fix(webapp): stop unrelated org flag saves from pinning the run-ops mint kind

stampMintKindFlip injected the default mint kind into every org feature-flag save, so an unrelated flag change wrote an explicit per-org runOpsMintKind override, pinning the org to that kind and making a later global flip silently skip it. Only stamp when the save actually sets runOpsMintKind.

Author: d-cs

apps/webapp/app/v3/runOpsMigration/mintFlipGrace.test.ts

@@ -134,14 +134,17 @@ describe("stampMintKindFlip", () => {
     expect(result.runOpsMintKindFlippedAt).toBe(new Date(now).toISOString());
   });
 
-  it("defaults outgoing kind to 'cuid' when runOpsMintKind is absent", () => {
+  it("leaves runOpsMintKind untouched when the save omits it (unrelated flag change: no inject, no spurious flip)", () => {
     const existing = { runOpsMintKind: "runOpsId" };
-    const outgoing: Record<string, unknown> = {};
+    const outgoing: Record<string, unknown> = { someOtherFlag: true };
     const result = stampMintKindFlip(existing, outgoing, T, GRACE_MS);
 
-    expect(result.runOpsMintKind).toBe("cuid");
-    expect(result.runOpsMintKindPrev).toBe("runOpsId");
-    expect(result.runOpsMintKindFlippedAt).toBe(new Date(T).toISOString());
+    // Must not inject a default kind or stamp a flip: doing so would pin the org to an explicit
+    // per-org override and make a later global flip silently skip it.
+    expect(result.runOpsMintKind).toBeUndefined();
+    expect(result.runOpsMintKindPrev).toBeUndefined();
+    expect(result.runOpsMintKindFlippedAt).toBeUndefined();
+    expect(result.someOtherFlag).toBe(true);
   });
 
   it("treats a malformed existing flippedAt as no stamp", () => {

apps/webapp/app/v3/runOpsMigration/mintFlipGrace.ts

@@ -75,9 +75,13 @@ export function stampMintKindFlip(
   nowMs: number,
   graceMs: number
 ): Record<string, unknown> {
+  // Only act when the save actually SETS runOpsMintKind. Omitting it (an unrelated flag change)
+  // must not inject the default kind, which would pin the org and make a later global flip skip it.
+  const outgoingKind = readMintKind(outgoingFlags, "runOpsMintKind");
+  if (outgoingKind === undefined) {
+    return outgoingFlags;
+  }
   const storedKind = readMintKind(existingFlags ?? {}, "runOpsMintKind") ?? DEFAULT_MINT_KIND;
-  const outgoingKind = readMintKind(outgoingFlags, "runOpsMintKind") ?? DEFAULT_MINT_KIND;
-  outgoingFlags.runOpsMintKind = outgoingKind;
 
   if (outgoingKind !== storedKind) {
     // Genuine target change: serve the currently-effective kind through the new grace window.