fix(billing): verify entitlement healing against the credit-adjusted floor

The sweep selects drift as `limit <= freeTier + creditBalance` but scored the
post-sync result against the bare `freeTier`. A user holding prepaid credits
whom the sync left on their raised floor therefore satisfied the drift
condition and was still counted and logged as healed, silencing the one signal
the sweep exists to raise.

Re-read `creditBalance` alongside the limit and compare against the same floor
the query selected on. Cover both directions: still on a raised floor reports
unresolved, above it reports healed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: icecrasher321

apps/sim/lib/billing/entitlement-drift.test.ts

@@ -57,6 +57,29 @@ describe('reconcileEntitlementLimitDrift', () => {
     expect(result).toEqual({ drifted: 1, healed: 0, unresolved: 1 })
   })
 
+  /**
+   * Prepaid credits raise the floor, so a user with a balance who is still on
+   * it lands above the bare free-tier limit. Verifying against that bare limit
+   * would score them healed and silence the signal.
+   */
+  it('reports a credit-holding user the sync left on their raised floor', async () => {
+    queueTableRows(schemaMock.subscription, [{ userId: 'user-1' }])
+    queueTableRows(schemaMock.userStats, [{ currentUsageLimit: '25', creditBalance: '20' }])
+
+    const result = await reconcileEntitlementLimitDrift()
+
+    expect(result).toEqual({ drifted: 1, healed: 0, unresolved: 1 })
+  })
+
+  it('heals a credit-holding user once the sync clears their raised floor', async () => {
+    queueTableRows(schemaMock.subscription, [{ userId: 'user-1' }])
+    queueTableRows(schemaMock.userStats, [{ currentUsageLimit: '50', creditBalance: '20' }])
+
+    const result = await reconcileEntitlementLimitDrift()
+
+    expect(result).toEqual({ drifted: 1, healed: 1, unresolved: 0 })
+  })
+
   it('leaves an org-covered member alone once the sync clears their personal limit', async () => {
     queueTableRows(schemaMock.subscription, [{ userId: 'user-1' }])
     queueTableRows(schemaMock.userStats, [{ currentUsageLimit: null }])

apps/sim/lib/billing/entitlement-drift.ts

@@ -91,7 +91,10 @@ export async function reconcileEntitlementLimitDrift(): Promise<EntitlementDrift
       await syncUsageLimitsFromSubscription(row.userId)
 
       const [after] = await db
-        .select({ currentUsageLimit: userStats.currentUsageLimit })
+        .select({
+          currentUsageLimit: userStats.currentUsageLimit,
+          creditBalance: userStats.creditBalance,
+        })
         .from(userStats)
         .where(eq(userStats.userId, row.userId))
         .limit(1)
@@ -102,7 +105,16 @@ export async function reconcileEntitlementLimitDrift(): Promise<EntitlementDrift
        */
       if (after?.currentUsageLimit == null) continue
 
-      if (Number(after.currentUsageLimit) > Number(freeTierFloor)) {
+      /**
+       * Verified against the same credit-adjusted floor the query selected
+       * on. Prepaid credits are additive headroom, so a user holding a
+       * balance is still on the floor at `free + balance`; checking the bare
+       * free-tier limit here would score that as healed and silence the one
+       * signal this sweep exists to raise.
+       */
+      const floor = Number(freeTierFloor) + Number(after.creditBalance ?? 0)
+
+      if (Number(after.currentUsageLimit) > floor) {
         healed++
         logger.info('Healed a paying user stuck at the free-tier limit', {
           userId: row.userId,
@@ -122,6 +134,7 @@ export async function reconcileEntitlementLimitDrift(): Promise<EntitlementDrift
       logger.error('Usage-limit sync left a paying user at the free-tier limit', {
         userId: row.userId,
         currentUsageLimit: after.currentUsageLimit,
+        floor,
       })
     } catch (error) {
       unresolved++