feat: complete commercial developer workflowspublish-commercial-control-plane

Add tenant-safe usage observability, prepaid billing controls, API key lifecycle management, Embeddings metering, configurable billing alerts, and resilient provider health propagation. Harden Stripe failure handling, migrations, readiness, and the authenticated control-plane UI with end-to-end verification evidence.

1 files changed, 13 insertions, 5 deletions

diff --git a/internal/controlplane/preferences_test.go b/internal/controlplane/preferences_test.go
index 88a3d50..2d390d2 100644
--- a/internal/controlplane/preferences_test.go
+++ b/internal/controlplane/preferences_test.go
@@ -6,11 +6,13 @@ import (
 )
 
 func TestGetTenantPreferencesWithoutTenantUsesConfiguredDefault(t *testing.T) {
-	result, err := (&Store{}).GetTenantPreferences(context.Background(), "", 12_500_000)
+	defaults := BillingPreferenceDefaults{LowBalanceThresholdMicros: 12_500_000, SpendAnomalyMultiplier: 7, SpendAnomalyMinMicros: 8_500_000}
+	result, err := (&Store{}).GetTenantPreferences(context.Background(), "", defaults)
 	if err != nil {
 		t.Fatal(err)
 	}
-	if !result.LowBalanceEnabled || result.LowBalanceThresholdMicros != 12_500_000 {
+	if !result.LowBalanceEnabled || result.LowBalanceThresholdMicros != 12_500_000 || !result.SpendAnomalyEnabled ||
+		result.SpendAnomalyMultiplier != 7 || result.SpendAnomalyMinMicros != 8_500_000 {
 		t.Fatalf("unexpected defaults: %+v", result)
 	}
 }
@@ -19,13 +21,19 @@ func TestPreferenceValidationRejectsUnsafeValuesBeforeDatabaseAccess(t *testing.
 	store := &Store{}
 	if _, err := store.SetDeveloperPreferences(context.Background(), SetDeveloperPreferencesInput{
 		TenantID: "tenant", DefaultModel: "same", FallbackModel: "same",
-	}); err == nil {
+	}, BillingPreferenceDefaults{}); err == nil {
 		t.Fatal("expected identical default and fallback models to fail")
 	}
-	threshold := maxLowBalanceThresholdMicros + 1
+	threshold := maxAlertThresholdMicros + 1
 	if _, err := store.SetBillingPreferences(context.Background(), SetBillingPreferencesInput{
 		TenantID: "tenant", LowBalanceThresholdMicros: &threshold,
-	}, 5_000_000); err == nil {
+	}, BillingPreferenceDefaults{}); err == nil {
 		t.Fatal("expected excessive low balance threshold to fail")
 	}
+	multiplier := int64(1)
+	if _, err := store.SetBillingPreferences(context.Background(), SetBillingPreferencesInput{
+		TenantID: "tenant", SpendAnomalyMultiplier: &multiplier,
+	}, BillingPreferenceDefaults{}); err == nil {
+		t.Fatal("expected invalid spend anomaly multiplier to fail")
+	}
 }