fix(web): (C) reconcile sessions take model — drop flat revenueSharePct double-take

finalizeSession's deferred/atomic branch took a flat 15% session fee (live DB
default 85) then payout took progressively on top — a structural DOUBLE-TAKE vs
the single progressive take model. Credit the FULL amount at settlement
(platformFeeCents 0); the one progressive take stays at payout (meter-parity).

Remove all dead revenueSharePct refs (meter free-tier overage block + dev-ops
counter, meter-with-metadata/proxy/me/settings/email dead selects+joins, the
recordInvocationAsync legacy param) and DROP developers.revenue_share_pct,
resolving the schema(100)/DB(85) drift. Migration 0014 is generated NOT applied
(founder-gated; apply post-deploy, expand/contract).

Latent today (immediate-only sessions + unwired processSettlementBatch + dormant
prod = no active loss); fixed before sessions carry real money.

Gates: apps/web tsc 0 / vitest 4283 (4282-1+2) / build 0 / eslint 0; mcp 1898/1
unchanged; zero pricing/payout/meter-credit/rate-limit/crypto/mcp/sdk-python
hunks. Pre-build audit R2 PLAN_READY 0-blocking; post-build FUNDS-SEAL CERTIFIED
0-blocking.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: lexwhiting

apps/web/drizzle/0014_drop_revenue_share_pct.sql

@@ -0,0 +1,21 @@
+-- (C) revenueSharePct take-model reconciliation (2026-06-07)
+-- Drop the legacy flat-take column `developers.revenue_share_pct`.
+--
+-- The flat revenueSharePct model was superseded by the progressive
+-- calculateTakeCents model (apps/web/src/lib/pricing.ts), applied once at
+-- payout. Chunk (C) removed the last divergent consumer (the sessions
+-- finalize flat fee) and every dead reference, so no deployed code reads
+-- this column. Expand/contract: ship the (C) code first (so live instances
+-- stop SELECTing the column), THEN apply this DROP. The column carried only
+-- a stale DEFAULT 85 (vs the ORM's 100) that fed no money math.
+--
+-- IF EXISTS makes the one-shot Supabase SQL Editor paste idempotent.
+-- Hand-written (NOT via drizzle-kit generate — drizzle/meta is intentionally
+-- partial: only 0000_snapshot.json + a 3-entry journal, so generate would
+-- diff against a stale snapshot and emit a wrong migration). Register the
+-- applied hash in scripts/bootstrap__drizzle_migrations.sql.
+--
+-- FOUNDER-GATED: apply via the Supabase SQL Editor after the (C) bundle
+-- deploys. Do NOT auto-apply.
+
+ALTER TABLE "developers" DROP COLUMN IF EXISTS "revenue_share_pct";

apps/web/scripts/bootstrap__drizzle_migrations.sql

@@ -108,13 +108,18 @@ INSERT INTO "drizzle"."__drizzle_migrations" (hash, created_at)
 SELECT 'dabd3540ed03fff9bc3f90ef12747b5b7e25597ef831d7f96b17654996b7732a', 1779993698000
 WHERE NOT EXISTS (SELECT 1 FROM "drizzle"."__drizzle_migrations" WHERE hash = 'dabd3540ed03fff9bc3f90ef12747b5b7e25597ef831d7f96b17654996b7732a');
 
+-- 0014_drop_revenue_share_pct  (hand-written, not in journal; ships with (C) 2026-06-07 — apply the .sql via SQL Editor alongside seeding this row, AFTER the (C) bundle deploys)
+INSERT INTO "drizzle"."__drizzle_migrations" (hash, created_at)
+SELECT 'e720ecaacc420f2c5d4af891d096d23788a6ad68f279f331e87c2a9d29bf43df', 1780790400000
+WHERE NOT EXISTS (SELECT 1 FROM "drizzle"."__drizzle_migrations" WHERE hash = 'e720ecaacc420f2c5d4af891d096d23788a6ad68f279f331e87c2a9d29bf43df');
+
 COMMIT;
 
 -- POST-RUN VERIFICATION (run separately after the bootstrap):
 --   SELECT id, substr(hash, 1, 12) AS hash_prefix, created_at
 --   FROM "drizzle"."__drizzle_migrations"
 --   ORDER BY created_at;
 --
--- Expected: 14 rows. MAX(created_at) = 1779993698000 (0013_developer_api_keys).
+-- Expected: 15 rows. MAX(created_at) = 1780790400000 (0014_drop_revenue_share_pct).
 -- All three journal folderMillis (1773459112883, 1776513600000, 1777737600000)
 -- are < MAX, so drizzle-kit migrate will correctly skip them.

apps/web/scripts/seed-admin.ts

@@ -48,7 +48,6 @@ async function main() {
       slug: "lexwhiting",
       supabaseUserId,
       tier: "enterprise",
-      revenueSharePct: 97,
       publicProfile: true,
       publicBio: "Founder, Alerterra",
     })

apps/web/src/app/(dashboard)/dashboard/settings/page.tsx

@@ -32,7 +32,6 @@ interface DeveloperProfile {
   name: string | null
   slug: string | null
   tier: string
-  revenueSharePct: number
   stripeConnectStatus: string
   stripeSubscriptionId: string | null
   balanceCents: number

apps/web/src/app/api/auth/developer/me/route.ts

@@ -37,7 +37,6 @@ export async function GET(request: NextRequest) {
         name: developers.name,
         slug: developers.slug,
         tier: developers.tier,
-        revenueSharePct: developers.revenueSharePct,
         stripeConnectStatus: developers.stripeConnectStatus,
         stripeSubscriptionId: developers.stripeSubscriptionId,
         balanceCents: developers.balanceCents,

apps/web/src/app/api/proxy/[slug]/route.ts

@@ -114,7 +114,6 @@ async function authenticateProxyRequest(
         developerId: string
         pricingConfig: unknown
       }
-      developerRevenueSharePct: number
     }
   | { ok: false; error: NextResponse }
 > {
@@ -153,11 +152,9 @@ async function authenticateProxyRequest(
       proxyEndpoint: tools.proxyEndpoint,
       developerId: tools.developerId,
       pricingConfig: tools.pricingConfig,
-      revenueSharePct: developers.revenueSharePct,
     })
     .from(apiKeys)
     .innerJoin(tools, eq(apiKeys.toolId, tools.id))
-    .innerJoin(developers, eq(tools.developerId, developers.id))
     .where(eq(apiKeys.keyHash, keyHash))
     .limit(1)
 
@@ -226,7 +223,6 @@ async function authenticateProxyRequest(
       developerId: row.developerId,
       pricingConfig: row.pricingConfig,
     },
-    developerRevenueSharePct: row.revenueSharePct,
   }
 }
 
@@ -1206,10 +1202,8 @@ async function handleMppProxy(
       proxyEndpoint: tools.proxyEndpoint,
       developerId: tools.developerId,
       pricingConfig: tools.pricingConfig,
-      revenueSharePct: developers.revenueSharePct,
     })
     .from(tools)
-    .innerJoin(developers, eq(tools.developerId, developers.id))
     .where(eq(tools.slug, slug))
     .limit(1)
 
@@ -1482,10 +1476,8 @@ async function lookupToolBySlug(slug: string, requestId: string) {
       proxyEndpoint: tools.proxyEndpoint,
       developerId: tools.developerId,
       pricingConfig: tools.pricingConfig,
-      revenueSharePct: developers.revenueSharePct,
     })
     .from(tools)
-    .innerJoin(developers, eq(tools.developerId, developers.id))
     .where(eq(tools.slug, slug))
     .limit(1)
 
@@ -1507,7 +1499,6 @@ async function lookupToolBySlug(slug: string, requestId: string) {
     proxyEndpoint: toolRow.proxyEndpoint as string,
     developerId: toolRow.developerId,
     pricingConfig: toolRow.pricingConfig,
-    revenueSharePct: toolRow.revenueSharePct,
   }
   return { ok: true as const, toolRow: verifiedTool }
 }
@@ -1578,7 +1569,6 @@ async function forwardAndBill(
     proxyEndpoint: string
     developerId: string
     pricingConfig: unknown
-    revenueSharePct: number
   },
   paymentMethod: PaymentMethod,
   costCents: number,

apps/web/src/app/api/sdk/meter-with-metadata/route.ts

@@ -133,14 +133,12 @@ export const POST = withCors(async function POST(request: NextRequest) {
       )
     }
 
-    // Get tool + developer to find revenue share percentage
+    // Get the tool's developerId for crediting
     const [toolDev] = await db
       .select({
         developerId: tools.developerId,
-        revenueSharePct: developers.revenueSharePct,
       })
       .from(tools)
-      .innerJoin(developers, eq(tools.developerId, developers.id))
       .where(eq(tools.id, body.toolId))
       .limit(1)
 

apps/web/src/app/api/sdk/meter/route.ts

@@ -12,20 +12,6 @@ import { logger } from '@/lib/logger'
 import { withCors, OPTIONS as corsOptions } from '@/lib/middleware/cors'
 import { suspiciousActivityEmail } from '@/lib/email'
 import { sendNotificationEmail } from '@/lib/notifications'
-import { getRedis, tryRedis } from '@/lib/redis'
-
-/** Monthly ops limits per tier */
-const TIER_OPS_LIMITS: Record<string, number> = {
-  standard: 50_000,
-  builder: 200_000,
-  starter: 200_000, // legacy alias — treat as builder
-  growth: 200_000, // legacy alias — treat as builder
-  scale: 2_000_000,
-  enterprise: 10_000_000,
-}
-
-/** Legacy — progressive take rate now calculated at payout time. See lib/pricing.ts */
-const OVERAGE_REVENUE_SHARE_PCT = 100 // developer keeps 100% at invocation time; take rate applied at payout
 
 export const maxDuration = 60
 export { corsOptions as OPTIONS }
@@ -89,7 +75,6 @@ export const POST = withCors(async function POST(request: NextRequest) {
     const [toolDev] = await db
       .select({
         developerId: tools.developerId,
-        revenueSharePct: developers.revenueSharePct,
         developerTier: developers.tier,
       })
       .from(tools)
@@ -101,39 +86,6 @@ export const POST = withCors(async function POST(request: NextRequest) {
       return errorResponse('Tool not found.', 404, 'NOT_FOUND')
     }
 
-    // ── Overage: progressive take rate applied at payout time, not here ─
-    let effectiveRevenueSharePct = toolDev.revenueSharePct
-    const tier = toolDev.developerTier ?? 'standard'
-    const tierLimit = TIER_OPS_LIMITS[tier] ?? TIER_OPS_LIMITS.standard
-
-    if (effectiveRevenueSharePct === 100 && tier === 'standard') {
-      // Free tier — check if over monthly ops limit using Redis counter
-      const redis = getRedis()
-      const now = new Date()
-      const monthKey = `dev-ops:${toolDev.developerId}:${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`
-      const monthOps = await tryRedis(() => redis.get<number>(monthKey))
-
-      if (monthOps !== null && monthOps >= tierLimit) {
-        // Over limit — apply platform fee on this invocation
-        effectiveRevenueSharePct = OVERAGE_REVENUE_SHARE_PCT
-        logger.info('meter.overage_fee_applied', {
-          developerId: toolDev.developerId,
-          tier,
-          monthOps,
-          tierLimit,
-          effectiveRevenueSharePct,
-        })
-      }
-
-      // Increment the monthly ops counter (fire-and-forget)
-      tryRedis(async () => {
-        const ttl = 33 * 24 * 60 * 60 // 33 days — covers any month + buffer
-        const exists = await redis.exists(monthKey)
-        await redis.incr(monthKey)
-        if (!exists) await redis.expire(monthKey, ttl)
-      })
-    }
-
     // Apply tiered rate limit based on developer's plan
     const tieredRl = await checkTieredRateLimit(
       `sdk-meter:${body.consumerId}`,
@@ -310,7 +262,6 @@ export const POST = withCors(async function POST(request: NextRequest) {
         costCents: body.costCents,
         latencyMs: body.latencyMs ?? null,
         developerId: toolDev.developerId,
-        revenueSharePct: effectiveRevenueSharePct,
         referralCode: body.referralCode,
         isFlagged: fraudResult.flagged,
       })

apps/web/src/lib/__tests__/db-schema.test.ts

@@ -54,10 +54,6 @@ describe('developers table schema', () => {
     expect(schema.developers.tier).toBeDefined()
   })
 
-  it('has revenueSharePct column', () => {
-    expect(schema.developers.revenueSharePct).toBeDefined()
-  })
-
   it('has stripeSubscriptionId column', () => {
     expect(schema.developers.stripeSubscriptionId).toBeDefined()
   })

apps/web/src/lib/__tests__/metering.test.ts

@@ -181,7 +181,6 @@ describe('Metering', () => {
           costCents: 100,
           latencyMs: 50,
           developerId: 'd1',
-          revenueSharePct: 95,
         })
       ).not.toThrow()
     })