoiceServiceFee,
+  type KiloPassServiceFeeSettlementDependencies,
+  type KiloPassServiceFeeSettlementStripe,
+  type ServiceFeeSettlementStore,
+} from '@/lib/service-fees/settlement';
+import {
+  SERVICE_FEE_SUPPORTED_CURRENCY,
+  type ServiceFeeCommercialMetadata,
+} from '@/lib/service-fees/types';
 import {
   activatePaidAgreement,
   bindProviderSeatAddOnItem,
@@ -55,8 +105,71 @@ function periodForItem(item: Stripe.SubscriptionItem) {
   };
 }
 
-function organizationPassItem(subscription: Stripe.Subscription) {
-  const item = subscription.items.data.find(item => !isSeatLineItem(item));
+function isPendingProviderItemId(itemId: string | null | undefined): boolean {
+  return typeof itemId === 'string' && itemId.startsWith('pending:');
+}
+
+function isServiceFeeSubscriptionItem(item: Stripe.SubscriptionItem): boolean {
+  if (isServiceFeeMetadata(item.metadata) || isServiceFeeMetadata(item.price?.metadata)) {
+    return true;
+  }
+  const product = item.price?.product;
+  return (
+    typeof product === 'object' &&
+    product !== null &&
+    !product.deleted &&
+    isServiceFeeMetadata(product.metadata)
+  );
+}
+
+function isCandidateOrganizationPassItem(item: Stripe.SubscriptionItem): boolean {
+  return !isSeatLineItem(item) && !isServiceFeeSubscriptionItem(item);
+}
+
+/**
+ * Locate the bound Kilo Pass organization subscription item.
+ * Order: persisted provider item id, known Kilo Pass Price id, then metadata.
+ * Seat and service-fee items are never candidates. The fee must not change
+ * which item, period, quantity, or capacity this returns.
+ */
+export function resolveOrganizationKiloPassSubscriptionItem(input: {
+  subscription: Stripe.Subscription;
+  boundProviderItemId?: string | null;
+}): Stripe.SubscriptionItem | undefined {
+  const items = input.subscription.items.data;
+  const boundId = input.boundProviderItemId;
+  if (boundId && !isPendingProviderItemId(boundId)) {
+    const bound = items.find(item => item.id === boundId && isCandidateOrganizationPassItem(item));
+    if (bound) return bound;
+  }
+
+  const knownPriceIds = new Set(getKnownStripePriceIdsForKiloPass());
+  const byKnownPrice = items.find(
+    item => isCandidateOrganizationPassItem(item) && knownPriceIds.has(item.price.id)
+  );
+  if (byKnownPrice) return byKnownPrice;
+
+  const byItemMetadata = items.find(
+    item =>
+      isCandidateOrganizationPassItem(item) &&
+      getOrganizationKiloPassMetadata(item.metadata) !== null
+  );
+  if (byItemMetadata) return byItemMetadata;
+
+  if (!getOrganizationKiloPassMetadata(input.subscription.metadata)) return undefined;
+  const metadataCandidates = items.filter(isCandidateOrganizationPassItem);
+  if (metadataCandidates.length === 1) return metadataCandidates[0];
+  return undefined;
+}
+
+function organizationPassItem(
+  subscription: Stripe.Subscription,
+  boundProviderItemId?: string | null
+) {
+  const item = resolveOrganizationKiloPassSubscriptionItem({
+    subscription,
+    boundProviderItemId,
+  });
   if (!item) throw new Error(`Subscription ${subscription.id} has no Kilo Pass organization item`);
   return item;
 }
@@ -81,11 +194,869 @@ function paidSeatItem(subscription: Stripe.Subscription) {
   return item;
 }
 
+export type OrganizationKiloPassServiceFeeAttachment = {
+  invoice: Stripe.Invoice;
+  subscription?: Stripe.Subscription | null;
+  stripe?: KiloPassInvoiceCreatedStripe;
+  store?: ServiceFeeAssessmentStore;
+  deps?: KiloPassInvoiceCreatedDependencies;
+};
+
+async function lookupOrganizationKiloPassPurchaseChannel(
+  organizationId: string
+): Promise<'self_serve' | 'manual' | null> {
+  const [agreement] = await db
+    .select({ purchaseChannel: kilo_pass_org_agreements.purchase_channel })
+    .from(kilo_pass_org_agreements)
+    .where(
+      and(
+        eq(kilo_pass_org_agreements.parent_organization_id, organizationId),
+        ne(kilo_pass_org_agreements.state, KiloPassOrgAgreementState.Ended)
+      )
+    )
+    .orderBy(desc(kilo_pass_org_agreements.created_at))
+    .limit(1);
+  if (
+    agreement?.purchaseChannel === KiloPassOrgPurchaseChannel.SelfServe ||
+    agreement?.purchaseChannel === KiloPassOrgPurchaseChannel.Manual
+  ) {
+    return agreement.purchaseChannel;
+  }
+  return null;
+}
+
+/**
+ * Attach at most one non-discountable service fee to a self-service org Kilo
+ * Pass draft invoice. The fee is calculated from the aggregate net Kilo Pass
+ * product only; seats and existing fee lines are excluded. Exact-organization
+ * exemption is used with no hierarchy inheritance. Tax-unapproved and other
+ * fee-domain failures persist `missed` and return normally.
+ *
+ * Used by `createOrganizationKiloPassCheckout`, which already holds the draft
+ * invoice id. `handleUpdateSeatCount` must not call this: it previews, decides,
+ * and persists outside the seat advisory lock, then attaches only the prepared
+ * invoice item with `attachPreparedOrganizationKiloPassServiceFee`.
+ * Resolve the pass item with `resolveOrganizationKiloPassSubscriptionItem`
+ * instead of first-non-seat; this attach never changes the bound item, period,
+ * quantity, or capacity.
+ */
+export async function attachOrganizationKiloPassServiceFeeToDraftInvoice(
+  params: OrganizationKiloPassServiceFeeAttachment
+): Promise<KiloPassInvoiceCreatedResult> {
+  const createdStores = params.store === undefined ? createServiceFeeStores() : undefined;
+  const store = params.store ?? createdStores?.assessments;
+  if (store === undefined) {
+    throw new Error('organization Kilo Pass service-fee store is unavailable');
+  }
+  return handleKiloPassInvoiceCreated({
+    invoice: params.invoice,
+    stripe: params.stripe ?? {
+      prices: stripe.prices,
+      invoices: stripe.invoices,
+      invoiceItems: stripe.invoiceItems,
+      subscriptions: stripe.subscriptions,
+    },
+    store,
+    deps: {
+      findEffectiveExemption: createdStores
+        ? async (organizationId, at) =>
+            getEffectiveOrganizationServiceFeeExemption({
+              store: createdStores.exemptions,
+              organizationId,
+              at,
+            })
+        : undefined,
+      getOrganizationPurchaseChannel: lookupOrganizationKiloPassPurchaseChannel,
+      ...params.deps,
+      ownsSynchronousAttachment: true,
+    },
+  });
+}
+
+const SERVICE_FEE_FAILURE_INVOICE_NOT_DRAFT = 'invoice_not_draft' as const;
+
+export type OrganizationKiloPassSeatCapacityStripe = InvoiceLineItemListClient & {
+  invoices: InvoiceLineItemListClient['invoices'] & {
+    createPreview(
+      params: Stripe.InvoiceCreatePreviewParams
+    ): Promise<
+      Pick<Stripe.Invoice, 'id' | 'currency' | 'customer' | 'created' | 'status' | 'lines'>
+    >;
+  };
+  invoiceItems?: {
+    create(
+      params: Stripe.InvoiceItemCreateParams
+    ): Promise<Pick<Stripe.InvoiceItem, 'id' | 'amount'>>;
+    list?(
+      params: Stripe.InvoiceItemListParams
+    ): Promise<Pick<Stripe.ApiList<Stripe.InvoiceItem>, 'data' | 'has_more'>>;
+    del?(id: string): Promise<unknown>;
+  };
+  prices?: StripePriceTaxReader['prices'];
+};
+
+export type OrganizationKiloPassSeatCapacityFeeDependencies = KiloPassInvoiceCreatedDependencies & {
+  now?: Date;
+  resolveTaxInput?: (params: {
+    principal: ServiceFeeTaxPrincipal;
+    stripe?: StripePriceTaxReader;
+  }) => Promise<ServiceFeeTaxInput>;
+  sendAlert?: (input: MissedServiceFeeAlertInput) => Promise<void>;
+};
+
+export type PreparedOrganizationKiloPassSeatCapacityFee = {
+  prorationDate: number;
+  organizationPassItemId: string | null;
+  shouldAttach: boolean;
+  assessmentKey: string | null;
+  assessment: ServiceFeeAssessmentRecord | null;
+  feeInvoiceItem: Omit<Stripe.InvoiceItemCreateParams, 'invoice'> | null;
+  expectedFeeMinor: number;
+  commercialMetadata: ServiceFeeCommercialMetadata | null;
+};
+
+export function createSeatCapacityServiceFeeAssessmentKey(input: {
+  subscriptionId: string;
+  prorationDate: number;
+  paidSeatQuantity: number;
+}): string {
+  return `seat-capacity:${input.subscriptionId}:${input.prorationDate}:${input.paidSeatQuantity}`;
+}
+
+export function createOrgCheckoutServiceFeeAssessmentKey(id: string = randomUUID()): string {
+  return `org-checkout:${id}`;
+}
+
+function emptyPreparedSeatCapacityFee(
+  prorationDate: number,
+  organizationPassItemId: string | null = null
+): PreparedOrganizationKiloPassSeatCapacityFee {
+  return {
+    prorationDate,
+    organizationPassItemId,
+    shouldAttach: false,
+    assessmentKey: null,
+    assessment: null,
+    feeInvoiceItem: null,
+    expectedFeeMinor: 0,
+    commercialMetadata: null,
+  };
+}
+
+/**
+ * Preview a seat+pass quantity increase and persist the fee decision before
+ * `handleUpdateSeatCount` takes the advisory lock. Seat-only, decreases,
+ * missing org identity, and manual agreements skip preview and assessment.
+ * Tax-unapproved and other fee-domain failures persist `missed` and return
+ * without an attachable item so the base update can continue.
+ */
+export async function prepareOrganizationKiloPassSeatCapacityFee(input: {
+  subscription: Stripe.Subscription;
+  paidSeatItemId: string;
+  paidSeatQuantity: number;
+  isIncreasingSeats: boolean;
+  prorationDate: number;
+  stripe?: OrganizationKiloPassSeatCapacityStripe;
+  store?: ServiceFeeAssessmentStore;
+  deps?: OrganizationKiloPassSeatCapacityFeeDependencies;
+}): Promise<PreparedOrganizationKiloPassSeatCapacityFee> {
+  const organizationPassItem = resolveOrganizationKiloPassSubscriptionItem({
+    subscription: input.subscription,
+  });
+  const empty = emptyPreparedSeatCapacityFee(input.prorationDate, organizationPassItem?.id ?? null);
+  if (!input.isIncreasingSeats || !organizationPassItem) {
+    return empty;
+  }
+
+  const metadata = getOrganizationKiloPassMetadata(input.subscription.metadata);
+  if (!metadata) {
+    return empty;
+  }
+
+  const deps = input.deps ?? {};
+  const now = deps.now ?? new Date(input.prorationDate * 1000);
+  const getChannel =
+    deps.getOrganizationPurchaseChannel ?? lookupOrganizationKiloPassPurchaseChannel;
+  const channel = await getChannel(metadata.organizationId);
+  if (channel !== 'self_serve') {
+    return empty;
+  }
+
+  const stripeClient = input.stripe ?? defaultSeatCapacityStripe();
+  const createdStores = input.store === undefined ? createServiceFeeStores() : undefined;
+  const store = input.store ?? createdStores?.assessments;
+  if (store === undefined) {
+    throw new Error('organization Kilo Pass seat-capacity service-fee store is unavailable');
+  }
+
+  const assessmentKey = createSeatCapacityServiceFeeAssessmentKey({
+    subscriptionId: input.subscription.id,
+    prorationDate: input.prorationDate,
+    paidSeatQuantity: input.paidSeatQuantity,
+  });
+  const customer = customerIdFromReference(input.subscription.customer);
+  const stripeIds: ServiceFeeStripeIds = { stripeCustomerId: customer };
+
+  try {
+    const existing = await store.findByAssessmentKey(assessmentKey);
+    if (existing && (existing.outcome === 'charged' || existing.outcome === 'missed')) {
+      return {
+        ...empty,
+        assessmentKey,
+        assessment: existing,
+        expectedFeeMinor: existing.expectedFeeMinor,
+      };
+    }
+
+    const preview = await stripeClient.invoices.createPreview({
+      customer: customer ?? undefined,
+      subscription: input.subscription.id,
+      subscription_details: {
+        items: [
+          { id: input.paidSeatItemId, quantity: input.paidSeatQuantity },
+          { id: organizationPassItem.id, quantity: input.paidSeatQuantity },
+        ],
+        proration_behavior: 'always_invoice',
+        proration_date: input.prorationDate,
+      },
+      expand: ['lines.data'],
+    });
+    const lines =
+      preview.lines?.has_more && preview.id
+        ? await listAllInvoiceLineItems({
+            invoice: { id: preview.id, lines: preview.lines },
+            stripe: stripeClient,
+          })
+        : (preview.lines?.data ?? []);
+    const eligibleSubtotalMinor = sumEligibleKiloPassSubtotalMinor({
+      lines,
+      currency: preview.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+      subscription: input.subscription,
+    });
+    const findEffectiveExemption =
+      deps.findEffectiveExemption ??
+      (createdStores
+        ? async (organizationId, at) =>
+            getEffectiveOrganizationServiceFeeExemption({
+              store: createdStores.exemptions,
+              organizationId,
+              at,
+            })
+        : undefined);
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey,
+        flow: 'organization_kilo_pass',
+        currency: preview.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt: now,
+        eligibleSubtotalMinor,
+        kiloUserId: metadata.kiloUserId,
+        organizationId: metadata.organizationId,
+        stripeCustomerId: customer ?? undefined,
+      },
+      { findEffectiveExemption }
+    );
+    const commercialMetadata = buildServiceFeeCommercialMetadata({
+      assessmentKey,
+      flow: decision.flow,
+      organizationId: metadata.organizationId,
+    });
+
+    const record = await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds,
+      now,
+    });
+    if (record.outcome !== 'pending') {
+      return {
+        prorationDate: input.prorationDate,
+        organizationPassItemId: organizationPassItem.id,
+        shouldAttach: false,
+        assessmentKey,
+        assessment: record,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const resolveTax = deps.resolveTaxInput ?? resolveServiceFeeTaxInput;
+    let taxInput: ServiceFeeTaxInput;
+    try {
+      taxInput = await resolveTax({
+        principal: taxPrincipalFromLines(lines, input.subscription),
+        stripe: stripeClient.prices ? { prices: stripeClient.prices } : undefined,
+      });
+    } catch {
+      const missed = await persistSeatCapacityMissed({
+        store,
+        assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+      return {
+        prorationDate: input.prorationDate,
+        organizationPassItemId: organizationPassItem.id,
+        shouldAttach: false,
+        assessmentKey,
+        assessment: missed.assessment,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+    if (!customer) {
+      const missed = await persistSeatCapacityMissed({
+        store,
+        assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+      return {
+        prorationDate: input.prorationDate,
+        organizationPassItemId: organizationPassItem.id,
+        shouldAttach: false,
+        assessmentKey,
+        assessment: missed.assessment,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const feeInvoiceItem = buildAutoTopUpServiceFeeInvoiceItem({
+      assessmentKey,
+      invoiceId: 'pending',
+      customerId: customer,
+      feeMinor: decision.expectedFeeMinor,
+      taxInput,
+    });
+    const { invoice: _pendingInvoice, ...feeInvoiceItemWithoutInvoice } = feeInvoiceItem;
+    return {
+      prorationDate: input.prorationDate,
+      organizationPassItemId: organizationPassItem.id,
+      shouldAttach: true,
+      assessmentKey,
+      assessment: record,
+      feeInvoiceItem: feeInvoiceItemWithoutInvoice,
+      expectedFeeMinor: decision.expectedFeeMinor,
+      commercialMetadata,
+    };
+  } catch (error) {
+    await alertSeatCapacitySafely({
+      assessmentKey,
+      flow: 'organization_kilo_pass',
+      kiloUserId: metadata.kiloUserId,
+      organizationId: metadata.organizationId,
+      eligibleSubtotalMinor: 0,
+      expectedFeeMinor: 0,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+      deps,
+      now,
+    });
+    return empty;
+  }
+}
+
+/**
+ * Attach one already-prepared non-discountable fee item to the draft invoice
+ * returned by `subscriptions.update`. No preview, exemption, tax, or initial
+ * assessment write happens here. Attachment failure is fail-open.
+ */
+export async function attachPreparedOrganizationKiloPassServiceFee(input: {
+  prepared: PreparedOrganizationKiloPassSeatCapacityFee;
+  invoice: Stripe.Invoice;
+  stripe?: Pick<OrganizationKiloPassSeatCapacityStripe, 'invoiceItems'>;
+  store?: ServiceFeeAssessmentStore;
+  deps?: OrganizationKiloPassSeatCapacityFeeDependencies;
+  pendingInvoiceItemId?: string | null;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const prepared = input.prepared;
+  if (!prepared.shouldAttach || !prepared.assessmentKey || !prepared.feeInvoiceItem) {
+    return prepared.assessment;
+  }
+
+  const deps = input.deps ?? {};
+  const now = deps.now ?? new Date();
+  const createdStores = input.store === undefined ? createServiceFeeStores() : undefined;
+  const store = input.store ?? createdStores?.assessments;
+  if (store === undefined) {
+    return prepared.assessment;
+  }
+
+  const stripeIds: ServiceFeeStripeIds = {
+    stripeCustomerId: prepared.assessment?.stripeCustomerId ?? null,
+    stripeInvoiceId: input.invoice.id,
+  };
+
+  try {
+    const existingFeeLine = (input.invoice.lines?.data ?? []).find(line => {
+      if (!isServiceFeeInvoiceLine(line)) return false;
+      return line.metadata?.serviceFeeAssessmentKey === prepared.assessmentKey;
+    });
+    if (existingFeeLine) {
+      if (input.pendingInvoiceItemId) {
+        await discardStagedOrganizationKiloPassServiceFeeItem({
+          invoiceItemId: input.pendingInvoiceItemId,
+          stripe: input.stripe,
+        });
+      }
+      return markServiceFeeAssessmentCharged({
+        store,
+        assessmentKey: prepared.assessmentKey,
+        chargedFeeMinor: Math.max(0, existingFeeLine.amount),
+        stripeIds: {
+          ...stripeIds,
+          stripeInvoiceFeeLineItemId: existingFeeLine.id,
+        },
+        now,
+      });
+    }
+
+    if (input.pendingInvoiceItemId) {
+      await discardStagedOrganizationKiloPassServiceFeeItem({
+        invoiceItemId: input.pendingInvoiceItemId,
+        stripe: input.stripe,
+      });
+    }
+
+    if (input.invoice.status !== 'draft' || !input.invoice.id) {
+      const missed = await persistSeatCapacityMissed({
+        store,
+        assessmentKey: prepared.assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_INVOICE_NOT_DRAFT,
+        record: prepared.assessment,
+        deps,
+        now,
+      });
+      return missed.assessment;
+    }
+
+    const create =
+      input.stripe?.invoiceItems?.create ?? stripe.invoiceItems.create.bind(stripe.invoiceItems);
+    const item = await create({
+      ...prepared.feeInvoiceItem,
+      invoice: input.invoice.id,
+    });
+    return markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: prepared.assessmentKey,
+      chargedFeeMinor: prepared.expectedFeeMinor,
+      stripeIds: {
+        ...stripeIds,
+        stripeInvoiceFeeLineItemId: item.id,
+      },
+      now,
+    });
+  } catch (error) {
+    const missed = await persistSeatCapacityMissed({
+      store,
+      assessmentKey: prepared.assessmentKey,
+      stripeIds,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+      record: prepared.assessment,
+      deps,
+      now,
+    });
+    return missed.assessment;
+  }
+}
+
+function defaultSeatCapacityStripe(): OrganizationKiloPassSeatCapacityStripe {
+  return {
+    invoices: stripe.invoices,
+    invoiceItems: stripe.invoiceItems,
+    prices: stripe.prices,
+  };
+}
+
+/**
+ * Create the non-discountable fee as a pending customer invoice item so
+ * `subscriptions.update` can pull it onto the invoice it immediately
+ * finalizes. Saved cards often leave no draft window for post-update attach.
+ */
+export async function stagePreparedOrganizationKiloPassServiceFeeItem(input: {
+  prepared: PreparedOrganizationKiloPassSeatCapacityFee;
+  stripe?: Pick<OrganizationKiloPassSeatCapacityStripe, 'invoiceItems'>;
+}): Promise<string | null> {
+  const prepared = input.prepared;
+  if (!prepared.shouldAttach || !prepared.feeInvoiceItem) return null;
+  const invoiceItems = input.stripe?.invoiceItems ?? stripe.invoiceItems;
+  const list = invoiceItems.list?.bind(invoiceItems);
+  const customer = prepared.feeInvoiceItem.customer;
+  if (list && typeof customer === 'string') {
+    try {
+      let startingAfter: string | undefined;
+      for (;;) {
+        const page = await list({
+          customer,
+          pending: true,
+          limit: 100,
+          ...(startingAfter ? { starting_after: startingAfter } : {}),
+        });
+        const existing = page.data.find(
+          item => item.metadata?.serviceFeeAssessmentKey === prepared.assessmentKey
+        );
+        if (existing) return existing.id;
+        if (!page.has_more) break;
+        const cursor = page.data.at(-1)?.id;
+        if (!cursor) return null;
+        startingAfter = cursor;
+      }
+    } catch {
+      return null;
+    }
+  }
+  const create = invoiceItems.create.bind(invoiceItems);
+  try {
+    const item = await create(prepared.feeInvoiceItem);
+    return item.id;
+  } catch {
+    return null;
+  }
+}
+
+export async function discardStagedOrganizationKiloPassServiceFeeItem(input: {
+  invoiceItemId: string;
+  stripe?: Pick<OrganizationKiloPassSeatCapacityStripe, 'invoiceItems'>;
+}): Promise<void> {
+  const del = input.stripe?.invoiceItems?.del ?? stripe.invoiceItems.del?.bind(stripe.invoiceItems);
+  if (!del) return;
+  try {
+    await del(input.invoiceItemId);
+  } catch {
+    // Orphan cleanup is best-effort. Settlement still records missed.
+  }
+}
+
+function taxPrincipalFromLines(
+  lines: readonly Stripe.InvoiceLineItem[],
+  subscription: Stripe.Subscription | null
+): ServiceFeeTaxPrincipal {
+  const eligible = lines.find(line => isEligibleKiloPassInvoiceLine(line, subscription));
+  const priceId = eligible?.pricing?.price_details?.price;
+  return priceId ? { kind: 'price', priceId } : { kind: 'inline' };
+}
+
+function customerIdFromReference(
+  customer: string | Stripe.Customer | Stripe.DeletedCustomer | null | undefined
+): string | null {
+  if (typeof customer === 'string' && customer.trim()) return customer;
+  if (customer && typeof customer === 'object' && 'id' in customer && customer.id) {
+    return customer.id;
+  }
+  return null;
+}
+
+async function persistSeatCapacityMissed(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  stripeIds: ServiceFeeStripeIds;
+  failureCode: string;
+  record: ServiceFeeAssessmentRecord | null;
+  deps: OrganizationKiloPassSeatCapacityFeeDependencies;
+  now: Date;
+}): Promise<{ assessment: ServiceFeeAssessmentRecord | null }> {
+  try {
+    const missed = await markServiceFeeAssessmentMissed({
+      store: params.store,
+      assessmentKey: params.assessmentKey,
+      failureCode: params.failureCode,
+      stripeIds: params.stripeIds,
+      now: params.now,
+    });
+    await alertSeatCapacitySafely({
+      assessmentKey: missed.assessmentKey,
+      flow: missed.flow,
+      kiloUserId: missed.kiloUserId,
+      organizationId: missed.organizationId,
+      stripeInvoiceId: missed.stripeInvoiceId,
+      eligibleSubtotalMinor: missed.eligibleSubtotalMinor,
+      expectedFeeMinor: missed.expectedFeeMinor,
+      failureCode: missed.failureCode ?? params.failureCode,
+      deps: params.deps,
+      now: params.now,
+    });
+    return { assessment: missed };
+  } catch (error) {
+    await alertSeatCapacitySafely({
+      assessmentKey: params.assessmentKey,
+      flow: params.record?.flow ?? 'organization_kilo_pass',
+      kiloUserId: params.record?.kiloUserId,
+      organizationId: params.record?.organizationId,
+      stripeInvoiceId: params.stripeIds.stripeInvoiceId,
+      eligibleSubtotalMinor: params.record?.eligibleSubtotalMinor ?? 0,
+      expectedFeeMinor: params.record?.expectedFeeMinor ?? 0,
+      failureCode: failureCodeFromUnknown(error, params.failureCode),
+      deps: params.deps,
+      now: params.now,
+    });
+    return { assessment: params.record };
+  }
+}
+
+async function alertSeatCapacitySafely(params: {
+  assessmentKey: string;
+  flow: MissedServiceFeeAlertInput['flow'];
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeInvoiceId?: string | null;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  failureCode: string;
+  deps: OrganizationKiloPassSeatCapacityFeeDependencies;
+  now: Date;
+}): Promise<void> {
+  const sendAlert = params.deps.sendAlert ?? sendMissedServiceFeeAlert;
+  try {
+    await sendAlert({
+      assessmentKey: params.assessmentKey,
+      flow: params.flow,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeInvoiceId: params.stripeInvoiceId,
+      eligibleSubtotalMinor: params.eligibleSubtotalMinor,
+      expectedFeeMinor: params.expectedFeeMinor,
+      currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+      failureCode: params.failureCode,
+      attemptedAt: params.now,
+    });
+  } catch {
+    // Slack/Sentry failure must not change the seat-capacity fee outcome.
+  }
+}
+
+function failureCodeFromUnknown(error: unknown, fallback: string): string {
+  if (error instanceof Error && /^[a-z][a-z0-9_]{0,99}$/.test(error.message)) {
+    return error.message;
+  }
+  return fallback;
+}
+
+function hasCreatePreview(
+  stripeClient: KiloPassInvoiceCreatedStripe | undefined
+): stripeClient is OrganizationKiloPassSeatCapacityStripe {
+  const invoices = stripeClient?.invoices as { createPreview?: unknown } | undefined;
+  return typeof invoices?.createPreview === 'function';
+}
+
+/**
+ * Persist the org-checkout assessment before `subscriptions.update` so
+ * `invoice.created` can bind to `org-checkout:<uuid>` and skip attachment.
+ * The checkout caller is the synchronous attachment owner.
+ */
+export async function prepareOrganizationKiloPassCheckoutFee(input: {
+  subscription: Stripe.Subscription;
+  priceId: string;
+  quantity: number;
+  organizationId: string;
+  kiloUserId: string;
+  assessmentKey: string;
+  stripe?: OrganizationKiloPassSeatCapacityStripe;
+  store?: ServiceFeeAssessmentStore;
+  deps?: OrganizationKiloPassSeatCapacityFeeDependencies;
+}): Promise<PreparedOrganizationKiloPassSeatCapacityFee> {
+  const empty = emptyPreparedSeatCapacityFee(Math.floor(Date.now() / 1000));
+  const deps = input.deps ?? {};
+  const now = deps.now ?? new Date();
+  const stripeClient = input.stripe ?? defaultSeatCapacityStripe();
+  const createdStores = input.store === undefined ? createServiceFeeStores() : undefined;
+  const store = input.store ?? createdStores?.assessments;
+  if (store === undefined) {
+    throw new Error('organization Kilo Pass checkout service-fee store is unavailable');
+  }
+
+  const customer = customerIdFromReference(input.subscription.customer);
+  const stripeIds: ServiceFeeStripeIds = { stripeCustomerId: customer };
+  const commercialMetadata = buildServiceFeeCommercialMetadata({
+    assessmentKey: input.assessmentKey,
+    flow: 'organization_kilo_pass',
+    organizationId: input.organizationId,
+  });
+
+  try {
+    const existing = await store.findByAssessmentKey(input.assessmentKey);
+    if (existing && (existing.outcome === 'charged' || existing.outcome === 'missed')) {
+      return {
+        ...empty,
+        assessmentKey: input.assessmentKey,
+        assessment: existing,
+        expectedFeeMinor: existing.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const preview = await stripeClient.invoices.createPreview({
+      customer: customer ?? undefined,
+      subscription: input.subscription.id,
+      subscription_details: {
+        items: [
+          ...input.subscription.items.data.map(item => ({
+            id: item.id,
+            quantity: item.quantity ?? 1,
+          })),
+          { price: input.priceId, quantity: input.quantity },
+        ],
+        proration_behavior: 'always_invoice',
+      },
+      expand: ['lines.data'],
+    });
+    const lines =
+      preview.lines?.has_more && preview.id
+        ? await listAllInvoiceLineItems({
+            invoice: { id: preview.id, lines: preview.lines },
+            stripe: stripeClient,
+          })
+        : (preview.lines?.data ?? []);
+    const eligibleSubtotalMinor = sumEligibleKiloPassSubtotalMinor({
+      lines,
+      currency: preview.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+      subscription: input.subscription,
+    });
+    const findEffectiveExemption =
+      deps.findEffectiveExemption ??
+      (createdStores
+        ? async (organizationId, at) =>
+            getEffectiveOrganizationServiceFeeExemption({
+              store: createdStores.exemptions,
+              organizationId,
+              at,
+            })
+        : undefined);
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey: input.assessmentKey,
+        flow: 'organization_kilo_pass',
+        currency: preview.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt: now,
+        eligibleSubtotalMinor,
+        kiloUserId: input.kiloUserId,
+        organizationId: input.organizationId,
+        stripeCustomerId: customer ?? undefined,
+      },
+      { findEffectiveExemption }
+    );
+    const record = await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds,
+      now,
+    });
+    if (record.outcome !== 'pending') {
+      return {
+        prorationDate: empty.prorationDate,
+        organizationPassItemId: null,
+        shouldAttach: false,
+        assessmentKey: input.assessmentKey,
+        assessment: record,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const resolveTax = deps.resolveTaxInput ?? resolveServiceFeeTaxInput;
+    let taxInput: ServiceFeeTaxInput;
+    try {
+      taxInput = await resolveTax({
+        principal: taxPrincipalFromLines(lines, input.subscription),
+        stripe: stripeClient.prices ? { prices: stripeClient.prices } : undefined,
+      });
+    } catch {
+      const missed = await persistSeatCapacityMissed({
+        store,
+        assessmentKey: input.assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+      return {
+        prorationDate: empty.prorationDate,
+        organizationPassItemId: null,
+        shouldAttach: false,
+        assessmentKey: input.assessmentKey,
+        assessment: missed.assessment,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+    if (!customer) {
+      const missed = await persistSeatCapacityMissed({
+        store,
+        assessmentKey: input.assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+      return {
+        prorationDate: empty.prorationDate,
+        organizationPassItemId: null,
+        shouldAttach: false,
+        assessmentKey: input.assessmentKey,
+        assessment: missed.assessment,
+        feeInvoiceItem: null,
+        expectedFeeMinor: record.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const feeInvoiceItem = buildAutoTopUpServiceFeeInvoiceItem({
+      assessmentKey: input.assessmentKey,
+      invoiceId: 'pending',
+      customerId: customer,
+      feeMinor: decision.expectedFeeMinor,
+      taxInput,
+    });
+    const { invoice: _pendingInvoice, ...feeInvoiceItemWithoutInvoice } = feeInvoiceItem;
+    return {
+      prorationDate: empty.prorationDate,
+      organizationPassItemId: null,
+      shouldAttach: true,
+      assessmentKey: input.assessmentKey,
+      assessment: record,
+      feeInvoiceItem: feeInvoiceItemWithoutInvoice,
+      expectedFeeMinor: decision.expectedFeeMinor,
+      commercialMetadata,
+    };
+  } catch (error) {
+    await alertSeatCapacitySafely({
+      assessmentKey: input.assessmentKey,
+      flow: 'organization_kilo_pass',
+      kiloUserId: input.kiloUserId,
+      organizationId: input.organizationId,
+      eligibleSubtotalMinor: 0,
+      expectedFeeMinor: 0,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+      deps,
+      now,
+    });
+    return {
+      ...empty,
+      assessmentKey: input.assessmentKey,
+      commercialMetadata,
+    };
+  }
+}
+
 export async function createOrganizationKiloPassCheckout(input: {
   organizationId: string;
   actorUserId: string;
   tier: 'tier_19' | 'tier_49' | 'tier_199';
   allocations: { childOrganizationId: string; passCount: number }[];
+  serviceFee?: Omit<OrganizationKiloPassServiceFeeAttachment, 'invoice' | 'subscription'>;
 }): Promise<
   { kind: 'payment_action'; clientSecret: string } | { kind: 'completed' } | { kind: 'pending' }
 > {
@@ -105,7 +1076,7 @@ export async function createOrganizationKiloPassCheckout(input: {
   if (subscription.status !== 'active' || subscription.ended_at) {
     throw new Error('An active organization seat subscription is required');
   }
-  const existingPassItem = subscription.items.data.find(item => !isSeatLineItem(item));
+  const existingPassItem = resolveOrganizationKiloPassSubscriptionItem({ subscription });
   if (existingPassItem) throw new Error('KILO_PASS_ORG_ALREADY_EXISTS');
   const seatItem = paidSeatItem(subscription);
   const cadence = intervalToCadence(seatItem.price.recurring?.interval);
@@ -132,28 +1103,93 @@ export async function createOrganizationKiloPassCheckout(input: {
     tier: input.tier as KiloPassTier,
     cadence: cadence as KiloPassCadence,
   });
-  const updated = await stripe.subscriptions.update(subscription.id, {
-    payment_behavior: 'allow_incomplete',
-    proration_behavior: 'always_invoice',
-    items: [{ price, quantity: paidSeats }],
-    metadata: {
-      ...subscription.metadata,
-      type: ORGANIZATION_KILO_PASS_METADATA_TYPE,
+  const assessmentKey = createOrgCheckoutServiceFeeAssessmentKey();
+  let prepared: PreparedOrganizationKiloPassSeatCapacityFee = {
+    ...emptyPreparedSeatCapacityFee(Math.floor(Date.now() / 1000)),
+    assessmentKey,
+    commercialMetadata: buildServiceFeeCommercialMetadata({
+      assessmentKey,
+      flow: 'organization_kilo_pass',
+      organizationId: input.organizationId,
+    }),
+  };
+  try {
+    prepared = await prepareOrganizationKiloPassCheckoutFee({
+      subscription,
+      priceId: price,
+      quantity: paidSeats,
       organizationId: input.organizationId,
       kiloUserId: input.actorUserId,
-      tier: input.tier,
-      cadence,
-    },
-    expand: ['latest_invoice.confirmation_secret'],
+      assessmentKey,
+      stripe: hasCreatePreview(input.serviceFee?.stripe) ? input.serviceFee.stripe : undefined,
+      store: input.serviceFee?.store,
+      deps: {
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        ...input.serviceFee?.deps,
+      },
+    });
+  } catch {
+    // Persist-before-update is best-effort. The base add-on still proceeds.
+  }
+  const pendingFeeItemId = await stagePreparedOrganizationKiloPassServiceFeeItem({
+    prepared,
+    stripe: input.serviceFee?.stripe,
   });
+  let updated: Stripe.Subscription;
+  try {
+    updated = await stripe.subscriptions.update(subscription.id, {
+      payment_behavior: 'allow_incomplete',
+      proration_behavior: 'always_invoice',
+      items: [{ price, quantity: paidSeats }],
+      metadata: {
+        ...subscription.metadata,
+        type: ORGANIZATION_KILO_PASS_METADATA_TYPE,
+        organizationId: input.organizationId,
+        kiloUserId: input.actorUserId,
+        tier: input.tier,
+        cadence,
+      },
+      expand: ['latest_invoice.confirmation_secret', 'latest_invoice.lines'],
+    });
+  } catch (error) {
+    if (pendingFeeItemId) {
+      await discardStagedOrganizationKiloPassServiceFeeItem({
+        invoiceItemId: pendingFeeItemId,
+        stripe: input.serviceFee?.stripe,
+      });
+    }
+    throw error;
+  }
   const passItem = organizationPassItem(updated);
   await bindProviderSeatAddOnItem({
     agreementId: pending.agreementId,
     providerSeatAddOnItemId: passItem.id,
   });
   const invoice = typeof updated.latest_invoice === 'object' ? updated.latest_invoice : null;
-  if (invoice?.status === 'paid' || invoice?.amount_due === 0) {
-    await handleOrganizationKiloPassInvoicePaid({ invoice });
+  let feeResult: Awaited<ReturnType<typeof attachPreparedOrganizationKiloPassServiceFee>> | null =
+    null;
+  if (invoice && prepared.shouldAttach) {
+    feeResult = await attachPreparedOrganizationKiloPassServiceFee({
+      prepared,
+      invoice,
+      stripe: input.serviceFee?.stripe,
+      store: input.serviceFee?.store,
+      deps: input.serviceFee?.deps,
+      pendingInvoiceItemId: pendingFeeItemId,
+    });
+  }
+  if (
+    invoice?.status === 'paid' ||
+    (invoice?.amount_due === 0 && feeResult?.outcome !== 'charged')
+  ) {
+    await handleOrganizationKiloPassInvoicePaid({
+      invoice,
+      serviceFee: {
+        store: input.serviceFee?.store,
+        stripe: input.serviceFee?.stripe,
+        deps: input.serviceFee?.deps,
+      },
+    });
     return { kind: 'completed' };
   }
   let openPayments: Stripe.ApiList<Stripe.InvoicePayment> | null = null;
@@ -181,18 +1217,39 @@ export async function createOrganizationKiloPassCheckout(input: {
   return { kind: 'pending' };
 }
 
-function invoiceLineForSubscriptionItem(invoice: Stripe.Invoice, itemId: string) {
-  return (invoice.lines?.data ?? []).find(
-    line => line.parent?.subscription_item_details?.subscription_item === itemId
+function invoiceLinesForSubscriptionItem(
+  invoice: Stripe.Invoice,
+  itemId: string
+): Stripe.InvoiceLineItem[] {
+  return (invoice.lines?.data ?? []).filter(
+    line =>
+      !isServiceFeeInvoiceLine(line) &&
+      line.parent?.subscription_item_details?.subscription_item === itemId
   );
 }
 
+function preferredInvoiceLine(
+  lines: readonly Stripe.InvoiceLineItem[]
+): Stripe.InvoiceLineItem | undefined {
+  if (lines.length === 0) return undefined;
+  const positive = lines.filter(line => line.amount > 0);
+  const pool = positive.length > 0 ? positive : lines;
+  return [...pool].sort((left, right) => (right.quantity ?? 0) - (left.quantity ?? 0))[0];
+}
+
+function invoiceLineForSubscriptionItem(invoice: Stripe.Invoice, itemId: string) {
+  return preferredInvoiceLine(invoiceLinesForSubscriptionItem(invoice, itemId));
+}
+
 function invoiceLineForKnownKiloPassPrice(invoice: Stripe.Invoice) {
   const knownPriceIds = new Set(getKnownStripePriceIdsForKiloPass());
-  return (invoice.lines?.data ?? []).find(line => {
-    const priceId = line.pricing?.price_details?.price;
-    return priceId !== undefined && knownPriceIds.has(priceId);
-  });
+  return preferredInvoiceLine(
+    (invoice.lines?.data ?? []).filter(line => {
+      if (isServiceFeeInvoiceLine(line)) return false;
+      const priceId = line.pricing?.price_details?.price;
+      return priceId !== undefined && knownPriceIds.has(priceId);
+    })
+  );
 }
 
 function linePeriod(line: Stripe.InvoiceLineItem) {
@@ -216,9 +1273,49 @@ function isBridgeWindow(window: IssuanceWindow, paid: IssuanceWindow) {
   return paid.start > window.start || paid.end < window.end;
 }
 
+async function settleOrganizationKiloPassInvoiceServiceFeeBeforeActivation(params: {
+  invoice: Stripe.Invoice;
+  subscription: Stripe.Subscription;
+  serviceFee?:
+    | {
+        store?: ServiceFeeAssessmentStore;
+        stripe?: KiloPassServiceFeeSettlementStripe;
+        deps?: KiloPassServiceFeeSettlementDependencies & { now?: Date };
+      }
+    | undefined;
+}): Promise<void> {
+  const createdStores =
+    params.serviceFee?.store === undefined ? createServiceFeeStores() : undefined;
+  const store = (params.serviceFee?.store ?? createdStores?.assessments) as
+    | ServiceFeeSettlementStore
+    | undefined;
+  if (store === undefined) return;
+  try {
+    await settleKiloPassInvoiceServiceFee({
+      invoice: params.invoice,
+      stripe: params.serviceFee?.stripe ?? {
+        invoices: stripe.invoices,
+        subscriptions: stripe.subscriptions,
+      },
+      store,
+      subscription: params.subscription,
+      deps: params.serviceFee?.deps,
+    });
+  } catch {
+    // Fee settlement must not block agreement activation after a successful payment.
+  }
+}
+
 export async function handleOrganizationKiloPassInvoicePaid(params: {
   invoice: Stripe.Invoice;
   paidSeatCount?: number;
+  serviceFee?: {
+    store?: ServiceFeeAssessmentStore;
+    stripe?: KiloPassServiceFeeSettlementStripe;
+    deps?: KiloPassServiceFeeSettlementDependencies & {
+      now?: Date;
+    };
+  };
 }) {
   const reference = params.invoice.parent?.subscription_details?.subscription;
   const subscriptionId = typeof reference === 'string' ? reference : reference?.id;
@@ -238,18 +1335,20 @@ export async function handleOrganizationKiloPassInvoicePaid(params: {
     .orderBy(desc(kilo_pass_org_agreements.created_at))
     .limit(1);
   if (!agreement) return false;
-  const boundItem = subscription.items.data.find(
-    item => item.id === agreement.provider_seat_add_on_item_id
-  );
-  const item = boundItem ?? subscription.items.data.find(item => !isSeatLineItem(item));
+  const item = resolveOrganizationKiloPassSubscriptionItem({
+    subscription,
+    boundProviderItemId: agreement.provider_seat_add_on_item_id,
+  });
   if (!item) return false;
-  if (!boundItem) {
+  if (agreement.provider_seat_add_on_item_id !== item.id) {
     await bindProviderSeatAddOnItem({
       agreementId: agreement.id,
       providerSeatAddOnItemId: item.id,
     });
   }
-  const line = invoiceLineForSubscriptionItem(params.invoice, item.id);
+  const line =
+    invoiceLineForSubscriptionItem(params.invoice, item.id) ??
+    invoiceLineForKnownKiloPassPrice(params.invoice);
   if (!line) return false;
   const paidPeriod = linePeriod(line);
   const seatItem = subscription.items.data.find(isSeatLineItem);
@@ -275,6 +1374,11 @@ export async function handleOrganizationKiloPassInvoicePaid(params: {
   const paidIncreaseSupersedesPendingCapacity =
     agreement.next_purchased_pass_capacity !== null &&
     seats > agreement.next_purchased_pass_capacity;
+  await settleOrganizationKiloPassInvoiceServiceFeeBeforeActivation({
+    invoice: params.invoice,
+    subscription,
+    serviceFee: params.serviceFee,
+  });
   await activatePaidAgreement({
     agreementId: agreement.id,
     recipientUserId: metadata.kiloUserId,
@@ -482,7 +1586,10 @@ export async function handleOrganizationKiloPassSubscriptionEvent(
     .orderBy(desc(kilo_pass_org_agreements.created_at))
     .limit(1);
   if (!agreement) return false;
-  const item = subscription.items.data.find(item => !isSeatLineItem(item));
+  const item = resolveOrganizationKiloPassSubscriptionItem({
+    subscription,
+    boundProviderItemId: agreement.provider_seat_add_on_item_id,
+  });
   if (!item) {
     await db
       .update(kilo_pass_org_agreements)
@@ -553,7 +1660,7 @@ export async function endPendingOrganizationKiloPassForTerminalInvoice(invoice:
     .orderBy(desc(kilo_pass_org_agreements.created_at))
     .limit(1);
   if (!agreement) return false;
-  const isUnbound = agreement.provider_seat_add_on_item_id?.startsWith('pending:') === true;
+  const isUnbound = isPendingProviderItemId(agreement.provider_seat_add_on_item_id);
   const unboundPassLine = isUnbound ? invoiceLineForKnownKiloPassPrice(invoice) : undefined;
   if (
     isUnbound
@@ -564,10 +1671,10 @@ export async function endPendingOrganizationKiloPassForTerminalInvoice(invoice:
   }
 
   const subscription = await stripe.subscriptions.retrieve(subscriptionId);
-  const unboundPassPriceId = unboundPassLine?.pricing?.price_details?.price;
-  const passItem = isUnbound
-    ? subscription.items.data.find(item => item.price.id === unboundPassPriceId)
-    : subscription.items.data.find(item => item.id === agreement.provider_seat_add_on_item_id);
+  const passItem = resolveOrganizationKiloPassSubscriptionItem({
+    subscription,
+    boundProviderItemId: isUnbound ? undefined : agreement.provider_seat_add_on_item_id,
+  });
   if (passItem) {
     await stripe.subscriptions.update(subscriptionId, {
       proration_behavior: 'none',
diff --git a/apps/web/src/lib/kilo-pass/affiliate-sale.test.ts b/apps/web/src/lib/kilo-pass/affiliate-sale.test.ts
new file mode 100644
index 0000000000..92319c9d36
--- /dev/null
+++ b/apps/web/src/lib/kilo-pass/affiliate-sale.test.ts
@@ -0,0 +1,151 @@
+import { beforeEach, describe, expect, test } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import { KiloPassCadence, KiloPassTier } from '@/lib/kilo-pass/enums';
+import type * as affiliateEventsModule from '@/lib/impact/affiliate-events';
+
+// Use global `jest.mock` so SWC hoists it before the static import below.
+jest.mock('@/lib/impact/affiliate-events', () => {
+  const actual = jest.requireActual<typeof affiliateEventsModule>('@/lib/impact/affiliate-events');
+  return {
+    __esModule: true,
+    ...actual,
+    enqueueAffiliateEventForUser: jest.fn(async () => null),
+  };
+});
+
+import { enqueueKiloPassAffiliateSaleForInvoice } from '@/lib/kilo-pass/affiliate-sale';
+
+const enqueueAffiliateEventForUser = jest.mocked(
+  jest.requireMock<typeof affiliateEventsModule>('@/lib/impact/affiliate-events')
+    .enqueueAffiliateEventForUser
+);
+
+function makeInvoice(params: {
+  id: string;
+  amountPaid: number;
+  currency?: string;
+  paidAt?: number;
+  promotionCode?: string;
+}): Stripe.Invoice {
+  return {
+    id: params.id,
+    object: 'invoice',
+    amount_paid: params.amountPaid,
+    currency: params.currency ?? 'usd',
+    status_transitions: {
+      paid_at: params.paidAt ?? 1_767_830_400,
+    },
+    discounts: params.promotionCode
+      ? [
+          {
+            id: 'di_test',
+            object: 'discount',
+            promotion_code: {
+              id: 'promo_test',
+              object: 'promotion_code',
+              code: params.promotionCode,
+            },
+          },
+        ]
+      : [],
+    payments: {
+      object: 'list',
+      has_more: false,
+      url: `/v1/invoices/${params.id}/payments`,
+      data: [
+        {
+          id: 'inpay_test',
+          object: 'invoice_payment',
+          status: 'paid',
+          payment: {
+            type: 'charge',
+            charge: 'ch_affiliate_test',
+          },
+        },
+      ],
+    },
+  } as unknown as Stripe.Invoice;
+}
+
+describe('enqueueKiloPassAffiliateSaleForInvoice', () => {
+  beforeEach(() => {
+    enqueueAffiliateEventForUser.mockReset();
+    enqueueAffiliateEventForUser.mockResolvedValue(null);
+  });
+
+  test('reports explicit productAmountMinor and never the invoice gross', async () => {
+    const invoice = makeInvoice({
+      id: 'in_affiliate_product',
+      amountPaid: 5_145,
+      currency: 'eur',
+      promotionCode: 'SAVE20',
+    });
+
+    await enqueueKiloPassAffiliateSaleForInvoice({
+      eventId: 'evt_affiliate_product',
+      invoice,
+      stripe: {} as Stripe,
+      context: {
+        userId: 'user_1',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        itemSku: 'price_kilo_pass_tier_49_monthly',
+      },
+      productAmountMinor: 3_920,
+    });
+
+    expect(enqueueAffiliateEventForUser).toHaveBeenCalledTimes(1);
+    expect(enqueueAffiliateEventForUser).toHaveBeenCalledWith(
+      expect.objectContaining({
+        userId: 'user_1',
+        provider: 'impact',
+        eventType: 'sale',
+        orderId: 'in_affiliate_product',
+        amount: 39.2,
+        currencyCode: 'eur',
+        itemCategory: 'kilo-pass-tier-49-monthly',
+        itemName: 'Kilo Pass Tier 49 Monthly',
+        itemSku: 'price_kilo_pass_tier_49_monthly',
+        promoCode: 'SAVE20',
+        stripeChargeId: 'ch_affiliate_test',
+      })
+    );
+    const reportedAmount = enqueueAffiliateEventForUser.mock.calls[0]?.[0]?.amount;
+    expect(reportedAmount).not.toBe(invoice.amount_paid / 100);
+  });
+
+  test('zero productAmountMinor suppresses sale even when invoice.amount_paid is positive', async () => {
+    await enqueueKiloPassAffiliateSaleForInvoice({
+      eventId: 'evt_affiliate_zero_product',
+      invoice: makeInvoice({
+        id: 'in_affiliate_zero_product',
+        amountPaid: 245,
+      }),
+      stripe: {} as Stripe,
+      context: {
+        userId: 'user_1',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+      },
+      productAmountMinor: 0,
+    });
+
+    expect(enqueueAffiliateEventForUser).not.toHaveBeenCalled();
+  });
+
+  test('missing context suppresses sale without reading gross', async () => {
+    await enqueueKiloPassAffiliateSaleForInvoice({
+      eventId: 'evt_affiliate_missing_context',
+      invoice: makeInvoice({
+        id: 'in_affiliate_missing_context',
+        amountPaid: 4_900,
+      }),
+      stripe: {} as Stripe,
+      context: null,
+      productAmountMinor: 4_900,
+    });
+
+    expect(enqueueAffiliateEventForUser).not.toHaveBeenCalled();
+  });
+});
diff --git a/apps/web/src/lib/kilo-pass/affiliate-sale.ts b/apps/web/src/lib/kilo-pass/affiliate-sale.ts
index aaf1ff8513..5d520995e5 100644
--- a/apps/web/src/lib/kilo-pass/affiliate-sale.ts
+++ b/apps/web/src/lib/kilo-pass/affiliate-sale.ts
@@ -139,9 +139,10 @@ export async function enqueueKiloPassAffiliateSaleForInvoice(params: {
   invoice: Stripe.Invoice;
   stripe: Stripe;
   context: KiloPassAffiliateSaleContext | null;
+  productAmountMinor: number;
 }): Promise<void> {
-  const { eventId, invoice, stripe, context } = params;
-  if (!context || invoice.amount_paid <= 0) {
+  const { eventId, invoice, stripe, context, productAmountMinor } = params;
+  if (!context || productAmountMinor <= 0) {
     return;
   }
 
@@ -164,7 +165,7 @@ export async function enqueueKiloPassAffiliateSaleForInvoice(params: {
       }),
       eventDate,
       orderId: invoice.id,
-      amount: invoice.amount_paid / 100,
+      amount: productAmountMinor / 100,
       currencyCode: invoice.currency ?? 'usd',
       ...getKiloPassAffiliateSaleReportingFields(context),
       ...(promoCode ? { promoCode } : {}),
diff --git a/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.test.ts b/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.test.ts
index 2e4543cc8e..593ba348ea 100644
--- a/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.test.ts
+++ b/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.test.ts
@@ -32,6 +32,15 @@ import type Stripe from 'stripe';
 import type * as affiliateEventsModule from '@/lib/impact/affiliate-events';
 import { randomUUID } from 'node:crypto';
 import { digestCardFingerprint } from '@/lib/kilo-pass/card-fingerprint-gate';
+import {
+  markServiceFeeAssessmentCharged,
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+} from '@/lib/service-fees/assessments';
+import { createInvoiceServiceFeeAssessmentKey } from '@/lib/service-fees/checkout';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import { buildServiceFeeLineMetadata } from '@/lib/service-fees/stripe-lines';
 
 jest.mock('@/lib/kilo-pass/posthog-tracking', () => ({
   runAfterResponse: async (work: () => Promise<void>) => {
@@ -325,6 +334,131 @@ async function seedBaseIssuance(params: {
   });
 }
 
+async function persistPersonalKiloPassAssessment(params: {
+  invoiceId: string;
+  kiloUserId: string;
+  eligibleSubtotalMinor: number;
+  chargedFeeMinor: number;
+}): Promise<string> {
+  const store = createServiceFeeStores().assessments;
+  const assessmentKey = createInvoiceServiceFeeAssessmentKey(params.invoiceId);
+  const decision = await prepareServiceFeeAssessmentDecision({
+    assessmentKey,
+    flow: 'personal_kilo_pass',
+    currency: 'usd',
+    eligibilityCreatedAt: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+    eligibleSubtotalMinor: params.eligibleSubtotalMinor,
+    kiloUserId: params.kiloUserId,
+    stripeCustomerId: 'cus_kilo_pass_test',
+  });
+  const record = await upsertServiceFeeAssessment({
+    store,
+    decision,
+    stripeIds: {
+      stripeCustomerId: 'cus_kilo_pass_test',
+      stripeInvoiceId: params.invoiceId,
+      stripeInvoiceFeeLineItemId: `il_fee_${params.invoiceId}`,
+    },
+  });
+  if (decision.outcome === 'pending') {
+    await markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: record.assessmentKey,
+      chargedFeeMinor: params.chargedFeeMinor,
+      stripeIds: {
+        stripeInvoiceFeeLineItemId: `il_fee_${params.invoiceId}`,
+      },
+    });
+  }
+  return assessmentKey;
+}
+
+function attachSettledKiloPassLines(
+  invoice: Stripe.Invoice,
+  params: {
+    priceId: string;
+    assessmentKey: string;
+    productMinor: number;
+    feeMinor: number;
+    listProductMinor?: number;
+    listFeeMinor?: number;
+  }
+): Stripe.Invoice {
+  const listProductMinor = params.listProductMinor ?? params.productMinor;
+  const listFeeMinor = params.listFeeMinor ?? params.feeMinor;
+  invoice.status = 'paid';
+  invoice.lines = {
+    object: 'list',
+    has_more: false,
+    url: `/v1/invoices/${invoice.id}/lines`,
+    data: [
+      {
+        id: `il_pass_${invoice.id}`,
+        object: 'line_item',
+        amount: listProductMinor,
+        currency: invoice.currency ?? 'usd',
+        description: 'Kilo Pass',
+        discountable: true,
+        discount_amounts: null,
+        discounts: [],
+        invoice: invoice.id,
+        livemode: false,
+        metadata: {},
+        parent: null,
+        period: { start: 1, end: 2 },
+        pretax_credit_amounts:
+          listProductMinor === params.productMinor
+            ? null
+            : [
+                {
+                  amount: listProductMinor - params.productMinor,
+                  type: 'discount',
+                  discount: 'di_test',
+                },
+              ],
+        pricing: {
+          type: 'price_details',
+          unit_amount_decimal: String(listProductMinor),
+          price_details: { price: params.priceId, product: 'prod_kilo_pass' },
+        },
+        quantity: 1,
+        subscription: null,
+        taxes: null,
+      } as Stripe.InvoiceLineItem,
+      {
+        id: `il_fee_${invoice.id}`,
+        object: 'line_item',
+        amount: listFeeMinor,
+        currency: invoice.currency ?? 'usd',
+        description: 'Service fee (5%)',
+        discountable: false,
+        discount_amounts: null,
+        discounts: [],
+        invoice: invoice.id,
+        livemode: false,
+        metadata: buildServiceFeeLineMetadata(params.assessmentKey),
+        parent: null,
+        period: { start: 1, end: 2 },
+        pretax_credit_amounts:
+          listFeeMinor === params.feeMinor
+            ? null
+            : [
+                {
+                  amount: listFeeMinor - params.feeMinor,
+                  type: 'discount',
+                  discount: 'di_test',
+                },
+              ],
+        pricing: null,
+        quantity: 1,
+        subscription: null,
+        taxes: null,
+      } as Stripe.InvoiceLineItem,
+    ],
+  };
+  return invoice;
+}
+
 function makeInvoicesListMock(params: {
   yearlyPeriodStartSeconds: number;
   yearlyPeriodEndSeconds: number;
@@ -1251,6 +1385,238 @@ describe('handleKiloPassInvoicePaid', () => {
     );
   });
 
+  test('monthly: discounted settlement reports product amount and excludes the service fee', async () => {
+    const trackingMock = getPosthogTrackingMock();
+    const { handleKiloPassInvoicePaid } =
+      await import('@/lib/kilo-pass/stripe-handlers-invoice-paid');
+    const user = await insertTestUser({ total_microdollars_acquired: 0, microdollars_used: 0 });
+    await seedDeliveredImpactSignupEvent(user.id, user.google_user_email);
+    const stripeSubId = `sub_affiliate_discount_${Math.random()}`;
+    const meta = kiloPassMetadata({
+      kiloUserId: user.id,
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const subscription = makeStripeSubscription({
+      id: stripeSubId,
+      start_date_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      metadata: meta,
+    });
+    const priceId = await getKiloPassPriceId({
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const invoiceId = `inv_affiliate_discount_${Math.random()}`;
+    const assessmentKey = await persistPersonalKiloPassAssessment({
+      invoiceId,
+      kiloUserId: user.id,
+      eligibleSubtotalMinor: 4_900,
+      chargedFeeMinor: 245,
+    });
+    const invoice = attachSettledKiloPassLines(
+      makeStripeInvoice({
+        id: invoiceId,
+        amount_paid_cents: 4_116,
+        currency: 'usd',
+        period_start_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        created_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        paid_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 10,
+        priceId,
+        subscriptionIdOrExpanded: stripeSubId,
+        metadata: meta,
+        billingReason: 'subscription_cycle',
+      }),
+      {
+        priceId,
+        assessmentKey,
+        productMinor: 3_920,
+        feeMinor: 196,
+        listProductMinor: 4_900,
+        listFeeMinor: 245,
+      }
+    );
+
+    await handleKiloPassInvoicePaid({
+      eventId: 'evt_affiliate_discount',
+      invoice,
+      stripe: {
+        subscriptions: {
+          retrieve: jest.fn(async () => subscription),
+        },
+      } as unknown as Stripe,
+    });
+
+    expect(trackingMock.trackKiloPassPurchaseCompleted).toHaveBeenCalledWith(
+      expect.objectContaining({
+        amountPaidUsd: 39.2,
+        stripeInvoiceId: invoiceId,
+      })
+    );
+    const events = await db
+      .select()
+      .from(user_affiliate_events)
+      .where(eq(user_affiliate_events.user_id, user.id));
+    const saleEvent = events.find(event => event.event_type === 'sale');
+    expect(saleEvent).toEqual(
+      expect.objectContaining({
+        payload_json: expect.objectContaining({
+          orderId: invoiceId,
+          amount: 39.2,
+          currencyCode: 'usd',
+          itemCategory: 'kilo-pass-tier-49-monthly',
+        }),
+      })
+    );
+    expect(saleEvent?.payload_json.amount).not.toBe(41.16);
+  });
+
+  test('product analytics fallback never uses a fee-inclusive gross amount', async () => {
+    const trackingMock = getPosthogTrackingMock();
+    const { handleKiloPassInvoicePaid } =
+      await import('@/lib/kilo-pass/stripe-handlers-invoice-paid');
+    const user = await insertTestUser({ total_microdollars_acquired: 0, microdollars_used: 0 });
+    await seedDeliveredImpactSignupEvent(user.id, user.google_user_email);
+    const stripeSubId = `sub_affiliate_gross_${Math.random()}`;
+    const meta = kiloPassMetadata({
+      kiloUserId: user.id,
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const subscription = makeStripeSubscription({
+      id: stripeSubId,
+      start_date_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      metadata: meta,
+    });
+    const priceId = await getKiloPassPriceId({
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const invoiceId = `inv_affiliate_gross_${Math.random()}`;
+    const invoice = attachSettledKiloPassLines(
+      makeStripeInvoice({
+        id: invoiceId,
+        amount_paid_cents: 5_145,
+        currency: 'usd',
+        period_start_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        created_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        paid_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 10,
+        priceId,
+        subscriptionIdOrExpanded: stripeSubId,
+        metadata: meta,
+        billingReason: 'subscription_cycle',
+      }),
+      {
+        priceId,
+        assessmentKey: createInvoiceServiceFeeAssessmentKey(invoiceId),
+        productMinor: 4_900,
+        feeMinor: 245,
+      }
+    );
+
+    await handleKiloPassInvoicePaid({
+      eventId: 'evt_affiliate_gross',
+      invoice,
+      stripe: {
+        subscriptions: {
+          retrieve: jest.fn(async () => subscription),
+        },
+      } as unknown as Stripe,
+    });
+
+    expect(trackingMock.trackKiloPassPurchaseCompleted).toHaveBeenCalledWith(
+      expect.objectContaining({
+        amountPaidUsd: 49,
+        stripeInvoiceId: invoiceId,
+      })
+    );
+    const events = await db
+      .select()
+      .from(user_affiliate_events)
+      .where(eq(user_affiliate_events.user_id, user.id));
+    const saleEvent = events.find(event => event.event_type === 'sale');
+    expect(saleEvent?.payload_json.amount).toBe(49);
+    expect(saleEvent?.payload_json.amount).not.toBe(51.45);
+  });
+
+  test('monthly: 100% discount settles zero product and suppresses affiliate sale', async () => {
+    const trackingMock = getPosthogTrackingMock();
+    const { handleKiloPassInvoicePaid } =
+      await import('@/lib/kilo-pass/stripe-handlers-invoice-paid');
+    const user = await insertTestUser({ total_microdollars_acquired: 0, microdollars_used: 0 });
+    await seedDeliveredImpactSignupEvent(user.id, user.google_user_email);
+    const stripeSubId = `sub_affiliate_free_${Math.random()}`;
+    const meta = kiloPassMetadata({
+      kiloUserId: user.id,
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const subscription = makeStripeSubscription({
+      id: stripeSubId,
+      start_date_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      metadata: meta,
+    });
+    const priceId = await getKiloPassPriceId({
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    });
+    const invoiceId = `inv_affiliate_free_${Math.random()}`;
+    const assessmentKey = await persistPersonalKiloPassAssessment({
+      invoiceId,
+      kiloUserId: user.id,
+      eligibleSubtotalMinor: 4_900,
+      chargedFeeMinor: 0,
+    });
+    const invoice = attachSettledKiloPassLines(
+      makeStripeInvoice({
+        id: invoiceId,
+        amount_paid_cents: 0,
+        currency: 'usd',
+        period_start_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        created_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        paid_seconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 10,
+        priceId,
+        subscriptionIdOrExpanded: stripeSubId,
+        metadata: meta,
+        billingReason: 'subscription_cycle',
+      }),
+      {
+        priceId,
+        assessmentKey,
+        productMinor: 0,
+        feeMinor: 0,
+        listProductMinor: 4_900,
+        listFeeMinor: 245,
+      }
+    );
+
+    await handleKiloPassInvoicePaid({
+      eventId: 'evt_affiliate_free',
+      invoice,
+      stripe: {
+        subscriptions: {
+          retrieve: jest.fn(async () => subscription),
+        },
+      } as unknown as Stripe,
+    });
+
+    expect(trackingMock.trackKiloPassPurchaseCompleted).toHaveBeenCalledWith(
+      expect.objectContaining({
+        amountPaidUsd: 0,
+        stripeInvoiceId: invoiceId,
+      })
+    );
+    const saleEvents = await db
+      .select()
+      .from(user_affiliate_events)
+      .where(
+        and(
+          eq(user_affiliate_events.user_id, user.id),
+          eq(user_affiliate_events.event_type, 'sale')
+        )
+      );
+    expect(saleEvents).toHaveLength(0);
+  });
+
   test('monthly: referral conversion processor suppresses affiliate SALE when referral wins', async () => {
     const processPersonalKiloPassStripePaidConversion = jest.fn(async (_params: unknown) => ({
       shouldEnqueueAffiliateSale: false,
diff --git a/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.ts b/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.ts
index 294aef75a2..836f499a10 100644
--- a/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.ts
+++ b/apps/web/src/lib/kilo-pass/stripe-handlers-invoice-paid.ts
@@ -72,6 +72,12 @@ import {
   type KiloPassAffiliateSaleContext,
 } from '@/lib/kilo-pass/affiliate-sale';
 import { processPersonalKiloPassStripePaidConversion } from '@/lib/impact/kilo-pass-referrals';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import {
+  settleKiloPassInvoiceServiceFee,
+  type KiloPassServiceFeeSettlementResult,
+} from '@/lib/service-fees/settlement';
+import { isServiceFeeInvoiceLine } from '@/lib/service-fees/stripe-lines';
 import {
   runAfterResponse,
   trackKiloPassPurchaseCompleted,
@@ -422,6 +428,28 @@ async function hasHandledKiloPassInvoicePaid(
   return existing !== undefined;
 }
 
+function invoiceHasServiceFeeLine(invoice: Stripe.Invoice): boolean {
+  return (invoice.lines?.data ?? []).some(line => isServiceFeeInvoiceLine(line));
+}
+
+function productOnlyKiloPassAnalyticsAmount(invoice: Stripe.Invoice): number {
+  if (invoiceHasServiceFeeLine(invoice)) return 0;
+  return invoice.amount_paid;
+}
+
+function productAmountFromServiceFeeSettlement(
+  invoice: Stripe.Invoice,
+  settlement: KiloPassServiceFeeSettlementResult
+): number {
+  if (settlement.status === 'settled' || settlement.assessment) {
+    return settlement.settledProductMinor;
+  }
+  if (invoiceHasServiceFeeLine(invoice)) {
+    return settlement.settledProductMinor;
+  }
+  return invoice.amount_paid;
+}
+
 function purchaseKindFromBillingReason(
   billingReason: Stripe.Invoice['billing_reason']
 ): KiloPassPurchaseKind {
@@ -452,6 +480,7 @@ export async function handleKiloPassInvoicePaid(params: {
   // invoice handling when Stripe did not surface the matching price line.
   if (!invoiceLooksLikeKiloPassByPriceId(invoice) && !metadataFromInvoice) return;
 
+  let settledProductMinor = productOnlyKiloPassAnalyticsAmount(invoice);
   let didMutateBalance = false;
   let kiloUserIdForCache: string | null = null;
   const affiliateSaleState: {
@@ -502,6 +531,25 @@ export async function handleKiloPassInvoicePaid(params: {
       }
 
       const priceMetadata = getKiloPassPriceMetadataFromInvoice(invoice);
+      try {
+        const serviceFeeSettlement = await settleKiloPassInvoiceServiceFee({
+          invoice,
+          stripe,
+          store: createServiceFeeStores(tx).assessments,
+          subscription,
+        });
+        settledProductMinor = productAmountFromServiceFeeSettlement(invoice, serviceFeeSettlement);
+      } catch (error) {
+        captureException(error, {
+          tags: { source: 'kilo_pass_service_fee_settlement' },
+          extra: {
+            stripeEventId: eventId,
+            stripeInvoiceId: invoice.id,
+            stripeSubscriptionId: subscription.id,
+          },
+        });
+        settledProductMinor = productOnlyKiloPassAnalyticsAmount(invoice);
+      }
 
       const kiloUserId = metadata.kiloUserId;
       const tier = priceMetadata?.tier ?? metadata.tier;
@@ -919,7 +967,7 @@ export async function handleKiloPassInvoicePaid(params: {
         cadence: referralConversionState.cadence,
         purchaseKind: purchaseKindFromBillingReason(invoice.billing_reason),
         stripeInvoiceId: invoice.id,
-        amountPaidUsd: invoice.amount_paid / 100,
+        amountPaidUsd: settledProductMinor / 100,
         currency: (invoice.currency ?? 'usd').toLowerCase(),
         livemode: invoice.livemode,
       });
@@ -956,7 +1004,7 @@ export async function handleKiloPassInvoicePaid(params: {
       kiloPassSubscriptionId: referralConversionState.kiloPassSubscriptionId,
       sourcePaymentId: invoice.id,
       orderId: invoice.id,
-      amount: invoice.amount_paid / 100,
+      amount: settledProductMinor / 100,
       currencyCode: invoice.currency ?? 'usd',
       itemCategory: reportingFields.itemCategory,
       itemName: reportingFields.itemName,
@@ -977,6 +1025,7 @@ export async function handleKiloPassInvoicePaid(params: {
       invoice,
       stripe,
       context: affiliateSaleState.context,
+      productAmountMinor: settledProductMinor,
     });
   }
 
diff --git a/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.test.ts b/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.test.ts
index 383a5fe4cc..66a06b8d8d 100644
--- a/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.test.ts
+++ b/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.test.ts
@@ -1,5 +1,40 @@
 import { describe, expect, test } from '@jest/globals';
-import { invoiceLooksLikeOrganizationKiloPass } from './stripe-invoice-classifier.server';
+import type Stripe from 'stripe';
+
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import {
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import { buildServiceFeeLineMetadata } from '@/lib/service-fees/stripe-lines';
+import {
+  invoiceLooksLikeKiloPassByPriceId,
+  invoiceLooksLikeOrganizationKiloPass,
+} from './stripe-invoice-classifier.server';
+
+const KILO_PASS_PRICE_ID = getKnownStripePriceIdsForKiloPass()[0]!;
+
+function invoiceWithLines(
+  lines: Array<{
+    priceId?: string;
+    metadata?: Stripe.Metadata;
+  }>
+): Stripe.Invoice {
+  return {
+    lines: {
+      data: lines.map((line, index) => ({
+        id: `il_${index}`,
+        metadata: line.metadata ?? {},
+        pricing: line.priceId
+          ? {
+              price_details: { price: line.priceId },
+            }
+          : null,
+      })),
+    },
+  } as unknown as Stripe.Invoice;
+}
 
 describe('organization Kilo Pass invoice classifier', () => {
   test('classifies explicit organization metadata before shared personal price fallback', () => {
@@ -19,3 +54,48 @@ describe('organization Kilo Pass invoice classifier', () => {
     expect(invoiceLooksLikeOrganizationKiloPass(invoice as never)).toBe(true);
   });
 });
+
+describe('personal Kilo Pass invoice classifier', () => {
+  test('recognizes a known Kilo Pass price before any later fee line', () => {
+    expect(
+      invoiceLooksLikeKiloPassByPriceId(
+        invoiceWithLines([
+          { priceId: KILO_PASS_PRICE_ID },
+          {
+            priceId: 'price_service_fee',
+            metadata: buildServiceFeeLineMetadata('checkout:kilo-pass-fee'),
+          },
+        ])
+      )
+    ).toBe(true);
+  });
+
+  test('ignores service-fee lines before known Kilo Pass price evidence', () => {
+    const feeOnlyReusingKnownPrice = invoiceWithLines([
+      {
+        priceId: KILO_PASS_PRICE_ID,
+        metadata: {
+          type: SERVICE_FEE_METADATA_TYPE,
+          serviceFeeVersion: SERVICE_FEE_VERSION,
+          serviceFeeAssessmentKey: 'checkout:kilo-pass-fee',
+          serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+        },
+      },
+    ]);
+
+    expect(invoiceLooksLikeKiloPassByPriceId(feeOnlyReusingKnownPrice)).toBe(false);
+    expect(
+      invoiceLooksLikeKiloPassByPriceId(
+        invoiceWithLines([
+          {
+            priceId: 'price_service_fee',
+            metadata: buildServiceFeeLineMetadata('checkout:kilo-pass-fee'),
+          },
+        ])
+      )
+    ).toBe(false);
+    expect(invoiceLooksLikeKiloPassByPriceId(invoiceWithLines([{ priceId: 'price_other' }]))).toBe(
+      false
+    );
+  });
+});
diff --git a/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.ts b/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.ts
index ec817afcd6..393250e51b 100644
--- a/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.ts
+++ b/apps/web/src/lib/kilo-pass/stripe-invoice-classifier.server.ts
@@ -4,12 +4,14 @@ import type Stripe from 'stripe';
 
 import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
 import { getOrganizationKiloPassMetadata } from '@/lib/kilo-pass-org/stripe-metadata';
+import { isServiceFeeInvoiceLine } from '@/lib/service-fees/stripe-lines';
 
 function getInvoiceLinePriceIds(invoice: Stripe.Invoice): string[] {
   const ids: string[] = [];
   const lines = invoice.lines?.data ?? [];
 
   for (const line of lines) {
+    if (isServiceFeeInvoiceLine(line)) continue;
     const priceId = line.pricing?.price_details?.price ?? null;
     if (priceId) ids.push(priceId);
   }
diff --git a/apps/web/src/lib/kiloclaw/stripe-invoice-classifier.server.test.ts b/apps/web/src/lib/kiloclaw/stripe-invoice-classifier.server.test.ts
index b1c6a1ab8c..af20cc7c5d 100644
--- a/apps/web/src/lib/kiloclaw/stripe-invoice-classifier.server.test.ts
+++ b/apps/web/src/lib/kiloclaw/stripe-invoice-classifier.server.test.ts
@@ -5,6 +5,12 @@ import {
   classifyKiloClawInvoiceLine,
   invoiceLooksLikeKiloClawByPriceId,
 } from '@/lib/kiloclaw/stripe-invoice-classifier.server';
+import {
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import { buildServiceFeeLineMetadata } from '@/lib/service-fees/stripe-lines';
 
 function requiredEnv(key: string): string {
   const value = process.env[key];
@@ -89,4 +95,51 @@ describe('KiloClaw Stripe invoice classification', () => {
     ).toBe(true);
     expect(invoiceLooksLikeKiloClawByPriceId(invoiceWithPrice('price_unrelated'))).toBe(false);
   });
+
+  it('does not treat a service-fee line as KiloClaw', () => {
+    const feeInvoice = {
+      id: 'in_service_fee',
+      object: 'invoice',
+      lines: {
+        data: [
+          {
+            metadata: {
+              type: SERVICE_FEE_METADATA_TYPE,
+              serviceFeeVersion: SERVICE_FEE_VERSION,
+              serviceFeeAssessmentKey: 'checkout:fee',
+              serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+            },
+            pricing: {
+              price_details: { price: 'price_service_fee' },
+            },
+          },
+        ],
+      },
+    } as unknown as Stripe.Invoice;
+
+    expect(invoiceLooksLikeKiloClawByPriceId(feeInvoice)).toBe(false);
+    expect(classifyKiloClawInvoiceLine(feeInvoice)).toBeNull();
+    expect(
+      invoiceLooksLikeKiloClawByPriceId({
+        id: 'in_claw_plus_fee',
+        object: 'invoice',
+        lines: {
+          data: [
+            {
+              pricing: {
+                price_details: {
+                  price: requiredEnv('STRIPE_KILOCLAW_2026_05_10_STANDARD_PRICE_ID'),
+                },
+              },
+              period: { start: 1772323200, end: 1775001600 },
+            },
+            {
+              metadata: buildServiceFeeLineMetadata('checkout:fee'),
+              pricing: { price_details: { price: 'price_service_fee' } },
+            },
+          ],
+        },
+      } as unknown as Stripe.Invoice)
+    ).toBe(true);
+  });
 });
diff --git a/apps/web/src/lib/organizations/organization-auto-top-up.ts b/apps/web/src/lib/organizations/organization-auto-top-up.ts
index e5cd90a6c3..406c3f63c6 100644
--- a/apps/web/src/lib/organizations/organization-auto-top-up.ts
+++ b/apps/web/src/lib/organizations/organization-auto-top-up.ts
@@ -6,6 +6,14 @@ import {
   DEFAULT_ORG_AUTO_TOP_UP_AMOUNT_CENTS,
 } from '@/lib/autoTopUpConstants';
 import { isFeatureFlagEnabled } from '@/lib/posthog-feature-flags';
+import {
+  createTopUpCheckoutSession,
+  mergeServiceFeeCommercialMetadata,
+  prepareTopUpCheckoutFee,
+  type ServiceFeeCheckoutDependencies,
+} from '@/lib/service-fees/checkout';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import { getEffectiveOrganizationServiceFeeExemption } from '@/lib/service-fees/organization-exemptions';
 
 export async function isOrgAutoTopUpFeatureEnabled(organizationId: string): Promise<boolean> {
   return (
@@ -14,6 +22,23 @@ export async function isOrgAutoTopUpFeatureEnabled(organizationId: string): Prom
   );
 }
 
+function createOrgAutoTopUpFeeDeps(): ServiceFeeCheckoutDependencies {
+  const stores = createServiceFeeStores();
+  return {
+    store: stores.assessments,
+    findEffectiveExemption: async (organizationId, at) =>
+      getEffectiveOrganizationServiceFeeExemption({
+        store: stores.exemptions,
+        organizationId,
+        at,
+      }),
+    stripe: client,
+    listCheckoutLineItems: (sessionId, params) =>
+      client.checkout.sessions.listLineItems(sessionId, params),
+    expireCheckoutSession: sessionId => client.checkout.sessions.expire(sessionId),
+  };
+}
+
 /**
  * Creates a Stripe checkout session for organization auto-top-up setup.
  * Similar to user auto-top-up but with organization metadata.
@@ -25,46 +50,70 @@ export async function createOrgAutoTopUpSetupCheckoutSession(
   amountCents: number = DEFAULT_ORG_AUTO_TOP_UP_AMOUNT_CENTS
 ): Promise<string | null> {
   const amountDollars = amountCents / 100;
+  const feeDeps = createOrgAutoTopUpFeeDeps();
+  const prepared = await prepareTopUpCheckoutFee({
+    flow: 'organization_auto_top_up_setup',
+    principalMinor: amountCents,
+    kiloUserId,
+    organizationId,
+    stripeCustomerId,
+    taxPrincipal: { kind: 'inline' },
+    deps: feeDeps,
+  });
 
-  const checkoutSession = await client.checkout.sessions.create({
-    mode: 'payment',
-    customer: stripeCustomerId,
-    billing_address_collection: 'required',
-    line_items: [
-      {
-        price_data: {
-          currency: 'usd',
-          product_data: {
-            name: 'Organization Credit Top-Up with Auto-Refill Setup',
-            description: `Initial $${amountDollars} top-up. Your card will be saved for automatic $${amountDollars} top ups when balance drops below $${ORG_AUTO_TOP_UP_THRESHOLD_DOLLARS}.`,
+  const checkoutSession = await createTopUpCheckoutSession({
+    prepared,
+    buildSessionParams: feeLine => ({
+      mode: 'payment',
+      customer: stripeCustomerId,
+      billing_address_collection: 'required',
+      line_items: [
+        {
+          price_data: {
+            currency: 'usd',
+            product_data: {
+              name: 'Organization Credit Top-Up with Auto-Refill Setup',
+              description: `Initial $${amountDollars} top-up. Your card will be saved for automatic $${amountDollars} top ups when balance drops below $${ORG_AUTO_TOP_UP_THRESHOLD_DOLLARS}.`,
+            },
+            unit_amount: amountCents,
           },
-          unit_amount: amountCents,
+          quantity: 1,
         },
-        quantity: 1,
+        ...(feeLine ? [feeLine] : []),
+      ],
+      invoice_creation: {
+        enabled: true,
       },
-    ],
-    invoice_creation: {
-      enabled: true,
-    },
-    customer_update: {
-      name: 'auto',
-      address: 'auto',
-    },
-    tax_id_collection: {
-      enabled: true,
-      required: 'never',
-    },
-    success_url: `${APP_URL}/organizations/${organizationId}/payment-details?auto_topup_setup=success`,
-    cancel_url: `${APP_URL}/organizations/${organizationId}/payment-details?auto_topup_setup=cancelled`,
-    payment_intent_data: {
-      metadata: {
-        type: 'org-auto-topup-setup',
-        kiloUserId,
-        organizationId,
-        amountCents: String(amountCents),
+      customer_update: {
+        name: 'auto',
+        address: 'auto',
+      },
+      tax_id_collection: {
+        enabled: true,
+        required: 'never',
+      },
+      success_url: `${APP_URL}/organizations/${organizationId}/payment-details?auto_topup_setup=success`,
+      cancel_url: `${APP_URL}/organizations/${organizationId}/payment-details?auto_topup_setup=cancelled`,
+      metadata: mergeServiceFeeCommercialMetadata(
+        { type: 'org-auto-topup-setup', kiloUserId, organizationId },
+        prepared.commercialMetadata
+      ),
+      payment_intent_data: {
+        metadata: mergeServiceFeeCommercialMetadata(
+          {
+            type: 'org-auto-topup-setup',
+            kiloUserId,
+            organizationId,
+            amountCents: String(amountCents),
+          },
+          prepared.commercialMetadata
+        ),
+        setup_future_usage: 'off_session',
       },
-      setup_future_usage: 'off_session',
-    },
+      expand: ['line_items.data.price.product'],
+    }),
+    createSession: params => client.checkout.sessions.create(params),
+    deps: feeDeps,
   });
 
   return typeof checkoutSession.url === 'string' ? checkoutSession.url : null;
diff --git a/apps/web/src/lib/organizations/organization-billing.test.ts b/apps/web/src/lib/organizations/organization-billing.test.ts
index 64daf92bd9..e05c1760bf 100644
--- a/apps/web/src/lib/organizations/organization-billing.test.ts
+++ b/apps/web/src/lib/organizations/organization-billing.test.ts
@@ -592,8 +592,9 @@ describe('processTopupForOrganization', () => {
     expect(topUpEmail.to).toBe(testUser.google_user_email);
     expect(topUpEmail.subject).toBe('Your Kilo org credit top-up');
     expect(topUpEmail.html).toContain('Team credits added');
-    expect(topUpEmail.html).toContain('Amount:</strong> $50.00 USD');
+    expect(topUpEmail.html).toContain('Amount:</strong>');
     expect(topUpEmail.html).toContain('Credits:</strong> $50.00 USD');
+    expect(topUpEmail.html).toContain('$50.00 USD');
     expect(topUpEmail.html).toContain(
       'A Kilo credit top-up has been processed for Test Organization. The credits are now available to the organization.'
     );
@@ -633,18 +634,51 @@ describe('processTopupForOrganization', () => {
     expect(topUpEmail.subject).toBe('Kilo team auto top-up successful');
     expect(topUpEmail.html).toContain('Team auto top-up was successful');
     expect(topUpEmail.html).toContain('$25.00 USD');
+    expect(topUpEmail.html).toContain('Amount:</strong>');
+    expect(topUpEmail.html).not.toContain('Service fee (5%)');
     expect(topUpEmail.html).toContain(
       'Test Organization was automatically topped up so your team can keep using Kilo without interruption. The new credits are available now.'
     );
     expect(topUpEmail.html).toContain(`/organizations/${testOrganization.id}/payment-details`);
     expect(topUpEmail.html).toContain('https://pay.stripe.test/receipts/ch');
+  });
+
+  test('itemizes credits added, service fee, and gross when a positive fee is passed', async () => {
+    const amountInCents = 5000;
+    const stripePaymentId = 'pi_test_org_service_fee';
+    mockResolveStripeReceiptUrl.mockResolvedValueOnce('https://pay.stripe.test/receipts/fee');
+
+    await processTopupForOrganization(
+      testUser.id,
+      testOrganization.id,
+      amountInCents,
+      {
+        type: 'stripe',
+        stripe_payment_id: stripePaymentId,
+      },
+      {
+        serviceFeeCents: 250,
+        grossPaidCents: 5250,
+        creditsCents: 5000,
+      }
+    );
+
+    expect(sendViaMailgunMock).toHaveBeenCalledTimes(1);
+    const [topUpEmail] = sendViaMailgunMock.mock.calls[0];
+    expect(topUpEmail.html).toContain('Credits added:</strong>');
+    expect(topUpEmail.html).toContain('$50.00 USD');
+    expect(topUpEmail.html).toContain('Service fee (5%):</strong> $2.50 USD');
+    expect(topUpEmail.html).toContain('Total paid:</strong> $52.50 USD');
+    expect(topUpEmail.html).not.toContain('Credits:</strong> $50.00 USD');
+    expect(topUpEmail.html).not.toContain('Credit principal');
+    expect(topUpEmail.html).not.toContain('Amount:</strong> $50.00 USD');
 
     const emailMarkers = await getOrganizationTopUpEmailMarkers(stripePaymentId);
     expect(emailMarkers).toHaveLength(1);
     expect(emailMarkers[0]).toMatchObject({
       email_type: 'organization_credits_top_up_confirmation',
       idempotency_key: stripePaymentId,
-      user_id: null,
+      user_id: testUser.id,
       organization_id: testOrganization.id,
     });
   });
diff --git a/apps/web/src/lib/organizations/organization-billing.ts b/apps/web/src/lib/organizations/organization-billing.ts
index 1c04c4c8e5..a7279ec2d5 100644
--- a/apps/web/src/lib/organizations/organization-billing.ts
+++ b/apps/web/src/lib/organizations/organization-billing.ts
@@ -80,6 +80,9 @@ export async function getOrCreateStripeCustomerIdForOrganization(
 type Config = StripeConfig;
 type ProcessTopupForOrganizationOptions = {
   isAutoTopUp?: boolean;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
 };
 const ORGANIZATION_CREDITS_TOP_UP_CONFIRMATION_EMAIL_TYPE =
   'organization_credits_top_up_confirmation';
@@ -110,6 +113,9 @@ export async function maybeSendOrganizationTopUpConfirmationEmail(params: {
   userId: User['id'];
   organization: Organization;
   amountInCents: number;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
   stripeChargeOrInvoiceId: string;
   isAutoTopUp: boolean;
   purchaseDate?: Date;
@@ -118,6 +124,9 @@ export async function maybeSendOrganizationTopUpConfirmationEmail(params: {
     userId,
     organization,
     amountInCents,
+    serviceFeeCents = 0,
+    grossPaidCents = amountInCents,
+    creditsCents = amountInCents,
     stripeChargeOrInvoiceId,
     isAutoTopUp,
     purchaseDate,
@@ -223,8 +232,10 @@ export async function maybeSendOrganizationTopUpConfirmationEmail(params: {
       const sendResult = await sendCreditsTopUpEmail({
         to: recipient.email,
         variant: isAutoTopUp ? 'org_auto' : 'org_manual',
-        amountCents: amountInCents,
-        creditsCents: amountInCents,
+        principalCents: amountInCents,
+        serviceFeeCents,
+        grossPaidCents,
+        creditsCents,
         purchaseDate: purchaseDate ?? new Date(),
         receiptUrl,
         organizationId: organization.id,
@@ -345,7 +356,12 @@ export async function processTopupForOrganization(
   config: Config,
   options: ProcessTopupForOrganizationOptions = {}
 ) {
-  const { isAutoTopUp = false } = options;
+  const {
+    isAutoTopUp = false,
+    serviceFeeCents = 0,
+    grossPaidCents = amountInCents,
+    creditsCents = amountInCents,
+  } = options;
   const organization = await getOrganizationById(organizationId);
   if (!organization) throw new Error('Organization not found: ' + organizationId);
 
@@ -422,6 +438,9 @@ export async function processTopupForOrganization(
       userId: kiloUserId,
       organization,
       amountInCents,
+      serviceFeeCents,
+      grossPaidCents,
+      creditsCents,
       stripeChargeOrInvoiceId: config.stripe_payment_id,
       isAutoTopUp,
       purchaseDate: new Date(existingCreditTransaction.createdAt),
@@ -443,6 +462,9 @@ export async function processTopupForOrganization(
     userId: kiloUserId,
     organization,
     amountInCents,
+    serviceFeeCents,
+    grossPaidCents,
+    creditsCents,
     stripeChargeOrInvoiceId: config.stripe_payment_id,
     isAutoTopUp,
   });
@@ -452,6 +474,9 @@ async function recoverOrganizationTopUpConfirmationEmailIfMissing(params: {
   userId: User['id'];
   organization: Organization;
   amountInCents: number;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
   stripeChargeOrInvoiceId: string;
   isAutoTopUp: boolean;
   purchaseDate: Date;
@@ -500,6 +525,9 @@ async function scheduleOrganizationTopUpConfirmationEmail(params: {
   userId: User['id'];
   organization: Organization;
   amountInCents: number;
+  serviceFeeCents?: number;
+  grossPaidCents?: number;
+  creditsCents?: number;
   stripeChargeOrInvoiceId: string;
   isAutoTopUp: boolean;
   purchaseDate?: Date;
diff --git a/apps/web/src/lib/purchase-emails.test.ts b/apps/web/src/lib/purchase-emails.test.ts
index c1d8883314..79f5ff6ee1 100644
--- a/apps/web/src/lib/purchase-emails.test.ts
+++ b/apps/web/src/lib/purchase-emails.test.ts
@@ -24,7 +24,10 @@ import {
 import type * as creditBillingModule from '@/lib/kiloclaw/credit-billing';
 import {
   renderTemplate,
+  buildCreditsTopUpCreditsRowSection,
+  buildCreditsTopUpInfoRow,
   buildCreditsTopUpReceiptSection,
+  buildCreditsTopUpServiceFeeSection,
   subjects,
   sendCreditsTopUpEmail,
   sendKiloClawSubscriptionStartedEmail,
@@ -91,40 +94,105 @@ const stripeChargeRetrieveMock = jest.mocked(stripeClient.charges.retrieve);
 const stripeInvoiceRetrieveMock = jest.mocked(stripeClient.invoices.retrieve);
 const stripePaymentIntentRetrieveMock = jest.mocked(stripeClient.paymentIntents.retrieve);
 
+function feeFreeTopUpCents(cents: number) {
+  return {
+    principalCents: cents,
+    serviceFeeCents: 0,
+    grossPaidCents: cents,
+    creditsCents: cents,
+  };
+}
+
+function creditsTopUpTemplateVars(
+  overrides: Partial<{
+    heading: string;
+    intro: string;
+    amount_label: string;
+    amount_usd: string;
+    service_fee_section: ReturnType<typeof buildCreditsTopUpServiceFeeSection>;
+    credits_row_section: ReturnType<typeof buildCreditsTopUpCreditsRowSection>;
+    purchase_date: string;
+    credits_url: string;
+    receipt_section: ReturnType<typeof buildCreditsTopUpReceiptSection>;
+    year: string;
+  }> = {}
+) {
+  return {
+    heading: 'Thanks for your top-up',
+    intro: 'hello',
+    amount_label: 'Amount',
+    amount_usd: '15.00',
+    service_fee_section: buildCreditsTopUpServiceFeeSection({
+      serviceFeeCents: 0,
+      grossPaidCents: 1500,
+    }),
+    credits_row_section: buildCreditsTopUpCreditsRowSection({
+      creditsCents: 1500,
+      hasServiceFee: false,
+    }),
+    purchase_date: 'January 1, 2026',
+    credits_url: 'https://app.kilocode.ai/credits',
+    receipt_section: buildCreditsTopUpReceiptSection('https://stripe.test/receipt'),
+    year: '2026',
+    ...overrides,
+  };
+}
+
 describe('creditsTopUp template', () => {
   test('renders required fields', () => {
-    const html = renderTemplate('creditsTopUp', {
-      heading: 'Thanks for your top-up',
-      intro: 'hello',
-      amount_usd: '15.00',
-      credits_usd: '15.00',
-      purchase_date: 'January 1, 2026',
-      credits_url: 'https://app.kilocode.ai/credits',
-      receipt_section: buildCreditsTopUpReceiptSection('https://stripe.test/receipt'),
-      year: '2026',
-    });
+    const html = renderTemplate('creditsTopUp', creditsTopUpTemplateVars());
 
     expect(html).toContain('Thanks for your top-up');
-    expect(html).toContain('$15.00');
+    expect(html).toContain('<strong style="color: #1a1a1a">Amount:</strong>');
+    expect(html).toContain('$15.00 USD');
+    expect(html).toContain('<strong style="color: #1a1a1a">Credits:</strong> $15.00 USD');
     expect(html).toContain('January 1, 2026');
     expect(html).toContain('https://app.kilocode.ai/credits');
     expect(html).toContain('https://stripe.test/receipt');
+    expect(html).not.toContain('Service fee (5%)');
+    expect(html).not.toContain('Credit principal');
+    expect(html).not.toContain('Total paid');
   });
 
   test('omits receipt section when receipt URL is missing', () => {
-    const html = renderTemplate('creditsTopUp', {
-      heading: 'h',
-      intro: 'i',
-      amount_usd: '5.00',
-      credits_usd: '5.00',
-      purchase_date: 'January 1, 2026',
-      credits_url: 'https://app.kilocode.ai/credits',
-      receipt_section: buildCreditsTopUpReceiptSection(null),
-      year: '2026',
-    });
+    const html = renderTemplate(
+      'creditsTopUp',
+      creditsTopUpTemplateVars({
+        heading: 'h',
+        intro: 'i',
+        amount_usd: '5.00',
+        receipt_section: buildCreditsTopUpReceiptSection(null),
+      })
+    );
 
     expect(html).not.toContain('View your Stripe receipt');
   });
+
+  test('injects escaped service-fee rows without template conditionals', () => {
+    const html = renderTemplate(
+      'creditsTopUp',
+      creditsTopUpTemplateVars({
+        amount_label: 'Credits added',
+        amount_usd: '20.00',
+        service_fee_section: buildCreditsTopUpServiceFeeSection({
+          serviceFeeCents: 100,
+          grossPaidCents: 2100,
+        }),
+        credits_row_section: buildCreditsTopUpCreditsRowSection({
+          creditsCents: 2000,
+          hasServiceFee: true,
+        }),
+      })
+    );
+
+    expect(html).toContain('<strong style="color: #1a1a1a">Credits added:</strong>');
+    expect(html).toContain('$20.00 USD');
+    expect(html).toContain('<strong style="color: #1a1a1a">Service fee (5%):</strong> $1.00 USD');
+    expect(html).toContain('<strong style="color: #1a1a1a">Total paid:</strong> $21.00 USD');
+    expect(html).not.toContain('<strong style="color: #1a1a1a">Credits:</strong>');
+    expect(html).not.toContain('Credit principal');
+    expect(html).not.toContain('Amount:');
+  });
 });
 
 describe('subjects map', () => {
@@ -643,8 +711,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     const result = await sendCreditsTopUpEmail({
       to: 'recipient@example.com',
       variant: 'manual',
-      amountCents: 1500,
-      creditsCents: 1500,
+      ...feeFreeTopUpCents(1500),
       purchaseDate: new Date('2026-01-15T12:00:00Z'),
       receiptUrl: 'https://pay.stripe.com/receipts/abc',
     });
@@ -654,19 +721,114 @@ describe('sendCreditsTopUpEmail payload', () => {
     const [params] = sendViaMailgunMock.mock.calls[0];
     expect(params.to).toBe('recipient@example.com');
     expect(params.subject).toBe(subjects.creditsTopUp);
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Amount:</strong>');
     expect(params.html).toContain('$15.00 USD');
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Credits:</strong> $15.00 USD');
     expect(params.html).toContain('January 15, 2026');
     expect(params.html).toContain('/credits');
     expect(params.html).toContain('https://pay.stripe.com/receipts/abc');
     expect(params.html).toContain('View your Stripe receipt');
+    expect(params.html).not.toContain('Service fee (5%)');
+    expect(params.html).not.toContain('Credit principal');
+    expect(params.html).not.toContain('Total paid');
+  });
+
+  test('positive service fee renders credits added, fee, total paid, and date', async () => {
+    await sendCreditsTopUpEmail({
+      to: 'recipient@example.com',
+      variant: 'manual',
+      principalCents: 2000,
+      serviceFeeCents: 100,
+      grossPaidCents: 2100,
+      creditsCents: 2000,
+      purchaseDate: new Date('2026-01-15T12:00:00Z'),
+      receiptUrl: null,
+    });
+
+    const [params] = sendViaMailgunMock.mock.calls[0];
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Credits added:</strong>');
+    expect(params.html).toContain(
+      '<strong style="color: #1a1a1a">Service fee (5%):</strong> $1.00 USD'
+    );
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Total paid:</strong> $21.00 USD');
+    expect(params.html).toContain('$20.00 USD');
+    expect(params.html).not.toContain('<strong style="color: #1a1a1a">Credits:</strong>');
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Date:</strong> January 15, 2026');
+    expect(params.html).not.toContain('Amount:');
+    expect(params.html).not.toContain('Credit principal');
+  });
+
+  test('fee-free top-ups omit the fee row without exposing an exemption reason', async () => {
+    const feeSection = buildCreditsTopUpServiceFeeSection({
+      serviceFeeCents: 0,
+      grossPaidCents: 1500,
+    });
+    expect(feeSection.html).toBe('');
+
+    await sendCreditsTopUpEmail({
+      to: 'recipient@example.com',
+      variant: 'manual',
+      ...feeFreeTopUpCents(1500),
+      purchaseDate: new Date('2026-01-15T12:00:00Z'),
+      receiptUrl: null,
+    });
+
+    const [params] = sendViaMailgunMock.mock.calls[0];
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Amount:</strong>');
+    expect(params.html).toContain('$15.00 USD');
+    expect(params.html).toContain('<strong style="color: #1a1a1a">Credits:</strong> $15.00 USD');
+    expect(params.html).not.toContain('Service fee (5%)');
+    expect(params.html).not.toContain('Credit principal');
+    expect(params.html).not.toContain('Total paid');
+    expect(params.html).not.toContain('exempt');
+    expect(params.html).not.toContain('waiver');
+    expect(params.html).not.toContain('failed to apply');
+  });
+
+  test('escapes organization names, receipt URLs, and optional fee-row interpolations', async () => {
+    const injectedRow = buildCreditsTopUpInfoRow(
+      'Service fee (5%)<script>alert(1)</script>',
+      '$1.00 USD & more'
+    );
+    expect(injectedRow).toContain('Service fee (5%)&lt;script&gt;alert(1)&lt;/script&gt;');
+    expect(injectedRow).toContain('$1.00 USD &amp; more');
+    expect(injectedRow).not.toContain('<script>alert(1)</script>');
+
+    const receipt = buildCreditsTopUpReceiptSection(
+      'https://stripe.test/receipt?q="><script>alert(1)</script>'
+    );
+    expect(receipt.html).toContain('&quot;');
+    expect(receipt.html).toContain('&lt;script&gt;');
+    expect(receipt.html).not.toContain('<script>alert(1)</script>');
+
+    await sendCreditsTopUpEmail({
+      to: 'billing@example.com',
+      variant: 'org_manual',
+      principalCents: 2000,
+      serviceFeeCents: 100,
+      grossPaidCents: 2100,
+      creditsCents: 2000,
+      purchaseDate: new Date('2026-04-01T00:00:00Z'),
+      receiptUrl: 'https://pay.stripe.com/receipts/" onclick="alert(1)',
+      organizationId: 'org_123',
+      organizationName: 'Acme <script>alert(1)</script>',
+    });
+
+    const [params] = sendViaMailgunMock.mock.calls[0];
+    expect(params.html).toContain('Acme &lt;script&gt;alert(1)&lt;/script&gt;');
+    expect(params.html).not.toContain('<script>alert(1)</script>');
+    expect(params.html).toContain('&quot;');
+    expect(params.html).not.toContain('" onclick="alert(1)');
+    expect(params.html).toContain(
+      '<strong style="color: #1a1a1a">Service fee (5%):</strong> $1.00 USD'
+    );
   });
 
   test('auto variant overrides the subject and swaps the heading copy', async () => {
     await sendCreditsTopUpEmail({
       to: 'recipient@example.com',
       variant: 'auto',
-      amountCents: 2000,
-      creditsCents: 2000,
+      ...feeFreeTopUpCents(2000),
       purchaseDate: new Date('2026-02-01T00:00:00Z'),
       receiptUrl: null,
     });
@@ -681,8 +843,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     await sendCreditsTopUpEmail({
       to: 'billing@example.com',
       variant: 'org_manual',
-      amountCents: 2500,
-      creditsCents: 2500,
+      ...feeFreeTopUpCents(2500),
       purchaseDate: new Date('2026-04-01T00:00:00Z'),
       receiptUrl: 'https://pay.stripe.com/receipts/org-manual',
       organizationId: 'org_123',
@@ -705,8 +866,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     await sendCreditsTopUpEmail({
       to: 'billing@example.com',
       variant: 'org_auto',
-      amountCents: 4000,
-      creditsCents: 4000,
+      ...feeFreeTopUpCents(4000),
       purchaseDate: new Date('2026-05-01T00:00:00Z'),
       receiptUrl: null,
       organizationId: 'org_456',
@@ -729,8 +889,7 @@ describe('sendCreditsTopUpEmail payload', () => {
   const invalidOrganizationTopUpEmailParams: Parameters<typeof sendCreditsTopUpEmail>[0] = {
     to: 'billing@example.com',
     variant: 'org_manual',
-    amountCents: 2500,
-    creditsCents: 2500,
+    ...feeFreeTopUpCents(2500),
     purchaseDate: new Date('2026-04-01T00:00:00Z'),
     receiptUrl: null,
     organizationName: 'Acme Labs',
@@ -745,8 +904,7 @@ describe('sendCreditsTopUpEmail payload', () => {
       sendCreditsTopUpEmail({
         to: 'billing@example.com',
         variant: 'org_manual',
-        amountCents: 2500,
-        creditsCents: 2500,
+        ...feeFreeTopUpCents(2500),
         purchaseDate: new Date('2026-04-01T00:00:00Z'),
         receiptUrl: null,
         organizationName: 'Acme Labs',
@@ -760,8 +918,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     await sendCreditsTopUpEmail({
       to: 'billing@example.com',
       variant: 'org_manual',
-      amountCents: 2500,
-      creditsCents: 2500,
+      ...feeFreeTopUpCents(2500),
       purchaseDate: new Date('2026-04-01T00:00:00Z'),
       receiptUrl: null,
       creditsUrl: '',
@@ -780,8 +937,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     await sendCreditsTopUpEmail({
       to: 'recipient@example.com',
       variant: 'manual',
-      amountCents: 500,
-      creditsCents: 500,
+      ...feeFreeTopUpCents(500),
       purchaseDate: new Date('2026-03-01T00:00:00Z'),
       receiptUrl: null,
     });
@@ -797,8 +953,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     const result = await sendCreditsTopUpEmail({
       to: 'bad@example.com',
       variant: 'manual',
-      amountCents: 1000,
-      creditsCents: 1000,
+      ...feeFreeTopUpCents(1000),
       purchaseDate: new Date(),
       receiptUrl: null,
     });
@@ -813,8 +968,7 @@ describe('sendCreditsTopUpEmail payload', () => {
     const result = await sendCreditsTopUpEmail({
       to: 'recipient@example.com',
       variant: 'manual',
-      amountCents: 1000,
-      creditsCents: 1000,
+      ...feeFreeTopUpCents(1000),
       purchaseDate: new Date(),
       receiptUrl: null,
     });
diff --git a/apps/web/src/lib/revenueKpi.test.ts b/apps/web/src/lib/revenueKpi.test.ts
new file mode 100644
index 0000000000..a67830bab6
--- /dev/null
+++ b/apps/web/src/lib/revenueKpi.test.ts
@@ -0,0 +1,208 @@
+import { beforeEach, describe, expect, test } from '@jest/globals';
+import {
+  credit_transactions,
+  organization_service_fee_exemptions,
+  stripe_service_fee_assessments,
+} from '@kilocode/db/schema';
+import { format } from 'date-fns';
+
+import { cleanupDbForTest, db } from '@/lib/drizzle';
+import { createOrganization } from '@/lib/organizations/organizations';
+import { getRevenueKpiData, type RevenueKpiData } from '@/lib/revenueKpi';
+import { SERVICE_FEE_VERSION } from '@/lib/service-fees/constants';
+import { insertTestUser } from '@/tests/helpers/user.helper';
+
+beforeEach(async () => {
+  await cleanupDbForTest();
+});
+
+function dayKey(row: RevenueKpiData): string {
+  const value = row.transaction_day as unknown;
+  return value instanceof Date ? format(value, 'yyyy-MM-dd') : String(value).slice(0, 10);
+}
+
+function baseAssessment(
+  overrides: Partial<typeof stripe_service_fee_assessments.$inferInsert>
+): typeof stripe_service_fee_assessments.$inferInsert {
+  return {
+    assessment_key: `test-${crypto.randomUUID()}`,
+    version: SERVICE_FEE_VERSION,
+    flow: 'personal_top_up',
+    outcome: 'charged',
+    currency: 'usd',
+    eligibility_created_at: '2025-01-10T09:00:00.000Z',
+    eligible_subtotal_minor: 10000,
+    expected_fee_minor: 500,
+    ...overrides,
+  };
+}
+
+describe('getRevenueKpiData service fee reporting', () => {
+  test('keeps credit revenue semantics and reports settled fee metrics separately', async () => {
+    const user = await insertTestUser();
+    const admin = await insertTestUser();
+    const organization = await createOrganization(`Org ${crypto.randomUUID()}`, admin.id);
+    const [exemption] = await db
+      .insert(organization_service_fee_exemptions)
+      .values({
+        organization_id: organization.id,
+        is_exempt: true,
+        reason: 'Founding partner exemption',
+      })
+      .returning();
+
+    await db.insert(stripe_service_fee_assessments).values([
+      baseAssessment({
+        kilo_user_id: user.id,
+        stripe_charge_id: 'ch_matched',
+        charged_fee_minor: 500,
+        gross_paid_minor: 10500,
+        settled_product_minor: 10000,
+        settled_at: '2025-01-10T10:00:00.000Z',
+      }),
+      // Refund plus full-charge dispute overlap. Collected fee clamps at zero
+      // per assessment rather than allowing this row to subtract from another.
+      baseAssessment({
+        kilo_user_id: user.id,
+        eligible_subtotal_minor: 20000,
+        expected_fee_minor: 1000,
+        charged_fee_minor: 1000,
+        gross_paid_minor: 21000,
+        settled_product_minor: 20000,
+        refunded_product_minor: 4000,
+        refunded_fee_minor: 200,
+        disputed_fee_minor: 1000,
+        settled_at: '2025-01-11T04:30:00.000Z',
+      }),
+      baseAssessment({
+        kilo_user_id: user.id,
+        eligible_subtotal_minor: 5000,
+        expected_fee_minor: 250,
+        charged_fee_minor: 250,
+        gross_paid_minor: 5250,
+        settled_product_minor: 5000,
+        settled_at: '2025-01-11T06:00:00.000Z',
+      }),
+      baseAssessment({
+        kilo_user_id: user.id,
+        outcome: 'missed',
+        failure_code: 'stripe_fee_line_attach_failed',
+        settled_product_minor: 10000,
+        gross_paid_minor: 10000,
+        settled_at: '2025-01-12T00:30:00.000Z',
+      }),
+      baseAssessment({
+        flow: 'organization_top_up',
+        kilo_user_id: null,
+        organization_id: organization.id,
+        outcome: 'exempt',
+        exemption_id: exemption.id,
+        eligible_subtotal_minor: 5000,
+        expected_fee_minor: 250,
+        settled_product_minor: 5000,
+        gross_paid_minor: 5000,
+        settled_at: '2025-01-12T01:00:00.000Z',
+      }),
+      baseAssessment({
+        kilo_user_id: user.id,
+        eligibility_created_at: '2025-01-13T09:00:00.000Z',
+        stripe_invoice_fee_line_item_id: 'il_unsettled_fee_line',
+        charged_fee_minor: 9999,
+      }),
+    ]);
+
+    await db.insert(credit_transactions).values([
+      // Assessment-backed credits remain in every legacy credit series.
+      {
+        kilo_user_id: user.id,
+        amount_microdollars: 100_000_000,
+        is_free: false,
+        stripe_payment_id: 'ch_matched',
+        created_at: '2025-01-10T10:05:00.000Z',
+      },
+      {
+        kilo_user_id: user.id,
+        amount_microdollars: 50_000_000,
+        is_free: false,
+        stripe_payment_id: 'ch_legacy_only',
+        created_at: '2025-01-10T12:00:00.000Z',
+      },
+    ]);
+
+    const { data } = await getRevenueKpiData(false, '2025-01-09', '2025-01-13');
+    const byDay = new Map(data.map(row => [dayKey(row), row]));
+
+    expect([...byDay.keys()]).toEqual(['2025-01-10', '2025-01-11', '2025-01-12']);
+    expect(byDay.get('2025-01-10')).toMatchObject({
+      paid_transaction_count: 2,
+      paid_total_dollars: 150,
+      collected_service_fee_dollars: 5,
+      service_fee_charged_count: 1,
+    });
+    expect(byDay.get('2025-01-11')).toMatchObject({
+      paid_transaction_count: 0,
+      collected_service_fee_dollars: 2.5,
+      disputed_service_fee_dollars: 10,
+      service_fee_charged_count: 2,
+    });
+    expect(byDay.get('2025-01-12')).toMatchObject({
+      collected_service_fee_dollars: 0,
+      missed_service_fee_dollars: 5,
+      exempted_service_fee_dollars: 2.5,
+      service_fee_charged_count: 0,
+      service_fee_missed_count: 1,
+      service_fee_exempt_count: 1,
+    });
+  });
+
+  test('creates a fee-only UTC day without inventing product revenue', async () => {
+    const user = await insertTestUser();
+
+    await db.insert(stripe_service_fee_assessments).values(
+      baseAssessment({
+        flow: 'personal_kilo_pass',
+        kilo_user_id: user.id,
+        charged_fee_minor: 245,
+        gross_paid_minor: 5145,
+        settled_product_minor: 4900,
+        settled_at: '2025-03-01T04:30:00.000Z',
+      })
+    );
+
+    const { data } = await getRevenueKpiData(false, '2025-03-01', '2025-03-01');
+
+    expect(data).toHaveLength(1);
+    expect(data[0]).toMatchObject({
+      paid_transaction_count: 0,
+      paid_total_dollars: 0,
+      collected_service_fee_dollars: 2.45,
+      service_fee_charged_count: 1,
+    });
+  });
+
+  test('returns zero-valued service fee fields for legacy-only ranges', async () => {
+    const user = await insertTestUser();
+
+    await db.insert(credit_transactions).values({
+      kilo_user_id: user.id,
+      amount_microdollars: 25_000_000,
+      is_free: false,
+      stripe_payment_id: 'ch_legacy_only',
+      created_at: '2025-02-01T12:00:00.000Z',
+    });
+
+    const { data } = await getRevenueKpiData(false, '2025-02-01', '2025-02-01');
+
+    expect(data).toHaveLength(1);
+    expect(data[0]).toMatchObject({
+      paid_total_dollars: 25,
+      collected_service_fee_dollars: 0,
+      missed_service_fee_dollars: 0,
+      exempted_service_fee_dollars: 0,
+      disputed_service_fee_dollars: 0,
+      service_fee_charged_count: 0,
+      service_fee_missed_count: 0,
+      service_fee_exempt_count: 0,
+    });
+  });
+});
diff --git a/apps/web/src/lib/revenueKpi.ts b/apps/web/src/lib/revenueKpi.ts
index e502004eed..480b8e91c0 100644
--- a/apps/web/src/lib/revenueKpi.ts
+++ b/apps/web/src/lib/revenueKpi.ts
@@ -3,7 +3,6 @@ import { promoCreditCategories } from '@/lib/promoCreditCategories';
 import { has_Payment } from '@/lib/promoCustomerRequirement';
 import { sql } from 'drizzle-orm';
 
-// Define the first top-up categories that can optionally be included as multipliers
 const coreMultiplierCategories = [
   'multiplier-promo',
   'fibonacci-topup-bonus',
@@ -16,7 +15,6 @@ const multiplierCategoriesIncludingFirstTopUp = [
   ...coreMultiplierCategories,
 ];
 
-// Define the promo credit categories that count as multipliers
 function getMultiplierCategories(includeFirstTopupCategories: boolean): string[] {
   const baseCategories = includeFirstTopupCategories
     ? multiplierCategoriesIncludingFirstTopUp
@@ -28,7 +26,9 @@ function getMultiplierCategories(includeFirstTopupCategories: boolean): string[]
     .map(c => c.credit_category);
 }
 
-// Define the result type for our revenue KPI data
+// Legacy credit fields retain their existing credit_transactions semantics.
+// Service-fee fields are a separate settled-assessment series grouped in UTC;
+// they do not represent product or gross payment revenue.
 export type RevenueKpiData = {
   transaction_day: string;
   paid_transaction_count: number;
@@ -39,6 +39,13 @@ export type RevenueKpiData = {
   multiplied_total_dollars: number;
   unmultiplied_transaction_count: number;
   unmultiplied_total_dollars: number;
+  collected_service_fee_dollars: number;
+  missed_service_fee_dollars: number;
+  exempted_service_fee_dollars: number;
+  disputed_service_fee_dollars: number;
+  service_fee_charged_count: number;
+  service_fee_missed_count: number;
+  service_fee_exempt_count: number;
 };
 
 export type RevenueKpiResponse = {
@@ -46,13 +53,7 @@ export type RevenueKpiResponse = {
   multiplierCategories: string[];
 };
 
-/**
- * Fetches revenue KPI data for a date range, including totals by day
- * @param includeFirstTopupCategories - Whether to include first top-up categories as multipliers
- * @param startDate - Inclusive start date (YYYY-MM-DD)
- * @param endDate - Inclusive end date (YYYY-MM-DD)
- * @returns Promise<RevenueKpiResponse> Object containing revenue KPI data by day and multiplier categories
- */
+/** Fetch daily legacy credit metrics and separate settled service-fee metrics. */
 export async function getRevenueKpiData(
   includeFirstTopupCategories: boolean,
   startDate: string,
@@ -67,23 +68,23 @@ export async function getRevenueKpiData(
             ft.credit_category AS free_credit_category,
             ft.description AS free_description,
             ROW_NUMBER() OVER (
-                PARTITION BY pt.id 
+                PARTITION BY pt.id
                 ORDER BY pt.created_at DESC
             ) AS match_rank
         FROM public.credit_transactions AS pt
-        JOIN public.credit_transactions AS ft 
-            ON ft.kilo_user_id = pt.kilo_user_id 
+        JOIN public.credit_transactions AS ft
+            ON ft.kilo_user_id = pt.kilo_user_id
             AND ft.is_free = true
-            AND ft.created_at >= pt.created_at - INTERVAL '3 second' 
-            AND ft.created_at <  pt.created_at + INTERVAL '1800 second'
+            AND ft.created_at >= pt.created_at - INTERVAL '3 second'
+            AND ft.created_at < pt.created_at + INTERVAL '1800 second'
             AND ft.credit_category IN (${sql.join(
               multiplierCategories.map(c => sql`${c}`),
               sql`, `
             )})
-        WHERE pt.is_free = false and pt.amount_microdollars > 0
+        WHERE pt.is_free = false AND pt.amount_microdollars > 0
     ),
     paid_but_multiplied_by_date AS (
-        SELECT 
+        SELECT
             (rpt.created_at)::date AS transaction_day,
             COUNT(*) AS transaction_count,
             SUM(rpt.amount_microdollars) / 1000000.0 AS total_dollars
@@ -108,9 +109,24 @@ export async function getRevenueKpiData(
         FROM public.credit_transactions ft
         WHERE ft.is_free = true
         GROUP BY transaction_day
+    ),
+    service_fee_by_date AS (
+        SELECT
+            (sa.settled_at AT TIME ZONE 'UTC')::date AS transaction_day,
+            SUM(GREATEST(sa.charged_fee_minor - sa.refunded_fee_minor - sa.disputed_fee_minor, 0)) / 100.0 AS collected_service_fee_dollars,
+            COALESCE(SUM(sa.expected_fee_minor) FILTER (WHERE sa.outcome = 'missed'), 0) / 100.0 AS missed_service_fee_dollars,
+            COALESCE(SUM(sa.expected_fee_minor) FILTER (WHERE sa.outcome = 'exempt'), 0) / 100.0 AS exempted_service_fee_dollars,
+            SUM(sa.disputed_fee_minor) / 100.0 AS disputed_service_fee_dollars,
+            COUNT(*) FILTER (WHERE sa.outcome = 'charged') AS service_fee_charged_count,
+            COUNT(*) FILTER (WHERE sa.outcome = 'missed') AS service_fee_missed_count,
+            COUNT(*) FILTER (WHERE sa.outcome = 'exempt') AS service_fee_exempt_count
+        FROM public.stripe_service_fee_assessments sa
+        WHERE sa.settled_at IS NOT NULL
+          AND (sa.settled_at AT TIME ZONE 'UTC')::date BETWEEN ${startDate}::date AND ${endDate}::date
+        GROUP BY transaction_day
     )
     SELECT
-        COALESCE(pbd.transaction_day, fbd.transaction_day) AS transaction_day,
+        COALESCE(pbd.transaction_day, fbd.transaction_day, sfbd.transaction_day) AS transaction_day,
         COALESCE(pbd.transaction_count, 0) AS paid_transaction_count,
         COALESCE(pbd.total_dollars, 0) AS paid_total_dollars,
         COALESCE(fbd.transaction_count, 0) AS free_transaction_count,
@@ -118,12 +134,23 @@ export async function getRevenueKpiData(
         COALESCE(pmbd.transaction_count, 0) AS multiplied_transaction_count,
         COALESCE(pmbd.total_dollars, 0) AS multiplied_total_dollars,
         COALESCE(pbd.transaction_count, 0) - COALESCE(pmbd.transaction_count, 0) AS unmultiplied_transaction_count,
-        COALESCE(pbd.total_dollars, 0) - COALESCE(pmbd.total_dollars, 0) AS unmultiplied_total_dollars
+        COALESCE(pbd.total_dollars, 0) - COALESCE(pmbd.total_dollars, 0) AS unmultiplied_total_dollars,
+        COALESCE(sfbd.collected_service_fee_dollars, 0) AS collected_service_fee_dollars,
+        COALESCE(sfbd.missed_service_fee_dollars, 0) AS missed_service_fee_dollars,
+        COALESCE(sfbd.exempted_service_fee_dollars, 0) AS exempted_service_fee_dollars,
+        COALESCE(sfbd.disputed_service_fee_dollars, 0) AS disputed_service_fee_dollars,
+        COALESCE(sfbd.service_fee_charged_count, 0) AS service_fee_charged_count,
+        COALESCE(sfbd.service_fee_missed_count, 0) AS service_fee_missed_count,
+        COALESCE(sfbd.service_fee_exempt_count, 0) AS service_fee_exempt_count
     FROM paid_by_date pbd
     FULL OUTER JOIN free_by_date fbd ON pbd.transaction_day = fbd.transaction_day
-    LEFT JOIN paid_but_multiplied_by_date pmbd ON COALESCE(pbd.transaction_day, fbd.transaction_day) = pmbd.transaction_day
-    WHERE COALESCE(pbd.transaction_day, fbd.transaction_day) BETWEEN ${startDate}::date AND ${endDate}::date
-    ORDER BY COALESCE(pbd.transaction_day, fbd.transaction_day) ASC;
+    FULL OUTER JOIN service_fee_by_date sfbd
+      ON sfbd.transaction_day = COALESCE(pbd.transaction_day, fbd.transaction_day)
+    LEFT JOIN paid_but_multiplied_by_date pmbd
+      ON COALESCE(pbd.transaction_day, fbd.transaction_day, sfbd.transaction_day) = pmbd.transaction_day
+    WHERE COALESCE(pbd.transaction_day, fbd.transaction_day, sfbd.transaction_day)
+      BETWEEN ${startDate}::date AND ${endDate}::date
+    ORDER BY COALESCE(pbd.transaction_day, fbd.transaction_day, sfbd.transaction_day) ASC;
   `;
 
   const result = await db.execute(query);
@@ -138,10 +165,14 @@ export async function getRevenueKpiData(
     multiplied_total_dollars: Number(row.multiplied_total_dollars),
     unmultiplied_transaction_count: Number(row.unmultiplied_transaction_count),
     unmultiplied_total_dollars: Number(row.unmultiplied_total_dollars),
+    collected_service_fee_dollars: Number(row.collected_service_fee_dollars),
+    missed_service_fee_dollars: Number(row.missed_service_fee_dollars),
+    exempted_service_fee_dollars: Number(row.exempted_service_fee_dollars),
+    disputed_service_fee_dollars: Number(row.disputed_service_fee_dollars),
+    service_fee_charged_count: Number(row.service_fee_charged_count),
+    service_fee_missed_count: Number(row.service_fee_missed_count),
+    service_fee_exempt_count: Number(row.service_fee_exempt_count),
   }));
 
-  return {
-    data,
-    multiplierCategories,
-  };
+  return { data, multiplierCategories };
 }
diff --git a/apps/web/src/lib/service-fees/alerts.test.ts b/apps/web/src/lib/service-fees/alerts.test.ts
new file mode 100644
index 0000000000..64d4ed0c85
--- /dev/null
+++ b/apps/web/src/lib/service-fees/alerts.test.ts
@@ -0,0 +1,141 @@
+import { afterEach, describe, expect, it, jest } from '@jest/globals';
+
+import type { captureException as captureSentryException } from '@sentry/nextjs';
+
+import type { sendAdminSlackNotification } from '@/lib/slack/admin-notifications';
+
+class AdminSlackNotificationError extends Error {
+  constructor(
+    readonly kind: 'network' | 'upstream',
+    readonly status?: number
+  ) {
+    super('Admin Slack notification request failed');
+    this.name = 'AdminSlackNotificationError';
+  }
+}
+
+async function loadAlerts() {
+  jest.resetModules();
+  jest.doMock('@sentry/nextjs', () => ({
+    captureException: jest.fn(),
+  }));
+  jest.doMock('@/lib/slack/admin-notifications', () => ({
+    AdminSlackNotificationError,
+    sendAdminSlackNotification: jest.fn(async () => undefined),
+  }));
+  return import('./alerts');
+}
+
+afterEach(() => {
+  jest.resetModules();
+  jest.dontMock('@/lib/slack/admin-notifications');
+  jest.dontMock('@sentry/nextjs');
+});
+
+const ALERT_INPUT = {
+  assessmentKey: 'checkout:11111111-1111-4111-8111-111111111111',
+  flow: 'organization_top_up' as const,
+  organizationId: 'org_123',
+  kiloUserId: 'user_456',
+  stripeCheckoutSessionId: 'cs_test_1',
+  stripeInvoiceId: 'in_test_1',
+  stripePaymentIntentId: 'pi_test_1',
+  stripeChargeId: 'ch_test_1',
+  eligibleSubtotalMinor: 10_000,
+  expectedFeeMinor: 500,
+  currency: 'usd',
+  failureCode: 'fee_application_failed',
+  attemptedAt: new Date('2026-09-01T00:00:00.000Z'),
+};
+
+describe('sendMissedServiceFeeAlert', () => {
+  it('sends only non-sensitive identifiers, amounts, and the failure code', async () => {
+    const { buildMissedServiceFeeAlertText, sendMissedServiceFeeAlert } = await loadAlerts();
+    const sendNotification = jest.fn<typeof sendAdminSlackNotification>(async () => undefined);
+    const capture = jest.fn<typeof captureSentryException>(() => 'event-id');
+
+    await sendMissedServiceFeeAlert(ALERT_INPUT, {
+      sendNotification,
+      captureException: capture,
+    });
+
+    expect(sendNotification).toHaveBeenCalledTimes(1);
+    const notification = sendNotification.mock.calls[0]?.[0];
+    expect(notification?.unfurl_links).toBe(false);
+    expect(notification?.unfurl_media).toBe(false);
+    expect(notification?.text).toBe(buildMissedServiceFeeAlertText(ALERT_INPUT));
+    expect(notification?.text).toContain(
+      'assessment_key=checkout:11111111-1111-4111-8111-111111111111'
+    );
+    expect(notification?.text).toContain('flow=organization_top_up');
+    expect(notification?.text).toContain('owner_id=org_123');
+    expect(notification?.text).toContain('eligible_subtotal_minor=10000');
+    expect(notification?.text).toContain('expected_fee_minor=500');
+    expect(notification?.text).toContain('currency=usd');
+    expect(notification?.text).toContain('failure_code=fee_application_failed');
+    expect(notification?.text).toContain('attempted_at=2026-09-01T00:00:00.000Z');
+    expect(notification?.text).not.toMatch(/email|payload|webhook|card|secret|metadata/i);
+    expect(capture).not.toHaveBeenCalled();
+  });
+
+  it('captures only Slack kind/status and identifiers when Slack fails', async () => {
+    const { sendMissedServiceFeeAlert, SERVICE_FEE_MISSED_SENTRY_TAG } = await loadAlerts();
+    const slackError = new AdminSlackNotificationError('upstream', 500);
+    const sendNotification = jest.fn<typeof sendAdminSlackNotification>(async () => {
+      throw slackError;
+    });
+    const capture = jest.fn<typeof captureSentryException>(() => 'event-id');
+
+    await expect(
+      sendMissedServiceFeeAlert(ALERT_INPUT, {
+        sendNotification,
+        captureException: capture,
+      })
+    ).resolves.toBeUndefined();
+
+    expect(capture).toHaveBeenCalledTimes(1);
+    expect(capture).toHaveBeenCalledWith(slackError, {
+      tags: { source: SERVICE_FEE_MISSED_SENTRY_TAG },
+      extra: {
+        kind: 'upstream',
+        status: 500,
+        assessmentKey: ALERT_INPUT.assessmentKey,
+        flow: ALERT_INPUT.flow,
+        ownerId: 'org_123',
+        failureCode: 'fee_application_failed',
+      },
+    });
+    const captureContext = capture.mock.calls[0]?.[1];
+    expect(JSON.stringify(captureContext)).not.toMatch(/secret|payload|webhook|email/i);
+  });
+
+  it('captures and swallows unexpected notifier failures without retaining the raw error', async () => {
+    const { sendMissedServiceFeeAlert, SERVICE_FEE_MISSED_SENTRY_TAG } = await loadAlerts();
+    const sendNotification = jest.fn<typeof sendAdminSlackNotification>(async () => {
+      throw new Error('potentially sensitive notifier error');
+    });
+    const capture = jest.fn<typeof captureSentryException>(() => 'event-id');
+
+    await expect(
+      sendMissedServiceFeeAlert(ALERT_INPUT, {
+        sendNotification,
+        captureException: capture,
+      })
+    ).resolves.toBeUndefined();
+
+    expect(capture).toHaveBeenCalledWith(expect.any(Error), {
+      tags: { source: SERVICE_FEE_MISSED_SENTRY_TAG },
+      extra: {
+        kind: 'unexpected',
+        status: null,
+        assessmentKey: ALERT_INPUT.assessmentKey,
+        flow: ALERT_INPUT.flow,
+        ownerId: 'org_123',
+        failureCode: 'fee_application_failed',
+      },
+    });
+    expect(capture.mock.calls[0]?.[0]).toEqual(
+      expect.objectContaining({ message: 'Admin Slack notification failed' })
+    );
+  });
+});
diff --git a/apps/web/src/lib/service-fees/alerts.ts b/apps/web/src/lib/service-fees/alerts.ts
new file mode 100644
index 0000000000..9034a644f7
--- /dev/null
+++ b/apps/web/src/lib/service-fees/alerts.ts
@@ -0,0 +1,102 @@
+import 'server-only';
+
+import { captureException } from '@sentry/nextjs';
+
+import {
+  AdminSlackNotificationError,
+  sendAdminSlackNotification,
+} from '@/lib/slack/admin-notifications';
+import type { ServiceFeeFlow } from '@/lib/service-fees/types';
+
+export const SERVICE_FEE_MISSED_SENTRY_TAG = 'service_fee_missed';
+
+export type MissedServiceFeeAlertInput = {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeCheckoutSessionId?: string | null;
+  stripeInvoiceId?: string | null;
+  stripePaymentIntentId?: string | null;
+  stripeChargeId?: string | null;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  currency: string;
+  failureCode: string;
+  attemptedAt: Date | string;
+};
+
+export type MissedServiceFeeAlertDependencies = {
+  sendNotification?: typeof sendAdminSlackNotification;
+  captureException?: typeof captureException;
+};
+
+function nonEmpty(value: string | null | undefined): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+
+function ownerId(input: MissedServiceFeeAlertInput): string {
+  return nonEmpty(input.organizationId) ?? nonEmpty(input.kiloUserId) ?? 'unknown';
+}
+
+function attemptedAtIso(value: Date | string): string {
+  const date = value instanceof Date ? value : new Date(value);
+  if (Number.isNaN(date.getTime())) {
+    return 'invalid_timestamp';
+  }
+  return date.toISOString();
+}
+
+export function buildMissedServiceFeeAlertText(input: MissedServiceFeeAlertInput): string {
+  const lines = [
+    'Missed service fee',
+    `assessment_key=${input.assessmentKey}`,
+    `flow=${input.flow}`,
+    `owner_id=${ownerId(input)}`,
+    `stripe_checkout_session_id=${nonEmpty(input.stripeCheckoutSessionId) ?? 'none'}`,
+    `stripe_invoice_id=${nonEmpty(input.stripeInvoiceId) ?? 'none'}`,
+    `stripe_payment_intent_id=${nonEmpty(input.stripePaymentIntentId) ?? 'none'}`,
+    `stripe_charge_id=${nonEmpty(input.stripeChargeId) ?? 'none'}`,
+    `eligible_subtotal_minor=${input.eligibleSubtotalMinor}`,
+    `expected_fee_minor=${input.expectedFeeMinor}`,
+    `currency=${input.currency}`,
+    `failure_code=${input.failureCode}`,
+    `attempted_at=${attemptedAtIso(input.attemptedAt)}`,
+  ];
+  return lines.join('\n');
+}
+
+/**
+ * Best-effort Admin Slack alert for a fail-open missed fee. Retries are not
+ * deduplicated. Slack or Sentry failure must not change assessment outcome.
+ */
+export async function sendMissedServiceFeeAlert(
+  input: MissedServiceFeeAlertInput,
+  deps: MissedServiceFeeAlertDependencies = {}
+): Promise<void> {
+  const sendNotification = deps.sendNotification ?? sendAdminSlackNotification;
+  const capture = deps.captureException ?? captureException;
+
+  try {
+    await sendNotification({
+      text: buildMissedServiceFeeAlertText(input),
+      unfurl_links: false,
+      unfurl_media: false,
+    });
+  } catch (error) {
+    const isSlackError = error instanceof AdminSlackNotificationError;
+    capture(isSlackError ? error : new Error('Admin Slack notification failed'), {
+      tags: { source: SERVICE_FEE_MISSED_SENTRY_TAG },
+      extra: {
+        kind: isSlackError ? error.kind : 'unexpected',
+        status: isSlackError ? (error.status ?? null) : null,
+        assessmentKey: input.assessmentKey,
+        flow: input.flow,
+        ownerId: ownerId(input),
+        failureCode: input.failureCode,
+      },
+    });
+  }
+}
diff --git a/apps/web/src/lib/service-fees/assessments.test.ts b/apps/web/src/lib/service-fees/assessments.test.ts
new file mode 100644
index 0000000000..ec393cbb49
--- /dev/null
+++ b/apps/web/src/lib/service-fees/assessments.test.ts
@@ -0,0 +1,513 @@
+import { describe, expect, test } from '@jest/globals';
+
+import {
+  ServiceFeeAssessmentConflictError,
+  canTransitionServiceFeeOutcome,
+  linkServiceFeeAssessmentStripeIds,
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  observeServiceFeeAssessmentDispute,
+  observeServiceFeeAssessmentRefunds,
+  prepareServiceFeeAssessmentDecision,
+  sanitizeServiceFeeAssessmentMetadata,
+  settleServiceFeeAssessment,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
+import type { PrepareAssessmentInput } from '@/lib/service-fees/types';
+
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      return rows.get(assessmentKey) ?? null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata:
+          patch.metadata !== undefined
+            ? sanitizeServiceFeeAssessmentMetadata(patch.metadata)
+            : { ...existing.metadata },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+
+  return store;
+}
+
+const ACTIVATION = new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000);
+const BEFORE_ACTIVATION = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1) * 1000);
+
+function personalInput(overrides: Partial<PrepareAssessmentInput> = {}): PrepareAssessmentInput {
+  return {
+    assessmentKey: 'checkout:11111111-1111-4111-8111-111111111111',
+    flow: 'personal_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    kiloUserId: 'user_1',
+    ...overrides,
+  };
+}
+
+function organizationInput(
+  overrides: Partial<PrepareAssessmentInput> = {}
+): PrepareAssessmentInput {
+  return {
+    assessmentKey: 'invoice:in_test_1',
+    flow: 'organization_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    organizationId: 'org_1',
+    kiloUserId: 'user_1',
+    ...overrides,
+  };
+}
+
+async function persistPending(
+  store: ServiceFeeAssessmentStore,
+  input: PrepareAssessmentInput = personalInput()
+) {
+  const decision = await prepareServiceFeeAssessmentDecision(input);
+  return upsertServiceFeeAssessment({ store, decision });
+}
+
+describe('prepareServiceFeeAssessmentDecision', () => {
+  test('validates owner and subtotal, then applies cutoff, exemption, and fee outcomes', async () => {
+    await expect(
+      prepareServiceFeeAssessmentDecision(personalInput({ kiloUserId: undefined }))
+    ).rejects.toThrow(/requires kiloUserId/);
+    await expect(
+      prepareServiceFeeAssessmentDecision(personalInput({ eligibleSubtotalMinor: 1.5 }))
+    ).rejects.toThrow(/safe integer/);
+
+    const unsupported = await prepareServiceFeeAssessmentDecision(
+      personalInput({ currency: 'EUR', eligibleSubtotalMinor: 10_000 })
+    );
+    expect(unsupported).toMatchObject({
+      outcome: 'unsupported_currency',
+      eligibleSubtotalMinor: 0,
+      expectedFeeMinor: 0,
+      chargedFeeMinor: 0,
+    });
+
+    const preActivation = await prepareServiceFeeAssessmentDecision(
+      personalInput({ eligibilityCreatedAt: BEFORE_ACTIVATION })
+    );
+    expect(preActivation).toMatchObject({
+      outcome: 'pre_activation',
+      expectedFeeMinor: 500,
+    });
+
+    const exempt = await prepareServiceFeeAssessmentDecision(organizationInput(), {
+      findEffectiveExemption: async () => ({ id: 'hist_1', isExempt: true }),
+    });
+    expect(exempt).toMatchObject({
+      outcome: 'exempt',
+      expectedFeeMinor: 500,
+      exemptionId: 'hist_1',
+    });
+
+    const revoked = await prepareServiceFeeAssessmentDecision(organizationInput(), {
+      findEffectiveExemption: async () => ({ id: 'hist_2', isExempt: false }),
+    });
+    expect(revoked).toMatchObject({ outcome: 'pending', exemptionId: null });
+
+    const zeroRounded = await prepareServiceFeeAssessmentDecision(
+      personalInput({ eligibleSubtotalMinor: 1 })
+    );
+    expect(zeroRounded).toMatchObject({
+      outcome: 'zero_rounded',
+      expectedFeeMinor: 0,
+    });
+
+    const pending = await prepareServiceFeeAssessmentDecision(personalInput());
+    expect(pending).toMatchObject({
+      outcome: 'pending',
+      expectedFeeMinor: 500,
+      chargedFeeMinor: 0,
+    });
+  });
+});
+
+describe('upsertServiceFeeAssessment', () => {
+  test('is idempotent on assessment_key and enriches absent Stripe IDs', async () => {
+    const store = createMemoryAssessmentStore();
+    const decision = await prepareServiceFeeAssessmentDecision(personalInput());
+    const first = await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: { stripeCustomerId: 'cus_1' },
+    });
+    const second = await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: 'cus_1',
+        stripeCheckoutSessionId: 'cs_1',
+        stripePaymentIntentId: 'pi_1',
+      },
+    });
+
+    expect(second.assessmentKey).toBe(first.assessmentKey);
+    expect(second.stripeCustomerId).toBe('cus_1');
+    expect(second.stripeCheckoutSessionId).toBe('cs_1');
+    expect(second.stripePaymentIntentId).toBe('pi_1');
+    expect(second.outcome).toBe('pending');
+  });
+
+  test('rejects conflicting owner, flow, currency, subtotal, expected fee, and Stripe IDs', async () => {
+    const store = createMemoryAssessmentStore();
+    const decision = await prepareServiceFeeAssessmentDecision(personalInput());
+    await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: { stripeInvoiceId: 'in_1' },
+    });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision: await prepareServiceFeeAssessmentDecision(
+          personalInput({ kiloUserId: 'user_other' })
+        ),
+      })
+    ).rejects.toMatchObject({ reason: 'owner', field: 'kiloUserId' });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision: {
+          ...decision,
+          flow: 'personal_kilo_pass',
+        },
+      })
+    ).rejects.toMatchObject({ reason: 'flow' });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision: { ...decision, currency: 'eur' },
+      })
+    ).rejects.toMatchObject({ reason: 'currency' });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision: {
+          ...decision,
+          eligibleSubtotalMinor: 20_000,
+          expectedFeeMinor: 1_000,
+        },
+      })
+    ).rejects.toMatchObject({ reason: 'eligible_subtotal' });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision: { ...decision, expectedFeeMinor: 499 },
+      })
+    ).rejects.toMatchObject({ reason: 'expected_fee' });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store,
+        decision,
+        stripeIds: { stripeInvoiceId: 'in_other' },
+      })
+    ).rejects.toMatchObject({ reason: 'stripe_id', field: 'stripeInvoiceId' });
+  });
+
+  test('drops raw provider payload and PII from metadata', () => {
+    expect(
+      sanitizeServiceFeeAssessmentMetadata({
+        service_fee_rate_deviation: true,
+        email: 'person@example.com',
+        payload: { raw: true },
+        refund_allocation_unresolved: true,
+      })
+    ).toEqual({
+      service_fee_rate_deviation: true,
+      refund_allocation_unresolved: true,
+    });
+  });
+});
+
+describe('service fee assessment transitions', () => {
+  test('pending may become charged, missed, or a terminal omitted outcome, and those never recollect', async () => {
+    expect(canTransitionServiceFeeOutcome('pending', 'charged')).toBe(true);
+    expect(canTransitionServiceFeeOutcome('pending', 'missed')).toBe(true);
+    expect(canTransitionServiceFeeOutcome('pending', 'exempt')).toBe(true);
+    expect(canTransitionServiceFeeOutcome('missed', 'charged')).toBe(false);
+    expect(canTransitionServiceFeeOutcome('exempt', 'charged')).toBe(false);
+    expect(canTransitionServiceFeeOutcome('pre_activation', 'charged')).toBe(false);
+
+    const store = createMemoryAssessmentStore();
+    const pending = await persistPending(store);
+    const charged = await markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: pending.assessmentKey,
+      chargedFeeMinor: 0,
+      stripeIds: { stripeCheckoutSessionId: 'cs_1' },
+    });
+    expect(charged.outcome).toBe('charged');
+    expect(charged.chargedFeeMinor).toBe(0);
+
+    await expect(
+      markServiceFeeAssessmentMissed({
+        store,
+        assessmentKey: pending.assessmentKey,
+        failureCode: 'fee_application_failed',
+      })
+    ).rejects.toBeInstanceOf(ServiceFeeAssessmentConflictError);
+
+    const missedStore = createMemoryAssessmentStore();
+    const missedPending = await persistPending(
+      missedStore,
+      personalInput({ assessmentKey: 'checkout:missed' })
+    );
+    const missed = await markServiceFeeAssessmentMissed({
+      store: missedStore,
+      assessmentKey: missedPending.assessmentKey,
+      failureCode: 'fee_application_failed',
+    });
+    expect(missed).toMatchObject({
+      outcome: 'missed',
+      chargedFeeMinor: 0,
+      failureCode: 'fee_application_failed',
+    });
+    await expect(
+      markServiceFeeAssessmentCharged({
+        store: missedStore,
+        assessmentKey: missed.assessmentKey,
+        chargedFeeMinor: 500,
+      })
+    ).rejects.toMatchObject({ reason: 'illegal_transition' });
+
+    await expect(
+      markServiceFeeAssessmentMissed({
+        store: missedStore,
+        assessmentKey: missed.assessmentKey,
+        failureCode: '  ',
+      })
+    ).rejects.toMatchObject({ reason: 'invalid_failure_code' });
+  });
+
+  test('links Stripe IDs only when absent or identical', async () => {
+    const store = createMemoryAssessmentStore();
+    const pending = await persistPending(store);
+    const linked = await linkServiceFeeAssessmentStripeIds({
+      store,
+      assessmentKey: pending.assessmentKey,
+      stripeIds: { stripeChargeId: 'ch_1', stripePaymentIntentId: 'pi_1' },
+    });
+    const again = await linkServiceFeeAssessmentStripeIds({
+      store,
+      assessmentKey: pending.assessmentKey,
+      stripeIds: { stripeChargeId: 'ch_1', stripeInvoiceId: 'in_1' },
+    });
+
+    expect(again.stripeChargeId).toBe('ch_1');
+    expect(again.stripePaymentIntentId).toBe('pi_1');
+    expect(again.stripeInvoiceId).toBe('in_1');
+    expect(linked.assessmentKey).toBe(again.assessmentKey);
+
+    await expect(
+      linkServiceFeeAssessmentStripeIds({
+        store,
+        assessmentKey: pending.assessmentKey,
+        stripeIds: { stripeChargeId: 'ch_other' },
+      })
+    ).rejects.toMatchObject({ reason: 'stripe_id' });
+  });
+});
+
+describe('settleServiceFeeAssessment', () => {
+  test('rejects pending and records observed product, fee, and gross idempotently', async () => {
+    const store = createMemoryAssessmentStore();
+    const pending = await persistPending(store);
+
+    await expect(
+      settleServiceFeeAssessment({
+        store,
+        assessmentKey: pending.assessmentKey,
+        settledAt: '2026-09-01T01:00:00.000Z',
+        settledProductMinor: 10_000,
+        grossPaidMinor: 10_500,
+        chargedFeeMinor: 500,
+      })
+    ).rejects.toMatchObject({ reason: 'pending_settlement' });
+
+    await markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: pending.assessmentKey,
+      chargedFeeMinor: 0,
+    });
+
+    const settled = await settleServiceFeeAssessment({
+      store,
+      assessmentKey: pending.assessmentKey,
+      settledAt: '2026-09-01T01:00:00.000Z',
+      settledProductMinor: 8_000,
+      grossPaidMinor: 8_400,
+      chargedFeeMinor: 400,
+      stripeIds: { stripeChargeId: 'ch_1' },
+    });
+    expect(settled).toMatchObject({
+      outcome: 'charged',
+      settledProductMinor: 8_000,
+      chargedFeeMinor: 400,
+      grossPaidMinor: 8_400,
+      stripeChargeId: 'ch_1',
+      settledAt: '2026-09-01T01:00:00.000Z',
+    });
+
+    const replay = await settleServiceFeeAssessment({
+      store,
+      assessmentKey: pending.assessmentKey,
+      settledAt: '2026-09-01T02:00:00.000Z',
+      settledProductMinor: 8_000,
+      grossPaidMinor: 8_400,
+      chargedFeeMinor: 400,
+      stripeIds: { stripeChargeId: 'ch_1', stripeInvoiceId: 'in_1' },
+    });
+    expect(replay.settledAt).toBe('2026-09-01T01:00:00.000Z');
+    expect(replay.stripeInvoiceId).toBe('in_1');
+
+    await expect(
+      settleServiceFeeAssessment({
+        store,
+        assessmentKey: pending.assessmentKey,
+        settledAt: '2026-09-01T01:00:00.000Z',
+        settledProductMinor: 9_000,
+        grossPaidMinor: 8_400,
+        chargedFeeMinor: 400,
+      })
+    ).rejects.toMatchObject({ field: 'settledProductMinor' });
+  });
+
+  test('caps settled product at the eligible subtotal and can settle exempt or missed rows', async () => {
+    const store = createMemoryAssessmentStore();
+    const decision = await prepareServiceFeeAssessmentDecision(organizationInput(), {
+      findEffectiveExemption: async () => ({ id: 'hist_1', isExempt: true }),
+    });
+    const exempt = await upsertServiceFeeAssessment({ store, decision });
+    const settled = await settleServiceFeeAssessment({
+      store,
+      assessmentKey: exempt.assessmentKey,
+      settledAt: ACTIVATION,
+      settledProductMinor: 99_999,
+      grossPaidMinor: 10_000,
+    });
+    expect(settled.settledProductMinor).toBe(10_000);
+    expect(settled.chargedFeeMinor).toBe(0);
+    expect(settled.outcome).toBe('exempt');
+  });
+});
+
+describe('refunds and disputes', () => {
+  test('refunds are monotonic and disputes are mutable without changing outcome', async () => {
+    const store = createMemoryAssessmentStore();
+    const pending = await persistPending(store);
+    await markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: pending.assessmentKey,
+      chargedFeeMinor: 500,
+    });
+    await settleServiceFeeAssessment({
+      store,
+      assessmentKey: pending.assessmentKey,
+      settledAt: ACTIVATION,
+      settledProductMinor: 10_000,
+      grossPaidMinor: 10_500,
+      chargedFeeMinor: 500,
+    });
+
+    const firstRefund = await observeServiceFeeAssessmentRefunds({
+      store,
+      assessmentKey: pending.assessmentKey,
+      refundedProductMinor: 4_000,
+      refundedFeeMinor: 200,
+      refundedGrossMinor: 4_200,
+      unresolved: true,
+    });
+    expect(firstRefund).toMatchObject({
+      refundedProductMinor: 4_000,
+      refundedFeeMinor: 200,
+      refundedGrossMinor: 4_200,
+      outcome: 'charged',
+      metadata: { refund_allocation_unresolved: true },
+    });
+
+    const resolved = await observeServiceFeeAssessmentRefunds({
+      store,
+      assessmentKey: pending.assessmentKey,
+      refundedProductMinor: 4_000,
+      refundedFeeMinor: 200,
+      refundedGrossMinor: 4_200,
+      unresolved: false,
+    });
+    expect(resolved.metadata.refund_allocation_unresolved).toBeUndefined();
+
+    await expect(
+      observeServiceFeeAssessmentRefunds({
+        store,
+        assessmentKey: pending.assessmentKey,
+        refundedProductMinor: 3_000,
+        refundedFeeMinor: 200,
+      })
+    ).rejects.toMatchObject({ reason: 'non_monotonic_refund' });
+
+    await expect(
+      observeServiceFeeAssessmentRefunds({
+        store,
+        assessmentKey: pending.assessmentKey,
+        refundedProductMinor: 10_000,
+        refundedFeeMinor: 501,
+      })
+    ).rejects.toMatchObject({ reason: 'refund_exceeds_settled' });
+
+    const withdrawn = await observeServiceFeeAssessmentDispute({
+      store,
+      assessmentKey: pending.assessmentKey,
+      disputedFeeMinor: 500,
+    });
+    expect(withdrawn).toMatchObject({
+      disputedFeeMinor: 500,
+      outcome: 'charged',
+      refundedFeeMinor: 200,
+    });
+
+    const won = await observeServiceFeeAssessmentDispute({
+      store,
+      assessmentKey: pending.assessmentKey,
+      disputedFeeMinor: 0,
+    });
+    expect(won).toMatchObject({
+      disputedFeeMinor: 0,
+      outcome: 'charged',
+      refundedProductMinor: 4_000,
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/assessments.ts b/apps/web/src/lib/service-fees/assessments.ts
new file mode 100644
index 0000000000..26a0054f1f
--- /dev/null
+++ b/apps/web/src/lib/service-fees/assessments.ts
@@ -0,0 +1,937 @@
+import 'server-only';
+
+import { calculateServiceFeeMinor } from '@/lib/service-fees/calculation';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import type { OrganizationServiceFeeExemptionRecord } from '@/lib/service-fees/organization-exemptions';
+import {
+  getServiceFeeOwner,
+  isSupportedServiceFeeCurrency,
+  type PrepareAssessmentInput,
+  type ServiceFeeFlow,
+  type ServiceFeeOutcome,
+} from '@/lib/service-fees/types';
+
+export const SERVICE_FEE_TERMINAL_OMITTED_OUTCOMES = [
+  'exempt',
+  'pre_activation',
+  'zero_rounded',
+  'unsupported_currency',
+] as const satisfies readonly ServiceFeeOutcome[];
+
+export type ServiceFeeTerminalOmittedOutcome =
+  (typeof SERVICE_FEE_TERMINAL_OMITTED_OUTCOMES)[number];
+
+export type ServiceFeeAssessmentConflictReason =
+  | 'owner'
+  | 'flow'
+  | 'currency'
+  | 'eligible_subtotal'
+  | 'expected_fee'
+  | 'stripe_id'
+  | 'illegal_transition'
+  | 'pending_settlement'
+  | 'non_monotonic_refund'
+  | 'refund_exceeds_settled'
+  | 'dispute_exceeds_settled'
+  | 'invalid_failure_code'
+  | 'invalid_amount';
+
+export class ServiceFeeAssessmentConflictError extends Error {
+  readonly name = 'ServiceFeeAssessmentConflictError';
+
+  constructor(
+    readonly assessmentKey: string,
+    readonly reason: ServiceFeeAssessmentConflictReason,
+    readonly field: string,
+    readonly existing: unknown,
+    readonly incoming: unknown,
+    message?: string
+  ) {
+    super(message ?? `service fee assessment ${assessmentKey} conflict on ${field} (${reason})`);
+  }
+}
+
+export type ServiceFeeAssessmentMetadata = {
+  service_fee_rate_deviation?: true;
+  refund_allocation_unresolved?: true;
+};
+
+const ALLOWED_METADATA_KEYS = new Set<keyof ServiceFeeAssessmentMetadata>([
+  'service_fee_rate_deviation',
+  'refund_allocation_unresolved',
+]);
+
+export type ServiceFeeStripeIds = {
+  stripeCustomerId?: string | null;
+  stripeCheckoutSessionId?: string | null;
+  stripeInvoiceId?: string | null;
+  stripePaymentIntentId?: string | null;
+  stripeChargeId?: string | null;
+  stripeFeePriceId?: string | null;
+  stripeCheckoutFeeLineItemId?: string | null;
+  stripeInvoiceFeeLineItemId?: string | null;
+};
+
+const STRIPE_ID_FIELDS = [
+  'stripeCustomerId',
+  'stripeCheckoutSessionId',
+  'stripeInvoiceId',
+  'stripePaymentIntentId',
+  'stripeChargeId',
+  'stripeFeePriceId',
+  'stripeCheckoutFeeLineItemId',
+  'stripeInvoiceFeeLineItemId',
+] as const satisfies readonly (keyof ServiceFeeStripeIds)[];
+
+export type ServiceFeeAssessmentRecord = {
+  assessmentKey: string;
+  version: string;
+  flow: ServiceFeeFlow;
+  outcome: ServiceFeeOutcome;
+  currency: string;
+  kiloUserId: string | null;
+  organizationId: string | null;
+  stripeCustomerId: string | null;
+  stripeCheckoutSessionId: string | null;
+  stripeInvoiceId: string | null;
+  stripePaymentIntentId: string | null;
+  stripeChargeId: string | null;
+  stripeFeePriceId: string | null;
+  stripeCheckoutFeeLineItemId: string | null;
+  stripeInvoiceFeeLineItemId: string | null;
+  eligibilityCreatedAt: string;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  chargedFeeMinor: number;
+  grossPaidMinor: number;
+  settledProductMinor: number;
+  settledAt: string | null;
+  refundedProductMinor: number;
+  refundedFeeMinor: number;
+  refundedGrossMinor: number;
+  disputedFeeMinor: number;
+  exemptionId: string | null;
+  failureCode: string | null;
+  metadata: ServiceFeeAssessmentMetadata;
+  createdAt: string;
+  updatedAt: string;
+};
+
+/**
+ * Drizzle-compatible transaction wrapper. `db.transaction` and an already-open
+ * `tx` (whose `transaction` simply invokes the callback) both satisfy this.
+ */
+export type ServiceFeeAssessmentExecutor = {
+  transaction: <T>(fn: (tx: ServiceFeeAssessmentExecutor) => Promise<T>) => Promise<T>;
+};
+
+export type ServiceFeeAssessmentStore = {
+  transact<T>(fn: (store: ServiceFeeAssessmentStore) => Promise<T>): Promise<T>;
+  findByAssessmentKey(assessmentKey: string): Promise<ServiceFeeAssessmentRecord | null>;
+  insert(record: ServiceFeeAssessmentRecord): Promise<ServiceFeeAssessmentRecord>;
+  update(
+    assessmentKey: string,
+    patch: Partial<ServiceFeeAssessmentRecord>
+  ): Promise<ServiceFeeAssessmentRecord>;
+};
+
+export type EffectiveExemptionLookup = (
+  organizationId: string,
+  at: Date
+) => Promise<Pick<OrganizationServiceFeeExemptionRecord, 'id' | 'isExempt'> | null>;
+
+export type PreparedServiceFeeDecision = {
+  assessmentKey: string;
+  version: typeof SERVICE_FEE_VERSION;
+  flow: ServiceFeeFlow;
+  outcome: Exclude<ServiceFeeOutcome, 'charged' | 'missed'>;
+  currency: string;
+  kiloUserId: string | null;
+  organizationId: string | null;
+  stripeCustomerId: string | null;
+  eligibilityCreatedAt: string;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  chargedFeeMinor: 0;
+  exemptionId: string | null;
+  failureCode: null;
+  metadata: ServiceFeeAssessmentMetadata;
+};
+
+const FAILURE_CODE_PATTERN = /^[a-z][a-z0-9_]{0,99}$/;
+const ISO_CURRENCY_PATTERN = /^[a-z]{3}$/;
+
+function assertNonNegativeSafeInteger(value: number, label: string): void {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+    throw new Error(`${label} must be a non-negative safe integer`);
+  }
+}
+
+function assertNonEmptyAssessmentKey(assessmentKey: string): void {
+  if (typeof assessmentKey !== 'string' || assessmentKey.trim().length === 0) {
+    throw new Error('assessmentKey must be a nonempty string');
+  }
+}
+
+export function toServiceFeeTimestamp(value: Date | string): string {
+  const date = value instanceof Date ? value : new Date(value);
+  if (Number.isNaN(date.getTime())) {
+    throw new Error('service fee timestamp is invalid');
+  }
+  return date.toISOString();
+}
+
+export function sanitizeServiceFeeAssessmentMetadata(
+  metadata: Record<string, unknown> | ServiceFeeAssessmentMetadata | null | undefined
+): ServiceFeeAssessmentMetadata {
+  if (!metadata || typeof metadata !== 'object' || Array.isArray(metadata)) {
+    return {};
+  }
+
+  const sanitized: ServiceFeeAssessmentMetadata = {};
+  for (const key of ALLOWED_METADATA_KEYS) {
+    if (metadata[key] === true) {
+      sanitized[key] = true;
+    }
+  }
+  return sanitized;
+}
+
+export function assertServiceFeeFailureCode(failureCode: string, assessmentKey = ''): string {
+  const trimmed = failureCode.trim();
+  if (!FAILURE_CODE_PATTERN.test(trimmed)) {
+    throw new ServiceFeeAssessmentConflictError(
+      assessmentKey,
+      'invalid_failure_code',
+      'failureCode',
+      null,
+      failureCode,
+      'failure_code must be a stable nonempty internal code'
+    );
+  }
+  return trimmed;
+}
+
+export function isServiceFeeTerminalOmittedOutcome(
+  outcome: ServiceFeeOutcome
+): outcome is ServiceFeeTerminalOmittedOutcome {
+  return (SERVICE_FEE_TERMINAL_OMITTED_OUTCOMES as readonly string[]).includes(outcome);
+}
+
+export function canTransitionServiceFeeOutcome(
+  from: ServiceFeeOutcome,
+  to: ServiceFeeOutcome
+): boolean {
+  if (from === to) return true;
+  if (from === 'pending') {
+    return to === 'charged' || to === 'missed' || isServiceFeeTerminalOmittedOutcome(to);
+  }
+  return false;
+}
+
+function assertLegalOutcomeTransition(
+  assessmentKey: string,
+  from: ServiceFeeOutcome,
+  to: ServiceFeeOutcome
+): void {
+  if (canTransitionServiceFeeOutcome(from, to)) return;
+  throw new ServiceFeeAssessmentConflictError(
+    assessmentKey,
+    'illegal_transition',
+    'outcome',
+    from,
+    to,
+    `service fee assessment ${assessmentKey} cannot transition from ${from} to ${to}`
+  );
+}
+
+function conflict(
+  assessmentKey: string,
+  reason: ServiceFeeAssessmentConflictReason,
+  field: string,
+  existing: unknown,
+  incoming: unknown
+): never {
+  throw new ServiceFeeAssessmentConflictError(assessmentKey, reason, field, existing, incoming);
+}
+
+function normalizeCurrency(currency: string): string {
+  return currency.trim().toLowerCase();
+}
+
+function enrichNullableString(
+  assessmentKey: string,
+  field: string,
+  existing: string | null,
+  incoming: string | null | undefined
+): string | null {
+  if (incoming === undefined || incoming === null || incoming === '') {
+    return existing;
+  }
+  if (existing === null || existing === '') {
+    return incoming;
+  }
+  if (existing === incoming) {
+    return existing;
+  }
+  conflict(
+    assessmentKey,
+    field === 'kiloUserId' ? 'owner' : 'stripe_id',
+    field,
+    existing,
+    incoming
+  );
+}
+
+function mergeStripeIds(
+  assessmentKey: string,
+  existing: ServiceFeeAssessmentRecord,
+  incoming: ServiceFeeStripeIds | undefined
+): Pick<ServiceFeeAssessmentRecord, (typeof STRIPE_ID_FIELDS)[number]> {
+  const merged = {
+    stripeCustomerId: existing.stripeCustomerId,
+    stripeCheckoutSessionId: existing.stripeCheckoutSessionId,
+    stripeInvoiceId: existing.stripeInvoiceId,
+    stripePaymentIntentId: existing.stripePaymentIntentId,
+    stripeChargeId: existing.stripeChargeId,
+    stripeFeePriceId: existing.stripeFeePriceId,
+    stripeCheckoutFeeLineItemId: existing.stripeCheckoutFeeLineItemId,
+    stripeInvoiceFeeLineItemId: existing.stripeInvoiceFeeLineItemId,
+  };
+
+  if (!incoming) return merged;
+
+  for (const field of STRIPE_ID_FIELDS) {
+    merged[field] = enrichNullableString(assessmentKey, field, existing[field], incoming[field]);
+  }
+  return merged;
+}
+
+function requireAssessment(
+  assessmentKey: string,
+  record: ServiceFeeAssessmentRecord | null
+): ServiceFeeAssessmentRecord {
+  if (!record) {
+    throw new Error(`service fee assessment ${assessmentKey} was not found`);
+  }
+  return record;
+}
+
+export async function prepareServiceFeeAssessmentDecision(
+  input: PrepareAssessmentInput,
+  deps: { findEffectiveExemption?: EffectiveExemptionLookup } = {}
+): Promise<PreparedServiceFeeDecision> {
+  assertNonEmptyAssessmentKey(input.assessmentKey);
+  assertNonNegativeSafeInteger(input.eligibleSubtotalMinor, 'eligibleSubtotalMinor');
+  if (Number.isNaN(input.eligibilityCreatedAt.getTime())) {
+    throw new Error('eligibilityCreatedAt is invalid');
+  }
+
+  const owner = getServiceFeeOwner(input.flow, input);
+  const currency = normalizeCurrency(input.currency);
+  const eligibilityCreatedAt = toServiceFeeTimestamp(input.eligibilityCreatedAt);
+  const createdUnixSeconds = Math.floor(input.eligibilityCreatedAt.getTime() / 1000);
+  const stripeCustomerId = input.stripeCustomerId?.trim() ? input.stripeCustomerId.trim() : null;
+  const kiloUserId = owner.kind === 'personal' ? owner.kiloUserId : (owner.kiloUserId ?? null);
+  const organizationId = owner.kind === 'organization' ? owner.organizationId : null;
+
+  if (!ISO_CURRENCY_PATTERN.test(currency) || !isSupportedServiceFeeCurrency(currency)) {
+    return {
+      assessmentKey: input.assessmentKey,
+      version: SERVICE_FEE_VERSION,
+      flow: input.flow,
+      outcome: 'unsupported_currency',
+      currency,
+      kiloUserId,
+      organizationId,
+      stripeCustomerId,
+      eligibilityCreatedAt,
+      eligibleSubtotalMinor: 0,
+      expectedFeeMinor: 0,
+      chargedFeeMinor: 0,
+      exemptionId: null,
+      failureCode: null,
+      metadata: {},
+    };
+  }
+
+  let outcome: PreparedServiceFeeDecision['outcome'] = 'pending';
+  let exemptionId: string | null = null;
+
+  if (createdUnixSeconds < SERVICE_FEE_ACTIVATION_UNIX_SECONDS) {
+    outcome = 'pre_activation';
+  } else if (owner.kind === 'organization') {
+    const exemption = deps.findEffectiveExemption
+      ? await deps.findEffectiveExemption(owner.organizationId, input.eligibilityCreatedAt)
+      : null;
+    if (exemption?.isExempt) {
+      outcome = 'exempt';
+      exemptionId = exemption.id;
+    }
+  }
+
+  const expectedFeeMinor = calculateServiceFeeMinor(input.eligibleSubtotalMinor);
+  if (outcome === 'pending' && expectedFeeMinor === 0) {
+    outcome = 'zero_rounded';
+  }
+
+  return {
+    assessmentKey: input.assessmentKey,
+    version: SERVICE_FEE_VERSION,
+    flow: input.flow,
+    outcome,
+    currency,
+    kiloUserId,
+    organizationId,
+    stripeCustomerId,
+    eligibilityCreatedAt,
+    eligibleSubtotalMinor: input.eligibleSubtotalMinor,
+    expectedFeeMinor,
+    chargedFeeMinor: 0,
+    exemptionId,
+    failureCode: null,
+    metadata: {},
+  };
+}
+
+function assertImmutableFacts(
+  existing: ServiceFeeAssessmentRecord,
+  incoming: {
+    flow: ServiceFeeFlow;
+    currency: string;
+    organizationId: string | null;
+    eligibleSubtotalMinor: number;
+    expectedFeeMinor: number;
+  }
+): void {
+  if (existing.flow !== incoming.flow) {
+    conflict(existing.assessmentKey, 'flow', 'flow', existing.flow, incoming.flow);
+  }
+  if (existing.currency !== incoming.currency) {
+    conflict(existing.assessmentKey, 'currency', 'currency', existing.currency, incoming.currency);
+  }
+  if (existing.organizationId !== incoming.organizationId) {
+    conflict(
+      existing.assessmentKey,
+      'owner',
+      'organizationId',
+      existing.organizationId,
+      incoming.organizationId
+    );
+  }
+  if (existing.eligibleSubtotalMinor !== incoming.eligibleSubtotalMinor) {
+    conflict(
+      existing.assessmentKey,
+      'eligible_subtotal',
+      'eligibleSubtotalMinor',
+      existing.eligibleSubtotalMinor,
+      incoming.eligibleSubtotalMinor
+    );
+  }
+  if (existing.expectedFeeMinor !== incoming.expectedFeeMinor) {
+    conflict(
+      existing.assessmentKey,
+      'expected_fee',
+      'expectedFeeMinor',
+      existing.expectedFeeMinor,
+      incoming.expectedFeeMinor
+    );
+  }
+}
+
+function buildNewAssessmentRecord(params: {
+  decision: PreparedServiceFeeDecision;
+  stripeIds?: ServiceFeeStripeIds;
+  now: Date;
+}): ServiceFeeAssessmentRecord {
+  const nowIso = toServiceFeeTimestamp(params.now);
+  const stripeIds = params.stripeIds ?? {};
+  return {
+    assessmentKey: params.decision.assessmentKey,
+    version: params.decision.version,
+    flow: params.decision.flow,
+    outcome: params.decision.outcome,
+    currency: params.decision.currency,
+    kiloUserId: params.decision.kiloUserId,
+    organizationId: params.decision.organizationId,
+    stripeCustomerId: stripeIds.stripeCustomerId ?? params.decision.stripeCustomerId,
+    stripeCheckoutSessionId: stripeIds.stripeCheckoutSessionId ?? null,
+    stripeInvoiceId: stripeIds.stripeInvoiceId ?? null,
+    stripePaymentIntentId: stripeIds.stripePaymentIntentId ?? null,
+    stripeChargeId: stripeIds.stripeChargeId ?? null,
+    stripeFeePriceId: stripeIds.stripeFeePriceId ?? null,
+    stripeCheckoutFeeLineItemId: stripeIds.stripeCheckoutFeeLineItemId ?? null,
+    stripeInvoiceFeeLineItemId: stripeIds.stripeInvoiceFeeLineItemId ?? null,
+    eligibilityCreatedAt: params.decision.eligibilityCreatedAt,
+    eligibleSubtotalMinor: params.decision.eligibleSubtotalMinor,
+    expectedFeeMinor: params.decision.expectedFeeMinor,
+    chargedFeeMinor: 0,
+    grossPaidMinor: 0,
+    settledProductMinor: 0,
+    settledAt: null,
+    refundedProductMinor: 0,
+    refundedFeeMinor: 0,
+    refundedGrossMinor: 0,
+    disputedFeeMinor: 0,
+    exemptionId: params.decision.exemptionId,
+    failureCode: null,
+    metadata: sanitizeServiceFeeAssessmentMetadata(params.decision.metadata),
+    createdAt: nowIso,
+    updatedAt: nowIso,
+  };
+}
+
+export async function upsertServiceFeeAssessment(params: {
+  store: ServiceFeeAssessmentStore;
+  decision: PreparedServiceFeeDecision;
+  stripeIds?: ServiceFeeStripeIds;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  const now = params.now ?? new Date();
+
+  return params.store.transact(async store => {
+    const existing = await store.findByAssessmentKey(params.decision.assessmentKey);
+    if (!existing) {
+      try {
+        return await store.insert(
+          buildNewAssessmentRecord({
+            decision: params.decision,
+            stripeIds: params.stripeIds,
+            now,
+          })
+        );
+      } catch (error) {
+        const raced = await store.findByAssessmentKey(params.decision.assessmentKey);
+        if (!raced) throw error;
+        return mergePreparedAssessment(store, raced, params.decision, params.stripeIds, now);
+      }
+    }
+
+    return mergePreparedAssessment(store, existing, params.decision, params.stripeIds, now);
+  });
+}
+
+async function mergePreparedAssessment(
+  store: ServiceFeeAssessmentStore,
+  existing: ServiceFeeAssessmentRecord,
+  decision: PreparedServiceFeeDecision,
+  stripeIds: ServiceFeeStripeIds | undefined,
+  now: Date
+): Promise<ServiceFeeAssessmentRecord> {
+  assertImmutableFacts(existing, decision);
+
+  if (existing.kiloUserId && decision.kiloUserId && existing.kiloUserId !== decision.kiloUserId) {
+    conflict(
+      existing.assessmentKey,
+      'owner',
+      'kiloUserId',
+      existing.kiloUserId,
+      decision.kiloUserId
+    );
+  }
+
+  if (existing.exemptionId !== decision.exemptionId) {
+    conflict(
+      existing.assessmentKey,
+      'illegal_transition',
+      'exemptionId',
+      existing.exemptionId,
+      decision.exemptionId
+    );
+  }
+
+  if (existing.outcome !== decision.outcome) {
+    assertLegalOutcomeTransition(existing.assessmentKey, existing.outcome, decision.outcome);
+  }
+
+  const mergedIds = mergeStripeIds(existing.assessmentKey, existing, {
+    ...stripeIds,
+    stripeCustomerId: stripeIds?.stripeCustomerId ?? decision.stripeCustomerId,
+  });
+  const kiloUserId = enrichNullableString(
+    existing.assessmentKey,
+    'kiloUserId',
+    existing.kiloUserId,
+    decision.kiloUserId
+  );
+
+  return store.update(existing.assessmentKey, {
+    ...mergedIds,
+    kiloUserId,
+    outcome: existing.outcome === 'pending' ? decision.outcome : existing.outcome,
+    updatedAt: toServiceFeeTimestamp(now),
+  });
+}
+
+export async function markServiceFeeAssessmentCharged(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  chargedFeeMinor: number;
+  stripeIds?: ServiceFeeStripeIds;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  assertNonNegativeSafeInteger(params.chargedFeeMinor, 'chargedFeeMinor');
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+
+    if (existing.outcome === 'charged') {
+      const attachmentRetryAfterSettlement =
+        params.chargedFeeMinor === 0 && existing.settledAt !== null;
+      if (existing.chargedFeeMinor !== params.chargedFeeMinor && !attachmentRetryAfterSettlement) {
+        conflict(
+          existing.assessmentKey,
+          'expected_fee',
+          'chargedFeeMinor',
+          existing.chargedFeeMinor,
+          params.chargedFeeMinor
+        );
+      }
+      const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+      return store.update(existing.assessmentKey, {
+        ...mergedIds,
+        updatedAt: nowIso,
+      });
+    }
+
+    assertLegalOutcomeTransition(existing.assessmentKey, existing.outcome, 'charged');
+    if (existing.expectedFeeMinor <= 0) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'invalid_amount',
+        'expectedFeeMinor',
+        existing.expectedFeeMinor,
+        params.chargedFeeMinor,
+        `service fee assessment ${existing.assessmentKey} cannot be charged without a positive expected fee`
+      );
+    }
+
+    const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+    return store.update(existing.assessmentKey, {
+      ...mergedIds,
+      outcome: 'charged',
+      chargedFeeMinor: params.chargedFeeMinor,
+      failureCode: null,
+      updatedAt: nowIso,
+    });
+  });
+}
+
+export async function markServiceFeeAssessmentMissed(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  failureCode: string;
+  stripeIds?: ServiceFeeStripeIds;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  const failureCode = assertServiceFeeFailureCode(params.failureCode, params.assessmentKey);
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+
+    if (existing.outcome === 'missed') {
+      const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+      return store.update(existing.assessmentKey, {
+        ...mergedIds,
+        chargedFeeMinor: 0,
+        failureCode: existing.failureCode ?? failureCode,
+        updatedAt: nowIso,
+      });
+    }
+
+    assertLegalOutcomeTransition(existing.assessmentKey, existing.outcome, 'missed');
+    if (existing.expectedFeeMinor <= 0) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'invalid_amount',
+        'expectedFeeMinor',
+        existing.expectedFeeMinor,
+        0,
+        `service fee assessment ${existing.assessmentKey} cannot be missed without a positive expected fee`
+      );
+    }
+
+    const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+    return store.update(existing.assessmentKey, {
+      ...mergedIds,
+      outcome: 'missed',
+      chargedFeeMinor: 0,
+      failureCode,
+      updatedAt: nowIso,
+    });
+  });
+}
+
+export async function linkServiceFeeAssessmentStripeIds(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  stripeIds: ServiceFeeStripeIds;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+    const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+    return store.update(existing.assessmentKey, {
+      ...mergedIds,
+      updatedAt: nowIso,
+    });
+  });
+}
+
+export async function settleServiceFeeAssessment(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  settledAt: Date | string;
+  settledProductMinor: number;
+  grossPaidMinor: number;
+  chargedFeeMinor?: number;
+  stripeIds?: ServiceFeeStripeIds;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  assertNonNegativeSafeInteger(params.settledProductMinor, 'settledProductMinor');
+  assertNonNegativeSafeInteger(params.grossPaidMinor, 'grossPaidMinor');
+  if (params.chargedFeeMinor !== undefined) {
+    assertNonNegativeSafeInteger(params.chargedFeeMinor, 'chargedFeeMinor');
+  }
+  const settledAt = toServiceFeeTimestamp(params.settledAt);
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+
+    if (existing.outcome === 'pending') {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'pending_settlement',
+        'outcome',
+        existing.outcome,
+        'settled',
+        `service fee assessment ${existing.assessmentKey} cannot settle while pending`
+      );
+    }
+
+    const settledProductMinor = Math.min(
+      params.settledProductMinor,
+      existing.eligibleSubtotalMinor
+    );
+    const chargedFeeMinor =
+      existing.outcome === 'charged' ? (params.chargedFeeMinor ?? existing.chargedFeeMinor) : 0;
+
+    if (existing.outcome !== 'charged' && (params.chargedFeeMinor ?? 0) > 0) {
+      conflict(
+        existing.assessmentKey,
+        'illegal_transition',
+        'chargedFeeMinor',
+        existing.chargedFeeMinor,
+        params.chargedFeeMinor
+      );
+    }
+
+    if (existing.outcome === 'charged' && chargedFeeMinor === 0 && settledProductMinor !== 0) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'invalid_amount',
+        'chargedFeeMinor',
+        existing.chargedFeeMinor,
+        chargedFeeMinor,
+        `service fee assessment ${existing.assessmentKey} charged fee may be zero only when settled product is zero`
+      );
+    }
+
+    const mergedIds = mergeStripeIds(existing.assessmentKey, existing, params.stripeIds);
+
+    if (existing.settledAt) {
+      if (existing.settledProductMinor !== settledProductMinor) {
+        conflict(
+          existing.assessmentKey,
+          'eligible_subtotal',
+          'settledProductMinor',
+          existing.settledProductMinor,
+          settledProductMinor
+        );
+      }
+      if (existing.grossPaidMinor !== params.grossPaidMinor) {
+        conflict(
+          existing.assessmentKey,
+          'invalid_amount',
+          'grossPaidMinor',
+          existing.grossPaidMinor,
+          params.grossPaidMinor
+        );
+      }
+      if (existing.chargedFeeMinor !== chargedFeeMinor) {
+        conflict(
+          existing.assessmentKey,
+          'expected_fee',
+          'chargedFeeMinor',
+          existing.chargedFeeMinor,
+          chargedFeeMinor
+        );
+      }
+      return store.update(existing.assessmentKey, {
+        ...mergedIds,
+        updatedAt: nowIso,
+      });
+    }
+
+    return store.update(existing.assessmentKey, {
+      ...mergedIds,
+      chargedFeeMinor,
+      settledProductMinor,
+      grossPaidMinor: params.grossPaidMinor,
+      settledAt,
+      updatedAt: nowIso,
+    });
+  });
+}
+
+export async function observeServiceFeeAssessmentRefunds(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  refundedProductMinor: number;
+  refundedFeeMinor: number;
+  refundedGrossMinor?: number;
+  unresolved?: boolean;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  assertNonNegativeSafeInteger(params.refundedProductMinor, 'refundedProductMinor');
+  assertNonNegativeSafeInteger(params.refundedFeeMinor, 'refundedFeeMinor');
+  if (params.refundedGrossMinor !== undefined) {
+    assertNonNegativeSafeInteger(params.refundedGrossMinor, 'refundedGrossMinor');
+  }
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+
+    if (params.refundedProductMinor < existing.refundedProductMinor) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'non_monotonic_refund',
+        'refundedProductMinor',
+        existing.refundedProductMinor,
+        params.refundedProductMinor
+      );
+    }
+    if (params.refundedFeeMinor < existing.refundedFeeMinor) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'non_monotonic_refund',
+        'refundedFeeMinor',
+        existing.refundedFeeMinor,
+        params.refundedFeeMinor
+      );
+    }
+    if (
+      params.refundedGrossMinor !== undefined &&
+      params.refundedGrossMinor < existing.refundedGrossMinor
+    ) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'non_monotonic_refund',
+        'refundedGrossMinor',
+        existing.refundedGrossMinor,
+        params.refundedGrossMinor
+      );
+    }
+    if (params.refundedProductMinor > existing.settledProductMinor) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'refund_exceeds_settled',
+        'refundedProductMinor',
+        existing.settledProductMinor,
+        params.refundedProductMinor
+      );
+    }
+    if (params.refundedFeeMinor > existing.chargedFeeMinor) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'refund_exceeds_settled',
+        'refundedFeeMinor',
+        existing.chargedFeeMinor,
+        params.refundedFeeMinor
+      );
+    }
+
+    const nextMetadata =
+      params.unresolved === undefined
+        ? undefined
+        : sanitizeServiceFeeAssessmentMetadata(
+            params.unresolved
+              ? { ...existing.metadata, refund_allocation_unresolved: true }
+              : Object.fromEntries(
+                  Object.entries(existing.metadata).filter(
+                    ([key]) => key !== 'refund_allocation_unresolved'
+                  )
+                )
+          );
+
+    return store.update(existing.assessmentKey, {
+      refundedProductMinor: params.refundedProductMinor,
+      refundedFeeMinor: params.refundedFeeMinor,
+      refundedGrossMinor: params.refundedGrossMinor ?? existing.refundedGrossMinor,
+      ...(nextMetadata === undefined ? {} : { metadata: nextMetadata }),
+      updatedAt: nowIso,
+    });
+  });
+}
+
+export async function observeServiceFeeAssessmentDispute(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  disputedFeeMinor: number;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  assertNonEmptyAssessmentKey(params.assessmentKey);
+  assertNonNegativeSafeInteger(params.disputedFeeMinor, 'disputedFeeMinor');
+  const nowIso = toServiceFeeTimestamp(params.now ?? new Date());
+
+  return params.store.transact(async store => {
+    const existing = requireAssessment(
+      params.assessmentKey,
+      await store.findByAssessmentKey(params.assessmentKey)
+    );
+
+    if (params.disputedFeeMinor > existing.chargedFeeMinor) {
+      throw new ServiceFeeAssessmentConflictError(
+        existing.assessmentKey,
+        'dispute_exceeds_settled',
+        'disputedFeeMinor',
+        existing.chargedFeeMinor,
+        params.disputedFeeMinor
+      );
+    }
+
+    return store.update(existing.assessmentKey, {
+      disputedFeeMinor: params.disputedFeeMinor,
+      updatedAt: nowIso,
+    });
+  });
+}
diff --git a/apps/web/src/lib/service-fees/calculation.test.ts b/apps/web/src/lib/service-fees/calculation.test.ts
new file mode 100644
index 0000000000..65692922a5
--- /dev/null
+++ b/apps/web/src/lib/service-fees/calculation.test.ts
@@ -0,0 +1,265 @@
+import { describe, expect, test } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import {
+  calculateCumulativeFeeRefundMinor,
+  calculateServiceFeeMinor,
+  getNetPretaxLineAmountMinor,
+} from '@/lib/service-fees/calculation';
+import {
+  getServiceFeeOwner,
+  isOrganizationServiceFeeFlow,
+  isPersonalServiceFeeFlow,
+  isSupportedServiceFeeCurrency,
+} from '@/lib/service-fees/types';
+
+function invoiceLine(
+  overrides: Partial<Stripe.InvoiceLineItem> &
+    Pick<Stripe.InvoiceLineItem, 'amount' | 'currency'> & {
+      pretax_credit_amounts?: Stripe.InvoiceLineItem['pretax_credit_amounts'];
+      discount_amounts?: Stripe.InvoiceLineItem['discount_amounts'];
+      taxes?: Stripe.InvoiceLineItem['taxes'];
+    }
+): Stripe.InvoiceLineItem {
+  return {
+    id: 'il_test',
+    object: 'line_item',
+    discountable: true,
+    discounts: [],
+    invoice: 'in_test',
+    livemode: false,
+    metadata: {},
+    parent: null,
+    period: { start: 1, end: 2 },
+    pricing: null,
+    quantity: 1,
+    subscription: null,
+    taxes: null,
+    pretax_credit_amounts: null,
+    discount_amounts: null,
+    description: 'Kilo Pass',
+    ...overrides,
+  } as Stripe.InvoiceLineItem;
+}
+
+describe('service fee types', () => {
+  test('classifies personal and organization flows and requires the matching owner', () => {
+    expect(isPersonalServiceFeeFlow('personal_kilo_pass')).toBe(true);
+    expect(isOrganizationServiceFeeFlow('organization_top_up')).toBe(true);
+    expect(isSupportedServiceFeeCurrency('usd')).toBe(true);
+    expect(isSupportedServiceFeeCurrency('eur')).toBe(false);
+
+    expect(getServiceFeeOwner('personal_top_up', { kiloUserId: 'user_1' })).toEqual({
+      kind: 'personal',
+      kiloUserId: 'user_1',
+    });
+    expect(
+      getServiceFeeOwner('organization_kilo_pass', {
+        organizationId: 'org_1',
+        kiloUserId: 'user_1',
+      })
+    ).toEqual({
+      kind: 'organization',
+      organizationId: 'org_1',
+      kiloUserId: 'user_1',
+    });
+    expect(() => getServiceFeeOwner('personal_top_up', { organizationId: 'org_1' })).toThrow(
+      /requires kiloUserId/
+    );
+    expect(() =>
+      getServiceFeeOwner('personal_top_up', { kiloUserId: 'user_1', organizationId: 'org_1' })
+    ).toThrow(/forbids organizationId/);
+    expect(() => getServiceFeeOwner('organization_top_up', { kiloUserId: 'user_1' })).toThrow(
+      /requires organizationId/
+    );
+  });
+});
+
+describe('calculateServiceFeeMinor', () => {
+  test.each([
+    { subtotalMinor: 0, feeMinor: 0, label: '0 -> 0' },
+    { subtotalMinor: 1, feeMinor: 0, label: '$0.01 -> $0.00' },
+    { subtotalMinor: 10, feeMinor: 1, label: '$0.10 -> $0.01 at the half-cent boundary' },
+    { subtotalMinor: 1_900, feeMinor: 95, label: '$19.00 -> $0.95' },
+    { subtotalMinor: 4_900, feeMinor: 245, label: '$49.00 -> $2.45' },
+    { subtotalMinor: 19_900, feeMinor: 995, label: '$199.00 -> $9.95' },
+    { subtotalMinor: 10_000, feeMinor: 500, label: '$100.00 -> $5.00' },
+  ])('rounds $label', ({ subtotalMinor, feeMinor }) => {
+    expect(calculateServiceFeeMinor(subtotalMinor)).toBe(feeMinor);
+  });
+
+  test('calculates once on the aggregate subtotal rather than per line', () => {
+    const perLine = calculateServiceFeeMinor(10) + calculateServiceFeeMinor(10);
+    const aggregate = calculateServiceFeeMinor(20);
+
+    expect(perLine).toBe(2);
+    expect(aggregate).toBe(1);
+    expect(calculateServiceFeeMinor(3_000 + -1_000)).toBe(100);
+  });
+
+  test('rejects invalid or non-safe integers', () => {
+    for (const value of [
+      -1,
+      1.5,
+      Number.NaN,
+      Number.POSITIVE_INFINITY,
+      Number.MAX_SAFE_INTEGER + 1,
+    ]) {
+      expect(() => calculateServiceFeeMinor(value)).toThrow(/safe integer/);
+    }
+  });
+});
+
+describe('getNetPretaxLineAmountMinor', () => {
+  test('subtracts pretax discount credits and ignores credit-balance consumption', () => {
+    const line = invoiceLine({
+      amount: 4_900,
+      currency: 'usd',
+      pretax_credit_amounts: [
+        { amount: 980, type: 'discount', discount: 'di_percent' },
+        { amount: 4_900, type: 'credit_balance_transaction', credit_balance_transaction: 'cbt_1' },
+      ],
+      taxes: [
+        {
+          amount: 392,
+          tax_behavior: 'exclusive',
+          tax_rate_details: { tax_rate: 'txr_1' },
+          taxability_reason: 'standard_rated',
+          taxable_amount: 3_920,
+          type: 'tax_rate_details',
+        },
+      ],
+    });
+
+    expect(getNetPretaxLineAmountMinor(line)).toBe(3_920);
+  });
+
+  test('falls back to discount_amounts when pretax discount credits are absent', () => {
+    const line = invoiceLine({
+      amount: 4_900,
+      currency: 'usd',
+      discount_amounts: [{ amount: 980, discount: 'di_percent' }],
+    });
+
+    expect(getNetPretaxLineAmountMinor(line)).toBe(3_920);
+  });
+
+  test('does not double-subtract a discount present in both Stripe arrays', () => {
+    const line = invoiceLine({
+      amount: 4_900,
+      currency: 'usd',
+      discount_amounts: [{ amount: 980, discount: 'di_percent' }],
+      pretax_credit_amounts: [{ amount: 980, type: 'discount', discount: 'di_percent' }],
+    });
+
+    expect(getNetPretaxLineAmountMinor(line)).toBe(3_920);
+  });
+
+  test('subtracts only unmatched discount_amounts when pretax discount credits already exist', () => {
+    const line = invoiceLine({
+      amount: 10_000,
+      currency: 'usd',
+      discount_amounts: [
+        { amount: 500, discount: 'di_already_counted' },
+        { amount: 200, discount: 'di_extra' },
+      ],
+      pretax_credit_amounts: [{ amount: 500, type: 'discount', discount: 'di_already_counted' }],
+    });
+
+    expect(getNetPretaxLineAmountMinor(line)).toBe(9_300);
+  });
+
+  test('preserves negative proration lines and validates currency', () => {
+    const credit = invoiceLine({ amount: -1_000, currency: 'usd' });
+    expect(getNetPretaxLineAmountMinor(credit)).toBe(-1_000);
+    expect(() => getNetPretaxLineAmountMinor(credit, 'eur')).toThrow(/does not match expected eur/);
+    expect(() =>
+      getNetPretaxLineAmountMinor(invoiceLine({ amount: 100, currency: 'USD' }))
+    ).toThrow(/lowercase ISO code/);
+    expect(() =>
+      getNetPretaxLineAmountMinor(invoiceLine({ amount: 1.25, currency: 'usd' }))
+    ).toThrow(/safe integer/);
+  });
+});
+
+describe('calculateCumulativeFeeRefundMinor', () => {
+  test('returns zero for no product refund and for a zero-product settlement', () => {
+    expect(
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor: 10_000,
+        originalFeeMinor: 500,
+        cumulativeProductRefundMinor: 0,
+      })
+    ).toBe(0);
+    expect(
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor: 0,
+        originalFeeMinor: 0,
+        cumulativeProductRefundMinor: 0,
+      })
+    ).toBe(0);
+  });
+
+  test('uses cumulative half-up rounding with no drift back to the original fee', () => {
+    const originalProductMinor = 10_000;
+    const originalFeeMinor = 500;
+    let previous = 0;
+
+    for (const cumulativeProductRefundMinor of [3_333, 6_666, 10_000]) {
+      const cumulative = calculateCumulativeFeeRefundMinor({
+        originalProductMinor,
+        originalFeeMinor,
+        cumulativeProductRefundMinor,
+      });
+      expect(cumulative).toBeGreaterThanOrEqual(previous);
+      expect(cumulative).toBeLessThanOrEqual(originalFeeMinor);
+      previous = cumulative;
+    }
+
+    expect(
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor,
+        originalFeeMinor,
+        cumulativeProductRefundMinor: originalProductMinor,
+      })
+    ).toBe(originalFeeMinor);
+
+    let recordedFeeRefund = 0;
+    for (let refundedProduct = 1; refundedProduct <= 4_900; refundedProduct += 1) {
+      const target = calculateCumulativeFeeRefundMinor({
+        originalProductMinor: 4_900,
+        originalFeeMinor: 245,
+        cumulativeProductRefundMinor: refundedProduct,
+      });
+      const incremental = target - recordedFeeRefund;
+      expect(incremental).toBeGreaterThanOrEqual(0);
+      expect(recordedFeeRefund + incremental).toBeLessThanOrEqual(245);
+      recordedFeeRefund = target;
+    }
+    expect(recordedFeeRefund).toBe(245);
+  });
+
+  test('rejects invalid integers and refunds larger than the original product', () => {
+    expect(() =>
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor: -1,
+        originalFeeMinor: 0,
+        cumulativeProductRefundMinor: 0,
+      })
+    ).toThrow(/safe integer/);
+    expect(() =>
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor: 100,
+        originalFeeMinor: 5.5,
+        cumulativeProductRefundMinor: 10,
+      })
+    ).toThrow(/safe integer/);
+    expect(() =>
+      calculateCumulativeFeeRefundMinor({
+        originalProductMinor: 100,
+        originalFeeMinor: 5,
+        cumulativeProductRefundMinor: 101,
+      })
+    ).toThrow(/cannot exceed originalProductMinor/);
+  });
+});
diff --git a/apps/web/src/lib/service-fees/calculation.ts b/apps/web/src/lib/service-fees/calculation.ts
new file mode 100644
index 0000000000..7dfc61dc26
--- /dev/null
+++ b/apps/web/src/lib/service-fees/calculation.ts
@@ -0,0 +1,151 @@
+import type Stripe from 'stripe';
+
+import {
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_RATE_DENOMINATOR,
+} from '@/lib/service-fees/constants';
+import type { CalculateCumulativeFeeRefundInput } from '@/lib/service-fees/types';
+
+const ISO_CURRENCY_PATTERN = /^[a-z]{3}$/;
+const ROUND_HALF_UP_OFFSET = BigInt(SERVICE_FEE_RATE_DENOMINATOR / 2);
+const MAX_SAFE_INTEGER = BigInt(Number.MAX_SAFE_INTEGER);
+
+export function calculateServiceFeeMinor(eligibleSubtotalMinor: number): number {
+  assertNonNegativeSafeInteger(eligibleSubtotalMinor, 'eligibleSubtotalMinor');
+
+  const rounded =
+    (BigInt(eligibleSubtotalMinor) * BigInt(SERVICE_FEE_RATE_BASIS_POINTS) + ROUND_HALF_UP_OFFSET) /
+    BigInt(SERVICE_FEE_RATE_DENOMINATOR);
+
+  return bigintToSafeInteger(rounded, 'service fee');
+}
+
+export function getNetPretaxLineAmountMinor(
+  line: Stripe.InvoiceLineItem,
+  expectedCurrency: string = line.currency
+): number {
+  assertSafeInteger(line.amount, 'line.amount');
+  assertCurrency(line.currency, expectedCurrency);
+
+  const pretaxDiscounts = collectDiscountPretaxCredits(line);
+  let discountMinor = pretaxDiscounts.total;
+
+  const discountAmounts = line.discount_amounts ?? [];
+  for (const entry of discountAmounts) {
+    assertSafeInteger(entry.amount, 'discount_amounts.amount');
+    if (pretaxDiscounts.hasDiscountType && isMatchedDiscount(entry.discount, pretaxDiscounts.ids)) {
+      continue;
+    }
+    if (pretaxDiscounts.hasDiscountType) {
+      const discountId = getDiscountReferenceId(entry.discount);
+      if (!discountId) continue;
+    }
+    discountMinor += BigInt(entry.amount);
+  }
+
+  return bigintToSafeInteger(BigInt(line.amount) - discountMinor, 'net pretax line amount');
+}
+
+export function calculateCumulativeFeeRefundMinor({
+  originalProductMinor,
+  originalFeeMinor,
+  cumulativeProductRefundMinor,
+}: CalculateCumulativeFeeRefundInput): number {
+  assertNonNegativeSafeInteger(originalProductMinor, 'originalProductMinor');
+  assertNonNegativeSafeInteger(originalFeeMinor, 'originalFeeMinor');
+  assertNonNegativeSafeInteger(cumulativeProductRefundMinor, 'cumulativeProductRefundMinor');
+
+  if (cumulativeProductRefundMinor > originalProductMinor) {
+    throw new Error('cumulativeProductRefundMinor cannot exceed originalProductMinor');
+  }
+  if (originalProductMinor === 0 || cumulativeProductRefundMinor === 0 || originalFeeMinor === 0) {
+    return 0;
+  }
+  if (cumulativeProductRefundMinor === originalProductMinor) {
+    return originalFeeMinor;
+  }
+
+  const denominator = BigInt(originalProductMinor);
+  const rounded =
+    (BigInt(originalFeeMinor) * BigInt(cumulativeProductRefundMinor) + denominator / BigInt(2)) /
+    denominator;
+  const cumulative = bigintToSafeInteger(rounded, 'cumulative fee refund');
+  if (cumulative < 0) return 0;
+  if (cumulative > originalFeeMinor) return originalFeeMinor;
+  return cumulative;
+}
+
+function collectDiscountPretaxCredits(line: Stripe.InvoiceLineItem): {
+  total: bigint;
+  ids: Set<string>;
+  hasDiscountType: boolean;
+} {
+  const ids = new Set<string>();
+  let total = BigInt(0);
+  let hasDiscountType = false;
+
+  for (const entry of line.pretax_credit_amounts ?? []) {
+    assertSafeInteger(entry.amount, 'pretax_credit_amounts.amount');
+    if (entry.type !== 'discount') continue;
+    hasDiscountType = true;
+    total += BigInt(entry.amount);
+    const discountId = getDiscountReferenceId(entry.discount);
+    if (discountId) ids.add(discountId);
+  }
+
+  return { total, ids, hasDiscountType };
+}
+
+function isMatchedDiscount(
+  discount: Stripe.InvoiceLineItem.DiscountAmount['discount'],
+  matchedIds: Set<string>
+): boolean {
+  if (matchedIds.size === 0) return true;
+  const discountId = getDiscountReferenceId(discount);
+  return discountId !== null && matchedIds.has(discountId);
+}
+
+function getDiscountReferenceId(
+  discount: string | Stripe.Discount | Stripe.DeletedDiscount | undefined
+): string | null {
+  if (!discount) return null;
+  if (typeof discount === 'string') return discount;
+  return typeof discount.id === 'string' ? discount.id : null;
+}
+
+function assertCurrency(currency: string, expectedCurrency: string): void {
+  if (typeof currency !== 'string' || !ISO_CURRENCY_PATTERN.test(currency)) {
+    throw new Error(`currency must be a lowercase ISO code, received ${JSON.stringify(currency)}`);
+  }
+  if (typeof expectedCurrency !== 'string' || !ISO_CURRENCY_PATTERN.test(expectedCurrency)) {
+    throw new Error(
+      `expected currency must be a lowercase ISO code, received ${JSON.stringify(expectedCurrency)}`
+    );
+  }
+  if (currency !== expectedCurrency) {
+    throw new Error(`line currency ${currency} does not match expected ${expectedCurrency}`);
+  }
+}
+
+function assertNonNegativeSafeInteger(value: number, label: string): void {
+  assertSafeInteger(value, label);
+  if (value < 0) {
+    throw new Error(`${label} must be a non-negative safe integer`);
+  }
+}
+
+function assertSafeInteger(value: number, label: string): void {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value)) {
+    throw new Error(`${label} must be a safe integer`);
+  }
+}
+
+function bigintToSafeInteger(value: bigint, label: string): number {
+  if (value < BigInt(0) && value < -MAX_SAFE_INTEGER) {
+    throw new Error(`${label} exceeds safe integer range`);
+  }
+  if (value > MAX_SAFE_INTEGER) {
+    throw new Error(`${label} exceeds safe integer range`);
+  }
+  return Number(value);
+}
diff --git a/apps/web/src/lib/service-fees/checkout.test.ts b/apps/web/src/lib/service-fees/checkout.test.ts
new file mode 100644
index 0000000000..42627ee4ac
--- /dev/null
+++ b/apps/web/src/lib/service-fees/checkout.test.ts
@@ -0,0 +1,1131 @@
+import { describe, expect, test, jest } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import {
+  ServiceFeeAssessmentConflictError,
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  attachPreparedAutoTopUpInvoiceFee,
+  buildTopUpServiceFeeCheckoutLineItem,
+  checkoutFeeDecisionDisagreesWithSessionCreated,
+  createCheckoutServiceFeeAssessmentKey,
+  createInvoiceServiceFeeAssessmentKey,
+  createTopUpCheckoutSession,
+  type CheckoutSessionLike,
+  isKiloOwnedAutoTopUpInvoice,
+  isWithinServiceFeeActivationBoundaryWindow,
+  mergeServiceFeeCommercialMetadata,
+  prepareAutoTopUpInvoiceFee,
+  prepareTopUpCheckoutFee,
+  resolveFixedUsdPriceUnitAmount,
+  settleTrustedAutoTopUpInvoice,
+  settleTrustedTopUpCharge,
+  SERVICE_FEE_FAILURE_ACTIVATION_BOUNDARY,
+  SERVICE_FEE_FAILURE_APPLICATION,
+  type ServiceFeeCheckoutDependencies,
+} from '@/lib/service-fees/checkout';
+import { buildInheritedInlineServiceFeeTaxInput } from '@/lib/service-fees/tax';
+
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata: { ...existing.metadata, ...(patch.metadata ?? {}) },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return store;
+}
+
+const ACTIVATION = new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000);
+const BEFORE_ACTIVATION = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1) * 1000);
+const NEAR_BEFORE = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 30) * 1000);
+const NEAR_AFTER = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 30) * 1000);
+const FAR_AFTER = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 120) * 1000);
+
+function approvedTax() {
+  return buildInheritedInlineServiceFeeTaxInput();
+}
+
+function deps(
+  store: ServiceFeeAssessmentStore,
+  overrides: Partial<ServiceFeeCheckoutDependencies> = {}
+): ServiceFeeCheckoutDependencies {
+  return {
+    store,
+    now: ACTIVATION,
+    sendAlert: jest.fn(async () => undefined),
+    resolveTaxInput: async () => {
+      throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+    },
+    ...overrides,
+  };
+}
+
+describe('checkout service-fee helpers', () => {
+  test('assessment keys and kilo-owned invoice skip', () => {
+    expect(createCheckoutServiceFeeAssessmentKey('11111111-1111-4111-8111-111111111111')).toBe(
+      'checkout:11111111-1111-4111-8111-111111111111'
+    );
+    expect(createInvoiceServiceFeeAssessmentKey('in_123')).toBe('invoice:in_123');
+    expect(isKiloOwnedAutoTopUpInvoice({ metadata: { type: 'auto-topup' } })).toBe(true);
+    expect(isKiloOwnedAutoTopUpInvoice({ metadata: { type: 'org-auto-topup' } })).toBe(true);
+    expect(isKiloOwnedAutoTopUpInvoice({ metadata: { type: 'kilo-pass' } })).toBe(false);
+  });
+
+  test('activation boundary window and decision disagreement', () => {
+    expect(
+      isWithinServiceFeeActivationBoundaryWindow(SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 60)
+    ).toBe(true);
+    expect(
+      isWithinServiceFeeActivationBoundaryWindow(SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 61)
+    ).toBe(false);
+    expect(
+      checkoutFeeDecisionDisagreesWithSessionCreated({
+        preparedOutcome: 'pending',
+        sessionCreatedUnixSeconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1,
+      })
+    ).toBe(true);
+    expect(
+      checkoutFeeDecisionDisagreesWithSessionCreated({
+        preparedOutcome: 'pre_activation',
+        sessionCreatedUnixSeconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      })
+    ).toBe(true);
+    expect(
+      checkoutFeeDecisionDisagreesWithSessionCreated({
+        preparedOutcome: 'pending',
+        sessionCreatedUnixSeconds: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      })
+    ).toBe(false);
+  });
+
+  test('fixed usd price requires unit_amount', async () => {
+    await expect(
+      resolveFixedUsdPriceUnitAmount({
+        stripe: {
+          prices: {
+            retrieve: async () => ({
+              id: 'price_1',
+              currency: 'usd',
+              unit_amount: 10_000,
+              tax_behavior: 'unspecified',
+            }),
+          },
+        },
+        priceId: 'price_1',
+      })
+    ).resolves.toBe(10_000);
+
+    await expect(
+      resolveFixedUsdPriceUnitAmount({
+        stripe: {
+          prices: {
+            retrieve: async () => ({
+              id: 'price_2',
+              currency: 'eur',
+              unit_amount: 10_000,
+              tax_behavior: 'unspecified',
+            }),
+          },
+        },
+        priceId: 'price_2',
+      })
+    ).rejects.toThrow(/must be usd/);
+
+    await expect(
+      resolveFixedUsdPriceUnitAmount({
+        stripe: {
+          prices: {
+            retrieve: async () => ({
+              id: 'price_3',
+              currency: 'usd',
+              unit_amount: null,
+              tax_behavior: 'unspecified',
+            }),
+          },
+        },
+        priceId: 'price_3',
+      })
+    ).rejects.toThrow(/fixed usd unit_amount/);
+  });
+
+  test('positive fee line carries exact product_data metadata', () => {
+    const line = buildTopUpServiceFeeCheckoutLineItem({
+      assessmentKey: 'checkout:abc',
+      feeMinor: 500,
+      taxInput: approvedTax(),
+    });
+    expect(line.price_data?.product_data?.name).toBe(SERVICE_FEE_DESCRIPTION);
+    expect(line.price_data?.unit_amount).toBe(500);
+    expect(line.price_data?.product_data?.metadata).toEqual({
+      type: SERVICE_FEE_METADATA_TYPE,
+      serviceFeeVersion: SERVICE_FEE_VERSION,
+      serviceFeeAssessmentKey: 'checkout:abc',
+      serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+    });
+    expect(line.price_data?.recurring).toBeUndefined();
+  });
+});
+
+describe('prepareTopUpCheckoutFee', () => {
+  test('tax resolution failure fails open with missed and no line', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store),
+    });
+
+    expect(prepared.checkoutLineItem).toBeUndefined();
+    expect(prepared.outcome).toBe('missed');
+    expect(prepared.failureCode).toBe(SERVICE_FEE_FAILURE_APPLICATION);
+    expect(prepared.expectedFeeMinor).toBe(500);
+    expect(prepared.commercialMetadata).toMatchObject({
+      serviceFeeAssessmentKey: prepared.assessmentKey,
+      serviceFeePrincipalMinor: '10000',
+      serviceFeeFlow: 'personal_top_up',
+    });
+  });
+
+  test('repeated decision failure falls back to a terminal missed assessment', async () => {
+    const store = createMemoryAssessmentStore();
+    const findEffectiveExemption = jest.fn(async () => {
+      throw new Error('exemption lookup unavailable');
+    });
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'organization_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      organizationId: 'org_1',
+      deps: deps(store, { findEffectiveExemption }),
+    });
+
+    expect(prepared).toMatchObject({
+      outcome: 'missed',
+      expectedFeeMinor: 500,
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+    });
+
+    await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: feeLine => ({
+        mode: 'payment',
+        line_items: feeLine ? [{ quantity: 1 }, feeLine] : [{ quantity: 1 }],
+      }),
+      createSession: async () => ({
+        id: 'cs_double_failure',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      }),
+      deps: deps(store),
+    });
+
+    expect(await store.findByAssessmentKey(prepared.assessmentKey)).toMatchObject({
+      outcome: 'missed',
+      expectedFeeMinor: 500,
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+    });
+    expect(findEffectiveExemption).toHaveBeenCalledTimes(2);
+  });
+
+  test('injected approved tax builds a positive fee line', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+
+    expect(prepared.outcome).toBe('pending');
+    expect(prepared.checkoutLineItem?.price_data?.unit_amount).toBe(500);
+    expect(prepared.checkoutLineItem?.price_data?.product_data?.name).toBe(SERVICE_FEE_DESCRIPTION);
+  });
+
+  test('exact organization exemption omits the fee line', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'organization_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      organizationId: 'org_1',
+      deps: deps(store, {
+        resolveTaxInput: async () => approvedTax(),
+        findEffectiveExemption: async () => ({ id: 'hist_1', isExempt: true }),
+      }),
+    });
+
+    expect(prepared.outcome).toBe('exempt');
+    expect(prepared.checkoutLineItem).toBeUndefined();
+    expect(prepared.decision.exemptionId).toBe('hist_1');
+    expect(prepared.expectedFeeMinor).toBe(500);
+  });
+
+  test('pre-activation omits the fee line', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_auto_top_up_setup',
+      principalMinor: 5_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        now: BEFORE_ACTIVATION,
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+    expect(prepared.outcome).toBe('pre_activation');
+    expect(prepared.checkoutLineItem).toBeUndefined();
+    expect(prepared.expectedFeeMinor).toBe(250);
+  });
+});
+
+describe('createTopUpCheckoutSession', () => {
+  test('creates principal-only checkout after fee preparation failure and persists session', async () => {
+    const store = createMemoryAssessmentStore();
+    const createSession = jest.fn(
+      async (_params: Stripe.Checkout.SessionCreateParams): Promise<CheckoutSessionLike> => ({
+        id: 'cs_missed',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/missed',
+        line_items: { data: [], has_more: false },
+      })
+    );
+    const sendAlert = jest.fn(async () => undefined);
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { sendAlert }),
+    });
+
+    const session = await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: feeLine => ({
+        mode: 'payment',
+        line_items: feeLine ? [{ quantity: 1 }, feeLine] : [{ quantity: 1 }],
+      }),
+      createSession,
+      deps: deps(store, { sendAlert }),
+    });
+
+    expect(session.id).toBe('cs_missed');
+    expect(createSession).toHaveBeenCalledTimes(1);
+    const createParams = createSession.mock.calls[0]?.[0];
+    expect(createParams?.line_items).toHaveLength(1);
+    const record = await store.findByAssessmentKey(prepared.assessmentKey);
+    expect(record).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      stripeCheckoutSessionId: 'cs_missed',
+      chargedFeeMinor: 0,
+      eligibilityCreatedAt: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000).toISOString(),
+    });
+    expect(sendAlert).toHaveBeenCalled();
+  });
+
+  test('persists positive fee line identity after session create', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'organization_auto_top_up_setup',
+      principalMinor: 50_000,
+      kiloUserId: 'user_1',
+      organizationId: 'org_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    const feeLine = {
+      id: 'li_fee',
+      price: {
+        id: 'price_fee',
+        product: {
+          id: 'prod_fee',
+          metadata: {
+            type: SERVICE_FEE_METADATA_TYPE,
+            serviceFeeVersion: SERVICE_FEE_VERSION,
+          },
+        },
+      },
+    } as unknown as Stripe.LineItem;
+
+    const session = await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: line => ({
+        mode: 'payment',
+        line_items: [{ quantity: 1 }, ...(line ? [line] : [])],
+      }),
+      createSession: async () => ({
+        id: 'cs_fee',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/fee',
+        line_items: { data: [feeLine], has_more: false },
+      }),
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    expect(session.id).toBe('cs_fee');
+    const record = await store.findByAssessmentKey(prepared.assessmentKey);
+    expect(record).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 0,
+      stripeCheckoutSessionId: 'cs_fee',
+      stripeCheckoutFeeLineItemId: 'li_fee',
+      stripeFeePriceId: 'price_fee',
+    });
+  });
+
+  test('near-boundary disagreement expires and replaces once', async () => {
+    const store = createMemoryAssessmentStore();
+    const expire = jest.fn(async (_sessionId: string) => undefined);
+    const createSession = jest
+      .fn<(params: Stripe.Checkout.SessionCreateParams) => Promise<CheckoutSessionLike>>()
+      .mockResolvedValueOnce({
+        id: 'cs_early',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/early',
+      })
+      .mockResolvedValueOnce({
+        id: 'cs_replaced',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/replaced',
+        line_items: { data: [], has_more: false },
+      });
+
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        now: NEAR_BEFORE,
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+    expect(prepared.outcome).toBe('pre_activation');
+
+    const session = await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: line => ({
+        mode: 'payment',
+        line_items: line ? [{ quantity: 1 }, line] : [{ quantity: 1 }],
+      }),
+      createSession,
+      deps: deps(store, {
+        now: NEAR_BEFORE,
+        resolveTaxInput: async () => approvedTax(),
+        expireCheckoutSession: expire,
+        listCheckoutLineItems: async () => ({
+          data: [
+            {
+              id: 'li_fee_replaced',
+              price: {
+                id: 'price_fee_replaced',
+                product: {
+                  metadata: {
+                    type: SERVICE_FEE_METADATA_TYPE,
+                    serviceFeeVersion: SERVICE_FEE_VERSION,
+                  },
+                },
+              },
+            } as unknown as Stripe.LineItem,
+          ],
+          has_more: false,
+        }),
+      }),
+    });
+
+    expect(expire).toHaveBeenCalledWith('cs_early');
+    expect(createSession).toHaveBeenCalledTimes(2);
+    expect(session.id).toBe('cs_replaced');
+    const secondParams = createSession.mock.calls[1]?.[0];
+    expect(secondParams?.line_items).toHaveLength(2);
+  });
+
+  test('outside the one-minute window does not expire or replace', async () => {
+    const store = createMemoryAssessmentStore();
+    const expire = jest.fn(async () => undefined);
+    const createSession = jest.fn(async () => ({
+      id: 'cs_far',
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 90,
+      url: 'https://checkout.stripe.com/far',
+      line_items: { data: [], has_more: false },
+    }));
+
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        now: FAR_AFTER,
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+
+    const session = await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: line => ({
+        mode: 'payment',
+        line_items: line ? [{ quantity: 1 }, line] : [{ quantity: 1 }],
+      }),
+      createSession,
+      deps: deps(store, {
+        now: FAR_AFTER,
+        expireCheckoutSession: expire,
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+
+    expect(session.id).toBe('cs_far');
+    expect(createSession).toHaveBeenCalledTimes(1);
+    expect(expire).not.toHaveBeenCalled();
+  });
+
+  test('replacement that still disagrees fails open to a principal-only session', async () => {
+    const store = createMemoryAssessmentStore();
+    const createSession = jest
+      .fn<(params: Stripe.Checkout.SessionCreateParams) => Promise<CheckoutSessionLike>>()
+      .mockResolvedValueOnce({
+        id: 'cs_1',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1,
+        url: 'https://checkout.stripe.com/1',
+      })
+      .mockResolvedValueOnce({
+        id: 'cs_2',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/2',
+      })
+      .mockResolvedValueOnce({
+        id: 'cs_3',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/3',
+        line_items: { data: [], has_more: false },
+      });
+
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        now: NEAR_AFTER,
+        resolveTaxInput: async () => approvedTax(),
+      }),
+    });
+
+    const session = await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: line => ({
+        mode: 'payment',
+        line_items: line ? [{ quantity: 1 }, line] : [{ quantity: 1 }],
+      }),
+      createSession,
+      deps: deps(store, {
+        now: NEAR_AFTER,
+        resolveTaxInput: async () => approvedTax(),
+        expireCheckoutSession: async () => undefined,
+      }),
+    });
+
+    expect(session.id).toBe('cs_3');
+    expect(createSession).toHaveBeenCalledTimes(3);
+    const lastParams = createSession.mock.calls[2]?.[0];
+    expect(lastParams?.line_items).toHaveLength(1);
+    const record = await store.findByAssessmentKey(prepared.assessmentKey);
+    expect(record?.outcome).toBe('missed');
+    expect(record?.failureCode).toBe(SERVICE_FEE_FAILURE_ACTIVATION_BOUNDARY);
+  });
+
+  test('fee-domain errors do not wrap the base Stripe create', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    await expect(
+      createTopUpCheckoutSession({
+        prepared,
+        buildSessionParams: () => ({ mode: 'payment', line_items: [] }),
+        createSession: async () => {
+          throw new Error('stripe_create_failed');
+        },
+        deps: deps(store),
+      })
+    ).rejects.toThrow('stripe_create_failed');
+  });
+});
+
+describe('auto-top-up invoice fee attachment', () => {
+  test('tax resolution failure persists missed and does not create a fee item', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert = jest.fn(async () => undefined);
+    const prepared = await prepareAutoTopUpInvoiceFee({
+      flow: 'personal_auto_top_up',
+      invoiceId: 'in_1',
+      principalMinor: 5_000,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+      deps: deps(store, { sendAlert }),
+    });
+
+    expect(prepared.feeInvoiceItem).toBeUndefined();
+    expect(prepared.outcome).toBe('missed');
+    const record = await store.findByAssessmentKey(prepared.assessmentKey);
+    expect(record).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      stripeInvoiceId: 'in_1',
+    });
+    expect(sendAlert).toHaveBeenCalled();
+  });
+
+  test('approved tax attaches one non-discountable fee item before pay', async () => {
+    const store = createMemoryAssessmentStore();
+    const createInvoiceItem = jest.fn(async () => ({ id: 'ii_fee' }));
+    const prepared = await prepareAutoTopUpInvoiceFee({
+      flow: 'organization_auto_top_up',
+      invoiceId: 'in_org',
+      principalMinor: 50_000,
+      organizationId: 'org_1',
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_org',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    expect(prepared.feeInvoiceItem).toMatchObject({
+      invoice: 'in_org',
+      amount: 2_500,
+      discountable: false,
+      description: SERVICE_FEE_DESCRIPTION,
+      metadata: {
+        type: SERVICE_FEE_METADATA_TYPE,
+        serviceFeeAssessmentKey: prepared.assessmentKey,
+      },
+    });
+
+    const charged = await attachPreparedAutoTopUpInvoiceFee({
+      prepared,
+      deps: deps(store, { createInvoiceItem }),
+    });
+    expect(createInvoiceItem).toHaveBeenCalledTimes(1);
+    expect(charged).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 2_500,
+      stripeInvoiceFeeLineItemId: 'ii_fee',
+    });
+  });
+});
+
+describe('trusted principal settlement', () => {
+  test('credits principal from trusted metadata and settles before returning email amounts', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: line => ({
+        mode: 'payment',
+        line_items: line ? [{ quantity: 1 }, line] : [{ quantity: 1 }],
+      }),
+      createSession: async () => ({
+        id: 'cs_settle',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/settle',
+        line_items: {
+          data: [
+            {
+              id: 'li_fee_settle',
+              price: {
+                id: 'price_fee_settle',
+                product: {
+                  metadata: {
+                    type: SERVICE_FEE_METADATA_TYPE,
+                    serviceFeeVersion: SERVICE_FEE_VERSION,
+                  },
+                },
+              },
+            } as unknown as Stripe.LineItem,
+          ],
+          has_more: false,
+        },
+      }),
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    const result = await settleTrustedTopUpCharge({
+      charge: {
+        id: 'ch_1',
+        amount: 10_500,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        customer: 'cus_1',
+      },
+      paymentIntent: {
+        id: 'pi_1',
+        metadata: {
+          serviceFeeAssessmentKey: prepared.assessmentKey,
+          serviceFeePrincipalMinor: '10000',
+          type: 'stripe-checkout-topup',
+        },
+        customer: 'cus_1',
+      },
+      kiloUserId: 'user_1',
+      deps: deps(store),
+    });
+
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 10_000,
+      chargedFeeMinor: 500,
+      grossPaidMinor: 10_500,
+    });
+    const record = await store.findByAssessmentKey(prepared.assessmentKey);
+    expect(record?.settledAt).toBeTruthy();
+    expect(record?.settledProductMinor).toBe(10_000);
+    expect(record?.stripeChargeId).toBe('ch_1');
+  });
+
+  test('duplicate settlement is idempotent', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: () => ({ mode: 'payment', line_items: [] }),
+      createSession: async () => ({
+        id: 'cs_dup',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/dup',
+        line_items: {
+          data: [
+            {
+              id: 'li_dup',
+              price: {
+                id: 'price_dup',
+                product: {
+                  metadata: {
+                    type: SERVICE_FEE_METADATA_TYPE,
+                    serviceFeeVersion: SERVICE_FEE_VERSION,
+                  },
+                },
+              },
+            } as unknown as Stripe.LineItem,
+          ],
+          has_more: false,
+        },
+      }),
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    const charge = {
+      id: 'ch_dup',
+      amount: 10_500,
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      customer: 'cus_1',
+    };
+    const paymentIntent = {
+      id: 'pi_dup',
+      metadata: {
+        serviceFeeAssessmentKey: prepared.assessmentKey,
+        serviceFeePrincipalMinor: '10000',
+      },
+      customer: 'cus_1',
+    };
+    const first = await settleTrustedTopUpCharge({
+      charge,
+      paymentIntent,
+      kiloUserId: 'user_1',
+      deps: deps(store),
+    });
+    const second = await settleTrustedTopUpCharge({
+      charge,
+      paymentIntent,
+      kiloUserId: 'user_1',
+      deps: deps(store),
+    });
+    expect(second.principalMinor).toBe(first.principalMinor);
+    expect(second.assessment?.settledAt).toBe(first.assessment?.settledAt);
+  });
+
+  test('legacy pre-activation without fee metadata uses charge.amount', async () => {
+    const store = createMemoryAssessmentStore();
+    const result = await settleTrustedTopUpCharge({
+      charge: {
+        id: 'ch_legacy',
+        amount: 2300,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 10,
+        customer: 'cus_1',
+      },
+      paymentIntent: {
+        id: 'pi_legacy',
+        metadata: { type: 'stripe-checkout-topup' },
+        customer: 'cus_1',
+      },
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        retrieveCheckoutSessionCreated: async () => SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 5,
+      }),
+    });
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 2300,
+      chargedFeeMinor: 0,
+    });
+  });
+
+  test('post-activation metadata-free events do not grant gross charge.amount', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert: NonNullable<ServiceFeeCheckoutDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const result = await settleTrustedTopUpCharge({
+      charge: {
+        id: 'ch_bad',
+        amount: 10_500,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        customer: 'cus_1',
+      },
+      paymentIntent: {
+        id: 'pi_bad',
+        metadata: { type: 'stripe-checkout-topup' },
+        customer: 'cus_1',
+      },
+      kiloUserId: 'user_1',
+      deps: deps(store, {
+        sendAlert,
+        retrieveCheckoutSessionCreated: async () => SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      }),
+    });
+    expect(result.shouldCredit).toBe(false);
+    expect(result.principalMinor).toBe(0);
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: 'principal_untrusted' })
+    );
+  });
+
+  test('auto invoice settlement uses principal metadata not amount_paid', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareAutoTopUpInvoiceFee({
+      flow: 'personal_auto_top_up',
+      invoiceId: 'in_paid',
+      principalMinor: 5_000,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    await attachPreparedAutoTopUpInvoiceFee({
+      prepared,
+      deps: deps(store, { createInvoiceItem: async () => ({ id: 'ii_paid' }) }),
+    });
+
+    const result = await settleTrustedAutoTopUpInvoice({
+      invoice: {
+        id: 'in_paid',
+        amount_paid: 5_250,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        metadata: {
+          type: 'auto-topup',
+          serviceFeeAssessmentKey: prepared.assessmentKey,
+          serviceFeePrincipalMinor: '5000',
+        },
+        status_transitions: {
+          finalized_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          marked_uncollectible_at: null,
+          paid_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          voided_at: null,
+        },
+        customer: 'cus_1',
+      },
+      chargeId: 'ch_paid',
+      kiloUserId: 'user_1',
+      flow: 'personal_auto_top_up',
+      deps: deps(store),
+    });
+
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 5_000,
+      chargedFeeMinor: 250,
+      grossPaidMinor: 5_250,
+    });
+  });
+
+  test('pending settlement without a trusted fee line marks missed and still credits principal', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert: NonNullable<ServiceFeeCheckoutDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    await upsertServiceFeeAssessment({
+      store,
+      decision: prepared.decision,
+      stripeIds: { stripeCustomerId: 'cus_1' },
+    });
+
+    const result = await settleTrustedTopUpCharge({
+      charge: {
+        id: 'ch_pending_missed',
+        amount: 10_500,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        customer: 'cus_1',
+      },
+      paymentIntent: {
+        id: 'pi_pending_missed',
+        metadata: {
+          serviceFeeAssessmentKey: prepared.assessmentKey,
+          serviceFeePrincipalMinor: '10000',
+        },
+        customer: 'cus_1',
+      },
+      kiloUserId: 'user_1',
+      deps: deps(store, { sendAlert }),
+    });
+
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 10_000,
+      chargedFeeMinor: 0,
+      grossPaidMinor: 10_500,
+    });
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      chargedFeeMinor: 0,
+      failureCode: 'fee_application_failed',
+      settledAt: expect.any(String),
+      settledProductMinor: 10_000,
+    });
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: 'fee_application_failed' })
+    );
+  });
+
+  test('pending settlement with a trusted fee line identity books the observed fee', async () => {
+    const store = createMemoryAssessmentStore();
+    const decision = await prepareServiceFeeAssessmentDecision({
+      assessmentKey: 'checkout:trusted-pending',
+      flow: 'personal_top_up',
+      currency: 'usd',
+      eligibilityCreatedAt: ACTIVATION,
+      eligibleSubtotalMinor: 10_000,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+    });
+    await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: 'cus_1',
+        stripeCheckoutFeeLineItemId: 'li_fee_trusted',
+        stripeFeePriceId: 'price_fee_trusted',
+      },
+    });
+
+    const result = await settleTrustedTopUpCharge({
+      charge: {
+        id: 'ch_pending_trusted',
+        amount: 10_500,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        customer: 'cus_1',
+      },
+      paymentIntent: {
+        id: 'pi_pending_trusted',
+        metadata: {
+          serviceFeeAssessmentKey: 'checkout:trusted-pending',
+          serviceFeePrincipalMinor: '10000',
+        },
+        customer: 'cus_1',
+      },
+      kiloUserId: 'user_1',
+      deps: deps(store),
+    });
+
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 10_000,
+      chargedFeeMinor: 500,
+      grossPaidMinor: 10_500,
+    });
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 500,
+      settledProductMinor: 10_000,
+    });
+  });
+
+  test('pending auto-top-up settlement does not book the expected fee', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareAutoTopUpInvoiceFee({
+      flow: 'personal_auto_top_up',
+      invoiceId: 'in_pending',
+      principalMinor: 5_000,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    expect(prepared.outcome).toBe('pending');
+
+    const result = await settleTrustedAutoTopUpInvoice({
+      invoice: {
+        id: 'in_pending',
+        amount_paid: 5_250,
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        metadata: {
+          type: 'auto-topup',
+          serviceFeeAssessmentKey: prepared.assessmentKey,
+          serviceFeePrincipalMinor: '5000',
+        },
+        status_transitions: {
+          finalized_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          marked_uncollectible_at: null,
+          paid_at: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          voided_at: null,
+        },
+        customer: 'cus_1',
+      },
+      chargeId: 'ch_pending_auto',
+      kiloUserId: 'user_1',
+      flow: 'personal_auto_top_up',
+      deps: deps(store),
+    });
+
+    expect(result).toMatchObject({
+      shouldCredit: true,
+      principalMinor: 5_000,
+      chargedFeeMinor: 0,
+      grossPaidMinor: 5_250,
+    });
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: 'fee_application_failed',
+      chargedFeeMinor: 0,
+    });
+  });
+
+  test('conflicting principal throws rather than granting the wrong credits', async () => {
+    const store = createMemoryAssessmentStore();
+    const prepared = await prepareTopUpCheckoutFee({
+      flow: 'personal_top_up',
+      principalMinor: 10_000,
+      kiloUserId: 'user_1',
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+    await createTopUpCheckoutSession({
+      prepared,
+      buildSessionParams: () => ({ mode: 'payment', line_items: [] }),
+      createSession: async () => ({
+        id: 'cs_conflict',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+        url: 'https://checkout.stripe.com/conflict',
+        line_items: {
+          data: [
+            {
+              id: 'li_conflict',
+              price: {
+                id: 'price_conflict',
+                product: {
+                  metadata: {
+                    type: SERVICE_FEE_METADATA_TYPE,
+                    serviceFeeVersion: SERVICE_FEE_VERSION,
+                  },
+                },
+              },
+            } as unknown as Stripe.LineItem,
+          ],
+          has_more: false,
+        },
+      }),
+      deps: deps(store, { resolveTaxInput: async () => approvedTax() }),
+    });
+
+    await expect(
+      settleTrustedTopUpCharge({
+        charge: {
+          id: 'ch_c',
+          amount: 10_500,
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          customer: 'cus_1',
+        },
+        paymentIntent: {
+          id: 'pi_c',
+          metadata: {
+            serviceFeeAssessmentKey: prepared.assessmentKey,
+            serviceFeePrincipalMinor: '9999',
+          },
+          customer: 'cus_1',
+        },
+        kiloUserId: 'user_1',
+        deps: deps(store),
+      })
+    ).rejects.toThrow(/principal mismatch/);
+    expect(ServiceFeeAssessmentConflictError).toBeDefined();
+  });
+});
+
+describe('mergeServiceFeeCommercialMetadata', () => {
+  test('preserves existing metadata', () => {
+    expect(
+      mergeServiceFeeCommercialMetadata(
+        { type: 'stripe-checkout-topup', kiloUserId: 'user_1' },
+        {
+          serviceFeeAssessmentKey: 'checkout:1',
+          serviceFeeVersion: SERVICE_FEE_VERSION,
+          serviceFeeFlow: 'personal_top_up',
+          serviceFeePrincipalMinor: '10000',
+        }
+      )
+    ).toEqual({
+      type: 'stripe-checkout-topup',
+      kiloUserId: 'user_1',
+      serviceFeeAssessmentKey: 'checkout:1',
+      serviceFeeVersion: SERVICE_FEE_VERSION,
+      serviceFeeFlow: 'personal_top_up',
+      serviceFeePrincipalMinor: '10000',
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/checkout.ts b/apps/web/src/lib/service-fees/checkout.ts
new file mode 100644
index 0000000000..f40d22cf0a
--- /dev/null
+++ b/apps/web/src/lib/service-fees/checkout.ts
@@ -0,0 +1,1384 @@
+import 'server-only';
+
+import { randomUUID } from 'node:crypto';
+
+import type Stripe from 'stripe';
+
+import {
+  sendMissedServiceFeeAlert,
+  type MissedServiceFeeAlertInput,
+} from '@/lib/service-fees/alerts';
+import {
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  prepareServiceFeeAssessmentDecision,
+  settleServiceFeeAssessment,
+  toServiceFeeTimestamp,
+  upsertServiceFeeAssessment,
+  type EffectiveExemptionLookup,
+  type PreparedServiceFeeDecision,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+  type ServiceFeeStripeIds,
+} from '@/lib/service-fees/assessments';
+import { calculateServiceFeeMinor } from '@/lib/service-fees/calculation';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  buildServiceFeeCommercialMetadata,
+  buildServiceFeeLineMetadata,
+  isServiceFeeCheckoutLine,
+} from '@/lib/service-fees/stripe-lines';
+import {
+  resolveServiceFeeTaxInput,
+  type ServiceFeeTaxInput,
+  type ServiceFeeTaxPrincipal,
+  type StripePriceTaxReader,
+} from '@/lib/service-fees/tax';
+import {
+  SERVICE_FEE_SUPPORTED_CURRENCY,
+  type ServiceFeeCommercialMetadata,
+  type ServiceFeeFlow,
+  type ServiceFeeLineMetadata,
+  type ServiceFeeOutcome,
+} from '@/lib/service-fees/types';
+
+export const SERVICE_FEE_ACTIVATION_BOUNDARY_WINDOW_SECONDS = 60;
+export const KILO_OWNED_AUTO_TOP_UP_INVOICE_TYPES = ['auto-topup', 'org-auto-topup'] as const;
+
+export const SERVICE_FEE_FAILURE_APPLICATION = 'fee_application_failed' as const;
+export const SERVICE_FEE_FAILURE_ACTIVATION_BOUNDARY =
+  'activation_boundary_replace_failed' as const;
+export const SERVICE_FEE_FAILURE_MISSING_ASSESSMENT = 'missing_assessment' as const;
+export const SERVICE_FEE_FAILURE_PRINCIPAL_UNTRUSTED = 'principal_untrusted' as const;
+
+export type KiloOwnedAutoTopUpInvoiceType = (typeof KILO_OWNED_AUTO_TOP_UP_INVOICE_TYPES)[number];
+
+export type CheckoutServiceFeeFlow =
+  | 'personal_top_up'
+  | 'organization_top_up'
+  | 'personal_auto_top_up_setup'
+  | 'organization_auto_top_up_setup'
+  | 'personal_kilo_pass';
+
+export type AutoTopUpInvoiceFlow = 'personal_auto_top_up' | 'organization_auto_top_up';
+
+export type CheckoutSessionLike = {
+  id: string;
+  created: number;
+  url?: string | null;
+  line_items?: Pick<Stripe.ApiList<Stripe.LineItem>, 'data' | 'has_more'> | null;
+};
+
+export type CheckoutSessionCreateFn = (
+  params: Stripe.Checkout.SessionCreateParams
+) => Promise<CheckoutSessionLike>;
+
+export type CheckoutLineItemListFn = (
+  sessionId: string,
+  params?: Stripe.Checkout.SessionListLineItemsParams
+) => Promise<Pick<Stripe.ApiList<Stripe.LineItem>, 'data' | 'has_more'>>;
+
+export type InvoiceItemCreateFn = (
+  params: Stripe.InvoiceItemCreateParams
+) => Promise<Pick<Stripe.InvoiceItem, 'id'>>;
+
+export type TopUpPriceReader = {
+  prices: {
+    retrieve(
+      id: string,
+      params?: Stripe.PriceRetrieveParams
+    ): Promise<Pick<Stripe.Price, 'id' | 'currency' | 'unit_amount' | 'tax_behavior'>>;
+  };
+};
+
+export type ServiceFeeCheckoutDependencies = {
+  store: ServiceFeeAssessmentStore;
+  now?: Date;
+  createAssessmentKey?: () => string;
+  findEffectiveExemption?: EffectiveExemptionLookup;
+  resolveTaxInput?: (params: {
+    principal: ServiceFeeTaxPrincipal;
+    stripe?: StripePriceTaxReader;
+  }) => Promise<ServiceFeeTaxInput>;
+  sendAlert?: (input: MissedServiceFeeAlertInput) => Promise<void>;
+  stripe?: StripePriceTaxReader & Partial<TopUpPriceReader>;
+  listCheckoutLineItems?: CheckoutLineItemListFn;
+  expireCheckoutSession?: (sessionId: string) => Promise<unknown>;
+  createInvoiceItem?: InvoiceItemCreateFn;
+  retrieveCheckoutSessionCreated?: (paymentIntentId: string) => Promise<number | null>;
+};
+
+export type PreparedTopUpCheckoutFee = {
+  assessmentKey: string;
+  flow: CheckoutServiceFeeFlow;
+  principalMinor: number;
+  decision: PreparedServiceFeeDecision;
+  outcome: ServiceFeeOutcome;
+  expectedFeeMinor: number;
+  checkoutLineItem?: Stripe.Checkout.SessionCreateParams.LineItem;
+  commercialMetadata: ServiceFeeCommercialMetadata;
+  failureCode?: string;
+};
+
+export type PreparedAutoTopUpInvoiceFee = {
+  assessmentKey: string;
+  flow: AutoTopUpInvoiceFlow;
+  principalMinor: number;
+  invoiceId: string;
+  decision: PreparedServiceFeeDecision;
+  outcome: ServiceFeeOutcome;
+  expectedFeeMinor: number;
+  feeInvoiceItem?: Stripe.InvoiceItemCreateParams;
+  commercialMetadata: ServiceFeeCommercialMetadata;
+  failureCode?: string;
+};
+
+export type TopUpSettlementResult = {
+  principalMinor: number;
+  chargedFeeMinor: number;
+  grossPaidMinor: number;
+  assessment: ServiceFeeAssessmentRecord | null;
+  shouldCredit: boolean;
+};
+
+type FeeLineIdentity = {
+  stripeCheckoutFeeLineItemId?: string;
+  stripeFeePriceId?: string;
+};
+
+export function createCheckoutServiceFeeAssessmentKey(id: string = randomUUID()): string {
+  return `checkout:${id}`;
+}
+
+export function createInvoiceServiceFeeAssessmentKey(invoiceId: string): string {
+  return `invoice:${invoiceId}`;
+}
+
+export function isKiloOwnedAutoTopUpInvoice(
+  invoice: Pick<Stripe.Invoice, 'metadata'> | { metadata?: Stripe.Metadata | null }
+): boolean {
+  const type = invoice.metadata?.type;
+  return type === 'auto-topup' || type === 'org-auto-topup';
+}
+
+export function isWithinServiceFeeActivationBoundaryWindow(unixSeconds: number): boolean {
+  return (
+    Math.abs(unixSeconds - SERVICE_FEE_ACTIVATION_UNIX_SECONDS) <=
+    SERVICE_FEE_ACTIVATION_BOUNDARY_WINDOW_SECONDS
+  );
+}
+
+export function checkoutFeeDecisionDisagreesWithSessionCreated(params: {
+  preparedOutcome: ServiceFeeOutcome;
+  sessionCreatedUnixSeconds: number;
+}): boolean {
+  const sessionEligible = params.sessionCreatedUnixSeconds >= SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+  if (params.preparedOutcome === 'pre_activation') {
+    return sessionEligible;
+  }
+  if (params.preparedOutcome === 'pending') {
+    return !sessionEligible;
+  }
+  return false;
+}
+
+export async function resolveFixedUsdPriceUnitAmount(params: {
+  stripe: TopUpPriceReader;
+  priceId: string;
+}): Promise<number> {
+  const price = await params.stripe.prices.retrieve(params.priceId);
+  if (price.currency !== SERVICE_FEE_SUPPORTED_CURRENCY) {
+    throw new Error(`top-up price ${params.priceId} must be usd, received ${price.currency}`);
+  }
+  if (typeof price.unit_amount !== 'number' || !Number.isSafeInteger(price.unit_amount)) {
+    throw new Error(`top-up price ${params.priceId} must have a fixed usd unit_amount`);
+  }
+  if (price.unit_amount <= 0) {
+    throw new Error(`top-up price ${params.priceId} unit_amount must be positive`);
+  }
+  return price.unit_amount;
+}
+
+export function buildTopUpServiceFeeCheckoutLineItem(params: {
+  assessmentKey: string;
+  feeMinor: number;
+  taxInput: ServiceFeeTaxInput;
+}): Stripe.Checkout.SessionCreateParams.LineItem {
+  if (params.feeMinor <= 0) {
+    throw new Error('positive service fee is required to build a checkout fee line');
+  }
+
+  const metadata = buildServiceFeeLineMetadata(params.assessmentKey);
+  return {
+    quantity: 1,
+    price_data: {
+      currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+      unit_amount: params.feeMinor,
+      product_data: {
+        name: SERVICE_FEE_DESCRIPTION,
+        metadata,
+      },
+      ...(params.taxInput.taxBehavior ? { tax_behavior: params.taxInput.taxBehavior } : {}),
+    },
+  };
+}
+
+export function buildAutoTopUpServiceFeeInvoiceItem(params: {
+  assessmentKey: string;
+  invoiceId: string;
+  customerId: string;
+  feeMinor: number;
+  taxInput: ServiceFeeTaxInput;
+}): Stripe.InvoiceItemCreateParams {
+  if (params.feeMinor <= 0) {
+    throw new Error('positive service fee is required to build an invoice fee item');
+  }
+
+  return {
+    customer: params.customerId,
+    invoice: params.invoiceId,
+    amount: params.feeMinor,
+    currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+    description: SERVICE_FEE_DESCRIPTION,
+    discountable: false,
+    metadata: buildServiceFeeLineMetadata(params.assessmentKey),
+    ...(params.taxInput.taxBehavior ? { tax_behavior: params.taxInput.taxBehavior } : {}),
+  };
+}
+
+export function mergeServiceFeeCommercialMetadata(
+  existing: Stripe.MetadataParam | null | undefined,
+  commercial: ServiceFeeCommercialMetadata
+): Stripe.MetadataParam {
+  return {
+    ...(existing ?? {}),
+    ...commercial,
+  };
+}
+
+export async function prepareTopUpCheckoutFee(params: {
+  flow: CheckoutServiceFeeFlow;
+  principalMinor: number;
+  kiloUserId: string;
+  organizationId?: string;
+  stripeCustomerId?: string;
+  taxPrincipal?: ServiceFeeTaxPrincipal;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<PreparedTopUpCheckoutFee> {
+  const now = params.deps.now ?? new Date();
+  const assessmentKey = (
+    params.deps.createAssessmentKey ?? createCheckoutServiceFeeAssessmentKey
+  )();
+  const commercialMetadata = buildServiceFeeCommercialMetadata({
+    assessmentKey,
+    flow: params.flow,
+    principalMinor: params.principalMinor,
+    organizationId: params.organizationId,
+  });
+
+  try {
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey,
+        flow: params.flow,
+        currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt: now,
+        eligibleSubtotalMinor: params.principalMinor,
+        kiloUserId: params.kiloUserId,
+        organizationId: params.organizationId,
+        stripeCustomerId: params.stripeCustomerId,
+      },
+      { findEffectiveExemption: params.deps.findEffectiveExemption }
+    );
+
+    if (decision.outcome !== 'pending') {
+      return {
+        assessmentKey,
+        flow: params.flow,
+        principalMinor: params.principalMinor,
+        decision,
+        outcome: decision.outcome,
+        expectedFeeMinor: decision.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const resolveTax = params.deps.resolveTaxInput ?? resolveServiceFeeTaxInput;
+    const taxInput = await resolveTax({
+      principal: params.taxPrincipal ?? { kind: 'inline' },
+      stripe: params.deps.stripe,
+    });
+
+    return {
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      decision,
+      outcome: 'pending',
+      expectedFeeMinor: decision.expectedFeeMinor,
+      checkoutLineItem: buildTopUpServiceFeeCheckoutLineItem({
+        assessmentKey,
+        feeMinor: decision.expectedFeeMinor,
+        taxInput,
+      }),
+      commercialMetadata,
+    };
+  } catch (error) {
+    const failureCode = failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION);
+    const fallbackDecision = await safePrepareDecision({
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeCustomerId: params.stripeCustomerId,
+      now,
+      findEffectiveExemption: params.deps.findEffectiveExemption,
+    });
+    return missedCheckoutPreparation({
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      decision: fallbackDecision,
+      commercialMetadata,
+      failureCode,
+    });
+  }
+}
+
+export async function createTopUpCheckoutSession(params: {
+  prepared: PreparedTopUpCheckoutFee;
+  buildSessionParams: (
+    feeLineItem?: Stripe.Checkout.SessionCreateParams.LineItem
+  ) => Stripe.Checkout.SessionCreateParams;
+  createSession: CheckoutSessionCreateFn;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<CheckoutSessionLike> {
+  const firstParams = params.buildSessionParams(params.prepared.checkoutLineItem);
+  const firstSession = await params.createSession(firstParams);
+  return finalizeTopUpCheckoutSession({
+    prepared: params.prepared,
+    session: firstSession,
+    attemptUnixSeconds: Math.floor((params.deps.now ?? new Date()).getTime() / 1000),
+    buildSessionParams: params.buildSessionParams,
+    createSession: params.createSession,
+    deps: params.deps,
+  });
+}
+
+export async function persistTopUpCheckoutSession(params: {
+  prepared: PreparedTopUpCheckoutFee;
+  session: CheckoutSessionLike;
+  deps: ServiceFeeCheckoutDependencies;
+  replacementFailureCode?: string;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const identity = await resolveCheckoutFeeLineIdentity(params.session, params.deps);
+  return persistPreparedAssessment({
+    prepared: params.prepared,
+    stripeIds: {
+      stripeCustomerId: params.prepared.decision.stripeCustomerId,
+      stripeCheckoutSessionId: params.session.id,
+      ...identity,
+    },
+    eligibilityCreatedAt: new Date(params.session.created * 1000),
+    deps: params.deps,
+    replacementFailureCode: params.replacementFailureCode,
+  });
+}
+
+export async function prepareAutoTopUpInvoiceFee(params: {
+  flow: AutoTopUpInvoiceFlow;
+  invoiceId: string;
+  principalMinor: number;
+  kiloUserId?: string;
+  organizationId?: string;
+  stripeCustomerId: string;
+  invoiceCreated?: Date;
+  taxPrincipal?: ServiceFeeTaxPrincipal;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<PreparedAutoTopUpInvoiceFee> {
+  const now = params.invoiceCreated ?? params.deps.now ?? new Date();
+  const assessmentKey = createInvoiceServiceFeeAssessmentKey(params.invoiceId);
+  const commercialMetadata = buildServiceFeeCommercialMetadata({
+    assessmentKey,
+    flow: params.flow,
+    principalMinor: params.principalMinor,
+    organizationId: params.organizationId,
+  });
+
+  try {
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey,
+        flow: params.flow,
+        currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt: now,
+        eligibleSubtotalMinor: params.principalMinor,
+        kiloUserId: params.kiloUserId,
+        organizationId: params.organizationId,
+        stripeCustomerId: params.stripeCustomerId,
+      },
+      { findEffectiveExemption: params.deps.findEffectiveExemption }
+    );
+
+    if (decision.outcome !== 'pending') {
+      await upsertServiceFeeAssessment({
+        store: params.deps.store,
+        decision,
+        stripeIds: {
+          stripeCustomerId: params.stripeCustomerId,
+          stripeInvoiceId: params.invoiceId,
+        },
+        now,
+      });
+      return {
+        assessmentKey,
+        flow: params.flow,
+        principalMinor: params.principalMinor,
+        invoiceId: params.invoiceId,
+        decision,
+        outcome: decision.outcome,
+        expectedFeeMinor: decision.expectedFeeMinor,
+        commercialMetadata,
+      };
+    }
+
+    const resolveTax = params.deps.resolveTaxInput ?? resolveServiceFeeTaxInput;
+    const taxInput = await resolveTax({
+      principal: params.taxPrincipal ?? { kind: 'inline' },
+      stripe: params.deps.stripe,
+    });
+
+    await upsertServiceFeeAssessment({
+      store: params.deps.store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: params.stripeCustomerId,
+        stripeInvoiceId: params.invoiceId,
+      },
+      now,
+    });
+
+    return {
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      invoiceId: params.invoiceId,
+      decision,
+      outcome: 'pending',
+      expectedFeeMinor: decision.expectedFeeMinor,
+      feeInvoiceItem: buildAutoTopUpServiceFeeInvoiceItem({
+        assessmentKey,
+        invoiceId: params.invoiceId,
+        customerId: params.stripeCustomerId,
+        feeMinor: decision.expectedFeeMinor,
+        taxInput,
+      }),
+      commercialMetadata,
+    };
+  } catch (error) {
+    const failureCode = failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION);
+    const fallbackDecision = await safePrepareDecision({
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeCustomerId: params.stripeCustomerId,
+      now,
+      findEffectiveExemption: params.deps.findEffectiveExemption,
+    });
+    return persistMissedInvoicePreparation({
+      assessmentKey,
+      flow: params.flow,
+      principalMinor: params.principalMinor,
+      invoiceId: params.invoiceId,
+      decision: fallbackDecision,
+      commercialMetadata,
+      stripeCustomerId: params.stripeCustomerId,
+      failureCode,
+      deps: params.deps,
+      now,
+    });
+  }
+}
+
+export async function attachPreparedAutoTopUpInvoiceFee(params: {
+  prepared: PreparedAutoTopUpInvoiceFee;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const now = params.deps.now ?? new Date();
+  if (!params.prepared.feeInvoiceItem || params.prepared.outcome !== 'pending') {
+    return params.deps.store.findByAssessmentKey(params.prepared.assessmentKey);
+  }
+  if (!params.deps.createInvoiceItem) {
+    return persistMissedAfterPrepare({
+      prepared: toCheckoutShaped(params.prepared),
+      stripeIds: {
+        stripeCustomerId: params.prepared.decision.stripeCustomerId,
+        stripeInvoiceId: params.prepared.invoiceId,
+      },
+      deps: params.deps,
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+    });
+  }
+
+  try {
+    const item = await params.deps.createInvoiceItem(params.prepared.feeInvoiceItem);
+    return markServiceFeeAssessmentCharged({
+      store: params.deps.store,
+      assessmentKey: params.prepared.assessmentKey,
+      chargedFeeMinor: params.prepared.expectedFeeMinor,
+      stripeIds: {
+        stripeCustomerId: params.prepared.decision.stripeCustomerId,
+        stripeInvoiceId: params.prepared.invoiceId,
+        stripeInvoiceFeeLineItemId: item.id,
+      },
+      now,
+    });
+  } catch (error) {
+    return persistMissedAfterPrepare({
+      prepared: toCheckoutShaped(params.prepared),
+      stripeIds: {
+        stripeCustomerId: params.prepared.decision.stripeCustomerId,
+        stripeInvoiceId: params.prepared.invoiceId,
+      },
+      deps: params.deps,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+    });
+  }
+}
+
+export async function settleTrustedTopUpCharge(params: {
+  charge: Pick<Stripe.Charge, 'id' | 'amount' | 'created' | 'customer'>;
+  paymentIntent: Pick<Stripe.PaymentIntent, 'id' | 'metadata' | 'customer'>;
+  kiloUserId?: string;
+  organizationId?: string;
+  flowHint?: ServiceFeeFlow;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<TopUpSettlementResult> {
+  const now = params.deps.now ?? new Date();
+  const metadata = params.paymentIntent.metadata ?? {};
+  const assessmentKey = nonempty(metadata.serviceFeeAssessmentKey);
+  const metadataPrincipal = parseMinor(metadata.serviceFeePrincipalMinor);
+  const amountCentsPrincipal = parseMinor(metadata.amountCents);
+  const grossPaidMinor = params.charge.amount;
+
+  if (assessmentKey) {
+    const assessment = await params.deps.store.findByAssessmentKey(assessmentKey);
+    if (!assessment) {
+      await alertMissed({
+        assessmentKey,
+        flow: params.flowHint ?? inferFlowFromMetadata(metadata, params.organizationId),
+        kiloUserId: params.kiloUserId,
+        organizationId: params.organizationId,
+        stripePaymentIntentId: params.paymentIntent.id,
+        stripeChargeId: params.charge.id,
+        eligibleSubtotalMinor: metadataPrincipal ?? 0,
+        expectedFeeMinor: 0,
+        failureCode: SERVICE_FEE_FAILURE_MISSING_ASSESSMENT,
+        deps: params.deps,
+      });
+      const principalMinor = metadataPrincipal ?? amountCentsPrincipal;
+      return {
+        principalMinor: principalMinor ?? 0,
+        chargedFeeMinor: 0,
+        grossPaidMinor,
+        assessment: null,
+        shouldCredit: principalMinor != null,
+      };
+    }
+
+    assertAssessmentMatchesCharge({
+      assessment,
+      paymentIntentId: params.paymentIntent.id,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      principalMinor: metadataPrincipal ?? assessment.eligibleSubtotalMinor,
+    });
+
+    const principalMinor = metadataPrincipal ?? assessment.eligibleSubtotalMinor;
+    const settled = await settleLoadedAssessment({
+      assessment,
+      principalMinor,
+      chargedFeeMinor: observedTopUpChargedFeeMinor(assessment),
+      grossPaidMinor,
+      stripeIds: {
+        stripePaymentIntentId: params.paymentIntent.id,
+        stripeChargeId: params.charge.id,
+        stripeCustomerId: customerId(params.charge.customer) ?? assessment.stripeCustomerId,
+      },
+      settledAt: unixToDate(params.charge.created) ?? now,
+      deps: params.deps,
+    });
+
+    return {
+      principalMinor,
+      chargedFeeMinor: settled.chargedFeeMinor,
+      grossPaidMinor: settled.grossPaidMinor,
+      assessment: settled,
+      shouldCredit: true,
+    };
+  }
+
+  let sessionCreated: number | null = null;
+  if (params.deps.retrieveCheckoutSessionCreated) {
+    try {
+      sessionCreated = await params.deps.retrieveCheckoutSessionCreated(params.paymentIntent.id);
+    } catch {
+      sessionCreated = null;
+    }
+  }
+  const createdUnix = sessionCreated ?? null;
+  const isLegacyPreActivation =
+    createdUnix != null && createdUnix < SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+
+  if (isLegacyPreActivation) {
+    return {
+      principalMinor: params.charge.amount,
+      chargedFeeMinor: 0,
+      grossPaidMinor,
+      assessment: null,
+      shouldCredit: true,
+    };
+  }
+
+  const trustedPrincipal = metadataPrincipal ?? amountCentsPrincipal;
+  if (trustedPrincipal != null) {
+    if (createdUnix == null || createdUnix >= SERVICE_FEE_ACTIVATION_UNIX_SECONDS) {
+      await alertMissed({
+        assessmentKey: `missing:${params.paymentIntent.id}`,
+        flow: params.flowHint ?? inferFlowFromMetadata(metadata, params.organizationId),
+        kiloUserId: params.kiloUserId,
+        organizationId: params.organizationId,
+        stripePaymentIntentId: params.paymentIntent.id,
+        stripeChargeId: params.charge.id,
+        eligibleSubtotalMinor: trustedPrincipal,
+        expectedFeeMinor: 0,
+        failureCode: SERVICE_FEE_FAILURE_MISSING_ASSESSMENT,
+        deps: params.deps,
+      });
+    }
+    return {
+      principalMinor: trustedPrincipal,
+      chargedFeeMinor: 0,
+      grossPaidMinor,
+      assessment: null,
+      shouldCredit: true,
+    };
+  }
+
+  await alertMissed({
+    assessmentKey: `untrusted:${params.paymentIntent.id}`,
+    flow: params.flowHint ?? inferFlowFromMetadata(metadata, params.organizationId),
+    kiloUserId: params.kiloUserId,
+    organizationId: params.organizationId,
+    stripePaymentIntentId: params.paymentIntent.id,
+    stripeChargeId: params.charge.id,
+    eligibleSubtotalMinor: params.charge.amount,
+    expectedFeeMinor: 0,
+    failureCode: SERVICE_FEE_FAILURE_PRINCIPAL_UNTRUSTED,
+    deps: params.deps,
+  });
+
+  return {
+    principalMinor: 0,
+    chargedFeeMinor: 0,
+    grossPaidMinor,
+    assessment: null,
+    shouldCredit: false,
+  };
+}
+
+export async function settleTrustedAutoTopUpInvoice(params: {
+  invoice: Pick<
+    Stripe.Invoice,
+    'id' | 'amount_paid' | 'created' | 'metadata' | 'status_transitions' | 'customer'
+  >;
+  chargeId: string;
+  kiloUserId?: string;
+  organizationId?: string;
+  flow: AutoTopUpInvoiceFlow;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<TopUpSettlementResult> {
+  const now = params.deps.now ?? new Date();
+  const metadata = params.invoice.metadata ?? {};
+  const assessmentKey =
+    nonempty(metadata.serviceFeeAssessmentKey) ??
+    (params.invoice.id ? createInvoiceServiceFeeAssessmentKey(params.invoice.id) : null);
+  const metadataPrincipal = parseMinor(metadata.serviceFeePrincipalMinor);
+  const grossPaidMinor = params.invoice.amount_paid;
+  const paidAt =
+    unixToDate(params.invoice.status_transitions?.paid_at) ??
+    unixToDate(params.invoice.created) ??
+    now;
+
+  if (assessmentKey) {
+    const assessment = await params.deps.store.findByAssessmentKey(assessmentKey);
+    if (assessment) {
+      const principalMinor = metadataPrincipal ?? assessment.eligibleSubtotalMinor;
+      const settled = await settleLoadedAssessment({
+        assessment,
+        principalMinor,
+        chargedFeeMinor: observedTopUpChargedFeeMinor(assessment),
+        grossPaidMinor,
+        stripeIds: {
+          stripeInvoiceId: params.invoice.id,
+          stripeChargeId: params.chargeId,
+          stripeCustomerId: customerId(params.invoice.customer) ?? assessment.stripeCustomerId,
+        },
+        settledAt: paidAt,
+        deps: params.deps,
+      });
+      return {
+        principalMinor,
+        chargedFeeMinor: settled.chargedFeeMinor,
+        grossPaidMinor: settled.grossPaidMinor,
+        assessment: settled,
+        shouldCredit: true,
+      };
+    }
+  }
+
+  const invoiceCreated = params.invoice.created;
+  if (invoiceCreated < SERVICE_FEE_ACTIVATION_UNIX_SECONDS) {
+    return {
+      principalMinor: params.invoice.amount_paid,
+      chargedFeeMinor: 0,
+      grossPaidMinor,
+      assessment: null,
+      shouldCredit: true,
+    };
+  }
+
+  if (metadataPrincipal != null) {
+    await alertMissed({
+      assessmentKey: assessmentKey ?? `missing:${params.invoice.id}`,
+      flow: params.flow,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeInvoiceId: params.invoice.id,
+      stripeChargeId: params.chargeId,
+      eligibleSubtotalMinor: metadataPrincipal,
+      expectedFeeMinor: 0,
+      failureCode: SERVICE_FEE_FAILURE_MISSING_ASSESSMENT,
+      deps: params.deps,
+    });
+    return {
+      principalMinor: metadataPrincipal,
+      chargedFeeMinor: 0,
+      grossPaidMinor,
+      assessment: null,
+      shouldCredit: true,
+    };
+  }
+
+  await alertMissed({
+    assessmentKey: assessmentKey ?? `untrusted:${params.invoice.id}`,
+    flow: params.flow,
+    kiloUserId: params.kiloUserId,
+    organizationId: params.organizationId,
+    stripeInvoiceId: params.invoice.id,
+    stripeChargeId: params.chargeId,
+    eligibleSubtotalMinor: params.invoice.amount_paid,
+    expectedFeeMinor: 0,
+    failureCode: SERVICE_FEE_FAILURE_PRINCIPAL_UNTRUSTED,
+    deps: params.deps,
+  });
+
+  return {
+    principalMinor: 0,
+    chargedFeeMinor: 0,
+    grossPaidMinor,
+    assessment: null,
+    shouldCredit: false,
+  };
+}
+
+async function finalizeTopUpCheckoutSession(params: {
+  prepared: PreparedTopUpCheckoutFee;
+  session: CheckoutSessionLike;
+  attemptUnixSeconds: number;
+  buildSessionParams: (
+    feeLineItem?: Stripe.Checkout.SessionCreateParams.LineItem
+  ) => Stripe.Checkout.SessionCreateParams;
+  createSession: CheckoutSessionCreateFn;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<CheckoutSessionLike> {
+  const nearBoundary = isWithinServiceFeeActivationBoundaryWindow(params.attemptUnixSeconds);
+  const disagrees = checkoutFeeDecisionDisagreesWithSessionCreated({
+    preparedOutcome: params.prepared.outcome,
+    sessionCreatedUnixSeconds: params.session.created,
+  });
+
+  if (!nearBoundary || !disagrees) {
+    await persistTopUpCheckoutSession({
+      prepared: params.prepared,
+      session: params.session,
+      deps: params.deps,
+    });
+    return params.session;
+  }
+
+  if (params.deps.expireCheckoutSession) {
+    try {
+      await params.deps.expireCheckoutSession(params.session.id);
+    } catch {
+      // Replacement still proceeds; the original session is abandoned.
+    }
+  }
+
+  const replacementPrepared = await prepareReplacementForSessionCreated({
+    original: params.prepared,
+    sessionCreatedUnixSeconds: params.session.created,
+    deps: params.deps,
+  });
+  const replacementSession = await params.createSession(
+    params.buildSessionParams(replacementPrepared.checkoutLineItem)
+  );
+
+  const replacementDisagrees = checkoutFeeDecisionDisagreesWithSessionCreated({
+    preparedOutcome: replacementPrepared.outcome,
+    sessionCreatedUnixSeconds: replacementSession.created,
+  });
+
+  if (replacementDisagrees) {
+    const failOpen = await prepareFailOpenReplacement({
+      original: params.prepared,
+      deps: params.deps,
+    });
+    if (params.deps.expireCheckoutSession) {
+      try {
+        await params.deps.expireCheckoutSession(replacementSession.id);
+      } catch {
+        // Continue with a principal-only session.
+      }
+    }
+    const failOpenSession = await params.createSession(params.buildSessionParams(undefined));
+    await persistTopUpCheckoutSession({
+      prepared: failOpen,
+      session: failOpenSession,
+      deps: params.deps,
+      replacementFailureCode: SERVICE_FEE_FAILURE_ACTIVATION_BOUNDARY,
+    });
+    return failOpenSession;
+  }
+
+  await persistTopUpCheckoutSession({
+    prepared: replacementPrepared,
+    session: replacementSession,
+    deps: params.deps,
+  });
+  return replacementSession;
+}
+
+async function prepareReplacementForSessionCreated(params: {
+  original: PreparedTopUpCheckoutFee;
+  sessionCreatedUnixSeconds: number;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<PreparedTopUpCheckoutFee> {
+  return prepareTopUpCheckoutFee({
+    flow: params.original.flow,
+    principalMinor: params.original.principalMinor,
+    kiloUserId: params.original.decision.kiloUserId ?? '',
+    organizationId: params.original.decision.organizationId ?? undefined,
+    stripeCustomerId: params.original.decision.stripeCustomerId ?? undefined,
+    deps: {
+      ...params.deps,
+      now: new Date(params.sessionCreatedUnixSeconds * 1000),
+      createAssessmentKey: () => params.original.assessmentKey,
+    },
+  });
+}
+
+async function prepareFailOpenReplacement(params: {
+  original: PreparedTopUpCheckoutFee;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<PreparedTopUpCheckoutFee> {
+  return {
+    ...params.original,
+    outcome: 'missed',
+    checkoutLineItem: undefined,
+    failureCode: SERVICE_FEE_FAILURE_ACTIVATION_BOUNDARY,
+  };
+}
+
+async function persistPreparedAssessment(params: {
+  prepared: PreparedTopUpCheckoutFee;
+  stripeIds: ServiceFeeStripeIds;
+  eligibilityCreatedAt: Date;
+  deps: ServiceFeeCheckoutDependencies;
+  replacementFailureCode?: string;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const now = params.deps.now ?? new Date();
+  const failureCode = params.replacementFailureCode ?? params.prepared.failureCode;
+
+  try {
+    const decision = {
+      ...params.prepared.decision,
+      eligibilityCreatedAt: toServiceFeeTimestamp(params.eligibilityCreatedAt),
+    };
+    const record = await upsertServiceFeeAssessment({
+      store: params.deps.store,
+      decision,
+      stripeIds: params.stripeIds,
+      now,
+    });
+
+    if (failureCode) {
+      const missed = await markServiceFeeAssessmentMissed({
+        store: params.deps.store,
+        assessmentKey: params.prepared.assessmentKey,
+        failureCode,
+        stripeIds: params.stripeIds,
+        now,
+      });
+      await alertForRecord(missed, params.deps);
+      return missed;
+    }
+
+    if (
+      params.prepared.outcome === 'pending' &&
+      params.prepared.checkoutLineItem &&
+      params.stripeIds.stripeCheckoutFeeLineItemId
+    ) {
+      return markServiceFeeAssessmentCharged({
+        store: params.deps.store,
+        assessmentKey: params.prepared.assessmentKey,
+        chargedFeeMinor: 0,
+        stripeIds: params.stripeIds,
+        now,
+      });
+    }
+
+    return record;
+  } catch (error) {
+    await alertMissed({
+      assessmentKey: params.prepared.assessmentKey,
+      flow: params.prepared.flow,
+      kiloUserId: params.prepared.decision.kiloUserId,
+      organizationId: params.prepared.decision.organizationId,
+      stripeCheckoutSessionId: params.stripeIds.stripeCheckoutSessionId,
+      eligibleSubtotalMinor: params.prepared.principalMinor,
+      expectedFeeMinor: params.prepared.expectedFeeMinor,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+      deps: params.deps,
+    });
+    return null;
+  }
+}
+
+async function persistMissedAfterPrepare(params: {
+  prepared: PreparedTopUpCheckoutFee;
+  stripeIds: ServiceFeeStripeIds;
+  deps: ServiceFeeCheckoutDependencies;
+  failureCode: string;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const now = params.deps.now ?? new Date();
+  try {
+    await upsertServiceFeeAssessment({
+      store: params.deps.store,
+      decision: params.prepared.decision,
+      stripeIds: params.stripeIds,
+      now,
+    });
+    const missed = await markServiceFeeAssessmentMissed({
+      store: params.deps.store,
+      assessmentKey: params.prepared.assessmentKey,
+      failureCode: params.failureCode,
+      stripeIds: params.stripeIds,
+      now,
+    });
+    await alertForRecord(missed, params.deps);
+    return missed;
+  } catch (error) {
+    await alertMissed({
+      assessmentKey: params.prepared.assessmentKey,
+      flow: params.prepared.decision.flow,
+      kiloUserId: params.prepared.decision.kiloUserId,
+      organizationId: params.prepared.decision.organizationId,
+      stripeInvoiceId: params.stripeIds.stripeInvoiceId,
+      eligibleSubtotalMinor: params.prepared.principalMinor,
+      expectedFeeMinor: params.prepared.expectedFeeMinor,
+      failureCode: failureCodeFromUnknown(error, params.failureCode),
+      deps: params.deps,
+    });
+    return null;
+  }
+}
+
+async function persistMissedInvoicePreparation(params: {
+  assessmentKey: string;
+  flow: AutoTopUpInvoiceFlow;
+  principalMinor: number;
+  invoiceId: string;
+  decision: PreparedServiceFeeDecision;
+  commercialMetadata: ServiceFeeCommercialMetadata;
+  stripeCustomerId: string;
+  failureCode: string;
+  deps: ServiceFeeCheckoutDependencies;
+  now: Date;
+}): Promise<PreparedAutoTopUpInvoiceFee> {
+  try {
+    await upsertServiceFeeAssessment({
+      store: params.deps.store,
+      decision: params.decision,
+      stripeIds: {
+        stripeCustomerId: params.stripeCustomerId,
+        stripeInvoiceId: params.invoiceId,
+      },
+      now: params.now,
+    });
+    if (params.decision.expectedFeeMinor > 0) {
+      const missed = await markServiceFeeAssessmentMissed({
+        store: params.deps.store,
+        assessmentKey: params.assessmentKey,
+        failureCode: params.failureCode,
+        stripeIds: {
+          stripeCustomerId: params.stripeCustomerId,
+          stripeInvoiceId: params.invoiceId,
+        },
+        now: params.now,
+      });
+      await alertForRecord(missed, params.deps);
+    }
+  } catch (error) {
+    await alertMissed({
+      assessmentKey: params.assessmentKey,
+      flow: params.flow,
+      kiloUserId: params.decision.kiloUserId,
+      organizationId: params.decision.organizationId,
+      stripeInvoiceId: params.invoiceId,
+      eligibleSubtotalMinor: params.principalMinor,
+      expectedFeeMinor: params.decision.expectedFeeMinor,
+      failureCode: failureCodeFromUnknown(error, params.failureCode),
+      deps: params.deps,
+    });
+  }
+
+  return {
+    assessmentKey: params.assessmentKey,
+    flow: params.flow,
+    principalMinor: params.principalMinor,
+    invoiceId: params.invoiceId,
+    decision: params.decision,
+    outcome: params.decision.expectedFeeMinor > 0 ? 'missed' : params.decision.outcome,
+    expectedFeeMinor: params.decision.expectedFeeMinor,
+    commercialMetadata: params.commercialMetadata,
+    failureCode: params.failureCode,
+  };
+}
+
+function missedCheckoutPreparation(params: {
+  assessmentKey: string;
+  flow: CheckoutServiceFeeFlow;
+  principalMinor: number;
+  decision: PreparedServiceFeeDecision;
+  commercialMetadata: ServiceFeeCommercialMetadata;
+  failureCode: string;
+}): PreparedTopUpCheckoutFee {
+  return {
+    assessmentKey: params.assessmentKey,
+    flow: params.flow,
+    principalMinor: params.principalMinor,
+    decision: params.decision,
+    outcome: params.decision.expectedFeeMinor > 0 ? 'missed' : params.decision.outcome,
+    expectedFeeMinor: params.decision.expectedFeeMinor,
+    commercialMetadata: params.commercialMetadata,
+    failureCode: params.decision.expectedFeeMinor > 0 ? params.failureCode : undefined,
+  };
+}
+
+async function safePrepareDecision(params: {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  principalMinor: number;
+  kiloUserId?: string;
+  organizationId?: string;
+  stripeCustomerId?: string;
+  now: Date;
+  findEffectiveExemption?: EffectiveExemptionLookup;
+}): Promise<PreparedServiceFeeDecision> {
+  try {
+    return await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey: params.assessmentKey,
+        flow: params.flow,
+        currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt: params.now,
+        eligibleSubtotalMinor: params.principalMinor,
+        kiloUserId: params.kiloUserId,
+        organizationId: params.organizationId,
+        stripeCustomerId: params.stripeCustomerId,
+      },
+      { findEffectiveExemption: params.findEffectiveExemption }
+    );
+  } catch {
+    const eligibleSubtotalMinor =
+      Number.isSafeInteger(params.principalMinor) && params.principalMinor >= 0
+        ? params.principalMinor
+        : 0;
+    const expectedFeeMinor = calculateServiceFeeMinor(eligibleSubtotalMinor);
+    return {
+      assessmentKey: params.assessmentKey,
+      version: SERVICE_FEE_VERSION,
+      flow: params.flow,
+      outcome: expectedFeeMinor > 0 ? 'pending' : 'zero_rounded',
+      currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+      kiloUserId: params.kiloUserId ?? null,
+      organizationId: params.organizationId ?? null,
+      stripeCustomerId: params.stripeCustomerId ?? null,
+      eligibilityCreatedAt: params.now.toISOString(),
+      eligibleSubtotalMinor,
+      expectedFeeMinor,
+      chargedFeeMinor: 0,
+      exemptionId: null,
+      failureCode: null,
+      metadata: {},
+    };
+  }
+}
+
+async function resolveCheckoutFeeLineIdentity(
+  session: CheckoutSessionLike,
+  deps: ServiceFeeCheckoutDependencies
+): Promise<FeeLineIdentity> {
+  const fromEmbedded = identifyFeeLine(session.line_items?.data ?? []);
+  if (fromEmbedded.stripeCheckoutFeeLineItemId) {
+    return fromEmbedded;
+  }
+  if (!deps.listCheckoutLineItems) {
+    return {};
+  }
+  try {
+    const page = await deps.listCheckoutLineItems(session.id, {
+      limit: 100,
+      expand: ['data.price.product'],
+    });
+    return identifyFeeLine(page.data);
+  } catch {
+    return {};
+  }
+}
+
+function identifyFeeLine(lines: readonly Stripe.LineItem[]): FeeLineIdentity {
+  const feeLine = lines.find(line => isServiceFeeCheckoutLine(line));
+  if (!feeLine) return {};
+  const price = feeLine.price;
+  return {
+    stripeCheckoutFeeLineItemId: feeLine.id,
+    stripeFeePriceId: typeof price === 'string' ? price : (price?.id ?? undefined),
+  };
+}
+
+function hasTrustedTopUpFeeLineIdentity(assessment: ServiceFeeAssessmentRecord): boolean {
+  return Boolean(
+    assessment.stripeCheckoutFeeLineItemId ||
+    assessment.stripeInvoiceFeeLineItemId ||
+    assessment.stripeFeePriceId
+  );
+}
+
+function observedTopUpChargedFeeMinor(assessment: ServiceFeeAssessmentRecord): number {
+  if (assessment.outcome !== 'charged') return 0;
+  if (assessment.chargedFeeMinor > 0) return assessment.chargedFeeMinor;
+  if (hasTrustedTopUpFeeLineIdentity(assessment)) return assessment.expectedFeeMinor;
+  return 0;
+}
+
+async function settleLoadedAssessment(params: {
+  assessment: ServiceFeeAssessmentRecord;
+  principalMinor: number;
+  chargedFeeMinor: number;
+  grossPaidMinor: number;
+  stripeIds: ServiceFeeStripeIds;
+  settledAt: Date;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<ServiceFeeAssessmentRecord> {
+  let assessment = params.assessment;
+  if (assessment.outcome === 'pending') {
+    const trustedObservedFee =
+      params.chargedFeeMinor > 0
+        ? params.chargedFeeMinor
+        : hasTrustedTopUpFeeLineIdentity(assessment)
+          ? assessment.expectedFeeMinor
+          : 0;
+    if (trustedObservedFee > 0) {
+      assessment = await markServiceFeeAssessmentCharged({
+        store: params.deps.store,
+        assessmentKey: assessment.assessmentKey,
+        chargedFeeMinor: trustedObservedFee,
+        stripeIds: params.stripeIds,
+        now: params.deps.now,
+      });
+    } else if (assessment.expectedFeeMinor > 0) {
+      assessment = await markServiceFeeAssessmentMissed({
+        store: params.deps.store,
+        assessmentKey: assessment.assessmentKey,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        stripeIds: params.stripeIds,
+        now: params.deps.now,
+      });
+      await alertForRecord(assessment, params.deps);
+    }
+  }
+
+  return settleServiceFeeAssessment({
+    store: params.deps.store,
+    assessmentKey: assessment.assessmentKey,
+    settledAt: params.settledAt,
+    settledProductMinor: params.principalMinor,
+    grossPaidMinor: params.grossPaidMinor,
+    chargedFeeMinor:
+      assessment.outcome === 'charged' ? params.chargedFeeMinor || assessment.chargedFeeMinor : 0,
+    stripeIds: params.stripeIds,
+    now: params.deps.now,
+  });
+}
+
+function assertAssessmentMatchesCharge(params: {
+  assessment: ServiceFeeAssessmentRecord;
+  paymentIntentId: string;
+  kiloUserId?: string;
+  organizationId?: string;
+  principalMinor: number;
+}): void {
+  if (
+    params.assessment.stripePaymentIntentId &&
+    params.assessment.stripePaymentIntentId !== params.paymentIntentId
+  ) {
+    throw new Error(
+      `service fee assessment ${params.assessment.assessmentKey} payment intent mismatch`
+    );
+  }
+  if (params.organizationId && params.assessment.organizationId !== params.organizationId) {
+    throw new Error(
+      `service fee assessment ${params.assessment.assessmentKey} organization mismatch`
+    );
+  }
+  if (
+    params.kiloUserId &&
+    params.assessment.kiloUserId &&
+    params.assessment.kiloUserId !== params.kiloUserId
+  ) {
+    throw new Error(`service fee assessment ${params.assessment.assessmentKey} user mismatch`);
+  }
+  if (params.assessment.eligibleSubtotalMinor !== params.principalMinor) {
+    throw new Error(`service fee assessment ${params.assessment.assessmentKey} principal mismatch`);
+  }
+}
+
+function inferFlowFromMetadata(metadata: Stripe.Metadata, organizationId?: string): ServiceFeeFlow {
+  const type = metadata.type;
+  if (type === 'org-auto-topup-setup') return 'organization_auto_top_up_setup';
+  if (type === 'auto-topup-setup') return 'personal_auto_top_up_setup';
+  if (type === 'org-auto-topup') return 'organization_auto_top_up';
+  if (type === 'auto-topup') return 'personal_auto_top_up';
+  return organizationId ? 'organization_top_up' : 'personal_top_up';
+}
+
+function toCheckoutShaped(prepared: PreparedAutoTopUpInvoiceFee): PreparedTopUpCheckoutFee {
+  return {
+    assessmentKey: prepared.assessmentKey,
+    flow: prepared.flow === 'organization_auto_top_up' ? 'organization_top_up' : 'personal_top_up',
+    principalMinor: prepared.principalMinor,
+    decision: prepared.decision,
+    outcome: prepared.outcome,
+    expectedFeeMinor: prepared.expectedFeeMinor,
+    commercialMetadata: prepared.commercialMetadata,
+    failureCode: prepared.failureCode,
+  };
+}
+
+async function alertForRecord(
+  record: ServiceFeeAssessmentRecord,
+  deps: ServiceFeeCheckoutDependencies
+): Promise<void> {
+  await alertMissed({
+    assessmentKey: record.assessmentKey,
+    flow: record.flow,
+    kiloUserId: record.kiloUserId,
+    organizationId: record.organizationId,
+    stripeCheckoutSessionId: record.stripeCheckoutSessionId,
+    stripeInvoiceId: record.stripeInvoiceId,
+    stripePaymentIntentId: record.stripePaymentIntentId,
+    stripeChargeId: record.stripeChargeId,
+    eligibleSubtotalMinor: record.eligibleSubtotalMinor,
+    expectedFeeMinor: record.expectedFeeMinor,
+    failureCode: record.failureCode ?? SERVICE_FEE_FAILURE_APPLICATION,
+    deps,
+  });
+}
+
+async function alertMissed(params: {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeCheckoutSessionId?: string | null;
+  stripeInvoiceId?: string | null;
+  stripePaymentIntentId?: string | null;
+  stripeChargeId?: string | null;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  failureCode: string;
+  deps: ServiceFeeCheckoutDependencies;
+}): Promise<void> {
+  const sendAlert = params.deps.sendAlert ?? sendMissedServiceFeeAlert;
+  await sendAlert({
+    assessmentKey: params.assessmentKey,
+    flow: params.flow,
+    kiloUserId: params.kiloUserId,
+    organizationId: params.organizationId,
+    stripeCheckoutSessionId: params.stripeCheckoutSessionId,
+    stripeInvoiceId: params.stripeInvoiceId,
+    stripePaymentIntentId: params.stripePaymentIntentId,
+    stripeChargeId: params.stripeChargeId,
+    eligibleSubtotalMinor: params.eligibleSubtotalMinor,
+    expectedFeeMinor: params.expectedFeeMinor,
+    currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+    failureCode: params.failureCode,
+    attemptedAt: params.deps.now ?? new Date(),
+  });
+}
+
+function failureCodeFromUnknown(error: unknown, fallback: string): string {
+  if (error instanceof Error && /^[a-z][a-z0-9_]{0,99}$/.test(error.message)) {
+    return error.message;
+  }
+  return fallback;
+}
+
+function nonempty(value: string | null | undefined): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+
+function parseMinor(value: string | null | undefined): number | null {
+  const raw = nonempty(value);
+  if (!raw) return null;
+  if (!/^-?\d+$/.test(raw)) return null;
+  const parsed = Number(raw);
+  if (!Number.isSafeInteger(parsed) || parsed < 0) return null;
+  return parsed;
+}
+
+function unixToDate(value: number | null | undefined): Date | null {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) return null;
+  return new Date(value * 1000);
+}
+
+function customerId(
+  customer: string | Stripe.Customer | Stripe.DeletedCustomer | null | undefined
+): string | null {
+  if (typeof customer === 'string') return customer;
+  if (customer && typeof customer === 'object' && 'id' in customer) return customer.id;
+  return null;
+}
+
+export type { ServiceFeeLineMetadata };
diff --git a/apps/web/src/lib/service-fees/constants.ts b/apps/web/src/lib/service-fees/constants.ts
new file mode 100644
index 0000000000..80964efd61
--- /dev/null
+++ b/apps/web/src/lib/service-fees/constants.ts
@@ -0,0 +1,6 @@
+export const SERVICE_FEE_RATE_BASIS_POINTS = 500;
+export const SERVICE_FEE_RATE_DENOMINATOR = 10_000;
+export const SERVICE_FEE_ACTIVATION_UNIX_SECONDS = 1_793_491_200; // 2026-11-01T00:00:00Z
+export const SERVICE_FEE_DESCRIPTION = 'Service fee (5%)';
+export const SERVICE_FEE_METADATA_TYPE = 'kilo-service-fee';
+export const SERVICE_FEE_VERSION = '2026-11-01-v1';
diff --git a/apps/web/src/lib/service-fees/disputes.test.ts b/apps/web/src/lib/service-fees/disputes.test.ts
new file mode 100644
index 0000000000..eed09419a5
--- /dev/null
+++ b/apps/web/src/lib/service-fees/disputes.test.ts
@@ -0,0 +1,337 @@
+import { describe, expect, test } from '@jest/globals';
+
+import {
+  markServiceFeeAssessmentCharged,
+  observeServiceFeeAssessmentRefunds,
+  prepareServiceFeeAssessmentDecision,
+  sanitizeServiceFeeAssessmentMetadata,
+  settleServiceFeeAssessment,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+} from '@/lib/service-fees/assessments';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
+import {
+  observeServiceFeeDisputeClosed,
+  observeServiceFeeDisputeFundsWithdrawn,
+} from '@/lib/service-fees/disputes';
+import {
+  ServiceFeeObservationNotReadyError,
+  type ServiceFeeRefundAssessmentStore,
+} from '@/lib/service-fees/refunds';
+
+const ACTIVATION = new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000);
+const ASSESSMENT_KEY = 'checkout:22222222-2222-4222-8222-222222222222';
+const CHARGE_ID = 'ch_dispute_1';
+const PAYMENT_INTENT_ID = 'pi_dispute_1';
+
+function cloneRecord(record: ServiceFeeAssessmentRecord): ServiceFeeAssessmentRecord {
+  return { ...record, metadata: { ...record.metadata } };
+}
+
+function createMemoryStore(): ServiceFeeRefundAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeRefundAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripeChargeId(stripeChargeId) {
+      const row = [...rows.values()].find(candidate => candidate.stripeChargeId === stripeChargeId);
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripePaymentIntentId(stripePaymentIntentId) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripePaymentIntentId === stripePaymentIntentId
+      );
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripeInvoiceId(stripeInvoiceId) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripeInvoiceId === stripeInvoiceId
+      );
+      return row ? cloneRecord(row) : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = cloneRecord(record);
+      rows.set(record.assessmentKey, copy);
+      return cloneRecord(copy);
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata:
+          patch.metadata !== undefined
+            ? sanitizeServiceFeeAssessmentMetadata(patch.metadata)
+            : { ...existing.metadata },
+      };
+      rows.set(assessmentKey, next);
+      return cloneRecord(next);
+    },
+  };
+  return store;
+}
+
+async function persistCharged(store: ServiceFeeRefundAssessmentStore, chargeLinked = true) {
+  const decision = await prepareServiceFeeAssessmentDecision({
+    assessmentKey: ASSESSMENT_KEY,
+    flow: 'personal_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    kiloUserId: 'user_dispute',
+  });
+  await upsertServiceFeeAssessment({
+    store,
+    decision,
+    stripeIds: {
+      stripeChargeId: chargeLinked ? CHARGE_ID : null,
+      stripePaymentIntentId: PAYMENT_INTENT_ID,
+    },
+    now: ACTIVATION,
+  });
+  return markServiceFeeAssessmentCharged({
+    store,
+    assessmentKey: ASSESSMENT_KEY,
+    chargedFeeMinor: 500,
+    now: ACTIVATION,
+  });
+}
+
+async function persistSettled(store: ServiceFeeRefundAssessmentStore, chargeLinked = true) {
+  await persistCharged(store, chargeLinked);
+  await settleServiceFeeAssessment({
+    store,
+    assessmentKey: ASSESSMENT_KEY,
+    settledAt: ACTIVATION,
+    settledProductMinor: 10_000,
+    grossPaidMinor: 10_500,
+    chargedFeeMinor: 500,
+    now: ACTIVATION,
+  });
+  return observeServiceFeeAssessmentRefunds({
+    store,
+    assessmentKey: ASSESSMENT_KEY,
+    refundedProductMinor: 2_000,
+    refundedFeeMinor: 100,
+    refundedGrossMinor: 2_100,
+    now: ACTIVATION,
+  });
+}
+
+describe('observeServiceFeeDisputeFundsWithdrawn', () => {
+  test('sets the charged fee without touching outcome or refunds', async () => {
+    const store = createMemoryStore();
+    await persistSettled(store);
+
+    const withdrawn = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: {
+        id: 'dp_1',
+        status: 'lost',
+        charge: CHARGE_ID,
+        payment_intent: PAYMENT_INTENT_ID,
+      },
+    });
+
+    expect(withdrawn.status).toBe('withdrawn');
+    expect(withdrawn.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 500,
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+      refundedGrossMinor: 2_100,
+    });
+
+    const again = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: { id: 'dp_1', status: 'lost', charge: CHARGE_ID },
+    });
+    expect(again.status).toBe('unchanged');
+    expect(again.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 500,
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+    });
+  });
+
+  test('out-of-order funds withdrawn before paid throws then converges after settlement', async () => {
+    const store = createMemoryStore();
+    await persistCharged(store);
+    const dispute = {
+      id: 'dp_before_paid',
+      status: 'needs_response',
+      charge: CHARGE_ID,
+      payment_intent: PAYMENT_INTENT_ID,
+    };
+
+    await expect(observeServiceFeeDisputeFundsWithdrawn({ store, dispute })).rejects.toBeInstanceOf(
+      ServiceFeeObservationNotReadyError
+    );
+    expect(await store.findByAssessmentKey(ASSESSMENT_KEY)).toMatchObject({
+      settledAt: null,
+      disputedFeeMinor: 0,
+    });
+
+    await expect(observeServiceFeeDisputeFundsWithdrawn({ store, dispute })).rejects.toBeInstanceOf(
+      ServiceFeeObservationNotReadyError
+    );
+
+    await settleServiceFeeAssessment({
+      store,
+      assessmentKey: ASSESSMENT_KEY,
+      settledAt: ACTIVATION,
+      settledProductMinor: 10_000,
+      grossPaidMinor: 10_500,
+      chargedFeeMinor: 500,
+      now: ACTIVATION,
+    });
+
+    const withdrawn = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute,
+    });
+    expect(withdrawn.status).toBe('withdrawn');
+    expect(withdrawn.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 500,
+    });
+
+    const again = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute,
+    });
+    expect(again.status).toBe('unchanged');
+    expect(again.assessment).toMatchObject({
+      disputedFeeMinor: 500,
+    });
+  });
+
+  test('a settled zero-fee assessment has no persisted dispute consequence', async () => {
+    const store = createMemoryStore();
+    const decision = await prepareServiceFeeAssessmentDecision({
+      assessmentKey: 'checkout:zero-fee-dispute',
+      flow: 'personal_top_up',
+      currency: 'usd',
+      eligibilityCreatedAt: ACTIVATION,
+      eligibleSubtotalMinor: 0,
+      kiloUserId: 'user_zero_fee_dispute',
+    });
+    await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: { stripeChargeId: 'ch_zero_fee_dispute' },
+      now: ACTIVATION,
+    });
+    await settleServiceFeeAssessment({
+      store,
+      assessmentKey: decision.assessmentKey,
+      settledAt: ACTIVATION,
+      settledProductMinor: 0,
+      grossPaidMinor: 0,
+      now: ACTIVATION,
+    });
+
+    const withdrawn = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: { id: 'dp_zero', charge: 'ch_zero_fee_dispute' },
+    });
+
+    expect(withdrawn.status).toBe('unchanged');
+    expect(withdrawn.disputedFeeMinor).toBe(0);
+  });
+
+  test('resolves the assessment by payment intent when the charge id is not linked', async () => {
+    const store = createMemoryStore();
+    await persistSettled(store, false);
+
+    const withdrawn = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: {
+        id: 'dp_pi',
+        status: 'needs_response',
+        charge: 'ch_other',
+        payment_intent: PAYMENT_INTENT_ID,
+      },
+    });
+
+    expect(withdrawn.status).toBe('withdrawn');
+    expect(withdrawn.disputedFeeMinor).toBe(500);
+  });
+});
+
+describe('observeServiceFeeDisputeClosed', () => {
+  test('clears the dispute fee on won and leaves refunds and outcome untouched', async () => {
+    const store = createMemoryStore();
+    await persistSettled(store);
+    await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: { id: 'dp_2', charge: CHARGE_ID },
+    });
+
+    const won = await observeServiceFeeDisputeClosed({
+      store,
+      dispute: { id: 'dp_2', status: 'won', charge: CHARGE_ID },
+    });
+    expect(won.status).toBe('cleared');
+    expect(won.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 0,
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+    });
+
+    const wonAgain = await observeServiceFeeDisputeClosed({
+      store,
+      dispute: { id: 'dp_2', status: 'won', charge: CHARGE_ID },
+    });
+    expect(wonAgain.status).toBe('unchanged');
+    expect(wonAgain.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 0,
+      refundedProductMinor: 2_000,
+    });
+  });
+
+  test('does not clear the dispute fee when the closed dispute is lost', async () => {
+    const store = createMemoryStore();
+    await persistSettled(store);
+    await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: { id: 'dp_lost', charge: CHARGE_ID },
+    });
+
+    const lost = await observeServiceFeeDisputeClosed({
+      store,
+      dispute: { id: 'dp_lost', status: 'lost', charge: CHARGE_ID },
+    });
+    expect(lost.status).toBe('unchanged');
+    expect(lost.assessment).toMatchObject({
+      outcome: 'charged',
+      disputedFeeMinor: 500,
+      refundedFeeMinor: 100,
+    });
+  });
+
+  test('ignores disputes with no matching assessment', async () => {
+    const store = createMemoryStore();
+    const result = await observeServiceFeeDisputeFundsWithdrawn({
+      store,
+      dispute: { id: 'dp_unknown', charge: 'ch_missing' },
+    });
+    expect(result).toEqual({
+      status: 'ignored',
+      assessment: null,
+      disputedFeeMinor: 0,
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/disputes.ts b/apps/web/src/lib/service-fees/disputes.ts
new file mode 100644
index 0000000000..d1b99bc427
--- /dev/null
+++ b/apps/web/src/lib/service-fees/disputes.ts
@@ -0,0 +1,141 @@
+import 'server-only';
+
+import {
+  observeServiceFeeAssessmentDispute,
+  type ServiceFeeAssessmentRecord,
+} from '@/lib/service-fees/assessments';
+import {
+  resolveServiceFeeAssessmentFromStripeRefs,
+  ServiceFeeObservationNotReadyError,
+  stripeReferenceId,
+  type ServiceFeeRefundAssessmentStore,
+  type ServiceFeeStripeReference,
+} from '@/lib/service-fees/refunds';
+
+export const SERVICE_FEE_DISPUTE_WON_STATUSES = new Set(['won']);
+
+export type ServiceFeeDisputeAssessmentStore = ServiceFeeRefundAssessmentStore;
+
+export type ServiceFeeDisputeObservation = {
+  id: string;
+  status?: string | null;
+  charge?: ServiceFeeStripeReference;
+  payment_intent?: ServiceFeeStripeReference;
+};
+
+export type ServiceFeeDisputeObservationStatus = 'ignored' | 'withdrawn' | 'cleared' | 'unchanged';
+
+export type ServiceFeeDisputeObservationResult = {
+  status: ServiceFeeDisputeObservationStatus;
+  assessment: ServiceFeeAssessmentRecord | null;
+  disputedFeeMinor: number;
+};
+
+/**
+ * Observe `charge.dispute.funds_withdrawn`. A dispute withdraws the whole
+ * charge, so the service-fee consequence is the full charged fee. Outcome and
+ * refund columns are not touched.
+ */
+export async function observeServiceFeeDisputeFundsWithdrawn(params: {
+  store: ServiceFeeDisputeAssessmentStore;
+  dispute: ServiceFeeDisputeObservation;
+  now?: Date;
+}): Promise<ServiceFeeDisputeObservationResult> {
+  const assessment = await resolveDisputeAssessment(params.store, params.dispute);
+  if (!assessment) {
+    return ignoredDispute(null);
+  }
+  if (!assessment.settledAt) {
+    throw new ServiceFeeObservationNotReadyError(assessment.assessmentKey);
+  }
+
+  if (assessment.disputedFeeMinor === assessment.chargedFeeMinor) {
+    return {
+      status: 'unchanged',
+      assessment,
+      disputedFeeMinor: assessment.disputedFeeMinor,
+    };
+  }
+
+  const updated = await observeServiceFeeAssessmentDispute({
+    store: params.store,
+    assessmentKey: assessment.assessmentKey,
+    disputedFeeMinor: assessment.chargedFeeMinor,
+    now: params.now,
+  });
+
+  return {
+    status: assessment.chargedFeeMinor === 0 ? 'unchanged' : 'withdrawn',
+    assessment: updated,
+    disputedFeeMinor: updated.disputedFeeMinor,
+  };
+}
+
+/**
+ * Observe `charge.dispute.closed`. A won outcome clears the fee consequence.
+ * Lost and other closed statuses leave it in place. Outcome and refund columns
+ * are not touched.
+ */
+export async function observeServiceFeeDisputeClosed(params: {
+  store: ServiceFeeDisputeAssessmentStore;
+  dispute: ServiceFeeDisputeObservation;
+  now?: Date;
+}): Promise<ServiceFeeDisputeObservationResult> {
+  const assessment = await resolveDisputeAssessment(params.store, params.dispute);
+  if (!assessment) {
+    return ignoredDispute(null);
+  }
+  if (!assessment.settledAt) {
+    throw new ServiceFeeObservationNotReadyError(assessment.assessmentKey);
+  }
+
+  if (!SERVICE_FEE_DISPUTE_WON_STATUSES.has(params.dispute.status ?? '')) {
+    return {
+      status: 'unchanged',
+      assessment,
+      disputedFeeMinor: assessment.disputedFeeMinor,
+    };
+  }
+
+  if (assessment.disputedFeeMinor === 0) {
+    return {
+      status: 'unchanged',
+      assessment,
+      disputedFeeMinor: 0,
+    };
+  }
+
+  const updated = await observeServiceFeeAssessmentDispute({
+    store: params.store,
+    assessmentKey: assessment.assessmentKey,
+    disputedFeeMinor: 0,
+    now: params.now,
+  });
+
+  return {
+    status: 'cleared',
+    assessment: updated,
+    disputedFeeMinor: updated.disputedFeeMinor,
+  };
+}
+
+async function resolveDisputeAssessment(
+  store: ServiceFeeDisputeAssessmentStore,
+  dispute: ServiceFeeDisputeObservation
+): Promise<ServiceFeeAssessmentRecord | null> {
+  return resolveServiceFeeAssessmentFromStripeRefs({
+    store,
+    chargeId: stripeReferenceId(dispute.charge),
+    paymentIntentId: stripeReferenceId(dispute.payment_intent),
+  });
+}
+
+function ignoredDispute(
+  assessment: ServiceFeeAssessmentRecord | null
+): ServiceFeeDisputeObservationResult {
+  return {
+    status: 'ignored',
+    assessment,
+    disputedFeeMinor: assessment?.disputedFeeMinor ?? 0,
+  };
+}
diff --git a/apps/web/src/lib/service-fees/drizzle-store.test.ts b/apps/web/src/lib/service-fees/drizzle-store.test.ts
new file mode 100644
index 0000000000..310201c859
--- /dev/null
+++ b/apps/web/src/lib/service-fees/drizzle-store.test.ts
@@ -0,0 +1,533 @@
+import { beforeEach, describe, expect, test } from '@jest/globals';
+import {
+  organization_service_fee_exemptions,
+  organizations,
+  stripe_service_fee_assessments,
+} from '@kilocode/db/schema';
+import { eq, sql } from 'drizzle-orm';
+
+import {
+  linkServiceFeeAssessmentStripeIds,
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  observeServiceFeeAssessmentDispute,
+  observeServiceFeeAssessmentRefunds,
+  prepareServiceFeeAssessmentDecision,
+  settleServiceFeeAssessment,
+  upsertServiceFeeAssessment,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  ServiceFeeAssessmentKeyConflictError,
+  createOrganizationServiceFeeExemptionStore,
+  createServiceFeeAssessmentStore,
+  createServiceFeeStores,
+} from '@/lib/service-fees/drizzle-store';
+import {
+  getEffectiveOrganizationServiceFeeExemption,
+  getOrganizationServiceFeeExemption,
+  organizationServiceFeeExemptionLockKey,
+  setOrganizationServiceFeeExemption,
+} from '@/lib/service-fees/organization-exemptions';
+import type { PrepareAssessmentInput } from '@/lib/service-fees/types';
+import { cleanupDbForTest, db } from '@/lib/drizzle';
+import { createOrganization } from '@/lib/organizations/organizations';
+import { insertTestUser } from '@/tests/helpers/user.helper';
+
+const ACTIVATION = new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000);
+const AFTER_ACTIVATION = new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 30 * 24 * 60 * 60) * 1000);
+
+beforeEach(async () => {
+  await cleanupDbForTest();
+});
+
+describe('drizzle service fee assessment store', () => {
+  test('inserts once, enriches Stripe IDs on retry, and rejects conflicts through domain functions', async () => {
+    const user = await insertTestUser();
+    const { assessments } = createServiceFeeStores(db);
+    const assessmentKey = `checkout:${crypto.randomUUID()}`;
+    const decision = await prepareServiceFeeAssessmentDecision(
+      personalInput(user.id, { assessmentKey })
+    );
+
+    const [first, second] = await Promise.all([
+      upsertServiceFeeAssessment({
+        store: assessments,
+        decision,
+        stripeIds: { stripeCheckoutSessionId: 'cs_enrich_1' },
+      }),
+      upsertServiceFeeAssessment({
+        store: assessments,
+        decision,
+        stripeIds: { stripePaymentIntentId: 'pi_enrich_1' },
+      }),
+    ]);
+
+    expect(first.assessmentKey).toBe(second.assessmentKey);
+    const persisted = await assessments.findByAssessmentKey(assessmentKey);
+    expect(persisted).toMatchObject({
+      assessmentKey,
+      outcome: 'pending',
+      expectedFeeMinor: 500,
+      chargedFeeMinor: 0,
+      stripeCheckoutSessionId: 'cs_enrich_1',
+      stripePaymentIntentId: 'pi_enrich_1',
+    });
+    expect(await assessments.findByStripeCheckoutSessionId('cs_enrich_1')).toMatchObject({
+      assessmentKey,
+    });
+    expect(await assessments.findByStripePaymentIntentId('pi_enrich_1')).toMatchObject({
+      assessmentKey,
+    });
+
+    const linked = await linkServiceFeeAssessmentStripeIds({
+      store: assessments,
+      assessmentKey,
+      stripeIds: {
+        stripeInvoiceId: 'in_enrich_1',
+        stripeChargeId: 'ch_enrich_1',
+      },
+    });
+    expect(linked).toMatchObject({
+      stripeInvoiceId: 'in_enrich_1',
+      stripeChargeId: 'ch_enrich_1',
+    });
+    expect(await assessments.findByStripeInvoiceId('in_enrich_1')).toMatchObject({ assessmentKey });
+    expect(await assessments.findByStripeChargeId('ch_enrich_1')).toMatchObject({ assessmentKey });
+
+    await expect(
+      upsertServiceFeeAssessment({
+        store: assessments,
+        decision: await prepareServiceFeeAssessmentDecision(
+          personalInput(user.id, {
+            assessmentKey,
+            kiloUserId: (await insertTestUser()).id,
+          })
+        ),
+      })
+    ).rejects.toMatchObject({ reason: 'owner', field: 'kiloUserId' });
+
+    await expect(
+      linkServiceFeeAssessmentStripeIds({
+        store: assessments,
+        assessmentKey,
+        stripeIds: { stripeChargeId: 'ch_other' },
+      })
+    ).rejects.toMatchObject({ reason: 'stripe_id', field: 'stripeChargeId' });
+
+    const charged = await markServiceFeeAssessmentCharged({
+      store: assessments,
+      assessmentKey,
+      chargedFeeMinor: 400,
+      stripeIds: { stripeCheckoutFeeLineItemId: 'li_fee_discounted' },
+    });
+    expect(charged).toMatchObject({
+      outcome: 'charged',
+      expectedFeeMinor: 500,
+      chargedFeeMinor: 400,
+    });
+
+    const settled = await settleServiceFeeAssessment({
+      store: assessments,
+      assessmentKey,
+      settledAt: '2026-09-01T01:00:00.000Z',
+      settledProductMinor: 8_000,
+      grossPaidMinor: 8_400,
+      chargedFeeMinor: 400,
+    });
+    const refunded = await observeServiceFeeAssessmentRefunds({
+      store: assessments,
+      assessmentKey,
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+      refundedGrossMinor: 2_100,
+    });
+    const disputed = await observeServiceFeeAssessmentDispute({
+      store: assessments,
+      assessmentKey,
+      disputedFeeMinor: 50,
+    });
+
+    expect(settled.settledAt).toBe('2026-09-01T01:00:00.000Z');
+    expect(refunded).toMatchObject({
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+      outcome: 'charged',
+    });
+    expect(disputed).toMatchObject({
+      disputedFeeMinor: 50,
+      outcome: 'charged',
+    });
+  });
+
+  test('surfaces assessment_key duplicates without aborting the surrounding transaction', async () => {
+    const user = await insertTestUser();
+    const assessmentKey = `checkout:${crypto.randomUUID()}`;
+    const decision = await prepareServiceFeeAssessmentDecision(
+      personalInput(user.id, { assessmentKey })
+    );
+    const first = await upsertServiceFeeAssessment({
+      store: createServiceFeeAssessmentStore(db),
+      decision,
+    });
+
+    await db.transaction(async tx => {
+      const store = createServiceFeeAssessmentStore(tx);
+      await expect(store.insert(first)).rejects.toBeInstanceOf(
+        ServiceFeeAssessmentKeyConflictError
+      );
+      const found = await store.findByAssessmentKey(assessmentKey);
+      expect(found?.assessmentKey).toBe(first.assessmentKey);
+      const enriched = await store.update(assessmentKey, {
+        stripeCustomerId: 'cus_after_conflict',
+        updatedAt: new Date().toISOString(),
+      });
+      expect(enriched.stripeCustomerId).toBe('cus_after_conflict');
+    });
+
+    expect(
+      await createServiceFeeAssessmentStore(db).findByAssessmentKey(assessmentKey)
+    ).toMatchObject({
+      assessmentKey: first.assessmentKey,
+      stripeCustomerId: 'cus_after_conflict',
+    });
+  });
+
+  test('allows charged fee below expected fee and rejects missed rows without a failure code', async () => {
+    const user = await insertTestUser();
+    const assessments = createServiceFeeAssessmentStore(db);
+    const discountedKey = `checkout:${crypto.randomUUID()}`;
+    const decision = await prepareServiceFeeAssessmentDecision(
+      personalInput(user.id, { assessmentKey: discountedKey })
+    );
+    await upsertServiceFeeAssessment({ store: assessments, decision });
+    const charged = await markServiceFeeAssessmentCharged({
+      store: assessments,
+      assessmentKey: discountedKey,
+      chargedFeeMinor: 196,
+      stripeIds: {
+        stripeCheckoutFeeLineItemId: `li_fee_${crypto.randomUUID()}`,
+      },
+    });
+    expect(charged.expectedFeeMinor).toBe(500);
+    expect(charged.chargedFeeMinor).toBe(196);
+
+    const rawRows = await db
+      .select()
+      .from(stripe_service_fee_assessments)
+      .where(eq(stripe_service_fee_assessments.assessment_key, discountedKey));
+    expect(rawRows).toHaveLength(1);
+    expect(rawRows[0]?.charged_fee_minor).toBe(196);
+    expect(rawRows[0]?.expected_fee_minor).toBe(500);
+
+    const missedPending = await upsertServiceFeeAssessment({
+      store: assessments,
+      decision: await prepareServiceFeeAssessmentDecision(
+        personalInput(user.id, {
+          assessmentKey: `checkout:${crypto.randomUUID()}`,
+        })
+      ),
+    });
+    const missed = await markServiceFeeAssessmentMissed({
+      store: assessments,
+      assessmentKey: missedPending.assessmentKey,
+      failureCode: 'fee_application_failed',
+    });
+    expect(missed).toMatchObject({
+      outcome: 'missed',
+      chargedFeeMinor: 0,
+      failureCode: 'fee_application_failed',
+    });
+
+    const invalidMissedKey = `checkout:${crypto.randomUUID()}`;
+    let missedWithoutCode: unknown;
+    try {
+      await db.insert(stripe_service_fee_assessments).values({
+        assessment_key: invalidMissedKey,
+        version: SERVICE_FEE_VERSION,
+        flow: 'personal_top_up',
+        outcome: 'missed',
+        currency: 'usd',
+        kilo_user_id: user.id,
+        eligibility_created_at: ACTIVATION.toISOString(),
+        eligible_subtotal_minor: 10_000,
+        expected_fee_minor: 500,
+        charged_fee_minor: 0,
+        failure_code: null,
+      });
+    } catch (error) {
+      missedWithoutCode = error;
+    }
+    expectPostgresCheck(missedWithoutCode, 'stripe_service_fee_assessments_missed_check');
+
+    let missedZeroExpected: unknown;
+    try {
+      await db.insert(stripe_service_fee_assessments).values({
+        assessment_key: `checkout:${crypto.randomUUID()}`,
+        version: SERVICE_FEE_VERSION,
+        flow: 'personal_top_up',
+        outcome: 'missed',
+        currency: 'usd',
+        kilo_user_id: user.id,
+        eligibility_created_at: ACTIVATION.toISOString(),
+        eligible_subtotal_minor: 1,
+        expected_fee_minor: 0,
+        charged_fee_minor: 0,
+        failure_code: 'fee_application_failed',
+      });
+    } catch (error) {
+      missedZeroExpected = error;
+    }
+    expectPostgresCheck(missedZeroExpected, 'stripe_service_fee_assessments_missed_check');
+  });
+});
+
+describe('drizzle organization service fee exemption store', () => {
+  test('resolves exact-organization history and does not inherit a parent exemption', async () => {
+    const admin = await insertTestUser({ is_admin: true });
+    const parent = await createOrganization(`Parent ${crypto.randomUUID()}`, admin.id);
+    const child = await createOrganization(`Child ${crypto.randomUUID()}`, admin.id);
+    await db
+      .update(organizations)
+      .set({ parent_organization_id: parent.id })
+      .where(eq(organizations.id, child.id));
+
+    const exemptions = createOrganizationServiceFeeExemptionStore(db);
+    const assessments = createServiceFeeAssessmentStore(db);
+
+    await setOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: parent.id,
+      isExempt: true,
+      reason: 'parent nonprofit grant',
+      changedByKiloUserId: admin.id,
+      now: new Date('2026-08-01T00:00:00.000Z'),
+    });
+    await setOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: child.id,
+      isExempt: true,
+      reason: 'child historical grant',
+      changedByKiloUserId: admin.id,
+      now: new Date('2026-08-15T00:00:00.000Z'),
+    });
+    await setOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: child.id,
+      isExempt: false,
+      reason: 'child exemption revoked',
+      changedByKiloUserId: admin.id,
+      now: AFTER_ACTIVATION,
+    });
+
+    const childView = await getOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: child.id,
+    });
+    expect(childView.current).toMatchObject({
+      organizationId: child.id,
+      isExempt: false,
+      reason: 'child exemption revoked',
+    });
+    expect(childView.history.map(row => row.reason)).toEqual([
+      'child exemption revoked',
+      'child historical grant',
+    ]);
+    expect(childView.current?.createdAt).toBe(childView.history[0]?.createdAt);
+
+    const childAtGrant = await getEffectiveOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: child.id,
+      at: ACTIVATION,
+    });
+    const childAtRevoke = await getEffectiveOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: child.id,
+      at: AFTER_ACTIVATION,
+    });
+    const parentNow = await getEffectiveOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: parent.id,
+      at: AFTER_ACTIVATION,
+    });
+    expect(childAtGrant).toMatchObject({
+      isExempt: true,
+      reason: 'child historical grant',
+    });
+    expect(childAtRevoke).toMatchObject({
+      isExempt: false,
+      reason: 'child exemption revoked',
+    });
+    expect(parentNow).toMatchObject({
+      isExempt: true,
+      reason: 'parent nonprofit grant',
+    });
+
+    const sibling = await createOrganization(`Sibling ${crypto.randomUUID()}`, admin.id);
+    await db
+      .update(organizations)
+      .set({ parent_organization_id: parent.id })
+      .where(eq(organizations.id, sibling.id));
+    const siblingEffective = await getEffectiveOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: sibling.id,
+      at: ACTIVATION,
+    });
+    expect(siblingEffective).toBeNull();
+
+    const childDecision = await prepareServiceFeeAssessmentDecision(
+      organizationInput(child.id, admin.id, {
+        assessmentKey: `invoice:${crypto.randomUUID()}`,
+        eligibilityCreatedAt: ACTIVATION,
+      }),
+      {
+        findEffectiveExemption: async (organizationId, at) => {
+          const row = await getEffectiveOrganizationServiceFeeExemption({
+            store: exemptions,
+            organizationId,
+            at,
+          });
+          return row ? { id: row.id, isExempt: row.isExempt } : null;
+        },
+      }
+    );
+    expect(childDecision).toMatchObject({
+      outcome: 'exempt',
+      exemptionId: childAtGrant?.id,
+    });
+
+    const siblingDecision = await prepareServiceFeeAssessmentDecision(
+      organizationInput(sibling.id, admin.id, {
+        assessmentKey: `invoice:${crypto.randomUUID()}`,
+      }),
+      {
+        findEffectiveExemption: async (organizationId, at) => {
+          const row = await getEffectiveOrganizationServiceFeeExemption({
+            store: exemptions,
+            organizationId,
+            at,
+          });
+          return row ? { id: row.id, isExempt: row.isExempt } : null;
+        },
+      }
+    );
+    expect(siblingDecision).toMatchObject({
+      outcome: 'pending',
+      exemptionId: null,
+    });
+
+    const persistedExempt = await upsertServiceFeeAssessment({
+      store: assessments,
+      decision: childDecision,
+    });
+    expect(persistedExempt.exemptionId).toBe(childAtGrant?.id);
+
+    const exemptionRows = await db
+      .select()
+      .from(organization_service_fee_exemptions)
+      .where(eq(organization_service_fee_exemptions.organization_id, child.id));
+    expect(exemptionRows).toHaveLength(2);
+    expect(exemptionRows.map(row => row.id)).toContain(childView.current?.id);
+  });
+
+  test('rejects deleted organizations and holds a transaction-scoped advisory lock', async () => {
+    const admin = await insertTestUser({ is_admin: true });
+    const organization = await createOrganization(`Deleted ${crypto.randomUUID()}`, admin.id);
+    const exemptions = createOrganizationServiceFeeExemptionStore(db);
+
+    await db
+      .update(organizations)
+      .set({ deleted_at: new Date().toISOString() })
+      .where(eq(organizations.id, organization.id));
+
+    await expect(
+      setOrganizationServiceFeeExemption({
+        store: exemptions,
+        organizationId: organization.id,
+        isExempt: true,
+        reason: 'should not persist',
+        changedByKiloUserId: admin.id,
+      })
+    ).rejects.toMatchObject({ code: 'organization_not_found' });
+
+    const view = await getOrganizationServiceFeeExemption({
+      store: exemptions,
+      organizationId: organization.id,
+    });
+    expect(view.current).toBeNull();
+    expect(view.history).toEqual([]);
+    expect(await exemptions.findActiveOrganization(organization.id)).toBeNull();
+
+    const active = await createOrganization(`Active ${crypto.randomUUID()}`, admin.id);
+    await db.transaction(async tx => {
+      const txStore = createOrganizationServiceFeeExemptionStore(tx);
+      await txStore.lockOrganization(active.id);
+      const result = await db.execute<{ locked: boolean }>(
+        sql`SELECT pg_catalog.pg_try_advisory_xact_lock(pg_catalog.hashtextextended(${organizationServiceFeeExemptionLockKey(active.id)}, 0)) AS locked`
+      );
+      expect(result.rows[0]?.locked).toBe(false);
+
+      await setOrganizationServiceFeeExemption({
+        store: txStore,
+        organizationId: active.id,
+        isExempt: true,
+        reason: 'locked grant',
+        changedByKiloUserId: admin.id,
+      });
+    });
+
+    const granted = await getOrganizationServiceFeeExemption({
+      store: createOrganizationServiceFeeExemptionStore(db),
+      organizationId: active.id,
+    });
+    expect(granted.current?.isExempt).toBe(true);
+    expect(granted.history).toHaveLength(1);
+  });
+});
+
+function personalInput(
+  kiloUserId: string,
+  overrides: Partial<PrepareAssessmentInput> = {}
+): PrepareAssessmentInput {
+  return {
+    assessmentKey: `checkout:${crypto.randomUUID()}`,
+    flow: 'personal_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    kiloUserId,
+    ...overrides,
+  };
+}
+
+function organizationInput(
+  organizationId: string,
+  kiloUserId: string,
+  overrides: Partial<PrepareAssessmentInput> = {}
+): PrepareAssessmentInput {
+  return {
+    assessmentKey: `invoice:${crypto.randomUUID()}`,
+    flow: 'organization_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    organizationId,
+    kiloUserId,
+    ...overrides,
+  };
+}
+
+function expectPostgresCheck(error: unknown, constraint: string): void {
+  const err = error as {
+    code?: string;
+    constraint?: string;
+    cause?: { code?: string; constraint?: string };
+  };
+  const code = err?.code ?? err?.cause?.code;
+  const name = err?.constraint ?? err?.cause?.constraint;
+  expect(code).toBe('23514');
+  expect(name).toBe(constraint);
+}
diff --git a/apps/web/src/lib/service-fees/drizzle-store.ts b/apps/web/src/lib/service-fees/drizzle-store.ts
new file mode 100644
index 0000000000..006c6d0a09
--- /dev/null
+++ b/apps/web/src/lib/service-fees/drizzle-store.ts
@@ -0,0 +1,515 @@
+import 'server-only';
+
+import {
+  sanitizeServiceFeeAssessmentMetadata,
+  toServiceFeeTimestamp,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import {
+  acquireOrganizationServiceFeeExemptionLock,
+  normalizeOrganizationExemptionTimestamp,
+  type ActiveOrganizationRef,
+  type OrganizationServiceFeeExemptionRecord,
+  type OrganizationServiceFeeExemptionStore,
+} from '@/lib/service-fees/organization-exemptions';
+import { db, type DrizzleTransaction } from '@/lib/drizzle';
+import {
+  organization_service_fee_exemptions,
+  organizations,
+  stripe_service_fee_assessments,
+  type NewStripeServiceFeeAssessment,
+  type OrganizationServiceFeeExemption,
+  type StripeServiceFeeAssessment,
+} from '@kilocode/db/schema';
+import { and, desc, eq, isNull, lte, or } from 'drizzle-orm';
+
+export type ServiceFeeDbOrTx = typeof db | DrizzleTransaction;
+
+export class ServiceFeeAssessmentKeyConflictError extends Error {
+  readonly name = 'ServiceFeeAssessmentKeyConflictError';
+
+  constructor(
+    readonly assessmentKey: string,
+    options?: { cause?: unknown }
+  ) {
+    super(`duplicate service fee assessment_key ${assessmentKey}`, options);
+  }
+}
+
+export type ServiceFeeAssessmentPersistenceStore = ServiceFeeAssessmentStore & {
+  findByStripeCheckoutSessionId(
+    stripeCheckoutSessionId: string
+  ): Promise<ServiceFeeAssessmentRecord | null>;
+  findByStripeInvoiceId(stripeInvoiceId: string): Promise<ServiceFeeAssessmentRecord | null>;
+  findByStripePaymentIntentId(
+    stripePaymentIntentId: string
+  ): Promise<ServiceFeeAssessmentRecord | null>;
+  findByStripeChargeId(stripeChargeId: string): Promise<ServiceFeeAssessmentRecord | null>;
+};
+
+export function createServiceFeeAssessmentStore(
+  dbOrTx: ServiceFeeDbOrTx
+): ServiceFeeAssessmentPersistenceStore {
+  const store: ServiceFeeAssessmentPersistenceStore = {
+    async transact(fn) {
+      return dbOrTx.transaction(async tx => fn(createServiceFeeAssessmentStore(tx)));
+    },
+
+    async findByAssessmentKey(assessmentKey) {
+      if (!assessmentKey) return null;
+      const [row] = await dbOrTx
+        .select()
+        .from(stripe_service_fee_assessments)
+        .where(eq(stripe_service_fee_assessments.assessment_key, assessmentKey))
+        .limit(1);
+      return row ? toAssessmentRecord(row) : null;
+    },
+
+    async findByStripeCheckoutSessionId(stripeCheckoutSessionId) {
+      return findAssessmentByNullableText(
+        dbOrTx,
+        stripe_service_fee_assessments.stripe_checkout_session_id,
+        stripeCheckoutSessionId
+      );
+    },
+
+    async findByStripeInvoiceId(stripeInvoiceId) {
+      return findAssessmentByNullableText(
+        dbOrTx,
+        stripe_service_fee_assessments.stripe_invoice_id,
+        stripeInvoiceId
+      );
+    },
+
+    async findByStripePaymentIntentId(stripePaymentIntentId) {
+      return findAssessmentByNullableText(
+        dbOrTx,
+        stripe_service_fee_assessments.stripe_payment_intent_id,
+        stripePaymentIntentId
+      );
+    },
+
+    async findByStripeChargeId(stripeChargeId) {
+      return findAssessmentByNullableText(
+        dbOrTx,
+        stripe_service_fee_assessments.stripe_charge_id,
+        stripeChargeId
+      );
+    },
+
+    async insert(record) {
+      const [row] = await dbOrTx
+        .insert(stripe_service_fee_assessments)
+        .values(toAssessmentInsert(record))
+        .onConflictDoNothing({
+          target: stripe_service_fee_assessments.assessment_key,
+        })
+        .returning();
+
+      if (!row) {
+        throw new ServiceFeeAssessmentKeyConflictError(record.assessmentKey);
+      }
+
+      return toAssessmentRecord(row);
+    },
+
+    async update(assessmentKey, patch) {
+      const set = toAssessmentUpdate(patch);
+      if (Object.keys(set).length === 0) {
+        const existing = await store.findByAssessmentKey(assessmentKey);
+        if (!existing) {
+          throw new Error(`service fee assessment ${assessmentKey} was not found`);
+        }
+        return existing;
+      }
+
+      const [row] = await dbOrTx
+        .update(stripe_service_fee_assessments)
+        .set(set)
+        .where(assessmentUpdateGuard(assessmentKey, patch))
+        .returning();
+
+      if (!row) {
+        throw new Error(`service fee assessment ${assessmentKey} was not updated`);
+      }
+
+      return toAssessmentRecord(row);
+    },
+  };
+
+  return store;
+}
+
+export function createOrganizationServiceFeeExemptionStore(
+  dbOrTx: ServiceFeeDbOrTx
+): OrganizationServiceFeeExemptionStore {
+  const store: OrganizationServiceFeeExemptionStore = {
+    async transact(fn) {
+      return dbOrTx.transaction(async tx => fn(createOrganizationServiceFeeExemptionStore(tx)));
+    },
+
+    async lockOrganization(organizationId) {
+      await acquireOrganizationServiceFeeExemptionLock(
+        {
+          execute: query => dbOrTx.execute(query as Parameters<ServiceFeeDbOrTx['execute']>[0]),
+        },
+        organizationId
+      );
+    },
+
+    async findActiveOrganization(organizationId) {
+      const [row] = await dbOrTx
+        .select({ id: organizations.id })
+        .from(organizations)
+        .where(and(eq(organizations.id, organizationId), isNull(organizations.deleted_at)))
+        .limit(1);
+      return row ? ({ id: row.id } satisfies ActiveOrganizationRef) : null;
+    },
+
+    async findAtOrBefore(organizationId, at) {
+      const [row] = await dbOrTx
+        .select()
+        .from(organization_service_fee_exemptions)
+        .where(
+          and(
+            eq(organization_service_fee_exemptions.organization_id, organizationId),
+            lte(
+              organization_service_fee_exemptions.created_at,
+              normalizeOrganizationExemptionTimestamp(at)
+            )
+          )
+        )
+        .orderBy(
+          desc(organization_service_fee_exemptions.created_at),
+          desc(organization_service_fee_exemptions.id)
+        )
+        .limit(1);
+      return row ? toExemptionRecord(row) : null;
+    },
+
+    async listNewestFirst(organizationId) {
+      const rows = await dbOrTx
+        .select()
+        .from(organization_service_fee_exemptions)
+        .where(eq(organization_service_fee_exemptions.organization_id, organizationId))
+        .orderBy(
+          desc(organization_service_fee_exemptions.created_at),
+          desc(organization_service_fee_exemptions.id)
+        );
+      return rows.map(toExemptionRecord);
+    },
+
+    async getCurrent(organizationId) {
+      const [row] = await dbOrTx
+        .select()
+        .from(organization_service_fee_exemptions)
+        .where(eq(organization_service_fee_exemptions.organization_id, organizationId))
+        .orderBy(
+          desc(organization_service_fee_exemptions.created_at),
+          desc(organization_service_fee_exemptions.id)
+        )
+        .limit(1);
+      return row ? toExemptionRecord(row) : null;
+    },
+
+    async insert(record) {
+      const [row] = await dbOrTx
+        .insert(organization_service_fee_exemptions)
+        .values({
+          id: record.id,
+          organization_id: record.organizationId,
+          is_exempt: record.isExempt,
+          reason: record.reason,
+          changed_by_kilo_user_id: nullableText(record.changedByKiloUserId),
+          created_at: record.createdAt,
+        })
+        .returning();
+
+      if (!row) {
+        throw new Error(`organization service fee exemption ${record.id} was not inserted`);
+      }
+
+      return toExemptionRecord(row);
+    },
+  };
+
+  return store;
+}
+
+export function createDefaultServiceFeeAssessmentStore(): ServiceFeeAssessmentPersistenceStore {
+  return createServiceFeeAssessmentStore(db);
+}
+
+export function createDefaultOrganizationServiceFeeExemptionStore(): OrganizationServiceFeeExemptionStore {
+  return createOrganizationServiceFeeExemptionStore(db);
+}
+
+export function createServiceFeeStores(dbOrTx: ServiceFeeDbOrTx = db): {
+  assessments: ServiceFeeAssessmentPersistenceStore;
+  exemptions: OrganizationServiceFeeExemptionStore;
+} {
+  return {
+    assessments: createServiceFeeAssessmentStore(dbOrTx),
+    exemptions: createOrganizationServiceFeeExemptionStore(dbOrTx),
+  };
+}
+
+function nullableText(value: string | null | undefined): string | null {
+  if (value == null || value === '') return null;
+  return value;
+}
+
+function toAssessmentRecord(row: StripeServiceFeeAssessment): ServiceFeeAssessmentRecord {
+  return {
+    assessmentKey: row.assessment_key,
+    version: row.version,
+    flow: row.flow,
+    outcome: row.outcome,
+    currency: row.currency,
+    kiloUserId: row.kilo_user_id,
+    organizationId: row.organization_id,
+    stripeCustomerId: row.stripe_customer_id,
+    stripeCheckoutSessionId: row.stripe_checkout_session_id,
+    stripeInvoiceId: row.stripe_invoice_id,
+    stripePaymentIntentId: row.stripe_payment_intent_id,
+    stripeChargeId: row.stripe_charge_id,
+    stripeFeePriceId: row.stripe_fee_price_id,
+    stripeCheckoutFeeLineItemId: row.stripe_checkout_fee_line_item_id,
+    stripeInvoiceFeeLineItemId: row.stripe_invoice_fee_line_item_id,
+    eligibilityCreatedAt: toServiceFeeTimestamp(row.eligibility_created_at),
+    eligibleSubtotalMinor: row.eligible_subtotal_minor,
+    expectedFeeMinor: row.expected_fee_minor,
+    chargedFeeMinor: row.charged_fee_minor,
+    grossPaidMinor: row.gross_paid_minor,
+    settledProductMinor: row.settled_product_minor,
+    settledAt: row.settled_at ? toServiceFeeTimestamp(row.settled_at) : null,
+    refundedProductMinor: row.refunded_product_minor,
+    refundedFeeMinor: row.refunded_fee_minor,
+    refundedGrossMinor: row.refunded_gross_minor,
+    disputedFeeMinor: row.disputed_fee_minor,
+    exemptionId: row.exemption_id,
+    failureCode: row.failure_code,
+    metadata: sanitizeServiceFeeAssessmentMetadata(row.metadata),
+    createdAt: toServiceFeeTimestamp(row.created_at),
+    updatedAt: toServiceFeeTimestamp(row.updated_at),
+  };
+}
+
+function toAssessmentInsert(record: ServiceFeeAssessmentRecord): NewStripeServiceFeeAssessment {
+  return {
+    assessment_key: record.assessmentKey,
+    version: record.version,
+    flow: record.flow,
+    outcome: record.outcome,
+    currency: record.currency,
+    kilo_user_id: nullableText(record.kiloUserId),
+    organization_id: nullableText(record.organizationId),
+    stripe_customer_id: nullableText(record.stripeCustomerId),
+    stripe_checkout_session_id: nullableText(record.stripeCheckoutSessionId),
+    stripe_invoice_id: nullableText(record.stripeInvoiceId),
+    stripe_payment_intent_id: nullableText(record.stripePaymentIntentId),
+    stripe_charge_id: nullableText(record.stripeChargeId),
+    stripe_fee_price_id: nullableText(record.stripeFeePriceId),
+    stripe_checkout_fee_line_item_id: nullableText(record.stripeCheckoutFeeLineItemId),
+    stripe_invoice_fee_line_item_id: nullableText(record.stripeInvoiceFeeLineItemId),
+    eligibility_created_at: record.eligibilityCreatedAt,
+    eligible_subtotal_minor: record.eligibleSubtotalMinor,
+    expected_fee_minor: record.expectedFeeMinor,
+    charged_fee_minor: record.chargedFeeMinor,
+    gross_paid_minor: record.grossPaidMinor,
+    settled_product_minor: record.settledProductMinor,
+    settled_at: record.settledAt,
+    refunded_product_minor: record.refundedProductMinor,
+    refunded_fee_minor: record.refundedFeeMinor,
+    refunded_gross_minor: record.refundedGrossMinor,
+    disputed_fee_minor: record.disputedFeeMinor,
+    exemption_id: nullableText(record.exemptionId),
+    failure_code: nullableText(record.failureCode),
+    metadata: sanitizeServiceFeeAssessmentMetadata(record.metadata),
+    created_at: record.createdAt,
+    updated_at: record.updatedAt,
+  };
+}
+
+function toAssessmentUpdate(
+  patch: Partial<ServiceFeeAssessmentRecord>
+): Partial<NewStripeServiceFeeAssessment> {
+  const set: Partial<NewStripeServiceFeeAssessment> = {};
+
+  if (patch.version !== undefined) set.version = patch.version;
+  if (patch.flow !== undefined) set.flow = patch.flow;
+  if (patch.outcome !== undefined) set.outcome = patch.outcome;
+  if (patch.currency !== undefined) set.currency = patch.currency;
+  if (patch.kiloUserId !== undefined) set.kilo_user_id = nullableText(patch.kiloUserId);
+  if (patch.organizationId !== undefined) {
+    set.organization_id = nullableText(patch.organizationId);
+  }
+  if (patch.stripeCustomerId !== undefined) {
+    set.stripe_customer_id = nullableText(patch.stripeCustomerId);
+  }
+  if (patch.stripeCheckoutSessionId !== undefined) {
+    set.stripe_checkout_session_id = nullableText(patch.stripeCheckoutSessionId);
+  }
+  if (patch.stripeInvoiceId !== undefined) {
+    set.stripe_invoice_id = nullableText(patch.stripeInvoiceId);
+  }
+  if (patch.stripePaymentIntentId !== undefined) {
+    set.stripe_payment_intent_id = nullableText(patch.stripePaymentIntentId);
+  }
+  if (patch.stripeChargeId !== undefined) {
+    set.stripe_charge_id = nullableText(patch.stripeChargeId);
+  }
+  if (patch.stripeFeePriceId !== undefined) {
+    set.stripe_fee_price_id = nullableText(patch.stripeFeePriceId);
+  }
+  if (patch.stripeCheckoutFeeLineItemId !== undefined) {
+    set.stripe_checkout_fee_line_item_id = nullableText(patch.stripeCheckoutFeeLineItemId);
+  }
+  if (patch.stripeInvoiceFeeLineItemId !== undefined) {
+    set.stripe_invoice_fee_line_item_id = nullableText(patch.stripeInvoiceFeeLineItemId);
+  }
+  if (patch.eligibilityCreatedAt !== undefined) {
+    set.eligibility_created_at = patch.eligibilityCreatedAt;
+  }
+  if (patch.eligibleSubtotalMinor !== undefined) {
+    set.eligible_subtotal_minor = patch.eligibleSubtotalMinor;
+  }
+  if (patch.expectedFeeMinor !== undefined) set.expected_fee_minor = patch.expectedFeeMinor;
+  if (patch.chargedFeeMinor !== undefined) set.charged_fee_minor = patch.chargedFeeMinor;
+  if (patch.grossPaidMinor !== undefined) set.gross_paid_minor = patch.grossPaidMinor;
+  if (patch.settledProductMinor !== undefined) {
+    set.settled_product_minor = patch.settledProductMinor;
+  }
+  if (patch.settledAt !== undefined) set.settled_at = patch.settledAt;
+  if (patch.refundedProductMinor !== undefined) {
+    set.refunded_product_minor = patch.refundedProductMinor;
+  }
+  if (patch.refundedFeeMinor !== undefined) set.refunded_fee_minor = patch.refundedFeeMinor;
+  if (patch.refundedGrossMinor !== undefined) set.refunded_gross_minor = patch.refundedGrossMinor;
+  if (patch.disputedFeeMinor !== undefined) set.disputed_fee_minor = patch.disputedFeeMinor;
+  if (patch.exemptionId !== undefined) {
+    set.exemption_id = nullableText(patch.exemptionId);
+  }
+  if (patch.failureCode !== undefined) set.failure_code = nullableText(patch.failureCode);
+  if (patch.metadata !== undefined) {
+    set.metadata = sanitizeServiceFeeAssessmentMetadata(patch.metadata);
+  }
+  if (patch.updatedAt !== undefined) set.updated_at = patch.updatedAt;
+
+  return set;
+}
+
+function assessmentUpdateGuard(assessmentKey: string, patch: Partial<ServiceFeeAssessmentRecord>) {
+  return and(
+    eq(stripe_service_fee_assessments.assessment_key, assessmentKey),
+    immutableTextGuard(
+      stripe_service_fee_assessments.kilo_user_id,
+      patch.kiloUserId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.organization_id,
+      patch.organizationId,
+      /* allowNullToValue */ false
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_customer_id,
+      patch.stripeCustomerId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_checkout_session_id,
+      patch.stripeCheckoutSessionId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_invoice_id,
+      patch.stripeInvoiceId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_payment_intent_id,
+      patch.stripePaymentIntentId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_charge_id,
+      patch.stripeChargeId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_fee_price_id,
+      patch.stripeFeePriceId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_checkout_fee_line_item_id,
+      patch.stripeCheckoutFeeLineItemId,
+      /* allowNullToValue */ true
+    ),
+    immutableTextGuard(
+      stripe_service_fee_assessments.stripe_invoice_fee_line_item_id,
+      patch.stripeInvoiceFeeLineItemId,
+      /* allowNullToValue */ true
+    )
+  );
+}
+
+function immutableTextGuard(
+  column:
+    | typeof stripe_service_fee_assessments.kilo_user_id
+    | typeof stripe_service_fee_assessments.organization_id
+    | typeof stripe_service_fee_assessments.stripe_customer_id
+    | typeof stripe_service_fee_assessments.stripe_checkout_session_id
+    | typeof stripe_service_fee_assessments.stripe_invoice_id
+    | typeof stripe_service_fee_assessments.stripe_payment_intent_id
+    | typeof stripe_service_fee_assessments.stripe_charge_id
+    | typeof stripe_service_fee_assessments.stripe_fee_price_id
+    | typeof stripe_service_fee_assessments.stripe_checkout_fee_line_item_id
+    | typeof stripe_service_fee_assessments.stripe_invoice_fee_line_item_id,
+  incoming: string | null | undefined,
+  allowNullToValue: boolean
+) {
+  if (incoming === undefined) return undefined;
+  const value = nullableText(incoming);
+  if (value === null) {
+    return isNull(column);
+  }
+  if (allowNullToValue) {
+    return or(isNull(column), eq(column, value));
+  }
+  return eq(column, value);
+}
+
+async function findAssessmentByNullableText(
+  dbOrTx: ServiceFeeDbOrTx,
+  column:
+    | typeof stripe_service_fee_assessments.stripe_checkout_session_id
+    | typeof stripe_service_fee_assessments.stripe_invoice_id
+    | typeof stripe_service_fee_assessments.stripe_payment_intent_id
+    | typeof stripe_service_fee_assessments.stripe_charge_id,
+  value: string
+): Promise<ServiceFeeAssessmentRecord | null> {
+  const id = nullableText(value);
+  if (!id) return null;
+  const [row] = await dbOrTx
+    .select()
+    .from(stripe_service_fee_assessments)
+    .where(eq(column, id))
+    .limit(1);
+  return row ? toAssessmentRecord(row) : null;
+}
+
+function toExemptionRecord(
+  row: OrganizationServiceFeeExemption
+): OrganizationServiceFeeExemptionRecord {
+  return {
+    id: row.id,
+    organizationId: row.organization_id,
+    isExempt: row.is_exempt,
+    reason: row.reason,
+    changedByKiloUserId: row.changed_by_kilo_user_id,
+    createdAt: normalizeOrganizationExemptionTimestamp(row.created_at),
+  };
+}
diff --git a/apps/web/src/lib/service-fees/invoice-created.test.ts b/apps/web/src/lib/service-fees/invoice-created.test.ts
new file mode 100644
index 0000000000..f23b766a63
--- /dev/null
+++ b/apps/web/src/lib/service-fees/invoice-created.test.ts
@@ -0,0 +1,724 @@
+import { describe, expect, test, jest } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import { getKnownStripePriceIdsForKiloClaw } from '@/lib/kiloclaw/stripe-price-ids.server';
+import { SEAT_PRODUCT_IDS } from '@/lib/organizations/stripe-seat-line-items';
+import {
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  handleKiloPassInvoiceCreated,
+  SERVICE_FEE_FAILURE_APPLICATION,
+  type KiloPassInvoiceCreatedDependencies,
+  type KiloPassInvoiceCreatedStripe,
+} from '@/lib/service-fees/invoice-created';
+import { createInvoiceServiceFeeAssessmentKey } from '@/lib/service-fees/checkout';
+
+const KILO_PASS_PRICE_ID = getKnownStripePriceIdsForKiloPass()[0]!;
+const KILOCLAW_PRICE_ID = getKnownStripePriceIdsForKiloClaw()[0]!;
+const SEAT_PRODUCT_ID = [...SEAT_PRODUCT_IDS][0]!;
+const SEAT_PRICE_ID = process.env.STRIPE_TEAMS_MONTHLY_PRICE_ID!;
+const ACTIVATION = SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata: { ...existing.metadata, ...(patch.metadata ?? {}) },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return store;
+}
+
+function invoiceLine(
+  overrides: Partial<Stripe.InvoiceLineItem> & {
+    amount?: number;
+    pricing?: Stripe.InvoiceLineItem['pricing'];
+    metadata?: Stripe.Metadata;
+  }
+): Stripe.InvoiceLineItem {
+  return {
+    id: overrides.id ?? 'il_test',
+    object: 'line_item',
+    amount: overrides.amount ?? 4_900,
+    currency: 'usd',
+    description: 'line',
+    discountable: true,
+    discount_amounts: null,
+    discounts: [],
+    invoice: 'in_test',
+    livemode: false,
+    metadata: overrides.metadata ?? {},
+    parent: null,
+    period: { start: 1, end: 2 },
+    pretax_credit_amounts: null,
+    pricing: overrides.pricing ?? null,
+    quantity: 1,
+    subscription: null,
+    taxes: null,
+    ...overrides,
+  } as Stripe.InvoiceLineItem;
+}
+
+function pricedLine(priceId: string, amount: number, extra: Partial<Stripe.InvoiceLineItem> = {}) {
+  return invoiceLine({
+    amount,
+    pricing: {
+      type: 'price_details',
+      unit_amount_decimal: String(amount),
+      price_details: {
+        price: priceId,
+        product: extra.pricing?.price_details?.product ?? 'prod_pass',
+      },
+    },
+    ...extra,
+  });
+}
+
+function personalMetadata(): Stripe.Metadata {
+  return {
+    type: 'kilo-pass',
+    kiloUserId: 'user_1',
+    tier: 'tier_49',
+    cadence: 'monthly',
+  };
+}
+
+function draftInvoice(
+  overrides: {
+    id?: string;
+    created?: number;
+    status?: Stripe.Invoice.Status;
+    metadata?: Stripe.Metadata;
+    lines?: Stripe.InvoiceLineItem[];
+    has_more?: boolean;
+    customer?: string;
+    parent?: Stripe.Invoice['parent'];
+  } = {}
+): Stripe.Invoice {
+  const { lines: lineItems, has_more, metadata, ...invoiceOverrides } = overrides;
+  const lines = lineItems ?? [pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass' })];
+  const resolvedMetadata = metadata ?? personalMetadata();
+  return {
+    id: overrides.id ?? 'in_test',
+    object: 'invoice',
+    created: overrides.created ?? ACTIVATION,
+    status: overrides.status ?? 'draft',
+    currency: 'usd',
+    customer: 'cus_1',
+    amount_paid: 0,
+    parent: {
+      type: 'subscription_details',
+      quote_details: null,
+      subscription_details: {
+        metadata: resolvedMetadata,
+        subscription: 'sub_1',
+      },
+    },
+    ...invoiceOverrides,
+    metadata: resolvedMetadata,
+    lines: {
+      object: 'list',
+      data: lines,
+      has_more: has_more ?? false,
+      url: '/v1/invoices/in_test/lines',
+    },
+  } as Stripe.Invoice;
+}
+
+function stripeClient(
+  overrides: Partial<KiloPassInvoiceCreatedStripe> & {
+    createInvoiceItem?: KiloPassInvoiceCreatedStripe['invoiceItems'];
+    listLineItems?: KiloPassInvoiceCreatedStripe['invoices']['listLineItems'];
+  } = {}
+): KiloPassInvoiceCreatedStripe {
+  return {
+    prices: {
+      retrieve: async id => ({ id, tax_behavior: 'exclusive' }),
+    },
+    invoices: {
+      listLineItems:
+        overrides.listLineItems ??
+        (async () => ({
+          data: [],
+          has_more: false,
+        })),
+    },
+    invoiceItems: overrides.createInvoiceItem ?? {
+      create: async () => ({ id: 'ii_fee', amount: 245 }),
+    },
+    ...overrides,
+  };
+}
+
+function deps(
+  overrides: Partial<KiloPassInvoiceCreatedDependencies> = {}
+): KiloPassInvoiceCreatedDependencies {
+  return {
+    now: new Date(ACTIVATION * 1000),
+    sendAlert: jest.fn(async () => undefined),
+    ...overrides,
+  };
+}
+
+describe('handleKiloPassInvoiceCreated', () => {
+  test('activation minus one second is pre_activation and does not attach a fee', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ created: ACTIVATION - 1 }),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(result.status).toBe('assessed');
+    expect(result.assessment).toMatchObject({
+      outcome: 'pre_activation',
+      expectedFeeMinor: 245,
+      chargedFeeMinor: 0,
+    });
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('activation exact second attaches the fee when tax is available', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ created: ACTIVATION }),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(result.status).toBe('charged');
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 245,
+      stripeInvoiceFeeLineItemId: 'ii_fee',
+      eligibilityCreatedAt: new Date(ACTIVATION * 1000).toISOString(),
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('discards embedded lines and paginates when has_more is true', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const listLineItems = jest
+      .fn<KiloPassInvoiceCreatedStripe['invoices']['listLineItems']>()
+      .mockResolvedValueOnce({
+        data: [pricedLine(SEAT_PRICE_ID, 72_000, { id: 'il_seat_page' })],
+        has_more: true,
+      })
+      .mockResolvedValueOnce({
+        data: [pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass_page' })],
+        has_more: false,
+      });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        has_more: true,
+        lines: [pricedLine(SEAT_PRICE_ID, 1, { id: 'il_stale_embedded' })],
+      }),
+      stripe: stripeClient({ listLineItems, createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(listLineItems).toHaveBeenCalled();
+    expect(result.assessment?.eligibleSubtotalMinor).toBe(4_900);
+    expect(result.assessment?.chargedFeeMinor).toBe(245);
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('mixed seat and Kilo Pass invoices charge only the net Kilo Pass subtotal', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params.amount).toBe(245);
+      return { id: 'ii_fee', amount: 245 };
+    });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        metadata: {
+          type: 'kilo-pass-org',
+          organizationId: 'org_1',
+          kiloUserId: 'user_1',
+          tier: 'tier_49',
+          cadence: 'monthly',
+        },
+        lines: [
+          pricedLine(SEAT_PRICE_ID, 72_000, {
+            id: 'il_seat',
+            pricing: {
+              type: 'price_details',
+              unit_amount_decimal: '72000',
+              price_details: { price: SEAT_PRICE_ID, product: SEAT_PRODUCT_ID },
+            },
+          }),
+          pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass' }),
+        ],
+      }),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+      }),
+    });
+
+    expect(result.assessment).toMatchObject({
+      flow: 'organization_kilo_pass',
+      eligibleSubtotalMinor: 4_900,
+      chargedFeeMinor: 245,
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('skips auto-top-up and excluded invoices but records eligible non-draft leakage', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const client = stripeClient({ createInvoiceItem: { create } });
+
+    const auto = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ metadata: { type: 'auto-topup' } }),
+      stripe: client,
+      store,
+      deps: deps(),
+    });
+    const orgAuto = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        id: 'in_org_auto',
+        metadata: { type: 'org-auto-topup' },
+      }),
+      stripe: client,
+      store,
+      deps: deps(),
+    });
+    const notDraft = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ id: 'in_open', status: 'open' }),
+      stripe: client,
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+    const seats = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        id: 'in_seats',
+        metadata: {},
+        lines: [
+          pricedLine(SEAT_PRICE_ID, 72_000, {
+            id: 'il_seat_only',
+            pricing: {
+              type: 'price_details',
+              unit_amount_decimal: '72000',
+              price_details: { price: SEAT_PRICE_ID, product: SEAT_PRODUCT_ID },
+            },
+          }),
+        ],
+      }),
+      stripe: client,
+      store,
+      deps: deps(),
+    });
+    const claw = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        id: 'in_claw',
+        metadata: {},
+        lines: [pricedLine(KILOCLAW_PRICE_ID, 20_000, { id: 'il_claw' })],
+      }),
+      stripe: client,
+      store,
+      deps: deps(),
+    });
+    const storeManaged = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ id: 'in_store' }),
+      stripe: client,
+      store,
+      deps: deps({ isStoreManaged: async () => true }),
+    });
+    const manual = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        id: 'in_manual',
+        metadata: {
+          type: 'kilo-pass-org',
+          organizationId: 'org_manual',
+          kiloUserId: 'user_1',
+          tier: 'tier_49',
+          cadence: 'monthly',
+        },
+      }),
+      stripe: client,
+      store,
+      deps: deps({ getOrganizationPurchaseChannel: async () => 'manual' }),
+    });
+    const unknown = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        id: 'in_unknown',
+        metadata: {},
+        lines: [invoiceLine({ id: 'il_unknown', amount: 1_000 })],
+      }),
+      stripe: client,
+      store,
+      deps: deps(),
+    });
+
+    expect(auto.assessment).toBeNull();
+    expect(orgAuto.assessment).toBeNull();
+    expect(notDraft).toMatchObject({
+      status: 'missed',
+      assessment: { failureCode: 'invoice_not_draft', outcome: 'missed' },
+    });
+    expect(seats.assessment).toBeNull();
+    expect(claw.assessment).toBeNull();
+    expect(storeManaged.assessment).toBeNull();
+    expect(manual.assessment).toBeNull();
+    expect(unknown.assessment).toBeNull();
+    expect(create).not.toHaveBeenCalled();
+    expect(await store.findByAssessmentKey(createInvoiceServiceFeeAssessmentKey('in_test'))).toBe(
+      null
+    );
+  });
+
+  test('exact organization exemption at invoice.created omits the fee line', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const findEffectiveExemption: NonNullable<
+      KiloPassInvoiceCreatedDependencies['findEffectiveExemption']
+    > = jest.fn(async () => ({ id: 'hist_exempt', isExempt: true }));
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({
+        metadata: {
+          type: 'kilo-pass-org',
+          organizationId: 'org_1',
+          kiloUserId: 'user_1',
+          tier: 'tier_49',
+          cadence: 'monthly',
+        },
+      }),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        findEffectiveExemption,
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+      }),
+    });
+
+    expect(findEffectiveExemption).toHaveBeenCalledWith('org_1', new Date(ACTIVATION * 1000));
+    expect(result.assessment).toMatchObject({
+      outcome: 'exempt',
+      exemptionId: 'hist_exempt',
+      expectedFeeMinor: 245,
+      chargedFeeMinor: 0,
+    });
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('catch-all alert preserves organization flow from available metadata', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert: NonNullable<KiloPassInvoiceCreatedDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const metadata: Stripe.Metadata = {
+      type: 'kilo-pass-org',
+      organizationId: 'org_1',
+      kiloUserId: 'user_1',
+      tier: 'tier_49',
+      cadence: 'monthly',
+    };
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ metadata, has_more: true }),
+      stripe: stripeClient({
+        listLineItems: async () => {
+          throw new Error('Stripe line listing unavailable');
+        },
+      }),
+      store,
+      deps: deps({ sendAlert }),
+    });
+
+    expect(result.status).toBe('skipped');
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({
+        flow: 'organization_kilo_pass',
+        organizationId: 'org_1',
+        kiloUserId: 'user_1',
+      })
+    );
+  });
+
+  test('tax resolution failure persists missed, alerts, and returns normally', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert: NonNullable<KiloPassInvoiceCreatedDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice(),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        sendAlert,
+        resolveTaxInput: async () => {
+          throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+        },
+      }),
+    });
+
+    expect(result.status).toBe('missed');
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      chargedFeeMinor: 0,
+      expectedFeeMinor: 245,
+    });
+    expect(create).not.toHaveBeenCalled();
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: SERVICE_FEE_FAILURE_APPLICATION })
+    );
+  });
+
+  test('injected available tax creates one non-discountable fee item with exact metadata and mirrored tax', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async (params: Stripe.InvoiceItemCreateParams) => {
+      expect(params).toMatchObject({
+        customer: 'cus_1',
+        invoice: 'in_test',
+        amount: 245,
+        currency: 'usd',
+        description: SERVICE_FEE_DESCRIPTION,
+        discountable: false,
+        tax_behavior: 'exclusive',
+        metadata: {
+          type: SERVICE_FEE_METADATA_TYPE,
+          serviceFeeVersion: SERVICE_FEE_VERSION,
+          serviceFeeAssessmentKey: createInvoiceServiceFeeAssessmentKey('in_test'),
+          serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+        },
+      });
+      return { id: 'ii_fee', amount: 245 };
+    });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice(),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({
+          source: 'price',
+          taxBehavior: 'exclusive',
+        }),
+      }),
+    });
+
+    expect(result.status).toBe('charged');
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 245,
+      stripeInvoiceId: 'in_test',
+      stripeInvoiceFeeLineItemId: 'ii_fee',
+    });
+    expect(create).toHaveBeenCalledTimes(1);
+  });
+
+  test('reuses a prepared synchronous assessment key without racing its attachment owner', async () => {
+    const store = createMemoryAssessmentStore();
+    const preparedKey = 'seat-capacity:sub_org:1788220800:12';
+    const organizationId = '00000000-0000-4000-8000-000000000001';
+    const decision = await prepareServiceFeeAssessmentDecision({
+      assessmentKey: preparedKey,
+      flow: 'organization_kilo_pass',
+      currency: 'usd',
+      eligibilityCreatedAt: new Date(ACTIVATION * 1000),
+      eligibleSubtotalMinor: 4_900,
+      kiloUserId: 'user_1',
+      organizationId,
+      stripeCustomerId: 'cus_1',
+    });
+    await upsertServiceFeeAssessment({ store, decision });
+    const create = jest.fn(async () => ({ id: 'ii_prepared', amount: 245 }));
+    const invoice = draftInvoice({
+      parent: {
+        type: 'subscription_details',
+        quote_details: null,
+        subscription_details: {
+          metadata: {
+            type: 'kilo-pass-org',
+            organizationId,
+            kiloUserId: 'user_1',
+            tier: 'tier_49',
+            cadence: 'monthly',
+            serviceFeeAssessmentKey: preparedKey,
+          },
+          subscription: 'sub_1',
+        },
+      },
+    });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice,
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(result).toMatchObject({ status: 'assessed' });
+    expect(result.assessment?.assessmentKey).toBe(preparedKey);
+    expect(
+      await store.findByAssessmentKey(createInvoiceServiceFeeAssessmentKey('in_test'))
+    ).toBeNull();
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('does not attach a non-invoice synchronous key when its row is not visible yet', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_race', amount: 245 }));
+    const invoice = draftInvoice({
+      parent: {
+        type: 'subscription_details',
+        quote_details: null,
+        subscription_details: {
+          metadata: {
+            ...personalMetadata(),
+            serviceFeeAssessmentKey: 'org-checkout:not-visible-yet',
+          },
+          subscription: 'sub_1',
+        },
+      },
+    });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice,
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(result).toMatchObject({ status: 'skipped', assessment: null });
+    expect(create).not.toHaveBeenCalled();
+  });
+
+  test('duplicate retry does not attach a second fee and missed is never recollected', async () => {
+    const store = createMemoryAssessmentStore();
+    const create = jest.fn(async () => ({ id: 'ii_fee', amount: 245 }));
+    const availableTax = deps({
+      resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+    });
+
+    const first = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice(),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: availableTax,
+    });
+    const second = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice(),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: availableTax,
+    });
+
+    expect(first.assessment?.assessmentKey).toBe(second.assessment?.assessmentKey);
+    expect(create).toHaveBeenCalledTimes(1);
+
+    const missedStore = createMemoryAssessmentStore();
+    const missedCreate = jest.fn(async () => ({ id: 'ii_later', amount: 245 }));
+    const missed = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ id: 'in_missed' }),
+      stripe: stripeClient({ createInvoiceItem: { create: missedCreate } }),
+      store: missedStore,
+      deps: deps({
+        resolveTaxInput: async () => {
+          throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+        },
+      }),
+    });
+    const retry = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice({ id: 'in_missed' }),
+      stripe: stripeClient({ createInvoiceItem: { create: missedCreate } }),
+      store: missedStore,
+      deps: availableTax,
+    });
+
+    expect(missed.assessment?.outcome).toBe('missed');
+    expect(retry.assessment?.outcome).toBe('missed');
+    expect(missedCreate).not.toHaveBeenCalled();
+  });
+
+  test('attach failure and Slack failure both fail open', async () => {
+    const store = createMemoryAssessmentStore();
+    const sendAlert = jest.fn(async () => {
+      throw new Error('slack_down');
+    });
+    const create = jest.fn(async () => {
+      throw new Error('Stripe invoice item failed');
+    });
+
+    const result = await handleKiloPassInvoiceCreated({
+      invoice: draftInvoice(),
+      stripe: stripeClient({ createInvoiceItem: { create } }),
+      store,
+      deps: deps({
+        sendAlert,
+        resolveTaxInput: async () => ({ source: 'inline_inherit' }),
+      }),
+    });
+
+    expect(result.status).toBe('missed');
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+      chargedFeeMinor: 0,
+    });
+    expect(sendAlert).toHaveBeenCalled();
+  });
+});
diff --git a/apps/web/src/lib/service-fees/invoice-created.ts b/apps/web/src/lib/service-fees/invoice-created.ts
new file mode 100644
index 0000000000..fa40c912f9
--- /dev/null
+++ b/apps/web/src/lib/service-fees/invoice-created.ts
@@ -0,0 +1,506 @@
+import 'server-only';
+
+import type Stripe from 'stripe';
+
+import { getOrganizationKiloPassMetadata } from '@/lib/kilo-pass-org/stripe-metadata';
+import { getKiloPassMetadataFromStripeMetadata } from '@/lib/kilo-pass/stripe-handlers-metadata';
+import {
+  sendMissedServiceFeeAlert,
+  type MissedServiceFeeAlertInput,
+} from '@/lib/service-fees/alerts';
+import {
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  prepareServiceFeeAssessmentDecision,
+  upsertServiceFeeAssessment,
+  type EffectiveExemptionLookup,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+  type ServiceFeeStripeIds,
+} from '@/lib/service-fees/assessments';
+import {
+  buildAutoTopUpServiceFeeInvoiceItem,
+  createInvoiceServiceFeeAssessmentKey,
+  isKiloOwnedAutoTopUpInvoice,
+  SERVICE_FEE_FAILURE_APPLICATION,
+} from '@/lib/service-fees/checkout';
+import {
+  isEligibleKiloPassInvoiceLine,
+  isServiceFeeInvoiceLine,
+  listAllInvoiceLineItems,
+  sumEligibleKiloPassSubtotalMinor,
+  type InvoiceLineItemListClient,
+} from '@/lib/service-fees/stripe-lines';
+import {
+  resolveServiceFeeTaxInput,
+  type ServiceFeeTaxInput,
+  type ServiceFeeTaxPrincipal,
+  type StripePriceTaxReader,
+} from '@/lib/service-fees/tax';
+import { SERVICE_FEE_SUPPORTED_CURRENCY, type ServiceFeeFlow } from '@/lib/service-fees/types';
+
+export type KiloPassInvoiceCreatedStripe = InvoiceLineItemListClient & {
+  prices?: StripePriceTaxReader['prices'];
+  invoiceItems?: {
+    create(
+      params: Stripe.InvoiceItemCreateParams
+    ): Promise<Pick<Stripe.InvoiceItem, 'id' | 'amount'>>;
+  };
+  subscriptions?: {
+    retrieve(id: string): Promise<Stripe.Subscription>;
+  };
+};
+
+export type KiloPassInvoiceCreatedDependencies = {
+  now?: Date;
+  findEffectiveExemption?: EffectiveExemptionLookup;
+  resolveTaxInput?: (params: {
+    principal: ServiceFeeTaxPrincipal;
+    stripe?: StripePriceTaxReader;
+  }) => Promise<ServiceFeeTaxInput>;
+  sendAlert?: (input: MissedServiceFeeAlertInput) => Promise<void>;
+  getOrganizationPurchaseChannel?: (
+    organizationId: string
+  ) => Promise<'self_serve' | 'manual' | null>;
+  isStoreManaged?: (input: {
+    invoice: Stripe.Invoice;
+    subscription: Stripe.Subscription | null;
+  }) => Promise<boolean>;
+  ownsSynchronousAttachment?: boolean;
+};
+
+export type KiloPassInvoiceCreatedResult = {
+  status: 'skipped' | 'assessed' | 'charged' | 'missed';
+  assessment: ServiceFeeAssessmentRecord | null;
+};
+
+type ClassifiedKiloPassInvoice = {
+  flow: Extract<ServiceFeeFlow, 'personal_kilo_pass' | 'organization_kilo_pass'>;
+  kiloUserId?: string;
+  organizationId?: string;
+};
+
+/**
+ * Attach at most one Kilo Pass service-fee item to a Stripe-owned draft invoice.
+ * Kilo-owned auto-top-up invoices, non-draft invoices, and excluded products are
+ * skipped. Fee-domain failures persist `missed` and return normally.
+ */
+export async function handleKiloPassInvoiceCreated(params: {
+  invoice: Stripe.Invoice;
+  stripe: KiloPassInvoiceCreatedStripe;
+  store: ServiceFeeAssessmentStore;
+  deps?: KiloPassInvoiceCreatedDependencies;
+}): Promise<KiloPassInvoiceCreatedResult> {
+  const deps = params.deps ?? {};
+  const now = deps.now ?? new Date();
+
+  if (isKiloOwnedAutoTopUpInvoice(params.invoice)) {
+    return skipped();
+  }
+  if (!params.invoice.id) {
+    return skipped();
+  }
+
+  try {
+    const subscription = await loadSubscription(params.invoice, params.stripe);
+    if (await deps.isStoreManaged?.({ invoice: params.invoice, subscription })) {
+      return skipped();
+    }
+
+    const lines = await listAllInvoiceLineItems({
+      invoice: params.invoice,
+      stripe: params.stripe,
+    });
+    const classified = await classifyEligibleKiloPassInvoice({
+      invoice: params.invoice,
+      lines,
+      subscription,
+      getOrganizationPurchaseChannel: deps.getOrganizationPurchaseChannel,
+    });
+    if (!classified) {
+      return skipped();
+    }
+
+    const assessmentKey = resolveInvoiceAssessmentKey(params.invoice, subscription, lines);
+    const existingFeeLine = findAssessmentFeeLine(lines, assessmentKey);
+    const existing = await params.store.findByAssessmentKey(assessmentKey);
+    if (
+      !assessmentKey.startsWith('invoice:') &&
+      !existingFeeLine &&
+      !deps.ownsSynchronousAttachment
+    ) {
+      return existing ? { status: 'assessed', assessment: existing } : skipped();
+    }
+    if (existing && (existing.outcome === 'charged' || existing.outcome === 'missed')) {
+      return {
+        status: existing.outcome,
+        assessment: existing,
+      };
+    }
+    const eligibleSubtotalMinor = sumEligibleKiloPassSubtotalMinor({
+      lines,
+      currency: params.invoice.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+      subscription,
+    });
+    const eligibilityCreatedAt = unixToDate(params.invoice.created) ?? now;
+    const stripeIds = invoiceStripeIds(params.invoice);
+
+    const decision = await prepareServiceFeeAssessmentDecision(
+      {
+        assessmentKey,
+        flow: classified.flow,
+        currency: params.invoice.currency || SERVICE_FEE_SUPPORTED_CURRENCY,
+        eligibilityCreatedAt,
+        eligibleSubtotalMinor,
+        kiloUserId: classified.kiloUserId,
+        organizationId: classified.organizationId,
+        stripeCustomerId: stripeIds.stripeCustomerId ?? undefined,
+      },
+      { findEffectiveExemption: deps.findEffectiveExemption }
+    );
+
+    const record = await upsertServiceFeeAssessment({
+      store: params.store,
+      decision,
+      stripeIds,
+      now,
+    });
+
+    if (record.outcome !== 'pending') {
+      return { status: 'assessed', assessment: record };
+    }
+
+    if (existingFeeLine) {
+      const charged = await markServiceFeeAssessmentCharged({
+        store: params.store,
+        assessmentKey,
+        chargedFeeMinor: Math.max(0, existingFeeLine.amount),
+        stripeIds: {
+          ...stripeIds,
+          stripeInvoiceFeeLineItemId: existingFeeLine.id,
+        },
+        now,
+      });
+      return { status: 'charged', assessment: charged };
+    }
+
+    if (params.invoice.status !== 'draft') {
+      return persistMissed({
+        store: params.store,
+        assessmentKey,
+        stripeIds,
+        failureCode: 'invoice_not_draft',
+        record,
+        deps,
+        now,
+      });
+    }
+
+    const resolveTax = deps.resolveTaxInput ?? resolveServiceFeeTaxInput;
+    let taxInput: ServiceFeeTaxInput;
+    try {
+      taxInput = await resolveTax({
+        principal: taxPrincipalFromLines(lines, subscription),
+        stripe: params.stripe.prices ? { prices: params.stripe.prices } : undefined,
+      });
+    } catch {
+      return persistMissed({
+        store: params.store,
+        assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+    }
+    if (!params.stripe.invoiceItems?.create || !stripeIds.stripeCustomerId) {
+      return persistMissed({
+        store: params.store,
+        assessmentKey,
+        stripeIds,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        record,
+        deps,
+        now,
+      });
+    }
+
+    try {
+      const item = await params.stripe.invoiceItems.create(
+        buildAutoTopUpServiceFeeInvoiceItem({
+          assessmentKey,
+          invoiceId: params.invoice.id,
+          customerId: stripeIds.stripeCustomerId,
+          feeMinor: decision.expectedFeeMinor,
+          taxInput,
+        })
+      );
+      const charged = await markServiceFeeAssessmentCharged({
+        store: params.store,
+        assessmentKey,
+        chargedFeeMinor: decision.expectedFeeMinor,
+        stripeIds: {
+          ...stripeIds,
+          stripeInvoiceFeeLineItemId: item.id,
+        },
+        now,
+      });
+      return { status: 'charged', assessment: charged };
+    } catch (error) {
+      return persistMissed({
+        store: params.store,
+        assessmentKey,
+        stripeIds,
+        failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+        record,
+        deps,
+        now,
+      });
+    }
+  } catch (error) {
+    const metadataSources = collectMetadata(params.invoice, null);
+    const organization = firstPresent(metadataSources, getOrganizationKiloPassMetadata);
+    const personal = firstPresent(metadataSources, getKiloPassMetadataFromStripeMetadata);
+    await alertSafely({
+      assessmentKey: params.invoice.id
+        ? createInvoiceServiceFeeAssessmentKey(params.invoice.id)
+        : 'invoice:unknown',
+      flow: organization ? 'organization_kilo_pass' : 'personal_kilo_pass',
+      kiloUserId: organization?.kiloUserId ?? personal?.kiloUserId,
+      organizationId: organization?.organizationId,
+      stripeInvoiceId: params.invoice.id,
+      eligibleSubtotalMinor: 0,
+      expectedFeeMinor: 0,
+      failureCode: failureCodeFromUnknown(error, SERVICE_FEE_FAILURE_APPLICATION),
+      deps,
+      now,
+    });
+    return skipped();
+  }
+}
+
+async function classifyEligibleKiloPassInvoice(input: {
+  invoice: Stripe.Invoice;
+  lines: readonly Stripe.InvoiceLineItem[];
+  subscription: Stripe.Subscription | null;
+  getOrganizationPurchaseChannel?: KiloPassInvoiceCreatedDependencies['getOrganizationPurchaseChannel'];
+}): Promise<ClassifiedKiloPassInvoice | null> {
+  const metadataSources = collectMetadata(input.invoice, input.subscription);
+  const organization = firstPresent(metadataSources, getOrganizationKiloPassMetadata);
+  const personal = firstPresent(metadataSources, getKiloPassMetadataFromStripeMetadata);
+  const hasEligibleLine = input.lines.some(line =>
+    isEligibleKiloPassInvoiceLine(line, input.subscription)
+  );
+
+  if (organization) {
+    const channel = input.getOrganizationPurchaseChannel
+      ? await input.getOrganizationPurchaseChannel(organization.organizationId)
+      : 'self_serve';
+    if (channel !== 'self_serve') {
+      return null;
+    }
+    if (!hasEligibleLine) {
+      return null;
+    }
+    return {
+      flow: 'organization_kilo_pass',
+      organizationId: organization.organizationId,
+      kiloUserId: organization.kiloUserId,
+    };
+  }
+
+  if (!hasEligibleLine) {
+    return null;
+  }
+  if (!personal?.kiloUserId) {
+    return null;
+  }
+  return {
+    flow: 'personal_kilo_pass',
+    kiloUserId: personal.kiloUserId,
+  };
+}
+
+function collectMetadata(
+  invoice: Stripe.Invoice,
+  subscription: Stripe.Subscription | null
+): Array<Stripe.Metadata | null | undefined> {
+  return [invoice.metadata, invoice.parent?.subscription_details?.metadata, subscription?.metadata];
+}
+
+function firstPresent<T>(
+  sources: Array<Stripe.Metadata | null | undefined>,
+  read: (metadata: Stripe.Metadata | null | undefined) => T | null
+): T | null {
+  for (const source of sources) {
+    const value = read(source);
+    if (value) return value;
+  }
+  return null;
+}
+
+function resolveInvoiceAssessmentKey(
+  invoice: Stripe.Invoice,
+  subscription: Stripe.Subscription | null,
+  lines: readonly Stripe.InvoiceLineItem[]
+): string {
+  const metadataKey = collectMetadata(invoice, subscription)
+    .map(metadata => metadata?.serviceFeeAssessmentKey?.trim())
+    .find(Boolean);
+  if (metadataKey) return metadataKey;
+
+  const feeLineKey = lines
+    .filter(isServiceFeeInvoiceLine)
+    .map(line => line.metadata?.serviceFeeAssessmentKey?.trim())
+    .find(Boolean);
+  return feeLineKey || createInvoiceServiceFeeAssessmentKey(invoice.id);
+}
+
+function findAssessmentFeeLine(
+  lines: readonly Stripe.InvoiceLineItem[],
+  assessmentKey: string | null
+): Stripe.InvoiceLineItem | undefined {
+  return lines.find(line => {
+    if (!isServiceFeeInvoiceLine(line)) return false;
+    if (!assessmentKey) return true;
+    return line.metadata?.serviceFeeAssessmentKey === assessmentKey;
+  });
+}
+
+function taxPrincipalFromLines(
+  lines: readonly Stripe.InvoiceLineItem[],
+  subscription: Stripe.Subscription | null
+): ServiceFeeTaxPrincipal {
+  const eligible = lines.find(line => isEligibleKiloPassInvoiceLine(line, subscription));
+  const priceId = eligible?.pricing?.price_details?.price;
+  return priceId ? { kind: 'price', priceId } : { kind: 'inline' };
+}
+
+async function loadSubscription(
+  invoice: Stripe.Invoice,
+  stripe: KiloPassInvoiceCreatedStripe
+): Promise<Stripe.Subscription | null> {
+  const reference = invoice.parent?.subscription_details?.subscription;
+  if (!reference) return null;
+  if (typeof reference !== 'string') return reference;
+  if (!stripe.subscriptions?.retrieve) return null;
+  try {
+    return await stripe.subscriptions.retrieve(reference);
+  } catch {
+    return null;
+  }
+}
+
+async function persistMissed(params: {
+  store: ServiceFeeAssessmentStore;
+  assessmentKey: string;
+  stripeIds: ServiceFeeStripeIds;
+  failureCode: string;
+  record: ServiceFeeAssessmentRecord;
+  deps: KiloPassInvoiceCreatedDependencies;
+  now: Date;
+}): Promise<KiloPassInvoiceCreatedResult> {
+  try {
+    const missed = await markServiceFeeAssessmentMissed({
+      store: params.store,
+      assessmentKey: params.assessmentKey,
+      failureCode: params.failureCode,
+      stripeIds: params.stripeIds,
+      now: params.now,
+    });
+    await alertSafely({
+      assessmentKey: missed.assessmentKey,
+      flow: missed.flow,
+      kiloUserId: missed.kiloUserId,
+      organizationId: missed.organizationId,
+      stripeInvoiceId: missed.stripeInvoiceId,
+      eligibleSubtotalMinor: missed.eligibleSubtotalMinor,
+      expectedFeeMinor: missed.expectedFeeMinor,
+      failureCode: missed.failureCode ?? params.failureCode,
+      deps: params.deps,
+      now: params.now,
+    });
+    return { status: 'missed', assessment: missed };
+  } catch (error) {
+    await alertSafely({
+      assessmentKey: params.assessmentKey,
+      flow: params.record.flow,
+      kiloUserId: params.record.kiloUserId,
+      organizationId: params.record.organizationId,
+      stripeInvoiceId: params.stripeIds.stripeInvoiceId,
+      eligibleSubtotalMinor: params.record.eligibleSubtotalMinor,
+      expectedFeeMinor: params.record.expectedFeeMinor,
+      failureCode: failureCodeFromUnknown(error, params.failureCode),
+      deps: params.deps,
+      now: params.now,
+    });
+    return { status: 'missed', assessment: params.record };
+  }
+}
+
+async function alertSafely(params: {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeInvoiceId?: string | null;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  failureCode: string;
+  deps: KiloPassInvoiceCreatedDependencies;
+  now: Date;
+}): Promise<void> {
+  const sendAlert = params.deps.sendAlert ?? sendMissedServiceFeeAlert;
+  try {
+    await sendAlert({
+      assessmentKey: params.assessmentKey,
+      flow: params.flow,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeInvoiceId: params.stripeInvoiceId,
+      eligibleSubtotalMinor: params.eligibleSubtotalMinor,
+      expectedFeeMinor: params.expectedFeeMinor,
+      currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+      failureCode: params.failureCode,
+      attemptedAt: params.now,
+    });
+  } catch {
+    // Slack/Sentry failure must not change invoice-created outcome.
+  }
+}
+
+function invoiceStripeIds(invoice: Stripe.Invoice): ServiceFeeStripeIds {
+  return {
+    stripeInvoiceId: invoice.id,
+    stripeCustomerId: customerId(invoice.customer),
+  };
+}
+
+function customerId(
+  customer: string | Stripe.Customer | Stripe.DeletedCustomer | null | undefined
+): string | null {
+  if (typeof customer === 'string' && customer.trim()) return customer;
+  if (customer && typeof customer === 'object' && 'id' in customer && customer.id) {
+    return customer.id;
+  }
+  return null;
+}
+
+function unixToDate(value: number | null | undefined): Date | null {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) return null;
+  return new Date(value * 1000);
+}
+
+function failureCodeFromUnknown(error: unknown, fallback: string): string {
+  if (error instanceof Error && /^[a-z][a-z0-9_]{0,99}$/.test(error.message)) {
+    return error.message;
+  }
+  return fallback;
+}
+
+function skipped(): KiloPassInvoiceCreatedResult {
+  return { status: 'skipped', assessment: null };
+}
+
+export { SERVICE_FEE_FAILURE_APPLICATION };
diff --git a/apps/web/src/lib/service-fees/kilo-pass-classification-audit-script.test.ts b/apps/web/src/lib/service-fees/kilo-pass-classification-audit-script.test.ts
new file mode 100644
index 0000000000..c649538c38
--- /dev/null
+++ b/apps/web/src/lib/service-fees/kilo-pass-classification-audit-script.test.ts
@@ -0,0 +1,74 @@
+import { beforeEach, describe, expect, jest, test } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import { client as stripe } from '@/lib/stripe-client';
+import { retrieveStripeSubscriptionSnapshot } from '../../scripts/service-fees/kilo-pass-classification-audit';
+
+function subscriptionItem(id: string): Stripe.SubscriptionItem {
+  return {
+    id,
+    price: { id: `price_${id}`, product: `prod_${id}` },
+  } as Stripe.SubscriptionItem;
+}
+
+function subscription(): Stripe.Subscription {
+  return {
+    id: 'sub_audit',
+    status: 'active',
+    metadata: {},
+  } as Stripe.Subscription;
+}
+
+function itemPage(
+  data: Stripe.SubscriptionItem[],
+  hasMore: boolean
+): Stripe.ApiList<Stripe.SubscriptionItem> {
+  return {
+    object: 'list',
+    data,
+    has_more: hasMore,
+    url: '/v1/subscription_items',
+  };
+}
+
+describe('retrieveStripeSubscriptionSnapshot', () => {
+  const retrieve = jest.spyOn(stripe.subscriptions, 'retrieve');
+  const list = jest.spyOn(stripe.subscriptionItems, 'list');
+
+  beforeEach(() => {
+    retrieve.mockReset();
+    list.mockReset();
+    retrieve.mockResolvedValue(subscription() as never);
+  });
+
+  test('requests up to 100 expanded subscription items', async () => {
+    list.mockResolvedValue(itemPage([subscriptionItem('si_pass')], false) as never);
+
+    await expect(retrieveStripeSubscriptionSnapshot('sub_audit')).resolves.toMatchObject({
+      id: 'sub_audit',
+      items: [{ id: 'si_pass', priceId: 'price_si_pass', productId: 'prod_si_pass' }],
+    });
+    expect(retrieve).toHaveBeenCalledWith('sub_audit');
+    expect(list).toHaveBeenCalledWith({
+      subscription: 'sub_audit',
+      limit: 100,
+      expand: ['data.price'],
+    });
+  });
+
+  test('paginates instead of silently truncating subscription items', async () => {
+    list
+      .mockResolvedValueOnce(itemPage([subscriptionItem('si_1')], true) as never)
+      .mockResolvedValueOnce(itemPage([subscriptionItem('si_2')], false) as never);
+
+    await expect(retrieveStripeSubscriptionSnapshot('sub_audit')).resolves.toMatchObject({
+      items: [{ id: 'si_1' }, { id: 'si_2' }],
+    });
+    expect(list).toHaveBeenNthCalledWith(2, {
+      subscription: 'sub_audit',
+      limit: 100,
+      expand: ['data.price'],
+      starting_after: 'si_1',
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/kilo-pass-classification-audit.test.ts b/apps/web/src/lib/service-fees/kilo-pass-classification-audit.test.ts
new file mode 100644
index 0000000000..1197cfe90f
--- /dev/null
+++ b/apps/web/src/lib/service-fees/kilo-pass-classification-audit.test.ts
@@ -0,0 +1,324 @@
+import { describe, expect, it } from '@jest/globals';
+import {
+  auditKiloPassClassifications,
+  classifyOrganizationKiloPassSubscription,
+  classifyPersonalKiloPassSubscription,
+  evaluateKiloPassClassificationAudit,
+  type OrganizationKiloPassAuditRow,
+  type PersonalKiloPassAuditRow,
+  type StripeSubscriptionSnapshot,
+} from './kilo-pass-classification-audit';
+
+const KILO_PASS_PRICE = 'price_kilo_pass_49';
+const SEAT_PRODUCT = 'prod_seats';
+const knownKiloPassPriceIds = new Set([KILO_PASS_PRICE]);
+const seatProductIds = new Set([SEAT_PRODUCT]);
+
+function personalRow(overrides: Partial<PersonalKiloPassAuditRow> = {}): PersonalKiloPassAuditRow {
+  return {
+    id: 'kps_1',
+    kiloUserId: 'user_1',
+    stripeSubscriptionId: 'sub_personal',
+    status: 'active',
+    tier: 'tier_49',
+    cadence: 'monthly',
+    ...overrides,
+  };
+}
+
+function organizationRow(
+  overrides: Partial<OrganizationKiloPassAuditRow> = {}
+): OrganizationKiloPassAuditRow {
+  return {
+    id: 'kpoa_1',
+    organizationId: 'org_1',
+    providerSubscriptionId: 'sub_org',
+    providerSeatAddOnItemId: 'si_pass',
+    state: 'active',
+    purchaseChannel: 'self_serve',
+    ...overrides,
+  };
+}
+
+function personalSubscription(
+  overrides: Partial<StripeSubscriptionSnapshot> = {}
+): StripeSubscriptionSnapshot {
+  return {
+    id: 'sub_personal',
+    status: 'active',
+    metadata: {
+      type: 'kilo-pass',
+      kiloUserId: 'user_1',
+      tier: 'tier_49',
+      cadence: 'monthly',
+    },
+    items: [{ id: 'si_pass', priceId: KILO_PASS_PRICE, productId: 'prod_kilo_pass' }],
+    ...overrides,
+  };
+}
+
+function organizationSubscription(
+  overrides: Partial<StripeSubscriptionSnapshot> = {}
+): StripeSubscriptionSnapshot {
+  return {
+    id: 'sub_org',
+    status: 'active',
+    metadata: {
+      type: 'kilo-pass-org',
+      organizationId: 'org_1',
+      kiloUserId: 'user_1',
+      tier: 'tier_49',
+      cadence: 'monthly',
+    },
+    items: [
+      { id: 'si_seat', priceId: 'price_seats', productId: SEAT_PRODUCT },
+      { id: 'si_pass', priceId: KILO_PASS_PRICE, productId: 'prod_kilo_pass' },
+    ],
+    ...overrides,
+  };
+}
+
+describe('personal Kilo Pass classification', () => {
+  it('classifies an active Stripe-managed subscription by known price and personal metadata', () => {
+    const result = classifyPersonalKiloPassSubscription({
+      row: personalRow(),
+      subscription: personalSubscription(),
+      knownKiloPassPriceIds,
+    });
+
+    expect(result.classifiable).toBe(true);
+    expect(result.resolvedItemId).toBe('si_pass');
+    expect(result.issues).toEqual([]);
+  });
+
+  it('treats a known price without personal metadata as classifiable with a warning', () => {
+    const result = classifyPersonalKiloPassSubscription({
+      row: personalRow(),
+      subscription: personalSubscription({ metadata: {} }),
+      knownKiloPassPriceIds,
+    });
+
+    expect(result.classifiable).toBe(true);
+    expect(result.issues).toEqual([
+      { code: 'missing_personal_kilo_pass_metadata', severity: 'warning' },
+    ]);
+  });
+
+  it('rejects a personal subscription that also carries organization metadata', () => {
+    const result = classifyPersonalKiloPassSubscription({
+      row: personalRow(),
+      subscription: personalSubscription({
+        metadata: {
+          type: 'kilo-pass-org',
+          organizationId: 'org_1',
+          kiloUserId: 'user_1',
+          tier: 'tier_49',
+          cadence: 'monthly',
+        },
+      }),
+      knownKiloPassPriceIds,
+    });
+
+    expect(result.classifiable).toBe(false);
+    expect(result.issues.map(issue => issue.code)).toEqual([
+      'has_organization_kilo_pass_metadata',
+      'missing_personal_kilo_pass_metadata',
+    ]);
+  });
+
+  it('rejects a missing Stripe subscription and a subscription without a known Kilo Pass price', () => {
+    expect(
+      classifyPersonalKiloPassSubscription({
+        row: personalRow({ stripeSubscriptionId: null }),
+        subscription: undefined,
+        knownKiloPassPriceIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['missing_stripe_subscription_id']);
+
+    expect(
+      classifyPersonalKiloPassSubscription({
+        row: personalRow(),
+        subscription: null,
+        knownKiloPassPriceIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['stripe_subscription_not_found']);
+
+    expect(
+      classifyPersonalKiloPassSubscription({
+        row: personalRow(),
+        subscription: personalSubscription({
+          items: [{ id: 'si_other', priceId: 'price_other', productId: 'prod_other' }],
+        }),
+        knownKiloPassPriceIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['missing_known_kilo_pass_price']);
+  });
+});
+
+describe('organization Kilo Pass classification', () => {
+  it('resolves the bound non-seat add-on item before falling back to price search', () => {
+    const result = classifyOrganizationKiloPassSubscription({
+      row: organizationRow(),
+      subscription: organizationSubscription(),
+      knownKiloPassPriceIds,
+      seatProductIds,
+    });
+
+    expect(result.classifiable).toBe(true);
+    expect(result.resolvedItemId).toBe('si_pass');
+    expect(result.issues).toEqual([]);
+  });
+
+  it('falls back to a unique known non-seat price when the add-on id is unbound', () => {
+    const result = classifyOrganizationKiloPassSubscription({
+      row: organizationRow({ providerSeatAddOnItemId: null }),
+      subscription: organizationSubscription(),
+      knownKiloPassPriceIds,
+      seatProductIds,
+    });
+
+    expect(result.classifiable).toBe(true);
+    expect(result.resolvedItemId).toBe('si_pass');
+    expect(result.issues).toEqual([{ code: 'unresolved_kilo_pass_item', severity: 'warning' }]);
+  });
+
+  it('rejects org metadata that is missing, personal, or bound to a seat item', () => {
+    expect(
+      classifyOrganizationKiloPassSubscription({
+        row: organizationRow(),
+        subscription: organizationSubscription({ metadata: {} }),
+        knownKiloPassPriceIds,
+        seatProductIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['missing_organization_kilo_pass_metadata']);
+
+    expect(
+      classifyOrganizationKiloPassSubscription({
+        row: organizationRow(),
+        subscription: organizationSubscription({
+          metadata: {
+            type: 'kilo-pass',
+            kiloUserId: 'user_1',
+            tier: 'tier_49',
+            cadence: 'monthly',
+          },
+        }),
+        knownKiloPassPriceIds,
+        seatProductIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['has_personal_kilo_pass_metadata', 'missing_organization_kilo_pass_metadata']);
+
+    expect(
+      classifyOrganizationKiloPassSubscription({
+        row: organizationRow({ providerSeatAddOnItemId: 'si_seat' }),
+        subscription: organizationSubscription(),
+        knownKiloPassPriceIds,
+        seatProductIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['bound_add_on_item_is_seat']);
+  });
+
+  it('rejects a bound item that is missing or not a known Kilo Pass price', () => {
+    expect(
+      classifyOrganizationKiloPassSubscription({
+        row: organizationRow({ providerSeatAddOnItemId: 'si_missing' }),
+        subscription: organizationSubscription(),
+        knownKiloPassPriceIds,
+        seatProductIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['bound_add_on_item_not_found']);
+
+    expect(
+      classifyOrganizationKiloPassSubscription({
+        row: organizationRow({ providerSeatAddOnItemId: 'si_other' }),
+        subscription: organizationSubscription({
+          items: [{ id: 'si_other', priceId: 'price_other', productId: 'prod_other' }],
+        }),
+        knownKiloPassPriceIds,
+        seatProductIds,
+      }).issues.map(issue => issue.code)
+    ).toEqual(['bound_add_on_item_unknown_price']);
+  });
+
+  it('rejects multiple unbound known Kilo Pass items as ambiguous', () => {
+    const result = classifyOrganizationKiloPassSubscription({
+      row: organizationRow({ providerSeatAddOnItemId: null }),
+      subscription: organizationSubscription({
+        items: [
+          { id: 'si_pass_a', priceId: KILO_PASS_PRICE, productId: 'prod_kilo_pass' },
+          { id: 'si_pass_b', priceId: KILO_PASS_PRICE, productId: 'prod_kilo_pass' },
+        ],
+      }),
+      knownKiloPassPriceIds,
+      seatProductIds,
+    });
+
+    expect(result.classifiable).toBe(false);
+    expect(result.issues.map(issue => issue.code)).toEqual(['ambiguous_kilo_pass_items']);
+  });
+});
+
+describe('evaluateKiloPassClassificationAudit', () => {
+  it('loads subscriptions only through the injected retrieve function', async () => {
+    const retrieved: string[] = [];
+    const events: Array<Record<string, unknown>> = [];
+    const report = await auditKiloPassClassifications({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      knownKiloPassPriceIds,
+      seatProductIds,
+      store: {
+        listPersonalRows: async () => [personalRow()],
+        listOrganizationRows: async () => [organizationRow()],
+      },
+      retrieveSubscription: async subscriptionId => {
+        retrieved.push(subscriptionId);
+        return subscriptionId === 'sub_personal'
+          ? personalSubscription()
+          : organizationSubscription();
+      },
+      log: event => {
+        events.push(event);
+      },
+    });
+
+    expect(retrieved.sort()).toEqual(['sub_org', 'sub_personal']);
+    expect(report.classifiableCount).toBe(2);
+    expect(events[0]).toMatchObject({
+      event: 'service_fee.kilo_pass_classification_audit.started',
+      mode: 'read_only',
+    });
+    expect(events.at(-1)).toMatchObject({
+      event: 'service_fee.kilo_pass_classification_audit.completed',
+      unclassifiableCount: 0,
+    });
+  });
+
+  it('summarizes injected personal and organization rows without mutating them', () => {
+    const personal = personalRow();
+    const organization = organizationRow();
+    const report = evaluateKiloPassClassificationAudit({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      knownKiloPassPriceIds,
+      seatProductIds,
+      personalRows: [personal],
+      organizationRows: [organization],
+      subscriptionsById: new Map([
+        [personal.stripeSubscriptionId ?? '', personalSubscription()],
+        [organization.providerSubscriptionId ?? '', organizationSubscription()],
+      ]),
+    });
+
+    expect(report).toMatchObject({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      personalReviewed: 1,
+      organizationReviewed: 1,
+      classifiableCount: 2,
+      unclassifiableCount: 0,
+      warningCount: 0,
+    });
+    expect(report.results.map(result => result.kind)).toEqual([
+      'personal_kilo_pass',
+      'organization_kilo_pass',
+    ]);
+  });
+});
diff --git a/apps/web/src/lib/service-fees/kilo-pass-classification-audit.ts b/apps/web/src/lib/service-fees/kilo-pass-classification-audit.ts
new file mode 100644
index 0000000000..0133a0acac
--- /dev/null
+++ b/apps/web/src/lib/service-fees/kilo-pass-classification-audit.ts
@@ -0,0 +1,380 @@
+import { getOrganizationKiloPassMetadata } from '@/lib/kilo-pass-org/stripe-metadata';
+import { getKiloPassMetadataFromStripeMetadata } from '@/lib/kilo-pass/stripe-handlers-metadata';
+
+export const SERVICE_FEE_KILO_PASS_CLASSIFICATION_EVENT =
+  'service_fee.kilo_pass_classification_audit';
+
+export const LIVE_PERSONAL_KILO_PASS_STATUSES = [
+  'active',
+  'past_due',
+  'trialing',
+  'unpaid',
+] as const;
+
+export const LIVE_ORG_KILO_PASS_STATES = ['active', 'cancel_at_period_end'] as const;
+
+export type StripeSubscriptionItemSnapshot = {
+  id: string;
+  priceId: string | null;
+  productId: string | null;
+};
+
+export type StripeSubscriptionSnapshot = {
+  id: string;
+  status: string;
+  metadata: Record<string, string>;
+  items: readonly StripeSubscriptionItemSnapshot[];
+};
+
+export type PersonalKiloPassAuditRow = {
+  id: string;
+  kiloUserId: string;
+  stripeSubscriptionId: string | null;
+  status: string;
+  tier: string;
+  cadence: string;
+};
+
+export type OrganizationKiloPassAuditRow = {
+  id: string;
+  organizationId: string;
+  providerSubscriptionId: string | null;
+  providerSeatAddOnItemId: string | null;
+  state: string;
+  purchaseChannel: string;
+};
+
+export type KiloPassClassificationIssueCode =
+  | 'missing_stripe_subscription_id'
+  | 'stripe_subscription_not_found'
+  | 'missing_known_kilo_pass_price'
+  | 'has_organization_kilo_pass_metadata'
+  | 'has_personal_kilo_pass_metadata'
+  | 'missing_personal_kilo_pass_metadata'
+  | 'missing_organization_kilo_pass_metadata'
+  | 'bound_add_on_item_not_found'
+  | 'bound_add_on_item_is_seat'
+  | 'bound_add_on_item_unknown_price'
+  | 'ambiguous_kilo_pass_items'
+  | 'unresolved_kilo_pass_item';
+
+export type KiloPassClassificationIssue = {
+  code: KiloPassClassificationIssueCode;
+  severity: 'error' | 'warning';
+};
+
+export type KiloPassClassificationKind = 'personal_kilo_pass' | 'organization_kilo_pass';
+
+export type KiloPassClassificationResult = {
+  kind: KiloPassClassificationKind;
+  recordId: string;
+  stripeSubscriptionId: string | null;
+  classifiable: boolean;
+  resolvedItemId: string | null;
+  issues: KiloPassClassificationIssue[];
+};
+
+export type KiloPassClassificationAuditInput = {
+  generatedAtIso: string;
+  knownKiloPassPriceIds: ReadonlySet<string>;
+  seatProductIds: ReadonlySet<string>;
+  personalRows: readonly PersonalKiloPassAuditRow[];
+  organizationRows: readonly OrganizationKiloPassAuditRow[];
+  subscriptionsById: ReadonlyMap<string, StripeSubscriptionSnapshot | null>;
+};
+
+export type KiloPassClassificationAuditReport = {
+  generatedAtIso: string;
+  personalReviewed: number;
+  organizationReviewed: number;
+  classifiableCount: number;
+  unclassifiableCount: number;
+  warningCount: number;
+  results: KiloPassClassificationResult[];
+};
+
+export type RetrieveKiloPassSubscription = (
+  subscriptionId: string
+) => Promise<StripeSubscriptionSnapshot | null>;
+
+export type KiloPassClassificationAuditStore = {
+  listPersonalRows: () => Promise<readonly PersonalKiloPassAuditRow[]>;
+  listOrganizationRows: () => Promise<readonly OrganizationKiloPassAuditRow[]>;
+};
+
+export function classifyPersonalKiloPassSubscription(input: {
+  row: PersonalKiloPassAuditRow;
+  subscription: StripeSubscriptionSnapshot | null | undefined;
+  knownKiloPassPriceIds: ReadonlySet<string>;
+}): KiloPassClassificationResult {
+  const issues: KiloPassClassificationIssue[] = [];
+  if (!input.row.stripeSubscriptionId) {
+    issues.push({ code: 'missing_stripe_subscription_id', severity: 'error' });
+    return personalResult(input.row, null, issues);
+  }
+  if (!input.subscription) {
+    issues.push({ code: 'stripe_subscription_not_found', severity: 'error' });
+    return personalResult(input.row, null, issues);
+  }
+
+  const personalMetadata = getKiloPassMetadataFromStripeMetadata(input.subscription.metadata);
+  const organizationMetadata = getOrganizationKiloPassMetadata(input.subscription.metadata);
+  const knownPriceItems = input.subscription.items.filter(
+    item => item.priceId !== null && input.knownKiloPassPriceIds.has(item.priceId)
+  );
+
+  if (organizationMetadata) {
+    issues.push({ code: 'has_organization_kilo_pass_metadata', severity: 'error' });
+  }
+  if (knownPriceItems.length === 0) {
+    issues.push({ code: 'missing_known_kilo_pass_price', severity: 'error' });
+  }
+  if (!personalMetadata) {
+    issues.push({
+      code: 'missing_personal_kilo_pass_metadata',
+      severity: knownPriceItems.length > 0 && !organizationMetadata ? 'warning' : 'error',
+    });
+  }
+
+  return personalResult(input.row, knownPriceItems[0]?.id ?? null, issues);
+}
+
+export function classifyOrganizationKiloPassSubscription(input: {
+  row: OrganizationKiloPassAuditRow;
+  subscription: StripeSubscriptionSnapshot | null | undefined;
+  knownKiloPassPriceIds: ReadonlySet<string>;
+  seatProductIds: ReadonlySet<string>;
+}): KiloPassClassificationResult {
+  const issues: KiloPassClassificationIssue[] = [];
+  if (!input.row.providerSubscriptionId) {
+    issues.push({ code: 'missing_stripe_subscription_id', severity: 'error' });
+    return organizationResult(input.row, null, issues);
+  }
+  if (!input.subscription) {
+    issues.push({ code: 'stripe_subscription_not_found', severity: 'error' });
+    return organizationResult(input.row, null, issues);
+  }
+
+  const personalMetadata = getKiloPassMetadataFromStripeMetadata(input.subscription.metadata);
+  const organizationMetadata = getOrganizationKiloPassMetadata(input.subscription.metadata);
+  if (personalMetadata) {
+    issues.push({ code: 'has_personal_kilo_pass_metadata', severity: 'error' });
+  }
+  if (!organizationMetadata) {
+    issues.push({ code: 'missing_organization_kilo_pass_metadata', severity: 'error' });
+  }
+
+  const resolved = resolveOrganizationKiloPassItem({
+    row: input.row,
+    subscription: input.subscription,
+    knownKiloPassPriceIds: input.knownKiloPassPriceIds,
+    seatProductIds: input.seatProductIds,
+  });
+  issues.push(...resolved.issues);
+
+  return organizationResult(input.row, resolved.itemId, issues);
+}
+
+export async function auditKiloPassClassifications(input: {
+  generatedAtIso?: string;
+  knownKiloPassPriceIds: ReadonlySet<string>;
+  seatProductIds: ReadonlySet<string>;
+  store: KiloPassClassificationAuditStore;
+  retrieveSubscription: RetrieveKiloPassSubscription;
+  log?: (event: Record<string, unknown>) => void;
+}): Promise<KiloPassClassificationAuditReport> {
+  const generatedAtIso = input.generatedAtIso ?? new Date().toISOString();
+  const log = input.log ?? defaultLog;
+  const personalRows = await input.store.listPersonalRows();
+  const organizationRows = await input.store.listOrganizationRows();
+  const subscriptionIds = uniqueIds([
+    ...personalRows.map(row => row.stripeSubscriptionId),
+    ...organizationRows.map(row => row.providerSubscriptionId),
+  ]);
+  const subscriptionsById = new Map<string, StripeSubscriptionSnapshot | null>();
+
+  log({
+    event: `${SERVICE_FEE_KILO_PASS_CLASSIFICATION_EVENT}.started`,
+    mode: 'read_only',
+    generatedAtIso,
+    personalCandidates: personalRows.length,
+    organizationCandidates: organizationRows.length,
+    stripeSubscriptionIds: subscriptionIds.length,
+  });
+
+  for (const subscriptionId of subscriptionIds) {
+    subscriptionsById.set(subscriptionId, await input.retrieveSubscription(subscriptionId));
+  }
+
+  const report = evaluateKiloPassClassificationAudit({
+    generatedAtIso,
+    knownKiloPassPriceIds: input.knownKiloPassPriceIds,
+    seatProductIds: input.seatProductIds,
+    personalRows,
+    organizationRows,
+    subscriptionsById,
+  });
+
+  for (const result of report.results) {
+    if (result.issues.length === 0) continue;
+    log({
+      event: `${SERVICE_FEE_KILO_PASS_CLASSIFICATION_EVENT}.result`,
+      kind: result.kind,
+      recordId: result.recordId,
+      stripeSubscriptionId: result.stripeSubscriptionId,
+      classifiable: result.classifiable,
+      resolvedItemId: result.resolvedItemId,
+      issues: result.issues,
+    });
+  }
+
+  log({
+    event: `${SERVICE_FEE_KILO_PASS_CLASSIFICATION_EVENT}.completed`,
+    mode: 'read_only',
+    generatedAtIso: report.generatedAtIso,
+    personalReviewed: report.personalReviewed,
+    organizationReviewed: report.organizationReviewed,
+    classifiableCount: report.classifiableCount,
+    unclassifiableCount: report.unclassifiableCount,
+    warningCount: report.warningCount,
+  });
+
+  return report;
+}
+
+export function evaluateKiloPassClassificationAudit(
+  input: KiloPassClassificationAuditInput
+): KiloPassClassificationAuditReport {
+  const results: KiloPassClassificationResult[] = [];
+
+  for (const row of input.personalRows) {
+    const subscription = row.stripeSubscriptionId
+      ? input.subscriptionsById.get(row.stripeSubscriptionId)
+      : undefined;
+    results.push(
+      classifyPersonalKiloPassSubscription({
+        row,
+        subscription,
+        knownKiloPassPriceIds: input.knownKiloPassPriceIds,
+      })
+    );
+  }
+
+  for (const row of input.organizationRows) {
+    const subscription = row.providerSubscriptionId
+      ? input.subscriptionsById.get(row.providerSubscriptionId)
+      : undefined;
+    results.push(
+      classifyOrganizationKiloPassSubscription({
+        row,
+        subscription,
+        knownKiloPassPriceIds: input.knownKiloPassPriceIds,
+        seatProductIds: input.seatProductIds,
+      })
+    );
+  }
+
+  return {
+    generatedAtIso: input.generatedAtIso,
+    personalReviewed: input.personalRows.length,
+    organizationReviewed: input.organizationRows.length,
+    classifiableCount: results.filter(result => result.classifiable).length,
+    unclassifiableCount: results.filter(result => !result.classifiable).length,
+    warningCount: results.reduce(
+      (count, result) => count + result.issues.filter(issue => issue.severity === 'warning').length,
+      0
+    ),
+    results,
+  };
+}
+
+function resolveOrganizationKiloPassItem(input: {
+  row: OrganizationKiloPassAuditRow;
+  subscription: StripeSubscriptionSnapshot;
+  knownKiloPassPriceIds: ReadonlySet<string>;
+  seatProductIds: ReadonlySet<string>;
+}): { itemId: string | null; issues: KiloPassClassificationIssue[] } {
+  const issues: KiloPassClassificationIssue[] = [];
+  const boundItemId = input.row.providerSeatAddOnItemId;
+  if (boundItemId && !boundItemId.startsWith('pending:')) {
+    const boundItem = input.subscription.items.find(item => item.id === boundItemId);
+    if (!boundItem) {
+      issues.push({ code: 'bound_add_on_item_not_found', severity: 'error' });
+      return { itemId: null, issues };
+    }
+    if (isSeatItem(boundItem, input.seatProductIds)) {
+      issues.push({ code: 'bound_add_on_item_is_seat', severity: 'error' });
+      return { itemId: boundItem.id, issues };
+    }
+    if (!boundItem.priceId || !input.knownKiloPassPriceIds.has(boundItem.priceId)) {
+      issues.push({ code: 'bound_add_on_item_unknown_price', severity: 'error' });
+      return { itemId: boundItem.id, issues };
+    }
+    return { itemId: boundItem.id, issues };
+  }
+
+  const knownNonSeatItems = input.subscription.items.filter(
+    item =>
+      item.priceId !== null &&
+      input.knownKiloPassPriceIds.has(item.priceId) &&
+      !isSeatItem(item, input.seatProductIds)
+  );
+  if (knownNonSeatItems.length === 1) {
+    if (!boundItemId) {
+      issues.push({ code: 'unresolved_kilo_pass_item', severity: 'warning' });
+    }
+    return { itemId: knownNonSeatItems[0]?.id ?? null, issues };
+  }
+  if (knownNonSeatItems.length > 1) {
+    issues.push({ code: 'ambiguous_kilo_pass_items', severity: 'error' });
+    return { itemId: null, issues };
+  }
+
+  issues.push({ code: 'unresolved_kilo_pass_item', severity: 'error' });
+  return { itemId: null, issues };
+}
+
+function isSeatItem(
+  item: StripeSubscriptionItemSnapshot,
+  seatProductIds: ReadonlySet<string>
+): boolean {
+  return item.productId !== null && seatProductIds.has(item.productId);
+}
+
+function personalResult(
+  row: PersonalKiloPassAuditRow,
+  resolvedItemId: string | null,
+  issues: KiloPassClassificationIssue[]
+): KiloPassClassificationResult {
+  return {
+    kind: 'personal_kilo_pass',
+    recordId: row.id,
+    stripeSubscriptionId: row.stripeSubscriptionId,
+    classifiable: issues.every(issue => issue.severity !== 'error'),
+    resolvedItemId,
+    issues,
+  };
+}
+
+function organizationResult(
+  row: OrganizationKiloPassAuditRow,
+  resolvedItemId: string | null,
+  issues: KiloPassClassificationIssue[]
+): KiloPassClassificationResult {
+  return {
+    kind: 'organization_kilo_pass',
+    recordId: row.id,
+    stripeSubscriptionId: row.providerSubscriptionId,
+    classifiable: issues.every(issue => issue.severity !== 'error'),
+    resolvedItemId,
+    issues,
+  };
+}
+
+function uniqueIds(values: Array<string | null>): string[] {
+  return [...new Set(values.filter((value): value is string => Boolean(value)))];
+}
+
+function defaultLog(event: Record<string, unknown>): void {
+  console.log(JSON.stringify(event));
+}
diff --git a/apps/web/src/lib/service-fees/organization-exemptions.test.ts b/apps/web/src/lib/service-fees/organization-exemptions.test.ts
new file mode 100644
index 0000000000..8c63acf492
--- /dev/null
+++ b/apps/web/src/lib/service-fees/organization-exemptions.test.ts
@@ -0,0 +1,179 @@
+import { describe, expect, test } from '@jest/globals';
+
+import {
+  OrganizationServiceFeeExemptionError,
+  getEffectiveOrganizationServiceFeeExemption,
+  getOrganizationServiceFeeExemption,
+  normalizeOrganizationExemptionTimestamp,
+  normalizeOrganizationServiceFeeExemptionReason,
+  organizationServiceFeeExemptionLockKey,
+  setOrganizationServiceFeeExemption,
+  type OrganizationServiceFeeExemptionRecord,
+  type OrganizationServiceFeeExemptionStore,
+} from '@/lib/service-fees/organization-exemptions';
+
+function createMemoryExemptionStore(options?: {
+  activeOrganizationIds?: Iterable<string>;
+}): OrganizationServiceFeeExemptionStore & {
+  calls: string[];
+} {
+  const active = new Set(options?.activeOrganizationIds ?? []);
+  const history: OrganizationServiceFeeExemptionRecord[] = [];
+  const calls: string[] = [];
+
+  const store: OrganizationServiceFeeExemptionStore & { calls: string[] } = {
+    calls,
+    async transact(fn) {
+      calls.push('transact');
+      return fn(store);
+    },
+    async lockOrganization(organizationId) {
+      calls.push(`lock:${organizationId}`);
+    },
+    async findActiveOrganization(organizationId) {
+      calls.push(`findOrg:${organizationId}`);
+      return active.has(organizationId) ? { id: organizationId } : null;
+    },
+    async findAtOrBefore(organizationId, at) {
+      const atMs = at.getTime();
+      return (
+        history
+          .filter(
+            row =>
+              row.organizationId === organizationId && new Date(row.createdAt).getTime() <= atMs
+          )
+          .at(-1) ?? null
+      );
+    },
+    async listNewestFirst(organizationId) {
+      return history
+        .filter(row => row.organizationId === organizationId)
+        .slice()
+        .reverse();
+    },
+    async getCurrent(organizationId) {
+      return history.filter(row => row.organizationId === organizationId).at(-1) ?? null;
+    },
+    async insert(record) {
+      calls.push(`insert:${record.id}`);
+      history.push(record);
+      return record;
+    },
+  };
+
+  return store;
+}
+
+const ORG_A = '11111111-1111-4111-8111-111111111111';
+const ORG_B = '22222222-2222-4222-8222-222222222222';
+
+describe('organization service fee exemptions', () => {
+  test('normalizes production timestamptz text and trims reasons', () => {
+    expect(normalizeOrganizationExemptionTimestamp('2026-04-29 01:16:12.945+00')).toBe(
+      '2026-04-29T01:16:12.945Z'
+    );
+    expect(normalizeOrganizationServiceFeeExemptionReason('  granted for nonprofit  ')).toBe(
+      'granted for nonprofit'
+    );
+    expect(() => normalizeOrganizationServiceFeeExemptionReason('no')).toThrow(
+      OrganizationServiceFeeExemptionError
+    );
+    expect(() => normalizeOrganizationServiceFeeExemptionReason('x'.repeat(501))).toThrow(
+      /3 to 500/
+    );
+    expect(organizationServiceFeeExemptionLockKey(ORG_A)).toBe(`service-fee-exemption:${ORG_A}`);
+  });
+
+  test('reads the latest history row at or before the eligibility instant', async () => {
+    const store = createMemoryExemptionStore({ activeOrganizationIds: [ORG_A] });
+    await setOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      isExempt: true,
+      reason: 'historical grant',
+      changedByKiloUserId: 'admin_1',
+      now: new Date('2026-08-01T00:00:00.000Z'),
+    });
+    await setOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      isExempt: false,
+      reason: 'revoked after review',
+      changedByKiloUserId: 'admin_2',
+      now: new Date('2026-10-01T00:00:00.000Z'),
+    });
+
+    const atGrant = await getEffectiveOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      at: new Date('2026-09-01T00:00:00.000Z'),
+    });
+    const atRevoke = await getEffectiveOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      at: new Date('2026-10-01T00:00:00.000Z'),
+    });
+    const otherOrg = await getEffectiveOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_B,
+      at: new Date('2026-09-01T00:00:00.000Z'),
+    });
+
+    expect(atGrant).toMatchObject({ isExempt: true, reason: 'historical grant' });
+    expect(atRevoke).toMatchObject({ isExempt: false, reason: 'revoked after review' });
+    expect(otherOrg).toBeNull();
+  });
+
+  test('set appends each change and allows the same state with a new reason', async () => {
+    const store = createMemoryExemptionStore({ activeOrganizationIds: [ORG_A] });
+
+    const first = await setOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      isExempt: true,
+      reason: '  initial grant  ',
+      changedByKiloUserId: 'admin_1',
+      now: new Date('2026-09-02T00:00:00.000Z'),
+    });
+    const second = await setOrganizationServiceFeeExemption({
+      store,
+      organizationId: ORG_A,
+      isExempt: true,
+      reason: 'renewed with new documentation',
+      changedByKiloUserId: 'admin_2',
+      now: new Date('2026-09-02T00:00:00.000Z'),
+    });
+
+    const view = await getOrganizationServiceFeeExemption({ store, organizationId: ORG_A });
+
+    expect(first.current.isExempt).toBe(true);
+    expect(first.current.reason).toBe('initial grant');
+    expect(second.current.id).toBe(second.history.id);
+    expect(second.current.createdAt).toBe('2026-09-02T00:00:00.001Z');
+    expect(view.history.map(row => row.reason)).toEqual([
+      'renewed with new documentation',
+      'initial grant',
+    ]);
+    expect(view.current?.reason).toBe('renewed with new documentation');
+    expect(store.calls.filter(call => call.startsWith('lock:'))).toHaveLength(2);
+    expect(store.calls.filter(call => call.startsWith('insert:'))).toHaveLength(2);
+  });
+
+  test('rejects missing or deleted organizations', async () => {
+    const store = createMemoryExemptionStore({ activeOrganizationIds: [] });
+
+    await expect(
+      setOrganizationServiceFeeExemption({
+        store,
+        organizationId: ORG_A,
+        isExempt: true,
+        reason: 'should not persist',
+        changedByKiloUserId: 'admin_1',
+      })
+    ).rejects.toMatchObject({ code: 'organization_not_found' });
+
+    const view = await getOrganizationServiceFeeExemption({ store, organizationId: ORG_A });
+    expect(view.current).toBeNull();
+    expect(view.history).toEqual([]);
+  });
+});
diff --git a/apps/web/src/lib/service-fees/organization-exemptions.ts b/apps/web/src/lib/service-fees/organization-exemptions.ts
new file mode 100644
index 0000000000..0494ce1392
--- /dev/null
+++ b/apps/web/src/lib/service-fees/organization-exemptions.ts
@@ -0,0 +1,185 @@
+import 'server-only';
+
+import { randomUUID } from 'node:crypto';
+
+import { sql } from 'drizzle-orm';
+
+export const ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH = 3;
+export const ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH = 500;
+export const ORGANIZATION_SERVICE_FEE_EXEMPTION_LOCK_PREFIX = 'service-fee-exemption:';
+
+export type OrganizationServiceFeeExemptionErrorCode = 'organization_not_found' | 'invalid_reason';
+
+export class OrganizationServiceFeeExemptionError extends Error {
+  readonly name = 'OrganizationServiceFeeExemptionError';
+
+  constructor(
+    readonly code: OrganizationServiceFeeExemptionErrorCode,
+    message: string
+  ) {
+    super(message);
+  }
+}
+
+export type OrganizationServiceFeeExemptionRecord = {
+  id: string;
+  organizationId: string;
+  isExempt: boolean;
+  reason: string;
+  changedByKiloUserId: string | null;
+  createdAt: string;
+};
+
+export type OrganizationServiceFeeExemptionView = {
+  current: OrganizationServiceFeeExemptionRecord | null;
+  history: OrganizationServiceFeeExemptionRecord[];
+};
+
+export type ActiveOrganizationRef = {
+  id: string;
+};
+
+/**
+ * Drizzle-compatible executor used for organization-scoped advisory locks and
+ * optional transactional wrappers. Matches `db` / `tx.execute` / `tx.transaction`.
+ */
+export type OrganizationExemptionExecutor = {
+  execute: (query: unknown) => Promise<unknown>;
+  transaction?: <T>(fn: (tx: OrganizationExemptionExecutor) => Promise<T>) => Promise<T>;
+};
+
+export type OrganizationServiceFeeExemptionStore = {
+  transact<T>(fn: (store: OrganizationServiceFeeExemptionStore) => Promise<T>): Promise<T>;
+  lockOrganization(organizationId: string): Promise<void>;
+  findActiveOrganization(organizationId: string): Promise<ActiveOrganizationRef | null>;
+  findAtOrBefore(
+    organizationId: string,
+    at: Date
+  ): Promise<OrganizationServiceFeeExemptionRecord | null>;
+  listNewestFirst(organizationId: string): Promise<OrganizationServiceFeeExemptionRecord[]>;
+  getCurrent(organizationId: string): Promise<OrganizationServiceFeeExemptionRecord | null>;
+  insert(
+    record: OrganizationServiceFeeExemptionRecord
+  ): Promise<OrganizationServiceFeeExemptionRecord>;
+};
+
+export function organizationServiceFeeExemptionLockKey(organizationId: string): string {
+  return `${ORGANIZATION_SERVICE_FEE_EXEMPTION_LOCK_PREFIX}${organizationId}`;
+}
+
+export async function acquireOrganizationServiceFeeExemptionLock(
+  executor: Pick<OrganizationExemptionExecutor, 'execute'>,
+  organizationId: string
+): Promise<void> {
+  await executor.execute(
+    sql`SELECT pg_catalog.pg_advisory_xact_lock(pg_catalog.hashtextextended(${organizationServiceFeeExemptionLockKey(organizationId)}, 0))`
+  );
+}
+
+/**
+ * Normalize a database timestamptz string (including production shapes such as
+ * `2026-04-29 01:16:12.945+00`) to UTC ISO-8601 at the API boundary.
+ */
+export function normalizeOrganizationExemptionTimestamp(value: string | Date): string {
+  const date = value instanceof Date ? value : new Date(value);
+  if (Number.isNaN(date.getTime())) {
+    throw new Error('organization exemption timestamp is invalid');
+  }
+  return date.toISOString();
+}
+
+export function normalizeOrganizationServiceFeeExemptionReason(reason: string): string {
+  const trimmed = reason.trim();
+  if (
+    trimmed.length < ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH ||
+    trimmed.length > ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH
+  ) {
+    throw new OrganizationServiceFeeExemptionError(
+      'invalid_reason',
+      `reason must be ${ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH} to ${ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH} characters after trimming`
+    );
+  }
+  return trimmed;
+}
+
+function withNormalizedTimestamp(
+  record: OrganizationServiceFeeExemptionRecord
+): OrganizationServiceFeeExemptionRecord {
+  return {
+    ...record,
+    createdAt: normalizeOrganizationExemptionTimestamp(record.createdAt),
+  };
+}
+
+export async function getEffectiveOrganizationServiceFeeExemption(params: {
+  store: OrganizationServiceFeeExemptionStore;
+  organizationId: string;
+  at: Date;
+}): Promise<OrganizationServiceFeeExemptionRecord | null> {
+  if (Number.isNaN(params.at.getTime())) {
+    throw new Error('eligibility timestamp is invalid');
+  }
+  const exemption = await params.store.findAtOrBefore(params.organizationId, params.at);
+  return exemption ? withNormalizedTimestamp(exemption) : null;
+}
+
+export async function getOrganizationServiceFeeExemption(params: {
+  store: OrganizationServiceFeeExemptionStore;
+  organizationId: string;
+}): Promise<OrganizationServiceFeeExemptionView> {
+  const [current, history] = await Promise.all([
+    params.store.getCurrent(params.organizationId),
+    params.store.listNewestFirst(params.organizationId),
+  ]);
+
+  return {
+    current: current ? withNormalizedTimestamp(current) : null,
+    history: history.map(withNormalizedTimestamp),
+  };
+}
+
+export async function setOrganizationServiceFeeExemption(params: {
+  store: OrganizationServiceFeeExemptionStore;
+  organizationId: string;
+  isExempt: boolean;
+  reason: string;
+  changedByKiloUserId: string | null;
+  now?: Date;
+}): Promise<{
+  current: OrganizationServiceFeeExemptionRecord;
+  history: OrganizationServiceFeeExemptionRecord;
+}> {
+  const reason = normalizeOrganizationServiceFeeExemptionReason(params.reason);
+  const requestedAt = params.now ?? new Date();
+  const requestedAtIso = normalizeOrganizationExemptionTimestamp(requestedAt);
+
+  return params.store.transact(async store => {
+    await store.lockOrganization(params.organizationId);
+
+    const organization = await store.findActiveOrganization(params.organizationId);
+    if (!organization) {
+      throw new OrganizationServiceFeeExemptionError(
+        'organization_not_found',
+        'organization is missing or deleted'
+      );
+    }
+
+    const current = await store.getCurrent(params.organizationId);
+    const currentAt = current ? new Date(current.createdAt).getTime() : Number.NEGATIVE_INFINITY;
+    const createdAt =
+      requestedAt.getTime() > currentAt ? requestedAtIso : new Date(currentAt + 1).toISOString();
+
+    const exemption = withNormalizedTimestamp(
+      await store.insert({
+        id: randomUUID(),
+        organizationId: params.organizationId,
+        isExempt: params.isExempt,
+        reason,
+        changedByKiloUserId: params.changedByKiloUserId,
+        createdAt,
+      })
+    );
+
+    return { current: exemption, history: exemption };
+  });
+}
diff --git a/apps/web/src/lib/service-fees/read-only.ts b/apps/web/src/lib/service-fees/read-only.ts
new file mode 100644
index 0000000000..88de4c7d0c
--- /dev/null
+++ b/apps/web/src/lib/service-fees/read-only.ts
@@ -0,0 +1,8 @@
+const MUTATING_FLAGS = new Set(['--execute', '--run-actually', '--write', '--mutate']);
+
+export function assertServiceFeeAuditReadOnly(args: readonly string[]): void {
+  const mutating = args.filter(arg => MUTATING_FLAGS.has(arg));
+  if (mutating.length > 0) {
+    throw new Error(`service_fee_audit_is_read_only rejected ${mutating.join(' ')}`);
+  }
+}
diff --git a/apps/web/src/lib/service-fees/refunds.test.ts b/apps/web/src/lib/service-fees/refunds.test.ts
new file mode 100644
index 0000000000..1ad6a8ad2b
--- /dev/null
+++ b/apps/web/src/lib/service-fees/refunds.test.ts
@@ -0,0 +1,842 @@
+import { describe, expect, test, jest } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import {
+  markServiceFeeAssessmentCharged,
+  prepareServiceFeeAssessmentDecision,
+  sanitizeServiceFeeAssessmentMetadata,
+  settleServiceFeeAssessment,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  applyDeferredServiceFeeRefunds,
+  buildServiceFeeRefundAllocationMetadata,
+  buildUnresolvedServiceFeeRefundAllocationAlertText,
+  calculateServiceFeeRefundIncrement,
+  observeServiceFeeChargeRefunded,
+  observeServiceFeeCreditNote,
+  parseServiceFeeRefundAllocationMetadata,
+  SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED,
+  ServiceFeeObservationNotReadyError,
+  type ServiceFeeChargeRefundObservation,
+  type ServiceFeeCreditNoteObservation,
+  type ServiceFeeRefundAssessmentStore,
+  type ServiceFeeRefundPage,
+  type ServiceFeeRefundStripeClient,
+  type UnresolvedServiceFeeRefundAllocationAlertInput,
+} from '@/lib/service-fees/refunds';
+
+const ACTIVATION = new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000);
+const ASSESSMENT_KEY = 'checkout:11111111-1111-4111-8111-111111111111';
+const CHARGE_ID = 'ch_test_1';
+const PAYMENT_INTENT_ID = 'pi_test_1';
+const INVOICE_ID = 'in_test_1';
+const PRODUCT_LINE_ID = 'il_product_1';
+const FEE_LINE_ID = 'il_fee_1';
+
+function cloneRecord(record: ServiceFeeAssessmentRecord): ServiceFeeAssessmentRecord {
+  return { ...record, metadata: { ...record.metadata } };
+}
+
+function createMemoryRefundStore(): ServiceFeeRefundAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeRefundAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripeChargeId(stripeChargeId) {
+      const row = [...rows.values()].find(candidate => candidate.stripeChargeId === stripeChargeId);
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripePaymentIntentId(stripePaymentIntentId) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripePaymentIntentId === stripePaymentIntentId
+      );
+      return row ? cloneRecord(row) : null;
+    },
+    async findByStripeInvoiceId(stripeInvoiceId) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripeInvoiceId === stripeInvoiceId
+      );
+      return row ? cloneRecord(row) : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = cloneRecord(record);
+      rows.set(record.assessmentKey, copy);
+      return cloneRecord(copy);
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata:
+          patch.metadata !== undefined
+            ? sanitizeServiceFeeAssessmentMetadata(patch.metadata)
+            : { ...existing.metadata },
+      };
+      rows.set(assessmentKey, next);
+      return cloneRecord(next);
+    },
+  };
+  return store;
+}
+
+async function persistChargedAssessment(
+  store: ServiceFeeRefundAssessmentStore,
+  stripeIds: {
+    stripeChargeId?: string | null;
+    stripePaymentIntentId?: string | null;
+    stripeInvoiceId?: string | null;
+    stripeInvoiceFeeLineItemId?: string | null;
+  } = {
+    stripeChargeId: CHARGE_ID,
+    stripePaymentIntentId: PAYMENT_INTENT_ID,
+    stripeInvoiceId: INVOICE_ID,
+    stripeInvoiceFeeLineItemId: FEE_LINE_ID,
+  }
+) {
+  const decision = await prepareServiceFeeAssessmentDecision({
+    assessmentKey: ASSESSMENT_KEY,
+    flow: 'personal_top_up',
+    currency: 'usd',
+    eligibilityCreatedAt: ACTIVATION,
+    eligibleSubtotalMinor: 10_000,
+    kiloUserId: 'user_1',
+  });
+  await upsertServiceFeeAssessment({
+    store,
+    decision,
+    stripeIds,
+    now: ACTIVATION,
+  });
+  return markServiceFeeAssessmentCharged({
+    store,
+    assessmentKey: ASSESSMENT_KEY,
+    chargedFeeMinor: 500,
+    now: ACTIVATION,
+  });
+}
+
+async function persistSettledAssessment(
+  store: ServiceFeeRefundAssessmentStore,
+  stripeIds: {
+    stripeChargeId?: string | null;
+    stripePaymentIntentId?: string | null;
+    stripeInvoiceId?: string | null;
+    stripeInvoiceFeeLineItemId?: string | null;
+  } = {
+    stripeChargeId: CHARGE_ID,
+    stripePaymentIntentId: PAYMENT_INTENT_ID,
+    stripeInvoiceId: INVOICE_ID,
+    stripeInvoiceFeeLineItemId: FEE_LINE_ID,
+  }
+) {
+  await persistChargedAssessment(store, stripeIds);
+  return settleServiceFeeAssessment({
+    store,
+    assessmentKey: ASSESSMENT_KEY,
+    settledAt: ACTIVATION,
+    settledProductMinor: 10_000,
+    grossPaidMinor: 10_500,
+    chargedFeeMinor: 500,
+    now: ACTIVATION,
+  });
+}
+
+function refund(
+  overrides: Partial<Stripe.Refund> & Pick<Stripe.Refund, 'id' | 'amount'>
+): Stripe.Refund {
+  return {
+    object: 'refund',
+    balance_transaction: null,
+    charge: CHARGE_ID,
+    created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+    currency: 'usd',
+    metadata: {},
+    payment_intent: PAYMENT_INTENT_ID,
+    reason: null,
+    receipt_number: null,
+    source_transfer_reversal: null,
+    status: 'succeeded',
+    transfer_reversal: null,
+    ...overrides,
+  } as Stripe.Refund;
+}
+
+function charge(
+  overrides: Partial<ServiceFeeChargeRefundObservation> = {}
+): ServiceFeeChargeRefundObservation {
+  return {
+    id: CHARGE_ID,
+    amount: 10_500,
+    amount_refunded: 10_500,
+    payment_intent: PAYMENT_INTENT_ID,
+    invoice: INVOICE_ID,
+    refunds: { data: [], has_more: false },
+    metadata: {},
+    ...overrides,
+  };
+}
+
+function invoiceLine(id: string, amount: number, fee: boolean): Stripe.InvoiceLineItem {
+  return {
+    id,
+    object: 'line_item',
+    amount,
+    currency: 'usd',
+    description: fee ? 'Service fee (5%)' : 'Credits',
+    discountable: !fee,
+    discount_amounts: null,
+    discounts: [],
+    invoice: INVOICE_ID,
+    livemode: false,
+    metadata: fee
+      ? {
+          type: SERVICE_FEE_METADATA_TYPE,
+          serviceFeeVersion: SERVICE_FEE_VERSION,
+          serviceFeeAssessmentKey: ASSESSMENT_KEY,
+          serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+        }
+      : {},
+    parent: null,
+    period: { start: 1, end: 2 },
+    pretax_credit_amounts: null,
+    pricing: null,
+    quantity: 1,
+    subscription: null,
+    taxes: null,
+  } as Stripe.InvoiceLineItem;
+}
+
+function creditNoteLine(
+  id: string,
+  invoiceLineItem: string,
+  amount: number
+): Stripe.CreditNoteLineItem {
+  return {
+    id,
+    object: 'credit_note_line_item',
+    amount,
+    description: null,
+    discount_amount: 0,
+    discount_amounts: [],
+    invoice_line_item: invoiceLineItem,
+    livemode: false,
+    pretax_credit_amounts: [],
+    quantity: 1,
+    tax_rates: [],
+    taxes: null,
+    type: 'invoice_line_item',
+    unit_amount: amount,
+    unit_amount_decimal: String(amount),
+  } as Stripe.CreditNoteLineItem;
+}
+
+function creditNote(params: {
+  id: string;
+  lines: Stripe.CreditNoteLineItem[];
+  hasMore?: boolean;
+  status?: Stripe.CreditNote.Status;
+}): ServiceFeeCreditNoteObservation {
+  return {
+    id: params.id,
+    invoice: INVOICE_ID,
+    status: params.status ?? 'issued',
+    lines: {
+      object: 'list',
+      data: params.lines,
+      has_more: params.hasMore ?? false,
+      url: `/v1/credit_notes/${params.id}/lines`,
+    },
+  } as ServiceFeeCreditNoteObservation;
+}
+
+function createStripeMock(
+  options: {
+    refundPages?: Array<{ data: Stripe.Refund[]; has_more: boolean }>;
+    creditNotes?: ServiceFeeCreditNoteObservation[];
+    creditNoteLinePages?: Record<
+      string,
+      Array<{ data: Stripe.CreditNoteLineItem[]; has_more: boolean }>
+    >;
+    invoiceLines?: Stripe.InvoiceLineItem[];
+    listCreditNotes?: () => Promise<ServiceFeeRefundPage<ServiceFeeCreditNoteObservation>>;
+  } = {}
+): ServiceFeeRefundStripeClient & { refunds: { list: jest.Mock; create: jest.Mock } } {
+  const refundPages = options.refundPages ?? [];
+  let refundPageIndex = 0;
+  const listRefunds = jest.fn(async () => {
+    const page = refundPages[refundPageIndex] ?? { data: [], has_more: false };
+    refundPageIndex += 1;
+    return page;
+  });
+  const createRefund = jest.fn(async () => {
+    throw new Error('observe helpers must not create Stripe refunds');
+  });
+  const listCreditNotes = jest.fn(
+    options.listCreditNotes ??
+      (async () => ({
+        data: options.creditNotes ?? [],
+        has_more: false,
+      }))
+  );
+
+  return {
+    refunds: {
+      list: listRefunds,
+      create: createRefund,
+    },
+    creditNotes: {
+      list: listCreditNotes,
+      listLineItems: jest.fn(async (id: string) => {
+        const pages = options.creditNoteLinePages?.[id];
+        return pages?.[0] ?? { data: [], has_more: false };
+      }),
+    },
+    invoices: {
+      listLineItems: jest.fn(async () => ({
+        data: options.invoiceLines ?? [
+          invoiceLine(PRODUCT_LINE_ID, 10_000, false),
+          invoiceLine(FEE_LINE_ID, 500, true),
+        ],
+        has_more: false,
+      })),
+    },
+  };
+}
+
+describe('calculateServiceFeeRefundIncrement', () => {
+  test('returns the ops-doc incremental product plus fee and finishes at the original fee', () => {
+    const first = calculateServiceFeeRefundIncrement({
+      originalProductMinor: 4_900,
+      originalFeeMinor: 245,
+      alreadyRefundedProductMinor: 0,
+      alreadyRefundedFeeMinor: 0,
+      additionalProductRefundMinor: 2_000,
+    });
+    expect(first).toEqual({
+      cumulativeProductRefundMinor: 2_000,
+      cumulativeFeeRefundMinor: 100,
+      incrementalProductRefundMinor: 2_000,
+      incrementalFeeRefundMinor: 100,
+      incrementalGrossRefundMinor: 2_100,
+    });
+
+    const remainder = calculateServiceFeeRefundIncrement({
+      originalProductMinor: 4_900,
+      originalFeeMinor: 245,
+      alreadyRefundedProductMinor: first.cumulativeProductRefundMinor,
+      alreadyRefundedFeeMinor: first.cumulativeFeeRefundMinor,
+      additionalProductRefundMinor: 2_900,
+    });
+    expect(remainder).toEqual({
+      cumulativeProductRefundMinor: 4_900,
+      cumulativeFeeRefundMinor: 245,
+      incrementalProductRefundMinor: 2_900,
+      incrementalFeeRefundMinor: 145,
+      incrementalGrossRefundMinor: 3_045,
+    });
+  });
+
+  test('uses half-up on the aggregate and never drifts past the remaining fee', () => {
+    const increment = calculateServiceFeeRefundIncrement({
+      originalProductMinor: 10_000,
+      originalFeeMinor: 500,
+      alreadyRefundedProductMinor: 0,
+      alreadyRefundedFeeMinor: 0,
+      additionalProductRefundMinor: 3_333,
+    });
+    expect(increment.cumulativeFeeRefundMinor).toBe(167);
+    expect(increment.incrementalGrossRefundMinor).toBe(3_500);
+
+    let alreadyProduct = 0;
+    let alreadyFee = 0;
+    for (let step = 0; step < 10_000; step += 1) {
+      const next = calculateServiceFeeRefundIncrement({
+        originalProductMinor: 10_000,
+        originalFeeMinor: 500,
+        alreadyRefundedProductMinor: alreadyProduct,
+        alreadyRefundedFeeMinor: alreadyFee,
+        additionalProductRefundMinor: 1,
+      });
+      expect(next.incrementalFeeRefundMinor).toBeGreaterThanOrEqual(0);
+      expect(next.cumulativeFeeRefundMinor).toBeLessThanOrEqual(500);
+      alreadyProduct = next.cumulativeProductRefundMinor;
+      alreadyFee = next.cumulativeFeeRefundMinor;
+    }
+    expect(alreadyProduct).toBe(10_000);
+    expect(alreadyFee).toBe(500);
+
+    const capped = calculateServiceFeeRefundIncrement({
+      originalProductMinor: 10_000,
+      originalFeeMinor: 500,
+      alreadyRefundedProductMinor: 10_000,
+      alreadyRefundedFeeMinor: 500,
+      additionalProductRefundMinor: 50,
+    });
+    expect(capped).toEqual({
+      cumulativeProductRefundMinor: 10_000,
+      cumulativeFeeRefundMinor: 500,
+      incrementalProductRefundMinor: 0,
+      incrementalFeeRefundMinor: 0,
+      incrementalGrossRefundMinor: 0,
+    });
+  });
+});
+
+describe('observeServiceFeeChargeRefunded', () => {
+  test('maps a no-amount full remaining refund to full product and fee', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const stripe = createStripeMock();
+    const sendAlert = jest.fn(
+      async (_input: UnresolvedServiceFeeRefundAllocationAlertInput) => undefined
+    );
+
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 10_500,
+        refunds: {
+          data: [refund({ id: 're_full', amount: 10_500 })],
+          has_more: false,
+        },
+      }),
+      stripe,
+      deps: { sendAlert },
+    });
+
+    expect(result.status).toBe('full');
+    expect(result.createdStripeRefund).toBe(false);
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      refundedProductMinor: 10_000,
+      refundedFeeMinor: 500,
+      refundedGrossMinor: 10_500,
+      metadata: {},
+    });
+    expect(sendAlert).not.toHaveBeenCalled();
+    expect(stripe.refunds.create).not.toHaveBeenCalled();
+  });
+
+  test('records unresolved metadata when credit-note lookup throws and never auto-refunds', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const stripe = createStripeMock({
+      listCreditNotes: async () => {
+        throw new Error('stripe unavailable');
+      },
+    });
+    const sendAlert = jest.fn(
+      async (_input: UnresolvedServiceFeeRefundAllocationAlertInput) => undefined
+    );
+
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 2_000,
+        refunds: {
+          data: [refund({ id: 're_partial_lookup_failed', amount: 2_000 })],
+          has_more: false,
+        },
+      }),
+      stripe,
+      deps: { sendAlert },
+    });
+
+    expect(result.status).toBe('unresolved');
+    expect(result.createdStripeRefund).toBe(false);
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+      refundedGrossMinor: 2_000,
+      metadata: { refund_allocation_unresolved: true },
+    });
+    expect(sendAlert).toHaveBeenCalledTimes(1);
+    expect(stripe.refunds.create).not.toHaveBeenCalled();
+  });
+
+  test('records unresolved metadata and never auto-refunds an ambiguous partial charge refund', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const stripe = createStripeMock();
+    const sendAlert = jest.fn(
+      async (_input: UnresolvedServiceFeeRefundAllocationAlertInput) => undefined
+    );
+
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 2_000,
+        refunds: {
+          data: [refund({ id: 're_partial', amount: 2_000 })],
+          has_more: false,
+        },
+      }),
+      stripe,
+      deps: { sendAlert },
+    });
+
+    expect(result.status).toBe('unresolved');
+    expect(result.createdStripeRefund).toBe(false);
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+      refundedGrossMinor: 2_000,
+      metadata: { refund_allocation_unresolved: true },
+    });
+    expect(sendAlert).toHaveBeenCalledTimes(1);
+    const alert = sendAlert.mock.calls[0]?.[0];
+    expect(alert.assessmentKey).toBe(ASSESSMENT_KEY);
+    expect(buildUnresolvedServiceFeeRefundAllocationAlertText(alert)).toContain(
+      `failure_code=${SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED}`
+    );
+    expect(stripe.refunds.create).not.toHaveBeenCalled();
+  });
+
+  test('applies a supplied trusted Kilo allocation on a partial refund', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const stripe = createStripeMock();
+
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 2_100,
+        refunds: {
+          data: [refund({ id: 're_kilo', amount: 2_100 })],
+          has_more: false,
+        },
+      }),
+      stripe,
+      trustedAllocation: { productMinor: 2_000, feeMinor: 100 },
+    });
+
+    expect(result.status).toBe('allocated');
+    expect(result.assessment).toMatchObject({
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+      refundedGrossMinor: 2_100,
+      metadata: {},
+    });
+    expect(stripe.refunds.create).not.toHaveBeenCalled();
+  });
+
+  test('paginates an incomplete refund list before trusting Kilo refund metadata', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const first = refund({
+      id: 're_page_1',
+      amount: 2_100,
+      metadata: buildServiceFeeRefundAllocationMetadata({ productMinor: 2_000, feeMinor: 100 }),
+    });
+    const second = refund({
+      id: 're_page_2',
+      amount: 2_100,
+      metadata: buildServiceFeeRefundAllocationMetadata({ productMinor: 2_000, feeMinor: 100 }),
+    });
+    const stripe = createStripeMock({
+      refundPages: [
+        { data: [first], has_more: true },
+        { data: [second], has_more: false },
+      ],
+    });
+
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 4_200,
+        refunds: { data: [first], has_more: true },
+      }),
+      stripe,
+    });
+
+    expect(stripe.refunds.list).toHaveBeenCalledTimes(2);
+    expect(stripe.refunds.list).toHaveBeenNthCalledWith(1, {
+      charge: CHARGE_ID,
+      limit: 100,
+    });
+    expect(stripe.refunds.list).toHaveBeenNthCalledWith(2, {
+      charge: CHARGE_ID,
+      limit: 100,
+      starting_after: 're_page_1',
+    });
+    expect(result.status).toBe('allocated');
+    expect(result.assessment).toMatchObject({
+      refundedProductMinor: 4_000,
+      refundedFeeMinor: 200,
+      refundedGrossMinor: 4_200,
+    });
+    expect(parseServiceFeeRefundAllocationMetadata(first.metadata)).toEqual({
+      productMinor: 2_000,
+      feeMinor: 100,
+    });
+    expect(stripe.refunds.create).not.toHaveBeenCalled();
+  });
+
+  test('resolves the assessment by payment intent or invoice when charge id is not yet linked', async () => {
+    const byPaymentIntent = createMemoryRefundStore();
+    await persistSettledAssessment(byPaymentIntent, {
+      stripeChargeId: null,
+      stripePaymentIntentId: PAYMENT_INTENT_ID,
+      stripeInvoiceId: null,
+    });
+    const piResult = await observeServiceFeeChargeRefunded({
+      store: byPaymentIntent,
+      charge: charge({
+        id: 'ch_unlinked',
+        invoice: null,
+        amount_refunded: 10_500,
+        refunds: { data: [refund({ id: 're_pi', amount: 10_500 })], has_more: false },
+      }),
+    });
+    expect(piResult.status).toBe('full');
+    expect(piResult.assessment?.assessmentKey).toBe(ASSESSMENT_KEY);
+
+    const byInvoice = createMemoryRefundStore();
+    await persistSettledAssessment(byInvoice, {
+      stripeChargeId: null,
+      stripePaymentIntentId: null,
+      stripeInvoiceId: INVOICE_ID,
+      stripeInvoiceFeeLineItemId: FEE_LINE_ID,
+    });
+    const invoiceResult = await observeServiceFeeChargeRefunded({
+      store: byInvoice,
+      charge: charge({
+        id: 'ch_invoice_only',
+        payment_intent: null,
+        amount_refunded: 10_500,
+        refunds: { data: [refund({ id: 're_in', amount: 10_500 })], has_more: false },
+      }),
+    });
+    expect(invoiceResult.status).toBe('full');
+    expect(invoiceResult.assessment?.refundedFeeMinor).toBe(500);
+  });
+
+  test('uses credit-note line allocation to resolve a previously unresolved partial refund', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const sendAlert = jest.fn(
+      async (_input: UnresolvedServiceFeeRefundAllocationAlertInput) => undefined
+    );
+    const note = creditNote({
+      id: 'cn_1',
+      lines: [
+        creditNoteLine('cnli_product', PRODUCT_LINE_ID, 2_000),
+        creditNoteLine('cnli_fee', FEE_LINE_ID, 100),
+      ],
+    });
+    const stripe = createStripeMock({
+      creditNotes: [note],
+      invoiceLines: [
+        invoiceLine(PRODUCT_LINE_ID, 10_000, false),
+        invoiceLine(FEE_LINE_ID, 500, true),
+      ],
+    });
+
+    const unresolved = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 2_100,
+        refunds: { data: [refund({ id: 're_open', amount: 2_100 })], has_more: false },
+      }),
+      deps: { sendAlert },
+    });
+    expect(unresolved.status).toBe('unresolved');
+    expect(unresolved.assessment?.metadata.refund_allocation_unresolved).toBe(true);
+
+    const allocated = await observeServiceFeeCreditNote({
+      store,
+      creditNote: note,
+      stripe,
+    });
+    expect(allocated.status).toBe('allocated');
+    expect(allocated.createdStripeRefund).toBe(false);
+    expect(allocated.assessment).toMatchObject({
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+      refundedGrossMinor: 2_100,
+      metadata: {},
+    });
+
+    const retry = await observeServiceFeeCreditNote({
+      store,
+      creditNote: note,
+      stripe,
+    });
+    expect(retry.assessment).toMatchObject({
+      refundedProductMinor: 2_000,
+      refundedFeeMinor: 100,
+    });
+  });
+
+  test('ignores refunds with no matching assessment', async () => {
+    const store = createMemoryRefundStore();
+    const result = await observeServiceFeeChargeRefunded({
+      store,
+      charge: charge({
+        amount_refunded: 10_500,
+        refunds: { data: [refund({ id: 're_unknown', amount: 10_500 })], has_more: false },
+      }),
+    });
+    expect(result).toEqual({
+      status: 'ignored',
+      assessment: null,
+      refundedGrossMinor: 10_500,
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+      createdStripeRefund: false,
+    });
+  });
+
+  test('out-of-order full refund before paid persists gross and converges after settlement', async () => {
+    const store = createMemoryRefundStore();
+    await persistChargedAssessment(store);
+    const fullCharge = charge({
+      amount_refunded: 10_500,
+      refunds: { data: [refund({ id: 're_before_paid', amount: 10_500 })], has_more: false },
+    });
+
+    await expect(
+      observeServiceFeeChargeRefunded({
+        store,
+        charge: fullCharge,
+      })
+    ).rejects.toBeInstanceOf(ServiceFeeObservationNotReadyError);
+
+    const pending = await store.findByAssessmentKey(ASSESSMENT_KEY);
+    expect(pending).toMatchObject({
+      settledAt: null,
+      refundedGrossMinor: 10_500,
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+      outcome: 'charged',
+    });
+
+    await expect(
+      observeServiceFeeChargeRefunded({
+        store,
+        charge: fullCharge,
+      })
+    ).rejects.toBeInstanceOf(ServiceFeeObservationNotReadyError);
+    expect(await store.findByAssessmentKey(ASSESSMENT_KEY)).toMatchObject({
+      refundedGrossMinor: 10_500,
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+    });
+
+    const settled = await settleServiceFeeAssessment({
+      store,
+      assessmentKey: ASSESSMENT_KEY,
+      settledAt: ACTIVATION,
+      settledProductMinor: 10_000,
+      grossPaidMinor: 10_500,
+      chargedFeeMinor: 500,
+      now: ACTIVATION,
+    });
+    const applied = await applyDeferredServiceFeeRefunds({
+      store,
+      assessment: settled,
+    });
+    expect(applied).toMatchObject({
+      refundedProductMinor: 10_000,
+      refundedFeeMinor: 500,
+      refundedGrossMinor: 10_500,
+      outcome: 'charged',
+    });
+
+    const replay = await observeServiceFeeChargeRefunded({
+      store,
+      charge: fullCharge,
+    });
+    expect(replay.status).toBe('full');
+    expect(replay.createdStripeRefund).toBe(false);
+    expect(replay.assessment).toMatchObject({
+      refundedProductMinor: 10_000,
+      refundedFeeMinor: 500,
+      refundedGrossMinor: 10_500,
+    });
+  });
+
+  test('throws for a credit note that arrives before settlement so Stripe retries', async () => {
+    const store = createMemoryRefundStore();
+    await persistChargedAssessment(store);
+    const note = creditNote({
+      id: 'cn_before_paid',
+      lines: [
+        creditNoteLine('cnli_product', PRODUCT_LINE_ID, 2_000),
+        creditNoteLine('cnli_fee', FEE_LINE_ID, 100),
+      ],
+    });
+
+    await expect(
+      observeServiceFeeCreditNote({
+        store,
+        creditNote: note,
+      })
+    ).rejects.toBeInstanceOf(ServiceFeeObservationNotReadyError);
+    expect(await store.findByAssessmentKey(ASSESSMENT_KEY)).toMatchObject({
+      settledAt: null,
+      refundedProductMinor: 0,
+      refundedFeeMinor: 0,
+    });
+  });
+
+  test('accumulates known credit-note line allocations across notes without drift', async () => {
+    const store = createMemoryRefundStore();
+    await persistSettledAssessment(store);
+    const first = creditNote({
+      id: 'cn_a',
+      lines: [
+        creditNoteLine('cnli_a_product', PRODUCT_LINE_ID, 2_000),
+        creditNoteLine('cnli_a_fee', FEE_LINE_ID, 100),
+      ],
+    });
+    const second = creditNote({
+      id: 'cn_b',
+      lines: [
+        creditNoteLine('cnli_b_product', PRODUCT_LINE_ID, 8_000),
+        creditNoteLine('cnli_b_fee', FEE_LINE_ID, 400),
+      ],
+    });
+    const stripe = createStripeMock({
+      creditNotes: [first, second],
+      invoiceLines: [
+        invoiceLine(PRODUCT_LINE_ID, 10_000, false),
+        invoiceLine(FEE_LINE_ID, 500, true),
+      ],
+    });
+
+    await observeServiceFeeCreditNote({ store, creditNote: first, stripe });
+    const afterSecond = await observeServiceFeeCreditNote({ store, creditNote: second, stripe });
+    expect(afterSecond.assessment).toMatchObject({
+      refundedProductMinor: 10_000,
+      refundedFeeMinor: 500,
+      outcome: 'charged',
+    });
+
+    const retry = await observeServiceFeeCreditNote({ store, creditNote: second, stripe });
+    expect(retry.assessment).toMatchObject({
+      refundedProductMinor: 10_000,
+      refundedFeeMinor: 500,
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/refunds.ts b/apps/web/src/lib/service-fees/refunds.ts
new file mode 100644
index 0000000000..67ad642db7
--- /dev/null
+++ b/apps/web/src/lib/service-fees/refunds.ts
@@ -0,0 +1,827 @@
+import 'server-only';
+
+import { captureException } from '@sentry/nextjs';
+import type Stripe from 'stripe';
+
+import {
+  AdminSlackNotificationError,
+  sendAdminSlackNotification,
+} from '@/lib/slack/admin-notifications';
+import {
+  observeServiceFeeAssessmentRefunds,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import { calculateCumulativeFeeRefundMinor } from '@/lib/service-fees/calculation';
+import {
+  isKiloClawInvoiceLine,
+  isSeatInvoiceLine,
+  isServiceFeeInvoiceLine,
+} from '@/lib/service-fees/stripe-lines';
+
+export const SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED = 'refund_allocation_unresolved';
+export const SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED_SENTRY_TAG =
+  'service_fee_refund_allocation_unresolved';
+export const SERVICE_FEE_REFUND_PRODUCT_METADATA_KEY = 'serviceFeeRefundProductMinor';
+export const SERVICE_FEE_REFUND_FEE_METADATA_KEY = 'serviceFeeRefundFeeMinor';
+
+const PAGE_SIZE = 100;
+const COUNTED_REFUND_STATUSES = new Set(['succeeded', 'pending']);
+
+export class ServiceFeeObservationNotReadyError extends Error {
+  readonly name = 'ServiceFeeObservationNotReadyError';
+
+  constructor(readonly assessmentKey: string) {
+    super(
+      `service fee assessment ${assessmentKey} cannot record product or fee observation until settlement`
+    );
+  }
+}
+
+export type ServiceFeeStripeReference = string | { id: string } | null | undefined;
+
+export type ServiceFeeRefundAssessmentStore = ServiceFeeAssessmentStore & {
+  findByStripeInvoiceId(stripeInvoiceId: string): Promise<ServiceFeeAssessmentRecord | null>;
+  findByStripePaymentIntentId(
+    stripePaymentIntentId: string
+  ): Promise<ServiceFeeAssessmentRecord | null>;
+  findByStripeChargeId(stripeChargeId: string): Promise<ServiceFeeAssessmentRecord | null>;
+};
+
+export type ServiceFeeRefundPage<T> = {
+  data: T[];
+  has_more: boolean;
+};
+
+export type ServiceFeeCreditNoteObservation = Pick<
+  Stripe.CreditNote,
+  'id' | 'invoice' | 'status' | 'lines'
+>;
+
+export type ServiceFeeRefundStripeClient = {
+  refunds: {
+    list(params: {
+      charge: string;
+      limit?: number;
+      starting_after?: string;
+    }): Promise<ServiceFeeRefundPage<Stripe.Refund>>;
+  };
+  creditNotes?: {
+    list(params: {
+      invoice: string;
+      limit?: number;
+      starting_after?: string;
+    }): Promise<ServiceFeeRefundPage<ServiceFeeCreditNoteObservation>>;
+    listLineItems(
+      id: string,
+      params?: { limit?: number; starting_after?: string }
+    ): Promise<ServiceFeeRefundPage<Stripe.CreditNoteLineItem>>;
+  };
+  invoices?: {
+    listLineItems(
+      invoiceId: string,
+      params?: Stripe.InvoiceListLineItemsParams
+    ): Promise<ServiceFeeRefundPage<Stripe.InvoiceLineItem>>;
+  };
+};
+
+export type ServiceFeeRefundAllocation = {
+  productMinor: number;
+  feeMinor: number;
+};
+
+export type ServiceFeeRefundIncrement = {
+  cumulativeProductRefundMinor: number;
+  cumulativeFeeRefundMinor: number;
+  incrementalProductRefundMinor: number;
+  incrementalFeeRefundMinor: number;
+  incrementalGrossRefundMinor: number;
+};
+
+export type ServiceFeeChargeRefundObservation = {
+  id: string;
+  amount: number;
+  amount_refunded: number;
+  payment_intent?: ServiceFeeStripeReference;
+  invoice?: ServiceFeeStripeReference;
+  refunds?: ServiceFeeRefundPage<Stripe.Refund> | null;
+  metadata?: Stripe.Metadata | null;
+};
+
+export type ServiceFeeRefundObservationStatus = 'ignored' | 'full' | 'allocated' | 'unresolved';
+
+export type ServiceFeeRefundObservationResult = {
+  status: ServiceFeeRefundObservationStatus;
+  assessment: ServiceFeeAssessmentRecord | null;
+  refundedGrossMinor: number;
+  refundedProductMinor: number;
+  refundedFeeMinor: number;
+  createdStripeRefund: false;
+};
+
+export type UnresolvedServiceFeeRefundAllocationAlertInput = {
+  assessmentKey: string;
+  flow: ServiceFeeAssessmentRecord['flow'];
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeCheckoutSessionId?: string | null;
+  stripeInvoiceId?: string | null;
+  stripePaymentIntentId?: string | null;
+  stripeChargeId?: string | null;
+  refundedGrossMinor: number;
+  chargeAmountMinor: number;
+  settledProductMinor: number;
+  chargedFeeMinor: number;
+  currency: string;
+  observedAt: Date | string;
+};
+
+export type ServiceFeeRefundObservationDependencies = {
+  sendAlert?: (input: UnresolvedServiceFeeRefundAllocationAlertInput) => Promise<void>;
+  captureException?: typeof captureException;
+};
+
+export function stripeReferenceId(reference: ServiceFeeStripeReference): string | null {
+  if (typeof reference === 'string') {
+    return reference.trim() ? reference : null;
+  }
+  if (reference && typeof reference.id === 'string' && reference.id.trim()) {
+    return reference.id;
+  }
+  return null;
+}
+
+export async function resolveServiceFeeAssessmentFromStripeRefs(params: {
+  store: ServiceFeeRefundAssessmentStore;
+  chargeId?: string | null;
+  paymentIntentId?: string | null;
+  invoiceId?: string | null;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  if (params.chargeId) {
+    const byCharge = await params.store.findByStripeChargeId(params.chargeId);
+    if (byCharge) return byCharge;
+  }
+  if (params.paymentIntentId) {
+    const byPaymentIntent = await params.store.findByStripePaymentIntentId(params.paymentIntentId);
+    if (byPaymentIntent) return byPaymentIntent;
+  }
+  if (params.invoiceId) {
+    const byInvoice = await params.store.findByStripeInvoiceId(params.invoiceId);
+    if (byInvoice) return byInvoice;
+  }
+  return null;
+}
+
+export function calculateServiceFeeRefundIncrement(input: {
+  originalProductMinor: number;
+  originalFeeMinor: number;
+  alreadyRefundedProductMinor: number;
+  alreadyRefundedFeeMinor: number;
+  additionalProductRefundMinor: number;
+}): ServiceFeeRefundIncrement {
+  assertNonNegativeSafeInteger(input.originalProductMinor, 'originalProductMinor');
+  assertNonNegativeSafeInteger(input.originalFeeMinor, 'originalFeeMinor');
+  assertNonNegativeSafeInteger(input.alreadyRefundedProductMinor, 'alreadyRefundedProductMinor');
+  assertNonNegativeSafeInteger(input.alreadyRefundedFeeMinor, 'alreadyRefundedFeeMinor');
+  assertNonNegativeSafeInteger(input.additionalProductRefundMinor, 'additionalProductRefundMinor');
+
+  if (input.alreadyRefundedProductMinor > input.originalProductMinor) {
+    throw new Error('alreadyRefundedProductMinor cannot exceed originalProductMinor');
+  }
+  if (input.alreadyRefundedFeeMinor > input.originalFeeMinor) {
+    throw new Error('alreadyRefundedFeeMinor cannot exceed originalFeeMinor');
+  }
+
+  const remainingProductMinor = input.originalProductMinor - input.alreadyRefundedProductMinor;
+  const incrementalProductRefundMinor = Math.min(
+    input.additionalProductRefundMinor,
+    remainingProductMinor
+  );
+  const cumulativeProductRefundMinor =
+    input.alreadyRefundedProductMinor + incrementalProductRefundMinor;
+  const targetFeeMinor = calculateCumulativeFeeRefundMinor({
+    originalProductMinor: input.originalProductMinor,
+    originalFeeMinor: input.originalFeeMinor,
+    cumulativeProductRefundMinor,
+  });
+  const remainingFeeMinor = input.originalFeeMinor - input.alreadyRefundedFeeMinor;
+  const incrementalFeeRefundMinor = Math.max(
+    0,
+    Math.min(targetFeeMinor - input.alreadyRefundedFeeMinor, remainingFeeMinor)
+  );
+
+  return {
+    cumulativeProductRefundMinor,
+    cumulativeFeeRefundMinor: input.alreadyRefundedFeeMinor + incrementalFeeRefundMinor,
+    incrementalProductRefundMinor,
+    incrementalFeeRefundMinor,
+    incrementalGrossRefundMinor: incrementalProductRefundMinor + incrementalFeeRefundMinor,
+  };
+}
+
+export function buildServiceFeeRefundAllocationMetadata(allocation: ServiceFeeRefundAllocation): {
+  [SERVICE_FEE_REFUND_PRODUCT_METADATA_KEY]: string;
+  [SERVICE_FEE_REFUND_FEE_METADATA_KEY]: string;
+} {
+  assertNonNegativeSafeInteger(allocation.productMinor, 'productMinor');
+  assertNonNegativeSafeInteger(allocation.feeMinor, 'feeMinor');
+  return {
+    [SERVICE_FEE_REFUND_PRODUCT_METADATA_KEY]: String(allocation.productMinor),
+    [SERVICE_FEE_REFUND_FEE_METADATA_KEY]: String(allocation.feeMinor),
+  };
+}
+
+export function parseServiceFeeRefundAllocationMetadata(
+  metadata: Stripe.Metadata | Stripe.MetadataParam | null | undefined
+): ServiceFeeRefundAllocation | null {
+  if (!metadata) return null;
+  const productMinor = parseMinorMetadata(metadata[SERVICE_FEE_REFUND_PRODUCT_METADATA_KEY]);
+  const feeMinor = parseMinorMetadata(metadata[SERVICE_FEE_REFUND_FEE_METADATA_KEY]);
+  if (productMinor === null || feeMinor === null) return null;
+  return { productMinor, feeMinor };
+}
+
+/**
+ * Observe `charge.refunded`. Never creates a Stripe refund. Full remaining
+ * no-amount Kilo refunds are treated as full product+fee once cumulative gross
+ * equals the charge amount.
+ *
+ * An existing unsettled assessment still records `refundedGrossMinor`. Product
+ * and fee columns cannot be written until settlement without violating refund
+ * caps, so this throws for webhook retry after persisting the gross.
+ */
+export async function observeServiceFeeChargeRefunded(params: {
+  store: ServiceFeeRefundAssessmentStore;
+  charge: ServiceFeeChargeRefundObservation;
+  stripe?: ServiceFeeRefundStripeClient;
+  trustedAllocation?: ServiceFeeRefundAllocation | null;
+  now?: Date;
+  deps?: ServiceFeeRefundObservationDependencies;
+}): Promise<ServiceFeeRefundObservationResult> {
+  const assessment = await resolveServiceFeeAssessmentFromStripeRefs({
+    store: params.store,
+    chargeId: params.charge.id,
+    paymentIntentId: stripeReferenceId(params.charge.payment_intent),
+    invoiceId: stripeReferenceId(params.charge.invoice),
+  });
+  if (!assessment) {
+    return ignoredResult(null, params.charge.amount_refunded);
+  }
+  if (!assessment.settledAt) {
+    const refundedGrossMinor = Math.max(0, params.charge.amount_refunded);
+    const isFullRefund = params.charge.amount > 0 && refundedGrossMinor >= params.charge.amount;
+    await persistRefundObservation({
+      store: params.store,
+      assessment,
+      refundedGrossMinor,
+      refundedProductMinor: assessment.refundedProductMinor,
+      refundedFeeMinor: assessment.refundedFeeMinor,
+      unresolved: !isFullRefund,
+      now: params.now,
+    });
+    throw new ServiceFeeObservationNotReadyError(assessment.assessmentKey);
+  }
+
+  const refundedGrossMinor = Math.max(0, params.charge.amount_refunded);
+  const isFullRefund = params.charge.amount > 0 && refundedGrossMinor >= params.charge.amount;
+  let refunds: { items: Stripe.Refund[]; complete: boolean };
+  try {
+    refunds = await listChargeRefunds(params.charge, params.stripe);
+  } catch {
+    refunds = { items: params.charge.refunds?.data ?? [], complete: false };
+  }
+
+  let allocation: ServiceFeeRefundAllocation | null = null;
+  let complete = false;
+
+  if (isFullRefund) {
+    allocation = {
+      productMinor: assessment.settledProductMinor,
+      feeMinor: assessment.chargedFeeMinor,
+    };
+    complete = true;
+  } else if (params.trustedAllocation) {
+    allocation = params.trustedAllocation;
+    complete = true;
+  } else if (refunds.complete) {
+    const fromRefundMetadata = sumRefundMetadataAllocations(refunds.items);
+    if (fromRefundMetadata) {
+      allocation = fromRefundMetadata;
+      complete = true;
+    }
+  }
+
+  if (!complete) {
+    try {
+      const fromCreditNotes = await collectCreditNoteAllocations({
+        assessment,
+        invoiceId: stripeReferenceId(params.charge.invoice) ?? assessment.stripeInvoiceId,
+        stripe: params.stripe,
+      });
+      if (
+        fromCreditNotes.complete &&
+        (fromCreditNotes.allocation.productMinor > 0 || fromCreditNotes.allocation.feeMinor > 0)
+      ) {
+        allocation = fromCreditNotes.allocation;
+        complete = true;
+      }
+    } catch {
+      // Listing credit notes or invoice lines is supporting evidence only.
+      // A Stripe follow-up failure must not block recording the observed gross.
+    }
+  }
+
+  if (!complete || !allocation) {
+    const unresolved = await persistRefundObservation({
+      store: params.store,
+      assessment,
+      refundedGrossMinor,
+      refundedProductMinor: assessment.refundedProductMinor,
+      refundedFeeMinor: assessment.refundedFeeMinor,
+      unresolved: true,
+      now: params.now,
+    });
+    await emitUnresolvedAllocationAlert(unresolved, params.charge, params.deps);
+    return {
+      status: 'unresolved',
+      assessment: unresolved,
+      refundedGrossMinor: unresolved.refundedGrossMinor,
+      refundedProductMinor: unresolved.refundedProductMinor,
+      refundedFeeMinor: unresolved.refundedFeeMinor,
+      createdStripeRefund: false,
+    };
+  }
+
+  const applied = applyAllocation(assessment, allocation);
+  const updated = await persistRefundObservation({
+    store: params.store,
+    assessment,
+    refundedGrossMinor,
+    refundedProductMinor: applied.productMinor,
+    refundedFeeMinor: applied.feeMinor,
+    unresolved: false,
+    now: params.now,
+  });
+
+  return {
+    status: isFullRefund ? 'full' : 'allocated',
+    assessment: updated,
+    refundedGrossMinor: updated.refundedGrossMinor,
+    refundedProductMinor: updated.refundedProductMinor,
+    refundedFeeMinor: updated.refundedFeeMinor,
+    createdStripeRefund: false,
+  };
+}
+
+/**
+ * Observe `credit_note.created` / `credit_note.updated`. Known invoice-line
+ * allocations are cumulative and idempotent. Unknown lines are ignored.
+ */
+export async function observeServiceFeeCreditNote(params: {
+  store: ServiceFeeRefundAssessmentStore;
+  creditNote: ServiceFeeCreditNoteObservation;
+  stripe?: ServiceFeeRefundStripeClient;
+  now?: Date;
+}): Promise<ServiceFeeRefundObservationResult> {
+  const invoiceId = stripeReferenceId(params.creditNote.invoice);
+  const assessment = await resolveServiceFeeAssessmentFromStripeRefs({
+    store: params.store,
+    invoiceId,
+  });
+  if (!assessment || !invoiceId) {
+    return ignoredResult(assessment, assessment?.refundedGrossMinor ?? 0);
+  }
+  if (!assessment.settledAt) {
+    throw new ServiceFeeObservationNotReadyError(assessment.assessmentKey);
+  }
+
+  const collected = await collectCreditNoteAllocations({
+    assessment,
+    invoiceId,
+    stripe: params.stripe,
+    currentCreditNote: params.creditNote,
+  });
+  if (
+    !collected.complete &&
+    collected.allocation.productMinor === 0 &&
+    collected.allocation.feeMinor === 0
+  ) {
+    return {
+      status: 'ignored',
+      assessment,
+      refundedGrossMinor: assessment.refundedGrossMinor,
+      refundedProductMinor: assessment.refundedProductMinor,
+      refundedFeeMinor: assessment.refundedFeeMinor,
+      createdStripeRefund: false,
+    };
+  }
+
+  const applied = applyAllocation(assessment, collected.allocation);
+  const updated = await persistRefundObservation({
+    store: params.store,
+    assessment,
+    refundedGrossMinor: assessment.refundedGrossMinor,
+    refundedProductMinor: applied.productMinor,
+    refundedFeeMinor: applied.feeMinor,
+    unresolved: false,
+    now: params.now,
+  });
+
+  return {
+    status: 'allocated',
+    assessment: updated,
+    refundedGrossMinor: updated.refundedGrossMinor,
+    refundedProductMinor: updated.refundedProductMinor,
+    refundedFeeMinor: updated.refundedFeeMinor,
+    createdStripeRefund: false,
+  };
+}
+
+export function buildUnresolvedServiceFeeRefundAllocationAlertText(
+  input: UnresolvedServiceFeeRefundAllocationAlertInput
+): string {
+  return [
+    'Service fee refund allocation unresolved',
+    `assessment_key=${input.assessmentKey}`,
+    `flow=${input.flow}`,
+    `owner_id=${nonEmpty(input.organizationId) ?? nonEmpty(input.kiloUserId) ?? 'unknown'}`,
+    `stripe_checkout_session_id=${nonEmpty(input.stripeCheckoutSessionId) ?? 'none'}`,
+    `stripe_invoice_id=${nonEmpty(input.stripeInvoiceId) ?? 'none'}`,
+    `stripe_payment_intent_id=${nonEmpty(input.stripePaymentIntentId) ?? 'none'}`,
+    `stripe_charge_id=${nonEmpty(input.stripeChargeId) ?? 'none'}`,
+    `refunded_gross_minor=${input.refundedGrossMinor}`,
+    `charge_amount_minor=${input.chargeAmountMinor}`,
+    `settled_product_minor=${input.settledProductMinor}`,
+    `charged_fee_minor=${input.chargedFeeMinor}`,
+    `currency=${input.currency}`,
+    `failure_code=${SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED}`,
+    `observed_at=${toIsoTimestamp(input.observedAt)}`,
+  ].join('\n');
+}
+
+/**
+ * Apply a refund observed before settlement. Only a full gross refund can be
+ * reconstructed from persisted columns; partial allocations wait for webhook
+ * retry after `settled_at` is written.
+ */
+export async function applyDeferredServiceFeeRefunds(params: {
+  store: ServiceFeeAssessmentStore;
+  assessment: ServiceFeeAssessmentRecord;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  const assessment = params.assessment;
+  if (!assessment.settledAt) return assessment;
+  if (assessment.grossPaidMinor <= 0 || assessment.refundedGrossMinor < assessment.grossPaidMinor) {
+    return assessment;
+  }
+  if (
+    assessment.refundedProductMinor === assessment.settledProductMinor &&
+    assessment.refundedFeeMinor === assessment.chargedFeeMinor
+  ) {
+    return assessment;
+  }
+
+  return persistRefundObservation({
+    store: params.store,
+    assessment,
+    refundedGrossMinor: assessment.refundedGrossMinor,
+    refundedProductMinor: assessment.settledProductMinor,
+    refundedFeeMinor: assessment.chargedFeeMinor,
+    unresolved: false,
+    now: params.now,
+  });
+}
+
+export async function sendUnresolvedServiceFeeRefundAllocationAlert(
+  input: UnresolvedServiceFeeRefundAllocationAlertInput,
+  deps: ServiceFeeRefundObservationDependencies = {}
+): Promise<void> {
+  const sendNotification = deps.sendAlert
+    ? async (alertInput: UnresolvedServiceFeeRefundAllocationAlertInput) => {
+        await deps.sendAlert?.(alertInput);
+      }
+    : async (alertInput: UnresolvedServiceFeeRefundAllocationAlertInput) => {
+        await sendAdminSlackNotification({
+          text: buildUnresolvedServiceFeeRefundAllocationAlertText(alertInput),
+          unfurl_links: false,
+          unfurl_media: false,
+        });
+      };
+  const capture = deps.captureException ?? captureException;
+
+  try {
+    await sendNotification(input);
+  } catch (error) {
+    const isSlackError = error instanceof AdminSlackNotificationError;
+    capture(isSlackError ? error : new Error('Admin Slack notification failed'), {
+      tags: { source: SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED_SENTRY_TAG },
+      extra: {
+        kind: isSlackError ? error.kind : 'unexpected',
+        status: isSlackError ? (error.status ?? null) : null,
+        assessmentKey: input.assessmentKey,
+        flow: input.flow,
+        failureCode: SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED,
+      },
+    });
+  }
+}
+
+function applyAllocation(
+  assessment: ServiceFeeAssessmentRecord,
+  allocation: ServiceFeeRefundAllocation
+): ServiceFeeRefundAllocation {
+  return {
+    productMinor: Math.max(
+      assessment.refundedProductMinor,
+      Math.min(allocation.productMinor, assessment.settledProductMinor)
+    ),
+    feeMinor: Math.max(
+      assessment.refundedFeeMinor,
+      Math.min(allocation.feeMinor, assessment.chargedFeeMinor)
+    ),
+  };
+}
+
+async function persistRefundObservation(params: {
+  store: ServiceFeeAssessmentStore;
+  assessment: ServiceFeeAssessmentRecord;
+  refundedGrossMinor: number;
+  refundedProductMinor: number;
+  refundedFeeMinor: number;
+  unresolved: boolean;
+  now?: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  return observeServiceFeeAssessmentRefunds({
+    store: params.store,
+    assessmentKey: params.assessment.assessmentKey,
+    refundedProductMinor: params.refundedProductMinor,
+    refundedFeeMinor: params.refundedFeeMinor,
+    refundedGrossMinor: params.refundedGrossMinor,
+    unresolved: params.unresolved,
+    now: params.now,
+  });
+}
+
+async function emitUnresolvedAllocationAlert(
+  assessment: ServiceFeeAssessmentRecord,
+  charge: ServiceFeeChargeRefundObservation,
+  deps: ServiceFeeRefundObservationDependencies | undefined
+): Promise<void> {
+  const input: UnresolvedServiceFeeRefundAllocationAlertInput = {
+    assessmentKey: assessment.assessmentKey,
+    flow: assessment.flow,
+    kiloUserId: assessment.kiloUserId,
+    organizationId: assessment.organizationId,
+    stripeCheckoutSessionId: assessment.stripeCheckoutSessionId,
+    stripeInvoiceId: assessment.stripeInvoiceId,
+    stripePaymentIntentId: assessment.stripePaymentIntentId,
+    stripeChargeId: assessment.stripeChargeId ?? charge.id,
+    refundedGrossMinor: assessment.refundedGrossMinor,
+    chargeAmountMinor: charge.amount,
+    settledProductMinor: assessment.settledProductMinor,
+    chargedFeeMinor: assessment.chargedFeeMinor,
+    currency: assessment.currency,
+    observedAt: new Date(),
+  };
+
+  if (deps?.sendAlert) {
+    try {
+      await deps.sendAlert(input);
+    } catch (error) {
+      const capture = deps.captureException ?? captureException;
+      capture(error instanceof Error ? error : new Error('Admin Slack notification failed'), {
+        tags: { source: SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED_SENTRY_TAG },
+        extra: {
+          kind: 'unexpected',
+          status: null,
+          assessmentKey: assessment.assessmentKey,
+          flow: assessment.flow,
+          failureCode: SERVICE_FEE_REFUND_ALLOCATION_UNRESOLVED,
+        },
+      });
+    }
+    return;
+  }
+
+  await sendUnresolvedServiceFeeRefundAllocationAlert(input, deps);
+}
+
+async function listChargeRefunds(
+  charge: ServiceFeeChargeRefundObservation,
+  stripe: ServiceFeeRefundStripeClient | undefined
+): Promise<{ items: Stripe.Refund[]; complete: boolean }> {
+  if (charge.refunds && !charge.refunds.has_more) {
+    return { items: charge.refunds.data, complete: true };
+  }
+  if (!stripe) {
+    return { items: charge.refunds?.data ?? [], complete: false };
+  }
+
+  const items = await listAllPages(startingAfter =>
+    stripe.refunds.list({
+      charge: charge.id,
+      limit: PAGE_SIZE,
+      ...(startingAfter ? { starting_after: startingAfter } : {}),
+    })
+  );
+  return { items, complete: true };
+}
+
+function sumRefundMetadataAllocations(
+  refunds: readonly Stripe.Refund[]
+): ServiceFeeRefundAllocation | null {
+  const counted = refunds.filter(refund => COUNTED_REFUND_STATUSES.has(refund.status ?? ''));
+  if (counted.length === 0) return null;
+
+  let productMinor = 0;
+  let feeMinor = 0;
+  for (const refund of counted) {
+    const allocation = parseServiceFeeRefundAllocationMetadata(refund.metadata);
+    if (!allocation) return null;
+    productMinor += allocation.productMinor;
+    feeMinor += allocation.feeMinor;
+  }
+  return { productMinor, feeMinor };
+}
+
+async function collectCreditNoteAllocations(params: {
+  assessment: ServiceFeeAssessmentRecord;
+  invoiceId: string | null;
+  stripe?: ServiceFeeRefundStripeClient;
+  currentCreditNote?: ServiceFeeCreditNoteObservation;
+}): Promise<{ allocation: ServiceFeeRefundAllocation; complete: boolean }> {
+  if (!params.invoiceId) {
+    return { allocation: { productMinor: 0, feeMinor: 0 }, complete: false };
+  }
+
+  const creditNotes = await listInvoiceCreditNotes(
+    params.invoiceId,
+    params.stripe,
+    params.currentCreditNote
+  );
+  const invoiceLines = await listInvoiceLines(params.invoiceId, params.stripe);
+  const invoiceLinesById = new Map(invoiceLines.items.map(line => [line.id, line]));
+
+  let productMinor = 0;
+  let feeMinor = 0;
+  let complete = creditNotes.complete && invoiceLines.complete;
+
+  for (const creditNote of creditNotes.items) {
+    if (creditNote.status === 'void') continue;
+    const lines = await listCreditNoteLines(creditNote, params.stripe);
+    if (!lines.complete) complete = false;
+    for (const line of lines.items) {
+      const classified = classifyCreditNoteLine(line, params.assessment, invoiceLinesById);
+      if (classified === 'fee') {
+        feeMinor += Math.max(0, line.amount);
+        continue;
+      }
+      if (classified === 'product') {
+        productMinor += Math.max(0, line.amount);
+        continue;
+      }
+      if (classified === 'ignored') continue;
+      complete = false;
+    }
+  }
+
+  return { allocation: { productMinor, feeMinor }, complete };
+}
+
+async function listInvoiceCreditNotes(
+  invoiceId: string,
+  stripe: ServiceFeeRefundStripeClient | undefined,
+  current?: ServiceFeeCreditNoteObservation
+): Promise<{ items: ServiceFeeCreditNoteObservation[]; complete: boolean }> {
+  const listCreditNotes = stripe?.creditNotes?.list;
+  if (!listCreditNotes) {
+    return {
+      items: current ? [current] : [],
+      complete: Boolean(current && current.lines && !current.lines.has_more),
+    };
+  }
+
+  const items = await listAllPages(startingAfter =>
+    listCreditNotes({
+      invoice: invoiceId,
+      limit: PAGE_SIZE,
+      ...(startingAfter ? { starting_after: startingAfter } : {}),
+    })
+  );
+  return { items, complete: true };
+}
+
+async function listCreditNoteLines(
+  creditNote: ServiceFeeCreditNoteObservation,
+  stripe: ServiceFeeRefundStripeClient | undefined
+): Promise<{ items: Stripe.CreditNoteLineItem[]; complete: boolean }> {
+  if (creditNote.lines && !creditNote.lines.has_more) {
+    return { items: creditNote.lines.data, complete: true };
+  }
+  const listLineItems = stripe?.creditNotes?.listLineItems;
+  if (!listLineItems) {
+    return { items: creditNote.lines?.data ?? [], complete: false };
+  }
+  const items = await listAllPages(startingAfter =>
+    listLineItems(creditNote.id, {
+      limit: PAGE_SIZE,
+      ...(startingAfter ? { starting_after: startingAfter } : {}),
+    })
+  );
+  return { items, complete: true };
+}
+
+async function listInvoiceLines(
+  invoiceId: string,
+  stripe: ServiceFeeRefundStripeClient | undefined
+): Promise<{ items: Stripe.InvoiceLineItem[]; complete: boolean }> {
+  const listLineItems = stripe?.invoices?.listLineItems;
+  if (!listLineItems) {
+    return { items: [], complete: false };
+  }
+  const items = await listAllPages(startingAfter =>
+    listLineItems(invoiceId, {
+      limit: PAGE_SIZE,
+      ...(startingAfter ? { starting_after: startingAfter } : {}),
+    })
+  );
+  return { items, complete: true };
+}
+
+function classifyCreditNoteLine(
+  line: Stripe.CreditNoteLineItem,
+  assessment: ServiceFeeAssessmentRecord,
+  invoiceLinesById: Map<string, Stripe.InvoiceLineItem>
+): 'fee' | 'product' | 'ignored' | 'unknown' {
+  if (line.type !== 'invoice_line_item' || !line.invoice_line_item) {
+    return line.amount === 0 ? 'ignored' : 'unknown';
+  }
+  if (line.invoice_line_item === assessment.stripeInvoiceFeeLineItemId) {
+    return 'fee';
+  }
+
+  const invoiceLine = invoiceLinesById.get(line.invoice_line_item);
+  if (!invoiceLine) {
+    return assessment.stripeInvoiceFeeLineItemId ? 'product' : 'unknown';
+  }
+  if (isServiceFeeInvoiceLine(invoiceLine)) return 'fee';
+  if (isSeatInvoiceLine(invoiceLine) || isKiloClawInvoiceLine(invoiceLine)) return 'ignored';
+  return 'product';
+}
+
+async function listAllPages<T extends { id: string }>(
+  listPage: (startingAfter: string | undefined) => Promise<ServiceFeeRefundPage<T>>
+): Promise<T[]> {
+  const rows: T[] = [];
+  let startingAfter: string | undefined;
+
+  for (;;) {
+    const page = await listPage(startingAfter);
+    rows.push(...page.data);
+    if (!page.has_more) return rows;
+    const cursor = page.data.at(-1)?.id;
+    if (!cursor) {
+      throw new Error('stripe page is marked has_more without a cursor');
+    }
+    startingAfter = cursor;
+  }
+}
+
+function ignoredResult(
+  assessment: ServiceFeeAssessmentRecord | null,
+  refundedGrossMinor: number
+): ServiceFeeRefundObservationResult {
+  return {
+    status: 'ignored',
+    assessment,
+    refundedGrossMinor,
+    refundedProductMinor: assessment?.refundedProductMinor ?? 0,
+    refundedFeeMinor: assessment?.refundedFeeMinor ?? 0,
+    createdStripeRefund: false,
+  };
+}
+
+function parseMinorMetadata(value: unknown): number | null {
+  if (typeof value !== 'string' && typeof value !== 'number') return null;
+  const parsed = typeof value === 'number' ? value : Number(value);
+  if (!Number.isSafeInteger(parsed) || parsed < 0) return null;
+  return parsed;
+}
+
+function nonEmpty(value: string | null | undefined): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+
+function toIsoTimestamp(value: Date | string): string {
+  const date = value instanceof Date ? value : new Date(value);
+  if (Number.isNaN(date.getTime())) return 'invalid_timestamp';
+  return date.toISOString();
+}
+
+function assertNonNegativeSafeInteger(value: number, label: string): void {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+    throw new Error(`${label} must be a non-negative safe integer`);
+  }
+}
diff --git a/apps/web/src/lib/service-fees/restricted-coupon-audit.test.ts b/apps/web/src/lib/service-fees/restricted-coupon-audit.test.ts
new file mode 100644
index 0000000000..49e0d99055
--- /dev/null
+++ b/apps/web/src/lib/service-fees/restricted-coupon-audit.test.ts
@@ -0,0 +1,351 @@
+import { describe, expect, it } from '@jest/globals';
+import {
+  AdminSlackNotificationError,
+  type AdminSlackNotification,
+} from '@/lib/slack/admin-notifications';
+import {
+  assertServiceFeeAuditReadOnly,
+  auditRestrictedCoupons,
+  buildRestrictedCouponSlackNotification,
+  couponSnapshotFromListCoupon,
+  couponSnapshotFromResolvedCoupon,
+  evaluateRestrictedCouponAudit,
+  findRestrictedFeeBearingCoupons,
+  listAllStripePages,
+  listCouponSnapshotsEnsuringAppliesTo,
+  parseRestrictedCouponAuditArgs,
+  SERVICE_FEE_RESTRICTED_COUPON_EVENT,
+  SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE,
+  type StripeCouponSnapshot,
+  type StripeCouponSnapshotSource,
+} from './restricted-coupon-audit';
+
+const FEE_PRODUCTS = new Set(['prod_kilo_pass', 'prod_top_up']);
+
+function coupon(overrides: Partial<StripeCouponSnapshot> = {}): StripeCouponSnapshot {
+  return {
+    id: 'co_restricted',
+    valid: true,
+    appliesToProductIds: ['prod_kilo_pass'],
+    ...overrides,
+  };
+}
+
+describe('findRestrictedFeeBearingCoupons', () => {
+  it('ignores unrestricted coupons and coupons restricted to non-fee products', () => {
+    expect(
+      findRestrictedFeeBearingCoupons({
+        coupons: [
+          coupon({ id: 'co_open', appliesToProductIds: null }),
+          coupon({ id: 'co_empty', appliesToProductIds: [] }),
+          coupon({ id: 'co_seats', appliesToProductIds: ['prod_seats'] }),
+          coupon({ id: 'co_claw', appliesToProductIds: ['prod_kiloclaw'] }),
+        ],
+        feeBearingProductIds: FEE_PRODUCTS,
+      })
+    ).toEqual([]);
+  });
+
+  it('lists coupons whose applies_to products intersect Kilo Pass or top-up products', () => {
+    expect(
+      findRestrictedFeeBearingCoupons({
+        coupons: [
+          coupon({ id: 'co_pass', appliesToProductIds: ['prod_kilo_pass', 'prod_seats'] }),
+          coupon({
+            id: 'co_topup',
+            valid: false,
+            appliesToProductIds: ['prod_top_up'],
+          }),
+          coupon({ id: 'co_other', appliesToProductIds: ['prod_seats'] }),
+        ],
+        feeBearingProductIds: FEE_PRODUCTS,
+      })
+    ).toEqual([
+      {
+        couponId: 'co_pass',
+        valid: true,
+        intersectingProductIds: ['prod_kilo_pass'],
+        appliesToProductCount: 2,
+      },
+      {
+        couponId: 'co_topup',
+        valid: false,
+        intersectingProductIds: ['prod_top_up'],
+        appliesToProductCount: 1,
+      },
+    ]);
+  });
+});
+
+describe('evaluateRestrictedCouponAudit', () => {
+  it('builds a namespaced non-sensitive alert only when restricted coupons exist', () => {
+    const clear = evaluateRestrictedCouponAudit({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      coupons: [coupon({ id: 'co_open', appliesToProductIds: null })],
+      feeBearingProductIds: FEE_PRODUCTS,
+    });
+    expect(clear.alert).toBeNull();
+    expect(clear.findings).toEqual([]);
+
+    const report = evaluateRestrictedCouponAudit({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      coupons: [
+        coupon({ id: 'co_pass' }),
+        coupon({ id: 'co_topup', appliesToProductIds: ['prod_top_up'] }),
+      ],
+      feeBearingProductIds: FEE_PRODUCTS,
+    });
+
+    expect(report.alert).toEqual({
+      namespace: SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE,
+      event: SERVICE_FEE_RESTRICTED_COUPON_EVENT,
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      couponCount: 2,
+      couponIds: ['co_pass', 'co_topup'],
+      intersectingProductIds: ['prod_kilo_pass', 'prod_top_up'],
+    });
+  });
+
+  it('keeps Slack copy limited to namespaced identifiers and validity', () => {
+    const report = evaluateRestrictedCouponAudit({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      coupons: [coupon({ id: 'co_pass', appliesToProductIds: ['prod_kilo_pass'] })],
+      feeBearingProductIds: FEE_PRODUCTS,
+    });
+    if (!report.alert) throw new Error('expected alert');
+
+    const notification = buildRestrictedCouponSlackNotification(report.alert, report.findings);
+    const serialized = JSON.stringify(notification);
+
+    expect(notification.text).toContain(SERVICE_FEE_RESTRICTED_COUPON_EVENT);
+    expect(serialized).toContain('co_pass');
+    expect(serialized).toContain('prod_kilo_pass');
+    expect(serialized).not.toContain('secret');
+    expect(serialized).not.toContain('sk_');
+    expect(serialized).not.toContain('@');
+  });
+});
+
+describe('restricted coupon audit args and orchestration', () => {
+  it('defaults to read-only alerting and rejects mutating flags', () => {
+    expect(parseRestrictedCouponAuditArgs([])).toEqual({ alert: true });
+    expect(parseRestrictedCouponAuditArgs(['--no-alert'])).toEqual({ alert: false });
+    expect(() => assertServiceFeeAuditReadOnly(['--execute'])).toThrow(
+      'service_fee_audit_is_read_only'
+    );
+    expect(() => parseRestrictedCouponAuditArgs(['--run-actually'])).toThrow(
+      'service_fee_audit_is_read_only'
+    );
+  });
+
+  it('alerts through injected functions with a namespaced payload and no secrets', async () => {
+    const notifications: AdminSlackNotification[] = [];
+    const captured: unknown[] = [];
+    const events: Array<Record<string, unknown>> = [];
+
+    const report = await auditRestrictedCoupons({
+      generatedAtIso: '2026-08-09T00:00:00.000Z',
+      listCoupons: async () => [coupon({ id: 'co_pass' })],
+      listFeeBearingProductIds: async () => ['prod_kilo_pass', 'prod_top_up'],
+      sendAlert: async notification => {
+        notifications.push(notification);
+      },
+      capture: payload => {
+        captured.push(payload);
+      },
+      log: event => {
+        events.push(event);
+      },
+    });
+
+    expect(report.findings).toHaveLength(1);
+    expect(captured).toEqual([
+      expect.objectContaining({
+        namespace: SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE,
+        event: SERVICE_FEE_RESTRICTED_COUPON_EVENT,
+        couponIds: ['co_pass'],
+      }),
+    ]);
+    expect(notifications).toHaveLength(1);
+    expect(JSON.stringify(notifications[0])).not.toContain('sk_');
+    expect(
+      events.some(event => event.event === `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.alerted`)
+    ).toBe(true);
+  });
+
+  it('records only Slack kind/status when the injected alert fails', async () => {
+    const events: Array<Record<string, unknown>> = [];
+
+    await expect(
+      auditRestrictedCoupons({
+        generatedAtIso: '2026-08-09T00:00:00.000Z',
+        listCoupons: async () => [coupon({ id: 'co_pass' })],
+        listFeeBearingProductIds: async () => ['prod_kilo_pass'],
+        sendAlert: async () => {
+          throw new AdminSlackNotificationError('upstream', 500);
+        },
+        log: event => {
+          events.push(event);
+        },
+      })
+    ).rejects.toMatchObject({ kind: 'upstream', status: 500 });
+
+    expect(events).toContainEqual(
+      expect.objectContaining({
+        event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.alert_failed`,
+        kind: 'upstream',
+        status: 500,
+        couponCount: 1,
+      })
+    );
+    expect(JSON.stringify(events)).not.toContain('hooks.slack.com');
+  });
+});
+
+describe('coupon snapshots from Stripe payloads', () => {
+  it('treats a list payload that omits applies_to as unresolved, never as unrestricted', () => {
+    const omitted: StripeCouponSnapshotSource = { id: 'co_omitted', valid: true };
+    expect(couponSnapshotFromListCoupon(omitted)).toBeNull();
+  });
+
+  it('reads the expanded applies_to restriction from the list payload without a retrieve', () => {
+    expect(
+      couponSnapshotFromListCoupon({
+        id: 'co_restricted',
+        valid: true,
+        applies_to: { products: ['prod_kilo_pass'] },
+      })
+    ).toEqual({
+      id: 'co_restricted',
+      valid: true,
+      appliesToProductIds: ['prod_kilo_pass'],
+    });
+  });
+
+  it('maps an explicitly empty applies_to to an unrestricted snapshot', () => {
+    expect(
+      couponSnapshotFromResolvedCoupon({ id: 'co_open', valid: false, applies_to: null })
+    ).toEqual({ id: 'co_open', valid: false, appliesToProductIds: null });
+    expect(
+      couponSnapshotFromResolvedCoupon({
+        id: 'co_empty',
+        valid: true,
+        applies_to: { products: [] },
+      })
+    ).toEqual({ id: 'co_empty', valid: true, appliesToProductIds: [] });
+  });
+});
+
+describe('listCouponSnapshotsEnsuringAppliesTo', () => {
+  it('uses the expanded list restriction and never retrieves when applies_to is present', async () => {
+    const retrieved: string[] = [];
+    const snapshots = await listCouponSnapshotsEnsuringAppliesTo({
+      listPage: async () => ({
+        data: [
+          { id: 'co_a', valid: true, applies_to: { products: ['prod_kilo_pass'] } },
+          { id: 'co_b', valid: false, applies_to: { products: [] } },
+        ],
+        has_more: false,
+      }),
+      retrieveCoupon: async couponId => {
+        retrieved.push(couponId);
+        throw new Error(`unexpected retrieve for ${couponId}`);
+      },
+      log: () => {},
+    });
+
+    expect(retrieved).toEqual([]);
+    expect(snapshots).toEqual([
+      { id: 'co_a', valid: true, appliesToProductIds: ['prod_kilo_pass'] },
+      { id: 'co_b', valid: false, appliesToProductIds: [] },
+    ]);
+  });
+
+  it('retrieves coupons whose list payload omitted applies_to so restrictions are never missed', async () => {
+    const events: Array<Record<string, unknown>> = [];
+    const snapshots = await listCouponSnapshotsEnsuringAppliesTo({
+      listPage: async () => ({
+        data: [
+          { id: 'co_omitted', valid: true },
+          { id: 'co_present', valid: true, applies_to: { products: [] } },
+        ],
+        has_more: false,
+      }),
+      retrieveCoupon: async couponId => {
+        expect(couponId).toBe('co_omitted');
+        return { id: couponId, valid: true, applies_to: { products: ['prod_top_up'] } };
+      },
+      log: event => {
+        events.push(event);
+      },
+    });
+
+    expect(snapshots).toEqual([
+      { id: 'co_omitted', valid: true, appliesToProductIds: ['prod_top_up'] },
+      { id: 'co_present', valid: true, appliesToProductIds: [] },
+    ]);
+    expect(events).toEqual([
+      {
+        event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.applies_to_retrieved`,
+        mode: 'read_only',
+        retrievedCount: 1,
+        couponCount: 2,
+      },
+    ]);
+  });
+
+  it('paginates with starting_after and retrieves omitted coupons across pages', async () => {
+    const listCalls: Array<string | undefined> = [];
+    const retrieved: string[] = [];
+
+    const snapshots = await listCouponSnapshotsEnsuringAppliesTo({
+      listPage: async startingAfter => {
+        listCalls.push(startingAfter);
+        if (!startingAfter) {
+          return {
+            data: [
+              { id: 'co_1', valid: true, applies_to: { products: ['prod_kilo_pass'] } },
+              { id: 'co_2', valid: true },
+            ],
+            has_more: true,
+          };
+        }
+        return { data: [{ id: 'co_3', valid: false }], has_more: false };
+      },
+      retrieveCoupon: async couponId => {
+        retrieved.push(couponId);
+        return { id: couponId, valid: couponId !== 'co_3', applies_to: null };
+      },
+      log: () => {},
+    });
+
+    expect(listCalls).toEqual([undefined, 'co_2']);
+    expect(retrieved).toEqual(['co_2', 'co_3']);
+    expect(snapshots.map(snapshot => snapshot.id)).toEqual(['co_1', 'co_2', 'co_3']);
+    expect(snapshots[0].appliesToProductIds).toEqual(['prod_kilo_pass']);
+    expect(snapshots[1].appliesToProductIds).toBeNull();
+    expect(snapshots[2]).toEqual({ id: 'co_3', valid: false, appliesToProductIds: null });
+  });
+});
+
+describe('listAllStripePages', () => {
+  it('walks injected pages until has_more is false', async () => {
+    const calls: Array<string | undefined> = [];
+    const rows = await listAllStripePages(async startingAfter => {
+      calls.push(startingAfter);
+      if (!startingAfter) {
+        return { data: [{ id: 'co_1' }, { id: 'co_2' }], has_more: true };
+      }
+      return { data: [{ id: 'co_3' }], has_more: false };
+    });
+
+    expect(calls).toEqual([undefined, 'co_2']);
+    expect(rows.map(row => row.id)).toEqual(['co_1', 'co_2', 'co_3']);
+  });
+
+  it('fails when a page claims more results without a cursor', async () => {
+    await expect(listAllStripePages(async () => ({ data: [], has_more: true }))).rejects.toThrow(
+      'stripe page is marked has_more without a cursor'
+    );
+  });
+});
diff --git a/apps/web/src/lib/service-fees/restricted-coupon-audit.ts b/apps/web/src/lib/service-fees/restricted-coupon-audit.ts
new file mode 100644
index 0000000000..1f3339aaaa
--- /dev/null
+++ b/apps/web/src/lib/service-fees/restricted-coupon-audit.ts
@@ -0,0 +1,348 @@
+import {
+  AdminSlackNotificationError,
+  type AdminSlackNotification,
+} from '@/lib/slack/admin-notifications';
+import { assertServiceFeeAuditReadOnly } from '@/lib/service-fees/read-only';
+
+export { assertServiceFeeAuditReadOnly } from '@/lib/service-fees/read-only';
+
+export const SERVICE_FEE_RESTRICTED_COUPON_EVENT = 'service_fee.restricted_coupon_detected';
+export const SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE = 'service_fee';
+export const SERVICE_FEE_RESTRICTED_COUPON_SENTRY_TAG = 'service_fee_restricted_coupon_detected';
+
+const MAX_SLACK_COUPON_LINES = 20;
+
+export type StripeCouponSnapshot = {
+  id: string;
+  valid: boolean;
+  appliesToProductIds: readonly string[] | null;
+};
+
+export type RestrictedCouponFinding = {
+  couponId: string;
+  valid: boolean;
+  intersectingProductIds: string[];
+  appliesToProductCount: number;
+};
+
+export type RestrictedCouponAlertPayload = {
+  namespace: typeof SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE;
+  event: typeof SERVICE_FEE_RESTRICTED_COUPON_EVENT;
+  generatedAtIso: string;
+  couponCount: number;
+  couponIds: string[];
+  intersectingProductIds: string[];
+};
+
+export type RestrictedCouponAuditReport = {
+  generatedAtIso: string;
+  couponReviewed: number;
+  feeBearingProductCount: number;
+  findings: RestrictedCouponFinding[];
+  alert: RestrictedCouponAlertPayload | null;
+};
+
+export function parseRestrictedCouponAuditArgs(args: readonly string[]): { alert: boolean } {
+  assertServiceFeeAuditReadOnly(args);
+  if (args.length === 0) return { alert: true };
+  if (args.length === 1 && args[0] === '--no-alert') return { alert: false };
+  throw new Error(
+    [
+      'Usage:',
+      '  pnpm --filter web script:run service-fees restricted-coupon-audit',
+      '  pnpm --filter web script:run service-fees restricted-coupon-audit --no-alert',
+    ].join('\n')
+  );
+}
+
+export type RestrictedCouponAuditDeps = {
+  generatedAtIso?: string;
+  listCoupons: () => Promise<readonly StripeCouponSnapshot[]>;
+  listFeeBearingProductIds: () => Promise<readonly string[]>;
+  sendAlert?: (notification: AdminSlackNotification) => Promise<void>;
+  capture?: (payload: RestrictedCouponAlertPayload) => void;
+  log?: (event: Record<string, unknown>) => void;
+};
+
+export type StripePage<T> = {
+  data: readonly T[];
+  has_more: boolean;
+};
+
+export async function listAllStripePages<T extends { id: string }>(
+  listPage: (startingAfter: string | undefined) => Promise<StripePage<T>>
+): Promise<T[]> {
+  const rows: T[] = [];
+  let startingAfter: string | undefined;
+
+  for (;;) {
+    const page = await listPage(startingAfter);
+    rows.push(...page.data);
+    if (!page.has_more) return rows;
+    const cursor = page.data.at(-1)?.id;
+    if (!cursor) {
+      throw new Error('stripe page is marked has_more without a cursor');
+    }
+    startingAfter = cursor;
+  }
+}
+
+/**
+ * Structural view of the Stripe coupon fields this audit reads. `applies_to`
+ * is optional because Stripe list payloads may omit the nested object
+ * entirely; a per-coupon retrieve returns the authoritative object.
+ */
+export type StripeCouponSnapshotSource = {
+  id: string;
+  valid: boolean;
+  applies_to?: { products?: readonly string[] | null } | null;
+};
+
+/**
+ * Snapshot from a coupon whose applies_to field is known to be resolved (a
+ * list payload that serialized the field, or a per-coupon retrieve). A coupon
+ * with no product restriction resolves to null product ids.
+ */
+export function couponSnapshotFromResolvedCoupon(
+  coupon: StripeCouponSnapshotSource
+): StripeCouponSnapshot {
+  return {
+    id: coupon.id,
+    valid: coupon.valid,
+    appliesToProductIds: coupon.applies_to?.products ?? null,
+  };
+}
+
+/**
+ * Snapshot from a coupon list payload, or null when the payload omitted
+ * applies_to entirely. An omission must never be treated as "unrestricted":
+ * that would silently hide exactly the coupons this audit exists to find, so
+ * the caller must retrieve the coupon individually instead.
+ */
+export function couponSnapshotFromListCoupon(
+  coupon: StripeCouponSnapshotSource
+): StripeCouponSnapshot | null {
+  if (coupon.applies_to === undefined) return null;
+  return couponSnapshotFromResolvedCoupon(coupon);
+}
+
+export type ListCouponSnapshotsDeps = {
+  listPage: (startingAfter: string | undefined) => Promise<StripePage<StripeCouponSnapshotSource>>;
+  retrieveCoupon: (couponId: string) => Promise<StripeCouponSnapshotSource>;
+  log?: (event: Record<string, unknown>) => void;
+};
+
+/**
+ * Lists every coupon (paginated, read-only) and guarantees each snapshot
+ * carries the real applies_to restriction. applies_to is a nested object, not
+ * an expandable ID reference, so when a list payload omits the field the
+ * coupon is re-fetched with an authoritative read-only coupons.retrieve.
+ */
+export async function listCouponSnapshotsEnsuringAppliesTo(
+  deps: ListCouponSnapshotsDeps
+): Promise<StripeCouponSnapshot[]> {
+  const log = deps.log ?? defaultLog;
+  const coupons = await listAllStripePages(deps.listPage);
+  const snapshots: StripeCouponSnapshot[] = [];
+  let retrievedCount = 0;
+
+  for (const coupon of coupons) {
+    const fromList = couponSnapshotFromListCoupon(coupon);
+    if (fromList) {
+      snapshots.push(fromList);
+      continue;
+    }
+    retrievedCount += 1;
+    snapshots.push(couponSnapshotFromResolvedCoupon(await deps.retrieveCoupon(coupon.id)));
+  }
+
+  if (retrievedCount > 0) {
+    log({
+      event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.applies_to_retrieved`,
+      mode: 'read_only',
+      retrievedCount,
+      couponCount: coupons.length,
+    });
+  }
+
+  return snapshots;
+}
+
+export function findRestrictedFeeBearingCoupons(input: {
+  coupons: readonly StripeCouponSnapshot[];
+  feeBearingProductIds: ReadonlySet<string>;
+}): RestrictedCouponFinding[] {
+  const findings: RestrictedCouponFinding[] = [];
+
+  for (const coupon of input.coupons) {
+    if (!coupon.appliesToProductIds || coupon.appliesToProductIds.length === 0) continue;
+    const intersectingProductIds = uniqueSorted(
+      coupon.appliesToProductIds.filter(productId => input.feeBearingProductIds.has(productId))
+    );
+    if (intersectingProductIds.length === 0) continue;
+    findings.push({
+      couponId: coupon.id,
+      valid: coupon.valid,
+      intersectingProductIds,
+      appliesToProductCount: coupon.appliesToProductIds.length,
+    });
+  }
+
+  return findings.sort((left, right) => left.couponId.localeCompare(right.couponId));
+}
+
+export async function auditRestrictedCoupons(
+  input: RestrictedCouponAuditDeps
+): Promise<RestrictedCouponAuditReport> {
+  const generatedAtIso = input.generatedAtIso ?? new Date().toISOString();
+  const log = input.log ?? defaultLog;
+  const [coupons, feeBearingProductIds] = await Promise.all([
+    input.listCoupons(),
+    input.listFeeBearingProductIds(),
+  ]);
+
+  log({
+    event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.started`,
+    mode: 'read_only',
+    generatedAtIso,
+    couponCandidates: coupons.length,
+    feeBearingProductCount: feeBearingProductIds.length,
+  });
+
+  const report = evaluateRestrictedCouponAudit({
+    generatedAtIso,
+    coupons,
+    feeBearingProductIds: new Set(feeBearingProductIds),
+  });
+
+  for (const finding of report.findings) {
+    log({
+      event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.finding`,
+      couponId: finding.couponId,
+      valid: finding.valid,
+      intersectingProductIds: finding.intersectingProductIds,
+      appliesToProductCount: finding.appliesToProductCount,
+    });
+  }
+
+  if (report.alert) {
+    input.capture?.(report.alert);
+    if (input.sendAlert) {
+      try {
+        await input.sendAlert(
+          buildRestrictedCouponSlackNotification(report.alert, report.findings)
+        );
+        log({
+          event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.alerted`,
+          couponCount: report.alert.couponCount,
+          couponIds: report.alert.couponIds,
+        });
+      } catch (error) {
+        log({
+          event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.alert_failed`,
+          kind: error instanceof AdminSlackNotificationError ? error.kind : 'unknown',
+          status: error instanceof AdminSlackNotificationError ? error.status : undefined,
+          couponCount: report.alert.couponCount,
+        });
+        throw error;
+      }
+    }
+  }
+
+  log({
+    event: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}.completed`,
+    mode: 'read_only',
+    generatedAtIso: report.generatedAtIso,
+    couponReviewed: report.couponReviewed,
+    feeBearingProductCount: report.feeBearingProductCount,
+    findingCount: report.findings.length,
+  });
+
+  return report;
+}
+
+export function evaluateRestrictedCouponAudit(input: {
+  generatedAtIso: string;
+  coupons: readonly StripeCouponSnapshot[];
+  feeBearingProductIds: ReadonlySet<string>;
+}): RestrictedCouponAuditReport {
+  const findings = findRestrictedFeeBearingCoupons(input);
+  return {
+    generatedAtIso: input.generatedAtIso,
+    couponReviewed: input.coupons.length,
+    feeBearingProductCount: input.feeBearingProductIds.size,
+    findings,
+    alert:
+      findings.length === 0
+        ? null
+        : buildRestrictedCouponAlertPayload({
+            generatedAtIso: input.generatedAtIso,
+            findings,
+          }),
+  };
+}
+
+export function buildRestrictedCouponAlertPayload(input: {
+  generatedAtIso: string;
+  findings: readonly RestrictedCouponFinding[];
+}): RestrictedCouponAlertPayload {
+  return {
+    namespace: SERVICE_FEE_RESTRICTED_COUPON_NAMESPACE,
+    event: SERVICE_FEE_RESTRICTED_COUPON_EVENT,
+    generatedAtIso: input.generatedAtIso,
+    couponCount: input.findings.length,
+    couponIds: input.findings.map(finding => finding.couponId),
+    intersectingProductIds: uniqueSorted(
+      input.findings.flatMap(finding => finding.intersectingProductIds)
+    ),
+  };
+}
+
+export function buildRestrictedCouponSlackNotification(
+  payload: RestrictedCouponAlertPayload,
+  findings: readonly RestrictedCouponFinding[]
+): AdminSlackNotification {
+  const preview = findings.slice(0, MAX_SLACK_COUPON_LINES);
+  const remaining = findings.length - preview.length;
+  const lines = preview.map(finding => {
+    const products = finding.intersectingProductIds.join(',');
+    return `• \`${finding.couponId}\` products=\`${products}\` valid=${finding.valid}`;
+  });
+  if (remaining > 0) {
+    lines.push(`• +${remaining} more`);
+  }
+
+  return {
+    text: `${SERVICE_FEE_RESTRICTED_COUPON_EVENT}: ${payload.couponCount} coupon(s) apply to fee-bearing products`,
+    blocks: [
+      {
+        type: 'section',
+        text: {
+          type: 'mrkdwn',
+          text: [
+            `*${SERVICE_FEE_RESTRICTED_COUPON_EVENT}*`,
+            `${payload.couponCount} coupon(s) have \`applies_to.products\` intersecting fee-bearing Kilo Pass or top-up products.`,
+            `products=${payload.intersectingProductIds.map(id => `\`${id}\``).join(', ') || '(none)'}`,
+          ].join('\n'),
+        },
+      },
+      {
+        type: 'section',
+        text: {
+          type: 'mrkdwn',
+          text: lines.join('\n') || '• (none)',
+        },
+      },
+    ],
+    unfurl_links: false,
+    unfurl_media: false,
+  };
+}
+
+function uniqueSorted(values: readonly string[]): string[] {
+  return [...new Set(values)].sort((left, right) => left.localeCompare(right));
+}
+
+function defaultLog(event: Record<string, unknown>): void {
+  console.log(JSON.stringify(event));
+}
diff --git a/apps/web/src/lib/service-fees/settlement.test.ts b/apps/web/src/lib/service-fees/settlement.test.ts
new file mode 100644
index 0000000000..dbe907ccb4
--- /dev/null
+++ b/apps/web/src/lib/service-fees/settlement.test.ts
@@ -0,0 +1,830 @@
+import { describe, expect, test, jest } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import {
+  markServiceFeeAssessmentCharged,
+  prepareServiceFeeAssessmentDecision,
+  sanitizeServiceFeeAssessmentMetadata,
+  upsertServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+} from '@/lib/service-fees/assessments';
+import { calculateServiceFeeMinor } from '@/lib/service-fees/calculation';
+import { createInvoiceServiceFeeAssessmentKey } from '@/lib/service-fees/checkout';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
+import {
+  settleKiloPassInvoiceServiceFee,
+  SERVICE_FEE_FAILURE_RATE_DEVIATION,
+  type KiloPassServiceFeeSettlementDependencies,
+  type ServiceFeeSettlementStore,
+} from '@/lib/service-fees/settlement';
+import { buildServiceFeeLineMetadata } from '@/lib/service-fees/stripe-lines';
+
+const KILO_PASS_PRICE_ID = getKnownStripePriceIdsForKiloPass()[0]!;
+const ACTIVATION = SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+
+function createMemorySettlementStore(): ServiceFeeSettlementStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeSettlementStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async findByStripeInvoiceId(stripeInvoiceId) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripeInvoiceId === stripeInvoiceId
+      );
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata:
+          patch.metadata !== undefined
+            ? sanitizeServiceFeeAssessmentMetadata(patch.metadata)
+            : { ...existing.metadata },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return store;
+}
+
+function invoiceLine(
+  overrides: Partial<Stripe.InvoiceLineItem> & {
+    amount?: number;
+    metadata?: Stripe.Metadata;
+    pricing?: Stripe.InvoiceLineItem['pricing'];
+    pretax_credit_amounts?: Stripe.InvoiceLineItem['pretax_credit_amounts'];
+  }
+): Stripe.InvoiceLineItem {
+  return {
+    id: overrides.id ?? 'il_test',
+    object: 'line_item',
+    amount: overrides.amount ?? 4_900,
+    currency: 'usd',
+    description: 'line',
+    discountable: true,
+    discount_amounts: null,
+    discounts: [],
+    invoice: 'in_paid',
+    livemode: false,
+    metadata: overrides.metadata ?? {},
+    parent: null,
+    period: { start: 1, end: 2 },
+    pretax_credit_amounts: overrides.pretax_credit_amounts ?? null,
+    pricing: overrides.pricing ?? null,
+    quantity: 1,
+    subscription: null,
+    taxes: null,
+    ...overrides,
+  } as Stripe.InvoiceLineItem;
+}
+
+function pricedLine(
+  priceId: string,
+  amount: number,
+  extra: Partial<Parameters<typeof invoiceLine>[0]> = {}
+) {
+  return invoiceLine({
+    amount,
+    pricing: {
+      type: 'price_details',
+      unit_amount_decimal: String(amount),
+      price_details: { price: priceId, product: 'prod_pass' },
+    },
+    ...extra,
+  });
+}
+
+function feeLine(
+  assessmentKey: string,
+  amount: number,
+  extra: Partial<Stripe.InvoiceLineItem> = {}
+) {
+  return invoiceLine({
+    id: extra.id ?? 'il_fee',
+    amount,
+    metadata: buildServiceFeeLineMetadata(assessmentKey),
+    pretax_credit_amounts: extra.pretax_credit_amounts ?? null,
+    ...extra,
+  });
+}
+
+function paidInvoice(
+  lines: Stripe.InvoiceLineItem[],
+  overrides: Partial<Stripe.Invoice> & { has_more?: boolean } = {}
+): Stripe.Invoice {
+  const { has_more, metadata, amount_paid, id, ...invoiceOverrides } = overrides;
+  return {
+    id: id ?? 'in_paid',
+    object: 'invoice',
+    created: ACTIVATION,
+    status: 'paid',
+    currency: 'usd',
+    customer: 'cus_1',
+    amount_paid: amount_paid ?? 5_145,
+    status_transitions: {
+      finalized_at: ACTIVATION,
+      marked_uncollectible_at: null,
+      paid_at: ACTIVATION + 10,
+      voided_at: null,
+    },
+    payments: {
+      object: 'list',
+      has_more: false,
+      url: '/v1/invoices/in_paid/payments',
+      data: [
+        {
+          id: 'inpay_1',
+          object: 'invoice_payment',
+          amount_paid: amount_paid ?? 5_145,
+          amount_requested: amount_paid ?? 5_145,
+          created: ACTIVATION,
+          currency: 'usd',
+          invoice: id ?? 'in_paid',
+          is_default: true,
+          livemode: false,
+          status: 'paid',
+          status_transitions: { canceled_at: null, paid_at: ACTIVATION + 10 },
+          payment: {
+            type: 'payment_intent',
+            payment_intent: {
+              id: 'pi_1',
+              latest_charge: 'ch_1',
+            } as Stripe.PaymentIntent,
+          },
+        } as Stripe.InvoicePayment,
+      ],
+    },
+    ...invoiceOverrides,
+    metadata: metadata ?? {},
+    lines: {
+      object: 'list',
+      data: lines,
+      has_more: has_more ?? false,
+      url: '/v1/invoices/in_paid/lines',
+    },
+  } as Stripe.Invoice;
+}
+
+async function persistCheckoutAssessment(
+  store: ServiceFeeSettlementStore,
+  input: {
+    assessmentKey: string;
+    eligibleSubtotalMinor: number;
+    invoiceId?: string | null;
+    chargedFeeMinor?: number;
+  }
+) {
+  const decision = await prepareServiceFeeAssessmentDecision({
+    assessmentKey: input.assessmentKey,
+    flow: 'personal_kilo_pass',
+    currency: 'usd',
+    eligibilityCreatedAt: new Date(ACTIVATION * 1000),
+    eligibleSubtotalMinor: input.eligibleSubtotalMinor,
+    kiloUserId: 'user_1',
+    stripeCustomerId: 'cus_1',
+  });
+  const record = await upsertServiceFeeAssessment({
+    store,
+    decision,
+    stripeIds: {
+      stripeCustomerId: 'cus_1',
+      stripeInvoiceId: input.invoiceId === undefined ? 'in_paid' : input.invoiceId,
+      stripeCheckoutSessionId: 'cs_1',
+    },
+  });
+  if (input.chargedFeeMinor !== undefined) {
+    return markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: record.assessmentKey,
+      chargedFeeMinor: input.chargedFeeMinor,
+    });
+  }
+  if (decision.outcome === 'pending') {
+    return markServiceFeeAssessmentCharged({
+      store,
+      assessmentKey: record.assessmentKey,
+      chargedFeeMinor: 0,
+    });
+  }
+  return record;
+}
+
+describe('settleKiloPassInvoiceServiceFee', () => {
+  test('ignores invoices without paid evidence', async () => {
+    const store = createMemorySettlementStore();
+    await persistCheckoutAssessment(store, {
+      assessmentKey: 'checkout:abc',
+      eligibleSubtotalMinor: 4_900,
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: {
+        ...paidInvoice([pricedLine(KILO_PASS_PRICE_ID, 4_900)]),
+        status: 'open',
+        status_transitions: {
+          finalized_at: ACTIVATION,
+          marked_uncollectible_at: null,
+          paid_at: null,
+          voided_at: null,
+        },
+      },
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+
+    expect(result.status).toBe('ignored');
+    expect(result.assessment?.settledAt ?? null).toBeNull();
+  });
+
+  test('paginates lines and resolves the assessment by metadata then invoice id', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = 'checkout:meta';
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+      invoiceId: null,
+    });
+
+    const pages = [
+      [pricedLine(KILO_PASS_PRICE_ID, 3_920, { id: 'il_1' })],
+      [feeLine(assessmentKey, 196, { id: 'il_fee_page' })],
+    ];
+    const listLineItems = jest
+      .fn<
+        (
+          invoiceId: string,
+          params?: Stripe.InvoiceListLineItemsParams
+        ) => Promise<{
+          data: Stripe.InvoiceLineItem[];
+          has_more: boolean;
+        }>
+      >()
+      .mockResolvedValueOnce({ data: pages[0]!, has_more: true })
+      .mockResolvedValueOnce({ data: pages[1]!, has_more: false });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(pages[0]!, {
+        has_more: true,
+        amount_paid: 4_116,
+        metadata: { serviceFeeAssessmentKey: assessmentKey },
+      }),
+      stripe: {
+        invoices: {
+          listLineItems: listLineItems as never,
+        },
+      },
+      store,
+    });
+
+    expect(listLineItems).toHaveBeenCalledTimes(2);
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 3_920,
+      chargedFeeMinor: 196,
+      grossPaidMinor: 4_116,
+    });
+    expect(result.assessment?.assessmentKey).toBe(assessmentKey);
+
+    const byInvoice = await persistCheckoutAssessment(store, {
+      assessmentKey: createInvoiceServiceFeeAssessmentKey('in_by_id'),
+      eligibleSubtotalMinor: 4_900,
+      invoiceId: 'in_by_id',
+    });
+    const fromStore = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_full' }),
+          feeLine(byInvoice.assessmentKey, 245, { id: 'il_fee_full' }),
+        ],
+        { id: 'in_by_id', amount_paid: 5_145, metadata: {} }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+    expect(fromStore.assessment?.assessmentKey).toBe(byInvoice.assessmentKey);
+    expect(fromStore.chargedFeeMinor).toBe(245);
+  });
+
+  test('discounted checkout settles below expected from the observed fee line', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = 'checkout:discount';
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 3_920, {
+            id: 'il_pass',
+            pretax_credit_amounts: [{ amount: 980, type: 'discount', discount: 'di_1' }],
+            amount: 4_900,
+          }),
+          feeLine(assessmentKey, 196, {
+            pretax_credit_amounts: [{ amount: 49, type: 'discount', discount: 'di_1' }],
+            amount: 245,
+          }),
+        ],
+        {
+          amount_paid: 4_116,
+          metadata: { serviceFeeAssessmentKey: assessmentKey },
+        }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 3_920,
+      chargedFeeMinor: 196,
+      grossPaidMinor: 4_116,
+    });
+    expect(result.assessment?.expectedFeeMinor).toBe(245);
+    expect(result.assessment?.metadata.service_fee_rate_deviation).toBeUndefined();
+  });
+
+  test('100% discount settles product 0 fee 0 as charged', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = 'checkout:free';
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 0, {
+            id: 'il_pass',
+            amount: 4_900,
+            pretax_credit_amounts: [{ amount: 4_900, type: 'discount', discount: 'di_100' }],
+          }),
+          feeLine(assessmentKey, 0, {
+            amount: 245,
+            pretax_credit_amounts: [{ amount: 245, type: 'discount', discount: 'di_100' }],
+          }),
+        ],
+        {
+          amount_paid: 0,
+          metadata: { serviceFeeAssessmentKey: assessmentKey },
+        }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 0,
+      chargedFeeMinor: 0,
+      grossPaidMinor: 0,
+    });
+    expect(result.assessment?.outcome).toBe('charged');
+  });
+
+  test('restricted coupon deviation is recorded and alerted without correction', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = 'checkout:restricted';
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+    });
+    const sendAlert: NonNullable<KiloPassServiceFeeSettlementDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 3_920, {
+            id: 'il_pass',
+            amount: 4_900,
+            pretax_credit_amounts: [{ amount: 980, type: 'discount', discount: 'di_restricted' }],
+          }),
+          feeLine(assessmentKey, 245),
+        ],
+        {
+          amount_paid: 4_165,
+          metadata: { serviceFeeAssessmentKey: assessmentKey },
+        }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+      deps: { sendAlert },
+    });
+
+    expect(calculateServiceFeeMinor(3_920)).toBe(196);
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 3_920,
+      chargedFeeMinor: 245,
+      grossPaidMinor: 4_165,
+    });
+    expect(result.assessment?.metadata.service_fee_rate_deviation).toBe(true);
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: SERVICE_FEE_FAILURE_RATE_DEVIATION })
+    );
+  });
+
+  test('links invoice, payment intent, and charge ids and is idempotent', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = createInvoiceServiceFeeAssessmentKey('in_ids');
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+      invoiceId: 'in_ids',
+    });
+
+    const invoice = paidInvoice(
+      [
+        pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass' }),
+        feeLine(assessmentKey, 245, { id: 'il_fee' }),
+      ],
+      { id: 'in_ids', amount_paid: 5_145 }
+    );
+    const stripe = {
+      invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+    };
+
+    const first = await settleKiloPassInvoiceServiceFee({
+      invoice,
+      stripe,
+      store,
+      paymentIntentId: 'pi_1',
+      chargeId: 'ch_1',
+    });
+    const second = await settleKiloPassInvoiceServiceFee({
+      invoice,
+      stripe,
+      store,
+      paymentIntentId: 'pi_1',
+      chargeId: 'ch_1',
+    });
+
+    expect(first).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 245,
+      grossPaidMinor: 5_145,
+    });
+    expect(first.assessment).toMatchObject({
+      stripeInvoiceId: 'in_ids',
+      stripePaymentIntentId: 'pi_1',
+      stripeChargeId: 'ch_1',
+      stripeInvoiceFeeLineItemId: 'il_fee',
+      settledAt: new Date((ACTIVATION + 10) * 1000).toISOString(),
+    });
+    expect(second.assessment?.settledAt).toBe(first.assessment?.settledAt);
+    expect(second.settledProductMinor).toBe(first.settledProductMinor);
+    expect(second.chargedFeeMinor).toBe(first.chargedFeeMinor);
+    expect(second.grossPaidMinor).toBe(first.grossPaidMinor);
+  });
+
+  test('reconciles a hosted Checkout fee line by persisted price id without metadata', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = 'checkout:price-id';
+    const decision = await prepareServiceFeeAssessmentDecision({
+      assessmentKey,
+      flow: 'personal_kilo_pass',
+      currency: 'usd',
+      eligibilityCreatedAt: new Date(ACTIVATION * 1000),
+      eligibleSubtotalMinor: 4_900,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+    });
+    await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: 'cus_1',
+        stripeInvoiceId: 'in_price_id',
+        stripeCheckoutSessionId: 'cs_price_id',
+        stripeFeePriceId: 'price_fee_generated',
+      },
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass_price' }),
+          invoiceLine({
+            id: 'il_fee_no_meta',
+            amount: 245,
+            metadata: {},
+            pricing: {
+              type: 'price_details',
+              unit_amount_decimal: '245',
+              price_details: { price: 'price_fee_generated', product: 'prod_fee' },
+            },
+          }),
+        ],
+        {
+          id: 'in_price_id',
+          amount_paid: 5_145,
+          metadata: { serviceFeeAssessmentKey: assessmentKey },
+        }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 245,
+      grossPaidMinor: 5_145,
+    });
+    expect(result.assessment).toMatchObject({
+      outcome: 'charged',
+      chargedFeeMinor: 245,
+      stripeInvoiceFeeLineItemId: 'il_fee_no_meta',
+    });
+  });
+
+  test('uses the subscription-aware classifier so unknown-price pass items still settle', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = createInvoiceServiceFeeAssessmentKey('in_sub_aware');
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+      invoiceId: 'in_sub_aware',
+    });
+    const subscription = {
+      id: 'sub_aware',
+      items: {
+        object: 'list',
+        data: [
+          {
+            id: 'si_pass_aware',
+            price: { id: 'price_unknown_pass' },
+            metadata: {
+              type: 'kilo-pass',
+              kiloUserId: 'user_1',
+              tier: 'tier_49',
+              cadence: 'monthly',
+            },
+          },
+          {
+            id: 'si_other',
+            price: { id: 'price_unrelated' },
+            metadata: {},
+          },
+        ],
+        has_more: false,
+        url: '/v1/subscription_items',
+      },
+    } as unknown as Stripe.Subscription;
+    const retrieve = jest.fn(async (id: string): Promise<Stripe.Subscription> => {
+      expect(id).toBe('sub_aware');
+      return subscription;
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          invoiceLine({
+            id: 'il_pass_unknown',
+            amount: 4_900,
+            metadata: {},
+            pricing: {
+              type: 'price_details',
+              unit_amount_decimal: '4900',
+              price_details: { price: 'price_unknown_pass', product: 'prod_unknown' },
+            },
+            parent: {
+              type: 'subscription_item_details',
+              invoice_item_details: null,
+              subscription_item_details: {
+                invoice_item: null,
+                proration: false,
+                proration_details: { credited_items: null },
+                subscription: 'sub_aware',
+                subscription_item: 'si_pass_aware',
+              },
+            },
+            subscription: 'sub_aware',
+          }),
+          invoiceLine({
+            id: 'il_other',
+            amount: 8_000,
+            metadata: {},
+            pricing: {
+              type: 'price_details',
+              unit_amount_decimal: '8000',
+              price_details: { price: 'price_unrelated', product: 'prod_other' },
+            },
+            parent: {
+              type: 'subscription_item_details',
+              invoice_item_details: null,
+              subscription_item_details: {
+                invoice_item: null,
+                proration: false,
+                proration_details: { credited_items: null },
+                subscription: 'sub_aware',
+                subscription_item: 'si_other',
+              },
+            },
+            subscription: 'sub_aware',
+          }),
+          feeLine(assessmentKey, 245, { id: 'il_fee_aware' }),
+        ],
+        {
+          id: 'in_sub_aware',
+          amount_paid: 13_145,
+          parent: {
+            type: 'subscription_details',
+            quote_details: null,
+            subscription_details: {
+              metadata: { serviceFeeAssessmentKey: assessmentKey },
+              subscription: 'sub_aware',
+            },
+          },
+        }
+      ),
+      stripe: {
+        invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+        subscriptions: { retrieve },
+      },
+      store,
+    });
+
+    expect(retrieve).toHaveBeenCalled();
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 245,
+      grossPaidMinor: 13_145,
+    });
+  });
+
+  test('pending without an observed fee line marks missed and still settles product', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = createInvoiceServiceFeeAssessmentKey('in_pending_missed');
+    const decision = await prepareServiceFeeAssessmentDecision({
+      assessmentKey,
+      flow: 'personal_kilo_pass',
+      currency: 'usd',
+      eligibilityCreatedAt: new Date(ACTIVATION * 1000),
+      eligibleSubtotalMinor: 4_900,
+      kiloUserId: 'user_1',
+      stripeCustomerId: 'cus_1',
+    });
+    await upsertServiceFeeAssessment({
+      store,
+      decision,
+      stripeIds: {
+        stripeCustomerId: 'cus_1',
+        stripeInvoiceId: 'in_pending_missed',
+      },
+    });
+
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice([pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass_pending' })], {
+        id: 'in_pending_missed',
+        amount_paid: 4_900,
+        metadata: { serviceFeeAssessmentKey: assessmentKey },
+      }),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+    });
+
+    expect(result).toMatchObject({
+      status: 'settled',
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 0,
+      grossPaidMinor: 4_900,
+    });
+    expect(result.assessment).toMatchObject({
+      outcome: 'missed',
+      failureCode: 'fee_application_failed',
+      chargedFeeMinor: 0,
+      settledAt: expect.any(String),
+    });
+  });
+
+  test('pre-activation invoice without an assessment does not alert', async () => {
+    const store = createMemorySettlementStore();
+    const sendAlert: NonNullable<KiloPassServiceFeeSettlementDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice([pricedLine(KILO_PASS_PRICE_ID, 4_900)], {
+        id: 'in_legacy',
+        amount_paid: 4_900,
+        created: ACTIVATION - 1,
+      }),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+      deps: { sendAlert },
+    });
+
+    expect(result).toMatchObject({
+      status: 'ignored',
+      settledProductMinor: 4_900,
+      assessment: null,
+    });
+    expect(sendAlert).not.toHaveBeenCalled();
+  });
+
+  test('missing assessment ignores fee revenue and returns product-only amount', async () => {
+    const store = createMemorySettlementStore();
+    const sendAlert: NonNullable<KiloPassServiceFeeSettlementDependencies['sendAlert']> = jest.fn(
+      async () => undefined
+    );
+    const result = await settleKiloPassInvoiceServiceFee({
+      invoice: paidInvoice(
+        [
+          pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass_missing' }),
+          feeLine('checkout:missing', 245, { id: 'il_fee_missing' }),
+        ],
+        { id: 'in_missing', amount_paid: 5_145, metadata: {} }
+      ),
+      stripe: { invoices: { listLineItems: async () => ({ data: [], has_more: false }) } },
+      store,
+      deps: { sendAlert },
+    });
+
+    expect(result).toMatchObject({
+      status: 'ignored',
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 0,
+      grossPaidMinor: 5_145,
+      assessment: null,
+    });
+    expect(sendAlert).toHaveBeenCalledWith(
+      expect.objectContaining({ failureCode: 'missing_assessment' })
+    );
+  });
+
+  test('applies a full refund observed before paid and is idempotent on replay', async () => {
+    const store = createMemorySettlementStore();
+    const assessmentKey = createInvoiceServiceFeeAssessmentKey('in_refund_first');
+    await persistCheckoutAssessment(store, {
+      assessmentKey,
+      eligibleSubtotalMinor: 4_900,
+      invoiceId: 'in_refund_first',
+    });
+    await store.update(assessmentKey, { refundedGrossMinor: 5_145 });
+
+    const invoice = paidInvoice(
+      [
+        pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_pass_refund_first' }),
+        feeLine(assessmentKey, 245, { id: 'il_fee_refund_first' }),
+      ],
+      { id: 'in_refund_first', amount_paid: 5_145 }
+    );
+    const stripe = {
+      invoices: { listLineItems: async () => ({ data: [], has_more: false }) },
+    };
+
+    const first = await settleKiloPassInvoiceServiceFee({
+      invoice,
+      stripe,
+      store,
+      paymentIntentId: 'pi_refund_first',
+      chargeId: 'ch_refund_first',
+    });
+    const second = await settleKiloPassInvoiceServiceFee({
+      invoice,
+      stripe,
+      store,
+      paymentIntentId: 'pi_refund_first',
+      chargeId: 'ch_refund_first',
+    });
+
+    expect(first.assessment).toMatchObject({
+      settledProductMinor: 4_900,
+      chargedFeeMinor: 245,
+      refundedGrossMinor: 5_145,
+      refundedProductMinor: 4_900,
+      refundedFeeMinor: 245,
+      outcome: 'charged',
+    });
+    expect(second.assessment).toMatchObject({
+      refundedProductMinor: 4_900,
+      refundedFeeMinor: 245,
+      refundedGrossMinor: 5_145,
+      settledAt: first.assessment?.settledAt,
+    });
+  });
+});
diff --git a/apps/web/src/lib/service-fees/settlement.ts b/apps/web/src/lib/service-fees/settlement.ts
new file mode 100644
index 0000000000..6969291414
--- /dev/null
+++ b/apps/web/src/lib/service-fees/settlement.ts
@@ -0,0 +1,452 @@
+import 'server-only';
+
+import type Stripe from 'stripe';
+
+import {
+  sendMissedServiceFeeAlert,
+  type MissedServiceFeeAlertInput,
+} from '@/lib/service-fees/alerts';
+import {
+  linkServiceFeeAssessmentStripeIds,
+  markServiceFeeAssessmentCharged,
+  markServiceFeeAssessmentMissed,
+  sanitizeServiceFeeAssessmentMetadata,
+  settleServiceFeeAssessment,
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+  type ServiceFeeStripeIds,
+} from '@/lib/service-fees/assessments';
+import {
+  calculateServiceFeeMinor,
+  getNetPretaxLineAmountMinor,
+} from '@/lib/service-fees/calculation';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
+import { createInvoiceServiceFeeAssessmentKey } from '@/lib/service-fees/checkout';
+import { applyDeferredServiceFeeRefunds } from '@/lib/service-fees/refunds';
+import {
+  isServiceFeeInvoiceLine,
+  listAllInvoiceLineItems,
+  sumEligibleKiloPassSubtotalMinor,
+  type InvoiceLineItemListClient,
+} from '@/lib/service-fees/stripe-lines';
+import { SERVICE_FEE_SUPPORTED_CURRENCY } from '@/lib/service-fees/types';
+
+export const SERVICE_FEE_RATE_DEVIATION_THRESHOLD_MINOR = 1;
+export const SERVICE_FEE_FAILURE_RATE_DEVIATION = 'service_fee_rate_deviation' as const;
+export const SERVICE_FEE_FAILURE_MISSING_ASSESSMENT = 'missing_assessment' as const;
+export const SERVICE_FEE_FAILURE_APPLICATION = 'fee_application_failed' as const;
+
+export type ServiceFeeSettlementStore = ServiceFeeAssessmentStore & {
+  findByStripeInvoiceId?(stripeInvoiceId: string): Promise<ServiceFeeAssessmentRecord | null>;
+};
+
+export type KiloPassServiceFeeSettlementStripe = InvoiceLineItemListClient & {
+  subscriptions?: {
+    retrieve(id: string): Promise<Stripe.Subscription>;
+  };
+};
+
+export type KiloPassServiceFeeSettlementResult = {
+  status: 'settled' | 'ignored';
+  settledProductMinor: number;
+  chargedFeeMinor: number;
+  grossPaidMinor: number;
+  assessment: ServiceFeeAssessmentRecord | null;
+};
+
+export type KiloPassServiceFeeSettlementDependencies = {
+  now?: Date;
+  sendAlert?: (input: MissedServiceFeeAlertInput) => Promise<void>;
+  sendRateDeviationAlert?: (input: MissedServiceFeeAlertInput) => Promise<void>;
+};
+
+/**
+ * Settle a paid Kilo Pass invoice against its durable assessment.
+ * Collection is observed from the actual fee line, including a zero amount.
+ */
+export async function settleKiloPassInvoiceServiceFee(params: {
+  invoice: Stripe.Invoice;
+  stripe: KiloPassServiceFeeSettlementStripe;
+  store: ServiceFeeSettlementStore;
+  paymentIntentId?: string | null;
+  chargeId?: string | null;
+  subscription?: Stripe.Subscription | null;
+  lines?: readonly Stripe.InvoiceLineItem[];
+  deps?: KiloPassServiceFeeSettlementDependencies;
+}): Promise<KiloPassServiceFeeSettlementResult> {
+  const deps = params.deps ?? {};
+  const now = deps.now ?? new Date();
+  const invoiceId = params.invoice.id;
+  const stripeIds = invoiceStripeIds(params.invoice, params.paymentIntentId, params.chargeId);
+
+  if (!invoiceId || !hasPaidEvidence(params.invoice)) {
+    return ignored(null, params.invoice.amount_paid ?? 0);
+  }
+
+  const lines =
+    params.lines ??
+    (await listAllInvoiceLineItems({
+      invoice: params.invoice,
+      stripe: params.stripe,
+    }));
+  const subscription =
+    params.subscription !== undefined
+      ? params.subscription
+      : await loadSubscription(params.invoice, params.stripe);
+  const assessment = await resolveSettlementAssessment({
+    invoice: params.invoice,
+    lines,
+    store: params.store,
+  });
+  const currency =
+    params.invoice.currency || assessment?.currency || SERVICE_FEE_SUPPORTED_CURRENCY;
+  const productOnlyMinor = sumEligibleKiloPassSubtotalMinor({
+    lines,
+    currency,
+    subscription,
+  });
+  if (!assessment) {
+    if (params.invoice.created < SERVICE_FEE_ACTIVATION_UNIX_SECONDS) {
+      return {
+        status: 'ignored',
+        settledProductMinor: productOnlyMinor,
+        chargedFeeMinor: 0,
+        grossPaidMinor: Math.max(0, params.invoice.amount_paid ?? 0),
+        assessment: null,
+      };
+    }
+    await alertSafely({
+      assessmentKey: createInvoiceServiceFeeAssessmentKey(invoiceId),
+      flow: 'personal_kilo_pass',
+      stripeInvoiceId: invoiceId,
+      stripePaymentIntentId: stripeIds.stripePaymentIntentId,
+      stripeChargeId: stripeIds.stripeChargeId,
+      eligibleSubtotalMinor: productOnlyMinor,
+      expectedFeeMinor: 0,
+      failureCode: SERVICE_FEE_FAILURE_MISSING_ASSESSMENT,
+      deps,
+      now,
+    });
+    return {
+      status: 'ignored',
+      settledProductMinor: productOnlyMinor,
+      chargedFeeMinor: 0,
+      grossPaidMinor: Math.max(0, params.invoice.amount_paid ?? 0),
+      assessment: null,
+    };
+  }
+
+  const settledProductMinor = productOnlyMinor;
+  const feeLine = findFeeLine(lines, assessment);
+  const observedFeeMinor = feeLine
+    ? Math.max(0, getNetPretaxLineAmountMinor(feeLine, currency))
+    : settledProductMinor === 0
+      ? 0
+      : assessment.outcome === 'charged'
+        ? assessment.chargedFeeMinor
+        : 0;
+  const grossPaidMinor = Math.max(0, params.invoice.amount_paid ?? 0);
+  const settledAt =
+    unixToDate(params.invoice.status_transitions?.paid_at) ??
+    unixToDate(params.invoice.created) ??
+    now;
+
+  let current = await linkServiceFeeAssessmentStripeIds({
+    store: params.store,
+    assessmentKey: assessment.assessmentKey,
+    stripeIds,
+    now,
+  });
+
+  if (current.outcome === 'pending') {
+    const canChargeObservedFee = Boolean(feeLine) || settledProductMinor === 0;
+    if (canChargeObservedFee && current.expectedFeeMinor > 0) {
+      current = await markServiceFeeAssessmentCharged({
+        store: params.store,
+        assessmentKey: current.assessmentKey,
+        chargedFeeMinor: observedFeeMinor,
+        stripeIds: {
+          ...stripeIds,
+          stripeInvoiceFeeLineItemId: feeLine?.id ?? current.stripeInvoiceFeeLineItemId,
+        },
+        now,
+      });
+    } else if (current.expectedFeeMinor > 0) {
+      current = await markServiceFeeAssessmentMissed({
+        store: params.store,
+        assessmentKey: current.assessmentKey,
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        stripeIds,
+        now,
+      });
+    }
+  }
+
+  const settled = await settleServiceFeeAssessment({
+    store: params.store,
+    assessmentKey: current.assessmentKey,
+    settledAt,
+    settledProductMinor,
+    grossPaidMinor,
+    chargedFeeMinor: current.outcome === 'charged' ? observedFeeMinor : 0,
+    stripeIds: {
+      ...stripeIds,
+      stripeInvoiceFeeLineItemId: feeLine?.id ?? current.stripeInvoiceFeeLineItemId,
+    },
+    now,
+  });
+
+  const withDeviation = await recordEffectiveRateDeviation({
+    store: params.store,
+    assessment: settled,
+    settledProductMinor: settled.settledProductMinor,
+    chargedFeeMinor: settled.chargedFeeMinor,
+    deps,
+    now,
+  });
+  const reconciled = await applyDeferredServiceFeeRefunds({
+    store: params.store,
+    assessment: withDeviation,
+    now,
+  });
+
+  return {
+    status: 'settled',
+    settledProductMinor: reconciled.settledProductMinor,
+    chargedFeeMinor: reconciled.chargedFeeMinor,
+    grossPaidMinor: reconciled.grossPaidMinor,
+    assessment: reconciled,
+  };
+}
+
+async function resolveSettlementAssessment(params: {
+  invoice: Stripe.Invoice;
+  lines: readonly Stripe.InvoiceLineItem[];
+  store: ServiceFeeSettlementStore;
+}): Promise<ServiceFeeAssessmentRecord | null> {
+  const keys = uniqueNonEmpty([
+    nonempty(params.invoice.metadata?.serviceFeeAssessmentKey),
+    nonempty(params.invoice.parent?.subscription_details?.metadata?.serviceFeeAssessmentKey),
+    ...params.lines.map(line => nonempty(line.metadata?.serviceFeeAssessmentKey)),
+  ]);
+
+  for (const assessmentKey of keys) {
+    const byKey = await params.store.findByAssessmentKey(assessmentKey);
+    if (byKey) return byKey;
+  }
+
+  if (params.invoice.id) {
+    const byInvoiceId = params.store.findByStripeInvoiceId
+      ? await params.store.findByStripeInvoiceId(params.invoice.id)
+      : null;
+    if (byInvoiceId) return byInvoiceId;
+    return params.store.findByAssessmentKey(
+      createInvoiceServiceFeeAssessmentKey(params.invoice.id)
+    );
+  }
+
+  return null;
+}
+
+async function recordEffectiveRateDeviation(params: {
+  store: ServiceFeeSettlementStore;
+  assessment: ServiceFeeAssessmentRecord;
+  settledProductMinor: number;
+  chargedFeeMinor: number;
+  deps: KiloPassServiceFeeSettlementDependencies;
+  now: Date;
+}): Promise<ServiceFeeAssessmentRecord> {
+  if (params.assessment.outcome !== 'charged') {
+    return params.assessment;
+  }
+
+  const expectedFromSettled = calculateServiceFeeMinor(params.settledProductMinor);
+  const deviation = Math.abs(params.chargedFeeMinor - expectedFromSettled);
+  if (deviation <= SERVICE_FEE_RATE_DEVIATION_THRESHOLD_MINOR) {
+    return params.assessment;
+  }
+
+  const metadata = sanitizeServiceFeeAssessmentMetadata({
+    ...params.assessment.metadata,
+    service_fee_rate_deviation: true,
+  });
+  const updated = metadata.service_fee_rate_deviation
+    ? await params.store.update(params.assessment.assessmentKey, { metadata })
+    : params.assessment;
+
+  await alertSafely({
+    assessmentKey: params.assessment.assessmentKey,
+    flow: params.assessment.flow,
+    kiloUserId: params.assessment.kiloUserId,
+    organizationId: params.assessment.organizationId,
+    stripeInvoiceId: params.assessment.stripeInvoiceId,
+    stripePaymentIntentId: params.assessment.stripePaymentIntentId,
+    stripeChargeId: params.assessment.stripeChargeId,
+    eligibleSubtotalMinor: params.settledProductMinor,
+    expectedFeeMinor: expectedFromSettled,
+    failureCode: SERVICE_FEE_FAILURE_RATE_DEVIATION,
+    deps: {
+      ...params.deps,
+      sendAlert: params.deps.sendRateDeviationAlert ?? params.deps.sendAlert,
+    },
+    now: params.now,
+  });
+
+  return updated;
+}
+
+function findFeeLine(
+  lines: readonly Stripe.InvoiceLineItem[],
+  assessment: ServiceFeeAssessmentRecord
+): Stripe.InvoiceLineItem | undefined {
+  const byAssessmentKey = lines.find(
+    line =>
+      isServiceFeeInvoiceLine(line) &&
+      line.metadata?.serviceFeeAssessmentKey === assessment.assessmentKey
+  );
+  if (byAssessmentKey) return byAssessmentKey;
+
+  const byMetadata = lines.find(isServiceFeeInvoiceLine);
+  if (byMetadata) return byMetadata;
+
+  const feePriceId = nonempty(assessment.stripeFeePriceId);
+  if (!feePriceId) return undefined;
+  return lines.find(line => invoiceLinePriceId(line) === feePriceId);
+}
+
+function invoiceLinePriceId(line: Stripe.InvoiceLineItem): string | null {
+  return nonempty(line.pricing?.price_details?.price);
+}
+
+async function loadSubscription(
+  invoice: Stripe.Invoice,
+  stripe: KiloPassServiceFeeSettlementStripe
+): Promise<Stripe.Subscription | null> {
+  const reference = invoice.parent?.subscription_details?.subscription;
+  if (!reference) return null;
+  if (typeof reference !== 'string') return reference;
+  if (!stripe.subscriptions?.retrieve) return null;
+  try {
+    return await stripe.subscriptions.retrieve(reference);
+  } catch {
+    return null;
+  }
+}
+
+function hasPaidEvidence(invoice: Stripe.Invoice): boolean {
+  return invoice.status === 'paid' || typeof invoice.status_transitions?.paid_at === 'number';
+}
+
+function invoiceStripeIds(
+  invoice: Stripe.Invoice,
+  paymentIntentId?: string | null,
+  chargeId?: string | null
+): ServiceFeeStripeIds {
+  let resolvedPaymentIntentId = nonempty(paymentIntentId);
+  let resolvedChargeId = nonempty(chargeId);
+
+  for (const payment of invoice.payments?.data ?? []) {
+    if (payment.status && payment.status !== 'paid') continue;
+    const paymentRef = payment.payment;
+    if (!paymentRef) continue;
+    if (paymentRef.type === 'payment_intent' && !resolvedPaymentIntentId) {
+      resolvedPaymentIntentId = referenceId(paymentRef.payment_intent);
+      if (
+        !resolvedChargeId &&
+        paymentRef.payment_intent &&
+        typeof paymentRef.payment_intent !== 'string'
+      ) {
+        resolvedChargeId = referenceId(paymentRef.payment_intent.latest_charge);
+      }
+    }
+    if (paymentRef.type === 'charge' && !resolvedChargeId) {
+      resolvedChargeId = referenceId(paymentRef.charge);
+    }
+  }
+
+  return {
+    stripeInvoiceId: invoice.id,
+    stripeCustomerId: customerId(invoice.customer),
+    stripePaymentIntentId: resolvedPaymentIntentId,
+    stripeChargeId: resolvedChargeId,
+  };
+}
+
+function referenceId(value: string | { id?: string } | null | undefined): string | null {
+  if (typeof value === 'string') return nonempty(value);
+  if (value && typeof value.id === 'string') return nonempty(value.id);
+  return null;
+}
+
+function customerId(
+  customer: string | Stripe.Customer | Stripe.DeletedCustomer | null | undefined
+): string | null {
+  if (typeof customer === 'string' && customer.trim()) return customer;
+  if (customer && typeof customer === 'object' && 'id' in customer && customer.id) {
+    return customer.id;
+  }
+  return null;
+}
+
+function nonempty(value: string | null | undefined): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+
+function uniqueNonEmpty(values: Array<string | null>): string[] {
+  return [...new Set(values.filter((value): value is string => Boolean(value)))];
+}
+
+function unixToDate(value: number | null | undefined): Date | null {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) return null;
+  return new Date(value * 1000);
+}
+
+function ignored(
+  assessment: ServiceFeeAssessmentRecord | null,
+  grossPaidMinor: number
+): KiloPassServiceFeeSettlementResult {
+  return {
+    status: 'ignored',
+    settledProductMinor: assessment?.settledProductMinor ?? 0,
+    chargedFeeMinor: assessment?.chargedFeeMinor ?? 0,
+    grossPaidMinor,
+    assessment,
+  };
+}
+
+async function alertSafely(params: {
+  assessmentKey: string;
+  flow: ServiceFeeAssessmentRecord['flow'] | 'personal_kilo_pass';
+  kiloUserId?: string | null;
+  organizationId?: string | null;
+  stripeInvoiceId?: string | null;
+  stripePaymentIntentId?: string | null;
+  stripeChargeId?: string | null;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  failureCode: string;
+  deps: KiloPassServiceFeeSettlementDependencies;
+  now: Date;
+}): Promise<void> {
+  const sendAlert = params.deps.sendAlert ?? sendMissedServiceFeeAlert;
+  try {
+    await sendAlert({
+      assessmentKey: params.assessmentKey,
+      flow: params.flow,
+      kiloUserId: params.kiloUserId,
+      organizationId: params.organizationId,
+      stripeInvoiceId: params.stripeInvoiceId,
+      stripePaymentIntentId: params.stripePaymentIntentId,
+      stripeChargeId: params.stripeChargeId,
+      eligibleSubtotalMinor: params.eligibleSubtotalMinor,
+      expectedFeeMinor: params.expectedFeeMinor,
+      currency: SERVICE_FEE_SUPPORTED_CURRENCY,
+      failureCode: params.failureCode,
+      attemptedAt: params.now,
+    });
+  } catch {
+    // Alert failure must not change settlement outcome.
+  }
+}
diff --git a/apps/web/src/lib/service-fees/stripe-lines.test.ts b/apps/web/src/lib/service-fees/stripe-lines.test.ts
new file mode 100644
index 0000000000..1b6421535d
--- /dev/null
+++ b/apps/web/src/lib/service-fees/stripe-lines.test.ts
@@ -0,0 +1,388 @@
+import { describe, expect, test, jest } from '@jest/globals';
+import type Stripe from 'stripe';
+
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import { getKnownStripePriceIdsForKiloClaw } from '@/lib/kiloclaw/stripe-price-ids.server';
+import { SEAT_PRODUCT_IDS } from '@/lib/organizations/stripe-seat-line-items';
+import { calculateServiceFeeMinor } from '@/lib/service-fees/calculation';
+import {
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  buildServiceFeeLineMetadata,
+  getEligibleKiloPassSubtotalMinor,
+  isEligibleKiloPassInvoiceLine,
+  isKiloClawInvoiceLine,
+  isKnownKiloPassInvoiceLine,
+  isSeatInvoiceLine,
+  isServiceFeeCheckoutLine,
+  isServiceFeeInvoiceLine,
+  isServiceFeeMetadata,
+  listAllInvoiceLineItems,
+  sumEligibleKiloPassSubtotalMinor,
+  type InvoiceLineItemListClient,
+} from '@/lib/service-fees/stripe-lines';
+
+const KILO_PASS_PRICE_ID = getKnownStripePriceIdsForKiloPass()[0]!;
+const KILOCLAW_PRICE_ID = getKnownStripePriceIdsForKiloClaw()[0]!;
+const SEAT_PRODUCT_ID = [...SEAT_PRODUCT_IDS][0]!;
+const SEAT_PRICE_ID = process.env.STRIPE_TEAMS_MONTHLY_PRICE_ID!;
+
+function invoiceLine(
+  overrides: Partial<Stripe.InvoiceLineItem> & {
+    amount?: number;
+    currency?: string;
+    metadata?: Stripe.Metadata;
+    pricing?: Stripe.InvoiceLineItem['pricing'];
+    parent?: Stripe.InvoiceLineItem['parent'];
+    pretax_credit_amounts?: Stripe.InvoiceLineItem['pretax_credit_amounts'];
+    discount_amounts?: Stripe.InvoiceLineItem['discount_amounts'];
+    taxes?: Stripe.InvoiceLineItem['taxes'];
+    description?: string | null;
+  }
+): Stripe.InvoiceLineItem {
+  return {
+    id: overrides.id ?? 'il_test',
+    object: 'line_item',
+    amount: overrides.amount ?? 4_900,
+    currency: overrides.currency ?? 'usd',
+    description: overrides.description ?? 'line',
+    discountable: true,
+    discount_amounts: overrides.discount_amounts ?? null,
+    discounts: [],
+    invoice: 'in_test',
+    livemode: false,
+    metadata: overrides.metadata ?? {},
+    parent: overrides.parent ?? null,
+    period: { start: 1, end: 2 },
+    pretax_credit_amounts: overrides.pretax_credit_amounts ?? null,
+    pricing: overrides.pricing ?? null,
+    quantity: 1,
+    subscription: overrides.subscription ?? null,
+    taxes: overrides.taxes ?? null,
+    ...overrides,
+  } as Stripe.InvoiceLineItem;
+}
+
+function pricedLine(
+  priceId: string,
+  amount: number,
+  extra: Partial<Parameters<typeof invoiceLine>[0]> = {}
+) {
+  return invoiceLine({
+    amount,
+    pricing: {
+      type: 'price_details',
+      unit_amount_decimal: String(amount),
+      price_details: { price: priceId, product: extra.pricing?.price_details?.product ?? 'prod_x' },
+    },
+    ...extra,
+  });
+}
+
+function invoiceWithLines(
+  lines: Stripe.InvoiceLineItem[],
+  hasMore = false
+): Pick<Stripe.Invoice, 'id' | 'lines' | 'currency'> & Stripe.Invoice {
+  return {
+    id: 'in_test',
+    currency: 'usd',
+    lines: {
+      object: 'list',
+      data: lines,
+      has_more: hasMore,
+      url: '/v1/invoices/in_test/lines',
+    },
+  } as Stripe.Invoice;
+}
+
+describe('service fee metadata and line classifiers', () => {
+  test('recognizes namespaced fee metadata and ignores description-only lines', () => {
+    const metadata = buildServiceFeeLineMetadata('checkout:abc');
+    expect(metadata).toEqual({
+      type: SERVICE_FEE_METADATA_TYPE,
+      serviceFeeVersion: SERVICE_FEE_VERSION,
+      serviceFeeAssessmentKey: 'checkout:abc',
+      serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+    });
+    expect(isServiceFeeMetadata(metadata)).toBe(true);
+    expect(isServiceFeeMetadata({ type: SERVICE_FEE_METADATA_TYPE })).toBe(false);
+    expect(isServiceFeeMetadata({ serviceFeeVersion: SERVICE_FEE_VERSION })).toBe(false);
+
+    expect(
+      isServiceFeeInvoiceLine(
+        invoiceLine({
+          description: SERVICE_FEE_DESCRIPTION,
+          metadata: {},
+        })
+      )
+    ).toBe(false);
+    expect(
+      isServiceFeeInvoiceLine(
+        invoiceLine({
+          description: SERVICE_FEE_DESCRIPTION,
+          metadata,
+        })
+      )
+    ).toBe(true);
+  });
+
+  test('recognizes checkout fee lines from product metadata, not description', () => {
+    expect(
+      isServiceFeeCheckoutLine({
+        price_data: {
+          currency: 'usd',
+          unit_amount: 245,
+          product_data: {
+            name: SERVICE_FEE_DESCRIPTION,
+            metadata: buildServiceFeeLineMetadata('checkout:abc'),
+          },
+        },
+      })
+    ).toBe(true);
+    expect(
+      isServiceFeeCheckoutLine({
+        description: SERVICE_FEE_DESCRIPTION,
+        price: {
+          id: 'price_fee',
+          object: 'price',
+          product: {
+            id: 'prod_fee',
+            object: 'product',
+            metadata: buildServiceFeeLineMetadata('checkout:abc'),
+          },
+        },
+      } as unknown as Stripe.LineItem)
+    ).toBe(true);
+    expect(
+      isServiceFeeCheckoutLine({
+        description: SERVICE_FEE_DESCRIPTION,
+        price: { id: 'price_pass', object: 'price', product: 'prod_pass' },
+      } as Stripe.LineItem)
+    ).toBe(false);
+  });
+
+  test('classifies Kilo Pass, seats, and KiloClaw without treating a fee line as any of them', () => {
+    const kiloPassLine = pricedLine(KILO_PASS_PRICE_ID, 4_900);
+    const seatLine = pricedLine(SEAT_PRICE_ID, 72_000, {
+      pricing: {
+        type: 'price_details',
+        unit_amount_decimal: '72000',
+        price_details: { price: SEAT_PRICE_ID, product: SEAT_PRODUCT_ID },
+      },
+    });
+    const freeSeatLine = pricedLine('price_free_seats', 0, {
+      pricing: {
+        type: 'price_details',
+        unit_amount_decimal: '0',
+        price_details: { price: 'price_free_seats', product: SEAT_PRODUCT_ID },
+      },
+    });
+    const kiloClawLine = pricedLine(KILOCLAW_PRICE_ID, 20_000);
+    const feeLine = invoiceLine({
+      amount: 245,
+      description: SERVICE_FEE_DESCRIPTION,
+      metadata: buildServiceFeeLineMetadata('invoice:in_test'),
+      pricing: {
+        type: 'price_details',
+        unit_amount_decimal: '245',
+        price_details: { price: KILO_PASS_PRICE_ID, product: 'prod_fee' },
+      },
+    });
+
+    expect(isKnownKiloPassInvoiceLine(kiloPassLine)).toBe(true);
+    expect(isSeatInvoiceLine(seatLine)).toBe(true);
+    expect(isSeatInvoiceLine(freeSeatLine)).toBe(true);
+    expect(isKiloClawInvoiceLine(kiloClawLine)).toBe(true);
+    expect(isServiceFeeInvoiceLine(feeLine)).toBe(true);
+    expect(isKnownKiloPassInvoiceLine(feeLine)).toBe(false);
+    expect(isSeatInvoiceLine(feeLine)).toBe(false);
+    expect(isKiloClawInvoiceLine(feeLine)).toBe(false);
+    expect(isEligibleKiloPassInvoiceLine(feeLine)).toBe(false);
+  });
+});
+
+describe('eligible Kilo Pass subtotal', () => {
+  test('nets positive and negative Kilo Pass prorations before the fee and ignores tax fields', () => {
+    const lines = [
+      pricedLine(KILO_PASS_PRICE_ID, 3_000, {
+        id: 'il_proration_debit',
+        taxes: [
+          {
+            amount: 240,
+            tax_behavior: 'exclusive',
+            tax_rate_details: { tax_rate: 'txr_1' },
+            taxability_reason: 'standard_rated',
+            taxable_amount: 3_000,
+            type: 'tax_rate_details',
+          },
+        ],
+      }),
+      pricedLine(KILO_PASS_PRICE_ID, -1_000, { id: 'il_proration_credit' }),
+    ];
+
+    expect(sumEligibleKiloPassSubtotalMinor({ lines, currency: 'usd' })).toBe(2_000);
+    expect(
+      calculateServiceFeeMinor(sumEligibleKiloPassSubtotalMinor({ lines, currency: 'usd' }))
+    ).toBe(100);
+  });
+
+  test('excludes service-fee lines and seat-only discounts from the Kilo Pass base', () => {
+    const lines = [
+      pricedLine(KILO_PASS_PRICE_ID, 4_900, {
+        id: 'il_pass',
+        pretax_credit_amounts: [{ amount: 980, type: 'discount', discount: 'di_pass' }],
+      }),
+      pricedLine(SEAT_PRICE_ID, 72_000, {
+        id: 'il_seat',
+        pricing: {
+          type: 'price_details',
+          unit_amount_decimal: '72000',
+          price_details: { price: SEAT_PRICE_ID, product: SEAT_PRODUCT_ID },
+        },
+        pretax_credit_amounts: [{ amount: 72_000, type: 'discount', discount: 'di_seat' }],
+      }),
+      invoiceLine({
+        id: 'il_fee',
+        amount: 196,
+        description: SERVICE_FEE_DESCRIPTION,
+        metadata: buildServiceFeeLineMetadata('invoice:in_test'),
+      }),
+      pricedLine(KILOCLAW_PRICE_ID, 20_000, { id: 'il_claw' }),
+    ];
+
+    expect(sumEligibleKiloPassSubtotalMinor({ lines, currency: 'usd' })).toBe(3_920);
+    expect(calculateServiceFeeMinor(3_920)).toBe(196);
+  });
+
+  test('does not classify an unrelated item solely from subscription metadata', () => {
+    const unrelatedLine = pricedLine('price_unrelated', 1_000, {
+      id: 'il_unrelated',
+      subscription: 'sub_pass',
+      parent: {
+        type: 'subscription_item_details',
+        invoice_item_details: null,
+        subscription_item_details: {
+          invoice_item: null,
+          subscription: 'sub_pass',
+          subscription_item: 'si_unrelated',
+          proration: false,
+          proration_details: { credited_items: null },
+        },
+      },
+    });
+    const subscription = {
+      id: 'sub_pass',
+      metadata: {
+        type: 'kilo-pass',
+        kiloUserId: 'user_1',
+        tier: 'tier_49',
+        cadence: 'monthly',
+      },
+      items: {
+        data: [
+          {
+            id: 'si_unrelated',
+            metadata: {},
+            price: { id: 'price_unrelated' },
+          },
+        ],
+      },
+    } as unknown as Stripe.Subscription;
+
+    expect(isEligibleKiloPassInvoiceLine(unrelatedLine, subscription)).toBe(false);
+    expect(
+      sumEligibleKiloPassSubtotalMinor({
+        lines: [unrelatedLine],
+        currency: 'usd',
+        subscription,
+      })
+    ).toBe(0);
+  });
+
+  test('uses aggregate rounding instead of summing per-line fees', () => {
+    const lines = [
+      pricedLine(KILO_PASS_PRICE_ID, 10, { id: 'il_a' }),
+      pricedLine(KILO_PASS_PRICE_ID, 10, { id: 'il_b' }),
+    ];
+    const subtotal = sumEligibleKiloPassSubtotalMinor({ lines, currency: 'usd' });
+
+    expect(subtotal).toBe(20);
+    expect(calculateServiceFeeMinor(subtotal)).toBe(1);
+    expect(calculateServiceFeeMinor(10) + calculateServiceFeeMinor(10)).toBe(2);
+  });
+
+  test('clamps a net-negative eligible subtotal to zero', () => {
+    expect(
+      sumEligibleKiloPassSubtotalMinor({
+        lines: [pricedLine(KILO_PASS_PRICE_ID, -500, { id: 'il_credit_only' })],
+        currency: 'usd',
+      })
+    ).toBe(0);
+  });
+});
+
+describe('listAllInvoiceLineItems', () => {
+  test('uses embedded lines when the invoice is not paginated', async () => {
+    const listLineItems = jest.fn<InvoiceLineItemListClient['invoices']['listLineItems']>();
+    const embedded = [pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_embedded' })];
+
+    await expect(
+      listAllInvoiceLineItems({
+        invoice: invoiceWithLines(embedded, false),
+        stripe: { invoices: { listLineItems } },
+      })
+    ).resolves.toEqual(embedded);
+    expect(listLineItems).not.toHaveBeenCalled();
+  });
+
+  test('retrieves every page through the injected Stripe client when has_more is true', async () => {
+    const firstPage = [pricedLine(KILO_PASS_PRICE_ID, 10, { id: 'il_1' })];
+    const secondPage = [pricedLine(KILO_PASS_PRICE_ID, 10, { id: 'il_2' })];
+    const thirdPage = [pricedLine(KILO_PASS_PRICE_ID, 4_900, { id: 'il_3' })];
+    const listLineItems = jest
+      .fn<InvoiceLineItemListClient['invoices']['listLineItems']>()
+      .mockResolvedValueOnce({ data: firstPage, has_more: true })
+      .mockResolvedValueOnce({ data: secondPage, has_more: true })
+      .mockResolvedValueOnce({ data: thirdPage, has_more: false });
+
+    const invoice = invoiceWithLines(
+      [pricedLine(KILO_PASS_PRICE_ID, 10, { id: 'il_stale_embedded' })],
+      true
+    );
+    const lines = await listAllInvoiceLineItems({
+      invoice,
+      stripe: { invoices: { listLineItems } },
+    });
+
+    expect(lines.map(line => line.id)).toEqual(['il_1', 'il_2', 'il_3']);
+    expect(listLineItems).toHaveBeenNthCalledWith(1, 'in_test', { limit: 100 });
+    expect(listLineItems).toHaveBeenNthCalledWith(2, 'in_test', {
+      limit: 100,
+      starting_after: 'il_1',
+    });
+    expect(listLineItems).toHaveBeenNthCalledWith(3, 'in_test', {
+      limit: 100,
+      starting_after: 'il_2',
+    });
+
+    await expect(
+      getEligibleKiloPassSubtotalMinor({
+        invoice,
+        stripe: {
+          invoices: {
+            listLineItems: jest
+              .fn<InvoiceLineItemListClient['invoices']['listLineItems']>()
+              .mockResolvedValueOnce({
+                data: [...firstPage, ...secondPage, ...thirdPage],
+                has_more: false,
+              }),
+          },
+        },
+      })
+    ).resolves.toBe(4_920);
+  });
+});
diff --git a/apps/web/src/lib/service-fees/stripe-lines.ts b/apps/web/src/lib/service-fees/stripe-lines.ts
new file mode 100644
index 0000000000..42fc79cc74
--- /dev/null
+++ b/apps/web/src/lib/service-fees/stripe-lines.ts
@@ -0,0 +1,275 @@
+import 'server-only';
+
+import type Stripe from 'stripe';
+
+import {
+  STRIPE_ENTERPRISE_ANNUAL_PRICE_ID,
+  STRIPE_ENTERPRISE_MONTHLY_PRICE_ID,
+  STRIPE_TEAMS_ANNUAL_PRICE_ID,
+  STRIPE_TEAMS_MONTHLY_PRICE_ID,
+} from '@/lib/config.server';
+import { getOrganizationKiloPassMetadata } from '@/lib/kilo-pass-org/stripe-metadata';
+import { getKiloPassMetadataFromStripeMetadata } from '@/lib/kilo-pass/stripe-handlers-metadata';
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import { getKnownStripePriceIdsForKiloClaw } from '@/lib/kiloclaw/stripe-price-ids.server';
+import { SEAT_PRODUCT_IDS, isSeatLineItem } from '@/lib/organizations/stripe-seat-line-items';
+import { getNetPretaxLineAmountMinor } from '@/lib/service-fees/calculation';
+import {
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import type {
+  ServiceFeeCommercialMetadata,
+  ServiceFeeFlow,
+  ServiceFeeLineMetadata,
+} from '@/lib/service-fees/types';
+
+const INVOICE_LINE_PAGE_SIZE = 100;
+
+const KNOWN_SEAT_PRICE_IDS = new Set(
+  [
+    STRIPE_TEAMS_MONTHLY_PRICE_ID,
+    STRIPE_TEAMS_ANNUAL_PRICE_ID,
+    STRIPE_ENTERPRISE_MONTHLY_PRICE_ID,
+    STRIPE_ENTERPRISE_ANNUAL_PRICE_ID,
+  ].filter((priceId): priceId is string => Boolean(priceId && priceId.trim()))
+);
+
+export type InvoiceLineItemListClient = {
+  invoices: {
+    listLineItems: (
+      invoiceId: string,
+      params?: Stripe.InvoiceListLineItemsParams
+    ) => PromiseLike<Pick<Stripe.ApiList<Stripe.InvoiceLineItem>, 'data' | 'has_more'>>;
+  };
+};
+
+export type CheckoutLineLike = Stripe.LineItem | Stripe.Checkout.SessionCreateParams.LineItem;
+
+export function buildServiceFeeLineMetadata(assessmentKey: string): ServiceFeeLineMetadata {
+  return {
+    type: SERVICE_FEE_METADATA_TYPE,
+    serviceFeeVersion: SERVICE_FEE_VERSION,
+    serviceFeeAssessmentKey: assessmentKey,
+    serviceFeeRateBasisPoints: String(
+      SERVICE_FEE_RATE_BASIS_POINTS
+    ) as ServiceFeeLineMetadata['serviceFeeRateBasisPoints'],
+  };
+}
+
+export function buildServiceFeeCommercialMetadata(input: {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  principalMinor?: number;
+  organizationId?: string;
+}): ServiceFeeCommercialMetadata {
+  return {
+    serviceFeeAssessmentKey: input.assessmentKey,
+    serviceFeeVersion: SERVICE_FEE_VERSION,
+    serviceFeeFlow: input.flow,
+    ...(input.principalMinor !== undefined
+      ? { serviceFeePrincipalMinor: String(input.principalMinor) }
+      : {}),
+    ...(input.organizationId ? { serviceFeeOrganizationId: input.organizationId } : {}),
+  };
+}
+
+export function isServiceFeeMetadata(
+  metadata: Stripe.Metadata | Stripe.MetadataParam | null | undefined
+): boolean {
+  return (
+    metadata?.type === SERVICE_FEE_METADATA_TYPE &&
+    metadata.serviceFeeVersion === SERVICE_FEE_VERSION
+  );
+}
+
+export function isServiceFeeInvoiceLine(line: Stripe.InvoiceLineItem): boolean {
+  return isServiceFeeMetadata(line.metadata);
+}
+
+export function isServiceFeeCheckoutLine(line: CheckoutLineLike): boolean {
+  if ('price_data' in line && isServiceFeeMetadata(line.price_data?.product_data?.metadata)) {
+    return true;
+  }
+
+  if (!('price' in line) || !line.price || typeof line.price === 'string') {
+    return false;
+  }
+
+  if (isServiceFeeMetadata(line.price.metadata)) return true;
+
+  const product = line.price.product;
+  if (!product || typeof product === 'string' || product.deleted) return false;
+  return isServiceFeeMetadata(product.metadata);
+}
+
+export function isKnownKiloPassInvoiceLine(
+  line: Stripe.InvoiceLineItem,
+  subscription?: Stripe.Subscription | null
+): boolean {
+  if (
+    isServiceFeeInvoiceLine(line) ||
+    isSeatInvoiceLine(line, subscription) ||
+    isKiloClawInvoiceLine(line)
+  ) {
+    return false;
+  }
+
+  const priceId = getInvoiceLinePriceId(line);
+  if (priceId && getKnownKiloPassPriceIdSet().has(priceId)) return true;
+
+  if (
+    getKiloPassMetadataFromStripeMetadata(line.metadata) ||
+    getOrganizationKiloPassMetadata(line.metadata)
+  ) {
+    return true;
+  }
+
+  if (!subscription || !lineBelongsToSubscription(line, subscription)) return false;
+
+  const subscriptionItemId = getInvoiceLineSubscriptionItemId(line);
+  if (!subscriptionItemId) return false;
+  const item = subscription.items?.data.find(candidate => candidate.id === subscriptionItemId);
+  if (!item) return false;
+
+  return (
+    getKnownKiloPassPriceIdSet().has(item.price.id) ||
+    getKiloPassMetadataFromStripeMetadata(item.metadata) !== null ||
+    getOrganizationKiloPassMetadata(item.metadata) !== null
+  );
+}
+
+export function isSeatInvoiceLine(
+  line: Stripe.InvoiceLineItem,
+  subscription?: Stripe.Subscription | null
+): boolean {
+  if (isServiceFeeInvoiceLine(line)) return false;
+
+  const productId = getInvoiceLineProductId(line);
+  if (productId && SEAT_PRODUCT_IDS.has(productId)) return true;
+
+  const priceId = getInvoiceLinePriceId(line);
+  if (priceId && KNOWN_SEAT_PRICE_IDS.has(priceId)) return true;
+
+  if (!subscription) return false;
+  const subscriptionItemId = getInvoiceLineSubscriptionItemId(line);
+  if (!subscriptionItemId) return false;
+  const item = subscription.items?.data.find(candidate => candidate.id === subscriptionItemId);
+  return item ? isSeatLineItem(item) : false;
+}
+
+export function isKiloClawInvoiceLine(line: Stripe.InvoiceLineItem): boolean {
+  if (isServiceFeeInvoiceLine(line)) return false;
+
+  const priceId = getInvoiceLinePriceId(line);
+  if (priceId && getKnownKiloClawPriceIdSet().has(priceId)) return true;
+
+  return line.metadata?.type === 'kiloclaw';
+}
+
+export function isEligibleKiloPassInvoiceLine(
+  line: Stripe.InvoiceLineItem,
+  subscription?: Stripe.Subscription | null
+): boolean {
+  return isKnownKiloPassInvoiceLine(line, subscription);
+}
+
+export function sumEligibleKiloPassSubtotalMinor(input: {
+  lines: readonly Stripe.InvoiceLineItem[];
+  currency: string;
+  subscription?: Stripe.Subscription | null;
+}): number {
+  let total = BigInt(0);
+  for (const line of input.lines) {
+    if (!isEligibleKiloPassInvoiceLine(line, input.subscription)) continue;
+    total += BigInt(getNetPretaxLineAmountMinor(line, input.currency));
+  }
+  if (total <= BigInt(0)) return 0;
+  if (total > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error('eligible subtotal exceeds safe integer range');
+  }
+  return Number(total);
+}
+
+export async function listAllInvoiceLineItems(input: {
+  invoice: Pick<Stripe.Invoice, 'id' | 'lines'>;
+  stripe: InvoiceLineItemListClient;
+}): Promise<Stripe.InvoiceLineItem[]> {
+  if (!input.invoice.lines?.has_more) {
+    return input.invoice.lines?.data ?? [];
+  }
+  if (!input.invoice.id) {
+    throw new Error('invoice id is required to list all invoice lines');
+  }
+
+  const lines: Stripe.InvoiceLineItem[] = [];
+  let startingAfter: string | undefined;
+
+  for (;;) {
+    const page = await input.stripe.invoices.listLineItems(input.invoice.id, {
+      limit: INVOICE_LINE_PAGE_SIZE,
+      ...(startingAfter ? { starting_after: startingAfter } : {}),
+    });
+    lines.push(...page.data);
+    if (!page.has_more) break;
+    const cursor = page.data.at(-1)?.id;
+    if (!cursor) {
+      throw new Error(`invoice ${input.invoice.id} line page is marked has_more without a cursor`);
+    }
+    startingAfter = cursor;
+  }
+
+  return lines;
+}
+
+export async function getEligibleKiloPassSubtotalMinor(input: {
+  invoice: Stripe.Invoice;
+  stripe: InvoiceLineItemListClient;
+  subscription?: Stripe.Subscription | null;
+}): Promise<number> {
+  const lines = await listAllInvoiceLineItems({
+    invoice: input.invoice,
+    stripe: input.stripe,
+  });
+  return sumEligibleKiloPassSubtotalMinor({
+    lines,
+    currency: input.invoice.currency,
+    subscription: input.subscription,
+  });
+}
+
+function getInvoiceLinePriceId(line: Stripe.InvoiceLineItem): string | null {
+  return line.pricing?.price_details?.price ?? null;
+}
+
+function getInvoiceLineProductId(line: Stripe.InvoiceLineItem): string | null {
+  return line.pricing?.price_details?.product ?? null;
+}
+
+function getInvoiceLineSubscriptionItemId(line: Stripe.InvoiceLineItem): string | null {
+  const itemId = line.parent?.subscription_item_details?.subscription_item;
+  return typeof itemId === 'string' ? itemId : null;
+}
+
+function lineBelongsToSubscription(
+  line: Stripe.InvoiceLineItem,
+  subscription: Stripe.Subscription
+): boolean {
+  const lineSubscriptionId =
+    typeof line.subscription === 'string' ? line.subscription : (line.subscription?.id ?? null);
+  const parentSubscriptionId = line.parent?.subscription_item_details?.subscription ?? null;
+  return lineSubscriptionId === subscription.id || parentSubscriptionId === subscription.id;
+}
+
+function getKnownKiloPassPriceIdSet(): Set<string> {
+  return new Set(getKnownStripePriceIdsForKiloPass());
+}
+
+function getKnownKiloClawPriceIdSet(): Set<string> {
+  try {
+    return new Set(getKnownStripePriceIdsForKiloClaw());
+  } catch {
+    return new Set();
+  }
+}
diff --git a/apps/web/src/lib/service-fees/tax.test.ts b/apps/web/src/lib/service-fees/tax.test.ts
new file mode 100644
index 0000000000..7f032765dd
--- /dev/null
+++ b/apps/web/src/lib/service-fees/tax.test.ts
@@ -0,0 +1,76 @@
+import { describe, expect, test, jest } from '@jest/globals';
+
+import {
+  buildInheritedInlineServiceFeeTaxInput,
+  readServiceFeeTaxBehaviorFromPrice,
+  resolveServiceFeeTaxInput,
+  type StripePriceTaxReader,
+} from '@/lib/service-fees/tax';
+
+function priceReader(retrieve: StripePriceTaxReader['prices']['retrieve']): StripePriceTaxReader {
+  return { prices: { retrieve } };
+}
+
+describe('service fee tax input', () => {
+  test('public resolver inherits inline treatment and mirrors Price tax_behavior', async () => {
+    const retrieve = jest.fn<StripePriceTaxReader['prices']['retrieve']>(async id => ({
+      id,
+      tax_behavior: 'exclusive',
+    }));
+
+    await expect(
+      resolveServiceFeeTaxInput({
+        principal: { kind: 'price', priceId: 'price_1' },
+        stripe: priceReader(retrieve),
+      })
+    ).resolves.toEqual({ source: 'price', taxBehavior: 'exclusive' });
+    await expect(resolveServiceFeeTaxInput({ principal: { kind: 'inline' } })).resolves.toEqual({
+      source: 'inline_inherit',
+    });
+    expect(retrieve).toHaveBeenCalledWith('price_1');
+  });
+
+  test('Price-based resolution requires a Stripe reader', async () => {
+    await expect(
+      resolveServiceFeeTaxInput({ principal: { kind: 'price', priceId: 'price_1' } })
+    ).rejects.toThrow('service_fee_tax_behavior_unresolved');
+  });
+
+  test('inline helper represents inherited treatment without Price retrieval', () => {
+    expect(buildInheritedInlineServiceFeeTaxInput()).toEqual({ source: 'inline_inherit' });
+  });
+
+  test('price helper mirrors exclusive and inclusive tax_behavior', async () => {
+    await expect(
+      readServiceFeeTaxBehaviorFromPrice({
+        stripe: priceReader(async () => ({ id: 'price_1', tax_behavior: 'exclusive' })),
+        priceId: 'price_1',
+      })
+    ).resolves.toEqual({ source: 'price', taxBehavior: 'exclusive' });
+
+    await expect(
+      readServiceFeeTaxBehaviorFromPrice({
+        stripe: priceReader(async () => ({ id: 'price_2', tax_behavior: 'inclusive' })),
+        priceId: 'price_2',
+      })
+    ).resolves.toEqual({ source: 'price', taxBehavior: 'inclusive' });
+  });
+
+  test('price helper rejects unspecified behavior and propagates retrieval failure', async () => {
+    await expect(
+      readServiceFeeTaxBehaviorFromPrice({
+        stripe: priceReader(async () => ({ id: 'price_2', tax_behavior: 'unspecified' })),
+        priceId: 'price_2',
+      })
+    ).rejects.toThrow('service_fee_tax_behavior_unresolved');
+
+    await expect(
+      readServiceFeeTaxBehaviorFromPrice({
+        stripe: priceReader(async () => {
+          throw new Error('stripe retrieval failed');
+        }),
+        priceId: 'price_3',
+      })
+    ).rejects.toThrow('stripe retrieval failed');
+  });
+});
diff --git a/apps/web/src/lib/service-fees/tax.ts b/apps/web/src/lib/service-fees/tax.ts
new file mode 100644
index 0000000000..902734e177
--- /dev/null
+++ b/apps/web/src/lib/service-fees/tax.ts
@@ -0,0 +1,64 @@
+import 'server-only';
+
+import type Stripe from 'stripe';
+
+export type ServiceFeeTaxBehavior = Extract<Stripe.Price.TaxBehavior, 'exclusive' | 'inclusive'>;
+
+export type ServiceFeeTaxPrincipal = { kind: 'inline' } | { kind: 'price'; priceId: string };
+
+export type ServiceFeeTaxInput = {
+  source: 'inline_inherit' | 'price';
+  taxBehavior?: ServiceFeeTaxBehavior;
+};
+
+export type StripePriceTaxReader = {
+  prices: {
+    retrieve(
+      id: string,
+      params?: Stripe.PriceRetrieveParams
+    ): Promise<Pick<Stripe.Price, 'id' | 'tax_behavior'>>;
+  };
+};
+
+/**
+ * Inline principal lines omit `tax_behavior`. A fee line built the same way
+ * inherits identical treatment without retrieving a Price.
+ */
+export function buildInheritedInlineServiceFeeTaxInput(): ServiceFeeTaxInput {
+  return { source: 'inline_inherit' };
+}
+
+export async function readServiceFeeTaxBehaviorFromPrice(params: {
+  stripe: StripePriceTaxReader;
+  priceId: string;
+}): Promise<ServiceFeeTaxInput> {
+  const price = await params.stripe.prices.retrieve(params.priceId);
+  if (price.tax_behavior !== 'exclusive' && price.tax_behavior !== 'inclusive') {
+    throw new Error('service_fee_tax_behavior_unresolved');
+  }
+  return {
+    source: 'price',
+    taxBehavior: price.tax_behavior,
+  };
+}
+
+/**
+ * Finance/tax treatment was confirmed on 2026-08-11: the service-fee line
+ * follows the eligible product's Stripe tax behavior. Inline fee lines inherit
+ * treatment; Price-based fee lines mirror an explicit inclusive/exclusive value.
+ */
+export async function resolveServiceFeeTaxInput(params: {
+  principal: ServiceFeeTaxPrincipal;
+  stripe?: StripePriceTaxReader;
+}): Promise<ServiceFeeTaxInput> {
+  if (params.principal.kind === 'inline') {
+    return buildInheritedInlineServiceFeeTaxInput();
+  }
+  if (!params.stripe) {
+    throw new Error('service_fee_tax_behavior_unresolved');
+  }
+  return readServiceFeeTaxBehaviorFromPrice({
+    stripe: params.stripe,
+    priceId: params.principal.priceId,
+  });
+}
diff --git a/apps/web/src/lib/service-fees/types.ts b/apps/web/src/lib/service-fees/types.ts
new file mode 100644
index 0000000000..1fb6e8610d
--- /dev/null
+++ b/apps/web/src/lib/service-fees/types.ts
@@ -0,0 +1,170 @@
+import type Stripe from 'stripe';
+
+import type {
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+
+export const SERVICE_FEE_FLOWS = [
+  'personal_top_up',
+  'organization_top_up',
+  'personal_auto_top_up_setup',
+  'organization_auto_top_up_setup',
+  'personal_auto_top_up',
+  'organization_auto_top_up',
+  'personal_kilo_pass',
+  'organization_kilo_pass',
+] as const;
+
+export type ServiceFeeFlow = (typeof SERVICE_FEE_FLOWS)[number];
+
+export const PERSONAL_SERVICE_FEE_FLOWS = [
+  'personal_top_up',
+  'personal_auto_top_up_setup',
+  'personal_auto_top_up',
+  'personal_kilo_pass',
+] as const satisfies readonly ServiceFeeFlow[];
+
+export type PersonalServiceFeeFlow = (typeof PERSONAL_SERVICE_FEE_FLOWS)[number];
+
+export const ORGANIZATION_SERVICE_FEE_FLOWS = [
+  'organization_top_up',
+  'organization_auto_top_up_setup',
+  'organization_auto_top_up',
+  'organization_kilo_pass',
+] as const satisfies readonly ServiceFeeFlow[];
+
+export type OrganizationServiceFeeFlow = (typeof ORGANIZATION_SERVICE_FEE_FLOWS)[number];
+
+export const SERVICE_FEE_OUTCOMES = [
+  'pending',
+  'charged',
+  'exempt',
+  'pre_activation',
+  'zero_rounded',
+  'unsupported_currency',
+  'missed',
+] as const;
+
+export type ServiceFeeOutcome = (typeof SERVICE_FEE_OUTCOMES)[number];
+
+export const SERVICE_FEE_OWNER_KINDS = ['personal', 'organization'] as const;
+
+export type ServiceFeeOwnerKind = (typeof SERVICE_FEE_OWNER_KINDS)[number];
+
+export type ServiceFeePersonalOwner = {
+  kind: 'personal';
+  kiloUserId: string;
+};
+
+export type ServiceFeeOrganizationOwner = {
+  kind: 'organization';
+  organizationId: string;
+  kiloUserId?: string;
+};
+
+export type ServiceFeeOwner = ServiceFeePersonalOwner | ServiceFeeOrganizationOwner;
+
+export const SERVICE_FEE_SUPPORTED_CURRENCY = 'usd';
+
+export type ServiceFeeSupportedCurrency = typeof SERVICE_FEE_SUPPORTED_CURRENCY;
+
+export type ServiceFeeLineMetadata = {
+  type: typeof SERVICE_FEE_METADATA_TYPE;
+  serviceFeeVersion: typeof SERVICE_FEE_VERSION;
+  serviceFeeAssessmentKey: string;
+  serviceFeeRateBasisPoints: `${typeof SERVICE_FEE_RATE_BASIS_POINTS}`;
+};
+
+export type ServiceFeeCommercialMetadata = {
+  serviceFeeAssessmentKey: string;
+  serviceFeeVersion: typeof SERVICE_FEE_VERSION;
+  serviceFeeFlow: ServiceFeeFlow;
+  serviceFeePrincipalMinor?: string;
+  serviceFeeOrganizationId?: string;
+};
+
+export type PrepareAssessmentInput = {
+  assessmentKey: string;
+  flow: ServiceFeeFlow;
+  currency: string;
+  eligibilityCreatedAt: Date;
+  eligibleSubtotalMinor: number;
+  kiloUserId?: string;
+  organizationId?: string;
+  stripeCustomerId?: string;
+};
+
+export type FeeApplicationResult = {
+  assessmentId: string | null;
+  assessmentKey: string;
+  outcome: ServiceFeeOutcome;
+  eligibleSubtotalMinor: number;
+  expectedFeeMinor: number;
+  chargedFeeMinor: number;
+  checkoutLineItem?: Stripe.Checkout.SessionCreateParams.LineItem;
+};
+
+export type CalculateCumulativeFeeRefundInput = {
+  originalProductMinor: number;
+  originalFeeMinor: number;
+  cumulativeProductRefundMinor: number;
+};
+
+const PERSONAL_SERVICE_FEE_FLOW_SET = new Set<string>(PERSONAL_SERVICE_FEE_FLOWS);
+const ORGANIZATION_SERVICE_FEE_FLOW_SET = new Set<string>(ORGANIZATION_SERVICE_FEE_FLOWS);
+
+export function isServiceFeeFlow(value: string): value is ServiceFeeFlow {
+  return (SERVICE_FEE_FLOWS as readonly string[]).includes(value);
+}
+
+export function isServiceFeeOutcome(value: string): value is ServiceFeeOutcome {
+  return (SERVICE_FEE_OUTCOMES as readonly string[]).includes(value);
+}
+
+export function isPersonalServiceFeeFlow(flow: ServiceFeeFlow): flow is PersonalServiceFeeFlow {
+  return PERSONAL_SERVICE_FEE_FLOW_SET.has(flow);
+}
+
+export function isOrganizationServiceFeeFlow(
+  flow: ServiceFeeFlow
+): flow is OrganizationServiceFeeFlow {
+  return ORGANIZATION_SERVICE_FEE_FLOW_SET.has(flow);
+}
+
+export function isSupportedServiceFeeCurrency(
+  currency: string
+): currency is ServiceFeeSupportedCurrency {
+  return currency === SERVICE_FEE_SUPPORTED_CURRENCY;
+}
+
+export function getServiceFeeOwnerKind(flow: ServiceFeeFlow): ServiceFeeOwnerKind {
+  return isOrganizationServiceFeeFlow(flow) ? 'organization' : 'personal';
+}
+
+export function getServiceFeeOwner(
+  flow: ServiceFeeFlow,
+  input: Pick<PrepareAssessmentInput, 'kiloUserId' | 'organizationId'>
+): ServiceFeeOwner {
+  if (isOrganizationServiceFeeFlow(flow)) {
+    if (!input.organizationId) {
+      throw new Error(`organization service-fee flow ${flow} requires organizationId`);
+    }
+    return input.kiloUserId
+      ? {
+          kind: 'organization',
+          organizationId: input.organizationId,
+          kiloUserId: input.kiloUserId,
+        }
+      : { kind: 'organization', organizationId: input.organizationId };
+  }
+
+  if (!input.kiloUserId) {
+    throw new Error(`personal service-fee flow ${flow} requires kiloUserId`);
+  }
+  if (input.organizationId) {
+    throw new Error(`personal service-fee flow ${flow} forbids organizationId`);
+  }
+  return { kind: 'personal', kiloUserId: input.kiloUserId };
+}
diff --git a/apps/web/src/lib/stripe-3ds.test.ts b/apps/web/src/lib/stripe-3ds.test.ts
index aaa418eeb6..2eff8a8882 100644
--- a/apps/web/src/lib/stripe-3ds.test.ts
+++ b/apps/web/src/lib/stripe-3ds.test.ts
@@ -19,6 +19,8 @@ jest.mock('@/lib/kilo-pass-org/stripe-adapter', () => ({
   handleOrganizationKiloPassInvoicePaid: jest.fn().mockResolvedValue(true),
   handleOrganizationKiloPassPaymentAdverseForInvoice: jest.fn(),
   handleOrganizationKiloPassSubscriptionEvent: jest.fn(),
+  stagePreparedOrganizationKiloPassServiceFeeItem: jest.fn().mockResolvedValue(null),
+  discardStagedOrganizationKiloPassServiceFeeItem: jest.fn().mockResolvedValue(undefined),
 }));
 
 // Mock organization-seats to avoid DB calls
@@ -246,10 +248,13 @@ describe('handleUpdateSeatCount with 3DS', () => {
       expect.objectContaining({ success: true })
     );
 
-    expect(mockHandleOrganizationKiloPassInvoicePaid).toHaveBeenCalledWith({
-      invoice: paidInvoice,
-      paidSeatCount: 10,
-    });
+    expect(mockHandleOrganizationKiloPassInvoicePaid).toHaveBeenCalledWith(
+      expect.objectContaining({
+        invoice: paidInvoice,
+        paidSeatCount: 10,
+        serviceFee: expect.any(Object),
+      })
+    );
   });
 
   it('does not eagerly reconcile an organization Kilo Pass seat decrease', async () => {
diff --git a/apps/web/src/lib/stripe-client.ts b/apps/web/src/lib/stripe-client.ts
index 260fb55c69..fb6b122fcb 100644
--- a/apps/web/src/lib/stripe-client.ts
+++ b/apps/web/src/lib/stripe-client.ts
@@ -10,7 +10,9 @@ if (!stripeSecretKey) {
 const skipStripeApi =
   process.env.NODE_ENV !== 'production' && process.env.SKIP_STRIPE_API === 'true';
 
-export const client: Stripe = new Stripe(stripeSecretKey);
+export const client: Stripe = new Stripe(stripeSecretKey, {
+  apiVersion: '2025-10-29.clover',
+});
 
 type ConstrainedMetadata = UserConstrainedMetadata | OrganizationConstrainedMetdata;
 
diff --git a/apps/web/src/lib/stripe/index.test.ts b/apps/web/src/lib/stripe/index.test.ts
index bdfb618ee4..c99ec08349 100644
--- a/apps/web/src/lib/stripe/index.test.ts
+++ b/apps/web/src/lib/stripe/index.test.ts
@@ -15,7 +15,7 @@ const CURRENT_KILOCLAW_STANDARD_PRICE_ID =
 const CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID =
   process.env.STRIPE_KILO_PASS_TIER_19_MONTHLY_PRICE_ID ?? 'price_test_kilo_pass_tier_19_monthly';
 
-import { describe, test, expect, beforeEach } from '@jest/globals';
+import { describe, test, expect, beforeEach, afterEach } from '@jest/globals';
 import type * as creditsModule from '@/lib/credits';
 import type * as organizationBillingModule from '@/lib/organizations/organization-billing';
 
@@ -61,8 +61,17 @@ import {
   ensurePaymentMethodStored,
   processStripePaymentEventHook,
   handleSuccessfulChargeWithPayment,
+  handleUpdateSeatCount,
   isCardFingerprintEligibleForFreeCredits,
+  KNOWN_SEAT_PRICE_IDS,
 } from '@/lib/stripe';
+import { client } from '@/lib/stripe-client';
+import * as kiloPassOrgStripe from '@/lib/kilo-pass-org/stripe-adapter';
+import {
+  type ServiceFeeAssessmentRecord,
+  type ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import { SEAT_PRODUCT_IDS } from '@/lib/organizations/stripe-seat-line-items';
 import {
   type User,
   payment_methods,
@@ -82,6 +91,7 @@ import {
   impact_referral_conversions,
   impact_referral_reward_decisions,
   impact_referral_rewards,
+  stripe_service_fee_assessments,
 } from '@kilocode/db/schema';
 import { db, auto_deleted_at } from '@/lib/drizzle';
 import { insertTestUser } from '@/tests/helpers/user.helper';
@@ -113,6 +123,7 @@ import { cleanupDbForTest } from '@/lib/drizzle';
 import { processTopUp } from '@/lib/credits';
 import { processTopupForOrganization } from '@/lib/organizations/organization-billing';
 import { reportEvents } from '@/lib/ai-gateway/abuse-service';
+import { SERVICE_FEE_ACTIVATION_UNIX_SECONDS } from '@/lib/service-fees/constants';
 
 const reportEventsMock = jest.mocked(reportEvents);
 
@@ -3067,8 +3078,18 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
       id: params.id,
       amount: params.amount,
       customer: params.customer,
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
     }) as unknown as Stripe.Charge;
 
+  const withTopUpPrincipalMetadata = (
+    metadata: StripeTopupMetadata,
+    principalMinor: number
+  ): StripeTopupMetadata => ({
+    ...metadata,
+    amountCents: String(principalMinor),
+    serviceFeePrincipalMinor: String(principalMinor),
+  });
+
   const makePaymentIntent = (params: {
     id: string;
     metadata: StripeTopupMetadata;
@@ -3082,6 +3103,22 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
       payment_method: params.payment_method ?? null,
     }) as unknown as Stripe.PaymentIntent;
 
+  let listCheckoutSessionsSpy: { mockRestore: () => void } | undefined;
+
+  beforeEach(async () => {
+    const { client } = await import('@/lib/stripe-client');
+    listCheckoutSessionsSpy = jest.spyOn(client.checkout.sessions, 'list').mockResolvedValue({
+      object: 'list',
+      data: [],
+      has_more: false,
+      url: '/v1/checkout/sessions',
+    } as unknown as Stripe.Response<Stripe.ApiList<Stripe.Checkout.Session>>);
+  });
+
+  afterEach(() => {
+    listCheckoutSessionsSpy?.mockRestore();
+  });
+
   test('both organizationId and kiloUserId: processes organization top-up; uses kiloUserId', async () => {
     const user = await insertTestUser();
     const org = await createOrganization('Org-Both', user.id);
@@ -3092,7 +3129,10 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
     const charge = makeCharge({ id: chId, amount: amountInCents, customer: 'cus_irrelevant' });
     const paymentIntent = makePaymentIntent({
       id: piId,
-      metadata: { organizationId: org.id, kiloUserId: user.id },
+      metadata: withTopUpPrincipalMetadata(
+        { organizationId: org.id, kiloUserId: user.id },
+        amountInCents
+      ),
     });
 
     await handleSuccessfulChargeWithPayment(charge, paymentIntent);
@@ -3132,11 +3172,14 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
     });
     const paymentIntent = makePaymentIntent({
       id: paymentIntentId,
-      metadata: {
-        type: 'org-auto-topup-setup',
-        kiloUserId: user.id,
-        organizationId: org.id,
-      },
+      metadata: withTopUpPrincipalMetadata(
+        {
+          type: 'org-auto-topup-setup',
+          kiloUserId: user.id,
+          organizationId: org.id,
+        },
+        amountInCents
+      ),
     });
 
     const processOrgTopUpMock = processTopupForOrganization as jest.MockedFunction<
@@ -3151,7 +3194,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
       org.id,
       amountInCents,
       { type: 'stripe', stripe_payment_id: paymentIntentId },
-      { isAutoTopUp: true }
+      { isAutoTopUp: true, serviceFeeCents: 0, grossPaidCents: amountInCents }
     );
   });
 
@@ -3197,7 +3240,10 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
     // Mark as stripe-checkout-driven top-up, no card details to avoid free-credits flow side effects
     const paymentIntent = makePaymentIntent({
       id: paymentIntentId,
-      metadata: { kiloUserId: user.id, type: 'stripe-checkout-topup' },
+      metadata: withTopUpPrincipalMetadata(
+        { kiloUserId: user.id, type: 'stripe-checkout-topup' },
+        amountInCents
+      ),
       payment_method: null,
     });
 
@@ -3268,6 +3314,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
         type: 'auto-topup-setup',
         kiloUserId: user.id,
         amountCents: '2000',
+        serviceFeePrincipalMinor: '2000',
       },
     } as unknown as Stripe.PaymentIntent;
 
@@ -3297,6 +3344,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
         type: 'auto-topup-setup',
         kiloUserId: user.id,
         amountCents: '5000',
+        serviceFeePrincipalMinor: '5000',
       },
     } as unknown as Stripe.PaymentIntent;
 
@@ -3356,6 +3404,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
         kiloUserId: user.id,
         organizationId: org.id,
         amountCents: '2000',
+        serviceFeePrincipalMinor: '2000',
       },
     } as unknown as Stripe.PaymentIntent;
 
@@ -3387,6 +3436,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
           kiloUserId: user.id,
           organizationId: org.id,
           amountCents: '5000',
+          serviceFeePrincipalMinor: '5000',
         },
       } as unknown as Stripe.PaymentIntent;
 
@@ -3447,6 +3497,7 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
         kiloUserId: user.id,
         organizationId: org.id,
         amountCents: '3000',
+        serviceFeePrincipalMinor: '3000',
       },
     } as unknown as Stripe.PaymentIntent;
 
@@ -3489,7 +3540,13 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
           object: 'invoice',
           charge: userChargeId,
           amount_paid: 5000,
-          metadata: { type: 'auto-topup', kiloUserId: user.id },
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1,
+          metadata: {
+            type: 'auto-topup',
+            kiloUserId: user.id,
+            amountCents: '5000',
+            serviceFeePrincipalMinor: '5000',
+          },
         } as unknown as Stripe.Invoice,
         previous_attributes: {},
       },
@@ -3538,7 +3595,13 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
           object: 'invoice',
           charge: orgChargeId,
           amount_paid: 5000,
-          metadata: { type: 'org-auto-topup', organizationId: org.id },
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1,
+          metadata: {
+            type: 'org-auto-topup',
+            organizationId: org.id,
+            amountCents: '5000',
+            serviceFeePrincipalMinor: '5000',
+          },
         } as unknown as Stripe.Invoice,
         previous_attributes: {},
       },
@@ -3587,7 +3650,13 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
           object: 'invoice',
           charge: orgChargeId,
           amount_paid: 5000,
-          metadata: { type: 'org-auto-topup', organizationId: org.id },
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 1,
+          metadata: {
+            type: 'org-auto-topup',
+            organizationId: org.id,
+            amountCents: '5000',
+            serviceFeePrincipalMinor: '5000',
+          },
         } as unknown as Stripe.Invoice,
         previous_attributes: {},
       },
@@ -3601,11 +3670,352 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
         org.id,
         5000,
         { type: 'stripe', stripe_payment_id: orgChargeId },
-        { isAutoTopUp: true }
+        { isAutoTopUp: true, serviceFeeCents: 0, grossPaidCents: 5000 }
+      );
+    } finally {
+      processOrgTopUpMock.mockRestore();
+    }
+  });
+
+  test('credits trusted principal, not gross charge or invoice amount', async () => {
+    await cleanupDbForTest();
+
+    const user = await insertTestUser();
+    const org = await createOrganization('Org Principal Vs Gross', user.id);
+    const principalMinor = 10_000;
+    const grossPaidMinor = 10_500;
+    const paymentIntentId = `pi_principal_${Math.random()}`;
+    const chargeId = `ch_principal_${Math.random()}`;
+
+    const processOrgTopUpMock = processTopupForOrganization as jest.MockedFunction<
+      typeof processTopupForOrganization
+    >;
+    processOrgTopUpMock.mockResolvedValueOnce(undefined);
+
+    try {
+      await handleSuccessfulChargeWithPayment(
+        makeCharge({ id: chargeId, amount: grossPaidMinor, customer: user.stripe_customer_id }),
+        makePaymentIntent({
+          id: paymentIntentId,
+          metadata: withTopUpPrincipalMetadata(
+            {
+              type: 'stripe-checkout-topup',
+              kiloUserId: user.id,
+              organizationId: org.id,
+            },
+            principalMinor
+          ),
+        })
+      );
+
+      expect(processOrgTopUpMock).toHaveBeenCalledWith(
+        user.id,
+        org.id,
+        principalMinor,
+        { type: 'stripe', stripe_payment_id: paymentIntentId },
+        { isAutoTopUp: false, serviceFeeCents: 0, grossPaidCents: grossPaidMinor }
       );
     } finally {
       processOrgTopUpMock.mockRestore();
     }
+
+    const processTopUpMock = processTopUp as jest.MockedFunction<typeof processTopUp>;
+    processTopUpMock.mockResolvedValueOnce(true);
+    const invoiceChargeId = `ch_invoice_principal_${Math.random()}`;
+    await db.insert(auto_top_up_configs).values({
+      owned_by_user_id: user.id,
+      stripe_payment_method_id: `pm_principal_${Math.random()}`,
+      amount_cents: principalMinor,
+      attempt_started_at: new Date().toISOString(),
+    });
+
+    try {
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.paid',
+        data: {
+          object: {
+            id: `in_principal_${Math.random()}`,
+            object: 'invoice',
+            charge: invoiceChargeId,
+            amount_paid: grossPaidMinor,
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            metadata: {
+              type: 'auto-topup',
+              kiloUserId: user.id,
+              amountCents: String(principalMinor),
+              serviceFeePrincipalMinor: String(principalMinor),
+            },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+
+      expect(processTopUpMock).toHaveBeenCalledWith(
+        expect.objectContaining({ id: user.id }),
+        principalMinor,
+        { type: 'stripe', stripe_payment_id: invoiceChargeId },
+        { isAutoTopUp: true, serviceFeeCents: 0, grossPaidCents: grossPaidMinor }
+      );
+    } finally {
+      processTopUpMock.mockRestore();
+    }
+  });
+
+  test('invoice.created skips kilo-owned auto-top-up invoices and leaves seats/KiloClaw fee-free', async () => {
+    const { client } = await import('@/lib/stripe-client');
+    const createInvoiceItem = jest.spyOn(client.invoiceItems, 'create');
+
+    try {
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.created',
+        data: {
+          object: {
+            id: 'in_auto_skip',
+            object: 'invoice',
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            metadata: { type: 'auto-topup', kiloUserId: 'user_skip' },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.created',
+        data: {
+          object: {
+            id: 'in_org_auto_skip',
+            object: 'invoice',
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            metadata: { type: 'org-auto-topup', organizationId: 'org_skip' },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.created',
+        data: {
+          object: {
+            id: 'in_seat_created',
+            object: 'invoice',
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            metadata: { type: 'seats' },
+            lines: {
+              data: [
+                {
+                  pricing: { price_details: { price: process.env.STRIPE_TEAMS_MONTHLY_PRICE_ID } },
+                },
+              ],
+            },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.created',
+        data: {
+          object: {
+            id: 'in_kiloclaw_created',
+            object: 'invoice',
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            lines: {
+              data: [
+                {
+                  pricing: {
+                    price_details: {
+                      price: process.env.STRIPE_KILOCLAW_2026_05_10_STANDARD_PRICE_ID,
+                    },
+                  },
+                },
+              ],
+            },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+
+      expect(createInvoiceItem).not.toHaveBeenCalled();
+    } finally {
+      createInvoiceItem.mockRestore();
+    }
+  });
+
+  test('invoice.created assesses an eligible personal Kilo Pass draft without attaching a second auto-top-up fee', async () => {
+    await cleanupDbForTest();
+    const user = await insertTestUser();
+    const { client } = await import('@/lib/stripe-client');
+    const createInvoiceItem = jest.spyOn(client.invoiceItems, 'create').mockResolvedValue({
+      id: 'ii_kilo_pass_fee',
+      amount: 245,
+    } as unknown as Stripe.Response<Stripe.InvoiceItem>);
+    const retrievePrice = jest.spyOn(client.prices, 'retrieve').mockResolvedValue({
+      id: CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID,
+      tax_behavior: 'exclusive',
+    } as unknown as Stripe.Response<Stripe.Price>);
+    const invoiceId = `in_kilo_pass_created_${Math.random().toString(36).slice(2)}`;
+    const metadata = {
+      type: 'kilo-pass',
+      kiloUserId: user.id,
+      tier: KiloPassTier.Tier49,
+      cadence: KiloPassCadence.Monthly,
+    };
+
+    try {
+      await processStripePaymentEventHook({
+        ...baseStripeEvent(),
+        type: 'invoice.created',
+        data: {
+          object: {
+            id: invoiceId,
+            object: 'invoice',
+            status: 'draft',
+            created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+            currency: 'usd',
+            customer: user.stripe_customer_id,
+            metadata,
+            parent: {
+              type: 'subscription_details',
+              quote_details: null,
+              subscription_details: {
+                metadata,
+                subscription: {
+                  id: 'sub_kilo_pass_created',
+                  object: 'subscription',
+                  metadata,
+                  items: {
+                    object: 'list',
+                    data: [],
+                    has_more: false,
+                    url: '/v1/subscription_items',
+                  },
+                },
+              },
+            },
+            lines: {
+              object: 'list',
+              has_more: false,
+              url: `/v1/invoices/${invoiceId}/lines`,
+              data: [
+                {
+                  id: 'il_kilo_pass_created',
+                  object: 'line_item',
+                  amount: 4_900,
+                  currency: 'usd',
+                  description: 'Kilo Pass',
+                  discountable: true,
+                  discount_amounts: null,
+                  discounts: [],
+                  invoice: invoiceId,
+                  livemode: false,
+                  metadata,
+                  parent: null,
+                  period: { start: 1, end: 2 },
+                  pretax_credit_amounts: null,
+                  pricing: {
+                    type: 'price_details',
+                    unit_amount_decimal: '4900',
+                    price_details: {
+                      price: CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID,
+                      product: 'prod_kilo_pass',
+                    },
+                  },
+                  quantity: 1,
+                  subscription: null,
+                  taxes: null,
+                },
+              ],
+            },
+          } as unknown as Stripe.Invoice,
+          previous_attributes: {},
+        },
+      });
+
+      const [assessment] = await db
+        .select()
+        .from(stripe_service_fee_assessments)
+        .where(eq(stripe_service_fee_assessments.stripe_invoice_id, invoiceId))
+        .limit(1);
+      expect(assessment).toMatchObject({
+        flow: 'personal_kilo_pass',
+        kilo_user_id: user.id,
+        eligible_subtotal_minor: 4_900,
+        expected_fee_minor: 245,
+      });
+      expect(assessment?.outcome === 'charged' || assessment?.outcome === 'missed').toBe(true);
+      if (assessment?.outcome === 'missed') {
+        expect(createInvoiceItem).not.toHaveBeenCalled();
+      } else {
+        expect(createInvoiceItem).toHaveBeenCalledTimes(1);
+      }
+    } finally {
+      retrievePrice.mockRestore();
+      createInvoiceItem.mockRestore();
+    }
+  });
+
+  test('invoice.created fee attachment failure is acknowledged', async () => {
+    const handleKiloPassInvoiceCreated = jest.fn(async (_params: { invoice: Stripe.Invoice }) => {
+      throw new Error('fee attachment failed');
+    });
+    const invoice = {
+      id: 'in_kilo_pass_attach_fail',
+      object: 'invoice',
+      status: 'draft',
+      created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+      currency: 'usd',
+      customer: 'cus_attach_fail',
+      metadata: {
+        type: 'kilo-pass',
+        kiloUserId: 'user_kilo_pass_attach_fail',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+      },
+      lines: {
+        object: 'list',
+        has_more: false,
+        data: [
+          {
+            pricing: {
+              price_details: { price: CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID },
+            },
+            amount: 4_900,
+          },
+        ],
+      },
+    } as unknown as Stripe.Invoice;
+
+    try {
+      jest.resetModules();
+      jest.doMock('@/lib/service-fees/invoice-created', () => {
+        const actual = jest.requireActual('@/lib/service-fees/invoice-created');
+        return {
+          __esModule: true,
+          ...actual,
+          handleKiloPassInvoiceCreated,
+        };
+      });
+
+      await jest.isolateModulesAsync(async () => {
+        const { processStripePaymentEventHook: dispatch } = await import('@/lib/stripe');
+        await expect(
+          dispatch({
+            ...baseStripeEvent(),
+            type: 'invoice.created',
+            data: { object: invoice, previous_attributes: {} },
+          } as Stripe.Event)
+        ).resolves.toBeUndefined();
+      });
+
+      expect(handleKiloPassInvoiceCreated).toHaveBeenCalledWith(
+        expect.objectContaining({ invoice })
+      );
+    } finally {
+      jest.dontMock('@/lib/service-fees/invoice-created');
+      jest.resetModules();
+    }
   });
 
   test('invoice.paid dispatches zero-dollar KiloClaw invoices to settlement', async () => {
@@ -3967,3 +4377,525 @@ describe('handleSuccessfulChargeWithPayment (org/user routing & side-effects)',
     }
   );
 });
+
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata: { ...existing.metadata, ...(patch.metadata ?? {}) },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return Object.assign(store, {
+    async findByStripeInvoiceId(stripeInvoiceId: string) {
+      const row = [...rows.values()].find(
+        candidate => candidate.stripeInvoiceId === stripeInvoiceId
+      );
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+  });
+}
+
+describe('handleUpdateSeatCount organization Kilo Pass service fee', () => {
+  const subscriptionId = 'sub_seat_capacity_fee';
+  const seatItemId = 'si_seat_paid';
+  const passItemId = 'si_pass';
+  const seatPriceId = 'price_test_seat_capacity';
+  const prorationDate = SERVICE_FEE_ACTIVATION_UNIX_SECONDS;
+  const now = new Date(prorationDate * 1000);
+  const seatProductId = [...SEAT_PRODUCT_IDS][0] ?? 'prod_seat';
+  let actor: User;
+  let organizationId: string;
+
+  function memoryStore() {
+    return createMemoryAssessmentStore();
+  }
+
+  function invoiceLine(params: {
+    id: string;
+    amount: number;
+    priceId: string;
+    productId: string;
+    subscriptionItem: string;
+  }): Stripe.InvoiceLineItem {
+    return {
+      id: params.id,
+      object: 'line_item',
+      amount: params.amount,
+      currency: 'usd',
+      description: params.subscriptionItem,
+      discountable: true,
+      discount_amounts: null,
+      discounts: [],
+      invoice: 'in_preview',
+      livemode: false,
+      metadata: {},
+      parent: {
+        type: 'subscription_item_details',
+        invoice_item_details: null,
+        subscription_item_details: {
+          invoice_item: null,
+          proration: true,
+          proration_details: { credited_items: null },
+          subscription: subscriptionId,
+          subscription_item: params.subscriptionItem,
+        },
+      },
+      period: { start: prorationDate, end: prorationDate + 86_400 },
+      pretax_credit_amounts: null,
+      pricing: {
+        type: 'price_details',
+        unit_amount_decimal: String(params.amount),
+        price_details: { price: params.priceId, product: params.productId },
+      },
+      quantity: 10,
+      subscription: subscriptionId,
+      taxes: null,
+    } as Stripe.InvoiceLineItem;
+  }
+
+  function mixedLines() {
+    return [
+      invoiceLine({
+        id: 'il_seat',
+        amount: 8_000,
+        priceId: seatPriceId,
+        productId: seatProductId,
+        subscriptionItem: seatItemId,
+      }),
+      invoiceLine({
+        id: 'il_pass',
+        amount: 3_000,
+        priceId: CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID,
+        productId: 'prod_kilo_pass',
+        subscriptionItem: passItemId,
+      }),
+    ];
+  }
+
+  function orgSubscription(overrides: Partial<Stripe.Subscription> = {}): Stripe.Subscription {
+    return {
+      id: subscriptionId,
+      object: 'subscription',
+      status: 'active',
+      customer: 'cus_seat_capacity',
+      metadata: {
+        type: 'kilo-pass-org',
+        organizationId,
+        kiloUserId: actor.id,
+        tier: 'tier_19',
+        cadence: 'monthly',
+        seats: '10',
+      },
+      items: {
+        object: 'list',
+        data: [
+          {
+            id: seatItemId,
+            quantity: 5,
+            current_period_start: prorationDate,
+            current_period_end: prorationDate + 2_592_000,
+            price: {
+              id: seatPriceId,
+              product: seatProductId,
+              unit_amount: 2_900,
+              recurring: { interval: 'month' },
+            },
+          },
+          {
+            id: passItemId,
+            quantity: 5,
+            current_period_start: prorationDate,
+            current_period_end: prorationDate + 2_592_000,
+            price: { id: CURRENT_KILO_PASS_TIER_19_MONTHLY_PRICE_ID, product: 'prod_kilo_pass' },
+          },
+        ],
+        has_more: false,
+        url: '/v1/subscription_items',
+      },
+      ...overrides,
+    } as Stripe.Subscription;
+  }
+
+  function previewInvoice(lines = mixedLines()): Stripe.Invoice {
+    return {
+      id: 'in_preview',
+      object: 'invoice',
+      created: prorationDate,
+      status: 'draft',
+      currency: 'usd',
+      customer: 'cus_seat_capacity',
+      lines: {
+        object: 'list',
+        data: lines,
+        has_more: false,
+        url: '/v1/invoices/upcoming/lines',
+      },
+    } as Stripe.Invoice;
+  }
+
+  function draftInvoice(lines = mixedLines()): Stripe.Invoice {
+    return {
+      ...previewInvoice(lines),
+      id: 'in_actual',
+      status: 'draft',
+    } as Stripe.Invoice;
+  }
+
+  beforeEach(async () => {
+    KNOWN_SEAT_PRICE_IDS.add(seatPriceId);
+    jest.spyOn(client.invoiceItems, 'list').mockResolvedValue({
+      object: 'list',
+      data: [],
+      has_more: false,
+      url: '/v1/invoiceitems',
+    } as never);
+    actor = await insertTestUser();
+    const organization = await createOrganization(`Seat capacity fee ${Date.now()}`, actor.id);
+    organizationId = organization.id;
+  });
+
+  afterEach(() => {
+    KNOWN_SEAT_PRICE_IDS.delete(seatPriceId);
+    jest.restoreAllMocks();
+  });
+
+  test('preview and update share proration_date and exclude seat amount', async () => {
+    const store = memoryStore();
+    const retrieve = jest
+      .spyOn(client.subscriptions, 'retrieve')
+      .mockResolvedValue(orgSubscription() as never);
+    const createPreview = jest
+      .spyOn(client.invoices, 'createPreview')
+      .mockResolvedValue(previewInvoice() as never);
+    const update = jest.spyOn(client.subscriptions, 'update').mockResolvedValue({
+      ...orgSubscription(),
+      latest_invoice: draftInvoice(),
+    } as never);
+    const createItem = jest.spyOn(client.invoiceItems, 'create').mockResolvedValue({
+      id: 'ii_fee',
+      amount: 150,
+    } as never);
+    const finalize = jest.spyOn(client.invoices, 'finalizeInvoice').mockResolvedValue({
+      ...draftInvoice(),
+      status: 'open',
+    } as never);
+    jest.spyOn(client.invoices, 'pay').mockResolvedValue({
+      ...draftInvoice(),
+      status: 'paid',
+    } as never);
+
+    await handleUpdateSeatCount(subscriptionId, 10, 5, {
+      now,
+      store,
+      getOrganizationPurchaseChannel: async () => 'self_serve',
+      resolveTaxInput: async () => ({
+        source: 'price',
+        taxBehavior: 'exclusive',
+      }),
+      sendAlert: async () => undefined,
+    });
+
+    expect(createPreview).toHaveBeenCalledWith(
+      expect.objectContaining({
+        subscription: subscriptionId,
+        subscription_details: expect.objectContaining({
+          proration_date: prorationDate,
+          items: [
+            { id: seatItemId, quantity: 10 },
+            { id: passItemId, quantity: 10 },
+          ],
+        }),
+      })
+    );
+    expect(update).toHaveBeenCalledWith(
+      subscriptionId,
+      expect.objectContaining({
+        proration_date: prorationDate,
+        proration_behavior: 'always_invoice',
+        expand: ['latest_invoice.lines'],
+      }),
+      expect.any(Object)
+    );
+    expect(update.mock.calls[0]?.[1]).not.toHaveProperty('metadata');
+    expect(createItem).toHaveBeenCalledWith(
+      expect.objectContaining({
+        amount: 150,
+        discountable: false,
+      })
+    );
+    expect(createItem.mock.calls[0]?.[0]).not.toEqual(
+      expect.objectContaining({ invoice: 'in_actual' })
+    );
+    expect(
+      await store.findByAssessmentKey(
+        kiloPassOrgStripe.createSeatCapacityServiceFeeAssessmentKey({
+          subscriptionId,
+          prorationDate,
+          paidSeatQuantity: 10,
+        })
+      )
+    ).toMatchObject({
+      eligibleSubtotalMinor: 3_000,
+      expectedFeeMinor: 150,
+      chargedFeeMinor: 150,
+      outcome: 'charged',
+    });
+    expect(retrieve).toHaveBeenCalled();
+    expect(finalize).toHaveBeenCalled();
+  });
+
+  test('seat-only updates do not preview or persist an assessment', async () => {
+    const store = memoryStore();
+    const insert = jest.spyOn(store, 'insert');
+    jest.spyOn(client.subscriptions, 'retrieve').mockResolvedValue({
+      id: subscriptionId,
+      object: 'subscription',
+      status: 'active',
+      metadata: {
+        type: 'seats',
+        kiloUserId: actor.id,
+        organizationId,
+        seats: '10',
+      },
+      items: {
+        data: [
+          {
+            id: seatItemId,
+            quantity: 5,
+            current_period_start: prorationDate,
+            current_period_end: prorationDate + 2_592_000,
+            price: {
+              id: seatPriceId,
+              product: seatProductId,
+              unit_amount: 2_900,
+              recurring: { interval: 'month' },
+            },
+          },
+        ],
+      },
+    } as never);
+    const createPreview = jest.spyOn(client.invoices, 'createPreview');
+    jest.spyOn(client.subscriptions, 'update').mockResolvedValue({
+      id: subscriptionId,
+      object: 'subscription',
+      status: 'active',
+      metadata: {
+        type: 'seats',
+        kiloUserId: actor.id,
+        organizationId,
+        seats: '10',
+      },
+      items: {
+        data: [
+          {
+            id: seatItemId,
+            quantity: 10,
+            current_period_start: prorationDate,
+            current_period_end: prorationDate + 2_592_000,
+            price: {
+              id: seatPriceId,
+              product: seatProductId,
+              unit_amount: 2_900,
+              recurring: { interval: 'month' },
+            },
+          },
+        ],
+      },
+    } as never);
+
+    await expect(handleUpdateSeatCount(subscriptionId, 10, 5, { now, store })).resolves.toEqual(
+      expect.objectContaining({ success: true })
+    );
+    expect(createPreview).not.toHaveBeenCalled();
+    expect(insert).not.toHaveBeenCalled();
+  });
+
+  test('tax resolution failure fails open and still updates seats', async () => {
+    const store = memoryStore();
+    const sendAlert = jest.fn(async () => undefined);
+    jest.spyOn(client.subscriptions, 'retrieve').mockResolvedValue(orgSubscription() as never);
+    jest.spyOn(client.invoices, 'createPreview').mockResolvedValue(previewInvoice() as never);
+    const update = jest.spyOn(client.subscriptions, 'update').mockResolvedValue({
+      ...orgSubscription(),
+      latest_invoice: { ...draftInvoice(), status: 'open' },
+    } as never);
+    const createItem = jest.spyOn(client.invoiceItems, 'create');
+    jest.spyOn(client.invoices, 'pay').mockResolvedValue({
+      ...draftInvoice(),
+      status: 'paid',
+    } as never);
+
+    await expect(
+      handleUpdateSeatCount(subscriptionId, 10, 5, {
+        now,
+        store,
+        getOrganizationPurchaseChannel: async () => 'self_serve',
+        resolveTaxInput: async () => {
+          throw new Error('fee_application_failed');
+        },
+        sendAlert,
+      })
+    ).resolves.toEqual(expect.objectContaining({ success: true }));
+
+    expect(update).toHaveBeenCalled();
+    expect(createItem).not.toHaveBeenCalled();
+    expect(
+      await store.findByAssessmentKey(
+        kiloPassOrgStripe.createSeatCapacityServiceFeeAssessmentKey({
+          subscriptionId,
+          prorationDate,
+          paidSeatQuantity: 10,
+        })
+      )
+    ).toMatchObject({
+      outcome: 'missed',
+      failureCode: 'fee_application_failed',
+      expectedFeeMinor: 150,
+    });
+    expect(sendAlert).toHaveBeenCalled();
+  });
+
+  test('injected tax attaches the prepared fee before finalize', async () => {
+    const store = memoryStore();
+    const calls: string[] = [];
+    jest.spyOn(client.subscriptions, 'retrieve').mockResolvedValue(orgSubscription() as never);
+    jest.spyOn(client.invoices, 'createPreview').mockImplementation(async () => {
+      calls.push('preview');
+      return previewInvoice() as never;
+    });
+    jest.spyOn(client.subscriptions, 'update').mockImplementation(async () => {
+      calls.push('update');
+      return {
+        ...orgSubscription(),
+        latest_invoice: draftInvoice(),
+      } as never;
+    });
+    jest.spyOn(client.invoiceItems, 'create').mockImplementation(async () => {
+      calls.push('attach');
+      return { id: 'ii_fee', amount: 150 } as never;
+    });
+    jest.spyOn(client.invoices, 'finalizeInvoice').mockImplementation(async () => {
+      calls.push('finalize');
+      return { ...draftInvoice(), status: 'open' } as never;
+    });
+    jest.spyOn(client.invoices, 'pay').mockImplementation(async () => {
+      calls.push('pay');
+      return { ...draftInvoice(), status: 'paid' } as never;
+    });
+
+    await handleUpdateSeatCount(subscriptionId, 10, 5, {
+      now,
+      store,
+      getOrganizationPurchaseChannel: async () => 'self_serve',
+      resolveTaxInput: async () => ({
+        source: 'price',
+        taxBehavior: 'exclusive',
+      }),
+      sendAlert: async () => undefined,
+    });
+
+    expect(calls).toEqual(['preview', 'attach', 'update', 'attach', 'finalize', 'pay']);
+  });
+
+  test('does not preview, look up tax/exemption, or write assessments after the advisory lock', async () => {
+    const store = memoryStore();
+    const calls: string[] = [];
+    const originalTransaction = db.transaction.bind(db);
+    jest.spyOn(db, 'transaction').mockImplementation(((...args: unknown[]) => {
+      calls.push('transaction-start');
+      const result = originalTransaction(...(args as Parameters<typeof db.transaction>));
+      return Promise.resolve(result).then(value => {
+        calls.push('transaction-end');
+        return value;
+      });
+    }) as typeof db.transaction);
+    const originalInsert = store.insert.bind(store);
+    jest.spyOn(store, 'insert').mockImplementation(async record => {
+      calls.push('assessment-insert');
+      return originalInsert(record);
+    });
+    jest.spyOn(client.subscriptions, 'retrieve').mockResolvedValue(orgSubscription() as never);
+    jest.spyOn(client.invoices, 'createPreview').mockImplementation(async () => {
+      calls.push('preview');
+      return previewInvoice() as never;
+    });
+    const resolveTaxInput = jest.fn(async () => {
+      calls.push('tax');
+      return {
+        source: 'price' as const,
+        taxBehavior: 'exclusive' as const,
+      };
+    });
+    const findEffectiveExemption = jest.fn(async () => {
+      calls.push('exemption');
+      return null;
+    });
+    jest.spyOn(client.subscriptions, 'update').mockImplementation(async () => {
+      calls.push('update');
+      return {
+        ...orgSubscription(),
+        latest_invoice: draftInvoice(),
+      } as never;
+    });
+    jest.spyOn(client.invoiceItems, 'create').mockImplementation(async () => {
+      calls.push('attach');
+      return { id: 'ii_fee', amount: 150 } as never;
+    });
+    jest.spyOn(client.invoices, 'finalizeInvoice').mockResolvedValue({
+      ...draftInvoice(),
+      status: 'open',
+    } as never);
+    jest.spyOn(client.invoices, 'pay').mockResolvedValue({
+      ...draftInvoice(),
+      status: 'paid',
+    } as never);
+
+    await handleUpdateSeatCount(subscriptionId, 10, 5, {
+      now,
+      store,
+      getOrganizationPurchaseChannel: async () => 'self_serve',
+      resolveTaxInput,
+      findEffectiveExemption,
+      sendAlert: async () => undefined,
+    });
+
+    const transactionStart = calls.indexOf('transaction-start');
+    const transactionEnd = calls.indexOf('transaction-end');
+    expect(transactionStart).toBeGreaterThan(-1);
+    expect(transactionEnd).toBeGreaterThan(transactionStart);
+    expect(calls.indexOf('preview')).toBeLessThan(transactionStart);
+    expect(calls.indexOf('tax')).toBeLessThan(transactionStart);
+    expect(calls.indexOf('exemption')).toBeLessThan(transactionStart);
+    expect(calls.indexOf('assessment-insert')).toBeLessThan(transactionStart);
+    expect(calls.indexOf('attach')).toBeLessThan(transactionStart);
+    expect(calls.lastIndexOf('attach')).toBeGreaterThan(transactionEnd);
+    expect(calls.slice(transactionStart, transactionEnd + 1)).not.toContain('preview');
+    expect(calls.slice(transactionStart, transactionEnd + 1)).not.toContain('tax');
+    expect(calls.slice(transactionStart, transactionEnd + 1)).not.toContain('exemption');
+    expect(calls.slice(transactionStart, transactionEnd + 1)).not.toContain('assessment-insert');
+    expect(calls.slice(transactionStart, transactionEnd + 1)).not.toContain('attach');
+  });
+});
diff --git a/apps/web/src/lib/stripe/index.ts b/apps/web/src/lib/stripe/index.ts
index 817dd6dcfa..44e485bc28 100644
--- a/apps/web/src/lib/stripe/index.ts
+++ b/apps/web/src/lib/stripe/index.ts
@@ -6,7 +6,9 @@ import { captureException } from '@sentry/nextjs';
 import { db, auto_deleted_at } from '@/lib/drizzle';
 import type { User, PaymentMethod, Organization } from '@kilocode/db/schema';
 import {
+  kilo_pass_org_agreements,
   kilo_pass_scheduled_changes,
+  kilo_pass_subscriptions,
   payment_methods,
   kilocode_users,
   auto_top_up_configs,
@@ -52,10 +54,18 @@ import {
 import { invoiceLooksLikeKiloPassByPriceId } from '@/lib/kilo-pass/stripe-invoice-classifier.server';
 import { invoiceLooksLikeOrganizationKiloPass } from '@/lib/kilo-pass/stripe-invoice-classifier.server';
 import {
+  attachPreparedOrganizationKiloPassServiceFee,
+  discardStagedOrganizationKiloPassServiceFeeItem,
   endPendingOrganizationKiloPassForTerminalInvoice,
   handleOrganizationKiloPassPaymentAdverseForInvoice,
   handleOrganizationKiloPassInvoicePaid,
   handleOrganizationKiloPassSubscriptionEvent,
+  prepareOrganizationKiloPassSeatCapacityFee,
+  resolveOrganizationKiloPassSubscriptionItem,
+  stagePreparedOrganizationKiloPassServiceFeeItem,
+  type OrganizationKiloPassSeatCapacityFeeDependencies,
+  type OrganizationKiloPassSeatCapacityStripe,
+  type PreparedOrganizationKiloPassSeatCapacityFee,
 } from '@/lib/kilo-pass-org/stripe-adapter';
 import { getKiloPassMetadataFromStripeMetadata } from '@/lib/kilo-pass/stripe-handlers-metadata';
 import {
@@ -68,7 +78,12 @@ import {
 import { enqueueImpactSaleReversalForCharge } from '@/lib/impact/affiliate-events';
 import { markPersonalKiloClawReferralPaymentAdverse } from '@/lib/impact/kiloclaw-referrals';
 import { markPersonalKiloPassReferralPaymentAdverse } from '@/lib/impact/kilo-pass-referrals';
-import { ImpactReferralPaymentProvider } from '@kilocode/db/schema-types';
+import {
+  ImpactReferralPaymentProvider,
+  KiloPassOrgAgreementState,
+  KiloPassOrgPurchaseChannel,
+  KiloPassPaymentProvider,
+} from '@kilocode/db/schema-types';
 import { invoiceLooksLikeKiloClawByPriceId } from '@/lib/kiloclaw/stripe-invoice-classifier.server';
 import { reportEvents } from '@/lib/ai-gateway/abuse-service';
 import {
@@ -82,6 +97,28 @@ import { isSeatLineItem } from '@/lib/organizations/stripe-seat-line-items';
 import { successResult } from '@/lib/maybe-result';
 import { observeStripeEarlyFraudWarningCreated } from '@/lib/stripe/early-fraud-warning';
 import { observeStripeDisputeCreated } from '@/lib/stripe/disputes';
+import {
+  createTopUpCheckoutSession,
+  isKiloOwnedAutoTopUpInvoice,
+  mergeServiceFeeCommercialMetadata,
+  prepareTopUpCheckoutFee,
+  resolveFixedUsdPriceUnitAmount,
+  settleTrustedAutoTopUpInvoice,
+  settleTrustedTopUpCharge,
+  type ServiceFeeCheckoutDependencies,
+} from '@/lib/service-fees/checkout';
+import type { ServiceFeeAssessmentStore } from '@/lib/service-fees/assessments';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
+import { handleKiloPassInvoiceCreated } from '@/lib/service-fees/invoice-created';
+import { getEffectiveOrganizationServiceFeeExemption } from '@/lib/service-fees/organization-exemptions';
+import {
+  observeServiceFeeChargeRefunded,
+  observeServiceFeeCreditNote,
+} from '@/lib/service-fees/refunds';
+import {
+  observeServiceFeeDisputeClosed,
+  observeServiceFeeDisputeFundsWithdrawn,
+} from '@/lib/service-fees/disputes';
 
 type KiloClawChargeContext = {
   chargeId: string;
@@ -237,8 +274,98 @@ export type StripeTopupMetadata = {
   type?: string;
   kiloUserId?: User['id'];
   organizationId?: Organization['id'] | null;
+  amountCents?: string;
+  serviceFeeAssessmentKey?: string;
+  serviceFeeVersion?: string;
+  serviceFeeFlow?: string;
+  serviceFeePrincipalMinor?: string;
+  serviceFeeOrganizationId?: string;
 };
 
+function createStripeTopUpFeeDeps(): ServiceFeeCheckoutDependencies {
+  const stores = createServiceFeeStores();
+  return {
+    store: stores.assessments,
+    findEffectiveExemption: async (organizationId, at) =>
+      getEffectiveOrganizationServiceFeeExemption({
+        store: stores.exemptions,
+        organizationId,
+        at,
+      }),
+    stripe: client,
+    listCheckoutLineItems: (sessionId, params) =>
+      client.checkout.sessions.listLineItems(sessionId, params),
+    expireCheckoutSession: sessionId => client.checkout.sessions.expire(sessionId),
+    createInvoiceItem: itemParams => client.invoiceItems.create(itemParams),
+    retrieveCheckoutSessionCreated: async paymentIntentId => {
+      try {
+        const listed = await client.checkout.sessions.list({
+          payment_intent: paymentIntentId,
+          limit: 1,
+        });
+        return listed.data[0]?.created ?? null;
+      } catch {
+        return null;
+      }
+    },
+  };
+}
+
+async function lookupOrganizationKiloPassPurchaseChannel(
+  organizationId: string
+): Promise<'self_serve' | 'manual' | null> {
+  const agreement = await db.query.kilo_pass_org_agreements.findFirst({
+    columns: { purchase_channel: true },
+    where: and(
+      eq(kilo_pass_org_agreements.parent_organization_id, organizationId),
+      ne(kilo_pass_org_agreements.state, KiloPassOrgAgreementState.Ended)
+    ),
+  });
+  if (
+    agreement?.purchase_channel === KiloPassOrgPurchaseChannel.SelfServe ||
+    agreement?.purchase_channel === KiloPassOrgPurchaseChannel.Manual
+  ) {
+    return agreement.purchase_channel;
+  }
+  return null;
+}
+
+function metadataLooksStoreManaged(metadata: Stripe.Metadata | null | undefined): boolean {
+  const provider = metadata?.paymentProvider ?? metadata?.payment_provider;
+  return (
+    provider === KiloPassPaymentProvider.AppStore || provider === KiloPassPaymentProvider.GooglePlay
+  );
+}
+
+async function isKiloPassInvoiceStoreManaged(input: {
+  invoice: Stripe.Invoice;
+  subscription: Stripe.Subscription | null;
+}): Promise<boolean> {
+  if (
+    metadataLooksStoreManaged(input.invoice.metadata) ||
+    metadataLooksStoreManaged(input.invoice.parent?.subscription_details?.metadata) ||
+    metadataLooksStoreManaged(input.subscription?.metadata)
+  ) {
+    return true;
+  }
+
+  const subscriptionId =
+    input.subscription?.id ??
+    stripeReferenceId(input.invoice.parent?.subscription_details?.subscription);
+  if (!subscriptionId) {
+    return false;
+  }
+
+  const row = await db.query.kilo_pass_subscriptions.findFirst({
+    columns: { payment_provider: true },
+    where: or(
+      eq(kilo_pass_subscriptions.stripe_subscription_id, subscriptionId),
+      eq(kilo_pass_subscriptions.provider_subscription_id, subscriptionId)
+    ),
+  });
+  return Boolean(row && row.payment_provider !== KiloPassPaymentProvider.Stripe);
+}
+
 export async function detachAllPaymentMethods(user: User) {
   const paymentMethods = await client.paymentMethods.list({
     customer: user.stripe_customer_id,
@@ -394,7 +521,8 @@ async function handleAutoTopUpSetup(
   user: User,
   paymentIntent: Stripe.PaymentIntent,
   creditAmountInCents: number,
-  config: StripeConfig
+  config: StripeConfig,
+  emailAmounts: { serviceFeeCents?: number; grossPaidCents?: number } = {}
 ) {
   logExceptInTest(
     `Processing auto-topup-setup for user ${user.id} from payment intent ${paymentIntent.id}`
@@ -451,7 +579,10 @@ async function handleAutoTopUpSetup(
     .where(eq(kilocode_users.id, user.id));
 
   // Credit the initial payment to the user's balance
-  const setupTopUpOk = await processTopUp(user, creditAmountInCents, config);
+  const setupTopUpOk = await processTopUp(user, creditAmountInCents, config, {
+    serviceFeeCents: emailAmounts.serviceFeeCents,
+    grossPaidCents: emailAmounts.grossPaidCents,
+  });
   if (!setupTopUpOk) {
     sentryLogger('stripe', 'info')('Auto-topup-setup already registered or failed to insert', {
       kilo_user_id: user.id,
@@ -536,7 +667,7 @@ export async function handleSuccessfulChargeWithPayment(
   // NOTE: (bmc) PLEASE NOTE this is called for ALL successful charges, including subscriptions and org purchases
   // the user topup flow and credit application stuff should only apply the charge is not from an organization
   const config: StripeConfig = { type: 'stripe', stripe_payment_id: charge.id };
-  const creditAmountInCents = charge.amount;
+  const feeDeps = createStripeTopUpFeeDeps();
 
   const organizationId = paymentIntent.metadata.organizationId;
   const kiloUserId = paymentIntent.metadata.kiloUserId;
@@ -555,9 +686,31 @@ export async function handleSuccessfulChargeWithPayment(
       `Processing top-up for organization ${organizationId} from charge ${charge.id}`
     );
     config.stripe_payment_id = paymentIntent.id;
-    await processTopupForOrganization(kiloUserId, organizationId, creditAmountInCents, config, {
-      isAutoTopUp: paymentIntent.metadata.type === 'org-auto-topup-setup',
+    const settlement = await settleTrustedTopUpCharge({
+      charge,
+      paymentIntent,
+      kiloUserId,
+      organizationId,
+      flowHint:
+        paymentIntent.metadata.type === 'org-auto-topup-setup'
+          ? 'organization_auto_top_up_setup'
+          : 'organization_top_up',
+      deps: feeDeps,
     });
+    if (!settlement.shouldCredit) {
+      return;
+    }
+    await processTopupForOrganization(
+      kiloUserId,
+      organizationId,
+      settlement.principalMinor,
+      config,
+      {
+        isAutoTopUp: paymentIntent.metadata.type === 'org-auto-topup-setup',
+        serviceFeeCents: settlement.chargedFeeMinor,
+        grossPaidCents: settlement.grossPaidMinor,
+      }
+    );
 
     if (paymentIntent.metadata.type === 'org-auto-topup-setup') {
       await handleOrgAutoTopUpSetup(organizationId, kiloUserId, paymentIntent, config);
@@ -611,7 +764,20 @@ export async function handleSuccessfulChargeWithPayment(
         `Skipping invoice-based charge ${charge.id} in charge.succeeded - will be handled by invoice.payment_succeeded`
       );
     } else if (isAutoTopUpSetup) {
-      await handleAutoTopUpSetup(user, paymentIntent, creditAmountInCents, config);
+      const settlement = await settleTrustedTopUpCharge({
+        charge,
+        paymentIntent,
+        kiloUserId: user.id,
+        flowHint: 'personal_auto_top_up_setup',
+        deps: feeDeps,
+      });
+      if (!settlement.shouldCredit) {
+        return;
+      }
+      await handleAutoTopUpSetup(user, paymentIntent, settlement.principalMinor, config, {
+        serviceFeeCents: settlement.chargedFeeMinor,
+        grossPaidCents: settlement.grossPaidMinor,
+      });
     } else if (isKiloclawEarlybird) {
       await recordKiloclawEarlybirdPurchase(user, charge);
     } else {
@@ -626,7 +792,20 @@ export async function handleSuccessfulChargeWithPayment(
     return;
   }
 
-  const topUpOk = await processTopUp(user, creditAmountInCents, config);
+  const settlement = await settleTrustedTopUpCharge({
+    charge,
+    paymentIntent,
+    kiloUserId: user.id,
+    flowHint: 'personal_top_up',
+    deps: feeDeps,
+  });
+  if (!settlement.shouldCredit) {
+    return;
+  }
+  const topUpOk = await processTopUp(user, settlement.principalMinor, config, {
+    serviceFeeCents: settlement.chargedFeeMinor,
+    grossPaidCents: settlement.grossPaidMinor,
+  });
   if (!topUpOk) {
     sentryLogger('stripe', 'warning')('Ignoring already registered top-up', {
       kilo_user_id: user.id,
@@ -832,6 +1011,42 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
       await handleSuccessfulCharge(event);
       break;
 
+    case 'invoice.created': {
+      const invoice = event.data.object;
+      // Kilo-owned auto-top-up invoices attach their own fee before pay.
+      // Skip without creating an assessment or attaching a second fee.
+      if (isKiloOwnedAutoTopUpInvoice(invoice)) {
+        break;
+      }
+      try {
+        const stores = createServiceFeeStores();
+        await handleKiloPassInvoiceCreated({
+          invoice,
+          stripe: client,
+          store: stores.assessments,
+          deps: {
+            findEffectiveExemption: async (organizationId, at) =>
+              getEffectiveOrganizationServiceFeeExemption({
+                store: stores.exemptions,
+                organizationId,
+                at,
+              }),
+            getOrganizationPurchaseChannel: lookupOrganizationKiloPassPurchaseChannel,
+            isStoreManaged: isKiloPassInvoiceStoreManaged,
+          },
+        });
+      } catch (error) {
+        captureException(error, {
+          tags: { source: 'kilo_pass_invoice_created_service_fee' },
+          extra: {
+            stripe_event_id: event.id,
+            stripe_invoice_id: invoice.id,
+          },
+        });
+      }
+      break;
+    }
+
     // Handle auto-topups via invoice.paid - this has direct access to invoice metadata.
     // invoice.paid is a superset of invoice.payment_succeeded per Stripe docs.
     case 'invoice.voided':
@@ -900,8 +1115,21 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
               traceId,
             });
 
-            const autoTopUpOk = await processTopUp(user, invoice.amount_paid, config, {
+            const settlement = await settleTrustedAutoTopUpInvoice({
+              invoice,
+              chargeId,
+              kiloUserId: user.id,
+              flow: 'personal_auto_top_up',
+              deps: createStripeTopUpFeeDeps(),
+            });
+            if (!settlement.shouldCredit) {
+              break;
+            }
+
+            const autoTopUpOk = await processTopUp(user, settlement.principalMinor, config, {
               isAutoTopUp: true,
+              serviceFeeCents: settlement.chargedFeeMinor,
+              grossPaidCents: settlement.grossPaidMinor,
             });
 
             if (!autoTopUpOk) {
@@ -954,13 +1182,31 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
               where: eq(auto_top_up_configs.owned_by_organization_id, organizationId),
               columns: { created_by_user_id: true },
             });
+            const initiatingUserId =
+              autoTopUpConfig?.created_by_user_id ?? SYSTEM_AUTO_TOP_UP_USER_ID;
+            const settlement = await settleTrustedAutoTopUpInvoice({
+              invoice,
+              chargeId,
+              kiloUserId:
+                initiatingUserId === SYSTEM_AUTO_TOP_UP_USER_ID ? undefined : initiatingUserId,
+              organizationId,
+              flow: 'organization_auto_top_up',
+              deps: createStripeTopUpFeeDeps(),
+            });
+            if (!settlement.shouldCredit) {
+              break;
+            }
 
             await processTopupForOrganization(
-              autoTopUpConfig?.created_by_user_id ?? SYSTEM_AUTO_TOP_UP_USER_ID,
+              initiatingUserId,
               organizationId,
-              invoice.amount_paid,
+              settlement.principalMinor,
               config,
-              { isAutoTopUp: true }
+              {
+                isAutoTopUp: true,
+                serviceFeeCents: settlement.chargedFeeMinor,
+                grossPaidCents: settlement.grossPaidMinor,
+              }
             );
 
             processedSuccessfully = true;
@@ -1068,6 +1314,12 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
     case 'charge.dispute.updated':
     case 'charge.dispute.closed': {
       const dispute = event.data.object;
+      if (event.type === 'charge.dispute.closed') {
+        await observeServiceFeeDisputeClosed({
+          store: createServiceFeeStores().assessments,
+          dispute,
+        });
+      }
       await syncStripeDisputeCaseFromWebhook({
         eventId: event.id,
         eventCreated: event.created,
@@ -1082,6 +1334,11 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
         break;
       }
 
+      await observeServiceFeeChargeRefunded({
+        store: createServiceFeeStores().assessments,
+        charge,
+        stripe: client,
+      });
       await suspendOrganizationKiloPassForAdverseCharge(charge.id);
       const referralAdverseCharge = await getAffiliateDisputeChargeContext(charge.id);
       if (!referralAdverseCharge) {
@@ -1106,6 +1363,16 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
       break;
     }
 
+    case 'credit_note.created':
+    case 'credit_note.updated': {
+      await observeServiceFeeCreditNote({
+        store: createServiceFeeStores().assessments,
+        creditNote: event.data.object,
+        stripe: client,
+      });
+      break;
+    }
+
     case 'charge.updated': {
       const charge = event.data.object;
       const isFraudMarked =
@@ -1353,6 +1620,10 @@ export async function processStripePaymentEventHook(event: Stripe.Event) {
 
     case 'charge.dispute.funds_withdrawn': {
       const dispute = event.data.object;
+      await observeServiceFeeDisputeFundsWithdrawn({
+        store: createServiceFeeStores().assessments,
+        dispute,
+      });
       void reportChargeBackedStripeAbuseEvent({
         abuseEventType: 'stripe.charge.dispute.funds_withdrawn',
         eventId: event.id,
@@ -1445,46 +1716,69 @@ export async function createAutoTopUpSetupCheckoutSession(
   amountCents: number = 5000
 ): Promise<string | null> {
   const amountDollars = amountCents / 100;
+  const feeDeps = createStripeTopUpFeeDeps();
+  const prepared = await prepareTopUpCheckoutFee({
+    flow: 'personal_auto_top_up_setup',
+    principalMinor: amountCents,
+    kiloUserId,
+    stripeCustomerId,
+    taxPrincipal: { kind: 'inline' },
+    deps: feeDeps,
+  });
 
-  const checkoutSession = await client.checkout.sessions.create({
-    mode: 'payment',
-    customer: stripeCustomerId,
-    billing_address_collection: 'required',
-    line_items: [
-      {
-        price_data: {
-          currency: 'usd',
-          product_data: {
-            name: 'Credit Top-Up with Auto-Refill Setup',
-            description: `Initial $${amountDollars} top-up. Your card will be saved for automatic $${amountDollars} top ups when balance drops below $${AUTO_TOP_UP_THRESHOLD_DOLLARS}.`,
+  const checkoutSession = await createTopUpCheckoutSession({
+    prepared,
+    buildSessionParams: feeLine => ({
+      mode: 'payment',
+      customer: stripeCustomerId,
+      billing_address_collection: 'required',
+      line_items: [
+        {
+          price_data: {
+            currency: 'usd',
+            product_data: {
+              name: 'Credit Top-Up with Auto-Refill Setup',
+              description: `Initial $${amountDollars} top-up. Your card will be saved for automatic $${amountDollars} top ups when balance drops below $${AUTO_TOP_UP_THRESHOLD_DOLLARS}.`,
+            },
+            unit_amount: amountCents,
           },
-          unit_amount: amountCents,
+          quantity: 1,
         },
-        quantity: 1,
+        ...(feeLine ? [feeLine] : []),
+      ],
+      invoice_creation: {
+        enabled: true,
       },
-    ],
-    invoice_creation: {
-      enabled: true,
-    },
-    customer_update: {
-      name: 'auto',
-      address: 'auto',
-    },
-    tax_id_collection: {
-      enabled: true,
-      required: 'never',
-    },
-    success_url: `${APP_URL}/payments/auto-topup/success?session_id={CHECKOUT_SESSION_ID}`,
-    cancel_url: `${APP_URL}/profile?auto_topup_setup=cancelled`,
-    payment_intent_data: {
-      metadata: {
-        type: 'auto-topup-setup',
-        kiloUserId,
-        amountCents: String(amountCents),
+      customer_update: {
+        name: 'auto',
+        address: 'auto',
       },
-      // KEY CONFIGURATION: This saves the payment method for future off-session charges
-      setup_future_usage: 'off_session',
-    },
+      tax_id_collection: {
+        enabled: true,
+        required: 'never',
+      },
+      success_url: `${APP_URL}/payments/auto-topup/success?session_id={CHECKOUT_SESSION_ID}`,
+      cancel_url: `${APP_URL}/profile?auto_topup_setup=cancelled`,
+      metadata: mergeServiceFeeCommercialMetadata(
+        { type: 'auto-topup-setup', kiloUserId },
+        prepared.commercialMetadata
+      ),
+      payment_intent_data: {
+        metadata: mergeServiceFeeCommercialMetadata(
+          {
+            type: 'auto-topup-setup',
+            kiloUserId,
+            amountCents: String(amountCents),
+          },
+          prepared.commercialMetadata
+        ),
+        // KEY CONFIGURATION: This saves the payment method for future off-session charges
+        setup_future_usage: 'off_session',
+      },
+      expand: ['line_items.data.price.product'],
+    }),
+    createSession: params => client.checkout.sessions.create(params),
+    deps: feeDeps,
   });
 
   return typeof checkoutSession.url === 'string' ? checkoutSession.url : null;
@@ -1499,25 +1793,29 @@ export async function getStripeTopUpCheckoutUrl(
   /** Optional internal path to redirect to when the user cancels checkout. */
   cancelPath?: string | null
 ): Promise<string | null> {
-  const line_items = amount
-    ? [
-        {
-          price_data: {
-            currency: 'usd',
-            product_data: {
-              name: 'Kilo Balance Top Up',
-            },
-            unit_amount: Math.round(amount * 100), // Convert dollars to cents
+  const feeDeps = createStripeTopUpFeeDeps();
+  const defaultPriceId = amount ? null : getEnvVariable('STRIPE_TOP_UP_PRICE_ID');
+  const principalMinor = amount
+    ? Math.round(amount * 100)
+    : await resolveFixedUsdPriceUnitAmount({
+        stripe: client,
+        priceId: defaultPriceId as string,
+      });
+  const principalLine = amount
+    ? {
+        price_data: {
+          currency: 'usd',
+          product_data: {
+            name: 'Kilo Balance Top Up',
           },
-          quantity: 1,
+          unit_amount: principalMinor,
         },
-      ]
-    : [
-        {
-          price: getEnvVariable('STRIPE_TOP_UP_PRICE_ID'),
-          quantity: 1,
-        },
-      ];
+        quantity: 1,
+      }
+    : {
+        price: defaultPriceId as string,
+        quantity: 1,
+      };
 
   const isOrganizationTopUp = Boolean(organizationId);
   let cancelUrl: string;
@@ -1529,34 +1827,62 @@ export async function getStripeTopUpCheckoutUrl(
     cancelUrl = `${APP_URL}/profile?payment_status=topup_cancelled&origin=${origin}`;
   }
 
-  const checkoutSession = await client.checkout.sessions.create({
-    mode: 'payment',
-    customer: stripeCustomerId,
-    billing_address_collection: 'required',
-    line_items: line_items,
-    invoice_creation: {
-      enabled: true,
-    },
-    customer_update: {
-      name: 'auto',
-      address: 'auto',
-    },
-    tax_id_collection: {
-      enabled: true,
-      required: 'never',
-    },
-    success_url: `${APP_URL}/payments/topup/success?session_id={CHECKOUT_SESSION_ID}&origin=${origin}`,
-    cancel_url: cancelUrl,
-    payment_intent_data: {
-      metadata: {
-        type: 'stripe-checkout-topup',
-        kiloUserId,
-        organizationId: organizationId ?? null,
-      } satisfies StripeTopupMetadata,
-    },
-    saved_payment_method_options: {
-      payment_method_save: 'enabled',
-    },
+  const prepared = await prepareTopUpCheckoutFee({
+    flow: isOrganizationTopUp ? 'organization_top_up' : 'personal_top_up',
+    principalMinor,
+    kiloUserId,
+    organizationId: organizationId ?? undefined,
+    stripeCustomerId: stripeCustomerId ?? undefined,
+    taxPrincipal: defaultPriceId ? { kind: 'price', priceId: defaultPriceId } : { kind: 'inline' },
+    deps: feeDeps,
+  });
+
+  const checkoutSession = await createTopUpCheckoutSession({
+    prepared,
+    buildSessionParams: feeLine => ({
+      mode: 'payment',
+      customer: stripeCustomerId,
+      billing_address_collection: 'required',
+      line_items: feeLine ? [principalLine, feeLine] : [principalLine],
+      invoice_creation: {
+        enabled: true,
+      },
+      customer_update: {
+        name: 'auto',
+        address: 'auto',
+      },
+      tax_id_collection: {
+        enabled: true,
+        required: 'never',
+      },
+      success_url: `${APP_URL}/payments/topup/success?session_id={CHECKOUT_SESSION_ID}&origin=${origin}`,
+      cancel_url: cancelUrl,
+      metadata: mergeServiceFeeCommercialMetadata(
+        {
+          type: 'stripe-checkout-topup',
+          kiloUserId,
+          ...(organizationId ? { organizationId } : {}),
+        },
+        prepared.commercialMetadata
+      ),
+      payment_intent_data: {
+        metadata: mergeServiceFeeCommercialMetadata(
+          {
+            type: 'stripe-checkout-topup',
+            kiloUserId,
+            organizationId: organizationId ?? null,
+            amountCents: String(principalMinor),
+          } satisfies StripeTopupMetadata,
+          prepared.commercialMetadata
+        ),
+      },
+      saved_payment_method_options: {
+        payment_method_save: 'enabled',
+      },
+      expand: ['line_items.data.price.product'],
+    }),
+    createSession: params => client.checkout.sessions.create(params),
+    deps: feeDeps,
   });
 
   const url: string | null = typeof checkoutSession.url === 'string' ? checkoutSession.url : null;
@@ -1786,57 +2112,127 @@ export type UpdateSeatCountResult = {
   paymentIntentClientSecret?: string;
 };
 
+export type UpdateSeatCountServiceFeeDependencies =
+  OrganizationKiloPassSeatCapacityFeeDependencies & {
+    store?: ServiceFeeAssessmentStore;
+    stripe?: OrganizationKiloPassSeatCapacityStripe;
+  };
+
+function resolveSeatUpdateOrganizationPassItem(
+  subscription: Stripe.Subscription
+): Stripe.SubscriptionItem | undefined {
+  if (subscription.metadata?.type !== 'kilo-pass-org') {
+    return undefined;
+  }
+  if (typeof resolveOrganizationKiloPassSubscriptionItem === 'function') {
+    return resolveOrganizationKiloPassSubscriptionItem({ subscription });
+  }
+  // Adapter test doubles omit the resolver. Keep the bound non-seat add-on so
+  // the base capacity update still runs.
+  return subscription.items.data.find(
+    item => !isSeatLineItem(item) && !KNOWN_SEAT_PRICE_IDS.has(item.price.id)
+  );
+}
+
 export async function handleUpdateSeatCount(
   subscriptionStripeId: string,
   newSeatCount: number,
-  currentSeatCount: number
+  currentSeatCount: number,
+  feeDeps: UpdateSeatCountServiceFeeDependencies = {}
 ): Promise<UpdateSeatCountResult> {
-  // Serialize concurrent seat modifications for the same subscription (Seat Count Modification 8).
-  // Uses pg_advisory_xact_lock inside a transaction to guarantee the lock and all operations
-  // share the same pooled connection. The lock auto-releases on commit/rollback.
-  return await db.transaction(async tx => {
-    await tx.execute(sql`SELECT pg_advisory_xact_lock(hashtext(${subscriptionStripeId}))`);
-
-    const isIncreasingSeats = currentSeatCount < newSeatCount;
-    const idempotencyKey = `sub-update-${randomUUID()}`;
-    const subscription = await client.subscriptions.retrieve(subscriptionStripeId);
-
-    // Find the paid seat item by known price ID, not blindly using items[0]
-    // which could be a free-seat line item (Finding #5).
-    const paidSeatItem = subscription.items.data.find(item =>
-      KNOWN_SEAT_PRICE_IDS.has(item.price.id)
-    );
-    if (!paidSeatItem) {
-      throw new Error(`No recognized paid seat item found in subscription ${subscriptionStripeId}`);
-    }
+  const isIncreasingSeats = currentSeatCount < newSeatCount;
+  const idempotencyKey = `sub-update-${randomUUID()}`;
+  const now = feeDeps.now ?? new Date();
+  const prorationDate = Math.floor(now.getTime() / 1000);
+  const subscription = await client.subscriptions.retrieve(subscriptionStripeId);
+
+  // Find the paid seat item by known price ID, not blindly using items[0]
+  // which could be a free-seat line item (Finding #5).
+  const paidSeatItem = subscription.items.data.find(item =>
+    KNOWN_SEAT_PRICE_IDS.has(item.price.id)
+  );
+  if (!paidSeatItem) {
+    throw new Error(`No recognized paid seat item found in subscription ${subscriptionStripeId}`);
+  }
 
-    // Calculate the free seat count from non-paid seat-product items to preserve them.
-    // Non-seat add-ons can share the subscription but must not reduce the paid seat quantity.
-    const freeSeatCount = subscription.items.data
-      .filter(item => isSeatLineItem(item) && !KNOWN_SEAT_PRICE_IDS.has(item.price.id))
-      .reduce((total, item) => total + (item.quantity ?? 0), 0);
-
-    // The requested newSeatCount is the desired total. Deduct free seats to get paid quantity.
-    // The Stripe subscription must retain at least 1 paid seat (Stripe does not allow 0-quantity
-    // line items). Reducing to 0 paid seats requires cancelling the subscription instead.
-    const rawPaidQuantity = newSeatCount - freeSeatCount;
-    if (rawPaidQuantity < 1) {
-      throw new Error(
-        `Cannot reduce paid seats below 1 (requested total: ${newSeatCount}, free seats: ${freeSeatCount}). Cancel the subscription to remove all paid seats.`
-      );
+  // Calculate the free seat count from non-paid seat-product items to preserve them.
+  // Non-seat add-ons can share the subscription but must not reduce the paid seat quantity.
+  const freeSeatCount = subscription.items.data
+    .filter(item => isSeatLineItem(item) && !KNOWN_SEAT_PRICE_IDS.has(item.price.id))
+    .reduce((total, item) => total + (item.quantity ?? 0), 0);
+
+  // The requested newSeatCount is the desired total. Deduct free seats to get paid quantity.
+  // The Stripe subscription must retain at least 1 paid seat (Stripe does not allow 0-quantity
+  // line items). Reducing to 0 paid seats requires cancelling the subscription instead.
+  const rawPaidQuantity = newSeatCount - freeSeatCount;
+  if (rawPaidQuantity < 1) {
+    throw new Error(
+      `Cannot reduce paid seats below 1 (requested total: ${newSeatCount}, free seats: ${freeSeatCount}). Cancel the subscription to remove all paid seats.`
+    );
+  }
+  const paidSeatQuantity = rawPaidQuantity;
+  const organizationPassItem = resolveSeatUpdateOrganizationPassItem(subscription);
+
+  let prepared: PreparedOrganizationKiloPassSeatCapacityFee = {
+    prorationDate,
+    organizationPassItemId: organizationPassItem?.id ?? null,
+    shouldAttach: false,
+    assessmentKey: null,
+    assessment: null,
+    feeInvoiceItem: null,
+    expectedFeeMinor: 0,
+    commercialMetadata: null,
+  };
+  if (
+    organizationPassItem &&
+    isIncreasingSeats &&
+    typeof prepareOrganizationKiloPassSeatCapacityFee === 'function'
+  ) {
+    try {
+      prepared = await prepareOrganizationKiloPassSeatCapacityFee({
+        subscription,
+        paidSeatItemId: paidSeatItem.id,
+        paidSeatQuantity,
+        isIncreasingSeats,
+        prorationDate,
+        stripe: feeDeps.stripe,
+        store: feeDeps.store,
+        deps: {
+          now,
+          findEffectiveExemption: feeDeps.findEffectiveExemption,
+          resolveTaxInput: feeDeps.resolveTaxInput,
+          getOrganizationPurchaseChannel:
+            feeDeps.getOrganizationPurchaseChannel ?? lookupOrganizationKiloPassPurchaseChannel,
+          sendAlert: feeDeps.sendAlert,
+        },
+      });
+    } catch (error) {
+      captureException(error, {
+        tags: { source: 'seat_capacity_service_fee_prepare' },
+        extra: { subscriptionStripeId },
+      });
     }
-    const paidSeatQuantity = rawPaidQuantity;
-    const organizationPassItem =
-      subscription.metadata?.type === 'kilo-pass-org'
-        ? subscription.items.data.find(item => !isSeatLineItem(item))
-        : undefined;
+  }
 
-    try {
-      const updatedSubscription = await client.subscriptions.update(
+  // Serialize concurrent seat quantity updates for the same subscription.
+  // The advisory lock covers only the Stripe subscription update. Fee preview,
+  // assessment writes, invoiceItems.create, finalize, and pay stay outside it
+  // so the lock does not hold a pooled connection across extra Stripe IO.
+  const pendingFeeItemId = await stagePreparedOrganizationKiloPassServiceFeeItem({
+    prepared,
+    stripe: feeDeps.stripe,
+  });
+  let updatedSubscription: Stripe.Subscription;
+  let invoiceObj: Stripe.Invoice | null;
+  try {
+    const locked = await db.transaction(async tx => {
+      await tx.execute(sql`SELECT pg_advisory_xact_lock(hashtext(${subscriptionStripeId}))`);
+      const updated = await client.subscriptions.update(
         subscriptionStripeId,
         {
           proration_behavior: isIncreasingSeats ? 'always_invoice' : 'none',
           payment_behavior: isIncreasingSeats ? 'allow_incomplete' : undefined,
+          ...(isIncreasingSeats ? { proration_date: prepared.prorationDate } : {}),
           // Only modify the paid seat item; free-seat items remain untouched.
           items: [
             {
@@ -1847,248 +2243,267 @@ export async function handleUpdateSeatCount(
               ? [{ id: organizationPassItem.id, quantity: paidSeatQuantity }]
               : []),
           ],
-          expand: ['latest_invoice'],
+          expand: ['latest_invoice.lines'],
         },
         {
           idempotencyKey,
         }
       );
+      const latestInvoice = updated.latest_invoice;
+      return {
+        updatedSubscription: updated,
+        invoiceObj: typeof latestInvoice === 'object' ? latestInvoice : null,
+      };
+    });
+    updatedSubscription = locked.updatedSubscription;
+    invoiceObj = locked.invoiceObj;
+  } catch (error) {
+    if (pendingFeeItemId) {
+      await discardStagedOrganizationKiloPassServiceFeeItem({
+        invoiceItemId: pendingFeeItemId,
+        stripe: feeDeps.stripe,
+      });
+    }
+    return handleUpdateSeatCountRequiresActionError(error, subscriptionStripeId);
+  }
 
-      // Get the latest invoice
-      const latestInvoice = updatedSubscription.latest_invoice;
-      let invoiceObj: Stripe.Invoice | null =
-        typeof latestInvoice === 'object' ? latestInvoice : null;
+  let paymentIntent: Stripe.PaymentIntent | null = null;
 
-      let paymentIntent: Stripe.PaymentIntent | null = null;
+  if (
+    invoiceObj &&
+    prepared.shouldAttach &&
+    typeof attachPreparedOrganizationKiloPassServiceFee === 'function'
+  ) {
+    try {
+      const charged = await attachPreparedOrganizationKiloPassServiceFee({
+        prepared,
+        invoice: invoiceObj,
+        stripe: feeDeps.stripe,
+        store: feeDeps.store,
+        deps: {
+          now,
+          sendAlert: feeDeps.sendAlert,
+        },
+        pendingInvoiceItemId: pendingFeeItemId,
+      });
+      if (charged) {
+        prepared = { ...prepared, assessment: charged, shouldAttach: false };
+      }
+    } catch (error) {
+      captureException(error, {
+        tags: { source: 'seat_capacity_service_fee_attach' },
+        extra: { subscriptionStripeId, invoiceId: invoiceObj.id },
+      });
+    }
+  }
 
-      // If the invoice is open or draft, attempt to pay it to trigger PaymentIntent creation
-      if (invoiceObj && (invoiceObj.status === 'open' || invoiceObj.status === 'draft')) {
-        try {
-          // Finalize if draft
-          if (invoiceObj.status === 'draft') {
-            invoiceObj = await client.invoices.finalizeInvoice(invoiceObj.id);
-          }
+  // If the invoice is open or draft, attempt to pay it to trigger PaymentIntent creation
+  if (invoiceObj && (invoiceObj.status === 'open' || invoiceObj.status === 'draft')) {
+    try {
+      // Finalize if draft
+      if (invoiceObj.status === 'draft') {
+        invoiceObj = await client.invoices.finalizeInvoice(invoiceObj.id);
+      }
 
-          // Attempt to pay the invoice - this will create a PaymentIntent and attempt charge
-          const paidInvoice = (await client.invoices.pay(invoiceObj.id, {
-            expand: ['payment_intent'],
-          })) as Stripe.Invoice & { payment_intent?: Stripe.PaymentIntent | string | null };
-          invoiceObj = paidInvoice;
+      // Attempt to pay the invoice - this will create a PaymentIntent and attempt charge
+      const paidInvoice = (await client.invoices.pay(invoiceObj.id, {
+        expand: ['payment_intent'],
+      })) as Stripe.Invoice & { payment_intent?: Stripe.PaymentIntent | string | null };
+      invoiceObj = paidInvoice;
 
-          if (typeof paidInvoice.payment_intent === 'object' && paidInvoice.payment_intent) {
-            paymentIntent = paidInvoice.payment_intent;
-          } else if (typeof paidInvoice.payment_intent === 'string') {
-            paymentIntent = await client.paymentIntents.retrieve(paidInvoice.payment_intent);
-          }
-        } catch (payError) {
-          // Invoice.pay() throws when payment fails (e.g., needs 3DS/SCA)
-          // When this happens with subscriptions, Stripe may void the original invoice
-          // and create a NEW invoice with the PaymentIntent that requires action.
-          // We need to list recent invoices for the subscription and find the one
-          // with a payment_intent in requires_action status.
-
-          // List recent invoices for this subscription to find one with requires_action
-          const recentInvoices = await client.invoices.list({
-            subscription: subscriptionStripeId,
+      if (typeof paidInvoice.payment_intent === 'object' && paidInvoice.payment_intent) {
+        paymentIntent = paidInvoice.payment_intent;
+      } else if (typeof paidInvoice.payment_intent === 'string') {
+        paymentIntent = await client.paymentIntents.retrieve(paidInvoice.payment_intent);
+      }
+    } catch (payError) {
+      // Invoice.pay() throws when payment fails (e.g., needs 3DS/SCA)
+      // When this happens with subscriptions, Stripe may void the original invoice
+      // and create a NEW invoice with the PaymentIntent that requires action.
+      // We need to list recent invoices for the subscription and find the one
+      // with a payment_intent in requires_action status.
+
+      // List recent invoices for this subscription to find one with requires_action
+      const recentInvoices = await client.invoices.list({
+        subscription: subscriptionStripeId,
+        limit: 5,
+        expand: ['data.payment_intent'],
+      });
+
+      type InvoiceWithPaymentIntent = Stripe.Invoice & {
+        payment_intent?: Stripe.PaymentIntent | string | null;
+      };
+
+      // Find an invoice with a payment_intent that requires action
+      for (const inv of recentInvoices.data) {
+        const invWithPi = inv as InvoiceWithPaymentIntent;
+        const pi = invWithPi.payment_intent;
+        if (typeof pi === 'object' && pi && pi.status === 'requires_action') {
+          paymentIntent = pi;
+          break;
+        }
+      }
+
+      // If still not found, try listing PaymentIntents directly for the customer
+      if (!paymentIntent) {
+        // subscription.customer can be a string ID, expanded Customer object, or DeletedCustomer.
+        // Extract the customer ID string regardless of the shape.
+        const customerId =
+          typeof subscription.customer === 'string'
+            ? subscription.customer
+            : subscription.customer?.id;
+
+        if (customerId) {
+          const paymentIntents = await client.paymentIntents.list({
+            customer: customerId,
             limit: 5,
-            expand: ['data.payment_intent'],
           });
 
-          type InvoiceWithPaymentIntent = Stripe.Invoice & {
-            payment_intent?: Stripe.PaymentIntent | string | null;
-          };
-
-          // Find an invoice with a payment_intent that requires action
-          for (const inv of recentInvoices.data) {
-            const invWithPi = inv as InvoiceWithPaymentIntent;
-            const pi = invWithPi.payment_intent;
-            if (typeof pi === 'object' && pi && pi.status === 'requires_action') {
+          for (const pi of paymentIntents.data) {
+            if (pi.status === 'requires_action') {
               paymentIntent = pi;
               break;
             }
           }
-
-          // If still not found, try listing PaymentIntents directly for the customer
-          if (!paymentIntent) {
-            // subscription.customer can be a string ID, expanded Customer object, or DeletedCustomer.
-            // Extract the customer ID string regardless of the shape.
-            const customerId =
-              typeof subscription.customer === 'string'
-                ? subscription.customer
-                : subscription.customer?.id;
-
-            if (customerId) {
-              const paymentIntents = await client.paymentIntents.list({
-                customer: customerId,
-                limit: 5,
-              });
-
-              for (const pi of paymentIntents.data) {
-                if (pi.status === 'requires_action') {
-                  paymentIntent = pi;
-                  break;
-                }
-              }
-            }
-          }
-
-          // If we couldn't identify a requires_action payment intent, the invoice payment
-          // failed for another reason (e.g., card declined, insufficient funds).
-          // Re-throw to avoid falsely treating the seat update as successful.
-          if (!paymentIntent || paymentIntent.status !== 'requires_action') {
-            throw payError;
-          }
         }
       }
 
-      if (paymentIntent && paymentIntent.status === 'requires_action') {
-        // 3DS authentication is required - return the client secret for frontend handling
-        return {
-          success: false,
-          message:
-            'Payment requires additional authentication. Please complete the verification process.',
-          requiresAction: true,
-          paymentIntentClientSecret: paymentIntent.client_secret ?? undefined,
-        };
-      }
-
-      if (
-        paymentIntent &&
-        (paymentIntent.status === 'requires_payment_method' || paymentIntent.status === 'canceled')
-      ) {
-        // Payment failed for another reason
-        throw new Error('Payment failed. Please update your payment method and try again.');
+      // If we couldn't identify a requires_action payment intent, the invoice payment
+      // failed for another reason (e.g., card declined, insufficient funds).
+      // Re-throw to avoid falsely treating the seat update as successful.
+      if (!paymentIntent || paymentIntent.status !== 'requires_action') {
+        throw payError;
       }
+    }
+  }
 
-      if (isIncreasingSeats && organizationPassItem && invoiceObj?.status === 'paid') {
-        const reconciled = await handleOrganizationKiloPassInvoicePaid({
-          invoice: invoiceObj,
-          paidSeatCount: paidSeatQuantity,
-        });
-        if (!reconciled) {
-          warnExceptInTest('Could not eagerly reconcile organization Kilo Pass seat increase', {
-            subscriptionStripeId,
-            invoiceId: invoiceObj.id,
-          });
-        }
-      }
-
-      // immediately update our seats purchases - it will usually be updated again by the webhook
-      // but this allows us to be immediately consistent
-      await handleSubscriptionEvent(updatedSubscription, idempotencyKey);
-
-      return {
-        success: true,
-        message: `Subscription updated to ${newSeatCount} seats successfully.`,
-      };
-    } catch (error) {
-      // Handle 3DS authentication required errors
-      // When a payment requires 3DS, Stripe throws an error with code
-      // 'subscription_payment_intent_requires_action' or 'invoice_payment_intent_requires_action'
-
-      // Check if this is a Stripe error that requires payment action
-      const isStripeError = error instanceof Stripe.errors.StripeError;
-      const stripeError = error as Stripe.errors.StripeError & {
-        payment_intent?: Stripe.PaymentIntent;
-        raw?: {
-          payment_intent?: Stripe.PaymentIntent;
-        };
-      };
-      const errorCode = isStripeError ? stripeError.code : undefined;
-
-      // Check for either subscription or invoice requires_action errors
-      const requires3DS =
-        errorCode === 'subscription_payment_intent_requires_action' ||
-        errorCode === 'invoice_payment_intent_requires_action';
-
-      if (isStripeError && requires3DS) {
-        // First, check if the error itself contains the PaymentIntent
-        // Stripe may attach it directly to the error object
-        if (stripeError.payment_intent && stripeError.payment_intent.status === 'requires_action') {
-          return {
-            success: false,
-            message:
-              'Payment requires additional authentication. Please complete the verification process.',
-            requiresAction: true,
-            paymentIntentClientSecret: stripeError.payment_intent.client_secret ?? undefined,
-          };
-        }
+  if (paymentIntent && paymentIntent.status === 'requires_action') {
+    // 3DS authentication is required - return the client secret for frontend handling
+    return {
+      success: false,
+      message:
+        'Payment requires additional authentication. Please complete the verification process.',
+      requiresAction: true,
+      paymentIntentClientSecret: paymentIntent.client_secret ?? undefined,
+    };
+  }
 
-        // When the subscription update fails due to 3DS, Stripe creates a new invoice
-        // but then rolls back the subscription. We need to find the pending/draft invoice
-        // or the most recent invoice with a payment_intent that requires_action.
+  if (
+    paymentIntent &&
+    (paymentIntent.status === 'requires_payment_method' || paymentIntent.status === 'canceled')
+  ) {
+    // Payment failed for another reason
+    throw new Error('Payment failed. Please update your payment method and try again.');
+  }
 
-        // Re-retrieve the subscription to get the latest invoice info
-        const updatedSubscription = await client.subscriptions.retrieve(subscriptionStripeId, {
-          expand: ['latest_invoice.payment_intent', 'pending_setup_intent'],
-        });
+  if (isIncreasingSeats && organizationPassItem && invoiceObj?.status === 'paid') {
+    const reconciled = await handleOrganizationKiloPassInvoicePaid({
+      invoice: invoiceObj,
+      paidSeatCount: paidSeatQuantity,
+      serviceFee: {
+        store: feeDeps.store,
+        stripe: feeDeps.stripe,
+        deps: {
+          now,
+          sendAlert: feeDeps.sendAlert,
+        },
+      },
+    });
+    if (!reconciled) {
+      warnExceptInTest('Could not eagerly reconcile organization Kilo Pass seat increase', {
+        subscriptionStripeId,
+        invoiceId: invoiceObj.id,
+      });
+    }
+  }
 
-        // The latest_invoice is expanded to include payment_intent
-        // Use type assertion for the expanded invoice structure
-        const latestInvoice = updatedSubscription.latest_invoice as
-          | (Stripe.Invoice & { payment_intent?: Stripe.PaymentIntent | string | null })
-          | null;
-
-        let paymentIntent: Stripe.PaymentIntent | null = null;
-
-        // First, try to get payment_intent from the expanded latest_invoice
-        if (
-          latestInvoice &&
-          typeof latestInvoice.payment_intent === 'object' &&
-          latestInvoice.payment_intent !== null
-        ) {
-          paymentIntent = latestInvoice.payment_intent;
-        }
+  // immediately update our seats purchases - it will usually be updated again by the webhook
+  // but this allows us to be immediately consistent
+  await handleSubscriptionEvent(updatedSubscription, idempotencyKey);
 
-        // If not expanded or not found, check if the invoice has a payment_intent ID
-        // and retrieve it directly. When subscription update fails, the invoice may be
-        // in 'open' status with a payment_intent that requires action.
-        if (!paymentIntent && latestInvoice) {
-          const paymentIntentId =
-            typeof latestInvoice.payment_intent === 'string'
-              ? latestInvoice.payment_intent
-              : undefined;
-
-          if (paymentIntentId) {
-            paymentIntent = await client.paymentIntents.retrieve(paymentIntentId);
-          }
-        }
+  return {
+    success: true,
+    message: `Subscription updated to ${newSeatCount} seats successfully.`,
+  };
+}
 
-        // If still no payment intent, list recent invoices for this subscription
-        // and find one with an open payment intent requiring action
-        if (!paymentIntent) {
-          const recentInvoices = await client.invoices.list({
-            subscription: subscriptionStripeId,
-            limit: 10,
-            expand: ['data.payment_intent'],
-          });
+async function handleUpdateSeatCountRequiresActionError(
+  error: unknown,
+  subscriptionStripeId: string
+): Promise<UpdateSeatCountResult> {
+  const isStripeError = error instanceof Stripe.errors.StripeError;
+  const stripeError = error as Stripe.errors.StripeError & {
+    payment_intent?: Stripe.PaymentIntent;
+    raw?: {
+      payment_intent?: Stripe.PaymentIntent;
+    };
+  };
+  const errorCode = isStripeError ? stripeError.code : undefined;
+  const requires3DS =
+    errorCode === 'subscription_payment_intent_requires_action' ||
+    errorCode === 'invoice_payment_intent_requires_action';
 
-          for (const inv of recentInvoices.data) {
-            // Cast to include the expanded payment_intent field
-            const invoiceWithPi = inv as Stripe.Invoice & {
-              payment_intent?: Stripe.PaymentIntent | null;
-            };
-            const pi = invoiceWithPi.payment_intent;
-            if (pi && pi.status === 'requires_action') {
-              paymentIntent = pi;
-              break;
-            }
-          }
-        }
+  if (isStripeError && requires3DS) {
+    if (stripeError.payment_intent && stripeError.payment_intent.status === 'requires_action') {
+      return {
+        success: false,
+        message:
+          'Payment requires additional authentication. Please complete the verification process.',
+        requiresAction: true,
+        paymentIntentClientSecret: stripeError.payment_intent.client_secret ?? undefined,
+      };
+    }
 
-        if (paymentIntent && paymentIntent.status === 'requires_action') {
-          return {
-            success: false,
-            message:
-              'Payment requires additional authentication. Please complete the verification process.',
-            requiresAction: true,
-            paymentIntentClientSecret: paymentIntent.client_secret ?? undefined,
-          };
+    const updatedSubscription = await client.subscriptions.retrieve(subscriptionStripeId, {
+      expand: ['latest_invoice.payment_intent', 'pending_setup_intent'],
+    });
+    const latestInvoice = updatedSubscription.latest_invoice as
+      | (Stripe.Invoice & { payment_intent?: Stripe.PaymentIntent | string | null })
+      | null;
+
+    let paymentIntent: Stripe.PaymentIntent | null = null;
+    if (
+      latestInvoice &&
+      typeof latestInvoice.payment_intent === 'object' &&
+      latestInvoice.payment_intent !== null
+    ) {
+      paymentIntent = latestInvoice.payment_intent;
+    }
+    if (!paymentIntent && latestInvoice) {
+      const paymentIntentId =
+        typeof latestInvoice.payment_intent === 'string' ? latestInvoice.payment_intent : undefined;
+      if (paymentIntentId) {
+        paymentIntent = await client.paymentIntents.retrieve(paymentIntentId);
+      }
+    }
+    if (!paymentIntent) {
+      const recentInvoices = await client.invoices.list({
+        subscription: subscriptionStripeId,
+        limit: 10,
+        expand: ['data.payment_intent'],
+      });
+      for (const inv of recentInvoices.data) {
+        const invoiceWithPi = inv as Stripe.Invoice & {
+          payment_intent?: Stripe.PaymentIntent | null;
+        };
+        const pi = invoiceWithPi.payment_intent;
+        if (pi && pi.status === 'requires_action') {
+          paymentIntent = pi;
+          break;
         }
       }
+    }
 
-      // Re-throw other errors
-      throw error;
+    if (paymentIntent && paymentIntent.status === 'requires_action') {
+      return {
+        success: false,
+        message:
+          'Payment requires additional authentication. Please complete the verification process.',
+        requiresAction: true,
+        paymentIntentClientSecret: paymentIntent.client_secret ?? undefined,
+      };
     }
-  });
+  }
+
+  throw error;
 }
diff --git a/apps/web/src/routers/admin/email-testing-router.ts b/apps/web/src/routers/admin/email-testing-router.ts
index f4e0f65e8f..b784493fbd 100644
--- a/apps/web/src/routers/admin/email-testing-router.ts
+++ b/apps/web/src/routers/admin/email-testing-router.ts
@@ -6,7 +6,9 @@ import { verifyEmail } from '@/lib/email-neverbounce';
 import {
   subjects,
   creditsVars,
+  buildCreditsTopUpCreditsRowSection,
   buildCreditsTopUpReceiptSection,
+  buildCreditsTopUpServiceFeeSection,
   RawHtml,
   renderTemplate,
   type TemplateName,
@@ -187,8 +189,16 @@ function fixtureTemplateVars(template: TemplateName): Record<string, string | Ra
         heading: 'Thanks for your top-up',
         intro:
           'Your Kilo credit top-up has been processed and the credits are now available on your account.',
+        amount_label: 'Amount',
         amount_usd: '10.00',
-        credits_usd: '10.00',
+        service_fee_section: buildCreditsTopUpServiceFeeSection({
+          serviceFeeCents: 0,
+          grossPaidCents: 1000,
+        }),
+        credits_row_section: buildCreditsTopUpCreditsRowSection({
+          creditsCents: 1000,
+          hasServiceFee: false,
+        }),
         purchase_date: formatDate(new Date()),
         credits_url: `${NEXTAUTH_URL}/credits`,
         receipt_section: buildCreditsTopUpReceiptSection('https://pay.stripe.com/receipts/test'),
diff --git a/apps/web/src/routers/kilo-pass-router.test.ts b/apps/web/src/routers/kilo-pass-router.test.ts
index 2b4cb90f6d..e8366fdd9a 100644
--- a/apps/web/src/routers/kilo-pass-router.test.ts
+++ b/apps/web/src/routers/kilo-pass-router.test.ts
@@ -60,6 +60,24 @@ import type Stripe from 'stripe';
 import type dayjsType from 'dayjs';
 import type utcType from 'dayjs/plugin/utc';
 import type * as Sentry from '@sentry/nextjs';
+import type { CreatePersonalKiloPassCheckoutSession } from '@/routers/kilo-pass-router';
+import type {
+  ServiceFeeAssessmentRecord,
+  ServiceFeeAssessmentStore,
+} from '@/lib/service-fees/assessments';
+import {
+  SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+  SERVICE_FEE_DESCRIPTION,
+  SERVICE_FEE_METADATA_TYPE,
+  SERVICE_FEE_RATE_BASIS_POINTS,
+  SERVICE_FEE_VERSION,
+} from '@/lib/service-fees/constants';
+import {
+  SERVICE_FEE_FAILURE_APPLICATION,
+  type CheckoutSessionLike,
+  type ServiceFeeCheckoutDependencies,
+} from '@/lib/service-fees/checkout';
+import { buildInheritedInlineServiceFeeTaxInput } from '@/lib/service-fees/tax';
 
 const PROMO_OFFER_ACTIVE_TEST_TIME = '2026-05-06T12:00:00.000Z';
 const PROMO_OFFER_EXPIRED_TEST_TIME = '2026-05-07T00:00:00.000Z';
@@ -81,6 +99,8 @@ type StripeMock = {
     sessions: {
       create: ReturnType<typeof jest.fn>;
       retrieve: ReturnType<typeof jest.fn>;
+      expire: ReturnType<typeof jest.fn>;
+      listLineItems: ReturnType<typeof jest.fn>;
     };
   };
   billingPortal: {
@@ -91,6 +111,9 @@ type StripeMock = {
   invoices: {
     list: ReturnType<typeof jest.fn>;
   };
+  prices: {
+    retrieve: ReturnType<typeof jest.fn>;
+  };
 };
 
 type AppStoreVerifierMock = {
@@ -324,11 +347,71 @@ type KiloPassCaller = {
 type Caller = { kiloPass: KiloPassCaller };
 
 let createCallerForUser: (userId: string) => Promise<Caller>;
+let createPersonalKiloPassCheckoutSession: CreatePersonalKiloPassCheckoutSession;
 
 function freezeKiloPassClock(nowIso: string): void {
   mockKiloPassNowIso = nowIso;
 }
 
+function createMemoryAssessmentStore(): ServiceFeeAssessmentStore {
+  const rows = new Map<string, ServiceFeeAssessmentRecord>();
+  const store: ServiceFeeAssessmentStore = {
+    async transact(fn) {
+      return fn(store);
+    },
+    async findByAssessmentKey(assessmentKey) {
+      const row = rows.get(assessmentKey);
+      return row ? { ...row, metadata: { ...row.metadata } } : null;
+    },
+    async insert(record) {
+      if (rows.has(record.assessmentKey)) {
+        throw new Error(`duplicate assessment_key ${record.assessmentKey}`);
+      }
+      const copy = { ...record, metadata: { ...record.metadata } };
+      rows.set(record.assessmentKey, copy);
+      return { ...copy };
+    },
+    async update(assessmentKey, patch) {
+      const existing = rows.get(assessmentKey);
+      if (!existing) throw new Error(`missing ${assessmentKey}`);
+      const next = {
+        ...existing,
+        ...patch,
+        metadata: { ...existing.metadata, ...(patch.metadata ?? {}) },
+      };
+      rows.set(assessmentKey, next);
+      return { ...next };
+    },
+  };
+  return store;
+}
+
+type PersonalKiloPassCheckoutTestDeps = ServiceFeeCheckoutDependencies & {
+  createSession?: (params: Stripe.Checkout.SessionCreateParams) => Promise<CheckoutSessionLike>;
+};
+
+function kiloPassCheckoutDeps(
+  store: ServiceFeeAssessmentStore,
+  overrides: Partial<PersonalKiloPassCheckoutTestDeps> = {}
+): PersonalKiloPassCheckoutTestDeps {
+  return {
+    store,
+    now: new Date(SERVICE_FEE_ACTIVATION_UNIX_SECONDS * 1000),
+    sendAlert: jest.fn(async () => undefined),
+    stripe: {
+      prices: {
+        retrieve: async () => ({
+          id: 'price_test_kilo_pass',
+          currency: 'usd',
+          unit_amount: 4900,
+          tax_behavior: 'unspecified',
+        }),
+      },
+    },
+    ...overrides,
+  };
+}
+
 jest.mock('@/lib/kilo-pass/dayjs', () => {
   const realDayjs = jest.requireActual<typeof dayjsType>('dayjs');
   const utc = jest.requireActual<typeof utcType>('dayjs/plugin/utc');
@@ -363,6 +446,8 @@ jest.mock('@/lib/stripe-client', () => {
       sessions: {
         create: jest.fn(),
         retrieve: jest.fn(),
+        expire: jest.fn(),
+        listLineItems: jest.fn(),
       },
     },
     billingPortal: {
@@ -373,6 +458,9 @@ jest.mock('@/lib/stripe-client', () => {
     invoices: {
       list: jest.fn(),
     },
+    prices: {
+      retrieve: jest.fn(),
+    },
   };
 
   return {
@@ -668,6 +756,7 @@ describe('kiloPassRouter', () => {
     // Delay importing the tRPC caller factory until after mocks are registered,
     // otherwise router imports will capture the real Stripe client.
     ({ createCallerForUser } = await import('@/routers/test-utils'));
+    ({ createPersonalKiloPassCheckoutSession } = await import('@/routers/kilo-pass-router'));
   });
 
   beforeEach(() => {
@@ -680,8 +769,21 @@ describe('kiloPassRouter', () => {
     stripeMock.subscriptionSchedules.retrieve.mockReset();
     stripeMock.checkout.sessions.create.mockReset();
     stripeMock.checkout.sessions.retrieve.mockReset();
+    stripeMock.checkout.sessions.expire.mockReset();
+    stripeMock.checkout.sessions.listLineItems.mockReset();
     stripeMock.billingPortal.sessions.create.mockReset();
     stripeMock.invoices.list.mockReset();
+    stripeMock.prices.retrieve.mockReset();
+    stripeMock.prices.retrieve.mockResolvedValue({
+      id: 'price_test_kilo_pass',
+      currency: 'usd',
+      unit_amount: 4900,
+      tax_behavior: 'unspecified',
+    });
+    stripeMock.checkout.sessions.listLineItems.mockResolvedValue({
+      data: [],
+      has_more: false,
+    });
     getAppStoreVerifierMock().verifyAppleKiloPassTransactionJws.mockReset();
     getStoreCompletionMock().completeStoreKiloPassPurchase.mockReset();
     getPosthogTrackingMock().trackKiloPassPurchaseCompleted.mockReset();
@@ -5112,6 +5214,8 @@ describe('kiloPassRouter', () => {
     it('creates a checkout session with empty affiliate metadata when attribution is absent', async () => {
       const stripeMock = getStripeMock();
       stripeMock.checkout.sessions.create.mockResolvedValue({
+        id: 'cs_test_ok',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
         url: 'https://stripe.example.test/checkout',
       });
 
@@ -5133,10 +5237,12 @@ describe('kiloPassRouter', () => {
       });
 
       expect(result).toEqual({ url: 'https://stripe.example.test/checkout' });
+      expect(stripeMock.prices.retrieve).toHaveBeenCalledWith('price_test_kilo_pass');
       expect(stripeMock.checkout.sessions.create).toHaveBeenCalledWith(
         expect.objectContaining({
           mode: 'subscription',
           customer: user.stripe_customer_id,
+          allow_promotion_codes: true,
           line_items: [{ price: 'price_test_kilo_pass', quantity: 1 }],
           success_url: expect.stringContaining('/payments/kilo-pass/awarding'),
           subscription_data: {
@@ -5148,13 +5254,16 @@ describe('kiloPassRouter', () => {
               affiliateTrackingId: '',
             },
           },
-          metadata: {
+          metadata: expect.objectContaining({
             type: 'kilo-pass',
             kiloUserId: user.id,
             tier: 'tier_49',
             cadence: 'yearly',
             affiliateTrackingId: '',
-          },
+            serviceFeeFlow: 'personal_kilo_pass',
+            serviceFeePrincipalMinor: '4900',
+            serviceFeeVersion: SERVICE_FEE_VERSION,
+          }),
         })
       );
     });
@@ -5162,6 +5271,8 @@ describe('kiloPassRouter', () => {
     it('includes affiliateTrackingId in checkout metadata when attribution exists', async () => {
       const stripeMock = getStripeMock();
       stripeMock.checkout.sessions.create.mockResolvedValue({
+        id: 'cs_test_attributed',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
         url: 'https://stripe.example.test/checkout',
       });
 
@@ -5182,6 +5293,7 @@ describe('kiloPassRouter', () => {
 
       expect(stripeMock.checkout.sessions.create).toHaveBeenCalledWith(
         expect.objectContaining({
+          allow_promotion_codes: true,
           subscription_data: {
             metadata: {
               type: 'kilo-pass',
@@ -5191,13 +5303,14 @@ describe('kiloPassRouter', () => {
               affiliateTrackingId: 'impact-click-123',
             },
           },
-          metadata: {
+          metadata: expect.objectContaining({
             type: 'kilo-pass',
             kiloUserId: user.id,
             tier: 'tier_49',
             cadence: 'yearly',
             affiliateTrackingId: 'impact-click-123',
-          },
+            serviceFeeFlow: 'personal_kilo_pass',
+          }),
         })
       );
     });
@@ -5217,5 +5330,245 @@ describe('kiloPassRouter', () => {
         })
       ).rejects.toThrow('commerce_not_available');
     });
+
+    it('fails open to a product-only session when fee tax resolution fails', async () => {
+      const store = createMemoryAssessmentStore();
+      const sendAlert = jest.fn(async () => undefined);
+      const createSession = jest.fn(
+        async (_params: Stripe.Checkout.SessionCreateParams): Promise<CheckoutSessionLike> => ({
+          id: 'cs_missed_tax',
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          url: 'https://stripe.example.test/missed',
+          line_items: { data: [], has_more: false },
+        })
+      );
+
+      const session = await createPersonalKiloPassCheckoutSession({
+        kiloUserId: 'user_kilo_pass',
+        stripeCustomerId: 'cus_kilo_pass',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        affiliateTrackingId: '',
+        priceId: 'price_test_kilo_pass',
+        deps: kiloPassCheckoutDeps(store, {
+          sendAlert,
+          createSession,
+          resolveTaxInput: async () => {
+            throw new Error(SERVICE_FEE_FAILURE_APPLICATION);
+          },
+        }),
+      });
+
+      expect(session.id).toBe('cs_missed_tax');
+      expect(createSession).toHaveBeenCalledTimes(1);
+      const createParams = createSession.mock.calls[0]?.[0];
+      expect(createParams?.allow_promotion_codes).toBe(true);
+      expect(createParams?.line_items).toEqual([{ price: 'price_test_kilo_pass', quantity: 1 }]);
+      expect(createParams?.metadata).toEqual(
+        expect.objectContaining({
+          type: 'kilo-pass',
+          kiloUserId: 'user_kilo_pass',
+          serviceFeeFlow: 'personal_kilo_pass',
+          serviceFeePrincipalMinor: '4900',
+        })
+      );
+      const record = await store.findByAssessmentKey(
+        String(createParams?.metadata?.serviceFeeAssessmentKey)
+      );
+      expect(record).toMatchObject({
+        flow: 'personal_kilo_pass',
+        outcome: 'missed',
+        failureCode: SERVICE_FEE_FAILURE_APPLICATION,
+        stripeCheckoutSessionId: 'cs_missed_tax',
+        eligibleSubtotalMinor: 4900,
+        expectedFeeMinor: 245,
+        chargedFeeMinor: 0,
+        kiloUserId: 'user_kilo_pass',
+        stripeCustomerId: 'cus_kilo_pass',
+      });
+      expect(sendAlert).toHaveBeenCalled();
+    });
+
+    it('adds a separate discountable one-time 5% fee line when tax input is injected', async () => {
+      const store = createMemoryAssessmentStore();
+      const assessmentKey = 'checkout:11111111-1111-4111-8111-111111111111';
+      const feeLine = {
+        id: 'li_kilo_pass_fee',
+        price: {
+          id: 'price_kilo_pass_fee',
+          product: {
+            id: 'prod_kilo_pass_fee',
+            metadata: {
+              type: SERVICE_FEE_METADATA_TYPE,
+              serviceFeeVersion: SERVICE_FEE_VERSION,
+              serviceFeeAssessmentKey: assessmentKey,
+              serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+            },
+          },
+        },
+      } as unknown as Stripe.LineItem;
+      const createSession = jest.fn(
+        async (_params: Stripe.Checkout.SessionCreateParams): Promise<CheckoutSessionLike> => ({
+          id: 'cs_with_fee',
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          url: 'https://stripe.example.test/fee',
+          line_items: { data: [feeLine], has_more: false },
+        })
+      );
+
+      const session = await createPersonalKiloPassCheckoutSession({
+        kiloUserId: 'user_kilo_pass',
+        stripeCustomerId: 'cus_kilo_pass',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        affiliateTrackingId: 'impact-click-123',
+        priceId: 'price_test_kilo_pass',
+        deps: kiloPassCheckoutDeps(store, {
+          createAssessmentKey: () => assessmentKey,
+          resolveTaxInput: async () => buildInheritedInlineServiceFeeTaxInput(),
+          createSession,
+        }),
+      });
+
+      expect(session.id).toBe('cs_with_fee');
+      expect(createSession).toHaveBeenCalledTimes(1);
+      const createParams = createSession.mock.calls[0]?.[0];
+      expect(createParams?.allow_promotion_codes).toBe(true);
+      expect(createParams?.line_items).toHaveLength(2);
+      expect(createParams?.line_items?.[0]).toEqual({
+        price: 'price_test_kilo_pass',
+        quantity: 1,
+      });
+      expect(createParams?.line_items?.[1]).toEqual({
+        quantity: 1,
+        price_data: {
+          currency: 'usd',
+          unit_amount: 245,
+          product_data: {
+            name: SERVICE_FEE_DESCRIPTION,
+            metadata: {
+              type: SERVICE_FEE_METADATA_TYPE,
+              serviceFeeVersion: SERVICE_FEE_VERSION,
+              serviceFeeAssessmentKey: assessmentKey,
+              serviceFeeRateBasisPoints: String(SERVICE_FEE_RATE_BASIS_POINTS),
+            },
+          },
+        },
+      });
+      expect(createParams?.line_items?.[1]?.price_data?.recurring).toBeUndefined();
+      expect(createParams?.metadata).toEqual(
+        expect.objectContaining({
+          type: 'kilo-pass',
+          kiloUserId: 'user_kilo_pass',
+          tier: KiloPassTier.Tier49,
+          cadence: KiloPassCadence.Monthly,
+          affiliateTrackingId: 'impact-click-123',
+          serviceFeeAssessmentKey: assessmentKey,
+          serviceFeeFlow: 'personal_kilo_pass',
+          serviceFeePrincipalMinor: '4900',
+        })
+      );
+      expect(createParams?.subscription_data?.metadata).toEqual({
+        type: 'kilo-pass',
+        kiloUserId: 'user_kilo_pass',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        affiliateTrackingId: 'impact-click-123',
+      });
+
+      const record = await store.findByAssessmentKey(assessmentKey);
+      expect(record).toMatchObject({
+        flow: 'personal_kilo_pass',
+        stripeCheckoutSessionId: 'cs_with_fee',
+        stripeCheckoutFeeLineItemId: 'li_kilo_pass_fee',
+        stripeFeePriceId: 'price_kilo_pass_fee',
+        eligibleSubtotalMinor: 4900,
+        expectedFeeMinor: 245,
+      });
+    });
+
+    it('expires and replaces once near the activation boundary and does not replace outside it', async () => {
+      const nearStore = createMemoryAssessmentStore();
+      const expire = jest.fn(async (_sessionId: string) => undefined);
+      const nearCreate = jest
+        .fn<(params: Stripe.Checkout.SessionCreateParams) => Promise<CheckoutSessionLike>>()
+        .mockResolvedValueOnce({
+          id: 'cs_early',
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          url: 'https://stripe.example.test/early',
+        })
+        .mockResolvedValueOnce({
+          id: 'cs_replaced',
+          created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS,
+          url: 'https://stripe.example.test/replaced',
+          line_items: {
+            data: [
+              {
+                id: 'li_replaced_fee',
+                price: {
+                  id: 'price_replaced_fee',
+                  product: {
+                    metadata: {
+                      type: SERVICE_FEE_METADATA_TYPE,
+                      serviceFeeVersion: SERVICE_FEE_VERSION,
+                    },
+                  },
+                },
+              } as unknown as Stripe.LineItem,
+            ],
+            has_more: false,
+          },
+        });
+
+      const replaced = await createPersonalKiloPassCheckoutSession({
+        kiloUserId: 'user_kilo_pass',
+        stripeCustomerId: 'cus_kilo_pass',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        affiliateTrackingId: '',
+        priceId: 'price_test_kilo_pass',
+        deps: kiloPassCheckoutDeps(nearStore, {
+          now: new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS - 30) * 1000),
+          resolveTaxInput: async () => buildInheritedInlineServiceFeeTaxInput(),
+          expireCheckoutSession: expire,
+          createSession: nearCreate,
+        }),
+      });
+
+      expect(expire).toHaveBeenCalledWith('cs_early');
+      expect(nearCreate).toHaveBeenCalledTimes(2);
+      expect(replaced.id).toBe('cs_replaced');
+      expect(nearCreate.mock.calls[0]?.[0]?.line_items).toHaveLength(1);
+      expect(nearCreate.mock.calls[1]?.[0]?.line_items).toHaveLength(2);
+      expect(nearCreate.mock.calls[1]?.[0]?.allow_promotion_codes).toBe(true);
+
+      const farStore = createMemoryAssessmentStore();
+      const farExpire = jest.fn(async () => undefined);
+      const farCreate = jest.fn(async () => ({
+        id: 'cs_far',
+        created: SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 90,
+        url: 'https://stripe.example.test/far',
+        line_items: { data: [], has_more: false },
+      }));
+
+      const farSession = await createPersonalKiloPassCheckoutSession({
+        kiloUserId: 'user_kilo_pass',
+        stripeCustomerId: 'cus_kilo_pass',
+        tier: KiloPassTier.Tier49,
+        cadence: KiloPassCadence.Monthly,
+        affiliateTrackingId: '',
+        priceId: 'price_test_kilo_pass',
+        deps: kiloPassCheckoutDeps(farStore, {
+          now: new Date((SERVICE_FEE_ACTIVATION_UNIX_SECONDS + 120) * 1000),
+          resolveTaxInput: async () => buildInheritedInlineServiceFeeTaxInput(),
+          expireCheckoutSession: farExpire,
+          createSession: farCreate,
+        }),
+      });
+
+      expect(farSession.id).toBe('cs_far');
+      expect(farCreate).toHaveBeenCalledTimes(1);
+      expect(farExpire).not.toHaveBeenCalled();
+    });
   });
 });
diff --git a/apps/web/src/routers/kilo-pass-router.ts b/apps/web/src/routers/kilo-pass-router.ts
index 7380be1055..0d5f375308 100644
--- a/apps/web/src/routers/kilo-pass-router.ts
+++ b/apps/web/src/routers/kilo-pass-router.ts
@@ -16,6 +16,17 @@ import { getKiloPassStateForUser, type KiloPassSubscriptionState } from '@/lib/k
 import { client as stripe } from '@/lib/stripe-client';
 import { getStripePriceIdForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
 import { getAffiliateAttribution } from '@/lib/affiliate-attribution';
+import {
+  createTopUpCheckoutSession,
+  mergeServiceFeeCommercialMetadata,
+  prepareTopUpCheckoutFee,
+  resolveFixedUsdPriceUnitAmount,
+  type CheckoutSessionCreateFn,
+  type CheckoutSessionLike,
+  type ServiceFeeCheckoutDependencies,
+  type TopUpPriceReader,
+} from '@/lib/service-fees/checkout';
+import { createServiceFeeStores } from '@/lib/service-fees/drizzle-store';
 import { APP_URL } from '@/lib/constants';
 import { KILO_PASS_REFERRER_REWARD_CAP } from '@/lib/impact/kilo-pass-referrals';
 import { TRPCError } from '@trpc/server';
@@ -1194,6 +1205,109 @@ async function getSettledKiloPassCheckoutSubscription(params: {
   };
 }
 
+const PERSONAL_KILO_PASS_CHECKOUT_FLOW = 'personal_kilo_pass' as const;
+
+export type PersonalKiloPassCheckoutDependencies = ServiceFeeCheckoutDependencies & {
+  createSession?: CheckoutSessionCreateFn;
+  retrievePriceUnitAmount?: typeof resolveFixedUsdPriceUnitAmount;
+};
+
+function createDefaultPersonalKiloPassCheckoutDependencies(): PersonalKiloPassCheckoutDependencies {
+  const stores = createServiceFeeStores();
+  return {
+    store: stores.assessments,
+    stripe: stripe,
+    listCheckoutLineItems: (sessionId, listParams) =>
+      stripe.checkout.sessions.listLineItems(sessionId, listParams),
+    expireCheckoutSession: sessionId => stripe.checkout.sessions.expire(sessionId),
+    createSession: sessionParams => stripe.checkout.sessions.create(sessionParams),
+  };
+}
+
+function requireTopUpPriceReader(
+  stripeReader: PersonalKiloPassCheckoutDependencies['stripe']
+): TopUpPriceReader {
+  if (!stripeReader || !('prices' in stripeReader) || !stripeReader.prices) {
+    throw new Error('Stripe price reader is required to create a Kilo Pass checkout session');
+  }
+  return stripeReader as TopUpPriceReader;
+}
+
+export async function createPersonalKiloPassCheckoutSession(params: {
+  kiloUserId: string;
+  stripeCustomerId: string;
+  tier: KiloPassTier;
+  cadence: KiloPassCadence;
+  affiliateTrackingId: string;
+  priceId: string;
+  deps?: PersonalKiloPassCheckoutDependencies;
+}): Promise<CheckoutSessionLike> {
+  const deps = {
+    ...createDefaultPersonalKiloPassCheckoutDependencies(),
+    ...params.deps,
+  };
+  const retrievePrice = deps.retrievePriceUnitAmount ?? resolveFixedUsdPriceUnitAmount;
+  const principalMinor = await retrievePrice({
+    stripe: requireTopUpPriceReader(deps.stripe),
+    priceId: params.priceId,
+  });
+
+  const prepared = await prepareTopUpCheckoutFee({
+    flow: PERSONAL_KILO_PASS_CHECKOUT_FLOW,
+    principalMinor,
+    kiloUserId: params.kiloUserId,
+    stripeCustomerId: params.stripeCustomerId,
+    taxPrincipal: { kind: 'price', priceId: params.priceId },
+    deps,
+  });
+
+  const productMetadata = {
+    type: 'kilo-pass',
+    kiloUserId: params.kiloUserId,
+    tier: params.tier,
+    cadence: params.cadence,
+    affiliateTrackingId: params.affiliateTrackingId,
+  };
+  const sessionMetadata = mergeServiceFeeCommercialMetadata(
+    productMetadata,
+    prepared.commercialMetadata
+  );
+  const createSession =
+    deps.createSession ?? (sessionParams => stripe.checkout.sessions.create(sessionParams));
+
+  return createTopUpCheckoutSession({
+    prepared,
+    buildSessionParams: feeLine => ({
+      mode: 'subscription',
+      customer: params.stripeCustomerId,
+      allow_promotion_codes: true,
+      billing_address_collection: 'required',
+      line_items: feeLine
+        ? [{ price: params.priceId, quantity: 1 }, feeLine]
+        : [{ price: params.priceId, quantity: 1 }],
+      customer_update: {
+        name: 'auto',
+        address: 'auto',
+      },
+      tax_id_collection: {
+        enabled: true,
+        required: 'never',
+      },
+      success_url: `${APP_URL}/payments/kilo-pass/awarding?session_id={CHECKOUT_SESSION_ID}`,
+      cancel_url: `${APP_URL}/profile?kilo_pass_checkout=cancelled`,
+      subscription_data: {
+        metadata: productMetadata,
+      },
+      metadata: sessionMetadata,
+      expand: ['line_items.data.price.product'],
+    }),
+    createSession,
+    deps,
+  });
+}
+
+export type CreatePersonalKiloPassCheckoutSession = typeof createPersonalKiloPassCheckoutSession;
+
 export const kiloPassRouter = createTRPCRouter({
   getMobileStoreProducts: baseProcedure.query(({ ctx }) => ({
     appAccountToken: ctx.user.app_store_account_token,
@@ -2630,34 +2744,13 @@ export const kiloPassRouter = createTRPCRouter({
 
       const priceId = getStripePriceIdForKiloPass({ tier, cadence });
       const attribution = await getAffiliateAttribution(ctx.user.id, 'impact');
-      const sessionMetadata = {
-        type: 'kilo-pass',
+      const session = await createPersonalKiloPassCheckoutSession({
         kiloUserId: ctx.user.id,
+        stripeCustomerId,
         tier,
         cadence,
         affiliateTrackingId: attribution?.tracking_id ?? '',
-      };
-
-      const session = await stripe.checkout.sessions.create({
-        mode: 'subscription',
-        customer: stripeCustomerId,
-        allow_promotion_codes: true,
-        billing_address_collection: 'required',
-        line_items: [{ price: priceId, quantity: 1 }],
-        customer_update: {
-          name: 'auto',
-          address: 'auto',
-        },
-        tax_id_collection: {
-          enabled: true,
-          required: 'never',
-        },
-        success_url: `${APP_URL}/payments/kilo-pass/awarding?session_id={CHECKOUT_SESSION_ID}`,
-        cancel_url: `${APP_URL}/profile?kilo_pass_checkout=cancelled`,
-        subscription_data: {
-          metadata: sessionMetadata,
-        },
-        metadata: sessionMetadata,
+        priceId,
       });
 
       return { url: typeof session.url === 'string' ? session.url : null };
diff --git a/apps/web/src/routers/organizations/organization-admin-router.test.ts b/apps/web/src/routers/organizations/organization-admin-router.test.ts
index 3d05dd64a9..604c3dc456 100644
--- a/apps/web/src/routers/organizations/organization-admin-router.test.ts
+++ b/apps/web/src/routers/organizations/organization-admin-router.test.ts
@@ -5,6 +5,7 @@ import {
   credit_transactions,
   organization_seats_purchases,
   organization_memberships,
+  organization_service_fee_exemptions,
   platform_integrations,
   kilo_pass_org_agreements,
   kilo_pass_org_allocation_plans,
@@ -14,7 +15,11 @@ import {
 } from '@kilocode/db/schema';
 import { eq, and, inArray, sql } from 'drizzle-orm';
 import { insertTestUser } from '@/tests/helpers/user.helper';
-import { createOrganization, addUserToOrganization } from '@/lib/organizations/organizations';
+import {
+  createOrganization,
+  addUserToOrganization,
+  markOrganizationAsDeleted,
+} from '@/lib/organizations/organizations';
 import { KiloPassCadence, KiloPassTier } from '@/lib/kilo-pass/enums';
 import { KiloPassOrgBonusMode } from '@kilocode/db/schema-types';
 import { fetchExpiringTransactionsForOrganization } from '@/lib/creditExpiration';
@@ -1815,6 +1820,250 @@ describe('organization admin router', () => {
     });
   });
 
+  describe('serviceFeeExemption', () => {
+    async function createExemptionTestOrganization(name = 'Service fee exemption') {
+      return createOrganization(`${name} ${crypto.randomUUID()}`, adminUser.id);
+    }
+
+    async function cleanupExemptionTestOrganization(organizationId: string) {
+      await db
+        .delete(organization_service_fee_exemptions)
+        .where(eq(organization_service_fee_exemptions.organization_id, organizationId));
+      await db
+        .delete(organization_memberships)
+        .where(eq(organization_memberships.organization_id, organizationId));
+      await db.delete(organizations).where(eq(organizations.id, organizationId));
+    }
+
+    it('grants an exemption with a trimmed reason, actor, and history row', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(adminUser.id);
+        const result = await caller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: true,
+          reason: '  nonprofit partner  ',
+        });
+
+        expect(result.current).toMatchObject({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'nonprofit partner',
+          changedByKiloUserId: adminUser.id,
+        });
+        expect(result.current.id).toBe(result.history.id);
+        expect(result.history).toMatchObject({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'nonprofit partner',
+          changedByKiloUserId: adminUser.id,
+        });
+        // Timestamps are normalized to UTC ISO at the API boundary.
+        expect(new Date(result.current.createdAt).toISOString()).toBe(result.current.createdAt);
+        expect(new Date(result.history.createdAt).toISOString()).toBe(result.history.createdAt);
+
+        const view = await caller.organizations.admin.getServiceFeeExemption({
+          organizationId: org.id,
+        });
+        expect(view.current?.isExempt).toBe(true);
+        expect(view.current?.reason).toBe('nonprofit partner');
+        expect(view.history).toHaveLength(1);
+        expect(view.history[0].id).toBe(result.history.id);
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('revokes an exemption and returns the newest history first', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(adminUser.id);
+        await caller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'initial grant',
+        });
+        const revoked = await caller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: false,
+          reason: 'revoked after contract review',
+        });
+
+        expect(revoked.current.isExempt).toBe(false);
+        expect(revoked.current.reason).toBe('revoked after contract review');
+        expect(revoked.current.id).toBe(revoked.history.id);
+
+        const view = await caller.organizations.admin.getServiceFeeExemption({
+          organizationId: org.id,
+        });
+        expect(view.current?.isExempt).toBe(false);
+        expect(view.history.map(row => row.reason)).toEqual([
+          'revoked after contract review',
+          'initial grant',
+        ]);
+        expect(view.history.map(row => row.isExempt)).toEqual([false, true]);
+        expect(view.history.every(row => row.changedByKiloUserId === adminUser.id)).toBe(true);
+        expect(
+          view.history.every(row => new Date(row.createdAt).toISOString() === row.createdAt)
+        ).toBe(true);
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('allows repeating the same state with a new reason and appends another row', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(adminUser.id);
+        const first = await caller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'initial grant',
+        });
+        const second = await caller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'renewed with updated documentation',
+        });
+
+        expect(second.current.isExempt).toBe(true);
+        expect(second.current.reason).toBe('renewed with updated documentation');
+        expect(second.current.id).toBe(second.history.id);
+        expect(second.current.id).not.toBe(first.current.id);
+
+        const view = await caller.organizations.admin.getServiceFeeExemption({
+          organizationId: org.id,
+        });
+        expect(view.history).toHaveLength(2);
+        expect(view.history.map(row => row.reason)).toEqual([
+          'renewed with updated documentation',
+          'initial grant',
+        ]);
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('rejects non-admin users from reading and mutating exemption state', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(nonAdminUser.id);
+
+        await expect(
+          caller.organizations.admin.getServiceFeeExemption({ organizationId: org.id })
+        ).rejects.toThrow('Admin access required');
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: org.id,
+            isExempt: true,
+            reason: 'non-admin attempt',
+          })
+        ).rejects.toThrow('Admin access required');
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('rejects blank and undersized reasons', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(adminUser.id);
+
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: org.id,
+            isExempt: true,
+            reason: '   ',
+          })
+        ).rejects.toThrow();
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: org.id,
+            isExempt: true,
+            reason: 'no',
+          })
+        ).rejects.toThrow();
+
+        const view = await caller.organizations.admin.getServiceFeeExemption({
+          organizationId: org.id,
+        });
+        expect(view.current).toBeNull();
+        expect(view.history).toEqual([]);
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('rejects oversized reasons', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        const caller = await createCallerForUser(adminUser.id);
+
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: org.id,
+            isExempt: true,
+            reason: 'x'.repeat(501),
+          })
+        ).rejects.toThrow();
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('maps deleted and missing organizations to NOT_FOUND', async () => {
+      const org = await createExemptionTestOrganization();
+      try {
+        await markOrganizationAsDeleted(org.id);
+        const caller = await createCallerForUser(adminUser.id);
+
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: org.id,
+            isExempt: true,
+            reason: 'deleted organization',
+          })
+        ).rejects.toMatchObject({ code: 'NOT_FOUND', message: 'Organization not found' });
+        await expect(
+          caller.organizations.admin.setServiceFeeExemption({
+            organizationId: '550e8400-e29b-41d4-a716-446655440099',
+            isExempt: true,
+            reason: 'missing organization',
+          })
+        ).rejects.toMatchObject({ code: 'NOT_FOUND', message: 'Organization not found' });
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+
+    it('does not expose exemption fields through customer organization APIs', async () => {
+      const org = await createOrganization(
+        `Customer surface ${crypto.randomUUID()}`,
+        nonAdminUser.id
+      );
+      try {
+        const adminCaller = await createCallerForUser(adminUser.id);
+        await adminCaller.organizations.admin.setServiceFeeExemption({
+          organizationId: org.id,
+          isExempt: true,
+          reason: 'granted for customer surface check',
+        });
+
+        const customerCaller = await createCallerForUser(nonAdminUser.id);
+        const customerOrganizations = await customerCaller.organizations.list();
+        const row = customerOrganizations.find(entry => entry.organizationId === org.id);
+
+        expect(row).toBeDefined();
+        expect(Object.keys(row ?? {}).some(key => /exempt/i.test(key))).toBe(false);
+        expect(JSON.stringify(row)).not.toMatch(
+          /service_fee_exemption|serviceFeeExemption|isExempt/
+        );
+      } finally {
+        await cleanupExemptionTestOrganization(org.id);
+      }
+    });
+  });
+
   describe('getKiloPassSummary', () => {
     it('returns the parent agreement as read-only information for a child organization', async () => {
       const parent = await createOrganization(
diff --git a/apps/web/src/routers/organizations/organization-admin-router.ts b/apps/web/src/routers/organizations/organization-admin-router.ts
index 11d7c8b932..7ed16a4008 100644
--- a/apps/web/src/routers/organizations/organization-admin-router.ts
+++ b/apps/web/src/routers/organizations/organization-admin-router.ts
@@ -70,6 +70,14 @@ import {
   createChildOrganization,
   validateParentOrganizationChange,
 } from '@/lib/organizations/organization-hierarchy';
+import {
+  getOrganizationServiceFeeExemption,
+  OrganizationServiceFeeExemptionError,
+  ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH,
+  ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH,
+  setOrganizationServiceFeeExemption,
+} from '@/lib/service-fees/organization-exemptions';
+import { createDefaultOrganizationServiceFeeExemptionStore } from '@/lib/service-fees/drizzle-store';
 
 const OrganizationListInputSchema = z.object({
   page: z.number().int().min(1).default(1),
@@ -203,6 +211,30 @@ const AdminOrganizationHierarchySchema = z.object({
   children: z.array(OrganizationHierarchySummarySchema),
 });
 
+const SetServiceFeeExemptionInputSchema = z.object({
+  organizationId: z.uuid(),
+  isExempt: z.boolean(),
+  reason: z
+    .string()
+    .trim()
+    .min(ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MIN_LENGTH)
+    .max(ORGANIZATION_SERVICE_FEE_EXEMPTION_REASON_MAX_LENGTH),
+});
+
+const AdminOrganizationServiceFeeExemptionRecordSchema = z.object({
+  id: z.uuid(),
+  organizationId: z.uuid(),
+  isExempt: z.boolean(),
+  reason: z.string(),
+  changedByKiloUserId: z.string().nullable(),
+  createdAt: z.iso.datetime(),
+});
+
+const AdminOrganizationServiceFeeExemptionViewSchema = z.object({
+  current: AdminOrganizationServiceFeeExemptionRecordSchema.nullable(),
+  history: z.array(AdminOrganizationServiceFeeExemptionRecordSchema),
+});
+
 const GrantCreditInputSchema = z
   .object({
     organizationId: z.uuid(),
@@ -529,6 +561,47 @@ export const organizationAdminRouter = createTRPCRouter({
       })
     ),
 
+  getServiceFeeExemption: adminProcedure
+    .input(OrganizationIdInputSchema)
+    .output(AdminOrganizationServiceFeeExemptionViewSchema)
+    .query(({ input }) =>
+      getOrganizationServiceFeeExemption({
+        store: createDefaultOrganizationServiceFeeExemptionStore(),
+        organizationId: input.organizationId,
+      })
+    ),
+
+  setServiceFeeExemption: adminProcedure
+    .input(SetServiceFeeExemptionInputSchema)
+    .output(
+      z.object({
+        current: AdminOrganizationServiceFeeExemptionRecordSchema,
+        history: AdminOrganizationServiceFeeExemptionRecordSchema,
+      })
+    )
+    .mutation(async ({ input, ctx }) => {
+      try {
+        return await setOrganizationServiceFeeExemption({
+          store: createDefaultOrganizationServiceFeeExemptionStore(),
+          organizationId: input.organizationId,
+          isExempt: input.isExempt,
+          reason: input.reason,
+          changedByKiloUserId: ctx.user.id,
+        });
+      } catch (error) {
+        if (
+          error instanceof OrganizationServiceFeeExemptionError &&
+          error.code === 'organization_not_found'
+        ) {
+          throw new TRPCError({
+            code: 'NOT_FOUND',
+            message: 'Organization not found',
+          });
+        }
+        throw error;
+      }
+    }),
+
   getHierarchy: adminProcedure
     .input(OrganizationIdInputSchema)
     .output(AdminOrganizationHierarchySchema)
diff --git a/apps/web/src/routers/organizations/organization-auto-top-up-router.test.ts b/apps/web/src/routers/organizations/organization-auto-top-up-router.test.ts
index c089716b34..8a5632fc01 100644
--- a/apps/web/src/routers/organizations/organization-auto-top-up-router.test.ts
+++ b/apps/web/src/routers/organizations/organization-auto-top-up-router.test.ts
@@ -1,6 +1,11 @@
 import { createCallerForUser } from '@/routers/test-utils';
 import { db } from '@/lib/drizzle';
-import { auto_top_up_configs, organizations } from '@kilocode/db/schema';
+import {
+  auto_top_up_configs,
+  organization_service_fee_exemptions,
+  organizations,
+  stripe_service_fee_assessments,
+} from '@kilocode/db/schema';
 import type { User, Organization } from '@kilocode/db/schema';
 import { eq } from 'drizzle-orm';
 import { insertTestUser } from '@/tests/helpers/user.helper';
@@ -13,8 +18,12 @@ jest.mock('@/lib/stripe-client', () => ({
     checkout: {
       sessions: {
         create: jest.fn().mockResolvedValue({
+          id: 'cs_test_org_auto_topup',
+          created: 1_700_000_000,
           url: 'https://checkout.stripe.com/test-session',
         }),
+        listLineItems: jest.fn().mockResolvedValue({ data: [], has_more: false }),
+        expire: jest.fn().mockResolvedValue({}),
       },
     },
   },
@@ -62,6 +71,12 @@ describe('organization auto-top-up router', () => {
     await db
       .delete(auto_top_up_configs)
       .where(eq(auto_top_up_configs.owned_by_organization_id, testOrg.id));
+    await db
+      .delete(stripe_service_fee_assessments)
+      .where(eq(stripe_service_fee_assessments.organization_id, testOrg.id));
+    await db
+      .delete(organization_service_fee_exemptions)
+      .where(eq(organization_service_fee_exemptions.organization_id, testOrg.id));
     await db.delete(organizations).where(eq(organizations.id, testOrg.id));
   });
 
diff --git a/apps/web/src/scripts/service-fees/kilo-pass-classification-audit.ts b/apps/web/src/scripts/service-fees/kilo-pass-classification-audit.ts
new file mode 100644
index 0000000000..8e1fcf4ad8
--- /dev/null
+++ b/apps/web/src/scripts/service-fees/kilo-pass-classification-audit.ts
@@ -0,0 +1,138 @@
+/**
+ * Read-only pre-release audit: can active Stripe-managed Personal Kilo Pass and
+ * self-service org Kilo Pass subscriptions be classified for service-fee invoices?
+ *
+ * Usage:
+ *   pnpm --filter web script:run service-fees kilo-pass-classification-audit
+ *
+ * This script never creates, updates, or deletes Stripe or database records.
+ */
+
+import { and, eq, inArray } from 'drizzle-orm';
+import type Stripe from 'stripe';
+import { kilo_pass_org_agreements, kilo_pass_subscriptions } from '@kilocode/db/schema';
+import { KiloPassOrgPurchaseChannel, KiloPassPaymentProvider } from '@kilocode/db/schema-types';
+import { db } from '@/lib/drizzle';
+import { SEAT_PRODUCT_IDS } from '@/lib/organizations/stripe-seat-line-items';
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import {
+  auditKiloPassClassifications,
+  LIVE_ORG_KILO_PASS_STATES,
+  LIVE_PERSONAL_KILO_PASS_STATUSES,
+  type KiloPassClassificationAuditStore,
+  type StripeSubscriptionSnapshot,
+} from '@/lib/service-fees/kilo-pass-classification-audit';
+import { assertServiceFeeAuditReadOnly } from '@/lib/service-fees/read-only';
+import { client as stripe } from '@/lib/stripe-client';
+
+export function createDatabaseKiloPassClassificationStore(): KiloPassClassificationAuditStore {
+  return {
+    async listPersonalRows() {
+      return db
+        .select({
+          id: kilo_pass_subscriptions.id,
+          kiloUserId: kilo_pass_subscriptions.kilo_user_id,
+          stripeSubscriptionId: kilo_pass_subscriptions.stripe_subscription_id,
+          status: kilo_pass_subscriptions.status,
+          tier: kilo_pass_subscriptions.tier,
+          cadence: kilo_pass_subscriptions.cadence,
+        })
+        .from(kilo_pass_subscriptions)
+        .where(
+          and(
+            eq(kilo_pass_subscriptions.payment_provider, KiloPassPaymentProvider.Stripe),
+            inArray(kilo_pass_subscriptions.status, [...LIVE_PERSONAL_KILO_PASS_STATUSES])
+          )
+        );
+    },
+    async listOrganizationRows() {
+      return db
+        .select({
+          id: kilo_pass_org_agreements.id,
+          organizationId: kilo_pass_org_agreements.parent_organization_id,
+          providerSubscriptionId: kilo_pass_org_agreements.provider_subscription_id,
+          providerSeatAddOnItemId: kilo_pass_org_agreements.provider_seat_add_on_item_id,
+          state: kilo_pass_org_agreements.state,
+          purchaseChannel: kilo_pass_org_agreements.purchase_channel,
+        })
+        .from(kilo_pass_org_agreements)
+        .where(
+          and(
+            eq(kilo_pass_org_agreements.purchase_channel, KiloPassOrgPurchaseChannel.SelfServe),
+            inArray(kilo_pass_org_agreements.state, [...LIVE_ORG_KILO_PASS_STATES])
+          )
+        );
+    },
+  };
+}
+
+export async function retrieveStripeSubscriptionSnapshot(
+  subscriptionId: string
+): Promise<StripeSubscriptionSnapshot | null> {
+  try {
+    const subscription = await stripe.subscriptions.retrieve(subscriptionId);
+    const items: Stripe.SubscriptionItem[] = [];
+    let startingAfter: string | undefined;
+    for (;;) {
+      const page = await stripe.subscriptionItems.list({
+        subscription: subscriptionId,
+        limit: 100,
+        expand: ['data.price'],
+        ...(startingAfter ? { starting_after: startingAfter } : {}),
+      });
+      items.push(...page.data);
+      if (!page.has_more) break;
+      const cursor = page.data.at(-1)?.id;
+      if (!cursor) {
+        throw new Error(
+          `Stripe subscription ${subscriptionId} item page is marked has_more without a cursor`
+        );
+      }
+      startingAfter = cursor;
+    }
+    return {
+      id: subscription.id,
+      status: subscription.status,
+      metadata: subscription.metadata ?? {},
+      items: items.map(item => ({
+        id: item.id,
+        priceId: item.price?.id ?? null,
+        productId: productIdFromPrice(item.price?.product),
+      })),
+    };
+  } catch (error) {
+    if (isMissingStripeResource(error)) return null;
+    throw error;
+  }
+}
+
+export async function run(...args: string[]): Promise<void> {
+  assertServiceFeeAuditReadOnly(args);
+  const report = await auditKiloPassClassifications({
+    knownKiloPassPriceIds: new Set(getKnownStripePriceIdsForKiloPass()),
+    seatProductIds: SEAT_PRODUCT_IDS,
+    store: createDatabaseKiloPassClassificationStore(),
+    retrieveSubscription: retrieveStripeSubscriptionSnapshot,
+  });
+  if (report.unclassifiableCount > 0) {
+    process.exitCode = 1;
+  }
+}
+
+function productIdFromPrice(product: unknown): string | null {
+  if (typeof product === 'string') return product;
+  if (product && typeof product === 'object' && 'id' in product) {
+    const id = product.id;
+    return typeof id === 'string' ? id : null;
+  }
+  return null;
+}
+
+function isMissingStripeResource(error: unknown): boolean {
+  return (
+    typeof error === 'object' &&
+    error !== null &&
+    'code' in error &&
+    (error as { code?: unknown }).code === 'resource_missing'
+  );
+}
diff --git a/apps/web/src/scripts/service-fees/restricted-coupon-audit.ts b/apps/web/src/scripts/service-fees/restricted-coupon-audit.ts
new file mode 100644
index 0000000000..176ac631e8
--- /dev/null
+++ b/apps/web/src/scripts/service-fees/restricted-coupon-audit.ts
@@ -0,0 +1,95 @@
+/**
+ * Read-only restricted-coupon audit: list Stripe coupons whose applies_to.products
+ * intersects known fee-bearing Kilo Pass or top-up products and alert Admin Slack.
+ *
+ * Usage:
+ *   pnpm --filter web script:run service-fees restricted-coupon-audit
+ *   pnpm --filter web script:run service-fees restricted-coupon-audit --no-alert
+ *
+ * This script never creates, updates, or deletes Stripe coupons or products.
+ */
+
+import { captureMessage } from '@sentry/nextjs';
+import { getEnvVariable } from '@/lib/dotenvx';
+import { getKnownStripePriceIdsForKiloPass } from '@/lib/kilo-pass/stripe-price-ids.server';
+import {
+  auditRestrictedCoupons,
+  listCouponSnapshotsEnsuringAppliesTo,
+  parseRestrictedCouponAuditArgs,
+  SERVICE_FEE_RESTRICTED_COUPON_SENTRY_TAG,
+  type RestrictedCouponAlertPayload,
+  type StripeCouponSnapshot,
+} from '@/lib/service-fees/restricted-coupon-audit';
+import { sendAdminSlackNotification } from '@/lib/slack/admin-notifications';
+import { client as stripe } from '@/lib/stripe-client';
+
+/**
+ * Lists coupons paginated and guarantees applies_to is actually retrieved:
+ * applies_to is not an expandable ID reference, so list payloads that omit it
+ * fall back to an authoritative read-only stripe.coupons.retrieve. Both calls
+ * are GETs; this function never mutates Stripe state.
+ */
+export async function listStripeCouponSnapshots(): Promise<StripeCouponSnapshot[]> {
+  return listCouponSnapshotsEnsuringAppliesTo({
+    listPage: startingAfter =>
+      stripe.coupons.list({
+        limit: 100,
+        ...(startingAfter ? { starting_after: startingAfter } : {}),
+      }),
+    retrieveCoupon: couponId => stripe.coupons.retrieve(couponId),
+  });
+}
+
+export async function listFeeBearingStripeProductIds(): Promise<string[]> {
+  const priceIds = [...getKnownStripePriceIdsForKiloPass(), requireEnv('STRIPE_TOP_UP_PRICE_ID')];
+  const productIds = new Set<string>();
+
+  for (const priceId of priceIds) {
+    const price = await stripe.prices.retrieve(priceId);
+    const productId = productIdFromPrice(price.product);
+    if (!productId) {
+      throw new Error(`fee-bearing price ${priceId} has no product id`);
+    }
+    productIds.add(productId);
+  }
+
+  return [...productIds].sort((left, right) => left.localeCompare(right));
+}
+
+export async function run(...args: string[]): Promise<void> {
+  const parsed = parseRestrictedCouponAuditArgs(args);
+  const report = await auditRestrictedCoupons({
+    listCoupons: listStripeCouponSnapshots,
+    listFeeBearingProductIds: listFeeBearingStripeProductIds,
+    sendAlert: parsed.alert ? sendAdminSlackNotification : undefined,
+    capture: parsed.alert ? captureRestrictedCouponDetection : undefined,
+  });
+  if (report.findings.length > 0) {
+    process.exitCode = 1;
+  }
+}
+
+function captureRestrictedCouponDetection(payload: RestrictedCouponAlertPayload): void {
+  captureMessage(SERVICE_FEE_RESTRICTED_COUPON_SENTRY_TAG, {
+    level: 'error',
+    tags: { [SERVICE_FEE_RESTRICTED_COUPON_SENTRY_TAG]: 'true' },
+    extra: payload,
+  });
+}
+
+function requireEnv(name: string): string {
+  const value = getEnvVariable(name).trim();
+  if (!value) {
+    throw new Error(`Missing required env var for restricted-coupon audit: ${name}`);
+  }
+  return value;
+}
+
+function productIdFromPrice(product: unknown): string | null {
+  if (typeof product === 'string') return product;
+  if (product && typeof product === 'object' && 'id' in product) {
+    const id = product.id;
+    return typeof id === 'string' ? id : null;
+  }
+  return null;
+}
diff --git a/docs/adr/0004-stripe-service-fee-assessment.md b/docs/adr/0004-stripe-service-fee-assessment.md
new file mode 100644
index 0000000000..c49237e591
--- /dev/null
+++ b/docs/adr/0004-stripe-service-fee-assessment.md
@@ -0,0 +1,245 @@
+# ADR 0004: Base Stripe Service Fees on Recognized Product Value with Durable Assessments
+
+## Status
+
+Accepted
+
+The fee-base, dispute, assessment, and tax-treatment decisions below are settled. The Checkout
+coupon-allocation contract was verified in Stripe test mode on 2026-08-10; results are recorded
+under Invariants. On 2026-08-11, finance/tax treatment was confirmed: the 5% service-fee line uses
+the same Stripe `tax_behavior` as the eligible product it accompanies.
+
+Planning detail lives in `.plans/service-fees/GOAL.md` and `.plans/service-fees/SPEC.md`. That
+directory is not tracked, so this ADR is the durable record.
+
+## Context
+
+Kilo will charge a 5% service fee on eligible Stripe-funded credit purchases and Kilo Pass charges
+for billing objects created at or after `2026-11-01T00:00:00Z`. The fee is additional to the
+purchase price and never changes the credits or entitlement received.
+
+Three existing properties of the codebase shape the design.
+
+Credit settlement currently derives the granted amount from the gross Stripe payment.
+`handleSuccessfulChargeWithPayment()` uses `charge.amount`, and the `invoice.paid` auto-top-up
+branches pass `invoice.amount_paid` to the top-up processors. Once a fee is added to those payments,
+any path that continues to read the gross amount would grant the customer the fee as credit.
+
+Product classification is inferred from invoice lines and subscription items. Kilo Pass for
+Organizations resolves its subscription item as the first non-seat item, and the Kilo Pass and
+KiloClaw invoice classifiers match against known price identifiers. A new billing line that is
+neither seat nor a known price can be mistaken for a product.
+
+Kilo owns some invoice lifecycles and Stripe owns others. Automatic top-up invoices are created by
+Kilo with `auto_advance: false` and paid directly, while renewals and prorations are advanced by
+Stripe from a draft state. These require different fee-attachment points, and both emit
+`invoice.created`.
+
+Fee revenue must also be reportable separately from the existing credit-revenue series, must survive
+Stripe webhook retries and out-of-order delivery, and must never block an underlying payment when
+fee processing fails.
+
+## Decision
+
+### The fee base is recognized product value, not cash received
+
+The eligible subtotal is the net pretax amount of fee-bearing product lines after discounts and
+proration credits.
+
+A discount reduces the fee base, because it reduces the price. A prepaid balance does not, because
+it is a payment method rather than a price reduction. A customer who settles an eligible $49 charge
+with $49 of prepaid Stripe billing credit still generates $49 of product revenue and owes the fee on
+that amount.
+
+This distinction is load-bearing in code because Stripe represents both in the same field.
+`Stripe.InvoiceLineItem.pretax_credit_amounts` carries entries of type `discount` and of type
+`credit_balance_transaction`. Only `discount` entries reduce the base. Customer credit balance from
+credit notes or overpayment does not appear in that field at all and affects only cash recorded as
+gross paid.
+
+### One durable assessment per commercial billing event
+
+A commercial billing event is a single customer purchase or subscription invoice, even when Stripe
+represents it with a Checkout Session, an Invoice, a PaymentIntent, and a Charge.
+
+Each event gets one idempotent service fee assessment keyed by an application-owned assessment key
+propagated through Stripe metadata. Related Stripe objects enrich that row rather than creating
+additional rows or additional fee revenue. The assessment records the calculation inputs, the cutoff
+and exemption decisions, the expected and charged fee, settlement, refunds, disputes, and the
+related Stripe identities.
+
+The assessment is a sidecar to the existing credit and Stripe flows, not a product or payment
+ledger. It is the source for fee reporting, reconciliation, and refund calculation. Product values
+are retained only when they are inputs to fee calculation, reconciliation, or refunds.
+`credit_transactions` remains the record of credits granted and the source of the existing paid,
+free, multiplied, and unmultiplied dashboard series. Stripe remains the source for actual payments,
+invoices, refunds, disputes, and invoice presentation.
+
+A single `outcome` column carries the fee decision. Settlement, refund, and dispute state are
+separate columns, because they answer different questions and move on different schedules.
+
+### Fees are explicit metadata-marked lines, never a subscription item
+
+A positive fee is an explicit one-time line or invoice item labelled `Service fee (5%)`, carrying
+namespaced metadata that identifies it as a Kilo service fee and links it to its assessment. It is
+never a recurring subscription item.
+
+A line is recognized as a service fee only by that metadata or by an assessment link. Its display
+description is never sufficient. Recurring fees are added per invoice, which covers subscriptions
+created before activation without modifying them in advance.
+
+### Exactly one code path attaches a fee to any given invoice
+
+For invoices Kilo creates and pays, the creating code attaches the fee before payment and the
+`invoice.created` webhook must skip the invoice. For invoices Stripe advances, the `invoice.created`
+handler attaches the fee while the invoice is still draft.
+
+Assessment-key uniqueness does not make this safe on its own, because both paths would derive the
+same key and race. Ownership is decided by invoice metadata, not by ordering or by database
+contention.
+
+### Interactive Checkout fee lines are discountable, and that is correct
+
+Subscription-mode Checkout supports neither `add_invoice_items` nor a `discountable` flag on line
+items. A fee line on a Checkout Session is therefore always discountable, and a promotion code the
+customer redeems on Stripe's hosted page discounts the fee along with the product.
+
+This is accepted rather than worked around. The fee line sits inside the discounted subtotal, so
+both lines scale by the same factor and the 5% ratio is preserved:
+
+```text
+0.05 x list x (1 - d) === 0.05 x (list x (1 - d))
+```
+
+The fee is therefore computed from list price before session creation, and hosted promotion-code
+entry is retained. The consequence is that the fee Kilo requests and the fee Stripe settles differ
+on discounted purchases, so the collected amount must be read from the settled invoice line and
+never from the value sent.
+
+Fees attached to invoices are calculated from already-discounted lines and marked
+`discountable: false`, so they are exact. The asymmetry between the two mechanisms is intentional.
+
+### Fee processing fails open
+
+If fee calculation, exemption lookup, tax resolution, or fee attachment fails, the underlying
+purchase proceeds without the fee. The assessment records the expected fee and a missed outcome, and
+an alert is sent on every processing attempt.
+
+A missed fee is never collected retroactively and never carried into another billing event. There is
+no runtime kill switch; disabling the feature requires a deployment rollback.
+
+This applies in production as well as in development. A fee-domain failure, including inability to
+resolve a Price's tax behavior, never blocks a customer payment.
+
+### Refunds and chargebacks reduce collected fee revenue
+
+The fee is refundable in proportion to the eligible product principal refunded, using cumulative
+proportional rounding so that a fully refunded purchase returns exactly the original fee.
+
+A chargeback also reduces collected fee revenue, because the money leaves the account. Its fee
+consequence is tracked separately from refunds: refunds accumulate monotonically, while a dispute
+resolved in Kilo's favor restores the fee and must be reversible without violating that invariant.
+The assessment does not track a disputed product balance.
+
+### Organization exemptions are exact, internal, and time-resolved
+
+A platform admin may exempt an exact organization, with a required reason recorded in an internal append-only log.
+Exemptions do not inherit to parent organizations, child organizations, or members' personal
+purchases, and are never inferred from seat counts, plan, sponsorship, hierarchy, or trial settings.
+
+Eligibility is resolved against the exemption-log row effective at the billing object's creation
+instant, not against current state at webhook delivery. The exemption log is not written to
+`organization_audit_logs`, which is reachable by customers through an organization-scoped procedure.
+
+## Invariants (what not to change without revisiting this ADR)
+
+1. Credits and entitlements derive from the trusted product principal. No path grants credit from
+   `charge.amount`, `invoice.amount_paid`, or any other gross payment amount.
+2. Only `pretax_credit_amounts` entries of type `discount` reduce the eligible subtotal. Prepaid
+   balance consumption does not.
+3. A service-fee line is identified by namespaced metadata or an assessment link, never by its
+   description. Seat, Kilo Pass, and KiloClaw classifiers must remain unable to match it.
+4. Exactly one code path attaches a fee to a given invoice, decided by invoice metadata.
+5. The fee actually collected is read from the settled Stripe fee line. Do not add a database
+   constraint requiring the charged fee to equal the expected fee; on discounted Checkout purchases
+   it legitimately does not.
+6. Fee-domain failure never fails a payment closed, and a missed fee is never collected later.
+7. Refund columns are monotonic. The dispute fee is reversible and is not monotonic.
+8. Eligibility is resolved at the billing object's creation instant, never at webhook-delivery time.
+9. Kilo Pass reported amounts for affiliate purposes exclude the fee. This required amending rule 17
+   of `.specs/impact-affiliate-tracking.md`, which previously mandated the settled invoice paid
+   amount.
+10. Finance/tax treatment was confirmed on 2026-08-11: inline fee lines inherit the eligible
+    inline product's treatment, while Price-based fee lines mirror the eligible Price's explicit
+    `inclusive` or `exclusive` `tax_behavior`.
+11. Stripe test-mode Checkout verified the discountable-fee-line allocation on 2026-08-10 with a
+    $49.00 recurring product and a $2.45 one-time fee line:
+
+    | Coupon | Product net | Fee net | Result |
+    |---|---:|---:|---|
+    | Unrestricted 20% | $39.20 | $1.96 | Both lines reduced 20% |
+    | Unrestricted fixed $10 | $39.47 | $1.98 | Proportional cent allocation; effective rate within one cent |
+    | Product-restricted 20% | $39.20 | $2.45 | Fee untouched; confirms the deviation signature |
+    | Unrestricted 100% | $0.00 | $0.00 | Both lines zero |
+
+    The four Sessions were inspected while open and then expired. Temporary promotion codes were
+    deactivated, coupons deleted, and test catalog objects archived. No payment or subscription was
+    completed.
+
+## Alternatives
+
+**Charge the fee as a recurring subscription item.** Rejected. It would make the fee a product-like
+item on every subscription, exposing it to the classifiers that resolve seat and Kilo Pass items,
+and would require modifying existing subscriptions before activation.
+
+**Compute the Checkout fee from the final discounted subtotal.** This is the theoretically exact
+approach, but Stripe offers no generally available server-side callback between hosted
+promotion-code selection and payment confirmation. Dynamic Checkout line-item updates and dynamic
+discounts are private preview. Rejected as a schedule dependency on an external launch.
+
+**Move promotion-code entry into Kilo's own UI** and pass the code server-side through
+`SessionCreateParams.discounts`, which is generally available. This would make the subtotal known
+before session creation, keep the expected-equals-charged invariant everywhere, and make
+product-restricted coupons structurally harmless. Rejected for this release in favor of preserving
+the existing hosted-Checkout conversion path. It remains the preferred fallback if the coupon
+allocation proof in Invariant 11 fails.
+
+**Charge the fee on undiscounted list price and let it stand.** Rejected. It would collect more than
+5% of the amount the customer actually paid.
+
+**Reconcile fee shortfalls after settlement with credit adjustments.** Rejected. Compensating with
+post-settlement credit math hides an incorrect charge instead of charging correctly.
+
+## Consequences
+
+Fee revenue, missed fee value, exempted fee value, and disputed fee value become separately
+reportable and reconcilable against Stripe because a durable assessment exists for every commercial
+billing event.
+
+The existing credit-revenue dashboard semantics remain unchanged, including their current lack of
+refund and dispute adjustment. Assessment-backed top-ups stay in those credit series. The fee series
+is grouped separately by settlement date in UTC and must not be added to credit figures to claim
+authoritative gross revenue. Kilo Pass product revenue remains outside the dashboard; filling that
+gap requires separate product and accounting work.
+
+A product-restricted Stripe coupon would discount an eligible product without discounting the fee
+line, causing the customer to pay more than the published 5%. This cannot be prevented in code: the
+code is entered after session creation, and a dashboard-created coupon requires no deployment. It is
+controlled operationally through a policy against restricted coupons on fee-bearing products, a
+scheduled detection check, and a settlement-time effective-rate alert. This is a real residual risk
+accepted in exchange for retaining hosted promotion-code entry.
+
+Fail-open behavior means revenue leakage is possible and must be observable. Missed fees are
+durable, alerted on every processing attempt, and reported separately from collected revenue.
+
+The Stripe wire API version must be pinned explicitly. The client previously relied on the account
+default, which can diverge from the installed typings and can be changed from the Stripe dashboard
+without a deployment. Every line-shape assumption in this design depends on that contract.
+
+## References
+
+- ADR 0003: Use Org-Owned Agreements for Kilo Pass for Organizations, for the agreement records and
+  bound subscription item this design must not disturb
+- `.specs/impact-affiliate-tracking.md`, rule 17, amended by this work
+- `.specs/kilo-pass.md` and `.specs/team-enterprise-seat-billing.md` for the product boundaries that
+  determine fee eligibility
diff --git a/packages/db/src/migrations/0221_goofy_true_believers.sql b/packages/db/src/migrations/0221_goofy_true_believers.sql
new file mode 100644
index 0000000000..ed4533c03f
--- /dev/null
+++ b/packages/db/src/migrations/0221_goofy_true_believers.sql
@@ -0,0 +1,100 @@
+CREATE TABLE "organization_service_fee_exemptions" (
+	"id" uuid PRIMARY KEY DEFAULT pg_catalog.gen_random_uuid() NOT NULL,
+	"organization_id" uuid NOT NULL,
+	"is_exempt" boolean NOT NULL,
+	"reason" text NOT NULL,
+	"changed_by_kilo_user_id" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "organization_service_fee_exemptions_reason_check" CHECK (length(trim("organization_service_fee_exemptions"."reason")) > 0)
+);
+--> statement-breakpoint
+CREATE TABLE "stripe_service_fee_assessments" (
+	"assessment_key" text PRIMARY KEY NOT NULL,
+	"version" text NOT NULL,
+	"flow" text NOT NULL,
+	"outcome" text NOT NULL,
+	"currency" text NOT NULL,
+	"kilo_user_id" text,
+	"organization_id" uuid,
+	"stripe_customer_id" text,
+	"stripe_checkout_session_id" text,
+	"stripe_invoice_id" text,
+	"stripe_payment_intent_id" text,
+	"stripe_charge_id" text,
+	"stripe_fee_price_id" text,
+	"stripe_checkout_fee_line_item_id" text,
+	"stripe_invoice_fee_line_item_id" text,
+	"eligibility_created_at" timestamp with time zone NOT NULL,
+	"eligible_subtotal_minor" integer NOT NULL,
+	"expected_fee_minor" integer NOT NULL,
+	"charged_fee_minor" integer DEFAULT 0 NOT NULL,
+	"gross_paid_minor" integer DEFAULT 0 NOT NULL,
+	"settled_product_minor" integer DEFAULT 0 NOT NULL,
+	"refunded_product_minor" integer DEFAULT 0 NOT NULL,
+	"refunded_fee_minor" integer DEFAULT 0 NOT NULL,
+	"refunded_gross_minor" integer DEFAULT 0 NOT NULL,
+	"disputed_fee_minor" integer DEFAULT 0 NOT NULL,
+	"settled_at" timestamp with time zone,
+	"exemption_id" uuid,
+	"failure_code" text,
+	"metadata" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "stripe_service_fee_assessments_flow_check" CHECK ("stripe_service_fee_assessments"."flow" IN ('personal_top_up', 'organization_top_up', 'personal_auto_top_up_setup', 'organization_auto_top_up_setup', 'personal_auto_top_up', 'organization_auto_top_up', 'personal_kilo_pass', 'organization_kilo_pass')),
+	CONSTRAINT "stripe_service_fee_assessments_outcome_check" CHECK ("stripe_service_fee_assessments"."outcome" IN ('pending', 'charged', 'exempt', 'pre_activation', 'zero_rounded', 'unsupported_currency', 'missed')),
+	CONSTRAINT "stripe_service_fee_assessments_currency_check" CHECK ("stripe_service_fee_assessments"."currency" ~ '^[a-z]{3}$'),
+	CONSTRAINT "stripe_service_fee_assessments_owner_check" CHECK ((
+        "stripe_service_fee_assessments"."flow" LIKE 'personal_%'
+        AND "stripe_service_fee_assessments"."kilo_user_id" IS NOT NULL
+        AND "stripe_service_fee_assessments"."organization_id" IS NULL
+      ) OR (
+        "stripe_service_fee_assessments"."flow" LIKE 'organization_%'
+        AND "stripe_service_fee_assessments"."organization_id" IS NOT NULL
+      )),
+	CONSTRAINT "stripe_service_fee_assessments_amounts_nonnegative_check" CHECK ("stripe_service_fee_assessments"."eligible_subtotal_minor" >= 0
+        AND "stripe_service_fee_assessments"."expected_fee_minor" >= 0
+        AND "stripe_service_fee_assessments"."charged_fee_minor" >= 0
+        AND "stripe_service_fee_assessments"."gross_paid_minor" >= 0
+        AND "stripe_service_fee_assessments"."settled_product_minor" >= 0
+        AND "stripe_service_fee_assessments"."refunded_product_minor" >= 0
+        AND "stripe_service_fee_assessments"."refunded_fee_minor" >= 0
+        AND "stripe_service_fee_assessments"."refunded_gross_minor" >= 0
+        AND "stripe_service_fee_assessments"."disputed_fee_minor" >= 0),
+	CONSTRAINT "stripe_service_fee_assessments_refund_fee_check" CHECK ("stripe_service_fee_assessments"."refunded_fee_minor" <= "stripe_service_fee_assessments"."charged_fee_minor"),
+	CONSTRAINT "stripe_service_fee_assessments_refund_product_check" CHECK ("stripe_service_fee_assessments"."refunded_product_minor" <= "stripe_service_fee_assessments"."settled_product_minor"),
+	CONSTRAINT "stripe_service_fee_assessments_disputed_fee_check" CHECK ("stripe_service_fee_assessments"."disputed_fee_minor" <= "stripe_service_fee_assessments"."charged_fee_minor"),
+	CONSTRAINT "stripe_service_fee_assessments_pending_check" CHECK ("stripe_service_fee_assessments"."outcome" <> 'pending'
+        OR ("stripe_service_fee_assessments"."charged_fee_minor" = 0 AND "stripe_service_fee_assessments"."settled_at" IS NULL)),
+	CONSTRAINT "stripe_service_fee_assessments_charged_check" CHECK ("stripe_service_fee_assessments"."outcome" <> 'charged' OR (
+        (
+          "stripe_service_fee_assessments"."stripe_invoice_fee_line_item_id" IS NOT NULL
+          OR "stripe_service_fee_assessments"."stripe_checkout_fee_line_item_id" IS NOT NULL
+          OR "stripe_service_fee_assessments"."settled_at" IS NOT NULL
+        )
+        AND ("stripe_service_fee_assessments"."charged_fee_minor" <> 0 OR "stripe_service_fee_assessments"."settled_product_minor" = 0)
+      )),
+	CONSTRAINT "stripe_service_fee_assessments_missed_check" CHECK ("stripe_service_fee_assessments"."outcome" <> 'missed' OR (
+        "stripe_service_fee_assessments"."expected_fee_minor" > 0
+        AND "stripe_service_fee_assessments"."charged_fee_minor" = 0
+        AND "stripe_service_fee_assessments"."failure_code" IS NOT NULL
+        AND length(trim("stripe_service_fee_assessments"."failure_code")) > 0
+      )),
+	CONSTRAINT "stripe_service_fee_assessments_zero_rounded_check" CHECK ("stripe_service_fee_assessments"."outcome" <> 'zero_rounded' OR "stripe_service_fee_assessments"."expected_fee_minor" = 0),
+	CONSTRAINT "stripe_service_fee_assessments_uncharged_outcome_check" CHECK ("stripe_service_fee_assessments"."outcome" NOT IN ('exempt', 'pre_activation', 'zero_rounded', 'unsupported_currency')
+        OR "stripe_service_fee_assessments"."charged_fee_minor" = 0),
+	CONSTRAINT "stripe_service_fee_assessments_exemption_check" CHECK (("stripe_service_fee_assessments"."outcome" = 'exempt') = ("stripe_service_fee_assessments"."exemption_id" IS NOT NULL))
+);
+--> statement-breakpoint
+ALTER TABLE "organization_service_fee_exemptions" ADD CONSTRAINT "FK_org_svc_fee_exemptions_organization" FOREIGN KEY ("organization_id") REFERENCES "public"."organizations"("id") ON DELETE restrict ON UPDATE cascade;--> statement-breakpoint
+ALTER TABLE "organization_service_fee_exemptions" ADD CONSTRAINT "FK_org_svc_fee_exemptions_changed_by" FOREIGN KEY ("changed_by_kilo_user_id") REFERENCES "public"."kilocode_users"("id") ON DELETE set null ON UPDATE cascade;--> statement-breakpoint
+ALTER TABLE "stripe_service_fee_assessments" ADD CONSTRAINT "FK_stripe_svc_fee_assessments_kilo_user" FOREIGN KEY ("kilo_user_id") REFERENCES "public"."kilocode_users"("id") ON DELETE set null ON UPDATE cascade;--> statement-breakpoint
+ALTER TABLE "stripe_service_fee_assessments" ADD CONSTRAINT "FK_stripe_svc_fee_assessments_organization" FOREIGN KEY ("organization_id") REFERENCES "public"."organizations"("id") ON DELETE restrict ON UPDATE cascade;--> statement-breakpoint
+ALTER TABLE "stripe_service_fee_assessments" ADD CONSTRAINT "FK_stripe_svc_fee_assessments_exemption" FOREIGN KEY ("exemption_id") REFERENCES "public"."organization_service_fee_exemptions"("id") ON DELETE restrict ON UPDATE cascade;--> statement-breakpoint
+CREATE INDEX "IDX_org_service_fee_exemptions_org_created_at" ON "organization_service_fee_exemptions" USING btree ("organization_id","created_at" DESC NULLS LAST);--> statement-breakpoint
+CREATE INDEX "IDX_stripe_service_fee_assessments_stripe_customer_id" ON "stripe_service_fee_assessments" USING btree ("stripe_customer_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_checkout_session_id" ON "stripe_service_fee_assessments" USING btree ("stripe_checkout_session_id") WHERE "stripe_service_fee_assessments"."stripe_checkout_session_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_stripe_invoice_id" ON "stripe_service_fee_assessments" USING btree ("stripe_invoice_id") WHERE "stripe_service_fee_assessments"."stripe_invoice_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_stripe_payment_intent_id" ON "stripe_service_fee_assessments" USING btree ("stripe_payment_intent_id") WHERE "stripe_service_fee_assessments"."stripe_payment_intent_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_stripe_charge_id" ON "stripe_service_fee_assessments" USING btree ("stripe_charge_id") WHERE "stripe_service_fee_assessments"."stripe_charge_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_checkout_fee_line_item_id" ON "stripe_service_fee_assessments" USING btree ("stripe_checkout_fee_line_item_id") WHERE "stripe_service_fee_assessments"."stripe_checkout_fee_line_item_id" is not null;--> statement-breakpoint
+CREATE UNIQUE INDEX "UQ_stripe_service_fee_assessments_invoice_fee_line_item_id" ON "stripe_service_fee_assessments" USING btree ("stripe_invoice_fee_line_item_id") WHERE "stripe_service_fee_assessments"."stripe_invoice_fee_line_item_id" is not null;
\ No newline at end of file
diff --git a/packages/db/src/migrations/meta/0221_snapshot.json b/packages/db/src/migrations/meta/0221_snapshot.json
new file mode 100644
index 0000000000..2ce53f4372
--- /dev/null
+++ b/packages/db/src/migrations/meta/0221_snapshot.json
@@ -0,0 +1,39651 @@
+{
+  "id": "a6617c0d-9686-4e42-9775-b3c72443a2d0",
+  "prevId": "0092dbfb-1da4-490e-bd4c-8421dc20cd5a",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.agent_configs": {
+      "name": "agent_configs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "agent_type": {
+          "name": "agent_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config": {
+          "name": "config",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "is_enabled": {
+          "name": "is_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "runtime_state": {
+          "name": "runtime_state",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'{}'::jsonb"
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "config_revision": {
+          "name": "config_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        }
+      },
+      "indexes": {
+        "IDX_agent_configs_org_id": {
+          "name": "IDX_agent_configs_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_configs_owned_by_user_id": {
+          "name": "IDX_agent_configs_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_configs_agent_type": {
+          "name": "IDX_agent_configs_agent_type",
+          "columns": [
+            {
+              "expression": "agent_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_configs_platform": {
+          "name": "IDX_agent_configs_platform",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_configs_owned_by_organization_id_organizations_id_fk": {
+          "name": "agent_configs_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "agent_configs",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_configs_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "agent_configs_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "agent_configs",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_configs_org_agent_platform": {
+          "name": "UQ_agent_configs_org_agent_platform",
+          "nullsNotDistinct": false,
+          "columns": [
+            "owned_by_organization_id",
+            "agent_type",
+            "platform"
+          ]
+        },
+        "UQ_agent_configs_user_agent_platform": {
+          "name": "UQ_agent_configs_user_agent_platform",
+          "nullsNotDistinct": false,
+          "columns": [
+            "owned_by_user_id",
+            "agent_type",
+            "platform"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "agent_configs_owner_check": {
+          "name": "agent_configs_owner_check",
+          "value": "(\n        (\"agent_configs\".\"owned_by_user_id\" IS NOT NULL AND \"agent_configs\".\"owned_by_organization_id\" IS NULL) OR\n        (\"agent_configs\".\"owned_by_user_id\" IS NULL AND \"agent_configs\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "agent_configs_agent_type_check": {
+          "name": "agent_configs_agent_type_check",
+          "value": "\"agent_configs\".\"agent_type\" IN ('code_review', 'auto_triage', 'auto_fix', 'security_scan')"
+        },
+        "agent_configs_config_revision_check": {
+          "name": "agent_configs_config_revision_check",
+          "value": "\"agent_configs\".\"config_revision\" >= 1"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_agents": {
+      "name": "agent_environment_profile_agents",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slug": {
+          "name": "slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config": {
+          "name": "config",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_agents_profile_id": {
+          "name": "IDX_agent_env_profile_agents_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_agents_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_agents_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_agents",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_agents_profile_slug": {
+          "name": "UQ_agent_env_profile_agents_profile_slug",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "slug"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_commands": {
+      "name": "agent_environment_profile_commands",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sequence": {
+          "name": "sequence",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "command": {
+          "name": "command",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_commands_profile_id": {
+          "name": "IDX_agent_env_profile_commands_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_commands_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_commands_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_commands",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_commands_profile_sequence": {
+          "name": "UQ_agent_env_profile_commands_profile_sequence",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "sequence"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_kilo_commands": {
+      "name": "agent_environment_profile_kilo_commands",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "template": {
+          "name": "template",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "agent": {
+          "name": "agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "subtask": {
+          "name": "subtask",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "sort_order": {
+          "name": "sort_order",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_kilo_cmds_profile_id": {
+          "name": "IDX_agent_env_profile_kilo_cmds_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_kilo_commands_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_kilo_commands_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_kilo_commands",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_kilo_cmds_profile_name": {
+          "name": "UQ_agent_env_profile_kilo_cmds_profile_name",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_mcp_servers": {
+      "name": "agent_environment_profile_mcp_servers",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "timeout": {
+          "name": "timeout",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "config": {
+          "name": "config",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_mcp_servers_profile_id": {
+          "name": "IDX_agent_env_profile_mcp_servers_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_mcp_servers_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_mcp_servers_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_mcp_servers",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_mcp_servers_profile_name": {
+          "name": "UQ_agent_env_profile_mcp_servers_profile_name",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_repo_bindings": {
+      "name": "agent_environment_profile_repo_bindings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'github'"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_agent_env_profile_repo_bindings_user": {
+          "name": "UQ_agent_env_profile_repo_bindings_user",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profile_repo_bindings\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_agent_env_profile_repo_bindings_org": {
+          "name": "UQ_agent_env_profile_repo_bindings_org",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profile_repo_bindings\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_repo_bindings_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_repo_bindings_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_repo_bindings",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_environment_profile_repo_bindings_owned_by_organization_id_organizations_id_fk": {
+          "name": "agent_environment_profile_repo_bindings_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "agent_environment_profile_repo_bindings",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_environment_profile_repo_bindings_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "agent_environment_profile_repo_bindings_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "agent_environment_profile_repo_bindings",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "agent_env_profile_repo_bindings_owner_check": {
+          "name": "agent_env_profile_repo_bindings_owner_check",
+          "value": "(\n        (\"agent_environment_profile_repo_bindings\".\"owned_by_user_id\" IS NOT NULL AND \"agent_environment_profile_repo_bindings\".\"owned_by_organization_id\" IS NULL) OR\n        (\"agent_environment_profile_repo_bindings\".\"owned_by_user_id\" IS NULL AND \"agent_environment_profile_repo_bindings\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_skills": {
+      "name": "agent_environment_profile_skills",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_url": {
+          "name": "source_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "raw_markdown": {
+          "name": "raw_markdown",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "files": {
+          "name": "files",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_skills_profile_id": {
+          "name": "IDX_agent_env_profile_skills_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_skills_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_skills_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_skills",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_skills_profile_name": {
+          "name": "UQ_agent_env_profile_skills_profile_name",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profile_vars": {
+      "name": "agent_environment_profile_vars",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_secret": {
+          "name": "is_secret",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_agent_env_profile_vars_profile_id": {
+          "name": "IDX_agent_env_profile_vars_profile_id",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profile_vars_profile_id_agent_environment_profiles_id_fk": {
+          "name": "agent_environment_profile_vars_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "agent_environment_profile_vars",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_agent_env_profile_vars_profile_key": {
+          "name": "UQ_agent_env_profile_vars_profile_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "profile_id",
+            "key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.agent_environment_profiles": {
+      "name": "agent_environment_profiles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_default": {
+          "name": "is_default",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_agent_env_profiles_org_name": {
+          "name": "UQ_agent_env_profiles_org_name",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profiles\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_agent_env_profiles_user_name": {
+          "name": "UQ_agent_env_profiles_user_name",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profiles\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_agent_env_profiles_org_default": {
+          "name": "UQ_agent_env_profiles_org_default",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profiles\".\"is_default\" = true AND \"agent_environment_profiles\".\"owned_by_organization_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_agent_env_profiles_user_default": {
+          "name": "UQ_agent_env_profiles_user_default",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"agent_environment_profiles\".\"is_default\" = true AND \"agent_environment_profiles\".\"owned_by_user_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_env_profiles_org_id": {
+          "name": "IDX_agent_env_profiles_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_env_profiles_user_id": {
+          "name": "IDX_agent_env_profiles_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_agent_env_profiles_created_by_user_id": {
+          "name": "IDX_agent_env_profiles_created_by_user_id",
+          "columns": [
+            {
+              "expression": "created_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "agent_environment_profiles_owned_by_organization_id_organizations_id_fk": {
+          "name": "agent_environment_profiles_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "agent_environment_profiles",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "agent_environment_profiles_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "agent_environment_profiles_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "agent_environment_profiles",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "agent_env_profiles_owner_check": {
+          "name": "agent_env_profiles_owner_check",
+          "value": "(\n        (\"agent_environment_profiles\".\"owned_by_user_id\" IS NOT NULL AND \"agent_environment_profiles\".\"owned_by_organization_id\" IS NULL) OR\n        (\"agent_environment_profiles\".\"owned_by_user_id\" IS NULL AND \"agent_environment_profiles\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.analytics_event_outbox": {
+      "name": "analytics_event_outbox",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "event_uuid": {
+          "name": "event_uuid",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_name": {
+          "name": "event_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "distinct_id": {
+          "name": "distinct_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "properties": {
+          "name": "properties",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "delivered_at": {
+          "name": "delivered_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_analytics_event_outbox_event_uuid": {
+          "name": "UQ_analytics_event_outbox_event_uuid",
+          "columns": [
+            {
+              "expression": "event_uuid",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_analytics_event_outbox_status_next_attempt_at": {
+          "name": "IDX_analytics_event_outbox_status_next_attempt_at",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "next_attempt_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.api_kind": {
+      "name": "api_kind",
+      "schema": "",
+      "columns": {
+        "api_kind_id": {
+          "name": "api_kind_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "api_kind": {
+          "name": "api_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_api_kind": {
+          "name": "UQ_api_kind",
+          "columns": [
+            {
+              "expression": "api_kind",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.api_request_log": {
+      "name": "api_request_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "bigserial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_request_id": {
+          "name": "vercel_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_code": {
+          "name": "status_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "request": {
+          "name": "request",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response": {
+          "name": "response",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error": {
+          "name": "error",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_api_request_log_created_at": {
+          "name": "idx_api_request_log_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.app_builder_feedback": {
+      "name": "app_builder_feedback",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "preview_status": {
+          "name": "preview_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_streaming": {
+          "name": "is_streaming",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "message_count": {
+          "name": "message_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "feedback_text": {
+          "name": "feedback_text",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recent_messages": {
+          "name": "recent_messages",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_app_builder_feedback_created_at": {
+          "name": "IDX_app_builder_feedback_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_feedback_kilo_user_id": {
+          "name": "IDX_app_builder_feedback_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_feedback_project_id": {
+          "name": "IDX_app_builder_feedback_project_id",
+          "columns": [
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "app_builder_feedback_kilo_user_id_kilocode_users_id_fk": {
+          "name": "app_builder_feedback_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "app_builder_feedback",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "app_builder_feedback_project_id_app_builder_projects_id_fk": {
+          "name": "app_builder_feedback_project_id_app_builder_projects_id_fk",
+          "tableFrom": "app_builder_feedback",
+          "tableTo": "app_builder_projects",
+          "columnsFrom": [
+            "project_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.app_builder_project_sessions": {
+      "name": "app_builder_project_sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "ended_at": {
+          "name": "ended_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "worker_version": {
+          "name": "worker_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'v2'"
+        }
+      },
+      "indexes": {
+        "IDX_app_builder_project_sessions_project_id": {
+          "name": "IDX_app_builder_project_sessions_project_id",
+          "columns": [
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "app_builder_project_sessions_project_id_app_builder_projects_id_fk": {
+          "name": "app_builder_project_sessions_project_id_app_builder_projects_id_fk",
+          "tableFrom": "app_builder_project_sessions",
+          "tableTo": "app_builder_projects",
+          "columnsFrom": [
+            "project_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_app_builder_project_sessions_cloud_agent_session_id": {
+          "name": "UQ_app_builder_project_sessions_cloud_agent_session_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "cloud_agent_session_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.app_builder_projects": {
+      "name": "app_builder_projects",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "template": {
+          "name": "template",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deployment_id": {
+          "name": "deployment_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_message_at": {
+          "name": "last_message_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_repo_full_name": {
+          "name": "git_repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_platform_integration_id": {
+          "name": "git_platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "migrated_at": {
+          "name": "migrated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_app_builder_projects_created_by_user_id": {
+          "name": "IDX_app_builder_projects_created_by_user_id",
+          "columns": [
+            {
+              "expression": "created_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_projects_owned_by_user_id": {
+          "name": "IDX_app_builder_projects_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_projects_owned_by_organization_id": {
+          "name": "IDX_app_builder_projects_owned_by_organization_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_projects_created_at": {
+          "name": "IDX_app_builder_projects_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_projects_last_message_at": {
+          "name": "IDX_app_builder_projects_last_message_at",
+          "columns": [
+            {
+              "expression": "last_message_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_app_builder_projects_git_repo_integration": {
+          "name": "IDX_app_builder_projects_git_repo_integration",
+          "columns": [
+            {
+              "expression": "git_repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "git_platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"app_builder_projects\".\"git_repo_full_name\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "app_builder_projects_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "app_builder_projects_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "app_builder_projects",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "app_builder_projects_owned_by_organization_id_organizations_id_fk": {
+          "name": "app_builder_projects_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "app_builder_projects",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "app_builder_projects_deployment_id_deployments_id_fk": {
+          "name": "app_builder_projects_deployment_id_deployments_id_fk",
+          "tableFrom": "app_builder_projects",
+          "tableTo": "deployments",
+          "columnsFrom": [
+            "deployment_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "app_builder_projects_git_platform_integration_id_platform_integrations_id_fk": {
+          "name": "app_builder_projects_git_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "app_builder_projects",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "git_platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "app_builder_projects_owner_check": {
+          "name": "app_builder_projects_owner_check",
+          "value": "(\n        (\"app_builder_projects\".\"owned_by_user_id\" IS NOT NULL AND \"app_builder_projects\".\"owned_by_organization_id\" IS NULL) OR\n        (\"app_builder_projects\".\"owned_by_user_id\" IS NULL AND \"app_builder_projects\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.app_min_versions": {
+      "name": "app_min_versions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "ios_min_version": {
+          "name": "ios_min_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'1.0.0'"
+        },
+        "android_min_version": {
+          "name": "android_min_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'1.0.0'"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.app_reported_messages": {
+      "name": "app_reported_messages",
+      "schema": "",
+      "columns": {
+        "report_id": {
+          "name": "report_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "report_type": {
+          "name": "report_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "signature": {
+          "name": "signature",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "message": {
+          "name": "message",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "cli_session_id": {
+          "name": "cli_session_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "mode": {
+          "name": "mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "app_reported_messages_cli_session_id_cli_sessions_session_id_fk": {
+          "name": "app_reported_messages_cli_session_id_cli_sessions_session_id_fk",
+          "tableFrom": "app_reported_messages",
+          "tableTo": "cli_sessions",
+          "columnsFrom": [
+            "cli_session_id"
+          ],
+          "columnsTo": [
+            "session_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.auto_fix_tickets": {
+      "name": "auto_fix_tickets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "triage_ticket_id": {
+          "name": "triage_ticket_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'github'"
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_number": {
+          "name": "issue_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_url": {
+          "name": "issue_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_title": {
+          "name": "issue_title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_body": {
+          "name": "issue_body",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "issue_author": {
+          "name": "issue_author",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_labels": {
+          "name": "issue_labels",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'{}'"
+        },
+        "trigger_source": {
+          "name": "trigger_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'label'"
+        },
+        "review_comment_id": {
+          "name": "review_comment_id",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_comment_body": {
+          "name": "review_comment_body",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "file_path": {
+          "name": "file_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "line_number": {
+          "name": "line_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "diff_hunk": {
+          "name": "diff_hunk",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_head_ref": {
+          "name": "pr_head_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "classification": {
+          "name": "classification",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confidence": {
+          "name": "confidence",
+          "type": "numeric(3, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "intent_summary": {
+          "name": "intent_summary",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "related_files": {
+          "name": "related_files",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cli_session_id": {
+          "name": "cli_session_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_branch": {
+          "name": "pr_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_auto_fix_tickets_repo_issue": {
+          "name": "UQ_auto_fix_tickets_repo_issue",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issue_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auto_fix_tickets\".\"trigger_source\" = 'label'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_auto_fix_tickets_repo_review_comment": {
+          "name": "UQ_auto_fix_tickets_repo_review_comment",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "review_comment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auto_fix_tickets\".\"review_comment_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_owned_by_org": {
+          "name": "IDX_auto_fix_tickets_owned_by_org",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_owned_by_user": {
+          "name": "IDX_auto_fix_tickets_owned_by_user",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_status": {
+          "name": "IDX_auto_fix_tickets_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_created_at": {
+          "name": "IDX_auto_fix_tickets_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_triage_ticket_id": {
+          "name": "IDX_auto_fix_tickets_triage_ticket_id",
+          "columns": [
+            {
+              "expression": "triage_ticket_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_fix_tickets_session_id": {
+          "name": "IDX_auto_fix_tickets_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "auto_fix_tickets_owned_by_organization_id_organizations_id_fk": {
+          "name": "auto_fix_tickets_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "auto_fix_tickets",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "auto_fix_tickets_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "auto_fix_tickets_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "auto_fix_tickets",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "auto_fix_tickets_platform_integration_id_platform_integrations_id_fk": {
+          "name": "auto_fix_tickets_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "auto_fix_tickets",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "auto_fix_tickets_triage_ticket_id_auto_triage_tickets_id_fk": {
+          "name": "auto_fix_tickets_triage_ticket_id_auto_triage_tickets_id_fk",
+          "tableFrom": "auto_fix_tickets",
+          "tableTo": "auto_triage_tickets",
+          "columnsFrom": [
+            "triage_ticket_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "auto_fix_tickets_cli_session_id_cli_sessions_session_id_fk": {
+          "name": "auto_fix_tickets_cli_session_id_cli_sessions_session_id_fk",
+          "tableFrom": "auto_fix_tickets",
+          "tableTo": "cli_sessions",
+          "columnsFrom": [
+            "cli_session_id"
+          ],
+          "columnsTo": [
+            "session_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "auto_fix_tickets_owner_check": {
+          "name": "auto_fix_tickets_owner_check",
+          "value": "(\n        (\"auto_fix_tickets\".\"owned_by_user_id\" IS NOT NULL AND \"auto_fix_tickets\".\"owned_by_organization_id\" IS NULL) OR\n        (\"auto_fix_tickets\".\"owned_by_user_id\" IS NULL AND \"auto_fix_tickets\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "auto_fix_tickets_status_check": {
+          "name": "auto_fix_tickets_status_check",
+          "value": "\"auto_fix_tickets\".\"status\" IN ('pending', 'running', 'completed', 'failed', 'cancelled')"
+        },
+        "auto_fix_tickets_classification_check": {
+          "name": "auto_fix_tickets_classification_check",
+          "value": "\"auto_fix_tickets\".\"classification\" IN ('bug', 'feature', 'question', 'unclear')"
+        },
+        "auto_fix_tickets_confidence_check": {
+          "name": "auto_fix_tickets_confidence_check",
+          "value": "\"auto_fix_tickets\".\"confidence\" >= 0 AND \"auto_fix_tickets\".\"confidence\" <= 1"
+        },
+        "auto_fix_tickets_trigger_source_check": {
+          "name": "auto_fix_tickets_trigger_source_check",
+          "value": "\"auto_fix_tickets\".\"trigger_source\" IN ('label', 'review_comment')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.auto_model": {
+      "name": "auto_model",
+      "schema": "",
+      "columns": {
+        "auto_model_id": {
+          "name": "auto_model_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "auto_model": {
+          "name": "auto_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_auto_model": {
+          "name": "UQ_auto_model",
+          "columns": [
+            {
+              "expression": "auto_model",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.auto_top_up_configs": {
+      "name": "auto_top_up_configs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_payment_method_id": {
+          "name": "stripe_payment_method_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_cents": {
+          "name": "amount_cents",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 5000
+        },
+        "last_auto_top_up_at": {
+          "name": "last_auto_top_up_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_started_at": {
+          "name": "attempt_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "disabled_reason": {
+          "name": "disabled_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_auto_top_up_configs_owned_by_user_id": {
+          "name": "UQ_auto_top_up_configs_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auto_top_up_configs\".\"owned_by_user_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_auto_top_up_configs_owned_by_organization_id": {
+          "name": "UQ_auto_top_up_configs_owned_by_organization_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"auto_top_up_configs\".\"owned_by_organization_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "auto_top_up_configs_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "auto_top_up_configs_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "auto_top_up_configs",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "auto_top_up_configs_owned_by_organization_id_organizations_id_fk": {
+          "name": "auto_top_up_configs_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "auto_top_up_configs",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "auto_top_up_configs_exactly_one_owner": {
+          "name": "auto_top_up_configs_exactly_one_owner",
+          "value": "(\"auto_top_up_configs\".\"owned_by_user_id\" IS NOT NULL AND \"auto_top_up_configs\".\"owned_by_organization_id\" IS NULL) OR (\"auto_top_up_configs\".\"owned_by_user_id\" IS NULL AND \"auto_top_up_configs\".\"owned_by_organization_id\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.auto_triage_tickets": {
+      "name": "auto_triage_tickets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'github'"
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_number": {
+          "name": "issue_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_url": {
+          "name": "issue_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_title": {
+          "name": "issue_title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_body": {
+          "name": "issue_body",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "issue_author": {
+          "name": "issue_author",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_type": {
+          "name": "issue_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_labels": {
+          "name": "issue_labels",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'{}'"
+        },
+        "classification": {
+          "name": "classification",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "confidence": {
+          "name": "confidence",
+          "type": "numeric(3, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "intent_summary": {
+          "name": "intent_summary",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "related_files": {
+          "name": "related_files",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_duplicate": {
+          "name": "is_duplicate",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "default": false
+        },
+        "duplicate_of_ticket_id": {
+          "name": "duplicate_of_ticket_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "similarity_score": {
+          "name": "similarity_score",
+          "type": "numeric(3, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "qdrant_point_id": {
+          "name": "qdrant_point_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "should_auto_fix": {
+          "name": "should_auto_fix",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "default": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "action_taken": {
+          "name": "action_taken",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action_metadata": {
+          "name": "action_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_auto_triage_tickets_repo_issue": {
+          "name": "UQ_auto_triage_tickets_repo_issue",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "issue_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_owned_by_org": {
+          "name": "IDX_auto_triage_tickets_owned_by_org",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_owned_by_user": {
+          "name": "IDX_auto_triage_tickets_owned_by_user",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_status": {
+          "name": "IDX_auto_triage_tickets_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_created_at": {
+          "name": "IDX_auto_triage_tickets_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_qdrant_point_id": {
+          "name": "IDX_auto_triage_tickets_qdrant_point_id",
+          "columns": [
+            {
+              "expression": "qdrant_point_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_owner_status_created": {
+          "name": "IDX_auto_triage_tickets_owner_status_created",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_user_status_created": {
+          "name": "IDX_auto_triage_tickets_user_status_created",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_auto_triage_tickets_repo_classification": {
+          "name": "IDX_auto_triage_tickets_repo_classification",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "classification",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "auto_triage_tickets_owned_by_organization_id_organizations_id_fk": {
+          "name": "auto_triage_tickets_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "auto_triage_tickets",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "auto_triage_tickets_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "auto_triage_tickets_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "auto_triage_tickets",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "auto_triage_tickets_platform_integration_id_platform_integrations_id_fk": {
+          "name": "auto_triage_tickets_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "auto_triage_tickets",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "auto_triage_tickets_duplicate_of_ticket_id_auto_triage_tickets_id_fk": {
+          "name": "auto_triage_tickets_duplicate_of_ticket_id_auto_triage_tickets_id_fk",
+          "tableFrom": "auto_triage_tickets",
+          "tableTo": "auto_triage_tickets",
+          "columnsFrom": [
+            "duplicate_of_ticket_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "auto_triage_tickets_owner_check": {
+          "name": "auto_triage_tickets_owner_check",
+          "value": "(\n        (\"auto_triage_tickets\".\"owned_by_user_id\" IS NOT NULL AND \"auto_triage_tickets\".\"owned_by_organization_id\" IS NULL) OR\n        (\"auto_triage_tickets\".\"owned_by_user_id\" IS NULL AND \"auto_triage_tickets\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "auto_triage_tickets_issue_type_check": {
+          "name": "auto_triage_tickets_issue_type_check",
+          "value": "\"auto_triage_tickets\".\"issue_type\" IN ('issue', 'pull_request')"
+        },
+        "auto_triage_tickets_classification_check": {
+          "name": "auto_triage_tickets_classification_check",
+          "value": "\"auto_triage_tickets\".\"classification\" IN ('bug', 'feature', 'question', 'duplicate', 'unclear')"
+        },
+        "auto_triage_tickets_confidence_check": {
+          "name": "auto_triage_tickets_confidence_check",
+          "value": "\"auto_triage_tickets\".\"confidence\" >= 0 AND \"auto_triage_tickets\".\"confidence\" <= 1"
+        },
+        "auto_triage_tickets_similarity_score_check": {
+          "name": "auto_triage_tickets_similarity_score_check",
+          "value": "\"auto_triage_tickets\".\"similarity_score\" >= 0 AND \"auto_triage_tickets\".\"similarity_score\" <= 1"
+        },
+        "auto_triage_tickets_status_check": {
+          "name": "auto_triage_tickets_status_check",
+          "value": "\"auto_triage_tickets\".\"status\" IN ('pending', 'analyzing', 'actioned', 'failed', 'skipped')"
+        },
+        "auto_triage_tickets_action_taken_check": {
+          "name": "auto_triage_tickets_action_taken_check",
+          "value": "\"auto_triage_tickets\".\"action_taken\" IN ('pr_created', 'comment_posted', 'closed_duplicate', 'needs_clarification')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.bot_request_cloud_agent_sessions": {
+      "name": "bot_request_cloud_agent_sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "bot_request_id": {
+          "name": "bot_request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "spawn_group_id": {
+          "name": "spawn_group_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_session_id": {
+          "name": "kilo_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "execution_id": {
+          "name": "execution_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'running'"
+        },
+        "mode": {
+          "name": "mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "github_repo": {
+          "name": "github_repo",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "gitlab_project": {
+          "name": "gitlab_project",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "callback_step": {
+          "name": "callback_step",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "final_message": {
+          "name": "final_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "final_message_fetched_at": {
+          "name": "final_message_fetched_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "final_message_error": {
+          "name": "final_message_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "continuation_started_at": {
+          "name": "continuation_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_bot_request_cas_cloud_agent_session_id": {
+          "name": "UQ_bot_request_cas_cloud_agent_session_id",
+          "columns": [
+            {
+              "expression": "cloud_agent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_request_cas_bot_request_id": {
+          "name": "IDX_bot_request_cas_bot_request_id",
+          "columns": [
+            {
+              "expression": "bot_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_request_cas_bot_request_id_spawn_group_id": {
+          "name": "IDX_bot_request_cas_bot_request_id_spawn_group_id",
+          "columns": [
+            {
+              "expression": "bot_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "spawn_group_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_request_cas_bot_request_id_spawn_group_id_status": {
+          "name": "IDX_bot_request_cas_bot_request_id_spawn_group_id_status",
+          "columns": [
+            {
+              "expression": "bot_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "spawn_group_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "bot_request_cloud_agent_sessions_bot_request_id_bot_requests_id_fk": {
+          "name": "bot_request_cloud_agent_sessions_bot_request_id_bot_requests_id_fk",
+          "tableFrom": "bot_request_cloud_agent_sessions",
+          "tableTo": "bot_requests",
+          "columnsFrom": [
+            "bot_request_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.bot_requests": {
+      "name": "bot_requests",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform_thread_id": {
+          "name": "platform_thread_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform_message_id": {
+          "name": "platform_message_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_message": {
+          "name": "user_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model_used": {
+          "name": "model_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "steps": {
+          "name": "steps",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_time_ms": {
+          "name": "response_time_ms",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_bot_requests_created_at": {
+          "name": "IDX_bot_requests_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_requests_created_by": {
+          "name": "IDX_bot_requests_created_by",
+          "columns": [
+            {
+              "expression": "created_by",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_requests_organization_id": {
+          "name": "IDX_bot_requests_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_requests_platform_integration_id": {
+          "name": "IDX_bot_requests_platform_integration_id",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_bot_requests_status": {
+          "name": "IDX_bot_requests_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "bot_requests_created_by_kilocode_users_id_fk": {
+          "name": "bot_requests_created_by_kilocode_users_id_fk",
+          "tableFrom": "bot_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "bot_requests_organization_id_organizations_id_fk": {
+          "name": "bot_requests_organization_id_organizations_id_fk",
+          "tableFrom": "bot_requests",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "bot_requests_platform_integration_id_platform_integrations_id_fk": {
+          "name": "bot_requests_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "bot_requests",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.byok_api_keys": {
+      "name": "byok_api_keys",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_api_key": {
+          "name": "encrypted_api_key",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "management_source": {
+          "name": "management_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'user'"
+        },
+        "is_enabled": {
+          "name": "is_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "IDX_byok_api_keys_organization_id": {
+          "name": "IDX_byok_api_keys_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_byok_api_keys_kilo_user_id": {
+          "name": "IDX_byok_api_keys_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_byok_api_keys_provider_id": {
+          "name": "IDX_byok_api_keys_provider_id",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "byok_api_keys_organization_id_organizations_id_fk": {
+          "name": "byok_api_keys_organization_id_organizations_id_fk",
+          "tableFrom": "byok_api_keys",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "byok_api_keys_kilo_user_id_kilocode_users_id_fk": {
+          "name": "byok_api_keys_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "byok_api_keys",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_byok_api_keys_org_provider": {
+          "name": "UQ_byok_api_keys_org_provider",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "provider_id"
+          ]
+        },
+        "UQ_byok_api_keys_user_provider": {
+          "name": "UQ_byok_api_keys_user_provider",
+          "nullsNotDistinct": false,
+          "columns": [
+            "kilo_user_id",
+            "provider_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "byok_api_keys_management_source_check": {
+          "name": "byok_api_keys_management_source_check",
+          "value": "\"byok_api_keys\".\"management_source\" IN ('user', 'coding_plan')"
+        },
+        "byok_api_keys_owner_check": {
+          "name": "byok_api_keys_owner_check",
+          "value": "(\n        (\"byok_api_keys\".\"kilo_user_id\" IS NOT NULL AND \"byok_api_keys\".\"organization_id\" IS NULL) OR\n        (\"byok_api_keys\".\"kilo_user_id\" IS NULL AND \"byok_api_keys\".\"organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cli_sessions": {
+      "name": "cli_sessions",
+      "schema": "",
+      "columns": {
+        "session_id": {
+          "name": "session_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_on_platform": {
+          "name": "created_on_platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unknown'"
+        },
+        "api_conversation_history_blob_url": {
+          "name": "api_conversation_history_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "task_metadata_blob_url": {
+          "name": "task_metadata_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ui_messages_blob_url": {
+          "name": "ui_messages_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_state_blob_url": {
+          "name": "git_state_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_url": {
+          "name": "git_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "forked_from": {
+          "name": "forked_from",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_session_id": {
+          "name": "parent_session_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_mode": {
+          "name": "last_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_model": {
+          "name": "last_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_cli_sessions_kilo_user_id": {
+          "name": "IDX_cli_sessions_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_created_at": {
+          "name": "IDX_cli_sessions_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_updated_at": {
+          "name": "IDX_cli_sessions_updated_at",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_organization_id": {
+          "name": "IDX_cli_sessions_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_user_updated": {
+          "name": "IDX_cli_sessions_user_updated",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cli_sessions_kilo_user_id_kilocode_users_id_fk": {
+          "name": "cli_sessions_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "cli_sessions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "cli_sessions_forked_from_cli_sessions_session_id_fk": {
+          "name": "cli_sessions_forked_from_cli_sessions_session_id_fk",
+          "tableFrom": "cli_sessions",
+          "tableTo": "cli_sessions",
+          "columnsFrom": [
+            "forked_from"
+          ],
+          "columnsTo": [
+            "session_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "cli_sessions_parent_session_id_cli_sessions_session_id_fk": {
+          "name": "cli_sessions_parent_session_id_cli_sessions_session_id_fk",
+          "tableFrom": "cli_sessions",
+          "tableTo": "cli_sessions",
+          "columnsFrom": [
+            "parent_session_id"
+          ],
+          "columnsTo": [
+            "session_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "cli_sessions_organization_id_organizations_id_fk": {
+          "name": "cli_sessions_organization_id_organizations_id_fk",
+          "tableFrom": "cli_sessions",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "cli_sessions_cloud_agent_session_id_unique": {
+          "name": "cli_sessions_cloud_agent_session_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "cloud_agent_session_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.cli_sessions_v2": {
+      "name": "cli_sessions_v2",
+      "schema": "",
+      "columns": {
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_id": {
+          "name": "public_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_session_id": {
+          "name": "parent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_scope_id": {
+          "name": "cloud_agent_session_scope_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_on_platform": {
+          "name": "created_on_platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unknown'"
+        },
+        "git_url": {
+          "name": "git_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_branch": {
+          "name": "git_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_updated_at": {
+          "name": "status_updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_activity_at": {
+          "name": "last_activity_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_cost_microdollars": {
+          "name": "total_cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_cli_sessions_v2_parent_session_id_kilo_user_id": {
+          "name": "IDX_cli_sessions_v2_parent_session_id_kilo_user_id",
+          "columns": [
+            {
+              "expression": "parent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_cli_sessions_v2_public_id": {
+          "name": "UQ_cli_sessions_v2_public_id",
+          "columns": [
+            {
+              "expression": "public_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cli_sessions_v2\".\"public_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_cli_sessions_v2_cloud_agent_session_id": {
+          "name": "UQ_cli_sessions_v2_cloud_agent_session_id",
+          "columns": [
+            {
+              "expression": "cloud_agent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cli_sessions_v2\".\"cloud_agent_session_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_v2_organization_id": {
+          "name": "IDX_cli_sessions_v2_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_v2_kilo_user_id": {
+          "name": "IDX_cli_sessions_v2_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_v2_created_at": {
+          "name": "IDX_cli_sessions_v2_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cli_sessions_v2_user_updated": {
+          "name": "IDX_cli_sessions_v2_user_updated",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "cli_sessions_v2_git_url_branch_idx": {
+          "name": "cli_sessions_v2_git_url_branch_idx",
+          "columns": [
+            {
+              "expression": "git_url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cli_sessions_v2_kilo_user_id_kilocode_users_id_fk": {
+          "name": "cli_sessions_v2_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "cli_sessions_v2",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "cli_sessions_v2_organization_id_organizations_id_fk": {
+          "name": "cli_sessions_v2_organization_id_organizations_id_fk",
+          "tableFrom": "cli_sessions_v2",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "cli_sessions_v2_parent_session_id_kilo_user_id_fk": {
+          "name": "cli_sessions_v2_parent_session_id_kilo_user_id_fk",
+          "tableFrom": "cli_sessions_v2",
+          "tableTo": "cli_sessions_v2",
+          "columnsFrom": [
+            "parent_session_id",
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "session_id",
+            "kilo_user_id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "cli_sessions_v2_session_id_kilo_user_id_pk": {
+          "name": "cli_sessions_v2_session_id_kilo_user_id_pk",
+          "columns": [
+            "session_id",
+            "kilo_user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_code_review_attempts": {
+      "name": "cloud_agent_code_review_attempts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "code_review_id": {
+          "name": "code_review_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempt_number": {
+          "name": "attempt_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "retry_of_attempt_id": {
+          "name": "retry_of_attempt_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "retry_reason": {
+          "name": "retry_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cli_session_id": {
+          "name": "cli_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "execution_id": {
+          "name": "execution_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analytics_enabled_at_dispatch": {
+          "name": "analytics_enabled_at_dispatch",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_reason": {
+          "name": "terminal_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_cloud_agent_code_review_attempts_review_attempt_number": {
+          "name": "UQ_cloud_agent_code_review_attempts_review_attempt_number",
+          "columns": [
+            {
+              "expression": "code_review_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "attempt_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_review_attempts_code_review_id": {
+          "name": "idx_cloud_agent_code_review_attempts_code_review_id",
+          "columns": [
+            {
+              "expression": "code_review_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_review_attempts_session_id": {
+          "name": "idx_cloud_agent_code_review_attempts_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_review_attempts_cli_session_id": {
+          "name": "idx_cloud_agent_code_review_attempts_cli_session_id",
+          "columns": [
+            {
+              "expression": "cli_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_review_attempts_status": {
+          "name": "idx_cloud_agent_code_review_attempts_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_review_attempts_retry_reason": {
+          "name": "idx_cloud_agent_code_review_attempts_retry_reason",
+          "columns": [
+            {
+              "expression": "retry_reason",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cloud_agent_code_review_attempts_code_review_id_cloud_agent_code_reviews_id_fk": {
+          "name": "cloud_agent_code_review_attempts_code_review_id_cloud_agent_code_reviews_id_fk",
+          "tableFrom": "cloud_agent_code_review_attempts",
+          "tableTo": "cloud_agent_code_reviews",
+          "columnsFrom": [
+            "code_review_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_code_review_attempts_retry_of_attempt_id_cloud_agent_code_review_attempts_id_fk": {
+          "name": "cloud_agent_code_review_attempts_retry_of_attempt_id_cloud_agent_code_review_attempts_id_fk",
+          "tableFrom": "cloud_agent_code_review_attempts",
+          "tableTo": "cloud_agent_code_review_attempts",
+          "columnsFrom": [
+            "retry_of_attempt_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "cloud_agent_code_review_attempts_attempt_number_check": {
+          "name": "cloud_agent_code_review_attempts_attempt_number_check",
+          "value": "\"cloud_agent_code_review_attempts\".\"attempt_number\" >= 1"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_code_reviews": {
+      "name": "cloud_agent_code_reviews",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manual_config": {
+          "name": "manual_config",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_type": {
+          "name": "review_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'standard'"
+        },
+        "trigger_source": {
+          "name": "trigger_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "council_result": {
+          "name": "council_result",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_title": {
+          "name": "pr_title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_author": {
+          "name": "pr_author",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_author_github_id": {
+          "name": "pr_author_github_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "base_ref": {
+          "name": "base_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "head_ref": {
+          "name": "head_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "head_sha": {
+          "name": "head_sha",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'github'"
+        },
+        "platform_project_id": {
+          "name": "platform_project_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cli_session_id": {
+          "name": "cli_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "dispatch_reservation_id": {
+          "name": "dispatch_reservation_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_reason": {
+          "name": "terminal_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "agent_version": {
+          "name": "agent_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'v1'"
+        },
+        "check_run_id": {
+          "name": "check_run_id",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repository_review_instructions_used": {
+          "name": "repository_review_instructions_used",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "repository_review_instructions_ref": {
+          "name": "repository_review_instructions_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repository_review_instructions_truncated": {
+          "name": "repository_review_instructions_truncated",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "previous_summary_body": {
+          "name": "previous_summary_body",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "previous_summary_head_sha": {
+          "name": "previous_summary_head_sha",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_tokens_in": {
+          "name": "total_tokens_in",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_tokens_out": {
+          "name": "total_tokens_out",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_cost_musd": {
+          "name": "total_cost_musd",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_cloud_agent_code_reviews_webhook_integration_repo_pr_sha": {
+          "name": "UQ_cloud_agent_code_reviews_webhook_integration_repo_pr_sha",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "pr_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "head_sha",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cloud_agent_code_reviews\".\"manual_config\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_cloud_agent_code_reviews_active_provider_publisher": {
+          "name": "UQ_cloud_agent_code_reviews_active_provider_publisher",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "pr_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cloud_agent_code_reviews\".\"platform_integration_id\" IS NOT NULL\n        AND \"cloud_agent_code_reviews\".\"status\" IN ('pending', 'queued', 'running')\n        AND (\"cloud_agent_code_reviews\".\"manual_config\" IS NULL OR \"cloud_agent_code_reviews\".\"manual_config\"->>'outputMode' = 'provider')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_owned_by_org_id": {
+          "name": "idx_cloud_agent_code_reviews_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_owned_by_user_id": {
+          "name": "idx_cloud_agent_code_reviews_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_session_id": {
+          "name": "idx_cloud_agent_code_reviews_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_cli_session_id": {
+          "name": "idx_cloud_agent_code_reviews_cli_session_id",
+          "columns": [
+            {
+              "expression": "cli_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_status": {
+          "name": "idx_cloud_agent_code_reviews_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_repo": {
+          "name": "idx_cloud_agent_code_reviews_repo",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_pr_number": {
+          "name": "idx_cloud_agent_code_reviews_pr_number",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "pr_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_created_at": {
+          "name": "idx_cloud_agent_code_reviews_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_cloud_agent_code_reviews_pr_author_github_id": {
+          "name": "idx_cloud_agent_code_reviews_pr_author_github_id",
+          "columns": [
+            {
+              "expression": "pr_author_github_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cloud_agent_code_reviews_owned_by_organization_id_organizations_id_fk": {
+          "name": "cloud_agent_code_reviews_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "cloud_agent_code_reviews",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_code_reviews_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "cloud_agent_code_reviews_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "cloud_agent_code_reviews",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_code_reviews_platform_integration_id_platform_integrations_id_fk": {
+          "name": "cloud_agent_code_reviews_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "cloud_agent_code_reviews",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "cloud_agent_code_reviews_owner_check": {
+          "name": "cloud_agent_code_reviews_owner_check",
+          "value": "(\n        (\"cloud_agent_code_reviews\".\"owned_by_user_id\" IS NOT NULL AND \"cloud_agent_code_reviews\".\"owned_by_organization_id\" IS NULL) OR\n        (\"cloud_agent_code_reviews\".\"owned_by_user_id\" IS NULL AND \"cloud_agent_code_reviews\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_feedback": {
+      "name": "cloud_agent_feedback",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_type": {
+          "name": "session_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repository": {
+          "name": "repository",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_streaming": {
+          "name": "is_streaming",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "message_count": {
+          "name": "message_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "feedback_text": {
+          "name": "feedback_text",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recent_messages": {
+          "name": "recent_messages",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_cloud_agent_feedback_created_at": {
+          "name": "IDX_cloud_agent_feedback_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_feedback_kilo_user_id": {
+          "name": "IDX_cloud_agent_feedback_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_feedback_cloud_agent_session_id": {
+          "name": "IDX_cloud_agent_feedback_cloud_agent_session_id",
+          "columns": [
+            {
+              "expression": "cloud_agent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cloud_agent_feedback_kilo_user_id_kilocode_users_id_fk": {
+          "name": "cloud_agent_feedback_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "cloud_agent_feedback",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "cloud_agent_feedback_organization_id_organizations_id_fk": {
+          "name": "cloud_agent_feedback_organization_id_organizations_id_fk",
+          "tableFrom": "cloud_agent_feedback",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_session_runs": {
+      "name": "cloud_agent_session_runs",
+      "schema": "",
+      "columns": {
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "message_id": {
+          "name": "message_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "wrapper_run_id": {
+          "name": "wrapper_run_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "queued_at": {
+          "name": "queued_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dispatch_accepted_at": {
+          "name": "dispatch_accepted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "agent_activity_observed_at": {
+          "name": "agent_activity_observed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_stage": {
+          "name": "failure_stage",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_responsibility": {
+          "name": "failure_responsibility",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_reason": {
+          "name": "failure_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message_redacted": {
+          "name": "error_message_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_expires_at": {
+          "name": "error_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_cloud_agent_session_runs_wrapper_run_id": {
+          "name": "IDX_cloud_agent_session_runs_wrapper_run_id",
+          "columns": [
+            {
+              "expression": "wrapper_run_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_session_runs\".\"wrapper_run_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_session_queued": {
+          "name": "IDX_cloud_agent_session_runs_session_queued",
+          "columns": [
+            {
+              "expression": "cloud_agent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_queued_at": {
+          "name": "IDX_cloud_agent_session_runs_queued_at",
+          "columns": [
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_terminal_at": {
+          "name": "IDX_cloud_agent_session_runs_terminal_at",
+          "columns": [
+            {
+              "expression": "terminal_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_status_terminal": {
+          "name": "IDX_cloud_agent_session_runs_status_terminal",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "terminal_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_failure_terminal": {
+          "name": "IDX_cloud_agent_session_runs_failure_terminal",
+          "columns": [
+            {
+              "expression": "failure_stage",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "failure_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "terminal_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_responsibility_reason_terminal": {
+          "name": "IDX_cloud_agent_session_runs_responsibility_reason_terminal",
+          "columns": [
+            {
+              "expression": "failure_responsibility",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "failure_reason",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "terminal_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_session_runs\".\"status\" = 'failed'",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_session_runs_error_expires_at": {
+          "name": "IDX_cloud_agent_session_runs_error_expires_at",
+          "columns": [
+            {
+              "expression": "error_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_session_runs\".\"error_expires_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cloud_agent_session_runs_cloud_agent_session_id_cloud_agent_sessions_cloud_agent_session_id_fk": {
+          "name": "cloud_agent_session_runs_cloud_agent_session_id_cloud_agent_sessions_cloud_agent_session_id_fk",
+          "tableFrom": "cloud_agent_session_runs",
+          "tableTo": "cloud_agent_sessions",
+          "columnsFrom": [
+            "cloud_agent_session_id"
+          ],
+          "columnsTo": [
+            "cloud_agent_session_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "cloud_agent_session_runs_cloud_agent_session_id_message_id_pk": {
+          "name": "cloud_agent_session_runs_cloud_agent_session_id_message_id_pk",
+          "columns": [
+            "cloud_agent_session_id",
+            "message_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "cloud_agent_session_runs_status_check": {
+          "name": "cloud_agent_session_runs_status_check",
+          "value": "\"cloud_agent_session_runs\".\"status\" IN ('queued', 'accepted', 'completed', 'failed', 'interrupted')"
+        },
+        "cloud_agent_session_runs_error_message_bounded_check": {
+          "name": "cloud_agent_session_runs_error_message_bounded_check",
+          "value": "\"cloud_agent_session_runs\".\"error_message_redacted\" IS NULL OR char_length(\"cloud_agent_session_runs\".\"error_message_redacted\") <= 4096"
+        },
+        "cloud_agent_session_runs_error_expiry_check": {
+          "name": "cloud_agent_session_runs_error_expiry_check",
+          "value": "(\"cloud_agent_session_runs\".\"error_message_redacted\" IS NULL AND \"cloud_agent_session_runs\".\"error_expires_at\" IS NULL) OR\n        (\"cloud_agent_session_runs\".\"error_message_redacted\" IS NOT NULL AND \"cloud_agent_session_runs\".\"error_expires_at\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_sessions": {
+      "name": "cloud_agent_sessions",
+      "schema": "",
+      "columns": {
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "kilo_session_id": {
+          "name": "kilo_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "initial_message_id": {
+          "name": "initial_message_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sandbox_id": {
+          "name": "sandbox_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "failure_at": {
+          "name": "failure_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_stage": {
+          "name": "failure_stage",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_responsibility": {
+          "name": "failure_responsibility",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_reason": {
+          "name": "failure_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message_redacted": {
+          "name": "error_message_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_expires_at": {
+          "name": "error_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_cloud_agent_sessions_kilo_session_id": {
+          "name": "UQ_cloud_agent_sessions_kilo_session_id",
+          "columns": [
+            {
+              "expression": "kilo_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_cloud_agent_sessions_initial_message_id": {
+          "name": "UQ_cloud_agent_sessions_initial_message_id",
+          "columns": [
+            {
+              "expression": "initial_message_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_sandbox_id": {
+          "name": "IDX_cloud_agent_sessions_sandbox_id",
+          "columns": [
+            {
+              "expression": "sandbox_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_sessions\".\"sandbox_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_created_at": {
+          "name": "IDX_cloud_agent_sessions_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_failure_created": {
+          "name": "IDX_cloud_agent_sessions_failure_created",
+          "columns": [
+            {
+              "expression": "failure_stage",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "failure_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_failure_at": {
+          "name": "IDX_cloud_agent_sessions_failure_at",
+          "columns": [
+            {
+              "expression": "failure_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_sessions\".\"failure_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_failure_classification_at": {
+          "name": "IDX_cloud_agent_sessions_failure_classification_at",
+          "columns": [
+            {
+              "expression": "failure_stage",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "failure_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "failure_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_sessions\".\"failure_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_sessions_error_expires_at": {
+          "name": "IDX_cloud_agent_sessions_error_expires_at",
+          "columns": [
+            {
+              "expression": "error_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"cloud_agent_sessions\".\"error_expires_at\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "cloud_agent_sessions_failure_classification_check": {
+          "name": "cloud_agent_sessions_failure_classification_check",
+          "value": "(\"cloud_agent_sessions\".\"failure_at\" IS NULL AND \"cloud_agent_sessions\".\"failure_stage\" IS NULL AND \"cloud_agent_sessions\".\"failure_code\" IS NULL) OR\n        (\"cloud_agent_sessions\".\"failure_at\" IS NOT NULL AND \"cloud_agent_sessions\".\"failure_stage\" = 'sandbox_identity' AND \"cloud_agent_sessions\".\"failure_code\" = 'sandbox_id_derivation_failed') OR\n        (\"cloud_agent_sessions\".\"failure_at\" IS NOT NULL AND \"cloud_agent_sessions\".\"failure_stage\" = 'registration' AND \"cloud_agent_sessions\".\"failure_code\" = 'do_registration_rejected') OR\n        (\"cloud_agent_sessions\".\"failure_at\" IS NOT NULL AND \"cloud_agent_sessions\".\"failure_stage\" = 'initial_admission' AND \"cloud_agent_sessions\".\"failure_code\" IN ('initial_admission_rejected', 'initial_queue_full', 'invalid_initial_intent')) OR\n        (\"cloud_agent_sessions\".\"failure_at\" IS NOT NULL AND \"cloud_agent_sessions\".\"failure_stage\" = 'transport' AND \"cloud_agent_sessions\".\"failure_code\" = 'do_rpc_outcome_unknown')"
+        },
+        "cloud_agent_sessions_error_message_bounded_check": {
+          "name": "cloud_agent_sessions_error_message_bounded_check",
+          "value": "\"cloud_agent_sessions\".\"error_message_redacted\" IS NULL OR char_length(\"cloud_agent_sessions\".\"error_message_redacted\") <= 4096"
+        },
+        "cloud_agent_sessions_error_expiry_check": {
+          "name": "cloud_agent_sessions_error_expiry_check",
+          "value": "(\"cloud_agent_sessions\".\"error_message_redacted\" IS NULL AND \"cloud_agent_sessions\".\"error_expires_at\" IS NULL) OR\n        (\"cloud_agent_sessions\".\"error_message_redacted\" IS NOT NULL AND \"cloud_agent_sessions\".\"error_expires_at\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cloud_agent_webhook_triggers": {
+      "name": "cloud_agent_webhook_triggers",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "trigger_id": {
+          "name": "trigger_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_type": {
+          "name": "target_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'cloud_agent'"
+        },
+        "kiloclaw_instance_id": {
+          "name": "kiloclaw_instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "activation_mode": {
+          "name": "activation_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'webhook'"
+        },
+        "cron_expression": {
+          "name": "cron_expression",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cron_timezone": {
+          "name": "cron_timezone",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'UTC'"
+        },
+        "github_repo": {
+          "name": "github_repo",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "profile_id": {
+          "name": "profile_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_cloud_agent_webhook_triggers_user_trigger": {
+          "name": "UQ_cloud_agent_webhook_triggers_user_trigger",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "trigger_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cloud_agent_webhook_triggers\".\"user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_cloud_agent_webhook_triggers_org_trigger": {
+          "name": "UQ_cloud_agent_webhook_triggers_org_trigger",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "trigger_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"cloud_agent_webhook_triggers\".\"organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_webhook_triggers_user": {
+          "name": "IDX_cloud_agent_webhook_triggers_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_webhook_triggers_org": {
+          "name": "IDX_cloud_agent_webhook_triggers_org",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_webhook_triggers_active": {
+          "name": "IDX_cloud_agent_webhook_triggers_active",
+          "columns": [
+            {
+              "expression": "is_active",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_cloud_agent_webhook_triggers_profile": {
+          "name": "IDX_cloud_agent_webhook_triggers_profile",
+          "columns": [
+            {
+              "expression": "profile_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "cloud_agent_webhook_triggers_user_id_kilocode_users_id_fk": {
+          "name": "cloud_agent_webhook_triggers_user_id_kilocode_users_id_fk",
+          "tableFrom": "cloud_agent_webhook_triggers",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_webhook_triggers_organization_id_organizations_id_fk": {
+          "name": "cloud_agent_webhook_triggers_organization_id_organizations_id_fk",
+          "tableFrom": "cloud_agent_webhook_triggers",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_webhook_triggers_kiloclaw_instance_id_kiloclaw_instances_id_fk": {
+          "name": "cloud_agent_webhook_triggers_kiloclaw_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "cloud_agent_webhook_triggers",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "kiloclaw_instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "cloud_agent_webhook_triggers_profile_id_agent_environment_profiles_id_fk": {
+          "name": "cloud_agent_webhook_triggers_profile_id_agent_environment_profiles_id_fk",
+          "tableFrom": "cloud_agent_webhook_triggers",
+          "tableTo": "agent_environment_profiles",
+          "columnsFrom": [
+            "profile_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "CHK_cloud_agent_webhook_triggers_owner": {
+          "name": "CHK_cloud_agent_webhook_triggers_owner",
+          "value": "(\n        (\"cloud_agent_webhook_triggers\".\"user_id\" IS NOT NULL AND \"cloud_agent_webhook_triggers\".\"organization_id\" IS NULL) OR\n        (\"cloud_agent_webhook_triggers\".\"user_id\" IS NULL AND \"cloud_agent_webhook_triggers\".\"organization_id\" IS NOT NULL)\n      )"
+        },
+        "CHK_cloud_agent_webhook_triggers_cloud_agent_fields": {
+          "name": "CHK_cloud_agent_webhook_triggers_cloud_agent_fields",
+          "value": "(\n        \"cloud_agent_webhook_triggers\".\"target_type\" != 'cloud_agent' OR\n        (\"cloud_agent_webhook_triggers\".\"github_repo\" IS NOT NULL AND \"cloud_agent_webhook_triggers\".\"profile_id\" IS NOT NULL)\n      )"
+        },
+        "CHK_cloud_agent_webhook_triggers_kiloclaw_fields": {
+          "name": "CHK_cloud_agent_webhook_triggers_kiloclaw_fields",
+          "value": "(\n        \"cloud_agent_webhook_triggers\".\"target_type\" != 'kiloclaw_chat' OR\n        \"cloud_agent_webhook_triggers\".\"kiloclaw_instance_id\" IS NOT NULL\n      )"
+        },
+        "CHK_cloud_agent_webhook_triggers_scheduled_fields": {
+          "name": "CHK_cloud_agent_webhook_triggers_scheduled_fields",
+          "value": "(\n        \"cloud_agent_webhook_triggers\".\"activation_mode\" != 'scheduled' OR\n        \"cloud_agent_webhook_triggers\".\"cron_expression\" IS NOT NULL\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.cloud_billing_sku": {
+      "name": "cloud_billing_sku",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "unit": {
+          "name": "unit",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "rate_cents_per_unit": {
+          "name": "rate_cents_per_unit",
+          "type": "numeric(24, 12)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "accepts_new_usage": {
+          "name": "accepts_new_usage",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "cloud_billing_sku_created_by_user_id_kilocode_users_id_fk": {
+          "name": "cloud_billing_sku_created_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "cloud_billing_sku",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "cloud_billing_sku_id_format": {
+          "name": "cloud_billing_sku_id_format",
+          "value": "\"cloud_billing_sku\".\"id\" ~ '^[a-z0-9][a-z0-9-]{2,79}$'"
+        },
+        "cloud_billing_sku_name_nonempty": {
+          "name": "cloud_billing_sku_name_nonempty",
+          "value": "length(btrim(\"cloud_billing_sku\".\"name\")) > 0"
+        },
+        "cloud_billing_sku_rate_positive": {
+          "name": "cloud_billing_sku_rate_positive",
+          "value": "\"cloud_billing_sku\".\"rate_cents_per_unit\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.code_indexing_manifest": {
+      "name": "code_indexing_manifest",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "git_branch": {
+          "name": "git_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "file_hash": {
+          "name": "file_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "file_path": {
+          "name": "file_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "chunk_count": {
+          "name": "chunk_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "total_lines": {
+          "name": "total_lines",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_ai_lines": {
+          "name": "total_ai_lines",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_code_indexing_manifest_organization_id": {
+          "name": "IDX_code_indexing_manifest_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_manifest_kilo_user_id": {
+          "name": "IDX_code_indexing_manifest_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_manifest_project_id": {
+          "name": "IDX_code_indexing_manifest_project_id",
+          "columns": [
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_manifest_git_branch": {
+          "name": "IDX_code_indexing_manifest_git_branch",
+          "columns": [
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_manifest_created_at": {
+          "name": "IDX_code_indexing_manifest_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "code_indexing_manifest_kilo_user_id_kilocode_users_id_fk": {
+          "name": "code_indexing_manifest_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "code_indexing_manifest",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_code_indexing_manifest_org_user_project_hash_branch": {
+          "name": "UQ_code_indexing_manifest_org_user_project_hash_branch",
+          "nullsNotDistinct": true,
+          "columns": [
+            "organization_id",
+            "kilo_user_id",
+            "project_id",
+            "file_path",
+            "git_branch"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.code_indexing_search": {
+      "name": "code_indexing_search",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "query": {
+          "name": "query",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_code_indexing_search_organization_id": {
+          "name": "IDX_code_indexing_search_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_search_kilo_user_id": {
+          "name": "IDX_code_indexing_search_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_search_project_id": {
+          "name": "IDX_code_indexing_search_project_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_code_indexing_search_created_at": {
+          "name": "IDX_code_indexing_search_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "code_indexing_search_kilo_user_id_kilocode_users_id_fk": {
+          "name": "code_indexing_search_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "code_indexing_search",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.code_review_analytics_findings": {
+      "name": "code_review_analytics_findings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "analytics_result_id": {
+          "name": "analytics_result_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "ordinal": {
+          "name": "ordinal",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "severity": {
+          "name": "severity",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "category": {
+          "name": "category",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "security_class": {
+          "name": "security_class",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "code_review_analytics_findings_analytics_result_id_code_review_analytics_results_id_fk": {
+          "name": "code_review_analytics_findings_analytics_result_id_code_review_analytics_results_id_fk",
+          "tableFrom": "code_review_analytics_findings",
+          "tableTo": "code_review_analytics_results",
+          "columnsFrom": [
+            "analytics_result_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_code_review_analytics_findings_result_ordinal": {
+          "name": "UQ_code_review_analytics_findings_result_ordinal",
+          "nullsNotDistinct": false,
+          "columns": [
+            "analytics_result_id",
+            "ordinal"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "code_review_analytics_findings_severity_check": {
+          "name": "code_review_analytics_findings_severity_check",
+          "value": "\"code_review_analytics_findings\".\"severity\" IN ('critical', 'warning', 'suggestion')"
+        },
+        "code_review_analytics_findings_category_check": {
+          "name": "code_review_analytics_findings_category_check",
+          "value": "\"code_review_analytics_findings\".\"category\" IN ('security', 'correctness', 'reliability', 'data_integrity', 'performance', 'compatibility', 'maintainability', 'test_quality', 'documentation', 'accessibility', 'other')"
+        },
+        "code_review_analytics_findings_security_class_check": {
+          "name": "code_review_analytics_findings_security_class_check",
+          "value": "\"code_review_analytics_findings\".\"security_class\" IN ('auth_access', 'injection', 'data_protection', 'request_resource_boundary', 'deserialization_object_integrity', 'dependency_supply_chain', 'memory_safety', 'availability', 'concurrency', 'security_configuration', 'other')"
+        },
+        "code_review_analytics_findings_ordinal_check": {
+          "name": "code_review_analytics_findings_ordinal_check",
+          "value": "\"code_review_analytics_findings\".\"ordinal\" >= 0"
+        },
+        "code_review_analytics_findings_security_class_presence_check": {
+          "name": "code_review_analytics_findings_security_class_presence_check",
+          "value": "(\n        (\"code_review_analytics_findings\".\"category\" = 'security' AND \"code_review_analytics_findings\".\"security_class\" IS NOT NULL) OR\n        (\"code_review_analytics_findings\".\"category\" <> 'security' AND \"code_review_analytics_findings\".\"security_class\" IS NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.code_review_analytics_results": {
+      "name": "code_review_analytics_results",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "code_review_id": {
+          "name": "code_review_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_attempt_id": {
+          "name": "source_attempt_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "capture_status": {
+          "name": "capture_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "schema_version": {
+          "name": "schema_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "taxonomy_version": {
+          "name": "taxonomy_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "change_type": {
+          "name": "change_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "impact_level": {
+          "name": "impact_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "complexity_level": {
+          "name": "complexity_level",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "classification_confidence": {
+          "name": "classification_confidence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finalized_at": {
+          "name": "finalized_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_code_review_analytics_results_source_attempt_id": {
+          "name": "idx_code_review_analytics_results_source_attempt_id",
+          "columns": [
+            {
+              "expression": "source_attempt_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_analytics_results_finalized_at": {
+          "name": "idx_code_review_analytics_results_finalized_at",
+          "columns": [
+            {
+              "expression": "finalized_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "code_review_analytics_results_code_review_id_cloud_agent_code_reviews_id_fk": {
+          "name": "code_review_analytics_results_code_review_id_cloud_agent_code_reviews_id_fk",
+          "tableFrom": "code_review_analytics_results",
+          "tableTo": "cloud_agent_code_reviews",
+          "columnsFrom": [
+            "code_review_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "code_review_analytics_results_source_attempt_id_cloud_agent_code_review_attempts_id_fk": {
+          "name": "code_review_analytics_results_source_attempt_id_cloud_agent_code_review_attempts_id_fk",
+          "tableFrom": "code_review_analytics_results",
+          "tableTo": "cloud_agent_code_review_attempts",
+          "columnsFrom": [
+            "source_attempt_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_code_review_analytics_results_code_review_id": {
+          "name": "UQ_code_review_analytics_results_code_review_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "code_review_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "code_review_analytics_results_capture_status_check": {
+          "name": "code_review_analytics_results_capture_status_check",
+          "value": "\"code_review_analytics_results\".\"capture_status\" IN ('captured', 'missing', 'invalid', 'omitted')"
+        },
+        "code_review_analytics_results_change_type_check": {
+          "name": "code_review_analytics_results_change_type_check",
+          "value": "\"code_review_analytics_results\".\"change_type\" IN ('bug_fix', 'feature', 'refactor', 'maintenance', 'dependency', 'test', 'documentation', 'mixed', 'other')"
+        },
+        "code_review_analytics_results_impact_level_check": {
+          "name": "code_review_analytics_results_impact_level_check",
+          "value": "\"code_review_analytics_results\".\"impact_level\" IN ('low', 'medium', 'high')"
+        },
+        "code_review_analytics_results_complexity_level_check": {
+          "name": "code_review_analytics_results_complexity_level_check",
+          "value": "\"code_review_analytics_results\".\"complexity_level\" IN ('low', 'medium', 'high')"
+        },
+        "code_review_analytics_results_classification_confidence_check": {
+          "name": "code_review_analytics_results_classification_confidence_check",
+          "value": "\"code_review_analytics_results\".\"classification_confidence\" IN ('low', 'medium', 'high')"
+        },
+        "code_review_analytics_results_classification_presence_check": {
+          "name": "code_review_analytics_results_classification_presence_check",
+          "value": "(\n        (\n          \"code_review_analytics_results\".\"capture_status\" = 'captured'\n          AND \"code_review_analytics_results\".\"change_type\" IS NOT NULL\n          AND \"code_review_analytics_results\".\"impact_level\" IS NOT NULL\n          AND \"code_review_analytics_results\".\"complexity_level\" IS NOT NULL\n          AND \"code_review_analytics_results\".\"classification_confidence\" IS NOT NULL\n        ) OR (\n          \"code_review_analytics_results\".\"capture_status\" <> 'captured'\n          AND \"code_review_analytics_results\".\"change_type\" IS NULL\n          AND \"code_review_analytics_results\".\"impact_level\" IS NULL\n          AND \"code_review_analytics_results\".\"complexity_level\" IS NULL\n          AND \"code_review_analytics_results\".\"classification_confidence\" IS NULL\n        )\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.code_review_feedback_events": {
+      "name": "code_review_feedback_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_comment_id": {
+          "name": "kilo_comment_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reply_excerpt": {
+          "name": "reply_excerpt",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_comment_excerpt": {
+          "name": "kilo_comment_excerpt",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dedupe_hash": {
+          "name": "dedupe_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_code_review_feedback_events_owned_by_org_id": {
+          "name": "idx_code_review_feedback_events_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_feedback_events_owned_by_user_id": {
+          "name": "idx_code_review_feedback_events_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_feedback_events_platform_repo": {
+          "name": "idx_code_review_feedback_events_platform_repo",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_feedback_events_created_at": {
+          "name": "idx_code_review_feedback_events_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "code_review_feedback_events_owned_by_organization_id_organizations_id_fk": {
+          "name": "code_review_feedback_events_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "code_review_feedback_events",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "code_review_feedback_events_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "code_review_feedback_events_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "code_review_feedback_events",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_code_review_feedback_events_dedupe_hash": {
+          "name": "UQ_code_review_feedback_events_dedupe_hash",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_hash"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "code_review_feedback_events_owner_check": {
+          "name": "code_review_feedback_events_owner_check",
+          "value": "(\n        (\"code_review_feedback_events\".\"owned_by_user_id\" IS NOT NULL AND \"code_review_feedback_events\".\"owned_by_organization_id\" IS NULL) OR\n        (\"code_review_feedback_events\".\"owned_by_user_id\" IS NULL AND \"code_review_feedback_events\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.code_review_memory_proposals": {
+      "name": "code_review_memory_proposals",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'open'"
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "rationale": {
+          "name": "rationale",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "proposed_markdown": {
+          "name": "proposed_markdown",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "evidence": {
+          "name": "evidence",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::jsonb"
+        },
+        "positive_count": {
+          "name": "positive_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "negative_count": {
+          "name": "negative_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "neutral_count": {
+          "name": "neutral_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "change_request_url": {
+          "name": "change_request_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_code_review_memory_proposals_owned_by_org_id": {
+          "name": "idx_code_review_memory_proposals_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_memory_proposals_owned_by_user_id": {
+          "name": "idx_code_review_memory_proposals_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_memory_proposals_platform_repo_status": {
+          "name": "idx_code_review_memory_proposals_platform_repo_status",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_code_review_memory_proposals_updated_at": {
+          "name": "idx_code_review_memory_proposals_updated_at",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_code_review_memory_proposals_org_active_scope": {
+          "name": "UQ_code_review_memory_proposals_org_active_scope",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"code_review_memory_proposals\".\"owned_by_organization_id\" IS NOT NULL AND \"code_review_memory_proposals\".\"status\" IN ('open', 'edited', 'opening_change_request')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_code_review_memory_proposals_user_active_scope": {
+          "name": "UQ_code_review_memory_proposals_user_active_scope",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"code_review_memory_proposals\".\"owned_by_user_id\" IS NOT NULL AND \"code_review_memory_proposals\".\"status\" IN ('open', 'edited', 'opening_change_request')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "code_review_memory_proposals_owned_by_organization_id_organizations_id_fk": {
+          "name": "code_review_memory_proposals_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "code_review_memory_proposals",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "code_review_memory_proposals_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "code_review_memory_proposals_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "code_review_memory_proposals",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "code_review_memory_proposals_owner_check": {
+          "name": "code_review_memory_proposals_owner_check",
+          "value": "(\n        (\"code_review_memory_proposals\".\"owned_by_user_id\" IS NOT NULL AND \"code_review_memory_proposals\".\"owned_by_organization_id\" IS NULL) OR\n        (\"code_review_memory_proposals\".\"owned_by_user_id\" IS NULL AND \"code_review_memory_proposals\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.coding_plan_availability_intents": {
+      "name": "coding_plan_availability_intents",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plan_id": {
+          "name": "plan_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_coding_plan_availability_intents_user_plan": {
+          "name": "UQ_coding_plan_availability_intents_user_plan",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_availability_intents_plan": {
+          "name": "IDX_coding_plan_availability_intents_plan",
+          "columns": [
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "coding_plan_availability_intents_user_id_kilocode_users_id_fk": {
+          "name": "coding_plan_availability_intents_user_id_kilocode_users_id_fk",
+          "tableFrom": "coding_plan_availability_intents",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.coding_plan_key_inventory": {
+      "name": "coding_plan_key_inventory",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "plan_id": {
+          "name": "plan_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "upstream_plan_id": {
+          "name": "upstream_plan_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "upstream_usage_id": {
+          "name": "upstream_usage_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "encrypted_api_key": {
+          "name": "encrypted_api_key",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_fingerprint": {
+          "name": "credential_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "assigned_to_user_id": {
+          "name": "assigned_to_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "assigned_at": {
+          "name": "assigned_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_requested_at": {
+          "name": "revocation_requested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_attempt_count": {
+          "name": "revocation_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_revocation_error": {
+          "name": "last_revocation_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_coding_plan_key_inv_fingerprint": {
+          "name": "UQ_coding_plan_key_inv_fingerprint",
+          "columns": [
+            {
+              "expression": "credential_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_coding_plan_key_inv_provider_usage_id": {
+          "name": "UQ_coding_plan_key_inv_provider_usage_id",
+          "columns": [
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "upstream_usage_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"coding_plan_key_inventory\".\"upstream_usage_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_key_inv_plan_status": {
+          "name": "IDX_coding_plan_key_inv_plan_status",
+          "columns": [
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_key_inv_available": {
+          "name": "IDX_coding_plan_key_inv_available",
+          "columns": [
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"coding_plan_key_inventory\".\"status\" = 'available'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "coding_plan_key_inventory_assigned_to_user_id_kilocode_users_id_fk": {
+          "name": "coding_plan_key_inventory_assigned_to_user_id_kilocode_users_id_fk",
+          "tableFrom": "coding_plan_key_inventory",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "assigned_to_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "coding_plan_key_inventory_status_check": {
+          "name": "coding_plan_key_inventory_status_check",
+          "value": "\"coding_plan_key_inventory\".\"status\" IN ('available', 'assigned', 'revocation_pending', 'revoked', 'revocation_failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.coding_plan_subscriptions": {
+      "name": "coding_plan_subscriptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plan_id": {
+          "name": "plan_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_id": {
+          "name": "provider_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key_inventory_id": {
+          "name": "key_inventory_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "installed_byok_key_id": {
+          "name": "installed_byok_key_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cost_microdollars": {
+          "name": "cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "billing_period_days": {
+          "name": "billing_period_days",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "current_period_start": {
+          "name": "current_period_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "current_period_end": {
+          "name": "current_period_end",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_renewal_at": {
+          "name": "credit_renewal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cancel_at_period_end": {
+          "name": "cancel_at_period_end",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "past_due_started_at": {
+          "name": "past_due_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "payment_grace_expires_at": {
+          "name": "payment_grace_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_top_up_attempted_for_due": {
+          "name": "auto_top_up_attempted_for_due",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "canceled_at": {
+          "name": "canceled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancellation_reason": {
+          "name": "cancellation_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_coding_plan_sub_live_user_plan": {
+          "name": "UQ_coding_plan_sub_live_user_plan",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"coding_plan_subscriptions\".\"status\" IN ('active', 'past_due')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_coding_plan_sub_live_user_provider": {
+          "name": "UQ_coding_plan_sub_live_user_provider",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"coding_plan_subscriptions\".\"status\" IN ('active', 'past_due')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_sub_status": {
+          "name": "IDX_coding_plan_sub_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_sub_renewal": {
+          "name": "IDX_coding_plan_sub_renewal",
+          "columns": [
+            {
+              "expression": "credit_renewal_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_sub_inventory": {
+          "name": "IDX_coding_plan_sub_inventory",
+          "columns": [
+            {
+              "expression": "key_inventory_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "coding_plan_subscriptions_user_id_kilocode_users_id_fk": {
+          "name": "coding_plan_subscriptions_user_id_kilocode_users_id_fk",
+          "tableFrom": "coding_plan_subscriptions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "coding_plan_subscriptions_key_inventory_id_coding_plan_key_inventory_id_fk": {
+          "name": "coding_plan_subscriptions_key_inventory_id_coding_plan_key_inventory_id_fk",
+          "tableFrom": "coding_plan_subscriptions",
+          "tableTo": "coding_plan_key_inventory",
+          "columnsFrom": [
+            "key_inventory_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "coding_plan_subscriptions_installed_byok_key_id_byok_api_keys_id_fk": {
+          "name": "coding_plan_subscriptions_installed_byok_key_id_byok_api_keys_id_fk",
+          "tableFrom": "coding_plan_subscriptions",
+          "tableTo": "byok_api_keys",
+          "columnsFrom": [
+            "installed_byok_key_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "coding_plan_subscriptions_status_check": {
+          "name": "coding_plan_subscriptions_status_check",
+          "value": "\"coding_plan_subscriptions\".\"status\" IN ('active', 'past_due', 'canceled')"
+        },
+        "coding_plan_subscriptions_live_access_check": {
+          "name": "coding_plan_subscriptions_live_access_check",
+          "value": "\"coding_plan_subscriptions\".\"status\" = 'canceled' OR \"coding_plan_subscriptions\".\"key_inventory_id\" IS NOT NULL"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.coding_plan_terms": {
+      "name": "coding_plan_terms",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plan_id": {
+          "name": "plan_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "period_start": {
+          "name": "period_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "period_end": {
+          "name": "period_end",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cost_microdollars": {
+          "name": "cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_transaction_id": {
+          "name": "credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_coding_plan_terms_request": {
+          "name": "UQ_coding_plan_terms_request",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "plan_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_coding_plan_terms_subscription": {
+          "name": "IDX_coding_plan_terms_subscription",
+          "columns": [
+            {
+              "expression": "subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "coding_plan_terms_subscription_id_coding_plan_subscriptions_id_fk": {
+          "name": "coding_plan_terms_subscription_id_coding_plan_subscriptions_id_fk",
+          "tableFrom": "coding_plan_terms",
+          "tableTo": "coding_plan_subscriptions",
+          "columnsFrom": [
+            "subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "coding_plan_terms_user_id_kilocode_users_id_fk": {
+          "name": "coding_plan_terms_user_id_kilocode_users_id_fk",
+          "tableFrom": "coding_plan_terms",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "coding_plan_terms_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "coding_plan_terms_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "coding_plan_terms",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "coding_plan_terms_kind_check": {
+          "name": "coding_plan_terms_kind_check",
+          "value": "\"coding_plan_terms\".\"kind\" IN ('activation', 'extension', 'renewal')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.compute_usage_charge": {
+      "name": "compute_usage_charge",
+      "schema": "",
+      "columns": {
+        "usage_source": {
+          "name": "usage_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "usage_source_id": {
+          "name": "usage_source_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_billing_sku_id": {
+          "name": "cloud_billing_sku_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "quantity": {
+          "name": "quantity",
+          "type": "numeric(24, 12)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "settled_quantity_after": {
+          "name": "settled_quantity_after",
+          "type": "numeric(24, 12)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "rate_cents_per_unit": {
+          "name": "rate_cents_per_unit",
+          "type": "numeric(24, 12)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_microdollars": {
+          "name": "amount_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "IDX_compute_usage_charge_user_created": {
+          "name": "IDX_compute_usage_charge_user_created",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_compute_usage_charge_organization_created": {
+          "name": "IDX_compute_usage_charge_organization_created",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "compute_usage_charge_user_id_kilocode_users_id_fk": {
+          "name": "compute_usage_charge_user_id_kilocode_users_id_fk",
+          "tableFrom": "compute_usage_charge",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "compute_usage_charge_organization_id_organizations_id_fk": {
+          "name": "compute_usage_charge_organization_id_organizations_id_fk",
+          "tableFrom": "compute_usage_charge",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "compute_usage_charge_cloud_billing_sku_id_cloud_billing_sku_id_fk": {
+          "name": "compute_usage_charge_cloud_billing_sku_id_cloud_billing_sku_id_fk",
+          "tableFrom": "compute_usage_charge",
+          "tableTo": "cloud_billing_sku",
+          "columnsFrom": [
+            "cloud_billing_sku_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "compute_usage_charge_usage_source_usage_source_id_created_at_pk": {
+          "name": "compute_usage_charge_usage_source_usage_source_id_created_at_pk",
+          "columns": [
+            "usage_source",
+            "usage_source_id",
+            "created_at"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "compute_usage_charge_exactly_one_payer": {
+          "name": "compute_usage_charge_exactly_one_payer",
+          "value": "(\"compute_usage_charge\".\"user_id\" IS NULL) <> (\"compute_usage_charge\".\"organization_id\" IS NULL)"
+        },
+        "compute_usage_charge_quantity_positive": {
+          "name": "compute_usage_charge_quantity_positive",
+          "value": "\"compute_usage_charge\".\"quantity\" > 0"
+        },
+        "compute_usage_charge_settled_quantity_positive": {
+          "name": "compute_usage_charge_settled_quantity_positive",
+          "value": "\"compute_usage_charge\".\"settled_quantity_after\" IS NULL OR \"compute_usage_charge\".\"settled_quantity_after\" > 0"
+        },
+        "compute_usage_charge_rate_positive": {
+          "name": "compute_usage_charge_rate_positive",
+          "value": "\"compute_usage_charge\".\"rate_cents_per_unit\" > 0"
+        },
+        "compute_usage_charge_amount_positive": {
+          "name": "compute_usage_charge_amount_positive",
+          "value": "\"compute_usage_charge\".\"amount_microdollars\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.container_usage_interval": {
+      "name": "container_usage_interval",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "service": {
+          "name": "service",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "start_epoch_ms": {
+          "name": "start_epoch_ms",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cloud_billing_sku_id": {
+          "name": "cloud_billing_sku_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "context_fingerprint": {
+          "name": "context_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_type": {
+          "name": "subject_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_id": {
+          "name": "subject_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_type": {
+          "name": "actor_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_id": {
+          "name": "actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_heartbeat_seq": {
+          "name": "last_heartbeat_seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "confirmed_seconds": {
+          "name": "confirmed_seconds",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "billing_mode": {
+          "name": "billing_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'shadow'"
+        },
+        "rate_cents_per_unit": {
+          "name": "rate_cents_per_unit",
+          "type": "numeric(24, 12)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "settled_billable_seconds": {
+          "name": "settled_billable_seconds",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "stopped_at": {
+          "name": "stopped_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "close_reason": {
+          "name": "close_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "exit_code": {
+          "name": "exit_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "final_stop_seq": {
+          "name": "final_stop_seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'open'"
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_container_usage_interval_sweep": {
+          "name": "IDX_container_usage_interval_sweep",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "last_seen_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_container_usage_interval_subject_started": {
+          "name": "IDX_container_usage_interval_subject_started",
+          "columns": [
+            {
+              "expression": "subject_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "started_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_container_usage_interval_single_open": {
+          "name": "UQ_container_usage_interval_single_open",
+          "columns": [
+            {
+              "expression": "service",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"container_usage_interval\".\"status\" = 'open'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "container_usage_interval_cloud_billing_sku_id_cloud_billing_sku_id_fk": {
+          "name": "container_usage_interval_cloud_billing_sku_id_cloud_billing_sku_id_fk",
+          "tableFrom": "container_usage_interval",
+          "tableTo": "cloud_billing_sku",
+          "columnsFrom": [
+            "cloud_billing_sku_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "container_usage_interval_subject_type": {
+          "name": "container_usage_interval_subject_type",
+          "value": "\"container_usage_interval\".\"subject_type\" IN ('user', 'org')"
+        },
+        "container_usage_interval_actor_type": {
+          "name": "container_usage_interval_actor_type",
+          "value": "\"container_usage_interval\".\"actor_type\" IN ('user', 'bot')"
+        },
+        "container_usage_interval_context_fingerprint": {
+          "name": "container_usage_interval_context_fingerprint",
+          "value": "\"container_usage_interval\".\"context_fingerprint\" ~ '^[a-f0-9]{64}$'"
+        },
+        "container_usage_interval_attribution": {
+          "name": "container_usage_interval_attribution",
+          "value": "\"container_usage_interval\".\"actor_type\" = 'bot' OR (\"container_usage_interval\".\"actor_type\" = 'user' AND (\"container_usage_interval\".\"subject_type\" <> 'user' OR \"container_usage_interval\".\"actor_id\" = \"container_usage_interval\".\"subject_id\"))"
+        },
+        "container_usage_interval_status": {
+          "name": "container_usage_interval_status",
+          "value": "\"container_usage_interval\".\"status\" IN ('open', 'closed')"
+        },
+        "container_usage_interval_billing_mode": {
+          "name": "container_usage_interval_billing_mode",
+          "value": "\"container_usage_interval\".\"billing_mode\" IN ('shadow', 'paid')"
+        },
+        "container_usage_interval_paid_rate": {
+          "name": "container_usage_interval_paid_rate",
+          "value": "(\"container_usage_interval\".\"billing_mode\" = 'shadow' AND \"container_usage_interval\".\"rate_cents_per_unit\" IS NULL) OR (\"container_usage_interval\".\"billing_mode\" = 'paid' AND \"container_usage_interval\".\"rate_cents_per_unit\" > 0)"
+        },
+        "container_usage_interval_open_closed_shape": {
+          "name": "container_usage_interval_open_closed_shape",
+          "value": "(\"container_usage_interval\".\"status\" = 'open' AND \"container_usage_interval\".\"stopped_at\" IS NULL AND \"container_usage_interval\".\"close_reason\" IS NULL) OR (\"container_usage_interval\".\"status\" = 'closed' AND \"container_usage_interval\".\"stopped_at\" IS NOT NULL AND \"container_usage_interval\".\"close_reason\" IS NOT NULL)"
+        },
+        "container_usage_interval_time_order": {
+          "name": "container_usage_interval_time_order",
+          "value": "\"container_usage_interval\".\"last_seen_at\" >= \"container_usage_interval\".\"started_at\" AND (\"container_usage_interval\".\"stopped_at\" IS NULL OR (\"container_usage_interval\".\"stopped_at\" >= \"container_usage_interval\".\"started_at\" AND \"container_usage_interval\".\"stopped_at\" <= \"container_usage_interval\".\"last_seen_at\"))"
+        },
+        "container_usage_interval_last_heartbeat_seq_nonnegative": {
+          "name": "container_usage_interval_last_heartbeat_seq_nonnegative",
+          "value": "\"container_usage_interval\".\"last_heartbeat_seq\" >= 0"
+        },
+        "container_usage_interval_confirmed_seconds_nonnegative": {
+          "name": "container_usage_interval_confirmed_seconds_nonnegative",
+          "value": "\"container_usage_interval\".\"confirmed_seconds\" >= 0"
+        },
+        "container_usage_interval_settled_billable_seconds_nonnegative": {
+          "name": "container_usage_interval_settled_billable_seconds_nonnegative",
+          "value": "\"container_usage_interval\".\"settled_billable_seconds\" >= 0 AND \"container_usage_interval\".\"settled_billable_seconds\" <= \"container_usage_interval\".\"confirmed_seconds\""
+        },
+        "container_usage_interval_final_stop_seq_positive": {
+          "name": "container_usage_interval_final_stop_seq_positive",
+          "value": "\"container_usage_interval\".\"final_stop_seq\" IS NULL OR \"container_usage_interval\".\"final_stop_seq\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.container_usage_segment": {
+      "name": "container_usage_segment",
+      "schema": "",
+      "columns": {
+        "interval_id": {
+          "name": "interval_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "seq": {
+          "name": "seq",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reported_seconds": {
+          "name": "reported_seconds",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "usage_seconds": {
+          "name": "usage_seconds",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "received_at": {
+          "name": "received_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "IDX_container_usage_segment_received": {
+          "name": "IDX_container_usage_segment_received",
+          "columns": [
+            {
+              "expression": "received_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "container_usage_segment_interval_id_container_usage_interval_id_fk": {
+          "name": "container_usage_segment_interval_id_container_usage_interval_id_fk",
+          "tableFrom": "container_usage_segment",
+          "tableTo": "container_usage_interval",
+          "columnsFrom": [
+            "interval_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "container_usage_segment_interval_id_seq_pk": {
+          "name": "container_usage_segment_interval_id_seq_pk",
+          "columns": [
+            "interval_id",
+            "seq"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "container_usage_segment_idempotency_key_unique": {
+          "name": "container_usage_segment_idempotency_key_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "idempotency_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "container_usage_segment_seq_positive": {
+          "name": "container_usage_segment_seq_positive",
+          "value": "\"container_usage_segment\".\"seq\" > 0"
+        },
+        "container_usage_segment_reported_seconds_nonnegative": {
+          "name": "container_usage_segment_reported_seconds_nonnegative",
+          "value": "\"container_usage_segment\".\"reported_seconds\" >= 0"
+        },
+        "container_usage_segment_usage_seconds_nonnegative": {
+          "name": "container_usage_segment_usage_seconds_nonnegative",
+          "value": "\"container_usage_segment\".\"usage_seconds\" >= 0"
+        },
+        "container_usage_segment_usage_within_reported": {
+          "name": "container_usage_segment_usage_within_reported",
+          "value": "\"container_usage_segment\".\"usage_seconds\" <= \"container_usage_segment\".\"reported_seconds\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.content_moderation_reports": {
+      "name": "content_moderation_reports",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "surface": {
+          "name": "surface",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_kind": {
+          "name": "target_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_id": {
+          "name": "target_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model_id": {
+          "name": "model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "context_json": {
+          "name": "context_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "receipt_id": {
+          "name": "receipt_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "triage_status": {
+          "name": "triage_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'received'"
+        },
+        "appeal_status": {
+          "name": "appeal_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'none'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_content_moderation_reports_user_created": {
+          "name": "IDX_content_moderation_reports_user_created",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_content_moderation_reports_target": {
+          "name": "IDX_content_moderation_reports_target",
+          "columns": [
+            {
+              "expression": "target_kind",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "target_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "content_moderation_reports_receipt_id_unique": {
+          "name": "content_moderation_reports_receipt_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "receipt_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.contributor_champion_contributors": {
+      "name": "contributor_champion_contributors",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "github_login": {
+          "name": "github_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_profile_url": {
+          "name": "github_profile_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_user_id": {
+          "name": "github_user_id",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_contribution_at": {
+          "name": "first_contribution_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_contribution_at": {
+          "name": "last_contribution_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "all_time_contributions": {
+          "name": "all_time_contributions",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "manual_email": {
+          "name": "manual_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_contributor_champion_contributors_last_contribution_at": {
+          "name": "IDX_contributor_champion_contributors_last_contribution_at",
+          "columns": [
+            {
+              "expression": "last_contribution_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_contributor_champion_contributors_manual_email": {
+          "name": "IDX_contributor_champion_contributors_manual_email",
+          "columns": [
+            {
+              "expression": "manual_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_contributor_champion_contributors_github_login": {
+          "name": "UQ_contributor_champion_contributors_github_login",
+          "nullsNotDistinct": false,
+          "columns": [
+            "github_login"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.contributor_champion_events": {
+      "name": "contributor_champion_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "contributor_id": {
+          "name": "contributor_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_pr_number": {
+          "name": "github_pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_pr_url": {
+          "name": "github_pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_pr_title": {
+          "name": "github_pr_title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_author_login": {
+          "name": "github_author_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_author_email": {
+          "name": "github_author_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "merged_at": {
+          "name": "merged_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_contributor_champion_events_contributor_id": {
+          "name": "IDX_contributor_champion_events_contributor_id",
+          "columns": [
+            {
+              "expression": "contributor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_contributor_champion_events_merged_at": {
+          "name": "IDX_contributor_champion_events_merged_at",
+          "columns": [
+            {
+              "expression": "merged_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_contributor_champion_events_author_email": {
+          "name": "IDX_contributor_champion_events_author_email",
+          "columns": [
+            {
+              "expression": "github_author_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "contributor_champion_events_contributor_id_contributor_champion_contributors_id_fk": {
+          "name": "contributor_champion_events_contributor_id_contributor_champion_contributors_id_fk",
+          "tableFrom": "contributor_champion_events",
+          "tableTo": "contributor_champion_contributors",
+          "columnsFrom": [
+            "contributor_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_contributor_champion_events_repo_pr": {
+          "name": "UQ_contributor_champion_events_repo_pr",
+          "nullsNotDistinct": false,
+          "columns": [
+            "repo_full_name",
+            "github_pr_number"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.contributor_champion_memberships": {
+      "name": "contributor_champion_memberships",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "contributor_id": {
+          "name": "contributor_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "selected_tier": {
+          "name": "selected_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enrolled_tier": {
+          "name": "enrolled_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enrolled_at": {
+          "name": "enrolled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credit_amount_microdollars": {
+          "name": "credit_amount_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "credits_last_granted_at": {
+          "name": "credits_last_granted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linked_kilo_user_id": {
+          "name": "linked_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_contributor_champion_memberships_credits_due": {
+          "name": "IDX_contributor_champion_memberships_credits_due",
+          "columns": [
+            {
+              "expression": "credits_last_granted_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"contributor_champion_memberships\".\"enrolled_tier\" IS NOT NULL AND \"contributor_champion_memberships\".\"credit_amount_microdollars\" > 0",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_contributor_champion_memberships_linked_kilo_user_id": {
+          "name": "IDX_contributor_champion_memberships_linked_kilo_user_id",
+          "columns": [
+            {
+              "expression": "linked_kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "contributor_champion_memberships_contributor_id_contributor_champion_contributors_id_fk": {
+          "name": "contributor_champion_memberships_contributor_id_contributor_champion_contributors_id_fk",
+          "tableFrom": "contributor_champion_memberships",
+          "tableTo": "contributor_champion_contributors",
+          "columnsFrom": [
+            "contributor_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "contributor_champion_memberships_linked_kilo_user_id_kilocode_users_id_fk": {
+          "name": "contributor_champion_memberships_linked_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "contributor_champion_memberships",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "linked_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_contributor_champion_memberships_contributor_id": {
+          "name": "UQ_contributor_champion_memberships_contributor_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "contributor_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "contributor_champion_memberships_selected_tier_check": {
+          "name": "contributor_champion_memberships_selected_tier_check",
+          "value": "\"contributor_champion_memberships\".\"selected_tier\" IS NULL OR \"contributor_champion_memberships\".\"selected_tier\" IN ('contributor', 'ambassador', 'champion')"
+        },
+        "contributor_champion_memberships_enrolled_tier_check": {
+          "name": "contributor_champion_memberships_enrolled_tier_check",
+          "value": "\"contributor_champion_memberships\".\"enrolled_tier\" IS NULL OR \"contributor_champion_memberships\".\"enrolled_tier\" IN ('contributor', 'ambassador', 'champion')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.contributor_champion_sync_state": {
+      "name": "contributor_champion_sync_state",
+      "schema": "",
+      "columns": {
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "last_merged_at": {
+          "name": "last_merged_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_synced_at": {
+          "name": "last_synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.credit_campaigns": {
+      "name": "credit_campaigns",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "slug": {
+          "name": "slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_category": {
+          "name": "credit_category",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_microdollars": {
+          "name": "amount_microdollars",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_expiry_hours": {
+          "name": "credit_expiry_hours",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "campaign_ends_at": {
+          "name": "campaign_ends_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_redemptions_allowed": {
+          "name": "total_redemptions_allowed",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "active": {
+          "name": "active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_credit_campaigns_slug": {
+          "name": "UQ_credit_campaigns_slug",
+          "columns": [
+            {
+              "expression": "slug",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_credit_campaigns_credit_category": {
+          "name": "UQ_credit_campaigns_credit_category",
+          "columns": [
+            {
+              "expression": "credit_category",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "credit_campaigns_slug_format_check": {
+          "name": "credit_campaigns_slug_format_check",
+          "value": "\"credit_campaigns\".\"slug\" ~ '^[a-z0-9-]{5,40}$'"
+        },
+        "credit_campaigns_amount_positive_check": {
+          "name": "credit_campaigns_amount_positive_check",
+          "value": "\"credit_campaigns\".\"amount_microdollars\" > 0"
+        },
+        "credit_campaigns_credit_expiry_hours_positive_check": {
+          "name": "credit_campaigns_credit_expiry_hours_positive_check",
+          "value": "\"credit_campaigns\".\"credit_expiry_hours\" IS NULL OR \"credit_campaigns\".\"credit_expiry_hours\" > 0"
+        },
+        "credit_campaigns_total_redemptions_allowed_positive_check": {
+          "name": "credit_campaigns_total_redemptions_allowed_positive_check",
+          "value": "\"credit_campaigns\".\"total_redemptions_allowed\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.credit_transactions": {
+      "name": "credit_transactions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_microdollars": {
+          "name": "amount_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expiration_baseline_microdollars_used": {
+          "name": "expiration_baseline_microdollars_used",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "original_baseline_microdollars_used": {
+          "name": "original_baseline_microdollars_used",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_free": {
+          "name": "is_free",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "original_transaction_id": {
+          "name": "original_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_payment_id": {
+          "name": "stripe_payment_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "coinbase_credit_block_id": {
+          "name": "coinbase_credit_block_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credit_category": {
+          "name": "credit_category",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expiry_date": {
+          "name": "expiry_date",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "check_category_uniqueness": {
+          "name": "check_category_uniqueness",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {
+        "IDX_credit_transactions_created_at": {
+          "name": "IDX_credit_transactions_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_is_free": {
+          "name": "IDX_credit_transactions_is_free",
+          "columns": [
+            {
+              "expression": "is_free",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_kilo_user_id": {
+          "name": "IDX_credit_transactions_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_credit_category": {
+          "name": "IDX_credit_transactions_credit_category",
+          "columns": [
+            {
+              "expression": "credit_category",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_stripe_payment_id": {
+          "name": "IDX_credit_transactions_stripe_payment_id",
+          "columns": [
+            {
+              "expression": "stripe_payment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_original_transaction_id": {
+          "name": "IDX_credit_transactions_original_transaction_id",
+          "columns": [
+            {
+              "expression": "original_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_coinbase_credit_block_id": {
+          "name": "IDX_credit_transactions_coinbase_credit_block_id",
+          "columns": [
+            {
+              "expression": "coinbase_credit_block_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_organization_id": {
+          "name": "IDX_credit_transactions_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_credit_transactions_unique_category": {
+          "name": "IDX_credit_transactions_unique_category",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "credit_category",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"credit_transactions\".\"check_category_uniqueness\" = TRUE",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "credit_transactions_created_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "credit_transactions_created_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "credit_transactions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.custom_llm2": {
+      "name": "custom_llm2",
+      "schema": "",
+      "columns": {
+        "public_id": {
+          "name": "public_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "definition": {
+          "name": "definition",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_api_key": {
+          "name": "encrypted_api_key",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deleted_user_email_tombstones": {
+      "name": "deleted_user_email_tombstones",
+      "schema": "",
+      "columns": {
+        "normalized_email_hash": {
+          "name": "normalized_email_hash",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deployment_builds": {
+      "name": "deployment_builds",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "deployment_id": {
+          "name": "deployment_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_deployment_builds_deployment_id": {
+          "name": "idx_deployment_builds_deployment_id",
+          "columns": [
+            {
+              "expression": "deployment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployment_builds_status": {
+          "name": "idx_deployment_builds_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployment_builds_deployment_id_deployments_id_fk": {
+          "name": "deployment_builds_deployment_id_deployments_id_fk",
+          "tableFrom": "deployment_builds",
+          "tableTo": "deployments",
+          "columnsFrom": [
+            "deployment_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deployment_env_vars": {
+      "name": "deployment_env_vars",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "deployment_id": {
+          "name": "deployment_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_secret": {
+          "name": "is_secret",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_deployment_env_vars_deployment_id": {
+          "name": "idx_deployment_env_vars_deployment_id",
+          "columns": [
+            {
+              "expression": "deployment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployment_env_vars_deployment_id_deployments_id_fk": {
+          "name": "deployment_env_vars_deployment_id_deployments_id_fk",
+          "tableFrom": "deployment_env_vars",
+          "tableTo": "deployments",
+          "columnsFrom": [
+            "deployment_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_deployment_env_vars_deployment_key": {
+          "name": "UQ_deployment_env_vars_deployment_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "deployment_id",
+            "key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deployment_events": {
+      "name": "deployment_events",
+      "schema": "",
+      "columns": {
+        "build_id": {
+          "name": "build_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'log'"
+        },
+        "timestamp": {
+          "name": "timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "idx_deployment_events_build_id": {
+          "name": "idx_deployment_events_build_id",
+          "columns": [
+            {
+              "expression": "build_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployment_events_timestamp": {
+          "name": "idx_deployment_events_timestamp",
+          "columns": [
+            {
+              "expression": "timestamp",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployment_events_type": {
+          "name": "idx_deployment_events_type",
+          "columns": [
+            {
+              "expression": "event_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployment_events_build_id_deployment_builds_id_fk": {
+          "name": "deployment_events_build_id_deployment_builds_id_fk",
+          "tableFrom": "deployment_events",
+          "tableTo": "deployment_builds",
+          "columnsFrom": [
+            "build_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "deployment_events_build_id_event_id_pk": {
+          "name": "deployment_events_build_id_event_id_pk",
+          "columns": [
+            "build_id",
+            "event_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deployment_threat_detections": {
+      "name": "deployment_threat_detections",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "deployment_id": {
+          "name": "deployment_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "build_id": {
+          "name": "build_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "threat_type": {
+          "name": "threat_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_deployment_threat_detections_deployment_id": {
+          "name": "idx_deployment_threat_detections_deployment_id",
+          "columns": [
+            {
+              "expression": "deployment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployment_threat_detections_created_at": {
+          "name": "idx_deployment_threat_detections_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployment_threat_detections_deployment_id_deployments_id_fk": {
+          "name": "deployment_threat_detections_deployment_id_deployments_id_fk",
+          "tableFrom": "deployment_threat_detections",
+          "tableTo": "deployments",
+          "columnsFrom": [
+            "deployment_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "deployment_threat_detections_build_id_deployment_builds_id_fk": {
+          "name": "deployment_threat_detections_build_id_deployment_builds_id_fk",
+          "tableFrom": "deployment_threat_detections",
+          "tableTo": "deployment_builds",
+          "columnsFrom": [
+            "build_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.deployments": {
+      "name": "deployments",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deployment_slug": {
+          "name": "deployment_slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "internal_worker_name": {
+          "name": "internal_worker_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repository_source": {
+          "name": "repository_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "branch": {
+          "name": "branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "deployment_url": {
+          "name": "deployment_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'github'"
+        },
+        "git_auth_token": {
+          "name": "git_auth_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_deployed_at": {
+          "name": "last_deployed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_build_id": {
+          "name": "last_build_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "threat_status": {
+          "name": "threat_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_from": {
+          "name": "created_from",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_deployments_owned_by_user_id": {
+          "name": "idx_deployments_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployments_owned_by_organization_id": {
+          "name": "idx_deployments_owned_by_organization_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployments_platform_integration_id": {
+          "name": "idx_deployments_platform_integration_id",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployments_repository_source_branch": {
+          "name": "idx_deployments_repository_source_branch",
+          "columns": [
+            {
+              "expression": "repository_source",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployments_threat_status_pending": {
+          "name": "idx_deployments_threat_status_pending",
+          "columns": [
+            {
+              "expression": "threat_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"deployments\".\"threat_status\" = 'pending_scan'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployments_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "deployments_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "deployments",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "deployments_owned_by_organization_id_organizations_id_fk": {
+          "name": "deployments_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "deployments",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_deployments_deployment_slug": {
+          "name": "UQ_deployments_deployment_slug",
+          "nullsNotDistinct": false,
+          "columns": [
+            "deployment_slug"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "deployments_owner_check": {
+          "name": "deployments_owner_check",
+          "value": "(\n        (\"deployments\".\"owned_by_user_id\" IS NOT NULL AND \"deployments\".\"owned_by_organization_id\" IS NULL) OR\n        (\"deployments\".\"owned_by_user_id\" IS NULL AND \"deployments\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "deployments_source_type_check": {
+          "name": "deployments_source_type_check",
+          "value": "\"deployments\".\"source_type\" IN ('github', 'git', 'app-builder')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.deployments_ephemeral": {
+      "name": "deployments_ephemeral",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_type": {
+          "name": "source_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "internal_worker_name": {
+          "name": "internal_worker_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "deployment_slug": {
+          "name": "deployment_slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_cleanup_at": {
+          "name": "next_cleanup_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cleanup_claim_token": {
+          "name": "cleanup_claim_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cleanup_claimed_until": {
+          "name": "cleanup_claimed_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_deployments_ephemeral_owned_by_user_id": {
+          "name": "idx_deployments_ephemeral_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_deployments_ephemeral_next_cleanup_at": {
+          "name": "idx_deployments_ephemeral_next_cleanup_at",
+          "columns": [
+            {
+              "expression": "next_cleanup_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "deployments_ephemeral_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "deployments_ephemeral_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "deployments_ephemeral",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_deployments_ephemeral_internal_worker_name": {
+          "name": "UQ_deployments_ephemeral_internal_worker_name",
+          "nullsNotDistinct": false,
+          "columns": [
+            "internal_worker_name"
+          ]
+        },
+        "UQ_deployments_ephemeral_deployment_slug": {
+          "name": "UQ_deployments_ephemeral_deployment_slug",
+          "nullsNotDistinct": false,
+          "columns": [
+            "deployment_slug"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "deployments_ephemeral_source_type_check": {
+          "name": "deployments_ephemeral_source_type_check",
+          "value": "\"deployments_ephemeral\".\"source_type\" IN ('html')"
+        },
+        "deployments_ephemeral_status_check": {
+          "name": "deployments_ephemeral_status_check",
+          "value": "\"deployments_ephemeral\".\"status\" IN ('pending', 'active', 'cleanup_retry')"
+        },
+        "deployments_ephemeral_claim_fields_check": {
+          "name": "deployments_ephemeral_claim_fields_check",
+          "value": "(\"deployments_ephemeral\".\"cleanup_claim_token\" IS NULL) = (\"deployments_ephemeral\".\"cleanup_claimed_until\" IS NULL)"
+        },
+        "deployments_ephemeral_active_fields_check": {
+          "name": "deployments_ephemeral_active_fields_check",
+          "value": "\"deployments_ephemeral\".\"status\" <> 'active' OR (\"deployments_ephemeral\".\"deployment_slug\" IS NOT NULL AND \"deployments_ephemeral\".\"expires_at\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.device_auth_requests": {
+      "name": "device_auth_requests",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "approved_at": {
+          "name": "approved_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_code": {
+          "name": "user_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "device_code_hash": {
+          "name": "device_code_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_device_auth_requests_code": {
+          "name": "UQ_device_auth_requests_code",
+          "columns": [
+            {
+              "expression": "code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_auth_requests_status": {
+          "name": "IDX_device_auth_requests_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_auth_requests_expires_at": {
+          "name": "IDX_device_auth_requests_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_auth_requests_kilo_user_id": {
+          "name": "IDX_device_auth_requests_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_device_auth_requests_device_code_hash": {
+          "name": "UQ_device_auth_requests_device_code_hash",
+          "columns": [
+            {
+              "expression": "device_code_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"device_auth_requests\".\"device_code_hash\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_auth_requests_user_code": {
+          "name": "IDX_device_auth_requests_user_code",
+          "columns": [
+            {
+              "expression": "user_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"device_auth_requests\".\"user_code\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "device_auth_requests_kilo_user_id_kilocode_users_id_fk": {
+          "name": "device_auth_requests_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "device_auth_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.device_refresh_tokens": {
+      "name": "device_refresh_tokens",
+      "schema": "",
+      "columns": {
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "device_session_id": {
+          "name": "device_session_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_device_refresh_tokens_device_session_id": {
+          "name": "IDX_device_refresh_tokens_device_session_id",
+          "columns": [
+            {
+              "expression": "device_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_refresh_tokens_expires_at": {
+          "name": "IDX_device_refresh_tokens_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "device_refresh_tokens_device_session_id_device_sessions_id_fk": {
+          "name": "device_refresh_tokens_device_session_id_device_sessions_id_fk",
+          "tableFrom": "device_refresh_tokens",
+          "tableTo": "device_sessions",
+          "columnsFrom": [
+            "device_session_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.device_sessions": {
+      "name": "device_sessions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "device_auth_request_id": {
+          "name": "device_auth_request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_agent": {
+          "name": "user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_seen_at": {
+          "name": "last_seen_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_reason": {
+          "name": "revoked_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_device_sessions_kilo_user_id": {
+          "name": "IDX_device_sessions_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_device_sessions_revoked_at": {
+          "name": "IDX_device_sessions_revoked_at",
+          "columns": [
+            {
+              "expression": "revoked_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "device_sessions_kilo_user_id_kilocode_users_id_fk": {
+          "name": "device_sessions_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "device_sessions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.discord_gateway_listener": {
+      "name": "discord_gateway_listener",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "integer",
+          "primaryKey": true,
+          "notNull": true,
+          "default": 1
+        },
+        "listener_id": {
+          "name": "listener_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.editor_name": {
+      "name": "editor_name",
+      "schema": "",
+      "columns": {
+        "editor_name_id": {
+          "name": "editor_name_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "editor_name": {
+          "name": "editor_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_editor_name": {
+          "name": "UQ_editor_name",
+          "columns": [
+            {
+              "expression": "editor_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.enrichment_data": {
+      "name": "enrichment_data",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_enrichment_data": {
+          "name": "github_enrichment_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "linkedin_enrichment_data": {
+          "name": "linkedin_enrichment_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "clay_enrichment_data": {
+          "name": "clay_enrichment_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_enrichment_data_user_id": {
+          "name": "IDX_enrichment_data_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "enrichment_data_user_id_kilocode_users_id_fk": {
+          "name": "enrichment_data_user_id_kilocode_users_id_fk",
+          "tableFrom": "enrichment_data",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_enrichment_data_user_id": {
+          "name": "UQ_enrichment_data_user_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.exa_monthly_usage": {
+      "name": "exa_monthly_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "month": {
+          "name": "month",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "total_cost_microdollars": {
+          "name": "total_cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "total_charged_microdollars": {
+          "name": "total_charged_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "request_count": {
+          "name": "request_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "free_allowance_microdollars": {
+          "name": "free_allowance_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 10000000
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_exa_monthly_usage_personal": {
+          "name": "idx_exa_monthly_usage_personal",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "month",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"exa_monthly_usage\".\"organization_id\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_exa_monthly_usage_org": {
+          "name": "idx_exa_monthly_usage_org",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "month",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"exa_monthly_usage\".\"organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.exa_usage_log": {
+      "name": "exa_usage_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "path": {
+          "name": "path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cost_microdollars": {
+          "name": "cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "charged_to_balance": {
+          "name": "charged_to_balance",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "feature_id": {
+          "name": "feature_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_exa_usage_log_user_created": {
+          "name": "idx_exa_usage_log_user_created",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "exa_usage_log_id_created_at_pk": {
+          "name": "exa_usage_log_id_created_at_pk",
+          "columns": [
+            "id",
+            "created_at"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.external_side_effect_outbox": {
+      "name": "external_side_effect_outbox",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "operation": {
+          "name": "operation",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'send_org_invite_email'"
+        },
+        "invitation_id": {
+          "name": "invitation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "delivered_at": {
+          "name": "delivered_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_external_side_effect_outbox_invitation_id": {
+          "name": "UQ_external_side_effect_outbox_invitation_id",
+          "columns": [
+            {
+              "expression": "invitation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_external_side_effect_outbox_status_next_attempt_at": {
+          "name": "IDX_external_side_effect_outbox_status_next_attempt_at",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "next_attempt_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.feature": {
+      "name": "feature",
+      "schema": "",
+      "columns": {
+        "feature_id": {
+          "name": "feature_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "feature": {
+          "name": "feature",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_feature": {
+          "name": "UQ_feature",
+          "columns": [
+            {
+              "expression": "feature",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.finish_reason": {
+      "name": "finish_reason",
+      "schema": "",
+      "columns": {
+        "finish_reason_id": {
+          "name": "finish_reason_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "finish_reason": {
+          "name": "finish_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_finish_reason": {
+          "name": "UQ_finish_reason",
+          "columns": [
+            {
+              "expression": "finish_reason",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.free_model_usage": {
+      "name": "free_model_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "ip_address": {
+          "name": "ip_address",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_free_model_usage_ip_created_at": {
+          "name": "idx_free_model_usage_ip_created_at",
+          "columns": [
+            {
+              "expression": "ip_address",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_free_model_usage_created_at": {
+          "name": "idx_free_model_usage_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.github_branch_pull_requests": {
+      "name": "github_branch_pull_requests",
+      "schema": "",
+      "columns": {
+        "git_url": {
+          "name": "git_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "git_branch": {
+          "name": "git_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_state": {
+          "name": "pr_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_title": {
+          "name": "pr_title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_head_sha": {
+          "name": "pr_head_sha",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_review_decision": {
+          "name": "pr_review_decision",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_decision_pending": {
+          "name": "review_decision_pending",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "review_decision_fetching_at": {
+          "name": "review_decision_fetching_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_last_synced_at": {
+          "name": "pr_last_synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_github_branch_prs_org": {
+          "name": "UQ_github_branch_prs_org",
+          "columns": [
+            {
+              "expression": "git_url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"github_branch_pull_requests\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_github_branch_prs_user": {
+          "name": "UQ_github_branch_prs_user",
+          "columns": [
+            {
+              "expression": "git_url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"github_branch_pull_requests\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "github_branch_pull_requests_owned_by_organization_id_organizations_id_fk": {
+          "name": "github_branch_pull_requests_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "github_branch_pull_requests",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "github_branch_pull_requests_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "github_branch_pull_requests_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "github_branch_pull_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "github_branch_pull_requests_owner_check": {
+          "name": "github_branch_pull_requests_owner_check",
+          "value": "(\n        (\"github_branch_pull_requests\".\"owned_by_organization_id\" IS NOT NULL AND \"github_branch_pull_requests\".\"owned_by_user_id\" IS NULL) OR\n        (\"github_branch_pull_requests\".\"owned_by_organization_id\" IS NULL AND \"github_branch_pull_requests\".\"owned_by_user_id\" IS NOT NULL)\n      )"
+        },
+        "github_branch_pull_requests_review_decision_check": {
+          "name": "github_branch_pull_requests_review_decision_check",
+          "value": "\"github_branch_pull_requests\".\"pr_review_decision\" IS NULL OR \"github_branch_pull_requests\".\"pr_review_decision\" IN ('approved', 'changes_requested', 'review_required')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.github_install_states": {
+      "name": "github_install_states",
+      "schema": "",
+      "columns": {
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_type": {
+          "name": "owner_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_app_type": {
+          "name": "github_app_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "return_to": {
+          "name": "return_to",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_github_install_states_expires_at": {
+          "name": "IDX_github_install_states_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "github_install_states_kilo_user_id_kilocode_users_id_fk": {
+          "name": "github_install_states_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "github_install_states",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "github_install_states_owner_type_check": {
+          "name": "github_install_states_owner_type_check",
+          "value": "\"github_install_states\".\"owner_type\" IN ('org', 'user')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.http_ip": {
+      "name": "http_ip",
+      "schema": "",
+      "columns": {
+        "http_ip_id": {
+          "name": "http_ip_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "http_ip": {
+          "name": "http_ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_http_ip": {
+          "name": "UQ_http_ip",
+          "columns": [
+            {
+              "expression": "http_ip",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.http_user_agent": {
+      "name": "http_user_agent",
+      "schema": "",
+      "columns": {
+        "http_user_agent_id": {
+          "name": "http_user_agent_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "http_user_agent": {
+          "name": "http_user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_http_user_agent": {
+          "name": "UQ_http_user_agent",
+          "columns": [
+            {
+              "expression": "http_user_agent",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.impact_advocate_participants": {
+      "name": "impact_advocate_participants",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "program_key": {
+          "name": "program_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "advocate_id": {
+          "name": "advocate_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "advocate_account_id": {
+          "name": "advocate_account_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "opaque_referral_identifier": {
+          "name": "opaque_referral_identifier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "contact_email": {
+          "name": "contact_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "locale": {
+          "name": "locale",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "country_code": {
+          "name": "country_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "registration_state": {
+          "name": "registration_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "registered_at": {
+          "name": "registered_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_registration_attempt_at": {
+          "name": "last_registration_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_code": {
+          "name": "last_error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_message": {
+          "name": "last_error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_impact_advocate_participants_program_referral_identifier": {
+          "name": "UQ_impact_advocate_participants_program_referral_identifier",
+          "columns": [
+            {
+              "expression": "program_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "opaque_referral_identifier",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"impact_advocate_participants\".\"opaque_referral_identifier\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_advocate_participants_registration_state": {
+          "name": "IDX_impact_advocate_participants_registration_state",
+          "columns": [
+            {
+              "expression": "registration_state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_advocate_participants_user_id_kilocode_users_id_fk": {
+          "name": "impact_advocate_participants_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_advocate_participants",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_advocate_participants_program_user": {
+          "name": "UQ_impact_advocate_participants_program_user",
+          "nullsNotDistinct": false,
+          "columns": [
+            "program_key",
+            "user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_advocate_participants_program_key_check": {
+          "name": "impact_advocate_participants_program_key_check",
+          "value": "\"impact_advocate_participants\".\"program_key\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_advocate_participants_registration_state_check": {
+          "name": "impact_advocate_participants_registration_state_check",
+          "value": "\"impact_advocate_participants\".\"registration_state\" IN ('pending', 'retrying', 'registered', 'failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_advocate_registration_attempts": {
+      "name": "impact_advocate_registration_attempts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "program_key": {
+          "name": "program_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "participant_id": {
+          "name": "participant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "dedupe_key": {
+          "name": "dedupe_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "opaque_cookie_value": {
+          "name": "opaque_cookie_value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cookie_value_length": {
+          "name": "cookie_value_length",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delivery_state": {
+          "name": "delivery_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "request_payload": {
+          "name": "request_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_payload": {
+          "name": "response_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_status_code": {
+          "name": "response_status_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_advocate_registration_attempts_participant_id": {
+          "name": "IDX_impact_advocate_registration_attempts_participant_id",
+          "columns": [
+            {
+              "expression": "participant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_advocate_registration_attempts_delivery_state": {
+          "name": "IDX_impact_advocate_registration_attempts_delivery_state",
+          "columns": [
+            {
+              "expression": "delivery_state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_advocate_registration_attempts_participant_id_impact_advocate_participants_id_fk": {
+          "name": "impact_advocate_registration_attempts_participant_id_impact_advocate_participants_id_fk",
+          "tableFrom": "impact_advocate_registration_attempts",
+          "tableTo": "impact_advocate_participants",
+          "columnsFrom": [
+            "participant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_advocate_registration_attempts_dedupe_key": {
+          "name": "UQ_impact_advocate_registration_attempts_dedupe_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_advocate_registration_attempts_program_key_check": {
+          "name": "impact_advocate_registration_attempts_program_key_check",
+          "value": "\"impact_advocate_registration_attempts\".\"program_key\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_advocate_registration_attempts_delivery_state_check": {
+          "name": "impact_advocate_registration_attempts_delivery_state_check",
+          "value": "\"impact_advocate_registration_attempts\".\"delivery_state\" IN ('queued', 'sending', 'succeeded', 'failed')"
+        },
+        "impact_advocate_registration_attempts_cookie_value_length_non_negative_check": {
+          "name": "impact_advocate_registration_attempts_cookie_value_length_non_negative_check",
+          "value": "\"impact_advocate_registration_attempts\".\"cookie_value_length\" >= 0"
+        },
+        "impact_advocate_registration_attempts_attempt_count_non_negative_check": {
+          "name": "impact_advocate_registration_attempts_attempt_count_non_negative_check",
+          "value": "\"impact_advocate_registration_attempts\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_advocate_reward_redemptions": {
+      "name": "impact_advocate_reward_redemptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "reward_id": {
+          "name": "reward_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "dedupe_key": {
+          "name": "dedupe_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_user_id": {
+          "name": "beneficiary_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "impact_reward_id": {
+          "name": "impact_reward_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "request_payload": {
+          "name": "request_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "lookup_response_payload": {
+          "name": "lookup_response_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "redeem_response_payload": {
+          "name": "redeem_response_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_status_code": {
+          "name": "response_status_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "redeemed_at": {
+          "name": "redeemed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_advocate_reward_redemptions_beneficiary_user_id": {
+          "name": "IDX_impact_advocate_reward_redemptions_beneficiary_user_id",
+          "columns": [
+            {
+              "expression": "beneficiary_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_advocate_reward_redemptions_state": {
+          "name": "IDX_impact_advocate_reward_redemptions_state",
+          "columns": [
+            {
+              "expression": "state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_advocate_reward_redemptions_reward_id_impact_referral_rewards_id_fk": {
+          "name": "impact_advocate_reward_redemptions_reward_id_impact_referral_rewards_id_fk",
+          "tableFrom": "impact_advocate_reward_redemptions",
+          "tableTo": "impact_referral_rewards",
+          "columnsFrom": [
+            "reward_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_advocate_reward_redemptions_beneficiary_user_id_kilocode_users_id_fk": {
+          "name": "impact_advocate_reward_redemptions_beneficiary_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_advocate_reward_redemptions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "beneficiary_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_advocate_reward_redemptions_reward_id": {
+          "name": "UQ_impact_advocate_reward_redemptions_reward_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "reward_id"
+          ]
+        },
+        "UQ_impact_advocate_reward_redemptions_dedupe_key": {
+          "name": "UQ_impact_advocate_reward_redemptions_dedupe_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_advocate_reward_redemptions_state_check": {
+          "name": "impact_advocate_reward_redemptions_state_check",
+          "value": "\"impact_advocate_reward_redemptions\".\"state\" IN ('queued', 'retrying', 'redeemed', 'failed')"
+        },
+        "impact_advocate_reward_redemptions_attempt_count_non_negative_check": {
+          "name": "impact_advocate_reward_redemptions_attempt_count_non_negative_check",
+          "value": "\"impact_advocate_reward_redemptions\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_attribution_touches": {
+      "name": "impact_attribution_touches",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "program_key": {
+          "name": "program_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'kiloclaw'"
+        },
+        "dedupe_key": {
+          "name": "dedupe_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "anonymous_id": {
+          "name": "anonymous_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "touch_type": {
+          "name": "touch_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "opaque_tracking_value": {
+          "name": "opaque_tracking_value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tracking_value_length": {
+          "name": "tracking_value_length",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_tracking_value_accepted": {
+          "name": "is_tracking_value_accepted",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "rs_code": {
+          "name": "rs_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "rs_share_medium": {
+          "name": "rs_share_medium",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "rs_engagement_medium": {
+          "name": "rs_engagement_medium",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "im_ref": {
+          "name": "im_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "landing_path": {
+          "name": "landing_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "utm_source": {
+          "name": "utm_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "utm_medium": {
+          "name": "utm_medium",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "utm_campaign": {
+          "name": "utm_campaign",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "utm_term": {
+          "name": "utm_term",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "utm_content": {
+          "name": "utm_content",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "touched_at": {
+          "name": "touched_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sale_attributed_at": {
+          "name": "sale_attributed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_attribution_touches_product_user_id": {
+          "name": "IDX_impact_attribution_touches_product_user_id",
+          "columns": [
+            {
+              "expression": "product",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_attribution_touches_user_id": {
+          "name": "IDX_impact_attribution_touches_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_attribution_touches_anonymous_id": {
+          "name": "IDX_impact_attribution_touches_anonymous_id",
+          "columns": [
+            {
+              "expression": "anonymous_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_attribution_touches_expires_at": {
+          "name": "IDX_impact_attribution_touches_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_attribution_touches_sale_attributed_at": {
+          "name": "IDX_impact_attribution_touches_sale_attributed_at",
+          "columns": [
+            {
+              "expression": "sale_attributed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_attribution_touches_user_id_kilocode_users_id_fk": {
+          "name": "impact_attribution_touches_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_attribution_touches",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_attribution_touches_dedupe_key": {
+          "name": "UQ_impact_attribution_touches_dedupe_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_attribution_touches_product_check": {
+          "name": "impact_attribution_touches_product_check",
+          "value": "\"impact_attribution_touches\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_attribution_touches_program_key_check": {
+          "name": "impact_attribution_touches_program_key_check",
+          "value": "\"impact_attribution_touches\".\"program_key\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_attribution_touches_touch_type_check": {
+          "name": "impact_attribution_touches_touch_type_check",
+          "value": "\"impact_attribution_touches\".\"touch_type\" IN ('affiliate', 'referral')"
+        },
+        "impact_attribution_touches_provider_check": {
+          "name": "impact_attribution_touches_provider_check",
+          "value": "\"impact_attribution_touches\".\"provider\" IN ('impact_performance', 'impact_advocate')"
+        },
+        "impact_attribution_touches_tracking_value_length_non_negative_check": {
+          "name": "impact_attribution_touches_tracking_value_length_non_negative_check",
+          "value": "\"impact_attribution_touches\".\"tracking_value_length\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_conversion_reports": {
+      "name": "impact_conversion_reports",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "conversion_id": {
+          "name": "conversion_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dedupe_key": {
+          "name": "dedupe_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action_tracker_id": {
+          "name": "action_tracker_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "order_id": {
+          "name": "order_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "request_payload": {
+          "name": "request_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_payload": {
+          "name": "response_payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_status_code": {
+          "name": "response_status_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "delivered_at": {
+          "name": "delivered_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_conversion_reports_conversion_id": {
+          "name": "IDX_impact_conversion_reports_conversion_id",
+          "columns": [
+            {
+              "expression": "conversion_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_conversion_reports_state": {
+          "name": "IDX_impact_conversion_reports_state",
+          "columns": [
+            {
+              "expression": "state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_conversion_reports_conversion_id_impact_referral_conversions_id_fk": {
+          "name": "impact_conversion_reports_conversion_id_impact_referral_conversions_id_fk",
+          "tableFrom": "impact_conversion_reports",
+          "tableTo": "impact_referral_conversions",
+          "columnsFrom": [
+            "conversion_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_conversion_reports_dedupe_key": {
+          "name": "UQ_impact_conversion_reports_dedupe_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_conversion_reports_state_check": {
+          "name": "impact_conversion_reports_state_check",
+          "value": "\"impact_conversion_reports\".\"state\" IN ('queued', 'retrying', 'delivered', 'failed')"
+        },
+        "impact_conversion_reports_attempt_count_non_negative_check": {
+          "name": "impact_conversion_reports_attempt_count_non_negative_check",
+          "value": "\"impact_conversion_reports\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_referral_conversions": {
+      "name": "impact_referral_conversions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "referee_user_id": {
+          "name": "referee_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referrer_user_id": {
+          "name": "referrer_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_touch_id": {
+          "name": "source_touch_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "winning_touch_type": {
+          "name": "winning_touch_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payment_provider": {
+          "name": "payment_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'credits'"
+        },
+        "source_payment_id": {
+          "name": "source_payment_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "qualified": {
+          "name": "qualified",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "disqualification_reason": {
+          "name": "disqualification_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "converted_at": {
+          "name": "converted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_referral_conversions_referee_user_id": {
+          "name": "IDX_impact_referral_conversions_referee_user_id",
+          "columns": [
+            {
+              "expression": "referee_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_referral_conversions_referrer_user_id": {
+          "name": "IDX_impact_referral_conversions_referrer_user_id",
+          "columns": [
+            {
+              "expression": "referrer_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_referral_conversions_referee_user_id_kilocode_users_id_fk": {
+          "name": "impact_referral_conversions_referee_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referral_conversions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "referee_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_conversions_referrer_user_id_kilocode_users_id_fk": {
+          "name": "impact_referral_conversions_referrer_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referral_conversions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "referrer_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_conversions_source_touch_id_impact_attribution_touches_id_fk": {
+          "name": "impact_referral_conversions_source_touch_id_impact_attribution_touches_id_fk",
+          "tableFrom": "impact_referral_conversions",
+          "tableTo": "impact_attribution_touches",
+          "columnsFrom": [
+            "source_touch_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_referral_conversions_product_payment_source": {
+          "name": "UQ_impact_referral_conversions_product_payment_source",
+          "nullsNotDistinct": false,
+          "columns": [
+            "product",
+            "payment_provider",
+            "source_payment_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_referral_conversions_product_check": {
+          "name": "impact_referral_conversions_product_check",
+          "value": "\"impact_referral_conversions\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_referral_conversions_winning_touch_type_check": {
+          "name": "impact_referral_conversions_winning_touch_type_check",
+          "value": "\"impact_referral_conversions\".\"winning_touch_type\" IN ('referral', 'affiliate', 'none')"
+        },
+        "impact_referral_conversions_payment_provider_check": {
+          "name": "impact_referral_conversions_payment_provider_check",
+          "value": "\"impact_referral_conversions\".\"payment_provider\" IN ('stripe', 'credits', 'app_store', 'google_play')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_referral_reward_applications": {
+      "name": "impact_referral_reward_applications",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "reward_id": {
+          "name": "reward_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_user_id": {
+          "name": "beneficiary_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "previous_renewal_boundary": {
+          "name": "previous_renewal_boundary",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "new_renewal_boundary": {
+          "name": "new_renewal_boundary",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "local_operation_id": {
+          "name": "local_operation_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_operation_id": {
+          "name": "stripe_operation_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_idempotency_key": {
+          "name": "stripe_idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_referral_reward_applications_reward_id": {
+          "name": "IDX_impact_referral_reward_applications_reward_id",
+          "columns": [
+            {
+              "expression": "reward_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_referral_reward_applications_beneficiary_user_id": {
+          "name": "IDX_impact_referral_reward_applications_beneficiary_user_id",
+          "columns": [
+            {
+              "expression": "beneficiary_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_referral_reward_applications_reward_id_impact_referral_rewards_id_fk": {
+          "name": "impact_referral_reward_applications_reward_id_impact_referral_rewards_id_fk",
+          "tableFrom": "impact_referral_reward_applications",
+          "tableTo": "impact_referral_rewards",
+          "columnsFrom": [
+            "reward_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_reward_applications_beneficiary_user_id_kilocode_users_id_fk": {
+          "name": "impact_referral_reward_applications_beneficiary_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referral_reward_applications",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "beneficiary_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "impact_referral_reward_applications_product_check": {
+          "name": "impact_referral_reward_applications_product_check",
+          "value": "\"impact_referral_reward_applications\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_referral_reward_decisions": {
+      "name": "impact_referral_reward_decisions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "conversion_id": {
+          "name": "conversion_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_user_id": {
+          "name": "beneficiary_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_role": {
+          "name": "beneficiary_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "outcome": {
+          "name": "outcome",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reward_kind": {
+          "name": "reward_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw_free_month'"
+        },
+        "months_granted": {
+          "name": "months_granted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "reward_percent": {
+          "name": "reward_percent",
+          "type": "numeric(6, 4)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_tier": {
+          "name": "source_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reward_amount_usd": {
+          "name": "reward_amount_usd",
+          "type": "numeric(12, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_referral_reward_decisions_beneficiary_user_id": {
+          "name": "IDX_impact_referral_reward_decisions_beneficiary_user_id",
+          "columns": [
+            {
+              "expression": "beneficiary_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_referral_reward_decisions_conversion_id_impact_referral_conversions_id_fk": {
+          "name": "impact_referral_reward_decisions_conversion_id_impact_referral_conversions_id_fk",
+          "tableFrom": "impact_referral_reward_decisions",
+          "tableTo": "impact_referral_conversions",
+          "columnsFrom": [
+            "conversion_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_reward_decisions_beneficiary_user_id_kilocode_users_id_fk": {
+          "name": "impact_referral_reward_decisions_beneficiary_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referral_reward_decisions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "beneficiary_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_referral_reward_decisions_conversion_role": {
+          "name": "UQ_impact_referral_reward_decisions_conversion_role",
+          "nullsNotDistinct": false,
+          "columns": [
+            "conversion_id",
+            "beneficiary_role"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_referral_reward_decisions_product_check": {
+          "name": "impact_referral_reward_decisions_product_check",
+          "value": "\"impact_referral_reward_decisions\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_referral_reward_decisions_beneficiary_role_check": {
+          "name": "impact_referral_reward_decisions_beneficiary_role_check",
+          "value": "\"impact_referral_reward_decisions\".\"beneficiary_role\" IN ('referrer', 'referee')"
+        },
+        "impact_referral_reward_decisions_outcome_check": {
+          "name": "impact_referral_reward_decisions_outcome_check",
+          "value": "\"impact_referral_reward_decisions\".\"outcome\" IN ('granted', 'cap_limited', 'disqualified')"
+        },
+        "impact_referral_reward_decisions_reward_kind_check": {
+          "name": "impact_referral_reward_decisions_reward_kind_check",
+          "value": "\"impact_referral_reward_decisions\".\"reward_kind\" IN ('kiloclaw_free_month', 'kilo_pass_bonus')"
+        },
+        "impact_referral_reward_decisions_months_granted_non_negative_check": {
+          "name": "impact_referral_reward_decisions_months_granted_non_negative_check",
+          "value": "\"impact_referral_reward_decisions\".\"months_granted\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_referral_rewards": {
+      "name": "impact_referral_rewards",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "conversion_id": {
+          "name": "conversion_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "decision_id": {
+          "name": "decision_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_user_id": {
+          "name": "beneficiary_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "beneficiary_role": {
+          "name": "beneficiary_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reward_kind": {
+          "name": "reward_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw_free_month'"
+        },
+        "months_granted": {
+          "name": "months_granted",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "reward_percent": {
+          "name": "reward_percent",
+          "type": "numeric(6, 4)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_tier": {
+          "name": "source_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reward_amount_usd": {
+          "name": "reward_amount_usd",
+          "type": "numeric(12, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "applies_to_subscription_id": {
+          "name": "applies_to_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "applies_to_kilo_pass_subscription_id": {
+          "name": "applies_to_kilo_pass_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "consumed_kilo_pass_issuance_id": {
+          "name": "consumed_kilo_pass_issuance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "consumed_kilo_pass_issuance_item_id": {
+          "name": "consumed_kilo_pass_issuance_item_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "earned_at": {
+          "name": "earned_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reversed_at": {
+          "name": "reversed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_reason": {
+          "name": "review_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_referral_rewards_beneficiary_user_id": {
+          "name": "IDX_impact_referral_rewards_beneficiary_user_id",
+          "columns": [
+            {
+              "expression": "beneficiary_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_referral_rewards_status": {
+          "name": "IDX_impact_referral_rewards_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_referral_rewards_conversion_id_impact_referral_conversions_id_fk": {
+          "name": "impact_referral_rewards_conversion_id_impact_referral_conversions_id_fk",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "impact_referral_conversions",
+          "columnsFrom": [
+            "conversion_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_rewards_decision_id_impact_referral_reward_decisions_id_fk": {
+          "name": "impact_referral_rewards_decision_id_impact_referral_reward_decisions_id_fk",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "impact_referral_reward_decisions",
+          "columnsFrom": [
+            "decision_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referral_rewards_beneficiary_user_id_kilocode_users_id_fk": {
+          "name": "impact_referral_rewards_beneficiary_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "beneficiary_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "FK_impact_referral_rewards_kilo_pass_subscription": {
+          "name": "FK_impact_referral_rewards_kilo_pass_subscription",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "applies_to_kilo_pass_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "FK_impact_referral_rewards_kilo_pass_issuance": {
+          "name": "FK_impact_referral_rewards_kilo_pass_issuance",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "kilo_pass_issuances",
+          "columnsFrom": [
+            "consumed_kilo_pass_issuance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "FK_impact_referral_rewards_kilo_pass_issuance_item": {
+          "name": "FK_impact_referral_rewards_kilo_pass_issuance_item",
+          "tableFrom": "impact_referral_rewards",
+          "tableTo": "kilo_pass_issuance_items",
+          "columnsFrom": [
+            "consumed_kilo_pass_issuance_item_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_referral_rewards_conversion_role": {
+          "name": "UQ_impact_referral_rewards_conversion_role",
+          "nullsNotDistinct": false,
+          "columns": [
+            "conversion_id",
+            "beneficiary_role"
+          ]
+        },
+        "UQ_impact_referral_rewards_decision_id": {
+          "name": "UQ_impact_referral_rewards_decision_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "decision_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_referral_rewards_product_check": {
+          "name": "impact_referral_rewards_product_check",
+          "value": "\"impact_referral_rewards\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        },
+        "impact_referral_rewards_beneficiary_role_check": {
+          "name": "impact_referral_rewards_beneficiary_role_check",
+          "value": "\"impact_referral_rewards\".\"beneficiary_role\" IN ('referrer', 'referee')"
+        },
+        "impact_referral_rewards_reward_kind_check": {
+          "name": "impact_referral_rewards_reward_kind_check",
+          "value": "\"impact_referral_rewards\".\"reward_kind\" IN ('kiloclaw_free_month', 'kilo_pass_bonus')"
+        },
+        "impact_referral_rewards_status_check": {
+          "name": "impact_referral_rewards_status_check",
+          "value": "\"impact_referral_rewards\".\"status\" IN ('pending', 'earned', 'applied', 'reversed', 'expired', 'canceled', 'review_required')"
+        },
+        "impact_referral_rewards_months_granted_non_negative_check": {
+          "name": "impact_referral_rewards_months_granted_non_negative_check",
+          "value": "\"impact_referral_rewards\".\"months_granted\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.impact_referrals": {
+      "name": "impact_referrals",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "product": {
+          "name": "product",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kiloclaw'"
+        },
+        "referee_user_id": {
+          "name": "referee_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "referrer_user_id": {
+          "name": "referrer_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_touch_id": {
+          "name": "source_touch_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "impact_referral_id": {
+          "name": "impact_referral_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_impact_referrals_referrer_user_id": {
+          "name": "IDX_impact_referrals_referrer_user_id",
+          "columns": [
+            {
+              "expression": "referrer_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_impact_referrals_source_touch_id": {
+          "name": "IDX_impact_referrals_source_touch_id",
+          "columns": [
+            {
+              "expression": "source_touch_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "impact_referrals_referee_user_id_kilocode_users_id_fk": {
+          "name": "impact_referrals_referee_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referrals",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "referee_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "impact_referrals_referrer_user_id_kilocode_users_id_fk": {
+          "name": "impact_referrals_referrer_user_id_kilocode_users_id_fk",
+          "tableFrom": "impact_referrals",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "referrer_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "impact_referrals_source_touch_id_impact_attribution_touches_id_fk": {
+          "name": "impact_referrals_source_touch_id_impact_attribution_touches_id_fk",
+          "tableFrom": "impact_referrals",
+          "tableTo": "impact_attribution_touches",
+          "columnsFrom": [
+            "source_touch_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_impact_referrals_product_referee_user_id": {
+          "name": "UQ_impact_referrals_product_referee_user_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "product",
+            "referee_user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "impact_referrals_product_check": {
+          "name": "impact_referrals_product_check",
+          "value": "\"impact_referrals\".\"product\" IN ('kiloclaw', 'kilo_pass')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.ja4_digest": {
+      "name": "ja4_digest",
+      "schema": "",
+      "columns": {
+        "ja4_digest_id": {
+          "name": "ja4_digest_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "ja4_digest": {
+          "name": "ja4_digest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_ja4_digest": {
+          "name": "UQ_ja4_digest",
+          "columns": [
+            {
+              "expression": "ja4_digest",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_audit_log": {
+      "name": "kilo_pass_audit_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_pass_subscription_id": {
+          "name": "kilo_pass_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "result": {
+          "name": "result",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_event_id": {
+          "name": "stripe_event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_invoice_id": {
+          "name": "stripe_invoice_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_subscription_id": {
+          "name": "stripe_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "related_credit_transaction_id": {
+          "name": "related_credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "related_monthly_issuance_id": {
+          "name": "related_monthly_issuance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "payload_json": {
+          "name": "payload_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_audit_log_created_at": {
+          "name": "IDX_kilo_pass_audit_log_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_kilo_user_id": {
+          "name": "IDX_kilo_pass_audit_log_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_kilo_pass_subscription_id": {
+          "name": "IDX_kilo_pass_audit_log_kilo_pass_subscription_id",
+          "columns": [
+            {
+              "expression": "kilo_pass_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_action": {
+          "name": "IDX_kilo_pass_audit_log_action",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_result": {
+          "name": "IDX_kilo_pass_audit_log_result",
+          "columns": [
+            {
+              "expression": "result",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_idempotency_key": {
+          "name": "IDX_kilo_pass_audit_log_idempotency_key",
+          "columns": [
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_stripe_event_id": {
+          "name": "IDX_kilo_pass_audit_log_stripe_event_id",
+          "columns": [
+            {
+              "expression": "stripe_event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_stripe_invoice_id": {
+          "name": "IDX_kilo_pass_audit_log_stripe_invoice_id",
+          "columns": [
+            {
+              "expression": "stripe_invoice_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_stripe_subscription_id": {
+          "name": "IDX_kilo_pass_audit_log_stripe_subscription_id",
+          "columns": [
+            {
+              "expression": "stripe_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_related_credit_transaction_id": {
+          "name": "IDX_kilo_pass_audit_log_related_credit_transaction_id",
+          "columns": [
+            {
+              "expression": "related_credit_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_audit_log_related_monthly_issuance_id": {
+          "name": "IDX_kilo_pass_audit_log_related_monthly_issuance_id",
+          "columns": [
+            {
+              "expression": "related_monthly_issuance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_audit_log_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_audit_log_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_audit_log",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_audit_log_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk": {
+          "name": "kilo_pass_audit_log_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk",
+          "tableFrom": "kilo_pass_audit_log",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "kilo_pass_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_audit_log_related_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "kilo_pass_audit_log_related_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "kilo_pass_audit_log",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "related_credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_audit_log_related_monthly_issuance_id_kilo_pass_issuances_id_fk": {
+          "name": "kilo_pass_audit_log_related_monthly_issuance_id_kilo_pass_issuances_id_fk",
+          "tableFrom": "kilo_pass_audit_log",
+          "tableTo": "kilo_pass_issuances",
+          "columnsFrom": [
+            "related_monthly_issuance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_audit_log_action_check": {
+          "name": "kilo_pass_audit_log_action_check",
+          "value": "\"kilo_pass_audit_log\".\"action\" IN ('stripe_webhook_received', 'kilo_pass_invoice_paid_handled', 'store_purchase_completed', 'store_notification_received', 'store_subscription_renewed', 'store_subscription_canceled', 'store_subscription_expired', 'store_subscription_refunded', 'base_credits_issued', 'bonus_credits_issued', 'bonus_credits_skipped_idempotent', 'first_month_50pct_promo_issued', 'yearly_monthly_base_cron_started', 'yearly_monthly_base_cron_completed', 'issue_yearly_remaining_credits', 'duplicate_card_subscription_canceled', 'yearly_monthly_bonus_cron_started', 'yearly_monthly_bonus_cron_completed')"
+        },
+        "kilo_pass_audit_log_result_check": {
+          "name": "kilo_pass_audit_log_result_check",
+          "value": "\"kilo_pass_audit_log\".\"result\" IN ('success', 'skipped_idempotent', 'failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_issuance_items": {
+      "name": "kilo_pass_issuance_items",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_pass_issuance_id": {
+          "name": "kilo_pass_issuance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_transaction_id": {
+          "name": "credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_usd": {
+          "name": "amount_usd",
+          "type": "numeric(12, 2)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bonus_percent_applied": {
+          "name": "bonus_percent_applied",
+          "type": "numeric(6, 4)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_issuance_items_issuance_id": {
+          "name": "IDX_kilo_pass_issuance_items_issuance_id",
+          "columns": [
+            {
+              "expression": "kilo_pass_issuance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_issuance_items_credit_transaction_id": {
+          "name": "IDX_kilo_pass_issuance_items_credit_transaction_id",
+          "columns": [
+            {
+              "expression": "credit_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_issuance_items_kilo_pass_issuance_id_kilo_pass_issuances_id_fk": {
+          "name": "kilo_pass_issuance_items_kilo_pass_issuance_id_kilo_pass_issuances_id_fk",
+          "tableFrom": "kilo_pass_issuance_items",
+          "tableTo": "kilo_pass_issuances",
+          "columnsFrom": [
+            "kilo_pass_issuance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_issuance_items_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "kilo_pass_issuance_items_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "kilo_pass_issuance_items",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kilo_pass_issuance_items_credit_transaction_id_unique": {
+          "name": "kilo_pass_issuance_items_credit_transaction_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "credit_transaction_id"
+          ]
+        },
+        "UQ_kilo_pass_issuance_items_issuance_kind": {
+          "name": "UQ_kilo_pass_issuance_items_issuance_kind",
+          "nullsNotDistinct": false,
+          "columns": [
+            "kilo_pass_issuance_id",
+            "kind"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_issuance_items_bonus_percent_applied_range_check": {
+          "name": "kilo_pass_issuance_items_bonus_percent_applied_range_check",
+          "value": "\"kilo_pass_issuance_items\".\"bonus_percent_applied\" IS NULL OR (\"kilo_pass_issuance_items\".\"bonus_percent_applied\" >= 0 AND \"kilo_pass_issuance_items\".\"bonus_percent_applied\" <= 1)"
+        },
+        "kilo_pass_issuance_items_amount_usd_non_negative_check": {
+          "name": "kilo_pass_issuance_items_amount_usd_non_negative_check",
+          "value": "\"kilo_pass_issuance_items\".\"amount_usd\" >= 0"
+        },
+        "kilo_pass_issuance_items_kind_check": {
+          "name": "kilo_pass_issuance_items_kind_check",
+          "value": "\"kilo_pass_issuance_items\".\"kind\" IN ('base', 'bonus', 'promo_first_month_50pct', 'referral_bonus')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_issuances": {
+      "name": "kilo_pass_issuances",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_pass_subscription_id": {
+          "name": "kilo_pass_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "issue_month": {
+          "name": "issue_month",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_invoice_id": {
+          "name": "stripe_invoice_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "initial_welcome_promo_eligibility_reason": {
+          "name": "initial_welcome_promo_eligibility_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_issuances_stripe_invoice_id": {
+          "name": "UQ_kilo_pass_issuances_stripe_invoice_id",
+          "columns": [
+            {
+              "expression": "stripe_invoice_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_issuances\".\"stripe_invoice_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_issuances_subscription_id": {
+          "name": "IDX_kilo_pass_issuances_subscription_id",
+          "columns": [
+            {
+              "expression": "kilo_pass_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_issuances_issue_month": {
+          "name": "IDX_kilo_pass_issuances_issue_month",
+          "columns": [
+            {
+              "expression": "issue_month",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_issuances_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk": {
+          "name": "kilo_pass_issuances_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk",
+          "tableFrom": "kilo_pass_issuances",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "kilo_pass_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_issuances_subscription_issue_month": {
+          "name": "UQ_kilo_pass_issuances_subscription_issue_month",
+          "nullsNotDistinct": false,
+          "columns": [
+            "kilo_pass_subscription_id",
+            "issue_month"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_issuances_issue_month_day_one_check": {
+          "name": "kilo_pass_issuances_issue_month_day_one_check",
+          "value": "EXTRACT(DAY FROM \"kilo_pass_issuances\".\"issue_month\") = 1"
+        },
+        "kilo_pass_issuances_source_check": {
+          "name": "kilo_pass_issuances_source_check",
+          "value": "\"kilo_pass_issuances\".\"source\" IN ('stripe_invoice', 'app_store_transaction', 'google_play_transaction', 'cron')"
+        },
+        "kilo_pass_issuances_initial_welcome_promo_reason_check": {
+          "name": "kilo_pass_issuances_initial_welcome_promo_reason_check",
+          "value": "\"kilo_pass_issuances\".\"initial_welcome_promo_eligibility_reason\" IN ('first_payment_fingerprint_claim', 'fingerprint_previously_claimed', 'missing_fingerprint', 'no_supported_fingerprint', 'no_positive_settlement', 'settlement_unresolved')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_agreements": {
+      "name": "kilo_pass_org_agreements",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "parent_organization_id": {
+          "name": "parent_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "term_version_id": {
+          "name": "term_version_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "processing_condition": {
+          "name": "processing_condition",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'ready'"
+        },
+        "purchase_channel": {
+          "name": "purchase_channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cadence": {
+          "name": "cadence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purchased_pass_capacity": {
+          "name": "purchased_pass_capacity",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "next_purchased_pass_capacity": {
+          "name": "next_purchased_pass_capacity",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_capacity_effective_at": {
+          "name": "next_capacity_effective_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "paid_from": {
+          "name": "paid_from",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "paid_until": {
+          "name": "paid_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "issuance_anchor_at": {
+          "name": "issuance_anchor_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subscription_id": {
+          "name": "provider_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_seat_add_on_item_id": {
+          "name": "provider_seat_add_on_item_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "activation_provider_event_id": {
+          "name": "activation_provider_event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "external_contract_id": {
+          "name": "external_contract_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "payment_review_required_at": {
+          "name": "payment_review_required_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancellation_effective_at": {
+          "name": "cancellation_effective_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manually_issued_through": {
+          "name": "manually_issued_through",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_org_agreements_one_non_ended_parent": {
+          "name": "UQ_kilo_pass_org_agreements_one_non_ended_parent",
+          "columns": [
+            {
+              "expression": "parent_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_agreements\".\"state\" <> 'ended'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_org_agreements_provider_subscription": {
+          "name": "UQ_kilo_pass_org_agreements_provider_subscription",
+          "columns": [
+            {
+              "expression": "provider_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_agreements\".\"provider_subscription_id\" IS NOT NULL AND \"kilo_pass_org_agreements\".\"state\" <> 'ended'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_org_agreements_provider_seat_add_on_item": {
+          "name": "UQ_kilo_pass_org_agreements_provider_seat_add_on_item",
+          "columns": [
+            {
+              "expression": "provider_seat_add_on_item_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_agreements\".\"provider_seat_add_on_item_id\" IS NOT NULL AND \"kilo_pass_org_agreements\".\"state\" <> 'ended'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_org_agreements_external_contract": {
+          "name": "UQ_kilo_pass_org_agreements_external_contract",
+          "columns": [
+            {
+              "expression": "external_contract_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_agreements\".\"external_contract_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_org_agreements_activation_provider_event": {
+          "name": "UQ_kilo_pass_org_agreements_activation_provider_event",
+          "columns": [
+            {
+              "expression": "activation_provider_event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_agreements\".\"activation_provider_event_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_org_agreements_processing": {
+          "name": "IDX_kilo_pass_org_agreements_processing",
+          "columns": [
+            {
+              "expression": "processing_condition",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_agreements_parent_organization_id_organizations_id_fk": {
+          "name": "kilo_pass_org_agreements_parent_organization_id_organizations_id_fk",
+          "tableFrom": "kilo_pass_org_agreements",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "parent_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_agreements_term_version_id_kilo_pass_org_term_versions_id_fk": {
+          "name": "kilo_pass_org_agreements_term_version_id_kilo_pass_org_term_versions_id_fk",
+          "tableFrom": "kilo_pass_org_agreements",
+          "tableTo": "kilo_pass_org_term_versions",
+          "columnsFrom": [
+            "term_version_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_agreements_purchased_capacity_non_negative_check": {
+          "name": "kilo_pass_org_agreements_purchased_capacity_non_negative_check",
+          "value": "\"kilo_pass_org_agreements\".\"purchased_pass_capacity\" >= 0"
+        },
+        "kilo_pass_org_agreements_next_capacity_check": {
+          "name": "kilo_pass_org_agreements_next_capacity_check",
+          "value": "(\"kilo_pass_org_agreements\".\"next_purchased_pass_capacity\" IS NULL AND \"kilo_pass_org_agreements\".\"next_capacity_effective_at\" IS NULL) OR (\"kilo_pass_org_agreements\".\"next_purchased_pass_capacity\" >= 0 AND \"kilo_pass_org_agreements\".\"next_capacity_effective_at\" IS NOT NULL)"
+        },
+        "kilo_pass_org_agreements_paid_interval_check": {
+          "name": "kilo_pass_org_agreements_paid_interval_check",
+          "value": "(\"kilo_pass_org_agreements\".\"paid_from\" IS NULL AND \"kilo_pass_org_agreements\".\"paid_until\" IS NULL) OR (\"kilo_pass_org_agreements\".\"paid_from\" IS NOT NULL AND \"kilo_pass_org_agreements\".\"paid_until\" IS NOT NULL AND \"kilo_pass_org_agreements\".\"paid_from\" < \"kilo_pass_org_agreements\".\"paid_until\")"
+        },
+        "kilo_pass_org_agreements_state_check": {
+          "name": "kilo_pass_org_agreements_state_check",
+          "value": "\"kilo_pass_org_agreements\".\"state\" IN ('pending_payment', 'active', 'cancel_at_period_end', 'ended')"
+        },
+        "kilo_pass_org_agreements_processing_condition_check": {
+          "name": "kilo_pass_org_agreements_processing_condition_check",
+          "value": "\"kilo_pass_org_agreements\".\"processing_condition\" IN ('ready', 'manual', 'blocked', 'overallocated', 'failed', 'suspended_for_review')"
+        },
+        "kilo_pass_org_agreements_purchase_channel_check": {
+          "name": "kilo_pass_org_agreements_purchase_channel_check",
+          "value": "\"kilo_pass_org_agreements\".\"purchase_channel\" IN ('self_serve', 'manual')"
+        },
+        "kilo_pass_org_agreements_cadence_check": {
+          "name": "kilo_pass_org_agreements_cadence_check",
+          "value": "\"kilo_pass_org_agreements\".\"cadence\" IN ('monthly', 'yearly')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_allocation_plan_rows": {
+      "name": "kilo_pass_org_allocation_plan_rows",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "allocation_plan_id": {
+          "name": "allocation_plan_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "allocation_container_organization_id": {
+          "name": "allocation_container_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pass_capacity": {
+          "name": "pass_capacity",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_org_allocation_plan_rows_positive_container": {
+          "name": "IDX_kilo_pass_org_allocation_plan_rows_positive_container",
+          "columns": [
+            {
+              "expression": "allocation_container_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kilo_pass_org_allocation_plan_rows\".\"pass_capacity\" > 0",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_allocation_plan_rows_allocation_plan_id_kilo_pass_org_allocation_plans_id_fk": {
+          "name": "kilo_pass_org_allocation_plan_rows_allocation_plan_id_kilo_pass_org_allocation_plans_id_fk",
+          "tableFrom": "kilo_pass_org_allocation_plan_rows",
+          "tableTo": "kilo_pass_org_allocation_plans",
+          "columnsFrom": [
+            "allocation_plan_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_allocation_plan_rows_allocation_container_organization_id_organizations_id_fk": {
+          "name": "kilo_pass_org_allocation_plan_rows_allocation_container_organization_id_organizations_id_fk",
+          "tableFrom": "kilo_pass_org_allocation_plan_rows",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "allocation_container_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_allocation_plan_rows_plan_container": {
+          "name": "UQ_kilo_pass_org_allocation_plan_rows_plan_container",
+          "nullsNotDistinct": false,
+          "columns": [
+            "allocation_plan_id",
+            "allocation_container_organization_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_allocation_plan_rows_capacity_non_negative_check": {
+          "name": "kilo_pass_org_allocation_plan_rows_capacity_non_negative_check",
+          "value": "\"kilo_pass_org_allocation_plan_rows\".\"pass_capacity\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_allocation_plans": {
+      "name": "kilo_pass_org_allocation_plans",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "agreement_id": {
+          "name": "agreement_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "effective_window_start": {
+          "name": "effective_window_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kilo_pass_org_allocation_plans_agreement_id_kilo_pass_org_agreements_id_fk": {
+          "name": "kilo_pass_org_allocation_plans_agreement_id_kilo_pass_org_agreements_id_fk",
+          "tableFrom": "kilo_pass_org_allocation_plans",
+          "tableTo": "kilo_pass_org_agreements",
+          "columnsFrom": [
+            "agreement_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_allocation_plans_created_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_org_allocation_plans_created_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_org_allocation_plans",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_allocation_plans_agreement_window": {
+          "name": "UQ_kilo_pass_org_allocation_plans_agreement_window",
+          "nullsNotDistinct": false,
+          "columns": [
+            "agreement_id",
+            "effective_window_start"
+          ]
+        },
+        "UQ_kilo_pass_org_allocation_plans_agreement_version": {
+          "name": "UQ_kilo_pass_org_allocation_plans_agreement_version",
+          "nullsNotDistinct": false,
+          "columns": [
+            "agreement_id",
+            "version"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_allocation_plans_version_positive_check": {
+          "name": "kilo_pass_org_allocation_plans_version_positive_check",
+          "value": "\"kilo_pass_org_allocation_plans\".\"version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_audit_records": {
+      "name": "kilo_pass_org_audit_records",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "agreement_id": {
+          "name": "agreement_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_kilo_user_id": {
+          "name": "actor_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "before_json": {
+          "name": "before_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "after_json": {
+          "name": "after_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_org_audit_records_idempotency": {
+          "name": "UQ_kilo_pass_org_audit_records_idempotency",
+          "columns": [
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_audit_records\".\"idempotency_key\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_org_audit_records_agreement_created": {
+          "name": "IDX_kilo_pass_org_audit_records_agreement_created",
+          "columns": [
+            {
+              "expression": "agreement_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_audit_records_agreement_id_kilo_pass_org_agreements_id_fk": {
+          "name": "kilo_pass_org_audit_records_agreement_id_kilo_pass_org_agreements_id_fk",
+          "tableFrom": "kilo_pass_org_audit_records",
+          "tableTo": "kilo_pass_org_agreements",
+          "columnsFrom": [
+            "agreement_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_audit_records_actor_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_org_audit_records_actor_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_org_audit_records",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "actor_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_issuance_snapshots": {
+      "name": "kilo_pass_org_issuance_snapshots",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "agreement_id": {
+          "name": "agreement_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "processing_run_id": {
+          "name": "processing_run_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "allocation_plan_id": {
+          "name": "allocation_plan_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "term_version_id": {
+          "name": "term_version_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "allocation_container_organization_id": {
+          "name": "allocation_container_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "window_start": {
+          "name": "window_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "window_end": {
+          "name": "window_end",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "qualifying_spend_starts_at": {
+          "name": "qualifying_spend_starts_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tranche_key": {
+          "name": "tranche_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "allocated_pass_capacity": {
+          "name": "allocated_pass_capacity",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "base_credit_microdollars": {
+          "name": "base_credit_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bonus_credit_microdollars": {
+          "name": "bonus_credit_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "unlock_spend_microdollars": {
+          "name": "unlock_spend_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "qualifying_spend_microdollars": {
+          "name": "qualifying_spend_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "bonus_mode": {
+          "name": "bonus_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bonus_unlocked_at": {
+          "name": "bonus_unlocked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repair_completed_at": {
+          "name": "repair_completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "bonus_credit_transaction_id": {
+          "name": "bonus_credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "base_credit_transaction_id": {
+          "name": "base_credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_org_issuance_snapshots_base_credit_transaction": {
+          "name": "UQ_kilo_pass_org_issuance_snapshots_base_credit_transaction",
+          "columns": [
+            {
+              "expression": "base_credit_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_issuance_snapshots\".\"base_credit_transaction_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_org_issuance_snapshots_bonus_credit_transaction": {
+          "name": "UQ_kilo_pass_org_issuance_snapshots_bonus_credit_transaction",
+          "columns": [
+            {
+              "expression": "bonus_credit_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_org_issuance_snapshots\".\"bonus_credit_transaction_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_org_issuance_snapshots_window": {
+          "name": "IDX_kilo_pass_org_issuance_snapshots_window",
+          "columns": [
+            {
+              "expression": "agreement_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "window_start",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_issuance_snapshots_agreement_id_kilo_pass_org_agreements_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_agreement_id_kilo_pass_org_agreements_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "kilo_pass_org_agreements",
+          "columnsFrom": [
+            "agreement_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_processing_run_id_kilo_pass_org_processing_runs_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_processing_run_id_kilo_pass_org_processing_runs_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "kilo_pass_org_processing_runs",
+          "columnsFrom": [
+            "processing_run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_allocation_plan_id_kilo_pass_org_allocation_plans_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_allocation_plan_id_kilo_pass_org_allocation_plans_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "kilo_pass_org_allocation_plans",
+          "columnsFrom": [
+            "allocation_plan_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_term_version_id_kilo_pass_org_term_versions_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_term_version_id_kilo_pass_org_term_versions_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "kilo_pass_org_term_versions",
+          "columnsFrom": [
+            "term_version_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_allocation_container_organization_id_organizations_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_allocation_container_organization_id_organizations_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "allocation_container_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_bonus_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_bonus_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "bonus_credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_issuance_snapshots_base_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "kilo_pass_org_issuance_snapshots_base_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "kilo_pass_org_issuance_snapshots",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "base_credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_issuance_snapshots_container_window_tranche": {
+          "name": "UQ_kilo_pass_org_issuance_snapshots_container_window_tranche",
+          "nullsNotDistinct": false,
+          "columns": [
+            "agreement_id",
+            "allocation_container_organization_id",
+            "window_start",
+            "tranche_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_issuance_snapshots_window_check": {
+          "name": "kilo_pass_org_issuance_snapshots_window_check",
+          "value": "\"kilo_pass_org_issuance_snapshots\".\"window_start\" < \"kilo_pass_org_issuance_snapshots\".\"window_end\""
+        },
+        "kilo_pass_org_issuance_snapshots_qualifying_spend_window_check": {
+          "name": "kilo_pass_org_issuance_snapshots_qualifying_spend_window_check",
+          "value": "\"kilo_pass_org_issuance_snapshots\".\"window_start\" <= \"kilo_pass_org_issuance_snapshots\".\"qualifying_spend_starts_at\" AND \"kilo_pass_org_issuance_snapshots\".\"qualifying_spend_starts_at\" < \"kilo_pass_org_issuance_snapshots\".\"window_end\""
+        },
+        "kilo_pass_org_issuance_snapshots_values_non_negative_check": {
+          "name": "kilo_pass_org_issuance_snapshots_values_non_negative_check",
+          "value": "\"kilo_pass_org_issuance_snapshots\".\"allocated_pass_capacity\" >= 0 AND \"kilo_pass_org_issuance_snapshots\".\"base_credit_microdollars\" >= 0 AND \"kilo_pass_org_issuance_snapshots\".\"bonus_credit_microdollars\" >= 0 AND \"kilo_pass_org_issuance_snapshots\".\"unlock_spend_microdollars\" >= 0 AND \"kilo_pass_org_issuance_snapshots\".\"qualifying_spend_microdollars\" >= 0"
+        },
+        "kilo_pass_org_issuance_snapshots_kind_check": {
+          "name": "kilo_pass_org_issuance_snapshots_kind_check",
+          "value": "\"kilo_pass_org_issuance_snapshots\".\"kind\" IN ('regular', 'bridge', 'supplement')"
+        },
+        "kilo_pass_org_issuance_snapshots_bonus_mode_check": {
+          "name": "kilo_pass_org_issuance_snapshots_bonus_mode_check",
+          "value": "\"kilo_pass_org_issuance_snapshots\".\"bonus_mode\" IN ('after_base', 'upfront')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_notification_deliveries": {
+      "name": "kilo_pass_org_notification_deliveries",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "processing_run_id": {
+          "name": "processing_run_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recipient_kilo_user_id": {
+          "name": "recipient_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "lease_expires_at": {
+          "name": "lease_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_org_notification_deliveries_status": {
+          "name": "IDX_kilo_pass_org_notification_deliveries_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_notification_deliveries_processing_run_id_kilo_pass_org_processing_runs_id_fk": {
+          "name": "kilo_pass_org_notification_deliveries_processing_run_id_kilo_pass_org_processing_runs_id_fk",
+          "tableFrom": "kilo_pass_org_notification_deliveries",
+          "tableTo": "kilo_pass_org_processing_runs",
+          "columnsFrom": [
+            "processing_run_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_notification_deliveries_recipient_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_org_notification_deliveries_recipient_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_org_notification_deliveries",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "recipient_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_notification_deliveries_run_recipient": {
+          "name": "UQ_kilo_pass_org_notification_deliveries_run_recipient",
+          "nullsNotDistinct": false,
+          "columns": [
+            "processing_run_id",
+            "recipient_kilo_user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_notification_deliveries_status_check": {
+          "name": "kilo_pass_org_notification_deliveries_status_check",
+          "value": "\"kilo_pass_org_notification_deliveries\".\"status\" IN ('pending', 'sending', 'sent', 'failed')"
+        },
+        "kilo_pass_org_notification_deliveries_attempt_count_check": {
+          "name": "kilo_pass_org_notification_deliveries_attempt_count_check",
+          "value": "\"kilo_pass_org_notification_deliveries\".\"attempt_count\" >= 0"
+        },
+        "kilo_pass_org_notification_deliveries_sent_check": {
+          "name": "kilo_pass_org_notification_deliveries_sent_check",
+          "value": "(\"kilo_pass_org_notification_deliveries\".\"status\" = 'sent' AND \"kilo_pass_org_notification_deliveries\".\"sent_at\" IS NOT NULL AND \"kilo_pass_org_notification_deliveries\".\"lease_expires_at\" IS NULL) OR (\"kilo_pass_org_notification_deliveries\".\"status\" = 'sending' AND \"kilo_pass_org_notification_deliveries\".\"sent_at\" IS NULL AND \"kilo_pass_org_notification_deliveries\".\"lease_expires_at\" IS NOT NULL) OR (\"kilo_pass_org_notification_deliveries\".\"status\" IN ('pending', 'failed') AND \"kilo_pass_org_notification_deliveries\".\"sent_at\" IS NULL AND \"kilo_pass_org_notification_deliveries\".\"lease_expires_at\" IS NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_processing_runs": {
+      "name": "kilo_pass_org_processing_runs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "agreement_id": {
+          "name": "agreement_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "window_start": {
+          "name": "window_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "window_end": {
+          "name": "window_end",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "state": {
+          "name": "state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "lease_expires_at": {
+          "name": "lease_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_org_processing_runs_state_lease": {
+          "name": "IDX_kilo_pass_org_processing_runs_state_lease",
+          "columns": [
+            {
+              "expression": "state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "lease_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_processing_runs_agreement_id_kilo_pass_org_agreements_id_fk": {
+          "name": "kilo_pass_org_processing_runs_agreement_id_kilo_pass_org_agreements_id_fk",
+          "tableFrom": "kilo_pass_org_processing_runs",
+          "tableTo": "kilo_pass_org_agreements",
+          "columnsFrom": [
+            "agreement_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_processing_runs_agreement_window": {
+          "name": "UQ_kilo_pass_org_processing_runs_agreement_window",
+          "nullsNotDistinct": false,
+          "columns": [
+            "agreement_id",
+            "window_start"
+          ]
+        },
+        "UQ_kilo_pass_org_processing_runs_idempotency": {
+          "name": "UQ_kilo_pass_org_processing_runs_idempotency",
+          "nullsNotDistinct": false,
+          "columns": [
+            "idempotency_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_processing_runs_window_check": {
+          "name": "kilo_pass_org_processing_runs_window_check",
+          "value": "\"kilo_pass_org_processing_runs\".\"window_start\" < \"kilo_pass_org_processing_runs\".\"window_end\""
+        },
+        "kilo_pass_org_processing_runs_attempt_count_non_negative_check": {
+          "name": "kilo_pass_org_processing_runs_attempt_count_non_negative_check",
+          "value": "\"kilo_pass_org_processing_runs\".\"attempt_count\" >= 0"
+        },
+        "kilo_pass_org_processing_runs_state_check": {
+          "name": "kilo_pass_org_processing_runs_state_check",
+          "value": "\"kilo_pass_org_processing_runs\".\"state\" IN ('pending', 'running', 'succeeded', 'blocked', 'failed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_qualifying_spend_events": {
+      "name": "kilo_pass_org_qualifying_spend_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "issuance_snapshot_id": {
+          "name": "issuance_snapshot_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "allocation_container_organization_id": {
+          "name": "allocation_container_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credit_transaction_id": {
+          "name": "credit_transaction_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "spent_microdollars": {
+          "name": "spent_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_org_qualifying_spend_events_snapshot_occurred": {
+          "name": "IDX_kilo_pass_org_qualifying_spend_events_snapshot_occurred",
+          "columns": [
+            {
+              "expression": "issuance_snapshot_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "occurred_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_org_qualifying_spend_events_issuance_snapshot_id_kilo_pass_org_issuance_snapshots_id_fk": {
+          "name": "kilo_pass_org_qualifying_spend_events_issuance_snapshot_id_kilo_pass_org_issuance_snapshots_id_fk",
+          "tableFrom": "kilo_pass_org_qualifying_spend_events",
+          "tableTo": "kilo_pass_org_issuance_snapshots",
+          "columnsFrom": [
+            "issuance_snapshot_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_qualifying_spend_events_allocation_container_organization_id_organizations_id_fk": {
+          "name": "kilo_pass_org_qualifying_spend_events_allocation_container_organization_id_organizations_id_fk",
+          "tableFrom": "kilo_pass_org_qualifying_spend_events",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "allocation_container_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_qualifying_spend_events_credit_transaction_id_credit_transactions_id_fk": {
+          "name": "kilo_pass_org_qualifying_spend_events_credit_transaction_id_credit_transactions_id_fk",
+          "tableFrom": "kilo_pass_org_qualifying_spend_events",
+          "tableTo": "credit_transactions",
+          "columnsFrom": [
+            "credit_transaction_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_qualifying_spend_events_snapshot_credit_transaction": {
+          "name": "UQ_kilo_pass_org_qualifying_spend_events_snapshot_credit_transaction",
+          "nullsNotDistinct": false,
+          "columns": [
+            "issuance_snapshot_id",
+            "credit_transaction_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_qualifying_spend_events_amount_positive_check": {
+          "name": "kilo_pass_org_qualifying_spend_events_amount_positive_check",
+          "value": "\"kilo_pass_org_qualifying_spend_events\".\"spent_microdollars\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_supplements": {
+      "name": "kilo_pass_org_supplements",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "issuance_snapshot_id": {
+          "name": "issuance_snapshot_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_invoice_line_id": {
+          "name": "provider_invoice_line_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "remaining_service_numerator": {
+          "name": "remaining_service_numerator",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "remaining_service_denominator": {
+          "name": "remaining_service_denominator",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kilo_pass_org_supplements_issuance_snapshot_id_kilo_pass_org_issuance_snapshots_id_fk": {
+          "name": "kilo_pass_org_supplements_issuance_snapshot_id_kilo_pass_org_issuance_snapshots_id_fk",
+          "tableFrom": "kilo_pass_org_supplements",
+          "tableTo": "kilo_pass_org_issuance_snapshots",
+          "columnsFrom": [
+            "issuance_snapshot_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_supplements_provider_invoice_line": {
+          "name": "UQ_kilo_pass_org_supplements_provider_invoice_line",
+          "nullsNotDistinct": false,
+          "columns": [
+            "provider_invoice_line_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_supplements_ratio_check": {
+          "name": "kilo_pass_org_supplements_ratio_check",
+          "value": "\"kilo_pass_org_supplements\".\"remaining_service_numerator\" > 0 AND \"kilo_pass_org_supplements\".\"remaining_service_denominator\" > 0 AND \"kilo_pass_org_supplements\".\"remaining_service_numerator\" <= \"kilo_pass_org_supplements\".\"remaining_service_denominator\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_term_transitions": {
+      "name": "kilo_pass_org_term_transitions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "agreement_id": {
+          "name": "agreement_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "from_term_version_id": {
+          "name": "from_term_version_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "to_term_version_id": {
+          "name": "to_term_version_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "effective_at": {
+          "name": "effective_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kilo_pass_org_term_transitions_agreement_id_kilo_pass_org_agreements_id_fk": {
+          "name": "kilo_pass_org_term_transitions_agreement_id_kilo_pass_org_agreements_id_fk",
+          "tableFrom": "kilo_pass_org_term_transitions",
+          "tableTo": "kilo_pass_org_agreements",
+          "columnsFrom": [
+            "agreement_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_term_transitions_from_term_version_id_kilo_pass_org_term_versions_id_fk": {
+          "name": "kilo_pass_org_term_transitions_from_term_version_id_kilo_pass_org_term_versions_id_fk",
+          "tableFrom": "kilo_pass_org_term_transitions",
+          "tableTo": "kilo_pass_org_term_versions",
+          "columnsFrom": [
+            "from_term_version_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_term_transitions_to_term_version_id_kilo_pass_org_term_versions_id_fk": {
+          "name": "kilo_pass_org_term_transitions_to_term_version_id_kilo_pass_org_term_versions_id_fk",
+          "tableFrom": "kilo_pass_org_term_transitions",
+          "tableTo": "kilo_pass_org_term_versions",
+          "columnsFrom": [
+            "to_term_version_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_org_term_transitions_created_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_org_term_transitions_created_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_org_term_transitions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_term_transitions_agreement_effective": {
+          "name": "UQ_kilo_pass_org_term_transitions_agreement_effective",
+          "nullsNotDistinct": false,
+          "columns": [
+            "agreement_id",
+            "effective_at"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_term_transitions_changes_version_check": {
+          "name": "kilo_pass_org_term_transitions_changes_version_check",
+          "value": "\"kilo_pass_org_term_transitions\".\"from_term_version_id\" <> \"kilo_pass_org_term_transitions\".\"to_term_version_id\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_org_term_versions": {
+      "name": "kilo_pass_org_term_versions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "version_key": {
+          "name": "version_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cadence": {
+          "name": "cadence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "billing_price_microdollars_per_pass": {
+          "name": "billing_price_microdollars_per_pass",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "base_credit_microdollars_per_pass": {
+          "name": "base_credit_microdollars_per_pass",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bonus_credit_microdollars_per_pass": {
+          "name": "bonus_credit_microdollars_per_pass",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "unlock_spend_microdollars_per_pass": {
+          "name": "unlock_spend_microdollars_per_pass",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bonus_mode": {
+          "name": "bonus_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kilo_pass_org_term_versions_created_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_org_term_versions_created_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_org_term_versions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_kilo_pass_org_term_versions_version_key": {
+          "name": "UQ_kilo_pass_org_term_versions_version_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "version_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_org_term_versions_amounts_non_negative_check": {
+          "name": "kilo_pass_org_term_versions_amounts_non_negative_check",
+          "value": "\"kilo_pass_org_term_versions\".\"billing_price_microdollars_per_pass\" >= 0 AND \"kilo_pass_org_term_versions\".\"base_credit_microdollars_per_pass\" >= 0 AND \"kilo_pass_org_term_versions\".\"bonus_credit_microdollars_per_pass\" >= 0 AND \"kilo_pass_org_term_versions\".\"unlock_spend_microdollars_per_pass\" >= 0"
+        },
+        "kilo_pass_org_term_versions_tier_check": {
+          "name": "kilo_pass_org_term_versions_tier_check",
+          "value": "\"kilo_pass_org_term_versions\".\"tier\" IN ('tier_19', 'tier_49', 'tier_199')"
+        },
+        "kilo_pass_org_term_versions_cadence_check": {
+          "name": "kilo_pass_org_term_versions_cadence_check",
+          "value": "\"kilo_pass_org_term_versions\".\"cadence\" IN ('monthly', 'yearly')"
+        },
+        "kilo_pass_org_term_versions_bonus_mode_check": {
+          "name": "kilo_pass_org_term_versions_bonus_mode_check",
+          "value": "\"kilo_pass_org_term_versions\".\"bonus_mode\" IN ('after_base', 'upfront')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_pause_events": {
+      "name": "kilo_pass_pause_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_pass_subscription_id": {
+          "name": "kilo_pass_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "paused_at": {
+          "name": "paused_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resumes_at": {
+          "name": "resumes_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resumed_at": {
+          "name": "resumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_pause_events_subscription_id": {
+          "name": "IDX_kilo_pass_pause_events_subscription_id",
+          "columns": [
+            {
+              "expression": "kilo_pass_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_pause_events_one_open_per_sub": {
+          "name": "UQ_kilo_pass_pause_events_one_open_per_sub",
+          "columns": [
+            {
+              "expression": "kilo_pass_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_pause_events\".\"resumed_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_pause_events_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk": {
+          "name": "kilo_pass_pause_events_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk",
+          "tableFrom": "kilo_pass_pause_events",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "kilo_pass_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_pause_events_resumed_at_after_paused_at_check": {
+          "name": "kilo_pass_pause_events_resumed_at_after_paused_at_check",
+          "value": "\"kilo_pass_pause_events\".\"resumed_at\" IS NULL OR \"kilo_pass_pause_events\".\"resumed_at\" >= \"kilo_pass_pause_events\".\"paused_at\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_scheduled_changes": {
+      "name": "kilo_pass_scheduled_changes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_subscription_id": {
+          "name": "stripe_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "from_tier": {
+          "name": "from_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "from_cadence": {
+          "name": "from_cadence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "to_tier": {
+          "name": "to_tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "to_cadence": {
+          "name": "to_cadence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_schedule_id": {
+          "name": "stripe_schedule_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "effective_at": {
+          "name": "effective_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_scheduled_changes_kilo_user_id": {
+          "name": "IDX_kilo_pass_scheduled_changes_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_scheduled_changes_status": {
+          "name": "IDX_kilo_pass_scheduled_changes_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_scheduled_changes_stripe_subscription_id": {
+          "name": "IDX_kilo_pass_scheduled_changes_stripe_subscription_id",
+          "columns": [
+            {
+              "expression": "stripe_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_scheduled_changes_active_stripe_subscription_id": {
+          "name": "UQ_kilo_pass_scheduled_changes_active_stripe_subscription_id",
+          "columns": [
+            {
+              "expression": "stripe_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_scheduled_changes\".\"deleted_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_scheduled_changes_effective_at": {
+          "name": "IDX_kilo_pass_scheduled_changes_effective_at",
+          "columns": [
+            {
+              "expression": "effective_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_scheduled_changes_deleted_at": {
+          "name": "IDX_kilo_pass_scheduled_changes_deleted_at",
+          "columns": [
+            {
+              "expression": "deleted_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_scheduled_changes_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_scheduled_changes_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_scheduled_changes",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_scheduled_changes_stripe_subscription_id_kilo_pass_subscriptions_stripe_subscription_id_fk": {
+          "name": "kilo_pass_scheduled_changes_stripe_subscription_id_kilo_pass_subscriptions_stripe_subscription_id_fk",
+          "tableFrom": "kilo_pass_scheduled_changes",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "stripe_subscription_id"
+          ],
+          "columnsTo": [
+            "stripe_subscription_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_scheduled_changes_from_tier_check": {
+          "name": "kilo_pass_scheduled_changes_from_tier_check",
+          "value": "\"kilo_pass_scheduled_changes\".\"from_tier\" IN ('tier_19', 'tier_49', 'tier_199')"
+        },
+        "kilo_pass_scheduled_changes_from_cadence_check": {
+          "name": "kilo_pass_scheduled_changes_from_cadence_check",
+          "value": "\"kilo_pass_scheduled_changes\".\"from_cadence\" IN ('monthly', 'yearly')"
+        },
+        "kilo_pass_scheduled_changes_to_tier_check": {
+          "name": "kilo_pass_scheduled_changes_to_tier_check",
+          "value": "\"kilo_pass_scheduled_changes\".\"to_tier\" IN ('tier_19', 'tier_49', 'tier_199')"
+        },
+        "kilo_pass_scheduled_changes_to_cadence_check": {
+          "name": "kilo_pass_scheduled_changes_to_cadence_check",
+          "value": "\"kilo_pass_scheduled_changes\".\"to_cadence\" IN ('monthly', 'yearly')"
+        },
+        "kilo_pass_scheduled_changes_status_check": {
+          "name": "kilo_pass_scheduled_changes_status_check",
+          "value": "\"kilo_pass_scheduled_changes\".\"status\" IN ('not_started', 'active', 'completed', 'released', 'canceled')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_store_events": {
+      "name": "kilo_pass_store_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "payment_provider": {
+          "name": "payment_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_id": {
+          "name": "event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subscription_id": {
+          "name": "provider_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_transaction_id": {
+          "name": "provider_transaction_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "app_account_token": {
+          "name": "app_account_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "product_id": {
+          "name": "product_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "environment": {
+          "name": "environment",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payload_json": {
+          "name": "payload_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "processing_started_at": {
+          "name": "processing_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "processed_at": {
+          "name": "processed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_store_events_provider_event": {
+          "name": "UQ_kilo_pass_store_events_provider_event",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_events_provider_subscription": {
+          "name": "IDX_kilo_pass_store_events_provider_subscription",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_events_app_account_token": {
+          "name": "IDX_kilo_pass_store_events_app_account_token",
+          "columns": [
+            {
+              "expression": "app_account_token",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_store_events_payment_provider_check": {
+          "name": "kilo_pass_store_events_payment_provider_check",
+          "value": "\"kilo_pass_store_events\".\"payment_provider\" IN ('stripe', 'app_store', 'google_play')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_store_purchases": {
+      "name": "kilo_pass_store_purchases",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_pass_subscription_id": {
+          "name": "kilo_pass_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payment_provider": {
+          "name": "payment_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "product_id": {
+          "name": "product_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subscription_id": {
+          "name": "provider_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_transaction_id": {
+          "name": "provider_transaction_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_original_transaction_id": {
+          "name": "provider_original_transaction_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "app_account_token": {
+          "name": "app_account_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "purchase_token": {
+          "name": "purchase_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "environment": {
+          "name": "environment",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "purchased_at": {
+          "name": "purchased_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "raw_payload_json": {
+          "name": "raw_payload_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kilo_pass_store_purchases_provider_transaction": {
+          "name": "UQ_kilo_pass_store_purchases_provider_transaction",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_transaction_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_purchases_subscription_id": {
+          "name": "IDX_kilo_pass_store_purchases_subscription_id",
+          "columns": [
+            {
+              "expression": "kilo_pass_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_purchases_user_id": {
+          "name": "IDX_kilo_pass_store_purchases_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_purchases_app_account_token": {
+          "name": "IDX_kilo_pass_store_purchases_app_account_token",
+          "columns": [
+            {
+              "expression": "app_account_token",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_store_purchases_latest_subscription_purchase": {
+          "name": "IDX_kilo_pass_store_purchases_latest_subscription_purchase",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "purchased_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_store_purchases_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk": {
+          "name": "kilo_pass_store_purchases_kilo_pass_subscription_id_kilo_pass_subscriptions_id_fk",
+          "tableFrom": "kilo_pass_store_purchases",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "kilo_pass_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "kilo_pass_store_purchases_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_store_purchases_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_store_purchases",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "FK_kilo_pass_store_purchases_subscription_owner_provider": {
+          "name": "FK_kilo_pass_store_purchases_subscription_owner_provider",
+          "tableFrom": "kilo_pass_store_purchases",
+          "tableTo": "kilo_pass_subscriptions",
+          "columnsFrom": [
+            "kilo_pass_subscription_id",
+            "kilo_user_id",
+            "payment_provider",
+            "provider_subscription_id"
+          ],
+          "columnsTo": [
+            "id",
+            "kilo_user_id",
+            "payment_provider",
+            "provider_subscription_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_store_purchases_store_provider_check": {
+          "name": "kilo_pass_store_purchases_store_provider_check",
+          "value": "\"kilo_pass_store_purchases\".\"payment_provider\" IN ('app_store', 'google_play')"
+        },
+        "kilo_pass_store_purchases_payment_provider_check": {
+          "name": "kilo_pass_store_purchases_payment_provider_check",
+          "value": "\"kilo_pass_store_purchases\".\"payment_provider\" IN ('stripe', 'app_store', 'google_play')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_subscriptions": {
+      "name": "kilo_pass_subscriptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "payment_provider": {
+          "name": "payment_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'stripe'"
+        },
+        "provider_subscription_id": {
+          "name": "provider_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_subscription_id": {
+          "name": "stripe_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tier": {
+          "name": "tier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cadence": {
+          "name": "cadence",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cancel_at_period_end": {
+          "name": "cancel_at_period_end",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ended_at": {
+          "name": "ended_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "current_streak_months": {
+          "name": "current_streak_months",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_yearly_issue_at": {
+          "name": "next_yearly_issue_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kilo_pass_subscriptions_kilo_user_id": {
+          "name": "IDX_kilo_pass_subscriptions_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_subscriptions_payment_provider": {
+          "name": "IDX_kilo_pass_subscriptions_payment_provider",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_subscriptions_status": {
+          "name": "IDX_kilo_pass_subscriptions_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilo_pass_subscriptions_cadence": {
+          "name": "IDX_kilo_pass_subscriptions_cadence",
+          "columns": [
+            {
+              "expression": "cadence",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_subscriptions_provider_subscription": {
+          "name": "UQ_kilo_pass_subscriptions_provider_subscription",
+          "columns": [
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilo_pass_subscriptions\".\"provider_subscription_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilo_pass_subscriptions_store_purchase_reference": {
+          "name": "UQ_kilo_pass_subscriptions_store_purchase_reference",
+          "columns": [
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "payment_provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kilo_pass_subscriptions_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kilo_pass_subscriptions_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kilo_pass_subscriptions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kilo_pass_subscriptions_stripe_subscription_id_unique": {
+          "name": "kilo_pass_subscriptions_stripe_subscription_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "stripe_subscription_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_subscriptions_current_streak_months_non_negative_check": {
+          "name": "kilo_pass_subscriptions_current_streak_months_non_negative_check",
+          "value": "\"kilo_pass_subscriptions\".\"current_streak_months\" >= 0"
+        },
+        "kilo_pass_subscriptions_provider_ids_check": {
+          "name": "kilo_pass_subscriptions_provider_ids_check",
+          "value": "(\n        \"kilo_pass_subscriptions\".\"payment_provider\" = 'stripe'\n        AND \"kilo_pass_subscriptions\".\"provider_subscription_id\" IS NOT NULL\n        AND \"kilo_pass_subscriptions\".\"stripe_subscription_id\" IS NOT NULL\n        AND \"kilo_pass_subscriptions\".\"provider_subscription_id\" = \"kilo_pass_subscriptions\".\"stripe_subscription_id\"\n      ) OR (\n        \"kilo_pass_subscriptions\".\"payment_provider\" IN ('app_store', 'google_play')\n        AND \"kilo_pass_subscriptions\".\"provider_subscription_id\" IS NOT NULL\n        AND \"kilo_pass_subscriptions\".\"stripe_subscription_id\" IS NULL\n      )"
+        },
+        "kilo_pass_subscriptions_payment_provider_check": {
+          "name": "kilo_pass_subscriptions_payment_provider_check",
+          "value": "\"kilo_pass_subscriptions\".\"payment_provider\" IN ('stripe', 'app_store', 'google_play')"
+        },
+        "kilo_pass_subscriptions_tier_check": {
+          "name": "kilo_pass_subscriptions_tier_check",
+          "value": "\"kilo_pass_subscriptions\".\"tier\" IN ('tier_19', 'tier_49', 'tier_199')"
+        },
+        "kilo_pass_subscriptions_cadence_check": {
+          "name": "kilo_pass_subscriptions_cadence_check",
+          "value": "\"kilo_pass_subscriptions\".\"cadence\" IN ('monthly', 'yearly')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kilo_pass_welcome_promo_payment_fingerprint_claims": {
+      "name": "kilo_pass_welcome_promo_payment_fingerprint_claims",
+      "schema": "",
+      "columns": {
+        "stripe_payment_method_type": {
+          "name": "stripe_payment_method_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_fingerprint": {
+          "name": "stripe_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_stripe_invoice_id": {
+          "name": "source_stripe_invoice_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "kilo_pass_welcome_promo_payment_fingerprint_claims_stripe_payment_method_type_stripe_fingerprint_pk": {
+          "name": "kilo_pass_welcome_promo_payment_fingerprint_claims_stripe_payment_method_type_stripe_fingerprint_pk",
+          "columns": [
+            "stripe_payment_method_type",
+            "stripe_fingerprint"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "UQ_kilo_pass_welcome_promo_payment_fingerprint_claims_source_invoice_id": {
+          "name": "UQ_kilo_pass_welcome_promo_payment_fingerprint_claims_source_invoice_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "source_stripe_invoice_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kilo_pass_welcome_promo_payment_fingerprint_claims_type_check": {
+          "name": "kilo_pass_welcome_promo_payment_fingerprint_claims_type_check",
+          "value": "\"kilo_pass_welcome_promo_payment_fingerprint_claims\".\"stripe_payment_method_type\" IN ('card', 'sepa_debit', 'us_bank_account', 'bacs_debit', 'au_becs_debit')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_access_codes": {
+      "name": "kiloclaw_access_codes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redeemed_at": {
+          "name": "redeemed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_access_codes_code": {
+          "name": "UQ_kiloclaw_access_codes_code",
+          "columns": [
+            {
+              "expression": "code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_access_codes_user_status": {
+          "name": "IDX_kiloclaw_access_codes_user_status",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_access_codes_one_active_per_user": {
+          "name": "UQ_kiloclaw_access_codes_one_active_per_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "status = 'active'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_access_codes_kilo_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_access_codes_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_access_codes",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_admin_audit_logs": {
+      "name": "kiloclaw_admin_audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_id": {
+          "name": "actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_email": {
+          "name": "actor_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_name": {
+          "name": "actor_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_user_id": {
+          "name": "target_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "message": {
+          "name": "message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_admin_audit_logs_target_user_id": {
+          "name": "IDX_kiloclaw_admin_audit_logs_target_user_id",
+          "columns": [
+            {
+              "expression": "target_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_admin_audit_logs_action": {
+          "name": "IDX_kiloclaw_admin_audit_logs_action",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_admin_audit_logs_created_at": {
+          "name": "IDX_kiloclaw_admin_audit_logs_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_cli_runs": {
+      "name": "kiloclaw_cli_runs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "initiated_by_admin_id": {
+          "name": "initiated_by_admin_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "prompt": {
+          "name": "prompt",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'running'"
+        },
+        "exit_code": {
+          "name": "exit_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "output": {
+          "name": "output",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_cli_runs_user_id": {
+          "name": "IDX_kiloclaw_cli_runs_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_cli_runs_started_at": {
+          "name": "IDX_kiloclaw_cli_runs_started_at",
+          "columns": [
+            {
+              "expression": "started_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_cli_runs_instance_id": {
+          "name": "IDX_kiloclaw_cli_runs_instance_id",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_cli_runs_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_cli_runs_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_cli_runs",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_cli_runs_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_cli_runs_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_cli_runs",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_cli_runs_initiated_by_admin_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_cli_runs_initiated_by_admin_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_cli_runs",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "initiated_by_admin_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_earlybird_purchases": {
+      "name": "kiloclaw_earlybird_purchases",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manual_payment_id": {
+          "name": "manual_payment_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "amount_cents": {
+          "name": "amount_cents",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kiloclaw_earlybird_purchases_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_earlybird_purchases_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_earlybird_purchases",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kiloclaw_earlybird_purchases_user_id_unique": {
+          "name": "kiloclaw_earlybird_purchases_user_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "user_id"
+          ]
+        },
+        "kiloclaw_earlybird_purchases_stripe_charge_id_unique": {
+          "name": "kiloclaw_earlybird_purchases_stripe_charge_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "stripe_charge_id"
+          ]
+        },
+        "kiloclaw_earlybird_purchases_manual_payment_id_unique": {
+          "name": "kiloclaw_earlybird_purchases_manual_payment_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "manual_payment_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_email_log": {
+      "name": "kiloclaw_email_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_type": {
+          "name": "email_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "period_start": {
+          "name": "period_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'epoch'"
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_email_log_user_type_global": {
+          "name": "UQ_kiloclaw_email_log_user_type_global",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "email_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_email_log\".\"instance_id\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_email_log_user_instance_type_period": {
+          "name": "UQ_kiloclaw_email_log_user_instance_type_period",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "email_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "period_start",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_email_log\".\"instance_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_email_log_type_sent_instance": {
+          "name": "IDX_kiloclaw_email_log_type_sent_instance",
+          "columns": [
+            {
+              "expression": "email_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sent_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_email_log\".\"instance_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_email_log_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_email_log_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_email_log",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_email_log_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_email_log_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_email_log",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_google_oauth_connections": {
+      "name": "kiloclaw_google_oauth_connections",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'google'"
+        },
+        "account_email": {
+          "name": "account_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "account_subject": {
+          "name": "account_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_client_secret_encrypted": {
+          "name": "oauth_client_secret_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_profile": {
+          "name": "credential_profile",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'kilo_owned'"
+        },
+        "refresh_token_encrypted": {
+          "name": "refresh_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scopes": {
+          "name": "scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::text[]"
+        },
+        "grants_by_source": {
+          "name": "grants_by_source",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "capabilities": {
+          "name": "capabilities",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::text[]"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "last_error": {
+          "name": "last_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_at": {
+          "name": "last_error_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connected_at": {
+          "name": "connected_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_google_oauth_connections_instance": {
+          "name": "UQ_kiloclaw_google_oauth_connections_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_google_oauth_connections_status": {
+          "name": "IDX_kiloclaw_google_oauth_connections_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_google_oauth_connections_provider": {
+          "name": "IDX_kiloclaw_google_oauth_connections_provider",
+          "columns": [
+            {
+              "expression": "provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_google_oauth_connections_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_google_oauth_connections_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_google_oauth_connections",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kiloclaw_google_oauth_connections_status_check": {
+          "name": "kiloclaw_google_oauth_connections_status_check",
+          "value": "\"kiloclaw_google_oauth_connections\".\"status\" IN ('active', 'action_required', 'disconnected')"
+        },
+        "kiloclaw_google_oauth_connections_credential_profile_check": {
+          "name": "kiloclaw_google_oauth_connections_credential_profile_check",
+          "value": "\"kiloclaw_google_oauth_connections\".\"credential_profile\" IN ('legacy', 'kilo_owned')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_image_catalog": {
+      "name": "kiloclaw_image_catalog",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "openclaw_version": {
+          "name": "openclaw_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "variant": {
+          "name": "variant",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'default'"
+        },
+        "image_tag": {
+          "name": "image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "image_digest": {
+          "name": "image_digest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'available'"
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_by": {
+          "name": "updated_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "published_at": {
+          "name": "published_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "synced_at": {
+          "name": "synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "rollout_percent": {
+          "name": "rollout_percent",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "is_latest": {
+          "name": "is_latest",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_image_catalog_status": {
+          "name": "IDX_kiloclaw_image_catalog_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_image_catalog_variant": {
+          "name": "IDX_kiloclaw_image_catalog_variant",
+          "columns": [
+            {
+              "expression": "variant",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_image_catalog_one_latest_per_variant": {
+          "name": "UQ_kiloclaw_image_catalog_one_latest_per_variant",
+          "columns": [
+            {
+              "expression": "variant",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_image_catalog\".\"is_latest\" = true",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_image_catalog_one_candidate_per_variant": {
+          "name": "UQ_kiloclaw_image_catalog_one_candidate_per_variant",
+          "columns": [
+            {
+              "expression": "variant",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_image_catalog\".\"is_latest\" = false AND \"kiloclaw_image_catalog\".\"rollout_percent\" > 0 AND \"kiloclaw_image_catalog\".\"status\" = 'available'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kiloclaw_image_catalog_image_tag_unique": {
+          "name": "kiloclaw_image_catalog_image_tag_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "image_tag"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_inbound_email_aliases": {
+      "name": "kiloclaw_inbound_email_aliases",
+      "schema": "",
+      "columns": {
+        "alias": {
+          "name": "alias",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "retired_at": {
+          "name": "retired_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_inbound_email_aliases_instance_id": {
+          "name": "IDX_kiloclaw_inbound_email_aliases_instance_id",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_inbound_email_aliases_active_instance": {
+          "name": "UQ_kiloclaw_inbound_email_aliases_active_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_inbound_email_aliases\".\"retired_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_inbound_email_aliases_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_inbound_email_aliases_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_inbound_email_aliases",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_inbound_email_reserved_aliases": {
+      "name": "kiloclaw_inbound_email_reserved_aliases",
+      "schema": "",
+      "columns": {
+        "alias": {
+          "name": "alias",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_instances": {
+      "name": "kiloclaw_instances",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sandbox_id": {
+          "name": "sandbox_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'fly'"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "inbound_email_enabled": {
+          "name": "inbound_email_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "inactive_trial_stopped_at": {
+          "name": "inactive_trial_stopped_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "destroyed_at": {
+          "name": "destroyed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tracked_image_tag": {
+          "name": "tracked_image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "instance_type": {
+          "name": "instance_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "admin_size_override": {
+          "name": "admin_size_override",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_instances_active": {
+          "name": "UQ_kiloclaw_instances_active",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "sandbox_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_instances\".\"destroyed_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_active_personal_by_user": {
+          "name": "IDX_kiloclaw_instances_active_personal_by_user",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"organization_id\" IS NULL AND \"kiloclaw_instances\".\"destroyed_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_active_org_by_user_org": {
+          "name": "IDX_kiloclaw_instances_active_org_by_user_org",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"organization_id\" IS NOT NULL AND \"kiloclaw_instances\".\"destroyed_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_active_org_by_org_created": {
+          "name": "IDX_kiloclaw_instances_active_org_by_org_created",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"organization_id\" IS NOT NULL AND \"kiloclaw_instances\".\"destroyed_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_user_id_created_at": {
+          "name": "IDX_kiloclaw_instances_user_id_created_at",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_tracked_image_tag": {
+          "name": "IDX_kiloclaw_instances_tracked_image_tag",
+          "columns": [
+            {
+              "expression": "tracked_image_tag",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"destroyed_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_instance_type": {
+          "name": "IDX_kiloclaw_instances_instance_type",
+          "columns": [
+            {
+              "expression": "instance_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"destroyed_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_instances_admin_size_override": {
+          "name": "IDX_kiloclaw_instances_admin_size_override",
+          "columns": [
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_instances\".\"admin_size_override\" IS NOT NULL AND \"kiloclaw_instances\".\"destroyed_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_instances_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_instances_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_instances",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_instances_organization_id_organizations_id_fk": {
+          "name": "kiloclaw_instances_organization_id_organizations_id_fk",
+          "tableFrom": "kiloclaw_instances",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "CHK_kiloclaw_instances_instance_type": {
+          "name": "CHK_kiloclaw_instances_instance_type",
+          "value": "\"kiloclaw_instances\".\"instance_type\" IS NULL OR \"kiloclaw_instances\".\"instance_type\" IN ('perf-1-3', 'perf-4-8', 'perf-4-16', 'shared-2-3', 'shared-2-4', 'custom')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_morning_briefing_configs": {
+      "name": "kiloclaw_morning_briefing_configs",
+      "schema": "",
+      "columns": {
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "cron": {
+          "name": "cron",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0 7 * * *'"
+        },
+        "timezone": {
+          "name": "timezone",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'UTC'"
+        },
+        "interest_topics": {
+          "name": "interest_topics",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::text[]"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_morning_briefing_configs_enabled": {
+          "name": "IDX_kiloclaw_morning_briefing_configs_enabled",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_morning_briefing_configs\".\"enabled\" = true",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_morning_briefing_configs_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_morning_briefing_configs_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_morning_briefing_configs",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_scheduled_action_notifications": {
+      "name": "kiloclaw_scheduled_action_notifications",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "target_id": {
+          "name": "target_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "channel": {
+          "name": "channel",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'notice'"
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_scheduled_action_notifications_target_kind_channel": {
+          "name": "UQ_kiloclaw_scheduled_action_notifications_target_kind_channel",
+          "columns": [
+            {
+              "expression": "target_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kind",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "channel",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_action_notifications_pending": {
+          "name": "IDX_kiloclaw_scheduled_action_notifications_pending",
+          "columns": [
+            {
+              "expression": "target_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_scheduled_action_notifications\".\"status\" = 'pending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_scheduled_action_notifications_target_id_kiloclaw_scheduled_action_targets_id_fk": {
+          "name": "kiloclaw_scheduled_action_notifications_target_id_kiloclaw_scheduled_action_targets_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_notifications",
+          "tableTo": "kiloclaw_scheduled_action_targets",
+          "columnsFrom": [
+            "target_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_scheduled_action_stages": {
+      "name": "kiloclaw_scheduled_action_stages",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "scheduled_action_id": {
+          "name": "scheduled_action_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stage_index": {
+          "name": "stage_index",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scheduled_at": {
+          "name": "scheduled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "notice_sent_at": {
+          "name": "notice_sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "applied_count": {
+          "name": "applied_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "skipped_count": {
+          "name": "skipped_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "failed_count": {
+          "name": "failed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_scheduled_action_stages_parent_index": {
+          "name": "UQ_kiloclaw_scheduled_action_stages_parent_index",
+          "columns": [
+            {
+              "expression": "scheduled_action_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "stage_index",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_action_stages_notice_due": {
+          "name": "IDX_kiloclaw_scheduled_action_stages_notice_due",
+          "columns": [
+            {
+              "expression": "scheduled_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_scheduled_action_stages\".\"notice_sent_at\" IS NULL AND \"kiloclaw_scheduled_action_stages\".\"status\" = 'pending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_scheduled_action_stages_scheduled_action_id_kiloclaw_scheduled_actions_id_fk": {
+          "name": "kiloclaw_scheduled_action_stages_scheduled_action_id_kiloclaw_scheduled_actions_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_stages",
+          "tableTo": "kiloclaw_scheduled_actions",
+          "columnsFrom": [
+            "scheduled_action_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_scheduled_action_targets": {
+      "name": "kiloclaw_scheduled_action_targets",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "scheduled_action_id": {
+          "name": "scheduled_action_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stage_id": {
+          "name": "stage_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_image_tag": {
+          "name": "source_image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_image_tag": {
+          "name": "target_image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "applied_at": {
+          "name": "applied_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "skip_reason": {
+          "name": "skip_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_scheduled_action_targets_parent_instance": {
+          "name": "UQ_kiloclaw_scheduled_action_targets_parent_instance",
+          "columns": [
+            {
+              "expression": "scheduled_action_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_action_targets_stage": {
+          "name": "IDX_kiloclaw_scheduled_action_targets_stage",
+          "columns": [
+            {
+              "expression": "stage_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_action_targets_pending_by_instance": {
+          "name": "IDX_kiloclaw_scheduled_action_targets_pending_by_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_scheduled_action_targets\".\"status\" = 'pending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_scheduled_action_targets_scheduled_action_id_kiloclaw_scheduled_actions_id_fk": {
+          "name": "kiloclaw_scheduled_action_targets_scheduled_action_id_kiloclaw_scheduled_actions_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_targets",
+          "tableTo": "kiloclaw_scheduled_actions",
+          "columnsFrom": [
+            "scheduled_action_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_scheduled_action_targets_stage_id_kiloclaw_scheduled_action_stages_id_fk": {
+          "name": "kiloclaw_scheduled_action_targets_stage_id_kiloclaw_scheduled_action_stages_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_targets",
+          "tableTo": "kiloclaw_scheduled_action_stages",
+          "columnsFrom": [
+            "stage_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_scheduled_action_targets_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_scheduled_action_targets_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_targets",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_scheduled_action_targets_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_scheduled_action_targets_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_scheduled_action_targets",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_scheduled_actions": {
+      "name": "kiloclaw_scheduled_actions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "action_type": {
+          "name": "action_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_image_tag": {
+          "name": "target_image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "override_pins": {
+          "name": "override_pins",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "notice_lead_hours": {
+          "name": "notice_lead_hours",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 24
+        },
+        "notice_subject": {
+          "name": "notice_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "notice_body": {
+          "name": "notice_body",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'scheduled'"
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancelled_at": {
+          "name": "cancelled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_count": {
+          "name": "total_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "applied_count": {
+          "name": "applied_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "skipped_count": {
+          "name": "skipped_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "failed_count": {
+          "name": "failed_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_scheduled_actions_status": {
+          "name": "IDX_kiloclaw_scheduled_actions_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_actions_action_type": {
+          "name": "IDX_kiloclaw_scheduled_actions_action_type",
+          "columns": [
+            {
+              "expression": "action_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_scheduled_actions_created_by": {
+          "name": "IDX_kiloclaw_scheduled_actions_created_by",
+          "columns": [
+            {
+              "expression": "created_by",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_scheduled_actions_target_image_tag_kiloclaw_image_catalog_image_tag_fk": {
+          "name": "kiloclaw_scheduled_actions_target_image_tag_kiloclaw_image_catalog_image_tag_fk",
+          "tableFrom": "kiloclaw_scheduled_actions",
+          "tableTo": "kiloclaw_image_catalog",
+          "columnsFrom": [
+            "target_image_tag"
+          ],
+          "columnsTo": [
+            "image_tag"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_scheduled_actions_created_by_kilocode_users_id_fk": {
+          "name": "kiloclaw_scheduled_actions_created_by_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_scheduled_actions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_subscription_change_log": {
+      "name": "kiloclaw_subscription_change_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "actor_type": {
+          "name": "actor_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_id": {
+          "name": "actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "before_state": {
+          "name": "before_state",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "after_state": {
+          "name": "after_state",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_subscription_change_log_subscription_created_at": {
+          "name": "IDX_kiloclaw_subscription_change_log_subscription_created_at",
+          "columns": [
+            {
+              "expression": "subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscription_change_log_created_at": {
+          "name": "IDX_kiloclaw_subscription_change_log_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_subscription_change_log_subscription_id_kiloclaw_subscriptions_id_fk": {
+          "name": "kiloclaw_subscription_change_log_subscription_id_kiloclaw_subscriptions_id_fk",
+          "tableFrom": "kiloclaw_subscription_change_log",
+          "tableTo": "kiloclaw_subscriptions",
+          "columnsFrom": [
+            "subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kiloclaw_subscription_change_log_actor_type_check": {
+          "name": "kiloclaw_subscription_change_log_actor_type_check",
+          "value": "\"kiloclaw_subscription_change_log\".\"actor_type\" IN ('user', 'system')"
+        },
+        "kiloclaw_subscription_change_log_action_check": {
+          "name": "kiloclaw_subscription_change_log_action_check",
+          "value": "\"kiloclaw_subscription_change_log\".\"action\" IN ('created', 'status_changed', 'plan_switched', 'period_advanced', 'canceled', 'reactivated', 'suspended', 'destruction_scheduled', 'reassigned', 'backfilled', 'payment_source_changed', 'schedule_changed', 'admin_override')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_subscriptions": {
+      "name": "kiloclaw_subscriptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_subscription_id": {
+          "name": "stripe_subscription_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_schedule_id": {
+          "name": "stripe_schedule_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "transferred_to_subscription_id": {
+          "name": "transferred_to_subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_origin": {
+          "name": "access_origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "payment_source": {
+          "name": "payment_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kiloclaw_price_version": {
+          "name": "kiloclaw_price_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plan": {
+          "name": "plan",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "scheduled_plan": {
+          "name": "scheduled_plan",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scheduled_by": {
+          "name": "scheduled_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cancel_at_period_end": {
+          "name": "cancel_at_period_end",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "pending_conversion": {
+          "name": "pending_conversion",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "trial_started_at": {
+          "name": "trial_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "trial_ends_at": {
+          "name": "trial_ends_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "current_period_start": {
+          "name": "current_period_start",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "current_period_end": {
+          "name": "current_period_end",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credit_renewal_at": {
+          "name": "credit_renewal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "commit_ends_at": {
+          "name": "commit_ends_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "past_due_since": {
+          "name": "past_due_since",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "suspended_at": {
+          "name": "suspended_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "destruction_deadline": {
+          "name": "destruction_deadline",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_resume_requested_at": {
+          "name": "auto_resume_requested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_resume_retry_after": {
+          "name": "auto_resume_retry_after",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_resume_attempt_count": {
+          "name": "auto_resume_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "auto_top_up_triggered_for_period": {
+          "name": "auto_top_up_triggered_for_period",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_kiloclaw_subscriptions_status": {
+          "name": "IDX_kiloclaw_subscriptions_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_user_id": {
+          "name": "IDX_kiloclaw_subscriptions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_user_status": {
+          "name": "IDX_kiloclaw_subscriptions_user_status",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_price_version": {
+          "name": "IDX_kiloclaw_subscriptions_price_version",
+          "columns": [
+            {
+              "expression": "kiloclaw_price_version",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_transferred_to": {
+          "name": "IDX_kiloclaw_subscriptions_transferred_to",
+          "columns": [
+            {
+              "expression": "transferred_to_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_stripe_schedule_id": {
+          "name": "IDX_kiloclaw_subscriptions_stripe_schedule_id",
+          "columns": [
+            {
+              "expression": "stripe_schedule_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_auto_resume_retry_after": {
+          "name": "IDX_kiloclaw_subscriptions_auto_resume_retry_after",
+          "columns": [
+            {
+              "expression": "auto_resume_retry_after",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_subscriptions_instance": {
+          "name": "UQ_kiloclaw_subscriptions_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_subscriptions\".\"instance_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kiloclaw_subscriptions_transferred_to": {
+          "name": "UQ_kiloclaw_subscriptions_transferred_to",
+          "columns": [
+            {
+              "expression": "transferred_to_subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kiloclaw_subscriptions\".\"transferred_to_subscription_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_subscriptions_earlybird_origin": {
+          "name": "IDX_kiloclaw_subscriptions_earlybird_origin",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "access_origin",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_subscriptions\".\"access_origin\" = 'earlybird'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_subscriptions_user_id_kilocode_users_id_fk": {
+          "name": "kiloclaw_subscriptions_user_id_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_subscriptions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_subscriptions_transferred_to_subscription_id_kiloclaw_subscriptions_id_fk": {
+          "name": "kiloclaw_subscriptions_transferred_to_subscription_id_kiloclaw_subscriptions_id_fk",
+          "tableFrom": "kiloclaw_subscriptions",
+          "tableTo": "kiloclaw_subscriptions",
+          "columnsFrom": [
+            "transferred_to_subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_subscriptions_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_subscriptions_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_subscriptions",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kiloclaw_subscriptions_stripe_subscription_id_unique": {
+          "name": "kiloclaw_subscriptions_stripe_subscription_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "stripe_subscription_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "kiloclaw_subscriptions_price_version_check": {
+          "name": "kiloclaw_subscriptions_price_version_check",
+          "value": "\"kiloclaw_subscriptions\".\"kiloclaw_price_version\" IN ('2026-03-19', '2026-05-10')"
+        },
+        "kiloclaw_subscriptions_plan_check": {
+          "name": "kiloclaw_subscriptions_plan_check",
+          "value": "\"kiloclaw_subscriptions\".\"plan\" IN ('trial', 'commit', 'standard')"
+        },
+        "kiloclaw_subscriptions_scheduled_plan_check": {
+          "name": "kiloclaw_subscriptions_scheduled_plan_check",
+          "value": "\"kiloclaw_subscriptions\".\"scheduled_plan\" IN ('commit', 'standard')"
+        },
+        "kiloclaw_subscriptions_scheduled_by_check": {
+          "name": "kiloclaw_subscriptions_scheduled_by_check",
+          "value": "\"kiloclaw_subscriptions\".\"scheduled_by\" IN ('auto', 'user')"
+        },
+        "kiloclaw_subscriptions_status_check": {
+          "name": "kiloclaw_subscriptions_status_check",
+          "value": "\"kiloclaw_subscriptions\".\"status\" IN ('trialing', 'active', 'past_due', 'canceled', 'unpaid')"
+        },
+        "kiloclaw_subscriptions_access_origin_check": {
+          "name": "kiloclaw_subscriptions_access_origin_check",
+          "value": "\"kiloclaw_subscriptions\".\"access_origin\" IN ('earlybird')"
+        },
+        "kiloclaw_subscriptions_payment_source_check": {
+          "name": "kiloclaw_subscriptions_payment_source_check",
+          "value": "\"kiloclaw_subscriptions\".\"payment_source\" IN ('stripe', 'credits')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_terminal_renewal_failures": {
+      "name": "kiloclaw_terminal_renewal_failures",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "subscription_id": {
+          "name": "subscription_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "renewal_boundary": {
+          "name": "renewal_boundary",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unresolved'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "first_failure_at": {
+          "name": "first_failure_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_failure_at": {
+          "name": "last_failure_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_failure_code": {
+          "name": "last_failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_failure_message": {
+          "name": "last_failure_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resolution_actor_type": {
+          "name": "resolution_actor_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resolution_actor_id": {
+          "name": "resolution_actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resolution_at": {
+          "name": "resolution_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resolution_reason": {
+          "name": "resolution_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_kiloclaw_terminal_renewal_failures_subscription_boundary": {
+          "name": "UQ_kiloclaw_terminal_renewal_failures_subscription_boundary",
+          "columns": [
+            {
+              "expression": "subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "renewal_boundary",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_terminal_renewal_failures_unresolved": {
+          "name": "IDX_kiloclaw_terminal_renewal_failures_unresolved",
+          "columns": [
+            {
+              "expression": "subscription_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "renewal_boundary",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"kiloclaw_terminal_renewal_failures\".\"status\" = 'unresolved'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kiloclaw_terminal_renewal_failures_status_last_failure_at": {
+          "name": "IDX_kiloclaw_terminal_renewal_failures_status_last_failure_at",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "last_failure_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "kiloclaw_terminal_renewal_failures_subscription_id_kiloclaw_subscriptions_id_fk": {
+          "name": "kiloclaw_terminal_renewal_failures_subscription_id_kiloclaw_subscriptions_id_fk",
+          "tableFrom": "kiloclaw_terminal_renewal_failures",
+          "tableTo": "kiloclaw_subscriptions",
+          "columnsFrom": [
+            "subscription_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "kiloclaw_terminal_renewal_failures_status_check": {
+          "name": "kiloclaw_terminal_renewal_failures_status_check",
+          "value": "\"kiloclaw_terminal_renewal_failures\".\"status\" IN ('unresolved', 'resolved', 'waived', 'superseded')"
+        },
+        "kiloclaw_terminal_renewal_failures_last_failure_code_check": {
+          "name": "kiloclaw_terminal_renewal_failures_last_failure_code_check",
+          "value": "\"kiloclaw_terminal_renewal_failures\".\"last_failure_code\" IN ('credit_balance_read_failed', 'renewal_transaction_failed', 'auto_top_up_marker_write_failed', 'worker_timeout', 'poison_payload', 'queue_delivery_exhausted')"
+        },
+        "kiloclaw_terminal_renewal_failures_resolution_actor_type_check": {
+          "name": "kiloclaw_terminal_renewal_failures_resolution_actor_type_check",
+          "value": "\"kiloclaw_terminal_renewal_failures\".\"resolution_actor_type\" IN ('operator', 'system')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.kiloclaw_version_pins": {
+      "name": "kiloclaw_version_pins",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "image_tag": {
+          "name": "image_tag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pinned_by": {
+          "name": "pinned_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "kiloclaw_version_pins_instance_id_kiloclaw_instances_id_fk": {
+          "name": "kiloclaw_version_pins_instance_id_kiloclaw_instances_id_fk",
+          "tableFrom": "kiloclaw_version_pins",
+          "tableTo": "kiloclaw_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_version_pins_image_tag_kiloclaw_image_catalog_image_tag_fk": {
+          "name": "kiloclaw_version_pins_image_tag_kiloclaw_image_catalog_image_tag_fk",
+          "tableFrom": "kiloclaw_version_pins",
+          "tableTo": "kiloclaw_image_catalog",
+          "columnsFrom": [
+            "image_tag"
+          ],
+          "columnsTo": [
+            "image_tag"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "kiloclaw_version_pins_pinned_by_kilocode_users_id_fk": {
+          "name": "kiloclaw_version_pins_pinned_by_kilocode_users_id_fk",
+          "tableFrom": "kiloclaw_version_pins",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "pinned_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kiloclaw_version_pins_instance_id_unique": {
+          "name": "kiloclaw_version_pins_instance_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "instance_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.kilocode_users": {
+      "name": "kilocode_users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "google_user_email": {
+          "name": "google_user_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "google_user_name": {
+          "name": "google_user_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "google_user_image_url": {
+          "name": "google_user_image_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "hosted_domain": {
+          "name": "hosted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "microdollars_used": {
+          "name": "microdollars_used",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0'"
+        },
+        "kilo_pass_threshold": {
+          "name": "kilo_pass_threshold",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_customer_id": {
+          "name": "stripe_customer_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "app_store_account_token": {
+          "name": "app_store_account_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "is_admin": {
+          "name": "is_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "is_super_admin": {
+          "name": "is_super_admin",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "can_view_sessions": {
+          "name": "can_view_sessions",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "can_manage_credits": {
+          "name": "can_manage_credits",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "total_microdollars_acquired": {
+          "name": "total_microdollars_acquired",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0'"
+        },
+        "next_credit_expiration_at": {
+          "name": "next_credit_expiration_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_validation_stytch": {
+          "name": "has_validation_stytch",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_validation_novel_card_with_hold": {
+          "name": "has_validation_novel_card_with_hold",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "blocked_reason": {
+          "name": "blocked_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "blocked_at": {
+          "name": "blocked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "blocked_by_kilo_user_id": {
+          "name": "blocked_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "api_token_pepper": {
+          "name": "api_token_pepper",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "web_session_pepper": {
+          "name": "web_session_pepper",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_top_up_enabled": {
+          "name": "auto_top_up_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "is_bot": {
+          "name": "is_bot",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "kiloclaw_early_access": {
+          "name": "kiloclaw_early_access",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "default_model": {
+          "name": "default_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cohorts": {
+          "name": "cohorts",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "completed_welcome_form": {
+          "name": "completed_welcome_form",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "linkedin_url": {
+          "name": "linkedin_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "github_url": {
+          "name": "github_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "discord_server_membership_verified_at": {
+          "name": "discord_server_membership_verified_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "openrouter_upstream_safety_identifier": {
+          "name": "openrouter_upstream_safety_identifier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "openrouter_downstream_safety_identifier": {
+          "name": "openrouter_downstream_safety_identifier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_downstream_safety_identifier": {
+          "name": "vercel_downstream_safety_identifier",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "customer_source": {
+          "name": "customer_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "signup_ip": {
+          "name": "signup_ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "account_deletion_requested_at": {
+          "name": "account_deletion_requested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "normalized_email": {
+          "name": "normalized_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_domain": {
+          "name": "email_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "personal_account_disabled": {
+          "name": "personal_account_disabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        }
+      },
+      "indexes": {
+        "IDX_kilocode_users_signup_ip_created_at": {
+          "name": "IDX_kilocode_users_signup_ip_created_at",
+          "columns": [
+            {
+              "expression": "signup_ip",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilocode_users_blocked_at": {
+          "name": "IDX_kilocode_users_blocked_at",
+          "columns": [
+            {
+              "expression": "blocked_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilocode_users_blocked_by_kilo_user_id": {
+          "name": "IDX_kilocode_users_blocked_by_kilo_user_id",
+          "columns": [
+            {
+              "expression": "blocked_by_kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilocode_users_openrouter_upstream_safety_identifier": {
+          "name": "UQ_kilocode_users_openrouter_upstream_safety_identifier",
+          "columns": [
+            {
+              "expression": "openrouter_upstream_safety_identifier",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilocode_users\".\"openrouter_upstream_safety_identifier\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilocode_users_openrouter_downstream_safety_identifier": {
+          "name": "UQ_kilocode_users_openrouter_downstream_safety_identifier",
+          "columns": [
+            {
+              "expression": "openrouter_downstream_safety_identifier",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilocode_users\".\"openrouter_downstream_safety_identifier\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_kilocode_users_vercel_downstream_safety_identifier": {
+          "name": "UQ_kilocode_users_vercel_downstream_safety_identifier",
+          "columns": [
+            {
+              "expression": "vercel_downstream_safety_identifier",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"kilocode_users\".\"vercel_downstream_safety_identifier\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilocode_users_normalized_email": {
+          "name": "IDX_kilocode_users_normalized_email",
+          "columns": [
+            {
+              "expression": "normalized_email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_kilocode_users_email_domain": {
+          "name": "IDX_kilocode_users_email_domain",
+          "columns": [
+            {
+              "expression": "email_domain",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "kilocode_users_app_store_account_token_unique": {
+          "name": "kilocode_users_app_store_account_token_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "app_store_account_token"
+          ]
+        },
+        "UQ_b1afacbcf43f2c7c4cb9f7e7faa": {
+          "name": "UQ_b1afacbcf43f2c7c4cb9f7e7faa",
+          "nullsNotDistinct": false,
+          "columns": [
+            "google_user_email"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "blocked_reason_not_empty": {
+          "name": "blocked_reason_not_empty",
+          "value": "length(blocked_reason) > 0"
+        },
+        "kilocode_users_is_super_admin_requires_admin_check": {
+          "name": "kilocode_users_is_super_admin_requires_admin_check",
+          "value": "NOT \"kilocode_users\".\"is_super_admin\" OR \"kilocode_users\".\"is_admin\""
+        },
+        "kilocode_users_can_view_sessions_requires_admin_check": {
+          "name": "kilocode_users_can_view_sessions_requires_admin_check",
+          "value": "NOT \"kilocode_users\".\"can_view_sessions\" OR \"kilocode_users\".\"is_admin\""
+        },
+        "kilocode_users_can_manage_credits_requires_admin_check": {
+          "name": "kilocode_users_can_manage_credits_requires_admin_check",
+          "value": "NOT \"kilocode_users\".\"can_manage_credits\" OR \"kilocode_users\".\"is_admin\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.magic_link_tokens": {
+      "name": "magic_link_tokens",
+      "schema": "",
+      "columns": {
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "attempts": {
+          "name": "attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "reserved_until": {
+          "name": "reserved_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "purpose": {
+          "name": "purpose",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'magic_link'"
+        },
+        "challenge_id": {
+          "name": "challenge_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_magic_link_tokens_email": {
+          "name": "idx_magic_link_tokens_email",
+          "columns": [
+            {
+              "expression": "email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_magic_link_tokens_expires_at": {
+          "name": "idx_magic_link_tokens_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_magic_link_tokens_challenge_id": {
+          "name": "UQ_magic_link_tokens_challenge_id",
+          "columns": [
+            {
+              "expression": "challenge_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"magic_link_tokens\".\"challenge_id\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "check_expires_at_future": {
+          "name": "check_expires_at_future",
+          "value": "\"magic_link_tokens\".\"expires_at\" > \"magic_link_tokens\".\"created_at\""
+        },
+        "check_magic_link_tokens_purpose": {
+          "name": "check_magic_link_tokens_purpose",
+          "value": "\"magic_link_tokens\".\"purpose\" IN ('magic_link', 'sign_in_code', 'data_export_download')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_assignments": {
+      "name": "mcp_gateway_assignments",
+      "schema": "",
+      "columns": {
+        "assignment_id": {
+          "name": "assignment_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "assigned_by_kilo_user_id": {
+          "name": "assigned_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "single_user_slot": {
+          "name": "single_user_slot",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_assignments_active": {
+          "name": "UQ_mcp_gateway_assignments_active",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_assignments\".\"revoked_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_mcp_gateway_assignments_single_user_slot": {
+          "name": "UQ_mcp_gateway_assignments_single_user_slot",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "single_user_slot",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_assignments\".\"revoked_at\" is null and \"mcp_gateway_assignments\".\"single_user_slot\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_assignments_config": {
+          "name": "IDX_mcp_gateway_assignments_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_assignments_user": {
+          "name": "IDX_mcp_gateway_assignments_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_assignments_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_assignments_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_assignments",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_assignments_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_assignments_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_assignments",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_assignments_assigned_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_assignments_assigned_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_assignments",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "assigned_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_audit_events": {
+      "name": "mcp_gateway_audit_events",
+      "schema": "",
+      "columns": {
+        "audit_event_id": {
+          "name": "audit_event_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "actor_kilo_user_id": {
+          "name": "actor_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "connect_resource_id": {
+          "name": "connect_resource_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "outcome": {
+          "name": "outcome",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "correlation_metadata": {
+          "name": "correlation_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_mcp_gateway_audit_events_config": {
+          "name": "IDX_mcp_gateway_audit_events_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_audit_events_grant": {
+          "name": "IDX_mcp_gateway_audit_events_grant",
+          "columns": [
+            {
+              "expression": "oauth_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"mcp_gateway_audit_events\".\"oauth_grant_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_audit_events_owner": {
+          "name": "IDX_mcp_gateway_audit_events_owner",
+          "columns": [
+            {
+              "expression": "owner_scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owner_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_audit_events_created_at": {
+          "name": "IDX_mcp_gateway_audit_events_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_audit_events_actor_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_audit_events_actor_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_audit_events",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "actor_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_audit_events_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_audit_events_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_audit_events",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_audit_events_connect_resource_id_mcp_gateway_connect_resources_connect_resource_id_fk": {
+          "name": "mcp_gateway_audit_events_connect_resource_id_mcp_gateway_connect_resources_connect_resource_id_fk",
+          "tableFrom": "mcp_gateway_audit_events",
+          "tableTo": "mcp_gateway_connect_resources",
+          "columnsFrom": [
+            "connect_resource_id"
+          ],
+          "columnsTo": [
+            "connect_resource_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_audit_events_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_audit_events_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_audit_events",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_audit_events_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk": {
+          "name": "mcp_gateway_audit_events_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk",
+          "tableFrom": "mcp_gateway_audit_events",
+          "tableTo": "mcp_gateway_oauth_grants",
+          "columnsFrom": [
+            "oauth_grant_id"
+          ],
+          "columnsTo": [
+            "oauth_grant_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_audit_events_owner_scope": {
+          "name": "mcp_gateway_audit_events_owner_scope",
+          "value": "\"mcp_gateway_audit_events\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_audit_events_outcome": {
+          "name": "mcp_gateway_audit_events_outcome",
+          "value": "\"mcp_gateway_audit_events\".\"outcome\" IN ('success', 'failure', 'blocked')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_authorization_codes": {
+      "name": "mcp_gateway_authorization_codes",
+      "schema": "",
+      "columns": {
+        "authorization_code_id": {
+          "name": "authorization_code_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "code_hash": {
+          "name": "code_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "authorization_request_id": {
+          "name": "authorization_request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "client_id": {
+          "name": "client_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_key": {
+          "name": "route_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "canonical_resource_url": {
+          "name": "canonical_resource_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redirect_uri": {
+          "name": "redirect_uri",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_scopes": {
+          "name": "granted_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code_challenge": {
+          "name": "code_challenge",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "code_challenge_method": {
+          "name": "code_challenge_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'S256'"
+        },
+        "execution_context": {
+          "name": "execution_context",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_authorization_codes_code_hash": {
+          "name": "UQ_mcp_gateway_authorization_codes_code_hash",
+          "columns": [
+            {
+              "expression": "code_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_codes_expires_at": {
+          "name": "IDX_mcp_gateway_authorization_codes_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_codes_client": {
+          "name": "IDX_mcp_gateway_authorization_codes_client",
+          "columns": [
+            {
+              "expression": "oauth_client_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_codes_grant": {
+          "name": "IDX_mcp_gateway_authorization_codes_grant",
+          "columns": [
+            {
+              "expression": "oauth_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"mcp_gateway_authorization_codes\".\"oauth_grant_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_authorization_codes_authorization_request_id_mcp_gateway_authorization_requests_authorization_request_id_fk": {
+          "name": "mcp_gateway_authorization_codes_authorization_request_id_mcp_gateway_authorization_requests_authorization_request_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "mcp_gateway_authorization_requests",
+          "columnsFrom": [
+            "authorization_request_id"
+          ],
+          "columnsTo": [
+            "authorization_request_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_codes_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk": {
+          "name": "mcp_gateway_authorization_codes_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "mcp_gateway_oauth_clients",
+          "columnsFrom": [
+            "oauth_client_id"
+          ],
+          "columnsTo": [
+            "oauth_client_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_codes_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk": {
+          "name": "mcp_gateway_authorization_codes_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "mcp_gateway_oauth_grants",
+          "columnsFrom": [
+            "oauth_grant_id"
+          ],
+          "columnsTo": [
+            "oauth_grant_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_codes_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_authorization_codes_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_codes_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_authorization_codes_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_codes_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_authorization_codes_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_authorization_codes",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_authorization_codes_owner_scope": {
+          "name": "mcp_gateway_authorization_codes_owner_scope",
+          "value": "\"mcp_gateway_authorization_codes\".\"owner_scope\" IN ('personal', 'organization')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_authorization_requests": {
+      "name": "mcp_gateway_authorization_requests",
+      "schema": "",
+      "columns": {
+        "authorization_request_id": {
+          "name": "authorization_request_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "request_state_hash": {
+          "name": "request_state_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "client_id": {
+          "name": "client_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_key": {
+          "name": "route_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "canonical_resource_url": {
+          "name": "canonical_resource_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redirect_uri": {
+          "name": "redirect_uri",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "requested_scopes": {
+          "name": "requested_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_scopes": {
+          "name": "granted_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_state": {
+          "name": "oauth_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "code_challenge": {
+          "name": "code_challenge",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "code_challenge_method": {
+          "name": "code_challenge_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'S256'"
+        },
+        "execution_context": {
+          "name": "execution_context",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "request_status": {
+          "name": "request_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_authorization_requests_state_hash": {
+          "name": "UQ_mcp_gateway_authorization_requests_state_hash",
+          "columns": [
+            {
+              "expression": "request_state_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_requests_config": {
+          "name": "IDX_mcp_gateway_authorization_requests_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_requests_grant": {
+          "name": "IDX_mcp_gateway_authorization_requests_grant",
+          "columns": [
+            {
+              "expression": "oauth_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"mcp_gateway_authorization_requests\".\"oauth_grant_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_requests_user": {
+          "name": "IDX_mcp_gateway_authorization_requests_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_authorization_requests_expires_at": {
+          "name": "IDX_mcp_gateway_authorization_requests_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_authorization_requests_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk": {
+          "name": "mcp_gateway_authorization_requests_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk",
+          "tableFrom": "mcp_gateway_authorization_requests",
+          "tableTo": "mcp_gateway_oauth_clients",
+          "columnsFrom": [
+            "oauth_client_id"
+          ],
+          "columnsTo": [
+            "oauth_client_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_requests_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk": {
+          "name": "mcp_gateway_authorization_requests_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk",
+          "tableFrom": "mcp_gateway_authorization_requests",
+          "tableTo": "mcp_gateway_oauth_grants",
+          "columnsFrom": [
+            "oauth_grant_id"
+          ],
+          "columnsTo": [
+            "oauth_grant_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_requests_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_authorization_requests_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_authorization_requests",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_requests_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_authorization_requests_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_authorization_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_authorization_requests_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_authorization_requests_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_authorization_requests",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_authorization_requests_owner_scope": {
+          "name": "mcp_gateway_authorization_requests_owner_scope",
+          "value": "\"mcp_gateway_authorization_requests\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_authorization_requests_status": {
+          "name": "mcp_gateway_authorization_requests_status",
+          "value": "\"mcp_gateway_authorization_requests\".\"request_status\" IN ('pending', 'completed', 'error')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_config_secrets": {
+      "name": "mcp_gateway_config_secrets",
+      "schema": "",
+      "columns": {
+        "config_secret_id": {
+          "name": "config_secret_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "secret_kind": {
+          "name": "secret_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_secret": {
+          "name": "encrypted_secret",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "secret_version": {
+          "name": "secret_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_config_secrets_active_kind": {
+          "name": "UQ_mcp_gateway_config_secrets_active_kind",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "secret_kind",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_config_secrets\".\"revoked_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_config_secrets_config": {
+          "name": "IDX_mcp_gateway_config_secrets_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_config_secrets_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_config_secrets_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_config_secrets",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_config_secrets_version_positive": {
+          "name": "mcp_gateway_config_secrets_version_positive",
+          "value": "\"mcp_gateway_config_secrets\".\"secret_version\" > 0"
+        },
+        "mcp_gateway_config_secrets_kind": {
+          "name": "mcp_gateway_config_secrets_kind",
+          "value": "\"mcp_gateway_config_secrets\".\"secret_kind\" IN ('static_provider_credentials', 'dynamic_registration', 'static_headers')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_configs": {
+      "name": "mcp_gateway_configs",
+      "schema": "",
+      "columns": {
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "remote_url": {
+          "name": "remote_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_mode": {
+          "name": "auth_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sharing_mode": {
+          "name": "sharing_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_scopes": {
+          "name": "provider_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_scope_source": {
+          "name": "provider_scope_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'none'"
+        },
+        "provider_resource": {
+          "name": "provider_resource",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enabled": {
+          "name": "enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "path_passthrough": {
+          "name": "path_passthrough",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "config_version": {
+          "name": "config_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "discovered_provider_metadata": {
+          "name": "discovered_provider_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "registry_metadata": {
+          "name": "registry_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "auxiliary_headers": {
+          "name": "auxiliary_headers",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_mcp_gateway_configs_owner": {
+          "name": "IDX_mcp_gateway_configs_owner",
+          "columns": [
+            {
+              "expression": "owner_scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owner_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_configs_enabled": {
+          "name": "IDX_mcp_gateway_configs_enabled",
+          "columns": [
+            {
+              "expression": "enabled",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_configs_remote_url": {
+          "name": "IDX_mcp_gateway_configs_remote_url",
+          "columns": [
+            {
+              "expression": "remote_url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_configs_created_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_configs_created_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_configs",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_configs_name_not_empty": {
+          "name": "mcp_gateway_configs_name_not_empty",
+          "value": "length(trim(\"mcp_gateway_configs\".\"name\")) > 0"
+        },
+        "mcp_gateway_configs_config_version_positive": {
+          "name": "mcp_gateway_configs_config_version_positive",
+          "value": "\"mcp_gateway_configs\".\"config_version\" > 0"
+        },
+        "mcp_gateway_configs_personal_single_user": {
+          "name": "mcp_gateway_configs_personal_single_user",
+          "value": "\"mcp_gateway_configs\".\"owner_scope\" <> 'personal' OR \"mcp_gateway_configs\".\"sharing_mode\" = 'single_user'"
+        },
+        "mcp_gateway_configs_owner_scope": {
+          "name": "mcp_gateway_configs_owner_scope",
+          "value": "\"mcp_gateway_configs\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_configs_auth_mode": {
+          "name": "mcp_gateway_configs_auth_mode",
+          "value": "\"mcp_gateway_configs\".\"auth_mode\" IN ('none', 'static_headers', 'oauth_dynamic', 'oauth_static')"
+        },
+        "mcp_gateway_configs_sharing_mode": {
+          "name": "mcp_gateway_configs_sharing_mode",
+          "value": "\"mcp_gateway_configs\".\"sharing_mode\" IN ('single_user', 'multi_user')"
+        },
+        "mcp_gateway_configs_provider_scope_source": {
+          "name": "mcp_gateway_configs_provider_scope_source",
+          "value": "\"mcp_gateway_configs\".\"provider_scope_source\" IN ('none', 'discovered', 'override')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_connect_resources": {
+      "name": "mcp_gateway_connect_resources",
+      "schema": "",
+      "columns": {
+        "connect_resource_id": {
+          "name": "connect_resource_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_key": {
+          "name": "route_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "canonical_url": {
+          "name": "canonical_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_status": {
+          "name": "route_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "route_version": {
+          "name": "route_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "rotated_at": {
+          "name": "rotated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_connect_resources_route_key": {
+          "name": "UQ_mcp_gateway_connect_resources_route_key",
+          "columns": [
+            {
+              "expression": "route_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_mcp_gateway_connect_resources_active_config": {
+          "name": "UQ_mcp_gateway_connect_resources_active_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_connect_resources\".\"route_status\" = 'active'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_connect_resources_config": {
+          "name": "IDX_mcp_gateway_connect_resources_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_connect_resources_canonical_url": {
+          "name": "IDX_mcp_gateway_connect_resources_canonical_url",
+          "columns": [
+            {
+              "expression": "canonical_url",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_connect_resources_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_connect_resources_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_connect_resources",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_connect_resources_route_key_format": {
+          "name": "mcp_gateway_connect_resources_route_key_format",
+          "value": "\"mcp_gateway_connect_resources\".\"route_key\" ~ '^[A-Za-z0-9_-]{32,}$'"
+        },
+        "mcp_gateway_connect_resources_route_version_positive": {
+          "name": "mcp_gateway_connect_resources_route_version_positive",
+          "value": "\"mcp_gateway_connect_resources\".\"route_version\" > 0"
+        },
+        "mcp_gateway_connect_resources_owner_scope": {
+          "name": "mcp_gateway_connect_resources_owner_scope",
+          "value": "\"mcp_gateway_connect_resources\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_connect_resources_route_status": {
+          "name": "mcp_gateway_connect_resources_route_status",
+          "value": "\"mcp_gateway_connect_resources\".\"route_status\" IN ('active', 'rotated', 'revoked')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_connection_instances": {
+      "name": "mcp_gateway_connection_instances",
+      "schema": "",
+      "columns": {
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_status": {
+          "name": "instance_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "instance_version": {
+          "name": "instance_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "removed_at": {
+          "name": "removed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_connection_instances_non_terminal": {
+          "name": "UQ_mcp_gateway_connection_instances_non_terminal",
+          "columns": [
+            {
+              "expression": "owner_scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owner_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_connection_instances\".\"instance_status\" IN ('active', 'needs_reauth')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_connection_instances_config": {
+          "name": "IDX_mcp_gateway_connection_instances_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_connection_instances_user": {
+          "name": "IDX_mcp_gateway_connection_instances_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_connection_instances_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_connection_instances_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_connection_instances",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_connection_instances_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_connection_instances_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_connection_instances",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_connection_instances_version_positive": {
+          "name": "mcp_gateway_connection_instances_version_positive",
+          "value": "\"mcp_gateway_connection_instances\".\"instance_version\" > 0"
+        },
+        "mcp_gateway_connection_instances_owner_scope": {
+          "name": "mcp_gateway_connection_instances_owner_scope",
+          "value": "\"mcp_gateway_connection_instances\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_connection_instances_status": {
+          "name": "mcp_gateway_connection_instances_status",
+          "value": "\"mcp_gateway_connection_instances\".\"instance_status\" IN ('active', 'needs_reauth', 'revoked', 'removed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_oauth_clients": {
+      "name": "mcp_gateway_oauth_clients",
+      "schema": "",
+      "columns": {
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "client_id": {
+          "name": "client_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "client_name": {
+          "name": "client_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "registration_token_hash": {
+          "name": "registration_token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "client_secret_hash": {
+          "name": "client_secret_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "token_endpoint_auth_method": {
+          "name": "token_endpoint_auth_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redirect_uris": {
+          "name": "redirect_uris",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "grant_types": {
+          "name": "grant_types",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "response_types": {
+          "name": "response_types",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "declared_scopes": {
+          "name": "declared_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "registration_access_token_expires_at": {
+          "name": "registration_access_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_oauth_clients_client_id": {
+          "name": "UQ_mcp_gateway_oauth_clients_client_id",
+          "columns": [
+            {
+              "expression": "client_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_mcp_gateway_oauth_clients_registration_token_hash": {
+          "name": "UQ_mcp_gateway_oauth_clients_registration_token_hash",
+          "columns": [
+            {
+              "expression": "registration_token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_clients_deleted_at": {
+          "name": "IDX_mcp_gateway_oauth_clients_deleted_at",
+          "columns": [
+            {
+              "expression": "deleted_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_oauth_clients_client_id_format": {
+          "name": "mcp_gateway_oauth_clients_client_id_format",
+          "value": "\"mcp_gateway_oauth_clients\".\"client_id\" ~ '^[A-Za-z0-9._-]+:[A-Za-z0-9._-]+$'"
+        },
+        "mcp_gateway_oauth_clients_auth_method": {
+          "name": "mcp_gateway_oauth_clients_auth_method",
+          "value": "\"mcp_gateway_oauth_clients\".\"token_endpoint_auth_method\" IN ('none', 'client_secret_post', 'client_secret_basic')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_oauth_grants": {
+      "name": "mcp_gateway_oauth_grants",
+      "schema": "",
+      "columns": {
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "connect_resource_id": {
+          "name": "connect_resource_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redirect_uri": {
+          "name": "redirect_uri",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_scopes": {
+          "name": "granted_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "execution_context": {
+          "name": "execution_context",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_version": {
+          "name": "config_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "grant_status": {
+          "name": "grant_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "approved_at": {
+          "name": "approved_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_reason": {
+          "name": "revocation_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_oauth_grants_active_binding": {
+          "name": "UQ_mcp_gateway_oauth_grants_active_binding",
+          "columns": [
+            {
+              "expression": "oauth_client_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "connect_resource_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "redirect_uri",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_oauth_grants\".\"revoked_at\" is null and \"mcp_gateway_oauth_grants\".\"grant_status\" in ('pending', 'active')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_client": {
+          "name": "IDX_mcp_gateway_oauth_grants_client",
+          "columns": [
+            {
+              "expression": "oauth_client_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_user": {
+          "name": "IDX_mcp_gateway_oauth_grants_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_config": {
+          "name": "IDX_mcp_gateway_oauth_grants_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_owner": {
+          "name": "IDX_mcp_gateway_oauth_grants_owner",
+          "columns": [
+            {
+              "expression": "owner_scope",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "owner_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_resource": {
+          "name": "IDX_mcp_gateway_oauth_grants_resource",
+          "columns": [
+            {
+              "expression": "connect_resource_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_instance": {
+          "name": "IDX_mcp_gateway_oauth_grants_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_oauth_grants_revoked_at": {
+          "name": "IDX_mcp_gateway_oauth_grants_revoked_at",
+          "columns": [
+            {
+              "expression": "revoked_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_oauth_grants_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk": {
+          "name": "mcp_gateway_oauth_grants_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk",
+          "tableFrom": "mcp_gateway_oauth_grants",
+          "tableTo": "mcp_gateway_oauth_clients",
+          "columnsFrom": [
+            "oauth_client_id"
+          ],
+          "columnsTo": [
+            "oauth_client_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_oauth_grants_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_oauth_grants_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_oauth_grants",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_oauth_grants_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_oauth_grants_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_oauth_grants",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_oauth_grants_connect_resource_id_mcp_gateway_connect_resources_connect_resource_id_fk": {
+          "name": "mcp_gateway_oauth_grants_connect_resource_id_mcp_gateway_connect_resources_connect_resource_id_fk",
+          "tableFrom": "mcp_gateway_oauth_grants",
+          "tableTo": "mcp_gateway_connect_resources",
+          "columnsFrom": [
+            "connect_resource_id"
+          ],
+          "columnsTo": [
+            "connect_resource_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_oauth_grants_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_oauth_grants_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_oauth_grants",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_oauth_grants_config_version_positive": {
+          "name": "mcp_gateway_oauth_grants_config_version_positive",
+          "value": "\"mcp_gateway_oauth_grants\".\"config_version\" > 0"
+        },
+        "mcp_gateway_oauth_grants_owner_scope": {
+          "name": "mcp_gateway_oauth_grants_owner_scope",
+          "value": "\"mcp_gateway_oauth_grants\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_oauth_grants_status": {
+          "name": "mcp_gateway_oauth_grants_status",
+          "value": "\"mcp_gateway_oauth_grants\".\"grant_status\" IN ('pending', 'active', 'revoked')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_pending_provider_authorizations": {
+      "name": "mcp_gateway_pending_provider_authorizations",
+      "schema": "",
+      "columns": {
+        "pending_provider_authorization_id": {
+          "name": "pending_provider_authorization_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "state_hash": {
+          "name": "state_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "authorization_request_id": {
+          "name": "authorization_request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_key": {
+          "name": "route_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "canonical_resource_url": {
+          "name": "canonical_resource_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "remote_url": {
+          "name": "remote_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "auth_mode": {
+          "name": "auth_mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_authorization_endpoint": {
+          "name": "provider_authorization_endpoint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_token_endpoint": {
+          "name": "provider_token_endpoint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_state": {
+          "name": "encrypted_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "execution_context": {
+          "name": "execution_context",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_version": {
+          "name": "config_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pending_status": {
+          "name": "pending_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_pending_provider_authorizations_state_hash": {
+          "name": "UQ_mcp_gateway_pending_provider_authorizations_state_hash",
+          "columns": [
+            {
+              "expression": "state_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_pending_provider_authorizations_config": {
+          "name": "IDX_mcp_gateway_pending_provider_authorizations_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_pending_provider_authorizations_grant": {
+          "name": "IDX_mcp_gateway_pending_provider_authorizations_grant",
+          "columns": [
+            {
+              "expression": "oauth_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"mcp_gateway_pending_provider_authorizations\".\"oauth_grant_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_pending_provider_authorizations_expires_at": {
+          "name": "IDX_mcp_gateway_pending_provider_authorizations_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_pending_provider_authorizations_authorization_request_id_mcp_gateway_authorization_requests_authorization_request_id_fk": {
+          "name": "mcp_gateway_pending_provider_authorizations_authorization_request_id_mcp_gateway_authorization_requests_authorization_request_id_fk",
+          "tableFrom": "mcp_gateway_pending_provider_authorizations",
+          "tableTo": "mcp_gateway_authorization_requests",
+          "columnsFrom": [
+            "authorization_request_id"
+          ],
+          "columnsTo": [
+            "authorization_request_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_pending_provider_authorizations_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk": {
+          "name": "mcp_gateway_pending_provider_authorizations_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk",
+          "tableFrom": "mcp_gateway_pending_provider_authorizations",
+          "tableTo": "mcp_gateway_oauth_grants",
+          "columnsFrom": [
+            "oauth_grant_id"
+          ],
+          "columnsTo": [
+            "oauth_grant_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_pending_provider_authorizations_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_pending_provider_authorizations_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_pending_provider_authorizations",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_pending_provider_authorizations_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_pending_provider_authorizations_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_pending_provider_authorizations",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_pending_provider_authorizations_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_pending_provider_authorizations_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_pending_provider_authorizations",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_pending_provider_authorizations_config_version_positive": {
+          "name": "mcp_gateway_pending_provider_authorizations_config_version_positive",
+          "value": "\"mcp_gateway_pending_provider_authorizations\".\"config_version\" > 0"
+        },
+        "mcp_gateway_pending_provider_authorizations_owner_scope": {
+          "name": "mcp_gateway_pending_provider_authorizations_owner_scope",
+          "value": "\"mcp_gateway_pending_provider_authorizations\".\"owner_scope\" IN ('personal', 'organization')"
+        },
+        "mcp_gateway_pending_provider_authorizations_auth_mode": {
+          "name": "mcp_gateway_pending_provider_authorizations_auth_mode",
+          "value": "\"mcp_gateway_pending_provider_authorizations\".\"auth_mode\" IN ('none', 'static_headers', 'oauth_dynamic', 'oauth_static')"
+        },
+        "mcp_gateway_pending_provider_authorizations_status": {
+          "name": "mcp_gateway_pending_provider_authorizations_status",
+          "value": "\"mcp_gateway_pending_provider_authorizations\".\"pending_status\" IN ('pending', 'completed', 'error')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_provider_grants": {
+      "name": "mcp_gateway_provider_grants",
+      "schema": "",
+      "columns": {
+        "provider_grant_id": {
+          "name": "provider_grant_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_grant": {
+          "name": "encrypted_grant",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subject": {
+          "name": "provider_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "grant_scope": {
+          "name": "grant_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "grant_status": {
+          "name": "grant_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "grant_version": {
+          "name": "grant_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_provider_grants_active_instance": {
+          "name": "UQ_mcp_gateway_provider_grants_active_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"mcp_gateway_provider_grants\".\"grant_status\" = 'active'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_provider_grants_instance": {
+          "name": "IDX_mcp_gateway_provider_grants_instance",
+          "columns": [
+            {
+              "expression": "instance_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_provider_grants_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_provider_grants_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_provider_grants",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_provider_grants_version_positive": {
+          "name": "mcp_gateway_provider_grants_version_positive",
+          "value": "\"mcp_gateway_provider_grants\".\"grant_version\" > 0"
+        },
+        "mcp_gateway_provider_grants_status": {
+          "name": "mcp_gateway_provider_grants_status",
+          "value": "\"mcp_gateway_provider_grants\".\"grant_status\" IN ('active', 'revoked')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_rate_limit_windows": {
+      "name": "mcp_gateway_rate_limit_windows",
+      "schema": "",
+      "columns": {
+        "rate_limit_window_id": {
+          "name": "rate_limit_window_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "ip_hash": {
+          "name": "ip_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "window_started_at": {
+          "name": "window_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_rate_limit_windows_ip_window": {
+          "name": "UQ_mcp_gateway_rate_limit_windows_ip_window",
+          "columns": [
+            {
+              "expression": "ip_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "window_started_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_rate_limit_windows_window": {
+          "name": "IDX_mcp_gateway_rate_limit_windows_window",
+          "columns": [
+            {
+              "expression": "window_started_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_rate_limit_windows_attempt_count_non_negative": {
+          "name": "mcp_gateway_rate_limit_windows_attempt_count_non_negative",
+          "value": "\"mcp_gateway_rate_limit_windows\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.mcp_gateway_refresh_tokens": {
+      "name": "mcp_gateway_refresh_tokens",
+      "schema": "",
+      "columns": {
+        "refresh_token_id": {
+          "name": "refresh_token_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "token_hash": {
+          "name": "token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "rotated_from_refresh_token_id": {
+          "name": "rotated_from_refresh_token_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "oauth_client_id": {
+          "name": "oauth_client_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "oauth_grant_id": {
+          "name": "oauth_grant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "client_id": {
+          "name": "client_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_scope": {
+          "name": "owner_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owner_id": {
+          "name": "owner_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "config_id": {
+          "name": "config_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "route_key": {
+          "name": "route_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "canonical_resource_url": {
+          "name": "canonical_resource_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "granted_scopes": {
+          "name": "granted_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "execution_context": {
+          "name": "execution_context",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "instance_id": {
+          "name": "instance_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_mcp_gateway_refresh_tokens_token_hash": {
+          "name": "UQ_mcp_gateway_refresh_tokens_token_hash",
+          "columns": [
+            {
+              "expression": "token_hash",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_refresh_tokens_user": {
+          "name": "IDX_mcp_gateway_refresh_tokens_user",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_refresh_tokens_grant": {
+          "name": "IDX_mcp_gateway_refresh_tokens_grant",
+          "columns": [
+            {
+              "expression": "oauth_grant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"mcp_gateway_refresh_tokens\".\"oauth_grant_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_refresh_tokens_config": {
+          "name": "IDX_mcp_gateway_refresh_tokens_config",
+          "columns": [
+            {
+              "expression": "config_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_mcp_gateway_refresh_tokens_consumed_at": {
+          "name": "IDX_mcp_gateway_refresh_tokens_consumed_at",
+          "columns": [
+            {
+              "expression": "consumed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "mcp_gateway_refresh_tokens_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk": {
+          "name": "mcp_gateway_refresh_tokens_oauth_client_id_mcp_gateway_oauth_clients_oauth_client_id_fk",
+          "tableFrom": "mcp_gateway_refresh_tokens",
+          "tableTo": "mcp_gateway_oauth_clients",
+          "columnsFrom": [
+            "oauth_client_id"
+          ],
+          "columnsTo": [
+            "oauth_client_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_refresh_tokens_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk": {
+          "name": "mcp_gateway_refresh_tokens_oauth_grant_id_mcp_gateway_oauth_grants_oauth_grant_id_fk",
+          "tableFrom": "mcp_gateway_refresh_tokens",
+          "tableTo": "mcp_gateway_oauth_grants",
+          "columnsFrom": [
+            "oauth_grant_id"
+          ],
+          "columnsTo": [
+            "oauth_grant_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_refresh_tokens_config_id_mcp_gateway_configs_config_id_fk": {
+          "name": "mcp_gateway_refresh_tokens_config_id_mcp_gateway_configs_config_id_fk",
+          "tableFrom": "mcp_gateway_refresh_tokens",
+          "tableTo": "mcp_gateway_configs",
+          "columnsFrom": [
+            "config_id"
+          ],
+          "columnsTo": [
+            "config_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_refresh_tokens_kilo_user_id_kilocode_users_id_fk": {
+          "name": "mcp_gateway_refresh_tokens_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "mcp_gateway_refresh_tokens",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "mcp_gateway_refresh_tokens_instance_id_mcp_gateway_connection_instances_instance_id_fk": {
+          "name": "mcp_gateway_refresh_tokens_instance_id_mcp_gateway_connection_instances_instance_id_fk",
+          "tableFrom": "mcp_gateway_refresh_tokens",
+          "tableTo": "mcp_gateway_connection_instances",
+          "columnsFrom": [
+            "instance_id"
+          ],
+          "columnsTo": [
+            "instance_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "mcp_gateway_refresh_tokens_owner_scope": {
+          "name": "mcp_gateway_refresh_tokens_owner_scope",
+          "value": "\"mcp_gateway_refresh_tokens\".\"owner_scope\" IN ('personal', 'organization')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.microdollar_usage": {
+      "name": "microdollar_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cost": {
+          "name": "cost",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "input_tokens": {
+          "name": "input_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "output_tokens": {
+          "name": "output_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cache_write_tokens": {
+          "name": "cache_write_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cache_hit_tokens": {
+          "name": "cache_hit_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "requested_model": {
+          "name": "requested_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cache_discount": {
+          "name": "cache_discount",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_error": {
+          "name": "has_error",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "abuse_classification": {
+          "name": "abuse_classification",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "inference_provider": {
+          "name": "inference_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_created_at": {
+          "name": "idx_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_abuse_classification": {
+          "name": "idx_abuse_classification",
+          "columns": [
+            {
+              "expression": "abuse_classification",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_kilo_user_id_created_at2": {
+          "name": "idx_kilo_user_id_created_at2",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_microdollar_usage_organization_id": {
+          "name": "idx_microdollar_usage_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"microdollar_usage\".\"organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.microdollar_usage_daily": {
+      "name": "microdollar_usage_daily",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_date": {
+          "name": "usage_date",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "total_cost_microdollars": {
+          "name": "total_cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_microdollar_usage_daily_personal": {
+          "name": "idx_microdollar_usage_daily_personal",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "usage_date",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"microdollar_usage_daily\".\"organization_id\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_microdollar_usage_daily_org": {
+          "name": "idx_microdollar_usage_daily_org",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "usage_date",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"microdollar_usage_daily\".\"organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.microdollar_usage_daily_repairs": {
+      "name": "microdollar_usage_daily_repairs",
+      "schema": "",
+      "columns": {
+        "usage_id": {
+          "name": "usage_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "usage_date": {
+          "name": "usage_date",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claim_token": {
+          "name": "claim_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_error_redacted": {
+          "name": "last_error_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_microdollar_usage_daily_repairs_claim": {
+          "name": "IDX_microdollar_usage_daily_repairs_claim",
+          "columns": [
+            {
+              "expression": "attempt_count",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "next_attempt_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "usage_date",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "usage_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "microdollar_usage_daily_repairs_usage_id_microdollar_usage_id_fk": {
+          "name": "microdollar_usage_daily_repairs_usage_id_microdollar_usage_id_fk",
+          "tableFrom": "microdollar_usage_daily_repairs",
+          "tableTo": "microdollar_usage",
+          "columnsFrom": [
+            "usage_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "microdollar_usage_daily_repairs_attempt_count_check": {
+          "name": "microdollar_usage_daily_repairs_attempt_count_check",
+          "value": "\"microdollar_usage_daily_repairs\".\"attempt_count\" >= 0"
+        },
+        "microdollar_usage_daily_repairs_claim_token_check": {
+          "name": "microdollar_usage_daily_repairs_claim_token_check",
+          "value": "(\"microdollar_usage_daily_repairs\".\"claimed_at\" IS NULL AND \"microdollar_usage_daily_repairs\".\"claim_token\" IS NULL) OR (\"microdollar_usage_daily_repairs\".\"claimed_at\" IS NOT NULL AND \"microdollar_usage_daily_repairs\".\"claim_token\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.microdollar_usage_metadata": {
+      "name": "microdollar_usage_metadata",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "message_id": {
+          "name": "message_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "http_user_agent_id": {
+          "name": "http_user_agent_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_ip_id": {
+          "name": "http_ip_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_ip_city_id": {
+          "name": "vercel_ip_city_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_ip_country_id": {
+          "name": "vercel_ip_country_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_ip_latitude": {
+          "name": "vercel_ip_latitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel_ip_longitude": {
+          "name": "vercel_ip_longitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ja4_digest_id": {
+          "name": "ja4_digest_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_prompt_prefix": {
+          "name": "user_prompt_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "system_prompt_prefix_id": {
+          "name": "system_prompt_prefix_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "system_prompt_length": {
+          "name": "system_prompt_length",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "max_tokens": {
+          "name": "max_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_middle_out_transform": {
+          "name": "has_middle_out_transform",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_code": {
+          "name": "status_code",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "upstream_id": {
+          "name": "upstream_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finish_reason_id": {
+          "name": "finish_reason_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "latency": {
+          "name": "latency",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "moderation_latency": {
+          "name": "moderation_latency",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "generation_time": {
+          "name": "generation_time",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_byok": {
+          "name": "is_byok",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_user_byok": {
+          "name": "is_user_byok",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "streamed": {
+          "name": "streamed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancelled": {
+          "name": "cancelled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "editor_name_id": {
+          "name": "editor_name_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "api_kind_id": {
+          "name": "api_kind_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_tools": {
+          "name": "has_tools",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "machine_id": {
+          "name": "machine_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "feature_id": {
+          "name": "feature_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "mode_id": {
+          "name": "mode_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_model_id": {
+          "name": "auto_model_id",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "market_cost": {
+          "name": "market_cost",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_free": {
+          "name": "is_free",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "abuse_delay": {
+          "name": "abuse_delay",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "abuse_downgraded_from": {
+          "name": "abuse_downgraded_from",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_microdollar_usage_metadata_created_at": {
+          "name": "idx_microdollar_usage_metadata_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_microdollar_usage_metadata_session_id": {
+          "name": "idx_microdollar_usage_metadata_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"microdollar_usage_metadata\".\"session_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "microdollar_usage_metadata_http_user_agent_id_http_user_agent_http_user_agent_id_fk": {
+          "name": "microdollar_usage_metadata_http_user_agent_id_http_user_agent_http_user_agent_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "http_user_agent",
+          "columnsFrom": [
+            "http_user_agent_id"
+          ],
+          "columnsTo": [
+            "http_user_agent_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "microdollar_usage_metadata_http_ip_id_http_ip_http_ip_id_fk": {
+          "name": "microdollar_usage_metadata_http_ip_id_http_ip_http_ip_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "http_ip",
+          "columnsFrom": [
+            "http_ip_id"
+          ],
+          "columnsTo": [
+            "http_ip_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "microdollar_usage_metadata_vercel_ip_city_id_vercel_ip_city_vercel_ip_city_id_fk": {
+          "name": "microdollar_usage_metadata_vercel_ip_city_id_vercel_ip_city_vercel_ip_city_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "vercel_ip_city",
+          "columnsFrom": [
+            "vercel_ip_city_id"
+          ],
+          "columnsTo": [
+            "vercel_ip_city_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "microdollar_usage_metadata_vercel_ip_country_id_vercel_ip_country_vercel_ip_country_id_fk": {
+          "name": "microdollar_usage_metadata_vercel_ip_country_id_vercel_ip_country_vercel_ip_country_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "vercel_ip_country",
+          "columnsFrom": [
+            "vercel_ip_country_id"
+          ],
+          "columnsTo": [
+            "vercel_ip_country_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "microdollar_usage_metadata_ja4_digest_id_ja4_digest_ja4_digest_id_fk": {
+          "name": "microdollar_usage_metadata_ja4_digest_id_ja4_digest_ja4_digest_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "ja4_digest",
+          "columnsFrom": [
+            "ja4_digest_id"
+          ],
+          "columnsTo": [
+            "ja4_digest_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "microdollar_usage_metadata_system_prompt_prefix_id_system_prompt_prefix_system_prompt_prefix_id_fk": {
+          "name": "microdollar_usage_metadata_system_prompt_prefix_id_system_prompt_prefix_system_prompt_prefix_id_fk",
+          "tableFrom": "microdollar_usage_metadata",
+          "tableTo": "system_prompt_prefix",
+          "columnsFrom": [
+            "system_prompt_prefix_id"
+          ],
+          "columnsTo": [
+            "system_prompt_prefix_id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.mode": {
+      "name": "mode",
+      "schema": "",
+      "columns": {
+        "mode_id": {
+          "name": "mode_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "mode": {
+          "name": "mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_mode": {
+          "name": "UQ_mode",
+          "columns": [
+            {
+              "expression": "mode",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.model_stats": {
+      "name": "model_stats",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false,
+          "default": true
+        },
+        "is_featured": {
+          "name": "is_featured",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "is_stealth": {
+          "name": "is_stealth",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "is_recommended": {
+          "name": "is_recommended",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "openrouter_id": {
+          "name": "openrouter_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slug": {
+          "name": "slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "aa_slug": {
+          "name": "aa_slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model_creator": {
+          "name": "model_creator",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "creator_slug": {
+          "name": "creator_slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "release_date": {
+          "name": "release_date",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "price_input": {
+          "name": "price_input",
+          "type": "numeric(10, 6)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "price_output": {
+          "name": "price_output",
+          "type": "numeric(10, 6)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "coding_index": {
+          "name": "coding_index",
+          "type": "numeric(5, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "speed_tokens_per_sec": {
+          "name": "speed_tokens_per_sec",
+          "type": "numeric(8, 2)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "context_length": {
+          "name": "context_length",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "max_output_tokens": {
+          "name": "max_output_tokens",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "input_modalities": {
+          "name": "input_modalities",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "openrouter_data": {
+          "name": "openrouter_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "benchmarks": {
+          "name": "benchmarks",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "chart_data": {
+          "name": "chart_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_model_stats_openrouter_id": {
+          "name": "IDX_model_stats_openrouter_id",
+          "columns": [
+            {
+              "expression": "openrouter_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_slug": {
+          "name": "IDX_model_stats_slug",
+          "columns": [
+            {
+              "expression": "slug",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_is_active": {
+          "name": "IDX_model_stats_is_active",
+          "columns": [
+            {
+              "expression": "is_active",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_creator_slug": {
+          "name": "IDX_model_stats_creator_slug",
+          "columns": [
+            {
+              "expression": "creator_slug",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_price_input": {
+          "name": "IDX_model_stats_price_input",
+          "columns": [
+            {
+              "expression": "price_input",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_coding_index": {
+          "name": "IDX_model_stats_coding_index",
+          "columns": [
+            {
+              "expression": "coding_index",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_stats_context_length": {
+          "name": "IDX_model_stats_context_length",
+          "columns": [
+            {
+              "expression": "context_length",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "model_stats_openrouter_id_unique": {
+          "name": "model_stats_openrouter_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "openrouter_id"
+          ]
+        },
+        "model_stats_slug_unique": {
+          "name": "model_stats_slug_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "slug"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.model_eval_ingestions": {
+      "name": "model_eval_ingestions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "bench_eval_name": {
+          "name": "bench_eval_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "bench_eval_url": {
+          "name": "bench_eval_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "model_stats_id": {
+          "name": "model_stats_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "variant": {
+          "name": "variant",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "task_source": {
+          "name": "task_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "n_total_trials": {
+          "name": "n_total_trials",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "n_attempts": {
+          "name": "n_attempts",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_score": {
+          "name": "total_score",
+          "type": "numeric(14, 6)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "overall_score": {
+          "name": "overall_score",
+          "type": "numeric(12, 8)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "n_errored": {
+          "name": "n_errored",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "avg_cost_microdollars": {
+          "name": "avg_cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_cost_microdollars": {
+          "name": "total_cost_microdollars",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "avg_input_tokens": {
+          "name": "avg_input_tokens",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_input_tokens": {
+          "name": "total_input_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "avg_output_tokens": {
+          "name": "avg_output_tokens",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_output_tokens": {
+          "name": "total_output_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "avg_cache_read_tokens": {
+          "name": "avg_cache_read_tokens",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "total_cache_read_tokens": {
+          "name": "total_cache_read_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "avg_execution_ms": {
+          "name": "avg_execution_ms",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "promoted_at": {
+          "name": "promoted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "promoted_by_email": {
+          "name": "promoted_by_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "promotion_note": {
+          "name": "promotion_note",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_model_eval_ingestions_lookup": {
+          "name": "IDX_model_eval_ingestions_lookup",
+          "columns": [
+            {
+              "expression": "provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "model",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "variant",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "task_source",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "promoted_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_eval_ingestions_model_stats": {
+          "name": "IDX_model_eval_ingestions_model_stats",
+          "columns": [
+            {
+              "expression": "model_stats_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_eval_ingestions_promoted_by_email_lower": {
+          "name": "IDX_model_eval_ingestions_promoted_by_email_lower",
+          "columns": [
+            {
+              "expression": "LOWER(\"promoted_by_email\")",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "model_eval_ingestions_model_stats_id_model_stats_id_fk": {
+          "name": "model_eval_ingestions_model_stats_id_model_stats_id_fk",
+          "tableFrom": "model_eval_ingestions",
+          "tableTo": "model_stats",
+          "columnsFrom": [
+            "model_stats_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "model_eval_ingestions_bench_eval_name_unique": {
+          "name": "model_eval_ingestions_bench_eval_name_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "bench_eval_name"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.model_experiment": {
+      "name": "model_experiment",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "public_model_id": {
+          "name": "public_model_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'draft'"
+        },
+        "is_archived": {
+          "name": "is_archived",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ended_at": {
+          "name": "ended_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_model_experiment_public_model_id_routing": {
+          "name": "UQ_model_experiment_public_model_id_routing",
+          "columns": [
+            {
+              "expression": "public_model_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"model_experiment\".\"status\" IN ('active', 'paused')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_experiment_status": {
+          "name": "IDX_model_experiment_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "model_experiment_created_by_user_id_kilocode_users_id_fk": {
+          "name": "model_experiment_created_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "model_experiment",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "model_experiment_status_valid": {
+          "name": "model_experiment_status_valid",
+          "value": "\"model_experiment\".\"status\" IN ('draft', 'active', 'paused', 'completed')"
+        },
+        "model_experiment_active_not_archived": {
+          "name": "model_experiment_active_not_archived",
+          "value": "\"model_experiment\".\"status\" <> 'active' OR \"model_experiment\".\"is_archived\" = false"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.model_experiment_request": {
+      "name": "model_experiment_request",
+      "schema": "",
+      "columns": {
+        "usage_id": {
+          "name": "usage_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "variant_version_id": {
+          "name": "variant_version_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "allocation_subject": {
+          "name": "allocation_subject",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "client_request_id": {
+          "name": "client_request_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "request_kind": {
+          "name": "request_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "request_body_sha256": {
+          "name": "request_body_sha256",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "was_truncated": {
+          "name": "was_truncated",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_model_experiment_request_variant_version_created_at": {
+          "name": "IDX_model_experiment_request_variant_version_created_at",
+          "columns": [
+            {
+              "expression": "variant_version_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_model_experiment_request_client_request_id": {
+          "name": "IDX_model_experiment_request_client_request_id",
+          "columns": [
+            {
+              "expression": "client_request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"model_experiment_request\".\"client_request_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "model_experiment_request_usage_id_microdollar_usage_id_fk": {
+          "name": "model_experiment_request_usage_id_microdollar_usage_id_fk",
+          "tableFrom": "model_experiment_request",
+          "tableTo": "microdollar_usage",
+          "columnsFrom": [
+            "usage_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "model_experiment_request_variant_version_id_model_experiment_variant_version_id_fk": {
+          "name": "model_experiment_request_variant_version_id_model_experiment_variant_version_id_fk",
+          "tableFrom": "model_experiment_request",
+          "tableTo": "model_experiment_variant_version",
+          "columnsFrom": [
+            "variant_version_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "model_experiment_request_usage_id_created_at_pk": {
+          "name": "model_experiment_request_usage_id_created_at_pk",
+          "columns": [
+            "usage_id",
+            "created_at"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "model_experiment_request_allocation_subject_valid": {
+          "name": "model_experiment_request_allocation_subject_valid",
+          "value": "\"model_experiment_request\".\"allocation_subject\" IN ('user', 'machine', 'ip')"
+        },
+        "model_experiment_request_request_kind_valid": {
+          "name": "model_experiment_request_request_kind_valid",
+          "value": "\"model_experiment_request\".\"request_kind\" IN ('chat_completions', 'messages', 'responses')"
+        },
+        "model_experiment_request_request_body_sha256_format": {
+          "name": "model_experiment_request_request_body_sha256_format",
+          "value": "\"model_experiment_request\".\"request_body_sha256\" ~ '^[0-9a-f]{64}$' OR \"model_experiment_request\".\"request_body_sha256\" IN ('__failed__', '__deleted__')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.model_experiment_variant": {
+      "name": "model_experiment_variant",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "experiment_id": {
+          "name": "experiment_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "label": {
+          "name": "label",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "weight": {
+          "name": "weight",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_model_experiment_variant_experiment_id": {
+          "name": "IDX_model_experiment_variant_experiment_id",
+          "columns": [
+            {
+              "expression": "experiment_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "model_experiment_variant_experiment_id_model_experiment_id_fk": {
+          "name": "model_experiment_variant_experiment_id_model_experiment_id_fk",
+          "tableFrom": "model_experiment_variant",
+          "tableTo": "model_experiment",
+          "columnsFrom": [
+            "experiment_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_model_experiment_variant_experiment_label": {
+          "name": "UQ_model_experiment_variant_experiment_label",
+          "nullsNotDistinct": false,
+          "columns": [
+            "experiment_id",
+            "label"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "model_experiment_variant_weight_positive": {
+          "name": "model_experiment_variant_weight_positive",
+          "value": "\"model_experiment_variant\".\"weight\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.model_experiment_variant_version": {
+      "name": "model_experiment_variant_version",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "variant_id": {
+          "name": "variant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "upstream": {
+          "name": "upstream",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "encrypted_api_key": {
+          "name": "encrypted_api_key",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "effective_at": {
+          "name": "effective_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_model_experiment_variant_version_variant_effective": {
+          "name": "IDX_model_experiment_variant_version_variant_effective",
+          "columns": [
+            {
+              "expression": "variant_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "effective_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "model_experiment_variant_version_variant_id_model_experiment_variant_id_fk": {
+          "name": "model_experiment_variant_version_variant_id_model_experiment_variant_id_fk",
+          "tableFrom": "model_experiment_variant_version",
+          "tableTo": "model_experiment_variant",
+          "columnsFrom": [
+            "variant_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "model_experiment_variant_version_created_by_kilocode_users_id_fk": {
+          "name": "model_experiment_variant_version_created_by_kilocode_users_id_fk",
+          "tableFrom": "model_experiment_variant_version",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "created_by"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.models_by_provider": {
+      "name": "models_by_provider",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "openrouter": {
+          "name": "openrouter",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "vercel": {
+          "name": "vercel",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.native_admission_challenges": {
+      "name": "native_admission_challenges",
+      "schema": "",
+      "columns": {
+        "challenge": {
+          "name": "challenge",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "consumed_at": {
+          "name": "consumed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_native_admission_challenges_expires_at": {
+          "name": "IDX_native_admission_challenges_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.native_attested_keys": {
+      "name": "native_attested_keys",
+      "schema": "",
+      "columns": {
+        "key_id": {
+          "name": "key_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "public_key": {
+          "name": "public_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sign_count": {
+          "name": "sign_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attested_at": {
+          "name": "attested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_native_attested_keys_kilo_user_id": {
+          "name": "IDX_native_attested_keys_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "native_attested_keys_kilo_user_id_kilocode_users_id_fk": {
+          "name": "native_attested_keys_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "native_attested_keys",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "native_attested_keys_platform_check": {
+          "name": "native_attested_keys_platform_check",
+          "value": "\"native_attested_keys\".\"platform\" IN ('ios', 'android')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.operation_ledgers": {
+      "name": "operation_ledgers",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "operation_key": {
+          "name": "operation_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "domain": {
+          "name": "domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "intent": {
+          "name": "intent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "resource_key": {
+          "name": "resource_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_ref": {
+          "name": "provider_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "taxonomy": {
+          "name": "taxonomy",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'admitted'"
+        },
+        "outcome_code": {
+          "name": "outcome_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "canonical_result": {
+          "name": "canonical_result",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "admitted_at": {
+          "name": "admitted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "settled_at": {
+          "name": "settled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "lease_expires_at": {
+          "name": "lease_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_operation_ledgers_kilo_user_id_domain_operation_key": {
+          "name": "UQ_operation_ledgers_kilo_user_id_domain_operation_key",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "domain",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "operation_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_operation_ledgers_status_expires_at": {
+          "name": "IDX_operation_ledgers_status_expires_at",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_operation_ledgers_provider_ref": {
+          "name": "IDX_operation_ledgers_provider_ref",
+          "columns": [
+            {
+              "expression": "provider_ref",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"operation_ledgers\".\"provider_ref\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_audit_logs": {
+      "name": "organization_audit_logs",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_id": {
+          "name": "actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_email": {
+          "name": "actor_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_name": {
+          "name": "actor_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "message": {
+          "name": "message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_organization_audit_logs_organization_id": {
+          "name": "IDX_organization_audit_logs_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_audit_logs_action": {
+          "name": "IDX_organization_audit_logs_action",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_audit_logs_actor_id": {
+          "name": "IDX_organization_audit_logs_actor_id",
+          "columns": [
+            {
+              "expression": "actor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_audit_logs_created_at": {
+          "name": "IDX_organization_audit_logs_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_group_memberships": {
+      "name": "organization_group_memberships",
+      "schema": "",
+      "columns": {
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "group_id": {
+          "name": "group_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "assigned_by_kilo_user_id": {
+          "name": "assigned_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_organization_group_memberships_organization_user": {
+          "name": "IDX_organization_group_memberships_organization_user",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "FK_organization_group_memberships_group": {
+          "name": "FK_organization_group_memberships_group",
+          "tableFrom": "organization_group_memberships",
+          "tableTo": "organization_groups",
+          "columnsFrom": [
+            "organization_id",
+            "group_id"
+          ],
+          "columnsTo": [
+            "organization_id",
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "FK_organization_group_memberships_member": {
+          "name": "FK_organization_group_memberships_member",
+          "tableFrom": "organization_group_memberships",
+          "tableTo": "organization_memberships",
+          "columnsFrom": [
+            "organization_id",
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "organization_id",
+            "kilo_user_id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "PK_organization_group_memberships": {
+          "name": "PK_organization_group_memberships",
+          "columns": [
+            "organization_id",
+            "group_id",
+            "kilo_user_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_group_policy_settings": {
+      "name": "organization_group_policy_settings",
+      "schema": "",
+      "columns": {
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "default_policies": {
+          "name": "default_policies",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[{\"type\":\"model_access\",\"data\":{\"mode\":\"all\"}}]'::jsonb"
+        },
+        "policy_revision": {
+          "name": "policy_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "updated_by_kilo_user_id": {
+          "name": "updated_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "organization_group_policy_settings_organization_id_organizations_id_fk": {
+          "name": "organization_group_policy_settings_organization_id_organizations_id_fk",
+          "tableFrom": "organization_group_policy_settings",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "organization_group_policy_settings_revision_check": {
+          "name": "organization_group_policy_settings_revision_check",
+          "value": "\"organization_group_policy_settings\".\"policy_revision\" >= 1"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.organization_groups": {
+      "name": "organization_groups",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "policies": {
+          "name": "policies",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::jsonb"
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_organization_groups_organization_id_canonical_name": {
+          "name": "UQ_organization_groups_organization_id_canonical_name",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "lower(btrim(\"name\"))",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_groups_organization_id": {
+          "name": "IDX_organization_groups_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "organization_groups_organization_id_organizations_id_fk": {
+          "name": "organization_groups_organization_id_organizations_id_fk",
+          "tableFrom": "organization_groups",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_groups_organization_id_id": {
+          "name": "UQ_organization_groups_organization_id_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "organization_groups_name_check": {
+          "name": "organization_groups_name_check",
+          "value": "char_length(btrim(\"organization_groups\".\"name\")) BETWEEN 1 AND 80"
+        },
+        "organization_groups_description_check": {
+          "name": "organization_groups_description_check",
+          "value": "\"organization_groups\".\"description\" IS NULL OR char_length(\"organization_groups\".\"description\") <= 500"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.organization_invitations": {
+      "name": "organization_invitations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "invited_by": {
+          "name": "invited_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "authentication_requirement": {
+          "name": "authentication_requirement",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'default'"
+        },
+        "sso_source_organization_id": {
+          "name": "sso_source_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_organization_invitations_token": {
+          "name": "UQ_organization_invitations_token",
+          "columns": [
+            {
+              "expression": "token",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_invitations_org_id": {
+          "name": "IDX_organization_invitations_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_invitations_email": {
+          "name": "IDX_organization_invitations_email",
+          "columns": [
+            {
+              "expression": "email",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_invitations_expires_at": {
+          "name": "IDX_organization_invitations_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "organization_invitations_sso_source_organization_id_organizations_id_fk": {
+          "name": "organization_invitations_sso_source_organization_id_organizations_id_fk",
+          "tableFrom": "organization_invitations",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "sso_source_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_membership_removals": {
+      "name": "organization_membership_removals",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "removed_at": {
+          "name": "removed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "removed_by": {
+          "name": "removed_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "previous_role": {
+          "name": "previous_role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "IDX_org_membership_removals_org_id": {
+          "name": "IDX_org_membership_removals_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_org_membership_removals_user_id": {
+          "name": "IDX_org_membership_removals_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_org_membership_removals_org_user": {
+          "name": "UQ_org_membership_removals_org_user",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "kilo_user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_memberships": {
+      "name": "organization_memberships",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "role": {
+          "name": "role",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "joined_at": {
+          "name": "joined_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "invited_by": {
+          "name": "invited_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_organization_memberships_org_id": {
+          "name": "IDX_organization_memberships_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_memberships_user_id": {
+          "name": "IDX_organization_memberships_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_memberships_org_user": {
+          "name": "UQ_organization_memberships_org_user",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "kilo_user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_recommendation_dismissals": {
+      "name": "organization_recommendation_dismissals",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recommendation_key": {
+          "name": "recommendation_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "dismissed_by_user_id": {
+          "name": "dismissed_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dismissed_at": {
+          "name": "dismissed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "organization_recommendation_dismissals_owned_by_organization_id_organizations_id_fk": {
+          "name": "organization_recommendation_dismissals_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "organization_recommendation_dismissals",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "organization_recommendation_dismissals_dismissed_by_user_id_kilocode_users_id_fk": {
+          "name": "organization_recommendation_dismissals_dismissed_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "organization_recommendation_dismissals",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "dismissed_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_org_recommendation_dismissals_org_key": {
+          "name": "UQ_org_recommendation_dismissals_org_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "owned_by_organization_id",
+            "recommendation_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_seats_purchases": {
+      "name": "organization_seats_purchases",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subscription_stripe_id": {
+          "name": "subscription_stripe_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "seat_count": {
+          "name": "seat_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_usd": {
+          "name": "amount_usd",
+          "type": "numeric",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "subscription_status": {
+          "name": "subscription_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'active'"
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "starts_at": {
+          "name": "starts_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "billing_cycle": {
+          "name": "billing_cycle",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'monthly'"
+        }
+      },
+      "indexes": {
+        "IDX_organization_seats_org_id": {
+          "name": "IDX_organization_seats_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_seats_expires_at": {
+          "name": "IDX_organization_seats_expires_at",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_seats_created_at": {
+          "name": "IDX_organization_seats_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_seats_updated_at": {
+          "name": "IDX_organization_seats_updated_at",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_seats_starts_at": {
+          "name": "IDX_organization_seats_starts_at",
+          "columns": [
+            {
+              "expression": "starts_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_seats_idempotency_key": {
+          "name": "UQ_organization_seats_idempotency_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "idempotency_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_service_fee_exemptions": {
+      "name": "organization_service_fee_exemptions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_exempt": {
+          "name": "is_exempt",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "changed_by_kilo_user_id": {
+          "name": "changed_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_org_service_fee_exemptions_org_created_at": {
+          "name": "IDX_org_service_fee_exemptions_org_created_at",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "FK_org_svc_fee_exemptions_organization": {
+          "name": "FK_org_svc_fee_exemptions_organization",
+          "tableFrom": "organization_service_fee_exemptions",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "FK_org_svc_fee_exemptions_changed_by": {
+          "name": "FK_org_svc_fee_exemptions_changed_by",
+          "tableFrom": "organization_service_fee_exemptions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "changed_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "organization_service_fee_exemptions_reason_check": {
+          "name": "organization_service_fee_exemptions_reason_check",
+          "value": "length(trim(\"organization_service_fee_exemptions\".\"reason\")) > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.organization_user_limits": {
+      "name": "organization_user_limits",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "limit_type": {
+          "name": "limit_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "microdollar_limit": {
+          "name": "microdollar_limit",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_organization_user_limits_org_id": {
+          "name": "IDX_organization_user_limits_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_user_limits_user_id": {
+          "name": "IDX_organization_user_limits_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_user_limits_org_user": {
+          "name": "UQ_organization_user_limits_org_user",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "kilo_user_id",
+            "limit_type"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organization_user_usage": {
+      "name": "organization_user_usage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "usage_date": {
+          "name": "usage_date",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "limit_type": {
+          "name": "limit_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "microdollar_usage": {
+          "name": "microdollar_usage",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_organization_user_daily_usage_org_id": {
+          "name": "IDX_organization_user_daily_usage_org_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organization_user_daily_usage_user_id": {
+          "name": "IDX_organization_user_daily_usage_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_user_daily_usage_org_user_date": {
+          "name": "UQ_organization_user_daily_usage_org_user_date",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "kilo_user_id",
+            "limit_type",
+            "usage_date"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.organizations": {
+      "name": "organizations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "microdollars_used": {
+          "name": "microdollars_used",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0'"
+        },
+        "microdollars_balance": {
+          "name": "microdollars_balance",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0'"
+        },
+        "total_microdollars_acquired": {
+          "name": "total_microdollars_acquired",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'0'"
+        },
+        "next_credit_expiration_at": {
+          "name": "next_credit_expiration_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_customer_id": {
+          "name": "stripe_customer_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_top_up_enabled": {
+          "name": "auto_top_up_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "settings": {
+          "name": "settings",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "seat_count": {
+          "name": "seat_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "require_seats": {
+          "name": "require_seats",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_by_kilo_user_id": {
+          "name": "created_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sso_domain": {
+          "name": "sso_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "parent_organization_id": {
+          "name": "parent_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "plan": {
+          "name": "plan",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'teams'"
+        },
+        "free_trial_end_at": {
+          "name": "free_trial_end_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "company_domain": {
+          "name": "company_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_organizations_sso_domain": {
+          "name": "IDX_organizations_sso_domain",
+          "columns": [
+            {
+              "expression": "sso_domain",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_organizations_parent_organization_id": {
+          "name": "IDX_organizations_parent_organization_id",
+          "columns": [
+            {
+              "expression": "parent_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "organizations_parent_organization_id_organizations_id_fk": {
+          "name": "organizations_parent_organization_id_organizations_id_fk",
+          "tableFrom": "organizations",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "parent_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "organizations_name_not_empty_check": {
+          "name": "organizations_name_not_empty_check",
+          "value": "length(trim(\"organizations\".\"name\")) > 0"
+        },
+        "organizations_not_parented_by_self_check": {
+          "name": "organizations_not_parented_by_self_check",
+          "value": "\"organizations\".\"parent_organization_id\" IS NULL OR \"organizations\".\"parent_organization_id\" <> \"organizations\".\"id\""
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.organization_modes": {
+      "name": "organization_modes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slug": {
+          "name": "slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_by": {
+          "name": "created_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "config": {
+          "name": "config",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {
+        "IDX_organization_modes_organization_id": {
+          "name": "IDX_organization_modes_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_organization_modes_org_id_slug": {
+          "name": "UQ_organization_modes_org_id_slug",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "slug"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.payment_methods": {
+      "name": "payment_methods",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "stripe_fingerprint": {
+          "name": "stripe_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_id": {
+          "name": "stripe_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last4": {
+          "name": "last4",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "brand": {
+          "name": "brand",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_line1": {
+          "name": "address_line1",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_line2": {
+          "name": "address_line2",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_city": {
+          "name": "address_city",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_state": {
+          "name": "address_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_zip": {
+          "name": "address_zip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_country": {
+          "name": "address_country",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "name": {
+          "name": "name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "three_d_secure_supported": {
+          "name": "three_d_secure_supported",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "funding": {
+          "name": "funding",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "regulated_status": {
+          "name": "regulated_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "address_line1_check_status": {
+          "name": "address_line1_check_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "postal_code_check_status": {
+          "name": "postal_code_check_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_forwarded_for": {
+          "name": "http_x_forwarded_for",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_city": {
+          "name": "http_x_vercel_ip_city",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_country": {
+          "name": "http_x_vercel_ip_country",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_latitude": {
+          "name": "http_x_vercel_ip_latitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_longitude": {
+          "name": "http_x_vercel_ip_longitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ja4_digest": {
+          "name": "http_x_vercel_ja4_digest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "eligible_for_free_credits": {
+          "name": "eligible_for_free_credits",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_data": {
+          "name": "stripe_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "type": {
+          "name": "type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_d7d7fb15569674aaadcfbc0428": {
+          "name": "IDX_d7d7fb15569674aaadcfbc0428",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_e1feb919d0ab8a36381d5d5138": {
+          "name": "IDX_e1feb919d0ab8a36381d5d5138",
+          "columns": [
+            {
+              "expression": "stripe_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_payment_methods_organization_id": {
+          "name": "IDX_payment_methods_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_29df1b0403df5792c96bbbfdbe6": {
+          "name": "UQ_29df1b0403df5792c96bbbfdbe6",
+          "nullsNotDistinct": false,
+          "columns": [
+            "user_id",
+            "stripe_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.pending_impact_sale_reversals": {
+      "name": "pending_impact_sale_reversals",
+      "schema": "",
+      "columns": {
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "dispute_id": {
+          "name": "dispute_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount": {
+          "name": "amount",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "currency": {
+          "name": "currency",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_date": {
+          "name": "event_date",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_attempt_at": {
+          "name": "last_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "pending_impact_sale_reversals_attempt_count_non_negative_check": {
+          "name": "pending_impact_sale_reversals_attempt_count_non_negative_check",
+          "value": "\"pending_impact_sale_reversals\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.platform_access_token_credentials": {
+      "name": "platform_access_token_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "integration_type": {
+          "name": "integration_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "token_encrypted": {
+          "name": "token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_credential_type": {
+          "name": "provider_credential_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_resource_id": {
+          "name": "provider_resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_base_url": {
+          "name": "provider_base_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "authorized_by_user_id": {
+          "name": "authorized_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_metadata": {
+          "name": "provider_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_scopes": {
+          "name": "provider_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_verified_at": {
+          "name": "provider_verified_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_version": {
+          "name": "credential_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "last_validated_at": {
+          "name": "last_validated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_platform_access_token_credentials_integration_level": {
+          "name": "UQ_platform_access_token_credentials_integration_level",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_access_token_credentials\".\"provider_resource_id\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_access_token_credentials_resource": {
+          "name": "UQ_platform_access_token_credentials_resource",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_credential_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "provider_resource_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_access_token_credentials\".\"provider_resource_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_access_token_credentials_authorized_by_user_id": {
+          "name": "IDX_platform_access_token_credentials_authorized_by_user_id",
+          "columns": [
+            {
+              "expression": "authorized_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "platform_access_token_credentials_authorized_by_user_id_kilocode_users_id_fk": {
+          "name": "platform_access_token_credentials_authorized_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "platform_access_token_credentials",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "authorized_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "FK_platform_access_token_credentials_parent": {
+          "name": "FK_platform_access_token_credentials_parent",
+          "tableFrom": "platform_access_token_credentials",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "platform_access_token_credentials_credential_version_check": {
+          "name": "platform_access_token_credentials_credential_version_check",
+          "value": "\"platform_access_token_credentials\".\"credential_version\" > 0"
+        },
+        "platform_access_token_credentials_resource_id_check": {
+          "name": "platform_access_token_credentials_resource_id_check",
+          "value": "\"platform_access_token_credentials\".\"provider_resource_id\" IS NULL OR \"platform_access_token_credentials\".\"provider_resource_id\" <> ''"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.platform_integrations": {
+      "name": "platform_integrations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_by_user_id": {
+          "name": "created_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "integration_type": {
+          "name": "integration_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform_installation_id": {
+          "name": "platform_installation_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_account_id": {
+          "name": "platform_account_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_account_login": {
+          "name": "platform_account_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "permissions": {
+          "name": "permissions",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "scopes": {
+          "name": "scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repository_access": {
+          "name": "repository_access",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repositories": {
+          "name": "repositories",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repositories_synced_at": {
+          "name": "repositories_synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_invalid_at": {
+          "name": "auth_invalid_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auth_invalid_reason": {
+          "name": "auth_invalid_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_requester_user_id": {
+          "name": "kilo_requester_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_requester_account_id": {
+          "name": "platform_requester_account_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "integration_status": {
+          "name": "integration_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "suspended_at": {
+          "name": "suspended_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "suspended_by": {
+          "name": "suspended_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "github_app_type": {
+          "name": "github_app_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'standard'"
+        },
+        "installed_at": {
+          "name": "installed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_platform_integrations_owned_by_org_platform_inst": {
+          "name": "UQ_platform_integrations_owned_by_org_platform_inst",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_owned_by_user_platform_inst": {
+          "name": "UQ_platform_integrations_owned_by_user_platform_inst",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_slack_platform_inst": {
+          "name": "UQ_platform_integrations_slack_platform_inst",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"platform\" = 'slack' AND \"platform_integrations\".\"platform_installation_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_linear_platform_inst": {
+          "name": "UQ_platform_integrations_linear_platform_inst",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"platform\" = 'linear' AND \"platform_integrations\".\"platform_installation_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_github_platform_inst": {
+          "name": "UQ_platform_integrations_github_platform_inst",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "github_app_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"platform\" = 'github' AND \"platform_integrations\".\"platform_installation_id\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_user_bitbucket": {
+          "name": "UQ_platform_integrations_user_bitbucket",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"platform\" = 'bitbucket' AND \"platform_integrations\".\"owned_by_user_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_platform_integrations_org_bitbucket": {
+          "name": "UQ_platform_integrations_org_bitbucket",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"platform_integrations\".\"platform\" = 'bitbucket' AND \"platform_integrations\".\"owned_by_organization_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_owned_by_org_id": {
+          "name": "IDX_platform_integrations_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_owned_by_user_id": {
+          "name": "IDX_platform_integrations_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_platform_inst_id": {
+          "name": "IDX_platform_integrations_platform_inst_id",
+          "columns": [
+            {
+              "expression": "platform_installation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_platform": {
+          "name": "IDX_platform_integrations_platform",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_owned_by_org_platform": {
+          "name": "IDX_platform_integrations_owned_by_org_platform",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_owned_by_user_platform": {
+          "name": "IDX_platform_integrations_owned_by_user_platform",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_integration_status": {
+          "name": "IDX_platform_integrations_integration_status",
+          "columns": [
+            {
+              "expression": "integration_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_kilo_requester": {
+          "name": "IDX_platform_integrations_kilo_requester",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kilo_requester_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "integration_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_integrations_platform_requester": {
+          "name": "IDX_platform_integrations_platform_requester",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "platform_requester_account_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "integration_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "platform_integrations_owned_by_organization_id_organizations_id_fk": {
+          "name": "platform_integrations_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "platform_integrations",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "platform_integrations_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "platform_integrations_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "platform_integrations",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "platform_integrations_owner_check": {
+          "name": "platform_integrations_owner_check",
+          "value": "(\n        (\"platform_integrations\".\"owned_by_user_id\" IS NOT NULL AND \"platform_integrations\".\"owned_by_organization_id\" IS NULL) OR\n        (\"platform_integrations\".\"owned_by_user_id\" IS NULL AND \"platform_integrations\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.platform_oauth_credentials": {
+      "name": "platform_oauth_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "authorized_by_user_id": {
+          "name": "authorized_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider_subject_id": {
+          "name": "provider_subject_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_subject_login": {
+          "name": "provider_subject_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_base_url": {
+          "name": "provider_base_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_token_encrypted": {
+          "name": "access_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "refresh_token_encrypted": {
+          "name": "refresh_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "refresh_token_expires_at": {
+          "name": "refresh_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "oauth_client_secret_encrypted": {
+          "name": "oauth_client_secret_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_version": {
+          "name": "credential_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_reason": {
+          "name": "revocation_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_platform_oauth_credentials_platform_integration_id": {
+          "name": "UQ_platform_oauth_credentials_platform_integration_id",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_platform_oauth_credentials_authorized_by_user_id": {
+          "name": "IDX_platform_oauth_credentials_authorized_by_user_id",
+          "columns": [
+            {
+              "expression": "authorized_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "platform_oauth_credentials_platform_integration_id_platform_integrations_id_fk": {
+          "name": "platform_oauth_credentials_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "platform_oauth_credentials",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "platform_oauth_credentials_authorized_by_user_id_kilocode_users_id_fk": {
+          "name": "platform_oauth_credentials_authorized_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "platform_oauth_credentials",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "authorized_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "platform_oauth_credentials_credential_version_check": {
+          "name": "platform_oauth_credentials_credential_version_check",
+          "value": "\"platform_oauth_credentials\".\"credential_version\" > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.referral_code_usages": {
+      "name": "referral_code_usages",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "referring_kilo_user_id": {
+          "name": "referring_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "redeeming_kilo_user_id": {
+          "name": "redeeming_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "amount_usd": {
+          "name": "amount_usd",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "paid_at": {
+          "name": "paid_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_referral_code_usages_redeeming_kilo_user_id": {
+          "name": "IDX_referral_code_usages_redeeming_kilo_user_id",
+          "columns": [
+            {
+              "expression": "redeeming_kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_referral_code_usages_redeeming_user_id_code": {
+          "name": "UQ_referral_code_usages_redeeming_user_id_code",
+          "nullsNotDistinct": false,
+          "columns": [
+            "redeeming_kilo_user_id",
+            "referring_kilo_user_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.referral_codes": {
+      "name": "referral_codes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code": {
+          "name": "code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "max_redemptions": {
+          "name": "max_redemptions",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 10
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_referral_codes_kilo_user_id": {
+          "name": "UQ_referral_codes_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_referral_codes_code": {
+          "name": "IDX_referral_codes_code",
+          "columns": [
+            {
+              "expression": "code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.security_advisor_check_catalog": {
+      "name": "security_advisor_check_catalog",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "check_id": {
+          "name": "check_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "severity": {
+          "name": "severity",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "explanation": {
+          "name": "explanation",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "risk": {
+          "name": "risk",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "security_advisor_check_catalog_check_id_unique": {
+          "name": "security_advisor_check_catalog_check_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "check_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "security_advisor_check_catalog_severity_check": {
+          "name": "security_advisor_check_catalog_severity_check",
+          "value": "\"security_advisor_check_catalog\".\"severity\" in ('critical', 'warn', 'info')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_advisor_content": {
+      "name": "security_advisor_content",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "key": {
+          "name": "key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "value": {
+          "name": "value",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "''"
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "security_advisor_content_key_unique": {
+          "name": "security_advisor_content_key_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.security_advisor_kiloclaw_coverage": {
+      "name": "security_advisor_kiloclaw_coverage",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "area": {
+          "name": "area",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "summary": {
+          "name": "summary",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "detail": {
+          "name": "detail",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "match_check_ids": {
+          "name": "match_check_ids",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::text[]"
+        },
+        "is_active": {
+          "name": "is_active",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "security_advisor_kiloclaw_coverage_area_unique": {
+          "name": "security_advisor_kiloclaw_coverage_area_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "area"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.security_advisor_scans": {
+      "name": "security_advisor_scans",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_platform": {
+          "name": "source_platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_method": {
+          "name": "source_method",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "plugin_version": {
+          "name": "plugin_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "openclaw_version": {
+          "name": "openclaw_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "public_ip": {
+          "name": "public_ip",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "findings_critical": {
+          "name": "findings_critical",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "findings_warn": {
+          "name": "findings_warn",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "findings_info": {
+          "name": "findings_info",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_security_advisor_scans_user_created_at": {
+          "name": "idx_security_advisor_scans_user_created_at",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_advisor_scans_created_at": {
+          "name": "idx_security_advisor_scans_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_advisor_scans_platform": {
+          "name": "idx_security_advisor_scans_platform",
+          "columns": [
+            {
+              "expression": "source_platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.security_agent_commands": {
+      "name": "security_agent_commands",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "command_type": {
+          "name": "command_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "origin": {
+          "name": "origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "operation_key": {
+          "name": "operation_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'accepted'"
+        },
+        "result_code": {
+          "name": "result_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_metadata": {
+          "name": "result_metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_redacted": {
+          "name": "last_error_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_security_agent_commands_org_created": {
+          "name": "idx_security_agent_commands_org_created",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_agent_commands_user_created": {
+          "name": "idx_security_agent_commands_user_created",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_agent_commands_status_updated": {
+          "name": "idx_security_agent_commands_status_updated",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_agent_commands_finding_created": {
+          "name": "idx_security_agent_commands_finding_created",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": false,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_agent_commands_org_operation_key": {
+          "name": "UQ_security_agent_commands_org_operation_key",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "operation_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_agent_commands\".\"owned_by_organization_id\" IS NOT NULL AND \"security_agent_commands\".\"operation_key\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_agent_commands_user_operation_key": {
+          "name": "UQ_security_agent_commands_user_operation_key",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "operation_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_agent_commands\".\"owned_by_user_id\" IS NOT NULL AND \"security_agent_commands\".\"operation_key\" IS NOT NULL",
+          "concurrently": true,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_agent_commands_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_agent_commands_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_agent_commands",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_agent_commands_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_agent_commands_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_agent_commands",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_agent_commands_finding_id_security_findings_id_fk": {
+          "name": "security_agent_commands_finding_id_security_findings_id_fk",
+          "tableFrom": "security_agent_commands",
+          "tableTo": "security_findings",
+          "columnsFrom": [
+            "finding_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_agent_commands_owner_check": {
+          "name": "security_agent_commands_owner_check",
+          "value": "(\n        (\"security_agent_commands\".\"owned_by_user_id\" IS NOT NULL AND \"security_agent_commands\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_agent_commands\".\"owned_by_user_id\" IS NULL AND \"security_agent_commands\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "security_agent_commands_type_check": {
+          "name": "security_agent_commands_type_check",
+          "value": "\"security_agent_commands\".\"command_type\" IN ('sync', 'dismiss_finding', 'start_analysis', 'apply_auto_remediation')"
+        },
+        "security_agent_commands_origin_check": {
+          "name": "security_agent_commands_origin_check",
+          "value": "\"security_agent_commands\".\"origin\" IN ('manual', 'dashboard_refresh', 'enable_initial_sync', 'settings_include_existing')"
+        },
+        "security_agent_commands_status_check": {
+          "name": "security_agent_commands_status_check",
+          "value": "\"security_agent_commands\".\"status\" IN ('accepted', 'running', 'succeeded', 'failed', 'no_op')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_agent_repository_sync_state": {
+      "name": "security_agent_repository_sync_state",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_attempted_at": {
+          "name": "last_attempted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "last_succeeded_at": {
+          "name": "last_succeeded_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_failure_code": {
+          "name": "last_failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_security_agent_repository_sync_state_org_repo": {
+          "name": "UQ_security_agent_repository_sync_state_org_repo",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_agent_repository_sync_state\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_agent_repository_sync_state_user_repo": {
+          "name": "UQ_security_agent_repository_sync_state_user_repo",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_agent_repository_sync_state\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_agent_repository_sync_state_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_agent_repository_sync_state_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_agent_repository_sync_state",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_agent_repository_sync_state_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_agent_repository_sync_state_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_agent_repository_sync_state",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_agent_repository_sync_state_owner_check": {
+          "name": "security_agent_repository_sync_state_owner_check",
+          "value": "(\n        (\"security_agent_repository_sync_state\".\"owned_by_user_id\" IS NOT NULL AND \"security_agent_repository_sync_state\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_agent_repository_sync_state\".\"owned_by_user_id\" IS NULL AND \"security_agent_repository_sync_state\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_analysis_owner_state": {
+      "name": "security_analysis_owner_state",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_analysis_enabled_at": {
+          "name": "auto_analysis_enabled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "blocked_until": {
+          "name": "blocked_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "block_reason": {
+          "name": "block_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "consecutive_actor_resolution_failures": {
+          "name": "consecutive_actor_resolution_failures",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "last_actor_resolution_failure_at": {
+          "name": "last_actor_resolution_failure_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_security_analysis_owner_state_org_owner": {
+          "name": "UQ_security_analysis_owner_state_org_owner",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_analysis_owner_state\".\"owned_by_organization_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_analysis_owner_state_user_owner": {
+          "name": "UQ_security_analysis_owner_state_user_owner",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_analysis_owner_state\".\"owned_by_user_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_analysis_owner_state_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_analysis_owner_state_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_analysis_owner_state",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_analysis_owner_state_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_analysis_owner_state_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_analysis_owner_state",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_analysis_owner_state_owner_check": {
+          "name": "security_analysis_owner_state_owner_check",
+          "value": "(\n        (\"security_analysis_owner_state\".\"owned_by_user_id\" IS NOT NULL AND \"security_analysis_owner_state\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_analysis_owner_state\".\"owned_by_user_id\" IS NULL AND \"security_analysis_owner_state\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "security_analysis_owner_state_block_reason_check": {
+          "name": "security_analysis_owner_state_block_reason_check",
+          "value": "\"security_analysis_owner_state\".\"block_reason\" IS NULL OR \"security_analysis_owner_state\".\"block_reason\" IN ('INSUFFICIENT_CREDITS', 'ACTOR_RESOLUTION_FAILED', 'OPERATOR_PAUSE')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_analysis_queue": {
+      "name": "security_analysis_queue",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "queue_status": {
+          "name": "queue_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "severity_rank": {
+          "name": "severity_rank",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "admitted_config_revision": {
+          "name": "admitted_config_revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "queued_at": {
+          "name": "queued_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_by_job_id": {
+          "name": "claimed_by_job_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claim_token": {
+          "name": "claim_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "reopen_requeue_count": {
+          "name": "reopen_requeue_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_redacted": {
+          "name": "last_error_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_security_analysis_queue_finding_id": {
+          "name": "UQ_security_analysis_queue_finding_id",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_claim_path_org": {
+          "name": "idx_security_analysis_queue_claim_path_org",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "severity_rank",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_claim_path_user": {
+          "name": "idx_security_analysis_queue_claim_path_user",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "severity_rank",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_in_flight_org": {
+          "name": "idx_security_analysis_queue_in_flight_org",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queue_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" IN ('pending', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_in_flight_user": {
+          "name": "idx_security_analysis_queue_in_flight_user",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queue_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" IN ('pending', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_lag_dashboards": {
+          "name": "idx_security_analysis_queue_lag_dashboards",
+          "columns": [
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_pending_reconciliation": {
+          "name": "idx_security_analysis_queue_pending_reconciliation",
+          "columns": [
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" = 'pending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_running_reconciliation": {
+          "name": "idx_security_analysis_queue_running_reconciliation",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"queue_status\" = 'running'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_analysis_queue_failure_trend": {
+          "name": "idx_security_analysis_queue_failure_trend",
+          "columns": [
+            {
+              "expression": "failure_code",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_analysis_queue\".\"failure_code\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_analysis_queue_finding_id_security_findings_id_fk": {
+          "name": "security_analysis_queue_finding_id_security_findings_id_fk",
+          "tableFrom": "security_analysis_queue",
+          "tableTo": "security_findings",
+          "columnsFrom": [
+            "finding_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_analysis_queue_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_analysis_queue_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_analysis_queue",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_analysis_queue_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_analysis_queue_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_analysis_queue",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_analysis_queue_owner_check": {
+          "name": "security_analysis_queue_owner_check",
+          "value": "(\n        (\"security_analysis_queue\".\"owned_by_user_id\" IS NOT NULL AND \"security_analysis_queue\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_analysis_queue\".\"owned_by_user_id\" IS NULL AND \"security_analysis_queue\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "security_analysis_queue_status_check": {
+          "name": "security_analysis_queue_status_check",
+          "value": "\"security_analysis_queue\".\"queue_status\" IN ('queued', 'pending', 'running', 'failed', 'completed')"
+        },
+        "security_analysis_queue_claim_token_required_check": {
+          "name": "security_analysis_queue_claim_token_required_check",
+          "value": "\"security_analysis_queue\".\"queue_status\" NOT IN ('pending', 'running') OR \"security_analysis_queue\".\"claim_token\" IS NOT NULL"
+        },
+        "security_analysis_queue_attempt_count_non_negative_check": {
+          "name": "security_analysis_queue_attempt_count_non_negative_check",
+          "value": "\"security_analysis_queue\".\"attempt_count\" >= 0"
+        },
+        "security_analysis_queue_reopen_requeue_count_non_negative_check": {
+          "name": "security_analysis_queue_reopen_requeue_count_non_negative_check",
+          "value": "\"security_analysis_queue\".\"reopen_requeue_count\" >= 0"
+        },
+        "security_analysis_queue_severity_rank_check": {
+          "name": "security_analysis_queue_severity_rank_check",
+          "value": "\"security_analysis_queue\".\"severity_rank\" IN (0, 1, 2, 3)"
+        },
+        "security_analysis_queue_failure_code_check": {
+          "name": "security_analysis_queue_failure_code_check",
+          "value": "\"security_analysis_queue\".\"failure_code\" IS NULL OR \"security_analysis_queue\".\"failure_code\" IN (\n        'NETWORK_TIMEOUT',\n        'UPSTREAM_5XX',\n        'TEMP_TOKEN_FAILURE',\n        'START_CALL_AMBIGUOUS',\n        'REQUEUE_TEMPORARY_PRECONDITION',\n        'ACTOR_RESOLUTION_FAILED',\n        'GITHUB_TOKEN_UNAVAILABLE',\n        'INVALID_CONFIG',\n        'MISSING_OWNERSHIP',\n        'PERMISSION_DENIED_PERMANENT',\n        'UNSUPPORTED_SEVERITY',\n        'INSUFFICIENT_CREDITS',\n        'STATE_GUARD_REJECTED',\n        'SKIPPED_ALREADY_IN_PROGRESS',\n        'SKIPPED_NO_LONGER_ELIGIBLE',\n        'REOPEN_LOOP_GUARD',\n        'RUN_LOST'\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_audit_log": {
+      "name": "security_audit_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_id": {
+          "name": "actor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_email": {
+          "name": "actor_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_name": {
+          "name": "actor_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "actor_type": {
+          "name": "actor_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "action": {
+          "name": "action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_type": {
+          "name": "resource_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "resource_id": {
+          "name": "resource_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "before_state": {
+          "name": "before_state",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "after_state": {
+          "name": "after_state",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "occurred_at": {
+          "name": "occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_occurred_at": {
+          "name": "source_occurred_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_key": {
+          "name": "event_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "schema_version": {
+          "name": "schema_version",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finding_snapshot": {
+          "name": "finding_snapshot",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_context": {
+          "name": "source_context",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_security_audit_log_org_created": {
+          "name": "IDX_security_audit_log_org_created",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_user_created": {
+          "name": "IDX_security_audit_log_user_created",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_resource": {
+          "name": "IDX_security_audit_log_resource",
+          "columns": [
+            {
+              "expression": "resource_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "resource_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_actor": {
+          "name": "IDX_security_audit_log_actor",
+          "columns": [
+            {
+              "expression": "actor_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_action": {
+          "name": "IDX_security_audit_log_action",
+          "columns": [
+            {
+              "expression": "action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_audit_log_org_event_key": {
+          "name": "UQ_security_audit_log_org_event_key",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_audit_log\".\"owned_by_organization_id\" IS NOT NULL AND \"security_audit_log\".\"event_key\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_audit_log_user_event_key": {
+          "name": "UQ_security_audit_log_user_event_key",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_audit_log\".\"owned_by_user_id\" IS NOT NULL AND \"security_audit_log\".\"event_key\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_org_occurred": {
+          "name": "IDX_security_audit_log_org_occurred",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "occurred_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_audit_log\".\"owned_by_organization_id\" IS NOT NULL AND \"security_audit_log\".\"occurred_at\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_security_audit_log_user_occurred": {
+          "name": "IDX_security_audit_log_user_occurred",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "occurred_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_audit_log\".\"owned_by_user_id\" IS NOT NULL AND \"security_audit_log\".\"occurred_at\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_audit_log_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_audit_log_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_audit_log",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_audit_log_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_audit_log_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_audit_log",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_audit_log_owner_check": {
+          "name": "security_audit_log_owner_check",
+          "value": "(\"security_audit_log\".\"owned_by_user_id\" IS NOT NULL AND \"security_audit_log\".\"owned_by_organization_id\" IS NULL) OR (\"security_audit_log\".\"owned_by_user_id\" IS NULL AND \"security_audit_log\".\"owned_by_organization_id\" IS NOT NULL)"
+        },
+        "security_audit_log_action_check": {
+          "name": "security_audit_log_action_check",
+          "value": "\"security_audit_log\".\"action\" IN ('security.finding.created', 'security.finding.severity_changed', 'security.finding.status_change', 'security.finding.dismissed', 'security.finding.auto_dismissed', 'security.finding.superseded', 'security.finding.analysis_started', 'security.finding.analysis_completed', 'security.finding.analysis_failed', 'security.remediation.queued', 'security.remediation.started', 'security.remediation.pr_opened', 'security.remediation.failed', 'security.remediation.blocked', 'security.remediation.no_changes_needed', 'security.remediation.cancelled', 'security.remediation.retried', 'security.finding.deleted', 'security.config.enabled', 'security.config.disabled', 'security.config.updated', 'security.sync.triggered', 'security.sync.completed', 'security.audit_log.exported', 'security.audit_report.generated')"
+        },
+        "security_audit_log_actor_type_check": {
+          "name": "security_audit_log_actor_type_check",
+          "value": "\"security_audit_log\".\"actor_type\" IN ('customer_user', 'kilo_admin', 'system')"
+        },
+        "security_audit_log_source_context_check": {
+          "name": "security_audit_log_source_context_check",
+          "value": "\"security_audit_log\".\"source_context\" IN ('security_sync', 'web', 'analysis_worker', 'remediation_callback', 'rollout_baseline')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_finding_notifications": {
+      "name": "security_finding_notifications",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recipient_user_id": {
+          "name": "recipient_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kind": {
+          "name": "kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'staged'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_attempt_at": {
+          "name": "next_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "uq_security_finding_notifications_finding_recipient_kind": {
+          "name": "uq_security_finding_notifications_finding_recipient_kind",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "recipient_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "kind",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_finding_notifications_pending": {
+          "name": "idx_security_finding_notifications_pending",
+          "columns": [
+            {
+              "expression": "next_attempt_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_finding_notifications\".\"status\" = 'pending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_finding_notifications_staged": {
+          "name": "idx_security_finding_notifications_staged",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_finding_notifications\".\"status\" = 'staged'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_finding_notifications_finding_id": {
+          "name": "idx_security_finding_notifications_finding_id",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_finding_notifications_recipient_user_id": {
+          "name": "idx_security_finding_notifications_recipient_user_id",
+          "columns": [
+            {
+              "expression": "recipient_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_finding_notifications_finding_fk": {
+          "name": "security_finding_notifications_finding_fk",
+          "tableFrom": "security_finding_notifications",
+          "tableTo": "security_findings",
+          "columnsFrom": [
+            "finding_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_finding_notifications_recipient_fk": {
+          "name": "security_finding_notifications_recipient_fk",
+          "tableFrom": "security_finding_notifications",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "recipient_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_finding_notifications_kind_check": {
+          "name": "security_finding_notifications_kind_check",
+          "value": "\"security_finding_notifications\".\"kind\" IN ('new_finding', 'sla_warning', 'sla_breach')"
+        },
+        "security_finding_notifications_status_check": {
+          "name": "security_finding_notifications_status_check",
+          "value": "\"security_finding_notifications\".\"status\" IN ('staged', 'pending', 'sending', 'sent', 'failed', 'cancelled')"
+        },
+        "security_finding_notifications_attempt_count_check": {
+          "name": "security_finding_notifications_attempt_count_check",
+          "value": "\"security_finding_notifications\".\"attempt_count\" >= 0"
+        },
+        "security_finding_notifications_claimed_at_check": {
+          "name": "security_finding_notifications_claimed_at_check",
+          "value": "(\n        (\"security_finding_notifications\".\"status\" = 'sending' AND \"security_finding_notifications\".\"claimed_at\" IS NOT NULL) OR\n        (\"security_finding_notifications\".\"status\" <> 'sending' AND \"security_finding_notifications\".\"claimed_at\" IS NULL)\n      )"
+        },
+        "security_finding_notifications_sent_at_check": {
+          "name": "security_finding_notifications_sent_at_check",
+          "value": "(\n        (\"security_finding_notifications\".\"status\" = 'sent' AND \"security_finding_notifications\".\"sent_at\" IS NOT NULL) OR\n        (\"security_finding_notifications\".\"status\" <> 'sent' AND \"security_finding_notifications\".\"sent_at\" IS NULL)\n      )"
+        },
+        "security_finding_notifications_error_message_length_check": {
+          "name": "security_finding_notifications_error_message_length_check",
+          "value": "\"security_finding_notifications\".\"error_message\" IS NULL OR length(\"security_finding_notifications\".\"error_message\") <= 500"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_findings": {
+      "name": "security_findings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "source_id": {
+          "name": "source_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "severity": {
+          "name": "severity",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "ghsa_id": {
+          "name": "ghsa_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cve_id": {
+          "name": "cve_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "package_name": {
+          "name": "package_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "package_ecosystem": {
+          "name": "package_ecosystem",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "vulnerable_version_range": {
+          "name": "vulnerable_version_range",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "patched_version": {
+          "name": "patched_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manifest_path": {
+          "name": "manifest_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "title": {
+          "name": "title",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "description": {
+          "name": "description",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'open'"
+        },
+        "ignored_reason": {
+          "name": "ignored_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ignored_by": {
+          "name": "ignored_by",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "fixed_at": {
+          "name": "fixed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "sla_due_at": {
+          "name": "sla_due_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dependabot_html_url": {
+          "name": "dependabot_html_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cwe_ids": {
+          "name": "cwe_ids",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cvss_score": {
+          "name": "cvss_score",
+          "type": "numeric(3, 1)",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dependency_scope": {
+          "name": "dependency_scope",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cli_session_id": {
+          "name": "cli_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis_status": {
+          "name": "analysis_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis_started_at": {
+          "name": "analysis_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis_completed_at": {
+          "name": "analysis_completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis_error": {
+          "name": "analysis_error",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis": {
+          "name": "analysis",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "raw_data": {
+          "name": "raw_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "first_detected_at": {
+          "name": "first_detected_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_synced_at": {
+          "name": "last_synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "uq_security_findings_user_source": {
+          "name": "uq_security_findings_user_source",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "source",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "source_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_findings\".\"owned_by_user_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "uq_security_findings_org_source": {
+          "name": "uq_security_findings_org_source",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "source",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "source_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_findings\".\"owned_by_organization_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_org_id": {
+          "name": "idx_security_findings_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_user_id": {
+          "name": "idx_security_findings_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_repo": {
+          "name": "idx_security_findings_repo",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_severity": {
+          "name": "idx_security_findings_severity",
+          "columns": [
+            {
+              "expression": "severity",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_status": {
+          "name": "idx_security_findings_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_package": {
+          "name": "idx_security_findings_package",
+          "columns": [
+            {
+              "expression": "package_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_sla_due_at": {
+          "name": "idx_security_findings_sla_due_at",
+          "columns": [
+            {
+              "expression": "sla_due_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_session_id": {
+          "name": "idx_security_findings_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_cli_session_id": {
+          "name": "idx_security_findings_cli_session_id",
+          "columns": [
+            {
+              "expression": "cli_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_analysis_status": {
+          "name": "idx_security_findings_analysis_status",
+          "columns": [
+            {
+              "expression": "analysis_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_org_analysis_in_flight": {
+          "name": "idx_security_findings_org_analysis_in_flight",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "analysis_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_findings\".\"analysis_status\" IN ('pending', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_findings_user_analysis_in_flight": {
+          "name": "idx_security_findings_user_analysis_in_flight",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "analysis_status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_findings\".\"analysis_status\" IN ('pending', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_findings_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_findings_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_findings",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_findings_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_findings_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_findings",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_findings_platform_integration_id_platform_integrations_id_fk": {
+          "name": "security_findings_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "security_findings",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_findings_owner_check": {
+          "name": "security_findings_owner_check",
+          "value": "(\n        (\"security_findings\".\"owned_by_user_id\" IS NOT NULL AND \"security_findings\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_findings\".\"owned_by_user_id\" IS NULL AND \"security_findings\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_remediation_attempts": {
+      "name": "security_remediation_attempts",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "remediation_id": {
+          "name": "remediation_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "origin": {
+          "name": "origin",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "attempt_number": {
+          "name": "attempt_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "retry_of_attempt_id": {
+          "name": "retry_of_attempt_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "requested_by_user_id": {
+          "name": "requested_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "analysis_fingerprint": {
+          "name": "analysis_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "analysis_completed_at": {
+          "name": "analysis_completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "remediation_model_slug": {
+          "name": "remediation_model_slug",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "branch_name": {
+          "name": "branch_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_session_id": {
+          "name": "kilo_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "execution_id": {
+          "name": "execution_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "priority": {
+          "name": "priority",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 50
+        },
+        "claim_token": {
+          "name": "claim_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_by_job_id": {
+          "name": "claimed_by_job_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "launch_attempt_count": {
+          "name": "launch_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "callback_attempt_token_hash": {
+          "name": "callback_attempt_token_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "blocked_reason": {
+          "name": "blocked_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_redacted": {
+          "name": "last_error_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "structured_result": {
+          "name": "structured_result",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "final_assistant_message": {
+          "name": "final_assistant_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "validation_evidence": {
+          "name": "validation_evidence",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "risk_notes": {
+          "name": "risk_notes",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "draft_reason": {
+          "name": "draft_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_draft": {
+          "name": "pr_draft",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_head_branch": {
+          "name": "pr_head_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_base_branch": {
+          "name": "pr_base_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancellation_requested_at": {
+          "name": "cancellation_requested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancellation_requested_by_user_id": {
+          "name": "cancellation_requested_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "queued_at": {
+          "name": "queued_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "launched_at": {
+          "name": "launched_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_security_remediation_attempts_number": {
+          "name": "UQ_security_remediation_attempts_number",
+          "columns": [
+            {
+              "expression": "remediation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "attempt_number",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_remediation_attempts_active_finding": {
+          "name": "UQ_security_remediation_attempts_active_finding",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('queued', 'launching', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_remediation_attempts_active_remediation": {
+          "name": "UQ_security_remediation_attempts_active_remediation",
+          "columns": [
+            {
+              "expression": "remediation_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('queued', 'launching', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_security_remediation_attempts_finding_fingerprint_terminal": {
+          "name": "UQ_security_remediation_attempts_finding_fingerprint_terminal",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "analysis_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('queued', 'launching', 'running', 'pr_opened')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_org_claim": {
+          "name": "idx_security_remediation_attempts_org_claim",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "priority",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_user_claim": {
+          "name": "idx_security_remediation_attempts_user_claim",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "priority",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_repo_claim": {
+          "name": "idx_security_remediation_attempts_repo_claim",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "priority",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "queued_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" = 'queued'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_org_inflight": {
+          "name": "idx_security_remediation_attempts_org_inflight",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('launching', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_user_inflight": {
+          "name": "idx_security_remediation_attempts_user_inflight",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('launching', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_repo_inflight": {
+          "name": "idx_security_remediation_attempts_repo_inflight",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "claimed_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"security_remediation_attempts\".\"status\" IN ('launching', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_cloud_agent_session": {
+          "name": "idx_security_remediation_attempts_cloud_agent_session",
+          "columns": [
+            {
+              "expression": "cloud_agent_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediation_attempts_finding_fingerprint": {
+          "name": "idx_security_remediation_attempts_finding_fingerprint",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "analysis_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_remediation_attempts_remediation_id_security_remediations_id_fk": {
+          "name": "security_remediation_attempts_remediation_id_security_remediations_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "security_remediations",
+          "columnsFrom": [
+            "remediation_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediation_attempts_finding_id_security_findings_id_fk": {
+          "name": "security_remediation_attempts_finding_id_security_findings_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "security_findings",
+          "columnsFrom": [
+            "finding_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediation_attempts_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_remediation_attempts_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediation_attempts_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_remediation_attempts_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediation_attempts_requested_by_user_id_kilocode_users_id_fk": {
+          "name": "security_remediation_attempts_requested_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "requested_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "security_remediation_attempts_cancellation_requested_by_user_id_kilocode_users_id_fk": {
+          "name": "security_remediation_attempts_cancellation_requested_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_remediation_attempts",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "cancellation_requested_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_remediation_attempts_owner_check": {
+          "name": "security_remediation_attempts_owner_check",
+          "value": "(\n        (\"security_remediation_attempts\".\"owned_by_user_id\" IS NOT NULL AND \"security_remediation_attempts\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_remediation_attempts\".\"owned_by_user_id\" IS NULL AND \"security_remediation_attempts\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "security_remediation_attempts_status_check": {
+          "name": "security_remediation_attempts_status_check",
+          "value": "\"security_remediation_attempts\".\"status\" IN ('queued', 'launching', 'running', 'pr_opened', 'failed', 'blocked', 'no_changes_needed', 'cancelled')"
+        },
+        "security_remediation_attempts_origin_check": {
+          "name": "security_remediation_attempts_origin_check",
+          "value": "\"security_remediation_attempts\".\"origin\" IN ('auto_policy', 'bulk_existing', 'manual')"
+        },
+        "security_remediation_attempts_attempt_number_check": {
+          "name": "security_remediation_attempts_attempt_number_check",
+          "value": "\"security_remediation_attempts\".\"attempt_number\" >= 1"
+        },
+        "security_remediation_attempts_launch_attempt_count_check": {
+          "name": "security_remediation_attempts_launch_attempt_count_check",
+          "value": "\"security_remediation_attempts\".\"launch_attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.security_remediations": {
+      "name": "security_remediations",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finding_id": {
+          "name": "finding_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "repo_full_name": {
+          "name": "repo_full_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "latest_attempt_id": {
+          "name": "latest_attempt_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "latest_analysis_fingerprint": {
+          "name": "latest_analysis_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "latest_analysis_completed_at": {
+          "name": "latest_analysis_completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_url": {
+          "name": "pr_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_number": {
+          "name": "pr_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_draft": {
+          "name": "pr_draft",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_head_branch": {
+          "name": "pr_head_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "pr_base_branch": {
+          "name": "pr_base_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "blocked_reason": {
+          "name": "blocked_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "outcome_summary": {
+          "name": "outcome_summary",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_security_remediations_finding_id": {
+          "name": "UQ_security_remediations_finding_id",
+          "columns": [
+            {
+              "expression": "finding_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediations_org_status": {
+          "name": "idx_security_remediations_org_status",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediations_user_status": {
+          "name": "idx_security_remediations_user_status",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediations_repo_status": {
+          "name": "idx_security_remediations_repo_status",
+          "columns": [
+            {
+              "expression": "repo_full_name",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_security_remediations_latest_attempt": {
+          "name": "idx_security_remediations_latest_attempt",
+          "columns": [
+            {
+              "expression": "latest_attempt_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "security_remediations_owned_by_organization_id_organizations_id_fk": {
+          "name": "security_remediations_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "security_remediations",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediations_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "security_remediations_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "security_remediations",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "security_remediations_finding_id_security_findings_id_fk": {
+          "name": "security_remediations_finding_id_security_findings_id_fk",
+          "tableFrom": "security_remediations",
+          "tableTo": "security_findings",
+          "columnsFrom": [
+            "finding_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "security_remediations_owner_check": {
+          "name": "security_remediations_owner_check",
+          "value": "(\n        (\"security_remediations\".\"owned_by_user_id\" IS NOT NULL AND \"security_remediations\".\"owned_by_organization_id\" IS NULL) OR\n        (\"security_remediations\".\"owned_by_user_id\" IS NULL AND \"security_remediations\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        },
+        "security_remediations_status_check": {
+          "name": "security_remediations_status_check",
+          "value": "\"security_remediations\".\"status\" IN ('queued', 'running', 'pr_opened', 'failed', 'blocked', 'no_changes_needed', 'cancelled')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.shared_cli_sessions": {
+      "name": "shared_cli_sessions",
+      "schema": "",
+      "columns": {
+        "share_id": {
+          "name": "share_id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "shared_state": {
+          "name": "shared_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'public'"
+        },
+        "api_conversation_history_blob_url": {
+          "name": "api_conversation_history_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "task_metadata_blob_url": {
+          "name": "task_metadata_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "ui_messages_blob_url": {
+          "name": "ui_messages_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "git_state_blob_url": {
+          "name": "git_state_blob_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_shared_cli_sessions_session_id": {
+          "name": "IDX_shared_cli_sessions_session_id",
+          "columns": [
+            {
+              "expression": "session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_shared_cli_sessions_created_at": {
+          "name": "IDX_shared_cli_sessions_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "shared_cli_sessions_session_id_cli_sessions_session_id_fk": {
+          "name": "shared_cli_sessions_session_id_cli_sessions_session_id_fk",
+          "tableFrom": "shared_cli_sessions",
+          "tableTo": "cli_sessions",
+          "columnsFrom": [
+            "session_id"
+          ],
+          "columnsTo": [
+            "session_id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "shared_cli_sessions_kilo_user_id_kilocode_users_id_fk": {
+          "name": "shared_cli_sessions_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "shared_cli_sessions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "shared_cli_sessions_shared_state_check": {
+          "name": "shared_cli_sessions_shared_state_check",
+          "value": "\"shared_cli_sessions\".\"shared_state\" IN ('public', 'organization')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.slack_bot_requests": {
+      "name": "slack_bot_requests",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "slack_team_id": {
+          "name": "slack_team_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slack_team_name": {
+          "name": "slack_team_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "slack_channel_id": {
+          "name": "slack_channel_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slack_user_id": {
+          "name": "slack_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slack_thread_ts": {
+          "name": "slack_thread_ts",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_message": {
+          "name": "user_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "user_message_truncated": {
+          "name": "user_message_truncated",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "error_message": {
+          "name": "error_message",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "response_time_ms": {
+          "name": "response_time_ms",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model_used": {
+          "name": "model_used",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "tool_calls_made": {
+          "name": "tool_calls_made",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_agent_session_id": {
+          "name": "cloud_agent_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "idx_slack_bot_requests_created_at": {
+          "name": "idx_slack_bot_requests_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_slack_team_id": {
+          "name": "idx_slack_bot_requests_slack_team_id",
+          "columns": [
+            {
+              "expression": "slack_team_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_owned_by_org_id": {
+          "name": "idx_slack_bot_requests_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_owned_by_user_id": {
+          "name": "idx_slack_bot_requests_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_status": {
+          "name": "idx_slack_bot_requests_status",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_event_type": {
+          "name": "idx_slack_bot_requests_event_type",
+          "columns": [
+            {
+              "expression": "event_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_slack_bot_requests_team_created": {
+          "name": "idx_slack_bot_requests_team_created",
+          "columns": [
+            {
+              "expression": "slack_team_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "slack_bot_requests_owned_by_organization_id_organizations_id_fk": {
+          "name": "slack_bot_requests_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "slack_bot_requests",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "slack_bot_requests_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "slack_bot_requests_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "slack_bot_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "slack_bot_requests_platform_integration_id_platform_integrations_id_fk": {
+          "name": "slack_bot_requests_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "slack_bot_requests",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "slack_bot_requests_owner_check": {
+          "name": "slack_bot_requests_owner_check",
+          "value": "(\n        (\"slack_bot_requests\".\"owned_by_user_id\" IS NOT NULL AND \"slack_bot_requests\".\"owned_by_organization_id\" IS NULL) OR\n        (\"slack_bot_requests\".\"owned_by_user_id\" IS NULL AND \"slack_bot_requests\".\"owned_by_organization_id\" IS NOT NULL) OR\n        (\"slack_bot_requests\".\"owned_by_user_id\" IS NULL AND \"slack_bot_requests\".\"owned_by_organization_id\" IS NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.slack_oauth_credentials": {
+      "name": "slack_oauth_credentials",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "platform_integration_id": {
+          "name": "platform_integration_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slack_team_id": {
+          "name": "slack_team_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "slack_enterprise_id": {
+          "name": "slack_enterprise_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_enterprise_install": {
+          "name": "is_enterprise_install",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "bot_user_id": {
+          "name": "bot_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "access_token_encrypted": {
+          "name": "access_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "refresh_token_encrypted": {
+          "name": "refresh_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "granted_scopes": {
+          "name": "granted_scopes",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "credential_version": {
+          "name": "credential_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "refresh_claimed_at": {
+          "name": "refresh_claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "refresh_attempt_count": {
+          "name": "refresh_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_refresh_attempt_at": {
+          "name": "next_refresh_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_refreshed_at": {
+          "name": "last_refreshed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_reason": {
+          "name": "revocation_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_slack_oauth_credentials_platform_integration_id": {
+          "name": "UQ_slack_oauth_credentials_platform_integration_id",
+          "columns": [
+            {
+              "expression": "platform_integration_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_slack_oauth_credentials_slack_team_id": {
+          "name": "IDX_slack_oauth_credentials_slack_team_id",
+          "columns": [
+            {
+              "expression": "slack_team_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_slack_oauth_credentials_refresh_due": {
+          "name": "IDX_slack_oauth_credentials_refresh_due",
+          "columns": [
+            {
+              "expression": "access_token_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"slack_oauth_credentials\".\"revoked_at\" is null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "slack_oauth_credentials_platform_integration_id_platform_integrations_id_fk": {
+          "name": "slack_oauth_credentials_platform_integration_id_platform_integrations_id_fk",
+          "tableFrom": "slack_oauth_credentials",
+          "tableTo": "platform_integrations",
+          "columnsFrom": [
+            "platform_integration_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "slack_oauth_credentials_credential_version_check": {
+          "name": "slack_oauth_credentials_credential_version_check",
+          "value": "\"slack_oauth_credentials\".\"credential_version\" > 0"
+        },
+        "slack_oauth_credentials_refresh_attempt_count_check": {
+          "name": "slack_oauth_credentials_refresh_attempt_count_check",
+          "value": "\"slack_oauth_credentials\".\"refresh_attempt_count\" >= 0"
+        },
+        "slack_oauth_credentials_slack_team_id_check": {
+          "name": "slack_oauth_credentials_slack_team_id_check",
+          "value": "\"slack_oauth_credentials\".\"slack_team_id\" <> ''"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.source_embeddings": {
+      "name": "source_embeddings",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "embedding": {
+          "name": "embedding",
+          "type": "vector(1536)",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "file_path": {
+          "name": "file_path",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "file_hash": {
+          "name": "file_hash",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "start_line": {
+          "name": "start_line",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "end_line": {
+          "name": "end_line",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "git_branch": {
+          "name": "git_branch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'main'"
+        },
+        "is_base_branch": {
+          "name": "is_base_branch",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_source_embeddings_organization_id": {
+          "name": "IDX_source_embeddings_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_kilo_user_id": {
+          "name": "IDX_source_embeddings_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_project_id": {
+          "name": "IDX_source_embeddings_project_id",
+          "columns": [
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_created_at": {
+          "name": "IDX_source_embeddings_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_updated_at": {
+          "name": "IDX_source_embeddings_updated_at",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_file_path_lower": {
+          "name": "IDX_source_embeddings_file_path_lower",
+          "columns": [
+            {
+              "expression": "LOWER(\"file_path\")",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_git_branch": {
+          "name": "IDX_source_embeddings_git_branch",
+          "columns": [
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_source_embeddings_org_project_branch": {
+          "name": "IDX_source_embeddings_org_project_branch",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "project_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "git_branch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "source_embeddings_organization_id_organizations_id_fk": {
+          "name": "source_embeddings_organization_id_organizations_id_fk",
+          "tableFrom": "source_embeddings",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "source_embeddings_kilo_user_id_kilocode_users_id_fk": {
+          "name": "source_embeddings_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "source_embeddings",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_source_embeddings_org_project_branch_file_lines": {
+          "name": "UQ_source_embeddings_org_project_branch_file_lines",
+          "nullsNotDistinct": false,
+          "columns": [
+            "organization_id",
+            "project_id",
+            "git_branch",
+            "file_path",
+            "start_line",
+            "end_line"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.stripe_dispute_actions": {
+      "name": "stripe_dispute_actions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "case_id": {
+          "name": "case_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action_type": {
+          "name": "action_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_key": {
+          "name": "target_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_attempt_at": {
+          "name": "last_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_code": {
+          "name": "result_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_reference_id": {
+          "name": "result_reference_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_context": {
+          "name": "failure_context",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_stripe_dispute_actions_case_id": {
+          "name": "IDX_stripe_dispute_actions_case_id",
+          "columns": [
+            {
+              "expression": "case_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_actions_claim_path": {
+          "name": "IDX_stripe_dispute_actions_claim_path",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "stripe_dispute_actions_case_id_stripe_dispute_cases_id_fk": {
+          "name": "stripe_dispute_actions_case_id_stripe_dispute_cases_id_fk",
+          "tableFrom": "stripe_dispute_actions",
+          "tableTo": "stripe_dispute_cases",
+          "columnsFrom": [
+            "case_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_stripe_dispute_actions_case_type_target": {
+          "name": "UQ_stripe_dispute_actions_case_type_target",
+          "nullsNotDistinct": false,
+          "columns": [
+            "case_id",
+            "action_type",
+            "target_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "stripe_dispute_actions_action_type_check": {
+          "name": "stripe_dispute_actions_action_type_check",
+          "value": "\"stripe_dispute_actions\".\"action_type\" IN ('stripe_acceptance', 'user_block', 'auto_top_up_disable', 'credit_balance_reset', 'subscription_cancellation', 'access_termination', 'kiloclaw_suspension')"
+        },
+        "stripe_dispute_actions_status_check": {
+          "name": "stripe_dispute_actions_status_check",
+          "value": "\"stripe_dispute_actions\".\"status\" IN ('queued', 'processing', 'completed', 'failed', 'skipped')"
+        },
+        "stripe_dispute_actions_attempt_count_non_negative_check": {
+          "name": "stripe_dispute_actions_attempt_count_non_negative_check",
+          "value": "\"stripe_dispute_actions\".\"attempt_count\" >= 0"
+        },
+        "stripe_dispute_actions_target_key_not_empty_check": {
+          "name": "stripe_dispute_actions_target_key_not_empty_check",
+          "value": "length(\"stripe_dispute_actions\".\"target_key\") > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.stripe_dispute_cases": {
+      "name": "stripe_dispute_cases",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "stripe_dispute_id": {
+          "name": "stripe_dispute_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_event_id": {
+          "name": "stripe_event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_event_created_at": {
+          "name": "stripe_event_created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_payment_intent_id": {
+          "name": "stripe_payment_intent_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_customer_id": {
+          "name": "stripe_customer_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "amount_minor_units": {
+          "name": "amount_minor_units",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "currency": {
+          "name": "currency",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dispute_reason": {
+          "name": "dispute_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_status": {
+          "name": "stripe_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owner_classification": {
+          "name": "owner_classification",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'needs_action'"
+        },
+        "status_reason": {
+          "name": "status_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_context": {
+          "name": "failure_context",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_created_at": {
+          "name": "stripe_created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "evidence_due_by": {
+          "name": "evidence_due_by",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "synced_at": {
+          "name": "synced_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accepted_by_kilo_user_id": {
+          "name": "accepted_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "acceptance_started_at": {
+          "name": "acceptance_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "enforcement_completed_at": {
+          "name": "enforcement_completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_required_at": {
+          "name": "review_required_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "closed_at": {
+          "name": "closed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_stripe_dispute_cases_event_id": {
+          "name": "IDX_stripe_dispute_cases_event_id",
+          "columns": [
+            {
+              "expression": "stripe_event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_charge_id": {
+          "name": "IDX_stripe_dispute_cases_charge_id",
+          "columns": [
+            {
+              "expression": "stripe_charge_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_payment_intent_id": {
+          "name": "IDX_stripe_dispute_cases_payment_intent_id",
+          "columns": [
+            {
+              "expression": "stripe_payment_intent_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_customer_id": {
+          "name": "IDX_stripe_dispute_cases_customer_id",
+          "columns": [
+            {
+              "expression": "stripe_customer_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_kilo_user_id": {
+          "name": "IDX_stripe_dispute_cases_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_organization_id": {
+          "name": "IDX_stripe_dispute_cases_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_dispute_cases_status_due_by": {
+          "name": "IDX_stripe_dispute_cases_status_due_by",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "evidence_due_by",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "stripe_created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "stripe_dispute_cases_kilo_user_id_kilocode_users_id_fk": {
+          "name": "stripe_dispute_cases_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "stripe_dispute_cases",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "stripe_dispute_cases_organization_id_organizations_id_fk": {
+          "name": "stripe_dispute_cases_organization_id_organizations_id_fk",
+          "tableFrom": "stripe_dispute_cases",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "stripe_dispute_cases_accepted_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "stripe_dispute_cases_accepted_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "stripe_dispute_cases",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "accepted_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_stripe_dispute_cases_dispute_id": {
+          "name": "UQ_stripe_dispute_cases_dispute_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "stripe_dispute_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "stripe_dispute_cases_owner_classification_check": {
+          "name": "stripe_dispute_cases_owner_classification_check",
+          "value": "\"stripe_dispute_cases\".\"owner_classification\" IN ('personal', 'organization', 'ambiguous', 'unmatched')"
+        },
+        "stripe_dispute_cases_status_check": {
+          "name": "stripe_dispute_cases_status_check",
+          "value": "\"stripe_dispute_cases\".\"status\" IN ('needs_action', 'processing', 'accepted', 'acceptance_failed', 'enforcement_failed', 'review_required', 'closed')"
+        },
+        "stripe_dispute_cases_amount_minor_units_non_negative_check": {
+          "name": "stripe_dispute_cases_amount_minor_units_non_negative_check",
+          "value": "\"stripe_dispute_cases\".\"amount_minor_units\" IS NULL OR \"stripe_dispute_cases\".\"amount_minor_units\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.stripe_early_fraud_warning_actions": {
+      "name": "stripe_early_fraud_warning_actions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "case_id": {
+          "name": "case_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "action_type": {
+          "name": "action_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "target_key": {
+          "name": "target_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_attempt_at": {
+          "name": "last_attempt_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "terminal_at": {
+          "name": "terminal_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_code": {
+          "name": "result_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "result_reference_id": {
+          "name": "result_reference_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_context": {
+          "name": "failure_context",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_stripe_early_fraud_warning_actions_case_id": {
+          "name": "IDX_stripe_early_fraud_warning_actions_case_id",
+          "columns": [
+            {
+              "expression": "case_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_actions_claim_path": {
+          "name": "IDX_stripe_early_fraud_warning_actions_claim_path",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "stripe_early_fraud_warning_actions_case_id_stripe_early_fraud_warning_cases_id_fk": {
+          "name": "stripe_early_fraud_warning_actions_case_id_stripe_early_fraud_warning_cases_id_fk",
+          "tableFrom": "stripe_early_fraud_warning_actions",
+          "tableTo": "stripe_early_fraud_warning_cases",
+          "columnsFrom": [
+            "case_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_stripe_early_fraud_warning_actions_case_type_target": {
+          "name": "UQ_stripe_early_fraud_warning_actions_case_type_target",
+          "nullsNotDistinct": false,
+          "columns": [
+            "case_id",
+            "action_type",
+            "target_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "stripe_early_fraud_warning_actions_action_type_check": {
+          "name": "stripe_early_fraud_warning_actions_action_type_check",
+          "value": "\"stripe_early_fraud_warning_actions\".\"action_type\" IN ('containment', 'refund', 'payment_value_clawback', 'subscription_termination', 'access_termination', 'kiloclaw_suspension', 'affiliate_payout_reversal', 'referral_reward_reversal', 'user_notice')"
+        },
+        "stripe_early_fraud_warning_actions_status_check": {
+          "name": "stripe_early_fraud_warning_actions_status_check",
+          "value": "\"stripe_early_fraud_warning_actions\".\"status\" IN ('queued', 'processing', 'completed', 'failed', 'review_required', 'dismissed')"
+        },
+        "stripe_early_fraud_warning_actions_attempt_count_non_negative_check": {
+          "name": "stripe_early_fraud_warning_actions_attempt_count_non_negative_check",
+          "value": "\"stripe_early_fraud_warning_actions\".\"attempt_count\" >= 0"
+        },
+        "stripe_early_fraud_warning_actions_target_key_not_empty_check": {
+          "name": "stripe_early_fraud_warning_actions_target_key_not_empty_check",
+          "value": "length(\"stripe_early_fraud_warning_actions\".\"target_key\") > 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.stripe_early_fraud_warning_cases": {
+      "name": "stripe_early_fraud_warning_cases",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "stripe_early_fraud_warning_id": {
+          "name": "stripe_early_fraud_warning_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_event_id": {
+          "name": "stripe_event_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_payment_intent_id": {
+          "name": "stripe_payment_intent_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_customer_id": {
+          "name": "stripe_customer_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "amount_minor_units": {
+          "name": "amount_minor_units",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "currency": {
+          "name": "currency",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owner_classification": {
+          "name": "owner_classification",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_context": {
+          "name": "failure_context",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "warning_created_at": {
+          "name": "warning_created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "contained_at": {
+          "name": "contained_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "processing_started_at": {
+          "name": "processing_started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "review_required_at": {
+          "name": "review_required_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "remediated_at": {
+          "name": "remediated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "dismissed_at": {
+          "name": "dismissed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_stripe_early_fraud_warning_cases_event_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_event_id",
+          "columns": [
+            {
+              "expression": "stripe_event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_charge_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_charge_id",
+          "columns": [
+            {
+              "expression": "stripe_charge_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_payment_intent_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_payment_intent_id",
+          "columns": [
+            {
+              "expression": "stripe_payment_intent_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_customer_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_customer_id",
+          "columns": [
+            {
+              "expression": "stripe_customer_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_kilo_user_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_organization_id": {
+          "name": "IDX_stripe_early_fraud_warning_cases_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_stripe_early_fraud_warning_cases_status_created_at": {
+          "name": "IDX_stripe_early_fraud_warning_cases_status_created_at",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "stripe_early_fraud_warning_cases_kilo_user_id_kilocode_users_id_fk": {
+          "name": "stripe_early_fraud_warning_cases_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "stripe_early_fraud_warning_cases",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "stripe_early_fraud_warning_cases_organization_id_organizations_id_fk": {
+          "name": "stripe_early_fraud_warning_cases_organization_id_organizations_id_fk",
+          "tableFrom": "stripe_early_fraud_warning_cases",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_stripe_early_fraud_warning_cases_warning_id": {
+          "name": "UQ_stripe_early_fraud_warning_cases_warning_id",
+          "nullsNotDistinct": false,
+          "columns": [
+            "stripe_early_fraud_warning_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "stripe_early_fraud_warning_cases_owner_classification_check": {
+          "name": "stripe_early_fraud_warning_cases_owner_classification_check",
+          "value": "\"stripe_early_fraud_warning_cases\".\"owner_classification\" IN ('personal', 'organization', 'ambiguous', 'unmatched')"
+        },
+        "stripe_early_fraud_warning_cases_status_check": {
+          "name": "stripe_early_fraud_warning_cases_status_check",
+          "value": "\"stripe_early_fraud_warning_cases\".\"status\" IN ('queued', 'contained', 'processing', 'completed', 'review_required', 'failed', 'remediated', 'dismissed')"
+        },
+        "stripe_early_fraud_warning_cases_amount_minor_units_non_negative_check": {
+          "name": "stripe_early_fraud_warning_cases_amount_minor_units_non_negative_check",
+          "value": "\"stripe_early_fraud_warning_cases\".\"amount_minor_units\" IS NULL OR \"stripe_early_fraud_warning_cases\".\"amount_minor_units\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.stripe_service_fee_assessments": {
+      "name": "stripe_service_fee_assessments",
+      "schema": "",
+      "columns": {
+        "assessment_key": {
+          "name": "assessment_key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "version": {
+          "name": "version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "flow": {
+          "name": "flow",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "outcome": {
+          "name": "outcome",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "currency": {
+          "name": "currency",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_customer_id": {
+          "name": "stripe_customer_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_checkout_session_id": {
+          "name": "stripe_checkout_session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_invoice_id": {
+          "name": "stripe_invoice_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_payment_intent_id": {
+          "name": "stripe_payment_intent_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_fee_price_id": {
+          "name": "stripe_fee_price_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_checkout_fee_line_item_id": {
+          "name": "stripe_checkout_fee_line_item_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "stripe_invoice_fee_line_item_id": {
+          "name": "stripe_invoice_fee_line_item_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "eligibility_created_at": {
+          "name": "eligibility_created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "eligible_subtotal_minor": {
+          "name": "eligible_subtotal_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "expected_fee_minor": {
+          "name": "expected_fee_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "charged_fee_minor": {
+          "name": "charged_fee_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "gross_paid_minor": {
+          "name": "gross_paid_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "settled_product_minor": {
+          "name": "settled_product_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "refunded_product_minor": {
+          "name": "refunded_product_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "refunded_fee_minor": {
+          "name": "refunded_fee_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "refunded_gross_minor": {
+          "name": "refunded_gross_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "disputed_fee_minor": {
+          "name": "disputed_fee_minor",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "settled_at": {
+          "name": "settled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "exemption_id": {
+          "name": "exemption_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "metadata": {
+          "name": "metadata",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_stripe_service_fee_assessments_stripe_customer_id": {
+          "name": "IDX_stripe_service_fee_assessments_stripe_customer_id",
+          "columns": [
+            {
+              "expression": "stripe_customer_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_checkout_session_id": {
+          "name": "UQ_stripe_service_fee_assessments_checkout_session_id",
+          "columns": [
+            {
+              "expression": "stripe_checkout_session_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_checkout_session_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_stripe_invoice_id": {
+          "name": "UQ_stripe_service_fee_assessments_stripe_invoice_id",
+          "columns": [
+            {
+              "expression": "stripe_invoice_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_invoice_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_stripe_payment_intent_id": {
+          "name": "UQ_stripe_service_fee_assessments_stripe_payment_intent_id",
+          "columns": [
+            {
+              "expression": "stripe_payment_intent_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_payment_intent_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_stripe_charge_id": {
+          "name": "UQ_stripe_service_fee_assessments_stripe_charge_id",
+          "columns": [
+            {
+              "expression": "stripe_charge_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_charge_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_checkout_fee_line_item_id": {
+          "name": "UQ_stripe_service_fee_assessments_checkout_fee_line_item_id",
+          "columns": [
+            {
+              "expression": "stripe_checkout_fee_line_item_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_checkout_fee_line_item_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_stripe_service_fee_assessments_invoice_fee_line_item_id": {
+          "name": "UQ_stripe_service_fee_assessments_invoice_fee_line_item_id",
+          "columns": [
+            {
+              "expression": "stripe_invoice_fee_line_item_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"stripe_service_fee_assessments\".\"stripe_invoice_fee_line_item_id\" is not null",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "FK_stripe_svc_fee_assessments_kilo_user": {
+          "name": "FK_stripe_svc_fee_assessments_kilo_user",
+          "tableFrom": "stripe_service_fee_assessments",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        },
+        "FK_stripe_svc_fee_assessments_organization": {
+          "name": "FK_stripe_svc_fee_assessments_organization",
+          "tableFrom": "stripe_service_fee_assessments",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        },
+        "FK_stripe_svc_fee_assessments_exemption": {
+          "name": "FK_stripe_svc_fee_assessments_exemption",
+          "tableFrom": "stripe_service_fee_assessments",
+          "tableTo": "organization_service_fee_exemptions",
+          "columnsFrom": [
+            "exemption_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "stripe_service_fee_assessments_flow_check": {
+          "name": "stripe_service_fee_assessments_flow_check",
+          "value": "\"stripe_service_fee_assessments\".\"flow\" IN ('personal_top_up', 'organization_top_up', 'personal_auto_top_up_setup', 'organization_auto_top_up_setup', 'personal_auto_top_up', 'organization_auto_top_up', 'personal_kilo_pass', 'organization_kilo_pass')"
+        },
+        "stripe_service_fee_assessments_outcome_check": {
+          "name": "stripe_service_fee_assessments_outcome_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" IN ('pending', 'charged', 'exempt', 'pre_activation', 'zero_rounded', 'unsupported_currency', 'missed')"
+        },
+        "stripe_service_fee_assessments_currency_check": {
+          "name": "stripe_service_fee_assessments_currency_check",
+          "value": "\"stripe_service_fee_assessments\".\"currency\" ~ '^[a-z]{3}$'"
+        },
+        "stripe_service_fee_assessments_owner_check": {
+          "name": "stripe_service_fee_assessments_owner_check",
+          "value": "(\n        \"stripe_service_fee_assessments\".\"flow\" LIKE 'personal_%'\n        AND \"stripe_service_fee_assessments\".\"kilo_user_id\" IS NOT NULL\n        AND \"stripe_service_fee_assessments\".\"organization_id\" IS NULL\n      ) OR (\n        \"stripe_service_fee_assessments\".\"flow\" LIKE 'organization_%'\n        AND \"stripe_service_fee_assessments\".\"organization_id\" IS NOT NULL\n      )"
+        },
+        "stripe_service_fee_assessments_amounts_nonnegative_check": {
+          "name": "stripe_service_fee_assessments_amounts_nonnegative_check",
+          "value": "\"stripe_service_fee_assessments\".\"eligible_subtotal_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"expected_fee_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"charged_fee_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"gross_paid_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"settled_product_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"refunded_product_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"refunded_fee_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"refunded_gross_minor\" >= 0\n        AND \"stripe_service_fee_assessments\".\"disputed_fee_minor\" >= 0"
+        },
+        "stripe_service_fee_assessments_refund_fee_check": {
+          "name": "stripe_service_fee_assessments_refund_fee_check",
+          "value": "\"stripe_service_fee_assessments\".\"refunded_fee_minor\" <= \"stripe_service_fee_assessments\".\"charged_fee_minor\""
+        },
+        "stripe_service_fee_assessments_refund_product_check": {
+          "name": "stripe_service_fee_assessments_refund_product_check",
+          "value": "\"stripe_service_fee_assessments\".\"refunded_product_minor\" <= \"stripe_service_fee_assessments\".\"settled_product_minor\""
+        },
+        "stripe_service_fee_assessments_disputed_fee_check": {
+          "name": "stripe_service_fee_assessments_disputed_fee_check",
+          "value": "\"stripe_service_fee_assessments\".\"disputed_fee_minor\" <= \"stripe_service_fee_assessments\".\"charged_fee_minor\""
+        },
+        "stripe_service_fee_assessments_pending_check": {
+          "name": "stripe_service_fee_assessments_pending_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" <> 'pending'\n        OR (\"stripe_service_fee_assessments\".\"charged_fee_minor\" = 0 AND \"stripe_service_fee_assessments\".\"settled_at\" IS NULL)"
+        },
+        "stripe_service_fee_assessments_charged_check": {
+          "name": "stripe_service_fee_assessments_charged_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" <> 'charged' OR (\n        (\n          \"stripe_service_fee_assessments\".\"stripe_invoice_fee_line_item_id\" IS NOT NULL\n          OR \"stripe_service_fee_assessments\".\"stripe_checkout_fee_line_item_id\" IS NOT NULL\n          OR \"stripe_service_fee_assessments\".\"settled_at\" IS NOT NULL\n        )\n        AND (\"stripe_service_fee_assessments\".\"charged_fee_minor\" <> 0 OR \"stripe_service_fee_assessments\".\"settled_product_minor\" = 0)\n      )"
+        },
+        "stripe_service_fee_assessments_missed_check": {
+          "name": "stripe_service_fee_assessments_missed_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" <> 'missed' OR (\n        \"stripe_service_fee_assessments\".\"expected_fee_minor\" > 0\n        AND \"stripe_service_fee_assessments\".\"charged_fee_minor\" = 0\n        AND \"stripe_service_fee_assessments\".\"failure_code\" IS NOT NULL\n        AND length(trim(\"stripe_service_fee_assessments\".\"failure_code\")) > 0\n      )"
+        },
+        "stripe_service_fee_assessments_zero_rounded_check": {
+          "name": "stripe_service_fee_assessments_zero_rounded_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" <> 'zero_rounded' OR \"stripe_service_fee_assessments\".\"expected_fee_minor\" = 0"
+        },
+        "stripe_service_fee_assessments_uncharged_outcome_check": {
+          "name": "stripe_service_fee_assessments_uncharged_outcome_check",
+          "value": "\"stripe_service_fee_assessments\".\"outcome\" NOT IN ('exempt', 'pre_activation', 'zero_rounded', 'unsupported_currency')\n        OR \"stripe_service_fee_assessments\".\"charged_fee_minor\" = 0"
+        },
+        "stripe_service_fee_assessments_exemption_check": {
+          "name": "stripe_service_fee_assessments_exemption_check",
+          "value": "(\"stripe_service_fee_assessments\".\"outcome\" = 'exempt') = (\"stripe_service_fee_assessments\".\"exemption_id\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.stytch_fingerprints": {
+      "name": "stytch_fingerprints",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "visitor_fingerprint": {
+          "name": "visitor_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "browser_fingerprint": {
+          "name": "browser_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "browser_id": {
+          "name": "browser_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hardware_fingerprint": {
+          "name": "hardware_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "network_fingerprint": {
+          "name": "network_fingerprint",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "visitor_id": {
+          "name": "visitor_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "verdict_action": {
+          "name": "verdict_action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "detected_device_type": {
+          "name": "detected_device_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "is_authentic_device": {
+          "name": "is_authentic_device",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "reasons": {
+          "name": "reasons",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{\"\"}'"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "status_code": {
+          "name": "status_code",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "fingerprint_data": {
+          "name": "fingerprint_data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_free_tier_allowed": {
+          "name": "kilo_free_tier_allowed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "http_x_forwarded_for": {
+          "name": "http_x_forwarded_for",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_city": {
+          "name": "http_x_vercel_ip_city",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_country": {
+          "name": "http_x_vercel_ip_country",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_latitude": {
+          "name": "http_x_vercel_ip_latitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_longitude": {
+          "name": "http_x_vercel_ip_longitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ja4_digest": {
+          "name": "http_x_vercel_ja4_digest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_user_agent": {
+          "name": "http_user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "idx_hardware_fingerprint": {
+          "name": "idx_hardware_fingerprint",
+          "columns": [
+            {
+              "expression": "hardware_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_kilo_user_id": {
+          "name": "idx_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_stytch_fingerprints_reasons_gin": {
+          "name": "idx_stytch_fingerprints_reasons_gin",
+          "columns": [
+            {
+              "expression": "reasons",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "gin",
+          "with": {}
+        },
+        "idx_verdict_action": {
+          "name": "idx_verdict_action",
+          "columns": [
+            {
+              "expression": "verdict_action",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "idx_visitor_fingerprint": {
+          "name": "idx_visitor_fingerprint",
+          "columns": [
+            {
+              "expression": "visitor_fingerprint",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.system_prompt_prefix": {
+      "name": "system_prompt_prefix",
+      "schema": "",
+      "columns": {
+        "system_prompt_prefix_id": {
+          "name": "system_prompt_prefix_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "system_prompt_prefix": {
+          "name": "system_prompt_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_system_prompt_prefix": {
+          "name": "UQ_system_prompt_prefix",
+          "columns": [
+            {
+              "expression": "system_prompt_prefix",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.transactional_email_log": {
+      "name": "transactional_email_log",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_type": {
+          "name": "email_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_transactional_email_log_type_idempotency_key": {
+          "name": "UQ_transactional_email_log_type_idempotency_key",
+          "columns": [
+            {
+              "expression": "email_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "idempotency_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_transactional_email_log_user_id": {
+          "name": "IDX_transactional_email_log_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_transactional_email_log_organization_id": {
+          "name": "IDX_transactional_email_log_organization_id",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "transactional_email_log_user_id_kilocode_users_id_fk": {
+          "name": "transactional_email_log_user_id_kilocode_users_id_fk",
+          "tableFrom": "transactional_email_log",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "transactional_email_log_organization_id_organizations_id_fk": {
+          "name": "transactional_email_log_organization_id_organizations_id_fk",
+          "tableFrom": "transactional_email_log",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "CHK_transactional_email_log_owner": {
+          "name": "CHK_transactional_email_log_owner",
+          "value": "\"transactional_email_log\".\"user_id\" IS NOT NULL OR \"transactional_email_log\".\"organization_id\" IS NOT NULL"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_admin_notes": {
+      "name": "user_admin_notes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "note_content": {
+          "name": "note_content",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "admin_kilo_user_id": {
+          "name": "admin_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_34517df0b385234babc38fe81b": {
+          "name": "IDX_34517df0b385234babc38fe81b",
+          "columns": [
+            {
+              "expression": "admin_kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_ccbde98c4c14046daa5682ec4f": {
+          "name": "IDX_ccbde98c4c14046daa5682ec4f",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_d0270eb24ef6442d65a0b7853c": {
+          "name": "IDX_d0270eb24ef6442d65a0b7853c",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_affiliate_attributions": {
+      "name": "user_affiliate_attributions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "tracking_id": {
+          "name": "tracking_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_affiliate_attributions_user_id": {
+          "name": "IDX_user_affiliate_attributions_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_affiliate_attributions_user_id_kilocode_users_id_fk": {
+          "name": "user_affiliate_attributions_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_affiliate_attributions",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_user_affiliate_attributions_user_provider": {
+          "name": "UQ_user_affiliate_attributions_user_provider",
+          "nullsNotDistinct": false,
+          "columns": [
+            "user_id",
+            "provider"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "user_affiliate_attributions_provider_check": {
+          "name": "user_affiliate_attributions_provider_check",
+          "value": "\"user_affiliate_attributions\".\"provider\" IN ('impact')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_affiliate_events": {
+      "name": "user_affiliate_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "dedupe_key": {
+          "name": "dedupe_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "parent_event_id": {
+          "name": "parent_event_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "delivery_state": {
+          "name": "delivery_state",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "payload_json": {
+          "name": "payload_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "stripe_charge_id": {
+          "name": "stripe_charge_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "impact_action_id": {
+          "name": "impact_action_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "impact_submission_uri": {
+          "name": "impact_submission_uri",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "next_retry_at": {
+          "name": "next_retry_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_at": {
+          "name": "claimed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_affiliate_events_claim_path": {
+          "name": "IDX_user_affiliate_events_claim_path",
+          "columns": [
+            {
+              "expression": "delivery_state",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "coalesce(\"next_retry_at\", '-infinity'::timestamptz)",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_affiliate_events_parent_event_id": {
+          "name": "IDX_user_affiliate_events_parent_event_id",
+          "columns": [
+            {
+              "expression": "parent_event_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_affiliate_events_provider_event_type_charge": {
+          "name": "IDX_user_affiliate_events_provider_event_type_charge",
+          "columns": [
+            {
+              "expression": "provider",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "stripe_charge_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_affiliate_events_user_id_kilocode_users_id_fk": {
+          "name": "user_affiliate_events_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_affiliate_events",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        },
+        "user_affiliate_events_parent_event_id_fk": {
+          "name": "user_affiliate_events_parent_event_id_fk",
+          "tableFrom": "user_affiliate_events",
+          "tableTo": "user_affiliate_events",
+          "columnsFrom": [
+            "parent_event_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_user_affiliate_events_dedupe_key": {
+          "name": "UQ_user_affiliate_events_dedupe_key",
+          "nullsNotDistinct": false,
+          "columns": [
+            "dedupe_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "user_affiliate_events_provider_check": {
+          "name": "user_affiliate_events_provider_check",
+          "value": "\"user_affiliate_events\".\"provider\" IN ('impact')"
+        },
+        "user_affiliate_events_event_type_check": {
+          "name": "user_affiliate_events_event_type_check",
+          "value": "\"user_affiliate_events\".\"event_type\" IN ('signup', 'trial_start', 'trial_end', 'sale', 'sale_reversal')"
+        },
+        "user_affiliate_events_delivery_state_check": {
+          "name": "user_affiliate_events_delivery_state_check",
+          "value": "\"user_affiliate_events\".\"delivery_state\" IN ('queued', 'blocked', 'sending', 'delivered', 'failed')"
+        },
+        "user_affiliate_events_attempt_count_non_negative_check": {
+          "name": "user_affiliate_events_attempt_count_non_negative_check",
+          "value": "\"user_affiliate_events\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_auth_provider": {
+      "name": "user_auth_provider",
+      "schema": "",
+      "columns": {
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "provider_account_id": {
+          "name": "provider_account_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "email": {
+          "name": "email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "avatar_url": {
+          "name": "avatar_url",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "display_name": {
+          "name": "display_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "hosted_domain": {
+          "name": "hosted_domain",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_auth_provider_kilo_user_id": {
+          "name": "IDX_user_auth_provider_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_auth_provider_hosted_domain": {
+          "name": "IDX_user_auth_provider_hosted_domain",
+          "columns": [
+            {
+              "expression": "hosted_domain",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {
+        "user_auth_provider_provider_provider_account_id_pk": {
+          "name": "user_auth_provider_provider_provider_account_id_pk",
+          "columns": [
+            "provider",
+            "provider_account_id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_data_export_object_deletions": {
+      "name": "user_data_export_object_deletions",
+      "schema": "",
+      "columns": {
+        "object_key": {
+          "name": "object_key",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "multipart_upload_id": {
+          "name": "multipart_upload_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "reason": {
+          "name": "reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'account_deletion'"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "available_at": {
+          "name": "available_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_data_export_object_deletions_ready": {
+          "name": "IDX_user_data_export_object_deletions_ready",
+          "columns": [
+            {
+              "expression": "available_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "object_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_data_export_object_deletions_reason_check": {
+          "name": "user_data_export_object_deletions_reason_check",
+          "value": "\"user_data_export_object_deletions\".\"reason\" IN ('account_deletion', 'admin_cancel', 'admin_replace')"
+        },
+        "user_data_export_object_deletions_attempt_count_nonnegative": {
+          "name": "user_data_export_object_deletions_attempt_count_nonnegative",
+          "value": "\"user_data_export_object_deletions\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_data_export_outbox": {
+      "name": "user_data_export_outbox",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "export_id": {
+          "name": "export_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "generation": {
+          "name": "generation",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "operation": {
+          "name": "operation",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'generate'"
+        },
+        "available_at": {
+          "name": "available_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "sent_at": {
+          "name": "sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_data_export_outbox_pending": {
+          "name": "IDX_user_data_export_outbox_pending",
+          "columns": [
+            {
+              "expression": "available_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_export_outbox\".\"sent_at\" IS NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_data_export_outbox_export_id_user_data_exports_id_fk": {
+          "name": "user_data_export_outbox_export_id_user_data_exports_id_fk",
+          "tableFrom": "user_data_export_outbox",
+          "tableTo": "user_data_exports",
+          "columnsFrom": [
+            "export_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_user_data_export_outbox_generation_operation": {
+          "name": "UQ_user_data_export_outbox_generation_operation",
+          "nullsNotDistinct": false,
+          "columns": [
+            "export_id",
+            "generation",
+            "operation"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "user_data_export_outbox_operation_check": {
+          "name": "user_data_export_outbox_operation_check",
+          "value": "\"user_data_export_outbox\".\"operation\" = 'generate'"
+        },
+        "user_data_export_outbox_generation_nonnegative": {
+          "name": "user_data_export_outbox_generation_nonnegative",
+          "value": "\"user_data_export_outbox\".\"generation\" >= 0"
+        },
+        "user_data_export_outbox_attempt_count_nonnegative": {
+          "name": "user_data_export_outbox_attempt_count_nonnegative",
+          "value": "\"user_data_export_outbox\".\"attempt_count\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_data_export_parts": {
+      "name": "user_data_export_parts",
+      "schema": "",
+      "columns": {
+        "export_id": {
+          "name": "export_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "part_number": {
+          "name": "part_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "etag": {
+          "name": "etag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "size_bytes": {
+          "name": "size_bytes",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_data_export_parts_export_id_user_data_exports_id_fk": {
+          "name": "user_data_export_parts_export_id_user_data_exports_id_fk",
+          "tableFrom": "user_data_export_parts",
+          "tableTo": "user_data_exports",
+          "columnsFrom": [
+            "export_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "user_data_export_parts_export_id_part_number_pk": {
+          "name": "user_data_export_parts_export_id_part_number_pk",
+          "columns": [
+            "export_id",
+            "part_number"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_data_export_parts_part_number_positive": {
+          "name": "user_data_export_parts_part_number_positive",
+          "value": "\"user_data_export_parts\".\"part_number\" > 0"
+        },
+        "user_data_export_parts_size_bytes_nonnegative": {
+          "name": "user_data_export_parts_size_bytes_nonnegative",
+          "value": "\"user_data_export_parts\".\"size_bytes\" >= 0"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_data_exports": {
+      "name": "user_data_exports",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_type": {
+          "name": "subject_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'user'"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'queued'"
+        },
+        "schema_version": {
+          "name": "schema_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "snapshot_at": {
+          "name": "snapshot_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "current_source": {
+          "name": "current_source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source_cursor": {
+          "name": "source_cursor",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "multipart_upload_id": {
+          "name": "multipart_upload_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "next_part_number": {
+          "name": "next_part_number",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "dispatch_generation": {
+          "name": "dispatch_generation",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "lease_token": {
+          "name": "lease_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "lease_expires_at": {
+          "name": "lease_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attempt_count": {
+          "name": "attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "row_count": {
+          "name": "row_count",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "size_bytes": {
+          "name": "size_bytes",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "r2_object_key": {
+          "name": "r2_object_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "r2_etag": {
+          "name": "r2_etag",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "failure_code": {
+          "name": "failure_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_error_redacted": {
+          "name": "last_error_redacted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "requested_at": {
+          "name": "requested_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "started_at": {
+          "name": "started_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_status": {
+          "name": "email_status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "email_attempt_count": {
+          "name": "email_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "email_lease_token": {
+          "name": "email_lease_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_lease_expires_at": {
+          "name": "email_lease_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "email_sent_at": {
+          "name": "email_sent_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_data_exports_single_active": {
+          "name": "UQ_user_data_exports_single_active",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_data_exports\".\"status\" IN ('queued', 'processing', 'finalizing') AND \"user_data_exports\".\"subject_type\" = 'user'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_data_exports_single_active_org": {
+          "name": "UQ_user_data_exports_single_active_org",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_data_exports\".\"status\" IN ('queued', 'processing', 'finalizing') AND \"user_data_exports\".\"subject_type\" = 'organization'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_user_created": {
+          "name": "IDX_user_data_exports_user_created",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_org_created": {
+          "name": "IDX_user_data_exports_org_created",
+          "columns": [
+            {
+              "expression": "organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_exports\".\"organization_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_lease_expiry": {
+          "name": "IDX_user_data_exports_lease_expiry",
+          "columns": [
+            {
+              "expression": "lease_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_exports\".\"status\" IN ('processing', 'finalizing')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_ready_expiry": {
+          "name": "IDX_user_data_exports_ready_expiry",
+          "columns": [
+            {
+              "expression": "expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_exports\".\"status\" = 'ready'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_failed_multipart": {
+          "name": "IDX_user_data_exports_failed_multipart",
+          "columns": [
+            {
+              "expression": "updated_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_exports\".\"status\" = 'failed' AND \"user_data_exports\".\"multipart_upload_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_data_exports_email_lease_expiry": {
+          "name": "IDX_user_data_exports_email_lease_expiry",
+          "columns": [
+            {
+              "expression": "email_lease_expires_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_data_exports\".\"email_status\" = 'sending'",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_data_exports_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_data_exports_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_data_exports",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        },
+        "user_data_exports_organization_id_organizations_id_fk": {
+          "name": "user_data_exports_organization_id_organizations_id_fk",
+          "tableFrom": "user_data_exports",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "restrict",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_data_exports_status_check": {
+          "name": "user_data_exports_status_check",
+          "value": "\"user_data_exports\".\"status\" IN ('queued', 'processing', 'finalizing', 'ready', 'failed', 'expired')"
+        },
+        "user_data_exports_subject_type_check": {
+          "name": "user_data_exports_subject_type_check",
+          "value": "\"user_data_exports\".\"subject_type\" IN ('user', 'organization')"
+        },
+        "user_data_exports_subject_shape": {
+          "name": "user_data_exports_subject_shape",
+          "value": "(\"user_data_exports\".\"subject_type\" = 'user' AND \"user_data_exports\".\"organization_id\" IS NULL)\n        OR (\"user_data_exports\".\"subject_type\" = 'organization' AND \"user_data_exports\".\"organization_id\" IS NOT NULL)"
+        },
+        "user_data_exports_schema_version_positive": {
+          "name": "user_data_exports_schema_version_positive",
+          "value": "\"user_data_exports\".\"schema_version\" > 0"
+        },
+        "user_data_exports_next_part_number_positive": {
+          "name": "user_data_exports_next_part_number_positive",
+          "value": "\"user_data_exports\".\"next_part_number\" > 0"
+        },
+        "user_data_exports_dispatch_generation_nonnegative": {
+          "name": "user_data_exports_dispatch_generation_nonnegative",
+          "value": "\"user_data_exports\".\"dispatch_generation\" >= 0"
+        },
+        "user_data_exports_attempt_count_nonnegative": {
+          "name": "user_data_exports_attempt_count_nonnegative",
+          "value": "\"user_data_exports\".\"attempt_count\" >= 0"
+        },
+        "user_data_exports_row_count_nonnegative": {
+          "name": "user_data_exports_row_count_nonnegative",
+          "value": "\"user_data_exports\".\"row_count\" >= 0"
+        },
+        "user_data_exports_size_bytes_nonnegative": {
+          "name": "user_data_exports_size_bytes_nonnegative",
+          "value": "\"user_data_exports\".\"size_bytes\" IS NULL OR \"user_data_exports\".\"size_bytes\" >= 0"
+        },
+        "user_data_exports_lease_shape": {
+          "name": "user_data_exports_lease_shape",
+          "value": "(\"user_data_exports\".\"lease_token\" IS NULL) = (\"user_data_exports\".\"lease_expires_at\" IS NULL)"
+        },
+        "user_data_exports_ready_shape": {
+          "name": "user_data_exports_ready_shape",
+          "value": "\"user_data_exports\".\"status\" <> 'ready' OR (\"user_data_exports\".\"r2_object_key\" IS NOT NULL AND \"user_data_exports\".\"size_bytes\" IS NOT NULL AND \"user_data_exports\".\"completed_at\" IS NOT NULL AND \"user_data_exports\".\"expires_at\" IS NOT NULL)"
+        },
+        "user_data_exports_last_error_redacted_length": {
+          "name": "user_data_exports_last_error_redacted_length",
+          "value": "\"user_data_exports\".\"last_error_redacted\" IS NULL OR length(\"user_data_exports\".\"last_error_redacted\") <= 500"
+        },
+        "user_data_exports_email_attempt_count_nonnegative": {
+          "name": "user_data_exports_email_attempt_count_nonnegative",
+          "value": "\"user_data_exports\".\"email_attempt_count\" >= 0"
+        },
+        "user_data_exports_email_status_check": {
+          "name": "user_data_exports_email_status_check",
+          "value": "\"user_data_exports\".\"email_status\" IN ('pending', 'sending', 'sent', 'failed')"
+        },
+        "user_data_exports_email_lease_shape": {
+          "name": "user_data_exports_email_lease_shape",
+          "value": "(\"user_data_exports\".\"email_status\" = 'sending') = (\"user_data_exports\".\"email_lease_token\" IS NOT NULL AND \"user_data_exports\".\"email_lease_expires_at\" IS NOT NULL)"
+        },
+        "user_data_exports_email_sent_shape": {
+          "name": "user_data_exports_email_sent_shape",
+          "value": "(\"user_data_exports\".\"email_status\" = 'sent') = (\"user_data_exports\".\"email_sent_at\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_deletion_activity": {
+      "name": "user_deletion_activity",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "request_id": {
+          "name": "request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "step_key": {
+          "name": "step_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "details_json": {
+          "name": "details_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_deletion_activity_request_created": {
+          "name": "IDX_user_deletion_activity_request_created",
+          "columns": [
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_deletion_activity_request_id_user_deletion_requests_id_fk": {
+          "name": "user_deletion_activity_request_id_user_deletion_requests_id_fk",
+          "tableFrom": "user_deletion_activity",
+          "tableTo": "user_deletion_requests",
+          "columnsFrom": [
+            "request_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_deletion_audit_events": {
+      "name": "user_deletion_audit_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "request_id": {
+          "name": "request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "actor_kilo_user_id": {
+          "name": "actor_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_email_hmac": {
+          "name": "target_email_hmac",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_key": {
+          "name": "subject_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "details_json": {
+          "name": "details_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_deletion_audit_events_idempotent": {
+          "name": "UQ_user_deletion_audit_events_idempotent",
+          "columns": [
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "event_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "subject_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_deletion_audit_events\".\"request_id\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_audit_events_request_id": {
+          "name": "IDX_user_deletion_audit_events_request_id",
+          "columns": [
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_audit_events_hmac": {
+          "name": "IDX_user_deletion_audit_events_hmac",
+          "columns": [
+            {
+              "expression": "target_email_hmac",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_deletion_audit_events_request_id_user_deletion_requests_id_fk": {
+          "name": "user_deletion_audit_events_request_id_user_deletion_requests_id_fk",
+          "tableFrom": "user_deletion_audit_events",
+          "tableTo": "user_deletion_requests",
+          "columnsFrom": [
+            "request_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_deletion_audit_events_event_type_check": {
+          "name": "user_deletion_audit_events_event_type_check",
+          "value": "\"user_deletion_audit_events\".\"event_type\" IN ('request_created', 'intake_refused', 'access_disabled', 'access_absent', 'preflight_disposition', 'task_disposition', 'manual_retry', 'manual_action', 'anonymized', 'deletion_ready_for_customer_reply', 'cancelled', 'completed')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_deletion_provider_credentials": {
+      "name": "user_deletion_provider_credentials",
+      "schema": "",
+      "columns": {
+        "provider_scope": {
+          "name": "provider_scope",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "encrypted_material": {
+          "name": "encrypted_material",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_by_kilo_user_id": {
+          "name": "updated_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_deletion_provider_credentials_updated_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_deletion_provider_credentials_updated_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_deletion_provider_credentials",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "updated_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_deletion_provider_credentials_scope_check": {
+          "name": "user_deletion_provider_credentials_scope_check",
+          "value": "\"user_deletion_provider_credentials\".\"provider_scope\" IN ('kiloclaw', 'customerio', 'cloud_storage', 'session_ingest', 'posthog', 'substack', 'pylon')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_deletion_requests": {
+      "name": "user_deletion_requests",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "catalog_version": {
+          "name": "catalog_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "requested_by_kilo_user_id": {
+          "name": "requested_by_kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_email": {
+          "name": "target_email",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "target_email_hmac": {
+          "name": "target_email_hmac",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "pylon_ticket_ref": {
+          "name": "pylon_ticket_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cloud_subject_resolution": {
+          "name": "cloud_subject_resolution",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cloud_subject_proof_ref": {
+          "name": "cloud_subject_proof_ref",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "preflight_attention_code": {
+          "name": "preflight_attention_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "last_progress_at": {
+          "name": "last_progress_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "anonymized_at": {
+          "name": "anonymized_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "completed_at": {
+          "name": "completed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancelled_at": {
+          "name": "cancelled_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "UQ_user_deletion_requests_active_email_hmac": {
+          "name": "UQ_user_deletion_requests_active_email_hmac",
+          "columns": [
+            {
+              "expression": "target_email_hmac",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_deletion_requests_active_user_id": {
+          "name": "UQ_user_deletion_requests_active_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_deletion_requests\".\"user_id\" IS NOT NULL AND \"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_deletion_requests_active_pylon_ticket": {
+          "name": "UQ_user_deletion_requests_active_pylon_ticket",
+          "columns": [
+            {
+              "expression": "regexp_replace(\"pylon_ticket_ref\", '^#', '')",
+              "asc": true,
+              "isExpression": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_deletion_requests\".\"pylon_ticket_ref\" IS NOT NULL AND \"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_requests_fairness": {
+          "name": "IDX_user_deletion_requests_fairness",
+          "columns": [
+            {
+              "expression": "last_progress_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_requests_email_hmac": {
+          "name": "IDX_user_deletion_requests_email_hmac",
+          "columns": [
+            {
+              "expression": "target_email_hmac",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_requests_user_id": {
+          "name": "IDX_user_deletion_requests_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_deletion_requests_user_id_kilocode_users_id_fk": {
+          "name": "user_deletion_requests_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_deletion_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        },
+        "user_deletion_requests_requested_by_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_deletion_requests_requested_by_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_deletion_requests",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "requested_by_kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_deletion_requests_status_check": {
+          "name": "user_deletion_requests_status_check",
+          "value": "\"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing', 'completed', 'cancelled')"
+        },
+        "user_deletion_requests_cloud_subject_resolution_check": {
+          "name": "user_deletion_requests_cloud_subject_resolution_check",
+          "value": "\"user_deletion_requests\".\"cloud_subject_resolution\" IN ('current_user', 'authoritative_absence', 'prior_queue_cleanup', 'legacy_identity_unresolved')"
+        },
+        "user_deletion_requests_catalog_version_positive": {
+          "name": "user_deletion_requests_catalog_version_positive",
+          "value": "\"user_deletion_requests\".\"catalog_version\" >= 1"
+        },
+        "user_deletion_requests_completed_at_check": {
+          "name": "user_deletion_requests_completed_at_check",
+          "value": "(\"user_deletion_requests\".\"status\" = 'completed') = (\"user_deletion_requests\".\"completed_at\" IS NOT NULL)"
+        },
+        "user_deletion_requests_cancelled_at_check": {
+          "name": "user_deletion_requests_cancelled_at_check",
+          "value": "(\"user_deletion_requests\".\"status\" = 'cancelled') = (\"user_deletion_requests\".\"cancelled_at\" IS NOT NULL)"
+        },
+        "user_deletion_requests_active_email_check": {
+          "name": "user_deletion_requests_active_email_check",
+          "value": "(\"user_deletion_requests\".\"status\" IN ('pending', 'in_progress', 'finalizing')) = (\"user_deletion_requests\".\"target_email\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_deletion_steps": {
+      "name": "user_deletion_steps",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "request_id": {
+          "name": "request_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "step_key": {
+          "name": "step_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'pending'"
+        },
+        "available_at": {
+          "name": "available_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "claim_token": {
+          "name": "claim_token",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "claimed_until": {
+          "name": "claimed_until",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "window_attempt_count": {
+          "name": "window_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "lifetime_attempt_count": {
+          "name": "lifetime_attempt_count",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 0
+        },
+        "progress_json": {
+          "name": "progress_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "last_error_code": {
+          "name": "last_error_code",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "rate_limited_since": {
+          "name": "rate_limited_since",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "manual_evidence_json": {
+          "name": "manual_evidence_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_deletion_steps_due": {
+          "name": "IDX_user_deletion_steps_due",
+          "columns": [
+            {
+              "expression": "status",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "available_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "where": "\"user_deletion_steps\".\"status\" IN ('pending', 'retry_wait', 'running')",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_deletion_steps_request_id": {
+          "name": "IDX_user_deletion_steps_request_id",
+          "columns": [
+            {
+              "expression": "request_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_deletion_steps_request_id_user_deletion_requests_id_fk": {
+          "name": "user_deletion_steps_request_id_user_deletion_requests_id_fk",
+          "tableFrom": "user_deletion_steps",
+          "tableTo": "user_deletion_requests",
+          "columnsFrom": [
+            "request_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_user_deletion_steps_request_step": {
+          "name": "UQ_user_deletion_steps_request_step",
+          "nullsNotDistinct": false,
+          "columns": [
+            "request_id",
+            "step_key"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "user_deletion_steps_step_key_check": {
+          "name": "user_deletion_steps_step_key_check",
+          "value": "\"user_deletion_steps\".\"step_key\" IN ('kiloclaw_destroy', 'customerio', 'cli_v1_blobs', 'cli_v2_sessions', 'usage_prompt_prefixes', 'posthog', 'substack', 'anonymize', 'pylon_reply', 'pylon_contact')"
+        },
+        "user_deletion_steps_status_check": {
+          "name": "user_deletion_steps_status_check",
+          "value": "\"user_deletion_steps\".\"status\" IN ('pending', 'running', 'retry_wait', 'needs_attention', 'manual_action_required', 'succeeded', 'not_applicable', 'manually_verified')"
+        },
+        "user_deletion_steps_window_attempt_count_nonnegative": {
+          "name": "user_deletion_steps_window_attempt_count_nonnegative",
+          "value": "\"user_deletion_steps\".\"window_attempt_count\" >= 0"
+        },
+        "user_deletion_steps_lifetime_attempt_count_nonnegative": {
+          "name": "user_deletion_steps_lifetime_attempt_count_nonnegative",
+          "value": "\"user_deletion_steps\".\"lifetime_attempt_count\" >= 0"
+        },
+        "user_deletion_steps_claim_fields_check": {
+          "name": "user_deletion_steps_claim_fields_check",
+          "value": "(\"user_deletion_steps\".\"claim_token\" IS NULL) = (\"user_deletion_steps\".\"claimed_until\" IS NULL)"
+        },
+        "user_deletion_steps_manual_evidence_check": {
+          "name": "user_deletion_steps_manual_evidence_check",
+          "value": "(\"user_deletion_steps\".\"status\" = 'manually_verified') = (\"user_deletion_steps\".\"manual_evidence_json\" IS NOT NULL)"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_feedback": {
+      "name": "user_feedback",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "feedback_text": {
+          "name": "feedback_text",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "feedback_for": {
+          "name": "feedback_for",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unknown'"
+        },
+        "feedback_batch": {
+          "name": "feedback_batch",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "source": {
+          "name": "source",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'unknown'"
+        },
+        "context_json": {
+          "name": "context_json",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_user_feedback_created_at": {
+          "name": "IDX_user_feedback_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_feedback_kilo_user_id": {
+          "name": "IDX_user_feedback_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_feedback_feedback_for": {
+          "name": "IDX_user_feedback_feedback_for",
+          "columns": [
+            {
+              "expression": "feedback_for",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_feedback_feedback_batch": {
+          "name": "IDX_user_feedback_feedback_batch",
+          "columns": [
+            {
+              "expression": "feedback_batch",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_feedback_source": {
+          "name": "IDX_user_feedback_source",
+          "columns": [
+            {
+              "expression": "source",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_feedback_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_feedback_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_feedback",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "set null",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_github_app_tokens": {
+      "name": "user_github_app_tokens",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_app_type": {
+          "name": "github_app_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'standard'"
+        },
+        "github_user_id": {
+          "name": "github_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "github_login": {
+          "name": "github_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "access_token_encrypted": {
+          "name": "access_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "access_token_expires_at": {
+          "name": "access_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "refresh_token_encrypted": {
+          "name": "refresh_token_encrypted",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "refresh_token_expires_at": {
+          "name": "refresh_token_expires_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "credential_version": {
+          "name": "credential_version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "revoked_at": {
+          "name": "revoked_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revocation_reason": {
+          "name": "revocation_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "last_used_at": {
+          "name": "last_used_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_github_app_tokens_user_app": {
+          "name": "UQ_user_github_app_tokens_user_app",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "github_app_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_github_app_tokens_github_user_app": {
+          "name": "UQ_user_github_app_tokens_github_user_app",
+          "columns": [
+            {
+              "expression": "github_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "github_app_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_github_app_tokens_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_github_app_tokens_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_github_app_tokens",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_github_app_tokens_app_type_check": {
+          "name": "user_github_app_tokens_app_type_check",
+          "value": "\"user_github_app_tokens\".\"github_app_type\" IN ('standard', 'lite')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_model_preferences": {
+      "name": "user_model_preferences",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "favorites": {
+          "name": "favorites",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'[]'::jsonb"
+        },
+        "last_selected": {
+          "name": "last_selected",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_model_preferences_user_id": {
+          "name": "UQ_user_model_preferences_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_model_preferences_user_id_kilocode_users_id_fk": {
+          "name": "user_model_preferences_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_model_preferences",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "cascade"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_moderation_blocks": {
+      "name": "user_moderation_blocks",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "blocker_user_id": {
+          "name": "blocker_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "blocked_github_login": {
+          "name": "blocked_github_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_moderation_blocks_blocker_login": {
+          "name": "UQ_user_moderation_blocks_blocker_login",
+          "columns": [
+            {
+              "expression": "blocker_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "blocked_github_login",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_moderation_mutes": {
+      "name": "user_moderation_mutes",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "blocker_user_id": {
+          "name": "blocker_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "muted_github_login": {
+          "name": "muted_github_login",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_moderation_mutes_blocker_login": {
+          "name": "UQ_user_moderation_mutes_blocker_login",
+          "columns": [
+            {
+              "expression": "blocker_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "muted_github_login",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_notification_preferences": {
+      "name": "user_notification_preferences",
+      "schema": "",
+      "columns": {
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "agent_push_enabled": {
+          "name": "agent_push_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "chat_messages_enabled": {
+          "name": "chat_messages_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "agent_attention_enabled": {
+          "name": "agent_attention_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "session_status_enabled": {
+          "name": "session_status_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "kiloclaw_activity_enabled": {
+          "name": "kiloclaw_activity_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "balance_alerts_enabled": {
+          "name": "balance_alerts_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "security_findings_enabled": {
+          "name": "security_findings_enabled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "user_notification_preferences_user_id_kilocode_users_id_fk": {
+          "name": "user_notification_preferences_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_notification_preferences",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_period_cache": {
+      "name": "user_period_cache",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cache_type": {
+          "name": "cache_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "period_type": {
+          "name": "period_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "period_key": {
+          "name": "period_key",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "data": {
+          "name": "data",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "computed_at": {
+          "name": "computed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "version": {
+          "name": "version",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true,
+          "default": 1
+        },
+        "shared_url_token": {
+          "name": "shared_url_token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "shared_at": {
+          "name": "shared_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {
+        "IDX_user_period_cache_kilo_user_id": {
+          "name": "IDX_user_period_cache_kilo_user_id",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_period_cache": {
+          "name": "UQ_user_period_cache",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "cache_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "period_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "period_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_period_cache_lookup": {
+          "name": "IDX_user_period_cache_lookup",
+          "columns": [
+            {
+              "expression": "cache_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "period_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "period_key",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "UQ_user_period_cache_share_token": {
+          "name": "UQ_user_period_cache_share_token",
+          "columns": [
+            {
+              "expression": "shared_url_token",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "where": "\"user_period_cache\".\"shared_url_token\" IS NOT NULL",
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_period_cache_kilo_user_id_kilocode_users_id_fk": {
+          "name": "user_period_cache_kilo_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_period_cache",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "kilo_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {
+        "user_period_cache_period_type_check": {
+          "name": "user_period_cache_period_type_check",
+          "value": "\"user_period_cache\".\"period_type\" IN ('year', 'quarter', 'month', 'week', 'custom')"
+        }
+      },
+      "isRLSEnabled": false
+    },
+    "public.user_push_tokens": {
+      "name": "user_push_tokens",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "gen_random_uuid()"
+        },
+        "user_id": {
+          "name": "user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_push_tokens_token": {
+          "name": "UQ_user_push_tokens_token",
+          "columns": [
+            {
+              "expression": "token",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_user_push_tokens_user_id": {
+          "name": "IDX_user_push_tokens_user_id",
+          "columns": [
+            {
+              "expression": "user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "user_push_tokens_user_id_kilocode_users_id_fk": {
+          "name": "user_push_tokens_user_id_kilocode_users_id_fk",
+          "tableFrom": "user_push_tokens",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.user_terms_acceptances": {
+      "name": "user_terms_acceptances",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "terms_version": {
+          "name": "terms_version",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "age_posture": {
+          "name": "age_posture",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'13_plus'"
+        },
+        "accepted_at": {
+          "name": "accepted_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "UQ_user_terms_acceptances_user_version": {
+          "name": "UQ_user_terms_acceptances_user_version",
+          "columns": [
+            {
+              "expression": "kilo_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            },
+            {
+              "expression": "terms_version",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.vercel_ip_city": {
+      "name": "vercel_ip_city",
+      "schema": "",
+      "columns": {
+        "vercel_ip_city_id": {
+          "name": "vercel_ip_city_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "vercel_ip_city": {
+          "name": "vercel_ip_city",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_vercel_ip_city": {
+          "name": "UQ_vercel_ip_city",
+          "columns": [
+            {
+              "expression": "vercel_ip_city",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.vercel_ip_country": {
+      "name": "vercel_ip_country",
+      "schema": "",
+      "columns": {
+        "vercel_ip_country_id": {
+          "name": "vercel_ip_country_id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "vercel_ip_country": {
+          "name": "vercel_ip_country",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {
+        "UQ_vercel_ip_country": {
+          "name": "UQ_vercel_ip_country",
+          "columns": [
+            {
+              "expression": "vercel_ip_country",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": true,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.webhook_events": {
+      "name": "webhook_events",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": true,
+          "notNull": true,
+          "default": "pg_catalog.gen_random_uuid()"
+        },
+        "owned_by_organization_id": {
+          "name": "owned_by_organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "owned_by_user_id": {
+          "name": "owned_by_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "platform": {
+          "name": "platform",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "event_action": {
+          "name": "event_action",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "payload": {
+          "name": "payload",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "headers": {
+          "name": "headers",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "processed": {
+          "name": "processed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true,
+          "default": false
+        },
+        "processed_at": {
+          "name": "processed_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "handlers_triggered": {
+          "name": "handlers_triggered",
+          "type": "text[]",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'"
+        },
+        "errors": {
+          "name": "errors",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "event_signature": {
+          "name": "event_signature",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "now()"
+        }
+      },
+      "indexes": {
+        "IDX_webhook_events_owned_by_org_id": {
+          "name": "IDX_webhook_events_owned_by_org_id",
+          "columns": [
+            {
+              "expression": "owned_by_organization_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_webhook_events_owned_by_user_id": {
+          "name": "IDX_webhook_events_owned_by_user_id",
+          "columns": [
+            {
+              "expression": "owned_by_user_id",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_webhook_events_platform": {
+          "name": "IDX_webhook_events_platform",
+          "columns": [
+            {
+              "expression": "platform",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_webhook_events_event_type": {
+          "name": "IDX_webhook_events_event_type",
+          "columns": [
+            {
+              "expression": "event_type",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        },
+        "IDX_webhook_events_created_at": {
+          "name": "IDX_webhook_events_created_at",
+          "columns": [
+            {
+              "expression": "created_at",
+              "isExpression": false,
+              "asc": true,
+              "nulls": "last"
+            }
+          ],
+          "isUnique": false,
+          "concurrently": false,
+          "method": "btree",
+          "with": {}
+        }
+      },
+      "foreignKeys": {
+        "webhook_events_owned_by_organization_id_organizations_id_fk": {
+          "name": "webhook_events_owned_by_organization_id_organizations_id_fk",
+          "tableFrom": "webhook_events",
+          "tableTo": "organizations",
+          "columnsFrom": [
+            "owned_by_organization_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        },
+        "webhook_events_owned_by_user_id_kilocode_users_id_fk": {
+          "name": "webhook_events_owned_by_user_id_kilocode_users_id_fk",
+          "tableFrom": "webhook_events",
+          "tableTo": "kilocode_users",
+          "columnsFrom": [
+            "owned_by_user_id"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "cascade",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {
+        "UQ_webhook_events_signature": {
+          "name": "UQ_webhook_events_signature",
+          "nullsNotDistinct": false,
+          "columns": [
+            "event_signature"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {
+        "webhook_events_owner_check": {
+          "name": "webhook_events_owner_check",
+          "value": "(\n        (\"webhook_events\".\"owned_by_user_id\" IS NOT NULL AND \"webhook_events\".\"owned_by_organization_id\" IS NULL) OR\n        (\"webhook_events\".\"owned_by_user_id\" IS NULL AND \"webhook_events\".\"owned_by_organization_id\" IS NOT NULL)\n      )"
+        }
+      },
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {
+    "public.microdollar_usage_view": {
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "kilo_user_id": {
+          "name": "kilo_user_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "message_id": {
+          "name": "message_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cost": {
+          "name": "cost",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "input_tokens": {
+          "name": "input_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "output_tokens": {
+          "name": "output_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cache_write_tokens": {
+          "name": "cache_write_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "cache_hit_tokens": {
+          "name": "cache_hit_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "http_x_forwarded_for": {
+          "name": "http_x_forwarded_for",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_city": {
+          "name": "http_x_vercel_ip_city",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_country": {
+          "name": "http_x_vercel_ip_country",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_latitude": {
+          "name": "http_x_vercel_ip_latitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ip_longitude": {
+          "name": "http_x_vercel_ip_longitude",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_x_vercel_ja4_digest": {
+          "name": "http_x_vercel_ja4_digest",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "provider": {
+          "name": "provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "model": {
+          "name": "model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "requested_model": {
+          "name": "requested_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "user_prompt_prefix": {
+          "name": "user_prompt_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "system_prompt_prefix": {
+          "name": "system_prompt_prefix",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "system_prompt_length": {
+          "name": "system_prompt_length",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "http_user_agent": {
+          "name": "http_user_agent",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cache_discount": {
+          "name": "cache_discount",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "max_tokens": {
+          "name": "max_tokens",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_middle_out_transform": {
+          "name": "has_middle_out_transform",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_error": {
+          "name": "has_error",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "abuse_classification": {
+          "name": "abuse_classification",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "inference_provider": {
+          "name": "inference_provider",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "project_id": {
+          "name": "project_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "status_code": {
+          "name": "status_code",
+          "type": "smallint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "upstream_id": {
+          "name": "upstream_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "finish_reason": {
+          "name": "finish_reason",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "latency": {
+          "name": "latency",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "moderation_latency": {
+          "name": "moderation_latency",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "generation_time": {
+          "name": "generation_time",
+          "type": "real",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_byok": {
+          "name": "is_byok",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_user_byok": {
+          "name": "is_user_byok",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "streamed": {
+          "name": "streamed",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "cancelled": {
+          "name": "cancelled",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "editor_name": {
+          "name": "editor_name",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "api_kind": {
+          "name": "api_kind",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "has_tools": {
+          "name": "has_tools",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "machine_id": {
+          "name": "machine_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "feature": {
+          "name": "feature",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "session_id": {
+          "name": "session_id",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "mode": {
+          "name": "mode",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "auto_model": {
+          "name": "auto_model",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "market_cost": {
+          "name": "market_cost",
+          "type": "bigint",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "is_free": {
+          "name": "is_free",
+          "type": "boolean",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "abuse_delay": {
+          "name": "abuse_delay",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "abuse_downgraded_from": {
+          "name": "abuse_downgraded_from",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "definition": "\n  SELECT\n    mu.id,\n    mu.kilo_user_id,\n    meta.message_id,\n    mu.cost,\n    mu.input_tokens,\n    mu.output_tokens,\n    mu.cache_write_tokens,\n    mu.cache_hit_tokens,\n    mu.created_at,\n    ip.http_ip AS http_x_forwarded_for,\n    city.vercel_ip_city AS http_x_vercel_ip_city,\n    country.vercel_ip_country AS http_x_vercel_ip_country,\n    meta.vercel_ip_latitude AS http_x_vercel_ip_latitude,\n    meta.vercel_ip_longitude AS http_x_vercel_ip_longitude,\n    ja4.ja4_digest AS http_x_vercel_ja4_digest,\n    mu.provider,\n    mu.model,\n    mu.requested_model,\n    meta.user_prompt_prefix,\n    spp.system_prompt_prefix,\n    meta.system_prompt_length,\n    ua.http_user_agent,\n    mu.cache_discount,\n    meta.max_tokens,\n    meta.has_middle_out_transform,\n    mu.has_error,\n    mu.abuse_classification,\n    mu.organization_id,\n    mu.inference_provider,\n    mu.project_id,\n    meta.status_code,\n    meta.upstream_id,\n    frfr.finish_reason,\n    meta.latency,\n    meta.moderation_latency,\n    meta.generation_time,\n    meta.is_byok,\n    meta.is_user_byok,\n    meta.streamed,\n    meta.cancelled,\n    edit.editor_name,\n    ak.api_kind,\n    meta.has_tools,\n    meta.machine_id,\n    feat.feature,\n    meta.session_id,\n    md.mode,\n    am.auto_model,\n    meta.market_cost,\n    meta.is_free,\n    meta.abuse_delay,\n    meta.abuse_downgraded_from\n  FROM \"microdollar_usage\" mu\n  LEFT JOIN \"microdollar_usage_metadata\" meta ON mu.id = meta.id\n  LEFT JOIN \"http_ip\" ip ON meta.http_ip_id = ip.http_ip_id\n  LEFT JOIN \"vercel_ip_city\" city ON meta.vercel_ip_city_id = city.vercel_ip_city_id\n  LEFT JOIN \"vercel_ip_country\" country ON meta.vercel_ip_country_id = country.vercel_ip_country_id\n  LEFT JOIN \"ja4_digest\" ja4 ON meta.ja4_digest_id = ja4.ja4_digest_id\n  LEFT JOIN \"system_prompt_prefix\" spp ON meta.system_prompt_prefix_id = spp.system_prompt_prefix_id\n  LEFT JOIN \"http_user_agent\" ua ON meta.http_user_agent_id = ua.http_user_agent_id\n  LEFT JOIN \"finish_reason\" frfr ON meta.finish_reason_id = frfr.finish_reason_id\n  LEFT JOIN \"editor_name\" edit ON meta.editor_name_id = edit.editor_name_id\n  LEFT JOIN \"api_kind\" ak ON meta.api_kind_id = ak.api_kind_id\n  LEFT JOIN \"feature\" feat ON meta.feature_id = feat.feature_id\n  LEFT JOIN \"mode\" md ON meta.mode_id = md.mode_id\n  LEFT JOIN \"auto_model\" am ON meta.auto_model_id = am.auto_model_id\n",
+      "name": "microdollar_usage_view",
+      "schema": "public",
+      "isExisting": false,
+      "materialized": false
+    }
+  },
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}
\ No newline at end of file
diff --git a/packages/db/src/migrations/meta/_journal.json b/packages/db/src/migrations/meta/_journal.json
index 06253dc90b..ac7061e067 100644
--- a/packages/db/src/migrations/meta/_journal.json
+++ b/packages/db/src/migrations/meta/_journal.json
@@ -1548,6 +1548,13 @@
       "when": 1787082936083,
       "tag": "0220_faulty_the_hand",
       "breakpoints": true
+    },
+    {
+      "idx": 221,
+      "version": "7",
+      "when": 1787164408373,
+      "tag": "0221_goofy_true_believers",
+      "breakpoints": true
     }
   ]
 }
\ No newline at end of file
diff --git a/packages/db/src/schema.test.ts b/packages/db/src/schema.test.ts
index dabe801660..e449aa1da9 100644
--- a/packages/db/src/schema.test.ts
+++ b/packages/db/src/schema.test.ts
@@ -651,6 +651,25 @@ describe('database schema', () => {
         'kiloclaw_suspension',
       ],
       StripeDisputeActionStatus: ['queued', 'processing', 'completed', 'failed', 'skipped'],
+      StripeServiceFeeFlow: [
+        'personal_top_up',
+        'organization_top_up',
+        'personal_auto_top_up_setup',
+        'organization_auto_top_up_setup',
+        'personal_auto_top_up',
+        'organization_auto_top_up',
+        'personal_kilo_pass',
+        'organization_kilo_pass',
+      ],
+      StripeServiceFeeOutcome: [
+        'pending',
+        'charged',
+        'exempt',
+        'pre_activation',
+        'zero_rounded',
+        'unsupported_currency',
+        'missed',
+      ],
       AffiliateProvider: ['impact'],
       AffiliateEventType: ['signup', 'trial_start', 'trial_end', 'sale', 'sale_reversal'],
       AffiliateEventDeliveryState: ['queued', 'blocked', 'sending', 'delivered', 'failed'],
diff --git a/packages/db/src/schema.ts b/packages/db/src/schema.ts
index 8d68af075f..6fdfd61054 100644
--- a/packages/db/src/schema.ts
+++ b/packages/db/src/schema.ts
@@ -201,7 +201,35 @@ export function enumCheck<T extends Record<string, string>>(
   );
 }
 
+export const StripeServiceFeeFlow = {
+  PersonalTopUp: 'personal_top_up',
+  OrganizationTopUp: 'organization_top_up',
+  PersonalAutoTopUpSetup: 'personal_auto_top_up_setup',
+  OrganizationAutoTopUpSetup: 'organization_auto_top_up_setup',
+  PersonalAutoTopUp: 'personal_auto_top_up',
+  OrganizationAutoTopUp: 'organization_auto_top_up',
+  PersonalKiloPass: 'personal_kilo_pass',
+  OrganizationKiloPass: 'organization_kilo_pass',
+} as const;
+
+export type StripeServiceFeeFlow = (typeof StripeServiceFeeFlow)[keyof typeof StripeServiceFeeFlow];
+
+export const StripeServiceFeeOutcome = {
+  Pending: 'pending',
+  Charged: 'charged',
+  Exempt: 'exempt',
+  PreActivation: 'pre_activation',
+  ZeroRounded: 'zero_rounded',
+  UnsupportedCurrency: 'unsupported_currency',
+  Missed: 'missed',
+} as const;
+
+export type StripeServiceFeeOutcome =
+  (typeof StripeServiceFeeOutcome)[keyof typeof StripeServiceFeeOutcome];
+
 export const SCHEMA_CHECK_ENUMS = {
+  StripeServiceFeeFlow,
+  StripeServiceFeeOutcome,
   KiloPassTier,
   KiloPassCadence,
   KiloPassPaymentProvider,
@@ -10910,3 +10938,209 @@ export const user_terms_acceptances = pgTable(
 
 export type UserTermsAcceptance = typeof user_terms_acceptances.$inferSelect;
 export type NewUserTermsAcceptance = typeof user_terms_acceptances.$inferInsert;
+
+export const organization_service_fee_exemptions = pgTable(
+  'organization_service_fee_exemptions',
+  {
+    id: idPrimaryKeyColumn,
+    organization_id: uuid().notNull(),
+    is_exempt: boolean().notNull(),
+    reason: text().notNull(),
+    changed_by_kilo_user_id: text(),
+    created_at: timestamp({ withTimezone: true, mode: 'string' }).defaultNow().notNull(),
+  },
+  table => [
+    foreignKey({
+      columns: [table.organization_id],
+      foreignColumns: [organizations.id],
+      name: 'FK_org_svc_fee_exemptions_organization',
+    })
+      .onDelete('restrict')
+      .onUpdate('cascade'),
+    foreignKey({
+      columns: [table.changed_by_kilo_user_id],
+      foreignColumns: [kilocode_users.id],
+      name: 'FK_org_svc_fee_exemptions_changed_by',
+    })
+      .onDelete('set null')
+      .onUpdate('cascade'),
+    index('IDX_org_service_fee_exemptions_org_created_at').on(
+      table.organization_id,
+      table.created_at.desc()
+    ),
+    check(
+      'organization_service_fee_exemptions_reason_check',
+      sql`length(trim(${table.reason})) > 0`
+    ),
+  ]
+);
+
+export type OrganizationServiceFeeExemption =
+  typeof organization_service_fee_exemptions.$inferSelect;
+export type NewOrganizationServiceFeeExemption =
+  typeof organization_service_fee_exemptions.$inferInsert;
+
+export const stripe_service_fee_assessments = pgTable(
+  'stripe_service_fee_assessments',
+  {
+    assessment_key: text().primaryKey().notNull(),
+    version: text().notNull(),
+    flow: text().notNull().$type<StripeServiceFeeFlow>(),
+    outcome: text().notNull().$type<StripeServiceFeeOutcome>(),
+    currency: text().notNull(),
+    kilo_user_id: text(),
+    organization_id: uuid(),
+    stripe_customer_id: text(),
+    stripe_checkout_session_id: text(),
+    stripe_invoice_id: text(),
+    stripe_payment_intent_id: text(),
+    stripe_charge_id: text(),
+    stripe_fee_price_id: text(),
+    stripe_checkout_fee_line_item_id: text(),
+    stripe_invoice_fee_line_item_id: text(),
+    eligibility_created_at: timestamp({ withTimezone: true, mode: 'string' }).notNull(),
+    eligible_subtotal_minor: integer().notNull(),
+    expected_fee_minor: integer().notNull(),
+    charged_fee_minor: integer().default(0).notNull(),
+    gross_paid_minor: integer().default(0).notNull(),
+    settled_product_minor: integer().default(0).notNull(),
+    refunded_product_minor: integer().default(0).notNull(),
+    refunded_fee_minor: integer().default(0).notNull(),
+    refunded_gross_minor: integer().default(0).notNull(),
+    disputed_fee_minor: integer().default(0).notNull(),
+    settled_at: timestamp({ withTimezone: true, mode: 'string' }),
+    exemption_id: uuid(),
+    failure_code: text(),
+    metadata: jsonb().$type<Record<string, unknown>>().default({}).notNull(),
+    created_at: timestamp({ withTimezone: true, mode: 'string' }).defaultNow().notNull(),
+    updated_at: timestamp({ withTimezone: true, mode: 'string' })
+      .defaultNow()
+      .notNull()
+      .$onUpdateFn(() => sql`now()`),
+  },
+  table => [
+    foreignKey({
+      columns: [table.kilo_user_id],
+      foreignColumns: [kilocode_users.id],
+      name: 'FK_stripe_svc_fee_assessments_kilo_user',
+    })
+      .onDelete('set null')
+      .onUpdate('cascade'),
+    foreignKey({
+      columns: [table.organization_id],
+      foreignColumns: [organizations.id],
+      name: 'FK_stripe_svc_fee_assessments_organization',
+    })
+      .onDelete('restrict')
+      .onUpdate('cascade'),
+    foreignKey({
+      columns: [table.exemption_id],
+      foreignColumns: [organization_service_fee_exemptions.id],
+      name: 'FK_stripe_svc_fee_assessments_exemption',
+    })
+      .onDelete('restrict')
+      .onUpdate('cascade'),
+    index('IDX_stripe_service_fee_assessments_stripe_customer_id').on(table.stripe_customer_id),
+    uniqueIndex('UQ_stripe_service_fee_assessments_checkout_session_id')
+      .on(table.stripe_checkout_session_id)
+      .where(isNotNull(table.stripe_checkout_session_id)),
+    uniqueIndex('UQ_stripe_service_fee_assessments_stripe_invoice_id')
+      .on(table.stripe_invoice_id)
+      .where(isNotNull(table.stripe_invoice_id)),
+    uniqueIndex('UQ_stripe_service_fee_assessments_stripe_payment_intent_id')
+      .on(table.stripe_payment_intent_id)
+      .where(isNotNull(table.stripe_payment_intent_id)),
+    uniqueIndex('UQ_stripe_service_fee_assessments_stripe_charge_id')
+      .on(table.stripe_charge_id)
+      .where(isNotNull(table.stripe_charge_id)),
+    uniqueIndex('UQ_stripe_service_fee_assessments_checkout_fee_line_item_id')
+      .on(table.stripe_checkout_fee_line_item_id)
+      .where(isNotNull(table.stripe_checkout_fee_line_item_id)),
+    uniqueIndex('UQ_stripe_service_fee_assessments_invoice_fee_line_item_id')
+      .on(table.stripe_invoice_fee_line_item_id)
+      .where(isNotNull(table.stripe_invoice_fee_line_item_id)),
+    enumCheck('stripe_service_fee_assessments_flow_check', table.flow, StripeServiceFeeFlow),
+    enumCheck(
+      'stripe_service_fee_assessments_outcome_check',
+      table.outcome,
+      StripeServiceFeeOutcome
+    ),
+    check('stripe_service_fee_assessments_currency_check', sql`${table.currency} ~ '^[a-z]{3}$'`),
+    check(
+      'stripe_service_fee_assessments_owner_check',
+      sql`(
+        ${table.flow} LIKE 'personal_%'
+        AND ${table.kilo_user_id} IS NOT NULL
+        AND ${table.organization_id} IS NULL
+      ) OR (
+        ${table.flow} LIKE 'organization_%'
+        AND ${table.organization_id} IS NOT NULL
+      )`
+    ),
+    check(
+      'stripe_service_fee_assessments_amounts_nonnegative_check',
+      sql`${table.eligible_subtotal_minor} >= 0
+        AND ${table.expected_fee_minor} >= 0
+        AND ${table.charged_fee_minor} >= 0
+        AND ${table.gross_paid_minor} >= 0
+        AND ${table.settled_product_minor} >= 0
+        AND ${table.refunded_product_minor} >= 0
+        AND ${table.refunded_fee_minor} >= 0
+        AND ${table.refunded_gross_minor} >= 0
+        AND ${table.disputed_fee_minor} >= 0`
+    ),
+    check(
+      'stripe_service_fee_assessments_refund_fee_check',
+      sql`${table.refunded_fee_minor} <= ${table.charged_fee_minor}`
+    ),
+    check(
+      'stripe_service_fee_assessments_refund_product_check',
+      sql`${table.refunded_product_minor} <= ${table.settled_product_minor}`
+    ),
+    check(
+      'stripe_service_fee_assessments_disputed_fee_check',
+      sql`${table.disputed_fee_minor} <= ${table.charged_fee_minor}`
+    ),
+    check(
+      'stripe_service_fee_assessments_pending_check',
+      sql`${table.outcome} <> 'pending'
+        OR (${table.charged_fee_minor} = 0 AND ${table.settled_at} IS NULL)`
+    ),
+    check(
+      'stripe_service_fee_assessments_charged_check',
+      sql`${table.outcome} <> 'charged' OR (
+        (
+          ${table.stripe_invoice_fee_line_item_id} IS NOT NULL
+          OR ${table.stripe_checkout_fee_line_item_id} IS NOT NULL
+          OR ${table.settled_at} IS NOT NULL
+        )
+        AND (${table.charged_fee_minor} <> 0 OR ${table.settled_product_minor} = 0)
+      )`
+    ),
+    check(
+      'stripe_service_fee_assessments_missed_check',
+      sql`${table.outcome} <> 'missed' OR (
+        ${table.expected_fee_minor} > 0
+        AND ${table.charged_fee_minor} = 0
+        AND ${table.failure_code} IS NOT NULL
+        AND length(trim(${table.failure_code})) > 0
+      )`
+    ),
+    check(
+      'stripe_service_fee_assessments_zero_rounded_check',
+      sql`${table.outcome} <> 'zero_rounded' OR ${table.expected_fee_minor} = 0`
+    ),
+    check(
+      'stripe_service_fee_assessments_uncharged_outcome_check',
+      sql`${table.outcome} NOT IN ('exempt', 'pre_activation', 'zero_rounded', 'unsupported_currency')
+        OR ${table.charged_fee_minor} = 0`
+    ),
+    check(
+      'stripe_service_fee_assessments_exemption_check',
+      sql`(${table.outcome} = 'exempt') = (${table.exemption_id} IS NOT NULL)`
+    ),
+  ]
+);
+
+export type StripeServiceFeeAssessment = typeof stripe_service_fee_assessments.$inferSelect;
+export type NewStripeServiceFeeAssessment = typeof stripe_service_fee_assessments.$inferInsert;