diff --git a/README.md b/README.md
index c5400f0..000b42d 100644
--- a/README.md
+++ b/README.md
@@ -57,6 +57,12 @@ CourseBuilder's `MerchantProduct` and `MerchantPrice` rows, a `month` or `year`
 `billingInterval`, and the database must contain the Stripe `MerchantAccount`
 row.
 
+Create and maintain those records from the builder admin at `/admin/subscriptions`. The admin
+creates the Stripe product and recurring price together with the CourseBuilder `Product`, `Price`,
+`MerchantProduct`, and `MerchantPrice` mappings. Changing amount or interval creates a replacement
+Stripe price and retires the previous price. Phase 0 mutations require local Docker, an administrator
+session, and a Stripe test-mode secret; beta is read-only and production remains blocked.
+
 Run the app and the Inngest dev server in separate terminals:
 
 ```bash
diff --git a/apps/builder-egghead/src/app/admin/layout.tsx b/apps/builder-egghead/src/app/admin/layout.tsx
index 4bb7457..20817fe 100644
--- a/apps/builder-egghead/src/app/admin/layout.tsx
+++ b/apps/builder-egghead/src/app/admin/layout.tsx
@@ -10,7 +10,7 @@ import {
 	SidebarTrigger,
 } from '@/components/ui/sidebar'
 import { getServerAuthSession } from '@/server/auth'
-import { CalendarIcon, MailIcon, MicIcon, TagIcon } from 'lucide-react'
+import { CalendarIcon, CreditCardIcon, MailIcon, MicIcon, TagIcon } from 'lucide-react'
 
 const adminSidebar = [
 	{
@@ -33,6 +33,11 @@ const adminSidebar = [
 		href: '/admin/events',
 		icon: CalendarIcon,
 	},
+	{
+		label: 'Subscriptions',
+		href: '/admin/subscriptions',
+		icon: CreditCardIcon,
+	},
 ]
 
 const AdminLayout = async ({ children }: { children: React.ReactNode }) => {
diff --git a/apps/builder-egghead/src/app/admin/subscriptions/actions.ts b/apps/builder-egghead/src/app/admin/subscriptions/actions.ts
new file mode 100644
index 0000000..f0c884c
--- /dev/null
+++ b/apps/builder-egghead/src/app/admin/subscriptions/actions.ts
@@ -0,0 +1,56 @@
+'use server'
+
+import { revalidatePath } from 'next/cache'
+import {
+	createSubscriptionProduct,
+	updateSubscriptionProduct,
+} from '@/lib/subscription-products'
+import { parseSubscriptionProductForm } from '@/lib/subscription-products-contracts'
+import { z } from 'zod'
+
+export type SubscriptionProductActionState = {
+	status: 'idle' | 'error' | 'success'
+	message: string | null
+}
+
+
+function actionErrorMessage(error: unknown) {
+	if (error instanceof z.ZodError) {
+		return error.issues.at(0)?.message ?? 'Check the subscription product values.'
+	}
+	return error instanceof Error ? error.message : 'Subscription product update failed.'
+}
+
+export async function createSubscriptionProductAction(
+	_previousState: SubscriptionProductActionState,
+	formData: FormData,
+): Promise<SubscriptionProductActionState> {
+	try {
+		const input = parseSubscriptionProductForm(formData)
+		await createSubscriptionProduct(input)
+		revalidatePath('/admin/subscriptions')
+		return {
+			status: 'success',
+			message: `${input.name} was created in CourseBuilder and Stripe.`,
+		}
+	} catch (error) {
+		return { status: 'error', message: actionErrorMessage(error) }
+	}
+}
+
+export async function updateSubscriptionProductAction(
+	_previousState: SubscriptionProductActionState,
+	formData: FormData,
+): Promise<SubscriptionProductActionState> {
+	try {
+		const input = parseSubscriptionProductForm(formData)
+		await updateSubscriptionProduct(input)
+		revalidatePath('/admin/subscriptions')
+		return {
+			status: 'success',
+			message: `${input.name} was updated in CourseBuilder and Stripe.`,
+		}
+	} catch (error) {
+		return { status: 'error', message: actionErrorMessage(error) }
+	}
+}
diff --git a/apps/builder-egghead/src/app/admin/subscriptions/page.tsx b/apps/builder-egghead/src/app/admin/subscriptions/page.tsx
new file mode 100644
index 0000000..f0d8911
--- /dev/null
+++ b/apps/builder-egghead/src/app/admin/subscriptions/page.tsx
@@ -0,0 +1,29 @@
+import type { Metadata } from 'next'
+import { SubscriptionAdminClient } from '@/app/admin/subscriptions/subscription-admin-client'
+import { getSubscriptionProductAdminData } from '@/lib/subscription-products'
+
+export const metadata: Metadata = {
+	title: 'Admin - Subscriptions',
+	description: 'Manage Egghead subscription products and Stripe prices.',
+}
+
+export default async function AdminSubscriptionsPage() {
+	const data = await getSubscriptionProductAdminData()
+
+	return (
+		<div className="container mx-auto grid max-w-5xl gap-8 px-4 py-8">
+			<header className="grid gap-3">
+				<p className="text-muted-foreground text-xs font-semibold tracking-[0.18em] uppercase">
+					Commerce configuration
+				</p>
+				<h1 className="text-4xl font-bold tracking-tight">Subscriptions</h1>
+				<p className="text-muted-foreground max-w-2xl text-base">
+					One control surface for CourseBuilder products, recurring Stripe prices, and merchant
+					mappings. Price or interval changes create a new Stripe price and retire the previous
+					one.
+				</p>
+			</header>
+			<SubscriptionAdminClient data={data} />
+		</div>
+	)
+}
diff --git a/apps/builder-egghead/src/app/admin/subscriptions/subscription-admin-client.tsx b/apps/builder-egghead/src/app/admin/subscriptions/subscription-admin-client.tsx
new file mode 100644
index 0000000..369e1b2
--- /dev/null
+++ b/apps/builder-egghead/src/app/admin/subscriptions/subscription-admin-client.tsx
@@ -0,0 +1,277 @@
+'use client'
+
+import { useActionState } from 'react'
+import {
+	createSubscriptionProductAction,
+	updateSubscriptionProductAction,
+	type SubscriptionProductActionState,
+} from '@/app/admin/subscriptions/actions'
+import type {
+	SubscriptionProductAdminData,
+	SubscriptionProductAdminItem,
+} from '@/lib/subscription-products'
+import { AlertCircleIcon, CheckCircle2Icon, PlusIcon, SaveIcon } from 'lucide-react'
+
+import { Alert, AlertDescription, AlertTitle } from '@coursebuilder/ui/primitives/alert'
+import { Badge } from '@coursebuilder/ui/primitives/badge'
+import { Button } from '@coursebuilder/ui/primitives/button'
+import {
+	Card,
+	CardContent,
+	CardDescription,
+	CardHeader,
+	CardTitle,
+} from '@coursebuilder/ui/primitives/card'
+import { Input } from '@coursebuilder/ui/primitives/input'
+import { Label } from '@coursebuilder/ui/primitives/label'
+import { Textarea } from '@coursebuilder/ui/primitives/textarea'
+
+const initialActionState: SubscriptionProductActionState = {
+	status: 'idle',
+	message: null,
+}
+
+function ActionMessage({ state }: { state: SubscriptionProductActionState }) {
+	if (!state.message) return null
+
+	return (
+		<p
+			aria-live="polite"
+			className={
+				state.status === 'error'
+					? 'text-destructive text-sm font-medium'
+					: 'text-sm font-medium text-emerald-700 dark:text-emerald-400'
+			}
+		>
+			{state.message}
+		</p>
+	)
+}
+
+function FieldLabel({ children, htmlFor }: { children: React.ReactNode; htmlFor: string }) {
+	return (
+		<Label className="text-xs font-semibold tracking-wide uppercase" htmlFor={htmlFor}>
+			{children}
+		</Label>
+	)
+}
+
+function ProductFields({
+	idPrefix,
+	product,
+}: {
+	idPrefix: string
+	product?: SubscriptionProductAdminItem
+}) {
+	return (
+		<div className="grid gap-5">
+			<div className="grid gap-2">
+				<FieldLabel htmlFor={`${idPrefix}-name`}>Name</FieldLabel>
+				<Input
+					defaultValue={product?.name ?? 'egghead Annual Membership'}
+					id={`${idPrefix}-name`}
+					maxLength={90}
+					name="name"
+					required
+				/>
+			</div>
+			<div className="grid gap-2">
+				<FieldLabel htmlFor={`${idPrefix}-description`}>Description</FieldLabel>
+				<Textarea
+					defaultValue={product?.description ?? 'Annual access to every egghead course and lesson.'}
+					id={`${idPrefix}-description`}
+					maxLength={500}
+					name="description"
+					rows={3}
+				/>
+			</div>
+			<div className="grid gap-4 sm:grid-cols-3">
+				<div className="grid gap-2">
+					<FieldLabel htmlFor={`${idPrefix}-price`}>Price (USD)</FieldLabel>
+					<Input
+						defaultValue={product?.price ?? 150}
+						id={`${idPrefix}-price`}
+						min="0.01"
+						name="price"
+						required
+						step="0.01"
+						type="number"
+					/>
+				</div>
+				<div className="grid gap-2">
+					<FieldLabel htmlFor={`${idPrefix}-interval`}>Interval</FieldLabel>
+					<select
+						className="border-input bg-background ring-offset-background focus-visible:ring-ring h-10 rounded-md border px-3 text-sm focus-visible:ring-2 focus-visible:ring-offset-2 focus-visible:outline-none"
+						defaultValue={product?.billingInterval ?? 'year'}
+						id={`${idPrefix}-interval`}
+						name="billingInterval"
+					>
+						<option value="month">Monthly</option>
+						<option value="year">Yearly</option>
+					</select>
+				</div>
+				<label
+					className="border-border bg-muted/30 flex min-h-10 cursor-pointer items-center gap-3 rounded-md border px-3 py-2 sm:self-end"
+					htmlFor={`${idPrefix}-active`}
+				>
+					<input
+						className="border-input accent-primary h-4 w-4 rounded"
+						defaultChecked={product?.active ?? true}
+						id={`${idPrefix}-active`}
+						name="active"
+						type="checkbox"
+					/>
+					<span className="text-sm font-medium">Active</span>
+				</label>
+			</div>
+		</div>
+	)
+}
+
+function CreateSubscriptionProduct({ disabled }: { disabled: boolean }) {
+	const [state, action, pending] = useActionState(
+		createSubscriptionProductAction,
+		initialActionState,
+	)
+
+	return (
+		<Card className="border-dashed">
+			<CardHeader>
+				<div className="flex items-center gap-3">
+					<div className="bg-primary text-primary-foreground grid size-10 place-items-center rounded-full">
+						<PlusIcon className="size-5" />
+					</div>
+					<div>
+						<CardTitle>Create subscription product</CardTitle>
+						<CardDescription>
+							Creates the Stripe product and price plus every CourseBuilder mapping.
+						</CardDescription>
+					</div>
+				</div>
+			</CardHeader>
+			<CardContent>
+				<form action={action} className="grid gap-5">
+					<fieldset disabled={disabled || pending}>
+						<ProductFields idPrefix="new-subscription" />
+					</fieldset>
+					<div className="flex items-center justify-between gap-4">
+						<ActionMessage state={state} />
+						<Button disabled={disabled || pending} type="submit">
+							<PlusIcon className="mr-2 size-4" />
+							{pending ? 'Creating…' : 'Create product'}
+						</Button>
+					</div>
+				</form>
+			</CardContent>
+		</Card>
+	)
+}
+
+function SubscriptionProductCard({
+	disabled,
+	product,
+}: {
+	disabled: boolean
+	product: SubscriptionProductAdminItem
+}) {
+	const [state, action, pending] = useActionState(
+		updateSubscriptionProductAction,
+		initialActionState,
+	)
+
+	return (
+		<Card>
+			<CardHeader className="border-border border-b">
+				<div className="flex flex-wrap items-start justify-between gap-4">
+					<div className="grid gap-2">
+						<div className="flex flex-wrap items-center gap-2">
+							<CardTitle>{product.name}</CardTitle>
+							<Badge variant={product.active ? 'default' : 'secondary'}>
+								{product.active ? 'Active' : 'Inactive'}
+							</Badge>
+							<Badge variant={product.synced ? 'outline' : 'destructive'}>
+								{product.synced ? 'Stripe synced' : 'Review sync'}
+							</Badge>
+						</div>
+						<CardDescription className="font-mono text-xs">{product.id}</CardDescription>
+					</div>
+					<div className="text-muted-foreground grid gap-1 text-right font-mono text-xs">
+						<span>{product.stripeProductId ?? 'Missing Stripe product'}</span>
+						<span>{product.stripePriceId ?? 'Missing Stripe price'}</span>
+					</div>
+				</div>
+			</CardHeader>
+			<CardContent className="pt-6">
+				<form action={action} className="grid gap-5">
+					<input name="productId" type="hidden" value={product.id} />
+					<fieldset disabled={disabled || pending}>
+						<ProductFields idPrefix={product.id} product={product} />
+					</fieldset>
+					<div className="flex items-center justify-between gap-4">
+						<ActionMessage state={state} />
+						<Button disabled={disabled || pending} type="submit" variant="outline">
+							<SaveIcon className="mr-2 size-4" />
+							{pending ? 'Saving…' : 'Save changes'}
+						</Button>
+					</div>
+				</form>
+			</CardContent>
+		</Card>
+	)
+}
+
+export function SubscriptionAdminClient({ data }: { data: SubscriptionProductAdminData }) {
+	return (
+		<div className="grid gap-8">
+			{data.writesAllowed ? (
+				<Alert className="border-emerald-600/30 bg-emerald-500/5">
+					<CheckCircle2Icon className="size-4" />
+					<AlertTitle>Local Stripe test mode</AlertTitle>
+					<AlertDescription>
+						Product changes write to local Docker and Stripe test mode only.
+					</AlertDescription>
+				</Alert>
+			) : (
+				<Alert variant="destructive">
+					<AlertCircleIcon className="size-4" />
+					<AlertTitle>Read-only</AlertTitle>
+					<AlertDescription>
+						{data.writeRestriction ?? 'Subscription product writes are unavailable.'}
+					</AlertDescription>
+				</Alert>
+			)}
+
+			<CreateSubscriptionProduct disabled={!data.writesAllowed} />
+
+			<section aria-labelledby="subscription-products-heading" className="grid gap-4">
+				<div className="flex items-end justify-between gap-4">
+					<div>
+						<h2 className="text-2xl font-semibold" id="subscription-products-heading">
+							Subscription products
+						</h2>
+						<p className="text-muted-foreground text-sm">
+							{data.products.length} configured · Stripe {data.stripeMode} mode
+						</p>
+					</div>
+				</div>
+				{data.products.length ? (
+					<div className="grid gap-5">
+						{data.products.map((product) => (
+							<SubscriptionProductCard
+								disabled={!data.writesAllowed}
+								key={product.id}
+								product={product}
+							/>
+						))}
+					</div>
+				) : (
+					<Card>
+						<CardContent className="text-muted-foreground py-12 text-center">
+							No membership products are configured yet.
+						</CardContent>
+					</Card>
+				)}
+			</section>
+		</div>
+	)
+}
diff --git a/apps/builder-egghead/src/db/index.ts b/apps/builder-egghead/src/db/index.ts
index dc1880f..9c425a3 100644
--- a/apps/builder-egghead/src/db/index.ts
+++ b/apps/builder-egghead/src/db/index.ts
@@ -1,21 +1,85 @@
 import { stripeProvider } from '@/coursebuilder/stripe-provider'
 import { mysqlTable } from '@/db/mysql-table'
+import { isLocalDockerDatabase } from '@/db/runtime-guard'
 import { env } from '@/env.mjs'
 import { Client } from '@planetscale/database'
-import { MySqlDatabase } from 'drizzle-orm/mysql-core'
-import { drizzle } from 'drizzle-orm/planetscale-serverless'
+import type { MySqlDatabase } from 'drizzle-orm/mysql-core'
+import { drizzle as drizzleMySql } from 'drizzle-orm/mysql2'
+import { drizzle as drizzlePlanetScale } from 'drizzle-orm/planetscale-serverless'
+import type {
+	PlanetScalePreparedQueryHKT,
+	PlanetscaleQueryResultHKT,
+} from 'drizzle-orm/planetscale-serverless/session'
+import mysql, { type Pool } from 'mysql2/promise'
 
 import { DrizzleAdapter } from '@coursebuilder/adapter-drizzle'
 
 import * as schema from './schema'
 
-export const db = drizzle(
-	new Client({
-		url: env.DATABASE_URL,
-	}),
-	{ schema },
-)
+type BuilderDatabase = MySqlDatabase<
+	PlanetscaleQueryResultHKT,
+	PlanetScalePreparedQueryHKT,
+	typeof schema
+>
+
+type LocalPoolState = {
+	databaseUrl: string
+	pool: Pool
+}
+
+const databaseGlobal = globalThis as typeof globalThis & {
+	eggheadBuilderLocalPool?: LocalPoolState
+}
+
+function getLocalPool(databaseUrl: string) {
+	const current = databaseGlobal.eggheadBuilderLocalPool
+	if (current) {
+		if (current.databaseUrl !== databaseUrl) {
+			throw new Error('Restart the builder after changing its local DATABASE_URL.')
+		}
+		return current.pool
+	}
+
+	const pool = mysql.createPool(databaseUrl)
+	databaseGlobal.eggheadBuilderLocalPool = { databaseUrl, pool }
+	return pool
+}
+
+function createDatabase(): BuilderDatabase {
+	const databaseUrl = new URL(env.DATABASE_URL)
+	const localDocker = isLocalDockerDatabase({
+		host: databaseUrl.hostname,
+		database: databaseUrl.pathname.replace(/^\//, ''),
+	})
+	if (localDocker) {
+		const localDatabase = drizzleMySql(getLocalPool(env.DATABASE_URL), {
+			mode: 'default',
+			schema,
+		})
+		// Normalize the drivers here so callers keep one usable relational query surface.
+		return localDatabase as unknown as BuilderDatabase
+	}
 
-export const courseBuilderAdapter = DrizzleAdapter<
-	MySqlDatabase<any, any, any>
->(db, mysqlTable, stripeProvider)
+	return drizzlePlanetScale(
+		new Client({
+			url: env.DATABASE_URL,
+		}),
+		{ schema },
+	)
+}
+
+export const db = createDatabase()
+
+export async function closeBuilderDatabase() {
+	const current = databaseGlobal.eggheadBuilderLocalPool
+	if (!current) return
+
+	delete databaseGlobal.eggheadBuilderLocalPool
+	await current.pool.end()
+}
+
+export const courseBuilderAdapter = DrizzleAdapter<BuilderDatabase>(
+	db,
+	mysqlTable,
+	stripeProvider,
+)
diff --git a/apps/builder-egghead/src/db/runtime-guard.ts b/apps/builder-egghead/src/db/runtime-guard.ts
index 300a758..01058ea 100644
--- a/apps/builder-egghead/src/db/runtime-guard.ts
+++ b/apps/builder-egghead/src/db/runtime-guard.ts
@@ -109,3 +109,17 @@ export function assertBuilderDatabaseUrlForRuntime(
 		writesApproved: false,
 	};
 }
+
+export function assertBuilderCommerceWritesAllowed(
+	rawUrl = process.env["DATABASE_URL"] ?? DEFAULT_LOCAL_DOCKER_MYSQL_URL,
+): BuilderDatabaseSafety {
+	const safety = assertBuilderDatabaseUrlForRuntime(rawUrl);
+
+	if (safety.runtime !== "local" || !safety.localDockerOnly) {
+		throw new Error(
+			`Refusing builder commerce writes outside local Docker: runtime=${safety.runtime} host=${safety.host} database=${safety.database}`,
+		);
+	}
+
+	return safety;
+}
diff --git a/apps/builder-egghead/src/db/seed.ts b/apps/builder-egghead/src/db/seed.ts
index 2dfc469..acac014 100644
--- a/apps/builder-egghead/src/db/seed.ts
+++ b/apps/builder-egghead/src/db/seed.ts
@@ -1,4 +1,4 @@
-import { db } from '@/db/index'
+import { closeBuilderDatabase, db } from '@/db/index'
 import {
 	communicationChannel,
 	communicationPreferenceTypes,
@@ -164,3 +164,5 @@ for (const seedChannel of seededCommunicationChannels) {
 		await db.insert(communicationChannel).values(seedChannel)
 	}
 }
+
+await closeBuilderDatabase()
diff --git a/apps/builder-egghead/src/lib/subscription-products-contracts.ts b/apps/builder-egghead/src/lib/subscription-products-contracts.ts
new file mode 100644
index 0000000..f169fdd
--- /dev/null
+++ b/apps/builder-egghead/src/lib/subscription-products-contracts.ts
@@ -0,0 +1,59 @@
+import { z } from 'zod'
+
+const stripeTestSecretPattern = /^(?:rk|sk)_test_/
+
+const subscriptionPriceSchema = z.coerce
+	.number()
+	.positive('Price must be greater than zero.')
+	.max(1_000_000, 'Price is too large.')
+	.refine(
+		(value) => Math.abs(value * 100 - Math.round(value * 100)) < 1e-8,
+		'Price must have at most two decimal places.',
+	)
+
+export const subscriptionProductFormSchema = z.object({
+	productId: z.string().trim().min(1).optional(),
+	name: z.string().trim().min(2).max(90),
+	description: z.string().trim().max(500),
+	billingInterval: z.enum(['month', 'year']),
+	price: subscriptionPriceSchema,
+	active: z.boolean(),
+})
+
+export type SubscriptionProductFormInput = z.infer<
+	typeof subscriptionProductFormSchema
+>
+
+export function parseSubscriptionProductForm(
+	formData: FormData,
+): SubscriptionProductFormInput {
+	const productId = formData.get('productId')
+
+	return subscriptionProductFormSchema.parse({
+		...(typeof productId === 'string' && productId ? { productId } : {}),
+		name: formData.get('name'),
+		description: formData.get('description'),
+		billingInterval: formData.get('billingInterval'),
+		price: formData.get('price'),
+		active: formData.get('active') === 'on',
+	})
+}
+
+export function stripeUnitAmount(price: number) {
+	return Math.round(price * 100)
+}
+
+export type StripeAccountMode = 'live' | 'test' | 'unknown'
+
+export function stripeAccountMode(secret: string | undefined): StripeAccountMode {
+	if (!secret) return 'unknown'
+	if (stripeTestSecretPattern.test(secret)) return 'test'
+	if (/^(?:rk|sk)_live_/.test(secret)) return 'live'
+	return 'unknown'
+}
+
+export function assertStripeTestMode(secret: string | undefined) {
+	if (stripeAccountMode(secret) !== 'test') {
+		throw new Error('Subscription product writes require Stripe test mode.')
+	}
+}
diff --git a/apps/builder-egghead/src/lib/subscription-products.ts b/apps/builder-egghead/src/lib/subscription-products.ts
new file mode 100644
index 0000000..d77ce9c
--- /dev/null
+++ b/apps/builder-egghead/src/lib/subscription-products.ts
@@ -0,0 +1,379 @@
+import { env } from '@/env.mjs'
+import { stripeProvider } from '@/coursebuilder/stripe-provider'
+import { courseBuilderAdapter, db } from '@/db'
+import {
+	assertBuilderCommerceWritesAllowed,
+	assertBuilderDatabaseUrlForRuntime,
+} from '@/db/runtime-guard'
+import { merchantPrice, merchantProduct, prices, products } from '@/db/schema'
+import {
+	assertStripeTestMode,
+	stripeAccountMode,
+	type StripeAccountMode,
+	type SubscriptionProductFormInput,
+} from '@/lib/subscription-products-contracts'
+import { getServerAuthSession } from '@/server/auth'
+import { desc, eq, inArray } from 'drizzle-orm'
+import { z } from 'zod'
+
+import type { Product } from '@coursebuilder/core/schemas'
+
+const subscriptionProductFieldsSchema = z
+	.object({
+		billingInterval: z.enum(['month', 'year']).optional(),
+		description: z.string().nullable().optional(),
+		slug: z.string().optional(),
+	})
+	.passthrough()
+
+export type SubscriptionProductAdminItem = {
+	id: string
+	name: string
+	description: string
+	billingInterval: 'month' | 'year'
+	price: number
+	currency: string
+	active: boolean
+	localActive: boolean
+	stripeActive: boolean | null
+	synced: boolean
+	createdAt: string | null
+	stripeProductId: string | null
+	stripePriceId: string | null
+}
+
+export type SubscriptionProductAdminData = {
+	products: SubscriptionProductAdminItem[]
+	stripeMode: StripeAccountMode
+	writesAllowed: boolean
+	writeRestriction: string | null
+}
+
+type ProductCommerceRecords = {
+	merchantProduct: typeof merchantProduct.$inferSelect & { identifier: string }
+	merchantPrice: typeof merchantPrice.$inferSelect & {
+		identifier: string
+		priceId: string
+	}
+}
+
+async function requireSubscriptionAdmin() {
+	const { session, ability } = await getServerAuthSession()
+	if (!session?.user || !ability.can('manage', 'all')) {
+		throw new Error('Unauthorized')
+	}
+}
+
+
+function subscriptionWriteCapability() {
+	try {
+		assertBuilderCommerceWritesAllowed(env.DATABASE_URL)
+		assertStripeTestMode(env.STRIPE_SECRET_TOKEN)
+		return { writesAllowed: true, writeRestriction: null }
+	} catch (error) {
+		return {
+			writesAllowed: false,
+			writeRestriction:
+				error instanceof Error
+					? error.message
+					: 'Subscription product writes are unavailable.',
+		}
+	}
+}
+
+async function getProductCommerceRecords(
+	productId: string,
+): Promise<ProductCommerceRecords> {
+	const storedMerchantProduct = await db.query.merchantProduct.findFirst({
+		where: eq(merchantProduct.productId, productId),
+	})
+	if (!storedMerchantProduct?.identifier) {
+		throw new Error('Subscription product is missing its Stripe product mapping.')
+	}
+
+	const storedMerchantPrices = await db.query.merchantPrice.findMany({
+		where: eq(merchantPrice.merchantProductId, storedMerchantProduct.id),
+		orderBy: [desc(merchantPrice.status), desc(merchantPrice.createdAt)],
+	})
+	const storedMerchantPrice = storedMerchantPrices.at(0)
+	if (!storedMerchantPrice?.identifier || !storedMerchantPrice.priceId) {
+		throw new Error('Subscription product is missing its Stripe price mapping.')
+	}
+
+	return {
+		merchantProduct: {
+			...storedMerchantProduct,
+			identifier: storedMerchantProduct.identifier,
+		},
+		merchantPrice: {
+			...storedMerchantPrice,
+			identifier: storedMerchantPrice.identifier,
+			priceId: storedMerchantPrice.priceId,
+		},
+	}
+}
+
+async function setSubscriptionProductActive(input: {
+	active: boolean
+	productId: string
+	records: ProductCommerceRecords
+}) {
+	const paymentsAdapter = stripeProvider.options.paymentsAdapter
+	const status = input.active ? 1 : 0
+
+	await paymentsAdapter.updatePrice(input.records.merchantPrice.identifier, {
+		active: input.active,
+	})
+	await paymentsAdapter.updateProduct(input.records.merchantProduct.identifier, {
+		active: input.active,
+	})
+
+	await db.update(products).set({ status }).where(eq(products.id, input.productId))
+	await db.update(prices).set({ status }).where(eq(prices.productId, input.productId))
+	await db
+		.update(merchantProduct)
+		.set({ status })
+		.where(eq(merchantProduct.id, input.records.merchantProduct.id))
+	await db
+		.update(merchantPrice)
+		.set({ status: 0 })
+		.where(eq(merchantPrice.merchantProductId, input.records.merchantProduct.id))
+	if (input.active) {
+		await db
+			.update(merchantPrice)
+			.set({ status })
+			.where(eq(merchantPrice.id, input.records.merchantPrice.id))
+	}
+}
+
+async function prepareProductForAdapterUpdate(
+	productId: string,
+	records: ProductCommerceRecords,
+) {
+	await setSubscriptionProductActive({ active: true, productId, records })
+}
+
+export async function getSubscriptionProductAdminData(): Promise<SubscriptionProductAdminData> {
+	await requireSubscriptionAdmin()
+	assertBuilderDatabaseUrlForRuntime(env.DATABASE_URL)
+	const writeCapability = subscriptionWriteCapability()
+
+	const storedProducts = await db.query.products.findMany({
+		where: eq(products.type, 'membership'),
+		orderBy: desc(products.createdAt),
+		with: {
+			price: true,
+			merchantProduct: true,
+		},
+	})
+	const merchantProductIds = storedProducts.flatMap((product) =>
+		product.merchantProduct ? [product.merchantProduct.id] : [],
+	)
+	const storedMerchantPrices = merchantProductIds.length
+		? await db.query.merchantPrice.findMany({
+				where: inArray(merchantPrice.merchantProductId, merchantProductIds),
+				orderBy: [desc(merchantPrice.status), desc(merchantPrice.createdAt)],
+			})
+		: []
+	const merchantPricesByProduct = new Map<string, (typeof storedMerchantPrices)[number]>()
+	for (const storedMerchantPrice of storedMerchantPrices) {
+		if (!merchantPricesByProduct.has(storedMerchantPrice.merchantProductId)) {
+			merchantPricesByProduct.set(
+				storedMerchantPrice.merchantProductId,
+				storedMerchantPrice,
+			)
+		}
+	}
+
+	const paymentsAdapter = stripeProvider.options.paymentsAdapter
+	const adminProducts = await Promise.all(
+		storedProducts.map(async (product): Promise<SubscriptionProductAdminItem> => {
+			const fields = subscriptionProductFieldsSchema.safeParse(product.fields)
+			const merchantProductRecord = product.merchantProduct
+			const merchantPriceRecord = merchantProductRecord
+				? merchantPricesByProduct.get(merchantProductRecord.id)
+				: undefined
+			let stripeProductActive: boolean | null = null
+			let stripePriceActive: boolean | null = null
+			let stripeInterval: 'month' | 'year' | null = null
+			let stripePriceAmount: number | null = null
+			let currency = 'usd'
+
+			if (merchantProductRecord?.identifier && merchantPriceRecord?.identifier) {
+				try {
+					const [stripeProduct, stripePrice] = await Promise.all([
+						paymentsAdapter.getProduct(merchantProductRecord.identifier),
+						paymentsAdapter.getPrice(merchantPriceRecord.identifier),
+					])
+					stripeProductActive = stripeProduct.active
+					stripePriceActive = stripePrice.active
+					stripePriceAmount = stripePrice.unit_amount
+					currency = stripePrice.currency
+					const interval = stripePrice.recurring?.interval
+					if (interval === 'month' || interval === 'year') stripeInterval = interval
+				} catch {
+					stripeProductActive = null
+					stripePriceActive = null
+				}
+			}
+
+			const localPrice = Number(product.price?.unitAmount ?? 0)
+			const localInterval = fields.success
+				? (fields.data.billingInterval ?? 'year')
+				: 'year'
+			const localActive =
+				product.status === 1 &&
+				product.price?.status === 1 &&
+				merchantProductRecord?.status === 1 &&
+				merchantPriceRecord?.status === 1
+			const stripeActive =
+				stripeProductActive === null || stripePriceActive === null
+					? null
+					: stripeProductActive && stripePriceActive
+			const stripePriceInMajorUnits =
+				stripePriceAmount === null ? null : stripePriceAmount / 100
+			const synced =
+				stripeActive !== null &&
+				localActive === stripeActive &&
+				stripeInterval === localInterval &&
+				stripePriceInMajorUnits === localPrice
+
+			return {
+				id: product.id,
+				name: product.name,
+				description:
+					fields.success && typeof fields.data.description === 'string'
+						? fields.data.description
+						: '',
+				billingInterval: stripeInterval ?? localInterval,
+				price: stripePriceInMajorUnits ?? localPrice,
+				currency,
+				active: stripeActive ?? localActive,
+				localActive,
+				stripeActive,
+				synced,
+				createdAt: product.createdAt?.toISOString() ?? null,
+				stripeProductId: merchantProductRecord?.identifier ?? null,
+				stripePriceId: merchantPriceRecord?.identifier ?? null,
+			}
+		}),
+	)
+
+	return {
+		products: adminProducts,
+		stripeMode: stripeAccountMode(env.STRIPE_SECRET_TOKEN),
+		...writeCapability,
+	}
+}
+
+export async function createSubscriptionProduct(input: SubscriptionProductFormInput) {
+	await requireSubscriptionAdmin()
+	assertBuilderCommerceWritesAllowed(env.DATABASE_URL)
+	assertStripeTestMode(env.STRIPE_SECRET_TOKEN)
+
+	const product = await courseBuilderAdapter.createProduct({
+		name: input.name,
+		price: input.price,
+		quantityAvailable: -1,
+		type: 'membership',
+		state: 'published',
+		visibility: 'unlisted',
+		billingInterval: input.billingInterval,
+	})
+	if (!product?.price) {
+		throw new Error('CourseBuilder did not create the subscription product records.')
+	}
+
+	const records = await getProductCommerceRecords(product.id)
+	const fields = subscriptionProductFieldsSchema.parse(product.fields)
+	await db
+		.update(products)
+		.set({
+			fields: {
+				...fields,
+				billingInterval: input.billingInterval,
+				description: input.description,
+			},
+		})
+		.where(eq(products.id, product.id))
+	await stripeProvider.options.paymentsAdapter.updateProduct(
+		records.merchantProduct.identifier,
+		{
+			default_price: records.merchantPrice.identifier,
+			description: input.description,
+		},
+	)
+	await setSubscriptionProductActive({
+		active: input.active,
+		productId: product.id,
+		records,
+	})
+
+	return product.id
+}
+
+export async function updateSubscriptionProduct(input: SubscriptionProductFormInput) {
+	await requireSubscriptionAdmin()
+	assertBuilderCommerceWritesAllowed(env.DATABASE_URL)
+	assertStripeTestMode(env.STRIPE_SECRET_TOKEN)
+	if (!input.productId) throw new Error('Subscription product id is required.')
+
+	const currentProduct = await courseBuilderAdapter.getProduct(input.productId, false)
+	if (!currentProduct?.price || currentProduct.type !== 'membership') {
+		throw new Error('Subscription product was not found.')
+	}
+
+	const currentRecords = await getProductCommerceRecords(currentProduct.id)
+	const wasActive =
+		currentProduct.status === 1 &&
+		currentProduct.price.status === 1 &&
+		currentRecords.merchantProduct.status === 1 &&
+		currentRecords.merchantPrice.status === 1
+	await prepareProductForAdapterUpdate(currentProduct.id, currentRecords)
+
+	let updatedProduct: Product | null = null
+	try {
+		updatedProduct = await courseBuilderAdapter.updateProduct({
+			...currentProduct,
+			name: input.name,
+			status: 1,
+			quantityAvailable: -1,
+			type: 'membership',
+			fields: {
+				...currentProduct.fields,
+				billingInterval: input.billingInterval,
+				description: input.description,
+			},
+			price: {
+				...currentProduct.price,
+				status: 1,
+				unitAmount: input.price,
+			},
+		})
+	} catch (error) {
+		if (!wasActive) {
+			await setSubscriptionProductActive({
+				active: false,
+				productId: currentProduct.id,
+				records: currentRecords,
+			})
+		}
+		throw error
+	}
+	if (!updatedProduct?.price) {
+		throw new Error('CourseBuilder did not update the subscription product records.')
+	}
+
+	const updatedRecords = await getProductCommerceRecords(updatedProduct.id)
+	await db
+		.update(prices)
+		.set({ unitAmount: input.price.toString() })
+		.where(eq(prices.id, updatedProduct.price.id))
+	await setSubscriptionProductActive({
+		active: input.active,
+		productId: updatedProduct.id,
+		records: updatedRecords,
+	})
+
+	return updatedProduct.id
+}
diff --git a/package.json b/package.json
index cbdd8f9..3710f1c 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,8 @@
     "email:contract": "tsx --tsconfig apps/web/tsconfig.json scripts/email-delivery-contract.ts",
     "beta:runtime-guard": "tsx --tsconfig apps/web/tsconfig.json scripts/beta-runtime-guard.ts",
     "builder:smoke": "tsx --tsconfig apps/builder-egghead/tsconfig.json scripts/builder-smoke.ts",
-    "check": "pnpm typecheck && pnpm typecheck:tsgo && pnpm lint && pnpm format:check && pnpm phase0:imports && pnpm routing:v2-contract && pnpm search:typesense-contract && pnpm sitemap:contract && pnpm stripe:subscription-contract && pnpm profile:contract && pnpm email:contract && pnpm beta:runtime-guard && pnpm builder:smoke",
+    "builder:subscription-contract": "tsx --tsconfig apps/builder-egghead/tsconfig.json scripts/builder-subscription-contract.ts",
+    "check": "pnpm typecheck && pnpm typecheck:tsgo && pnpm lint && pnpm format:check && pnpm phase0:imports && pnpm routing:v2-contract && pnpm search:typesense-contract && pnpm sitemap:contract && pnpm stripe:subscription-contract && pnpm profile:contract && pnpm email:contract && pnpm beta:runtime-guard && pnpm builder:subscription-contract && pnpm builder:smoke",
     "hooks:install": "lefthook install",
     "hooks:pre-commit": "lefthook run pre-commit --all-files"
   },
diff --git a/scripts/builder-subscription-contract.ts b/scripts/builder-subscription-contract.ts
new file mode 100644
index 0000000..4179781
--- /dev/null
+++ b/scripts/builder-subscription-contract.ts
@@ -0,0 +1,95 @@
+import assert from "node:assert/strict";
+
+import { assertBuilderCommerceWritesAllowed } from "../apps/builder-egghead/src/db/runtime-guard";
+import {
+  assertStripeTestMode,
+  parseSubscriptionProductForm,
+  stripeAccountMode,
+  stripeUnitAmount,
+  subscriptionProductFormSchema,
+} from "../apps/builder-egghead/src/lib/subscription-products-contracts";
+
+type ContractCheck = {
+  name: string;
+  pass: true;
+};
+
+type RuntimeEnvSnapshot = {
+  runtime: string | undefined;
+};
+
+function setEnv(name: "EGGHEAD_RUNTIME", value: string | undefined) {
+  if (value === undefined) {
+    delete process.env[name];
+  } else {
+    process.env[name] = value;
+  }
+}
+
+function check(name: string, run: () => void): ContractCheck {
+  run();
+  return { name, pass: true };
+}
+
+const snapshot: RuntimeEnvSnapshot = {
+  runtime: process.env["EGGHEAD_RUNTIME"],
+};
+
+try {
+  const checks = [
+    check("yearly subscription form values remain explicit", () => {
+      const formData = new FormData();
+      formData.set("name", "egghead Annual Membership");
+      formData.set("description", "Annual access");
+      formData.set("billingInterval", "year");
+      formData.set("price", "149.99");
+      formData.set("active", "on");
+
+      assert.deepEqual(parseSubscriptionProductForm(formData), {
+        name: "egghead Annual Membership",
+        description: "Annual access",
+        billingInterval: "year",
+        price: 149.99,
+        active: true,
+      });
+    }),
+    check("subscription prices map from major units to Stripe cents", () => {
+      assert.equal(stripeUnitAmount(150), 15_000);
+      assert.equal(stripeUnitAmount(149.99), 14_999);
+      assert.equal(
+        subscriptionProductFormSchema.safeParse({
+          name: "Annual membership",
+          description: "",
+          billingInterval: "year",
+          price: 149.999,
+          active: true,
+        }).success,
+        false,
+      );
+    }),
+    check("subscription product writes require Stripe test mode", () => {
+      assert.equal(stripeAccountMode("sk_test_contract"), "test");
+      assert.equal(stripeAccountMode("rk_test_contract"), "test");
+      assert.equal(stripeAccountMode("sk_live_contract"), "live");
+      assert.doesNotThrow(() => assertStripeTestMode("sk_test_contract"));
+      assert.throws(() => assertStripeTestMode("sk_live_contract"));
+    }),
+    check("subscription product writes require local Docker", () => {
+      setEnv("EGGHEAD_RUNTIME", "local");
+      assert.doesNotThrow(() =>
+        assertBuilderCommerceWritesAllowed("mysql://root:root@127.0.0.1:3307/coursebuilder_test"),
+      );
+
+      setEnv("EGGHEAD_RUNTIME", "beta");
+      assert.throws(() =>
+        assertBuilderCommerceWritesAllowed(
+          "mysql://user:password@aws.connect.psdb.cloud/egghead?sslaccept=strict",
+        ),
+      );
+    }),
+  ];
+
+  console.log(JSON.stringify({ ok: true, checks }));
+} finally {
+  setEnv("EGGHEAD_RUNTIME", snapshot.runtime);
+}