NEC-146: Starting over leaves a solely owned organisation's subscription billing, with no warning #205

Merged

nectenda-agent merged 2 commits from worktree-nec-146-starting-over-leaves-a-solely-owned-orga into main 2026-09-28 20:04:26 +01:00

Conversation 0 Commits 2 Files changed 12 +961 -7

nectenda-agent commented 2026-09-28 19:47:15 +01:00

Collaborator

Copy link

Task: NEC-146 — https://projectron.nerchure.com/tasks/154

Starting over left a solely owned organisation's paid subscription charging with the tombstoned identity, where the new account could not see or manage it. Support can now list what a released identity left billing (GET /api/admin/users/:id/subscriptions) and move an order to an organisation the same person owns now (POST /api/admin/billing/orders/:id/move). The old organisation is sent free first, the order is re-pointed only after its shard confirms, and every check is repeated inside the re-point transaction so a webhook, tick or second move during the drop refuses rather than leaving a paid plan behind or billing twice. The completion email and release-completed audit row name what is still billing, and the Start over dialog says so before anyone asks. Runbook and commercial-model docs updated.

Spec: docs/changes/NEC-146-start-over-subscription-move/spec.md

Changelog

Starting over now warns that a subscription on an organisation you own alone keeps billing, and support can move it to a new organisation you create.

Task: NEC-146 — https://projectron.nerchure.com/tasks/154 Starting over left a solely owned organisation's paid subscription charging with the tombstoned identity, where the new account could not see or manage it. Support can now list what a released identity left billing (GET /api/admin/users/:id/subscriptions) and move an order to an organisation the same person owns now (POST /api/admin/billing/orders/:id/move). The old organisation is sent free first, the order is re-pointed only after its shard confirms, and every check is repeated inside the re-point transaction so a webhook, tick or second move during the drop refuses rather than leaving a paid plan behind or billing twice. The completion email and release-completed audit row name what is still billing, and the Start over dialog says so before anyone asks. Runbook and commercial-model docs updated. Spec: `docs/changes/NEC-146-start-over-subscription-move/spec.md` ## Changelog Starting over now warns that a subscription on an organisation you own alone keeps billing, and support can move it to a new organisation you create.

nectenda-agent added the

area:identity

label 2026-09-28 19:47:15 +01:00

nectenda-agent added 2 commits 2026-09-28 19:47:15 +01:00

Let support move a subscription that starting over left behind ... 2a8e87371e

An organisation someone owned alone stays with their tombstone when they
start over, and its subscription kept charging where the new account could
not see it. Support can now list what a released identity left billing and
move the order to an organisation the same person owns now: the old one is
sent free first, and the order is re-pointed only once its shard confirms.
The completion email and audit row name what is still billing, and the
Start over modal says so before anyone asks.

Task: NEC-146
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EotVmsRd29ih4oz84NvW5p

Close the races and gaps a review found in moving a subscription ... 67400aca83

The move re-checks inside its transaction everything it checked before the
drop, so a webhook, a tick or a second move during the drop's round trip
refuses rather than leaving the old organisation on a paid plan or billing
the target twice. It also refuses while the ticker still has something to
send the old organisation, when the order was not the tombstone's own, and
when the old organisation has a second live order. A past-due order keeps
its notice, and an instance admin's kept organisation counts as still billing.

Task: NEC-146
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EotVmsRd29ih4oz84NvW5p

cruelacid force-pushed worktree-nec-146-starting-over-leaves-a-solely-owned-orga from 67400aca83 to 7b378d6847 2026-09-28 19:58:25 +01:00 Compare

nectenda-agent merged commit 7b378d6847 into main 2026-09-28 20:04:26 +01:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area:docs

docs/

  

area:identity

packages/identity

  

area:ops

deploy/, CI, hosting

  

area:plugin

packages/plugin

  

area:server

packages/server

  

channel:community

Obsidian forum, Obsidian Discord, Reddit

  

channel:direct

Cold outreach to named firms

  

channel:owned

nectenda.com pages, the feedback board

  

channel:press

Hacker News, newsletters, outlets, YouTube creators

  

channel:social

Bluesky, Mastodon, X, YouTube accounts

  

e2ee-constrained

End-to-end encryption changes the shape of the answer

  

gate:at-ga

Held until Gates A-C close and terms/privacy leave DRAFT

  

gate:pre-ga

Safe to do before the launch gates close

  

marketing

Reach and positioning; work published off nectenda.com

  

parity

Relay feature-parity programme

  

relay:absent

4 - Not supported, not requested, not planned at Relay

  

relay:planned

2 - On Relay's roadmap (Active/Planned) or has an open PR

  

relay:requested

3 - Asked for by Relay users or under 'Considering'; not committed

  

relay:supported

1 - Relay ships this today

  

risk:additive

New message type, table or column; backward compatible

  

risk:contract

Changes something existing accounts or stored data depend on

  

risk:none

Client-only; the server is untouched

  

usability

How the product is understood and learned, not what it does

No labels

area:docs

area:identity

area:ops

area:plugin

area:server

channel:community

channel:direct

channel:owned

channel:press

channel:social

e2ee-constrained

gate:at-ga

gate:pre-ga

marketing

parity

relay:absent

relay:planned

relay:requested

relay:supported

risk:additive

risk:contract

risk:none

usability

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

Nectenda/nectenda!205

No description provided.