- invoice.paid classified welcome-vs-renewal via emailDeliveredAt (durable,
webhook-order independent) through new classifySubscriptionEmail() - the old
isNewLicense/row-existence signal broke under Stripe's real event order
(subscription.created pre-creates the row before the first invoice).
- renderLicenseEmail() extracted pure; first purchases now get 'Welcome to
DashCaddy Premium' with unlocks panel (SSO/Recipes/Swarm/auto-renew) and
3-step getting-started; renewal copy byte-identical (test-pinned).
- 9 new tests (37 total): behavioral classifier coverage, rendered-content
assertions both variants, store flag regression, mkdtemp-sandboxed.
- Codex judge: A, zero blockers (r5; prior rounds D-D-D-C drove the fixes).
Verdict: run output 'A' with empty Blockers (direct codex exec, 2026-09-22).
