feat: churn reduction — cancel flow, yearly-first billing, usage & data-health alerts, onboarding activation

apps/api/src/controllers/webhook.controller.ts

@@ -6,7 +6,7 @@ const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
 
 import { tryCatch } from '@openpanel/common';
-import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
+import { db, getOrganizationByProjectIdCached, Prisma } from '@openpanel/db';
 import { safeWebhookFetcher } from '@openpanel/integrations/src/safe-fetcher';
 import {
   sendSlackNotification,
@@ -145,10 +145,65 @@ const TRACKED_SUBSCRIPTION_FIELDS = [
   'subscriptionStartsAt',
   'subscriptionEndsAt',
   'subscriptionCanceledAt',
+  'subscriptionCancelReason',
   'subscriptionInterval',
   'subscriptionPeriodEventsLimit',
+  'subscriptionPauseAtPeriodEnd',
+  'subscriptionResumesAt',
+  'subscriptionFirstStartedAt',
 ] as const;
 
+const CANCELLATION_REASONS = [
+  'too_expensive',
+  'missing_features',
+  'switched_service',
+  'unused',
+  'customer_service',
+  'low_quality',
+  'too_complex',
+  'other',
+] as const;
+
+type CancellationReason = (typeof CANCELLATION_REASONS)[number];
+
+// Polar types the reason as an open enum (unknown strings can appear); only
+// store values our own union knows about.
+function parseCancellationReason(
+  reason: string | null | undefined
+): CancellationReason | null {
+  return CANCELLATION_REASONS.includes(reason as CancellationReason)
+    ? (reason as CancellationReason)
+    : null;
+}
+
+type PolarSubscriptionDiscount = PolarSubscriptionData['discount'];
+
+// Compact summary of Polar's embedded discount object so the dashboard can
+// show that a discount is active (save offer or any Polar discount code).
+export function toSubscriptionDiscount(
+  discount: PolarSubscriptionDiscount
+): PrismaJson.IPrismaSubscriptionDiscount | null {
+  if (!discount) {
+    return null;
+  }
+  return {
+    id: discount.id,
+    name: discount.name,
+    type: discount.type === 'fixed' ? 'fixed' : 'percentage',
+    basisPoints: 'basisPoints' in discount ? discount.basisPoints : null,
+    amount: 'amount' in discount ? discount.amount : null,
+    currency: 'currency' in discount ? discount.currency : null,
+    duration:
+      discount.duration === 'repeating'
+        ? 'repeating'
+        : discount.duration === 'forever'
+          ? 'forever'
+          : 'once',
+    durationInMonths:
+      'durationInMonths' in discount ? discount.durationInMonths : null,
+  };
+}
+
 const normalizeLogValue = (value: unknown) =>
   value instanceof Date ? value.toISOString() : (value ?? null);
 
@@ -269,6 +324,23 @@ async function syncSubscriptionToOrg(
         : data.canceledAt
       : data.currentPeriodEnd,
     subscriptionInterval: data.recurringInterval,
+    // Cancellation feedback + pause state mirror Polar so portal-driven cancels
+    // and pauses are captured too (our in-app flows also set them via the API,
+    // which just echoes back through here).
+    subscriptionCancelReason: parseCancellationReason(
+      data.customerCancellationReason
+    ),
+    subscriptionCancelComment: data.customerCancellationComment ?? null,
+    subscriptionPauseAtPeriodEnd: data.pauseAtPeriodEnd,
+    subscriptionResumesAt: data.resumesAt,
+    subscriptionDiscount:
+      toSubscriptionDiscount(data.discount) ?? Prisma.DbNull,
+    // Stable tenure anchor: keep the stored value while the subscription id is
+    // unchanged; a new subscription (re-subscribe) restarts tenure.
+    subscriptionFirstStartedAt:
+      organization.subscriptionId === data.id
+        ? (organization.subscriptionFirstStartedAt ?? data.createdAt)
+        : data.createdAt,
     subscriptionPeriodEventsLimit,
     subscriptionPeriodEventsCountExceededAt:
       typeof subscriptionPeriodEventsLimit === 'number' &&
@@ -277,6 +349,12 @@ async function syncSubscriptionToOrg(
       organization.subscriptionPeriodEventsLimit < subscriptionPeriodEventsLimit
         ? null
         : undefined,
+    // A raised limit re-arms the usage alerts for the new headroom.
+    ...(typeof subscriptionPeriodEventsLimit === 'number' &&
+    typeof organization.subscriptionPeriodEventsLimit === 'number' &&
+    organization.subscriptionPeriodEventsLimit < subscriptionPeriodEventsLimit
+      ? { usageWarningSentAt: null, usageExceededSentAt: null }
+      : {}),
   };
 
   const changes = diffOrganizationFields(
@@ -319,7 +397,10 @@ export async function polarWebhook(
   }>,
   reply: FastifyReply
 ) {
-  request.log.info({ body: request.body }, 'polar webhook received');
+  // Don't log the raw body: it can carry customer free text (e.g. the
+  // cancellation comment) that the logger's redaction patterns don't cover.
+  // `eventCtx` is logged right after validation instead.
+  request.log.info('polar webhook received');
 
   const validation = await tryCatch(async () =>
     validatePolarEvent(
@@ -404,6 +485,9 @@ export async function polarWebhook(
           data: {
             subscriptionPeriodEventsCount: 0,
             subscriptionPeriodEventsCountExceededAt: null,
+            // New cycle — the usage alerts may fire again.
+            usageWarningSentAt: null,
+            usageExceededSentAt: null,
           },
         });
 
@@ -421,6 +505,9 @@ export async function polarWebhook(
       // All subscription lifecycle events carry the same Subscription object;
       // sync them through a single path (new subs, cancellations, revokes,
       // reactivations, plan changes, payment-state changes).
+      // Pause/resume transitions arrive via `subscription.updated` (the SDK's
+      // webhook union has no dedicated paused/reactivated payloads yet) and are
+      // reflected in `status` / `pauseAtPeriodEnd` / `resumesAt` below.
       case 'subscription.created':
       case 'subscription.active':
       case 'subscription.updated':

apps/public/src/app/(home)/_sections/pricing.tsx

@@ -79,6 +79,9 @@ export function Pricing() {
                     + VAT if applicable
                   </span>
                 </div>
+                <span className="mt-2 text-emerald-600 text-sm dark:text-emerald-500">
+                  Pay yearly and get 2 months free
+                </span>
               </>
             ) : (
               <div className="text-lg">

apps/public/src/components/pricing-slider.tsx

@@ -49,6 +49,9 @@ export function PricingSlider() {
           >
             + VAT if applicable
           </span>
+          <div className="mt-1 text-emerald-600 text-sm dark:text-emerald-500">
+            Pay yearly and get 2 months free
+          </div>
         </div>
       ) : (
         <div className="text-lg">

apps/start/src/components/clients/create-client-success.tsx

@@ -1,19 +1,28 @@
+import { CopyIcon, DownloadIcon, RocketIcon } from 'lucide-react';
+import CopyInput from '../forms/copy-input';
 import { Alert, AlertDescription, AlertTitle } from '@/components/ui/alert';
 import { Button } from '@/components/ui/button';
-import { DownloadIcon, RocketIcon } from 'lucide-react';
-
-import CopyInput from '../forms/copy-input';
+import { isRealClientSecret } from '@/hooks/use-client-secret';
+import { clipboard } from '@/utils/clipboard';
 
 type Props = { id: string; secret: string; type?: 'read' | 'write' | 'root' };
 
 export function CreateClientSuccess({ id, secret, type }: Props) {
-  const mcpToken = btoa(`${id}:${secret}`);
-  const showMcpToken = type === 'root' || type === 'read';
+  // Only derive credentials from a real secret — the '[CLIENT_SECRET]'
+  // placeholder is truthy and would render a valid-looking but broken token.
+  const hasSecret = isRealClientSecret(secret);
+  const mcpToken = hasSecret ? btoa(`${id}:${secret}`) : null;
+  const showMcpToken = !!mcpToken && (type === 'root' || type === 'read');
+
+  const credentials = [
+    `CLIENT_ID=${id}`,
+    hasSecret && `CLIENT_SECRET=${secret}`,
+    showMcpToken && `MCP_TOKEN=${mcpToken}`,
+  ]
+    .filter(Boolean)
+    .join('\n');
 
   const download = () => {
-    const credentials = showMcpToken
-      ? `CLIENT_ID=${id}\nCLIENT_SECRET=${secret}\nMCP_TOKEN=${mcpToken}`
-      : `CLIENT_ID=${id}\nCLIENT_SECRET=${secret}`;
     const blob = new Blob([credentials], { type: 'text/plain' });
     const url = URL.createObjectURL(blob);
     const a = document.createElement('a');
@@ -25,36 +34,45 @@ export function CreateClientSuccess({ id, secret, type }: Props) {
   return (
     <div className="grid min-w-0 gap-4 [&>*]:min-w-0">
       <CopyInput label="Client ID" value={id} />
-      {secret && (
+      {hasSecret && (
         <div className="w-full min-w-0">
           <CopyInput label="Secret" value={secret} />
-          <p className="mt-1 text-sm text-muted-foreground">
+          <p className="mt-1 text-muted-foreground text-sm">
             You will only need the secret if you want to send server events.
           </p>
         </div>
       )}
-      {secret && showMcpToken && (
+      {showMcpToken && (
         <div className="w-full min-w-0">
           <CopyInput label="MCP Token" value={mcpToken} />
-          <p className="mt-1 text-sm text-muted-foreground">
+          <p className="mt-1 text-muted-foreground text-sm">
             Use this token to authenticate with the MCP server (base64 encoded
             client ID and secret).
           </p>
         </div>
       )}
-      <Button variant="outline" icon={DownloadIcon} onClick={download}>
-        Save credentials
-      </Button>
+      <div className="row gap-2 [&>*]:flex-1">
+        <Button
+          icon={CopyIcon}
+          onClick={() => clipboard(credentials)}
+          variant="outline"
+        >
+          Copy all
+        </Button>
+        <Button icon={DownloadIcon} onClick={download} variant="outline">
+          Save credentials
+        </Button>
+      </div>
       <Alert>
         <RocketIcon className="h-4 w-4" />
         <AlertTitle>Get started!</AlertTitle>
         <AlertDescription>
           Read our{' '}
           <a
-            target="_blank"
-            href="https://openpanel.dev/docs"
             className="underline"
+            href="https://openpanel.dev/docs"
             rel="noreferrer"
+            target="_blank"
           >
             documentation
           </a>{' '}