Function uploadKeysToInventory

apps/web/src/lib/coding-plans/index.ts:386–449

(
  providerId: string,
  planId: CodingPlanId,
  rawEntries: string[],
  options: InventoryUploadOptions = {}
)

        eq(coding_plan_subscriptions.user_id, userId),
        eq(coding_plan_subscriptions.status, 'active')
      )
    );
  if ((result.rowCount ?? 0) === 0) {
    throw new Error('No active subscription found.');
  }
  logInfo('Coding plan cancellation scheduled', { user_id: userId, subscriptionId });
}

export async function terminateCodingPlanImmediately(
  subscriptionId: string,
  reason: CancellationReason = 'administrative_termination'
): Promise<void> {
  await db.transaction(async tx => {
    // Lock the subscription row before reading it so this can't act on a
    // stale installed_byok_key_id / key_inventory_id snapshot if it races
    // with a concurrent credential reassignment for the same subscription.
    const [subscription] = await tx
      .select({
        id: coding_plan_subscriptions.id,
        status: coding_plan_subscriptions.status,
        installed_byok_key_id: coding_plan_subscriptions.installed_byok_key_id,
        key_inventory_id: coding_plan_subscriptions.key_inventory_id,
      })
      .from(coding_plan_subscriptions)
      .where(eq(coding_plan_subscriptions.id, subscriptionId))
      .for('update');
    if (!subscription || (subscription.status !== 'active' && subscription.status !== 'past_due')) {
      throw new Error('No live subscription found.');
    }

    await tx
      .update(coding_plan_subscriptions)
      .set({
        status: 'canceled',
        canceled_at: sql`now()`,
        cancellation_reason: reason,
        installed_byok_key_id: null,
        cancel_at_period_end: false,
        past_due_started_at: null,
        payment_grace_expires_at: null,
        auto_top_up_attempted_for_due: null,
      })
      .where(eq(coding_plan_subscriptions.id, subscription.id));
    if (subscription.installed_byok_key_id) {
      await tx
        .delete(byok_api_keys)
        .where(
          and(
            eq(byok_api_keys.id, subscription.installed_byok_key_id),
            eq(byok_api_keys.management_source, 'coding_plan')
          )
        );
    }
    if (subscription.key_inventory_id) {
      await tx
        .update(coding_plan_key_inventory)
        .set({
          status: 'revocation_pending',