R4.3 — Per-product usage endpoint PROD

Surfaced during Gate 2 (fixed mid-run)

• get-coffee + demo had no nix_cafe subscription rows on Supabase. The 04-28 Render→Supabase migration carried schemas but no operator data; the seed script seed-supabase-getcoffee.ts creates tenant + tenant_user + cafe.tenant_config but not the subscriptions row. Without it, the Subscriptions card never showed nix_cafe at all and PATCH-limit calls 404'd. One-shot SQL inserted both: nix_cafe / cafe_pro / active with default limits_json from the plan.
• Test cleanup failed on JSON literal escape in prodSql(). Captured limits_json as a JSON string, tried to UPDATE … SET limits_json = ''::jsonb through the bash/node-e/knex.raw chain — Postgres rejected with "Token 'max_shops' is invalid" because cmd.exe stripped the quotes. Switched cleanup to a SELECT-into-UPDATE pattern that resolves the plan's defaults inside Postgres: UPDATE subscriptions SET limits_json = (SELECT limits_json FROM plans WHERE code='cafe_pro'). No JSON literal needs to traverse the shell. Documented in project_prodsql_escape_limits.md.

nix-outdoor-sales-backend @ 09562a2:
  src/admin/subscription.service.ts                — getProductUsage(tenantId, productCode):
                                                      branches Cafe→cafe.orders, Outdoor→activities,
                                                      others→404 "not tracked". Reads limit from
                                                      subscriptions.limits_json; 0/missing → null.
  src/admin/subscription.router.ts                 — GET /:productCode/usage

nix-outdoor-sales-admin @ ca38c30 (Cpanel):
  src/components/UsageBar.vue                      — NEW. Live progress bar, auto-fetches on
                                                      mount, green/amber/red on threshold,
                                                      shows ∞ when limit is null.
  src/views/TenantDetailView.vue                   — UsageBar mounted above the Limits block
                                                      in each expanded subscription row.

D:/NIX Software/:
  test-r4-3-prod.mjs                               — NEW E2E (8 checks). Seeds 3 paid + 1
                                                      refunded order to verify the state filter.
                                                      Cleanup uses SELECT-into-UPDATE to avoid
                                                      JSON-literal-through-bash escape issues.

prod data fix (no commit, one-shot):
  subscriptions(tenant_id=get-coffee, product_code='nix_cafe', plan_code='cafe_pro')
  subscriptions(tenant_id=demo,       product_code='nix_cafe', plan_code='cafe_pro')
    — backfilled rows the Render→Supabase migration didn't carry.

R4.1 ─ Multi-shop activation E2E              ✓ shipped (2026-04-29)
R4.x ─ Carried-forward follow-ups bundle      ✓ shipped (2026-04-29)
R4.2 ─ Impersonation                           ✓ shipped (2026-04-29)
R4.3 ─ Per-product usage endpoint              ✓ shipped (2026-04-29)
R4.4 ─ Drop legacy tenant_limits/plan_code     pending (last)

Open follow-ups discovered by R4.3:
  - seed-supabase-getcoffee.ts should also insert a default subscription row
    (the Render→Supabase migration left tenants without subscriptions).
  - Pro Cafe usage shows 0 (Pro orders live in Odoo, not cafe.orders) —
    real fix needs a Pro mirror table; see project_pro_tier_odoo_latency.md.