Spend by product for pay-as-you-go organizations, and inference scans that stop redoing work

Pay-as-you-go organizations get a spend breakdown across agent session storage, per-scanner risk scanning, and MCP gateway egress, priced at current list rates with daily, weekly, monthly, and cumulative views over billing-cycle or custom date ranges. These are usage estimates rather than invoices, and organizations on other plans see the ordinary usage explorer without the spend section. Anthropic inference hooks also stop rescanning transcript history they already cleared: only accepted content is skipped on later deliveries, while denied or interrupted scans are retried and corrected transcripts can recover.

Features

• Spend by metered product #6600 - A stacked billing chart breaks spend down across agent session storage, per-scanner risk scanning, and MCP egress using exact server-calculated estimates at current pay-as-you-go list prices, with daily, weekly, monthly, cumulative, product, and date-range controls. Inference, credits, discounts, taxes, and billing adjustments are excluded, and these ordinary-usage estimates are not invoices. Spend estimates are restricted to pay-as-you-go organizations through server-owned availability: other plans return unsupported_plan with an empty product list, and the dashboard hides the spend section while keeping the usage explorer. (Author: @disintegrator)
• Spend visualization for every account type #6602 - Billing visualization covers organizations without a Stripe subscription, reusing the same exact storage, per-scanner risk, and MCP egress estimates with product selection, billing-cycle and custom ranges, grouping, and cumulative views. Amounts display rounded to two decimals while the arithmetic stays exact, a nonzero amount that rounds to zero gets a sub-cent marker instead of reading as zero, and the last successful estimate is preserved while ranges change or a new range fails to load. Storage, risk scanning, and MCP keep consistent theme-aware colors across spend and usage graphs. (Author: @disintegrator)

Bug fixes

• Inference scans keep what they already cleared #6573 - Anthropic inference hooks distinguish archived transcript attempts from successfully evaluated history, so only accepted content is skipped on later deliveries while denied or interrupted assistant and tool scans are retried and corrected transcripts can recover. Concurrent deliveries use optimistic checkpoint updates without holding database connections during scans, and a repeated transcript longer than 512 messages no longer appends duplicate archive rows. Unknown or ambiguous history is conservatively rescanned within the existing request deadline. (Author: @danielkov)
• Checkout prices and trial conversion stay aligned #6580 - Checkout includes all pay-as-you-go metered prices, billing setup stays resumable, and trial conversion applies only after a confirmed completion. Delayed completion and subscription deletion no longer lose inference-key conversion or post-checkout cleanup, existing Checkout sessions are preserved, and setup actions show only to eligible users. (Author: @disintegrator)

Rolling out

• Okta tenant connections #6545 - An identityProviderConnections management API for connecting an organization's Okta tenant, behind the okta-connections flag and unavailable until GRAM_IDENTITY_PROVIDER_SIGNING_CREDENTIAL_ID is set. (Author: @daviddanialy)
• Okta applications reconciled on a schedule #6553 - Each verified Okta connection's applications and assignments reconcile into a snapshot on a schedule, with syncApplications and listApplications on the same gated API. (Author: @daviddanialy)