fix: reconcile usage allowance subscriptions

[hulh122]

Summary

• add Stripe-backed usage allowance subscription fields and webhook handling
• refresh expired usage allowance entitlements from Stripe on request and cron paths
• keep allowance subscription cancellation/payment-failure behavior aligned with pro/team handling

Tests

• pnpm -F api check-types
• pnpm -F @vm0/db check-types
• pnpm -F @vm0/api-contracts check-types

[codecov]

Codecov Report

❌ Patch coverage is 69.62810% with 147 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
...pi/src/signals/services/webhooks-stripe.service.ts	75.28%	44 Missing ⚠️
...nals/services/cron-billing-entitlements.service.ts	17.30%	43 Missing ⚠️
...pi/src/signals/services/usage-allowance.service.ts	36.06%	39 Missing ⚠️
.../zero-page/components/org-manage/org-usage-tab.tsx	79.59%	10 Missing ⚠️
...form/src/views/zero-page/zero-chat-thread-page.tsx	60.00%	4 Missing ⚠️
...ignals/services/zero-chat-usage-message.service.ts	86.95%	3 Missing ⚠️
...urbo/apps/api/src/test-fixtures/usage-allowance.ts	85.71%	3 Missing ⚠️
...ignals/zero-page/settings/personal-usage-record.ts	83.33%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[github-actions]

API preview: https://pr-20684-api.vm6.ai

[hulh122]

Code Review: PR #20684 (Round 1) - LGTM

Summary

Reviewed the usage allowance billing changes after resolving the rebase conflict. I found and fixed one high-priority allowance eligibility edge case before posting this review: settlement/firewall allowance lookup now requires the run to be a vm0 run and reads windows issued for the run creation time, so canceled entitlements still honor already-created runs while non-vm0 runs inside active windows do not consume vm0 allowance.

Testing Review

Coverage now includes:

• allowance before credits, short/weekly caps, window refresh, zero-credit admission, exhausted allowance rejection
• non-vm0 runs both without windows and inside existing vm0 windows
• older runs after new allowance grant
• run created before entitlement cancellation still consuming issued windows
• new run after cancellation not consuming allowance

Verification

• pnpm -F api exec vitest run src/signals/routes/__tests__/usage-allowance.test.ts src/signals/routes/__tests__/zero-billing-status.test.ts
• pnpm -F api exec vitest run src/signals/routes/__tests__/webhooks-callbacks.bdd.test.ts -t "usage allowance entitlements"
• pnpm -F @vm0/app exec vitest run src/views/zero-page/__tests__/personal-usage-tab.test.tsx src/views/zero-page/__tests__/org-usage-tab.test.tsx src/signals/chat-page/__tests__/run-group-folding.test.ts
• pnpm turbo run lint
• pnpm check-types
• pnpm knip --workspace apps/api

Verdict: LGTM

No remaining P0/P1 issues found.

---

Completed after 1 round of automated review-fix loop