Never miss an expiring 2Checkout subscription

**Objective:** For active 2Checkout subscriptions that expire in the next `{days-ahead}` days (default 30, at most `{max-records}` subscriptions, default 25), create one HubSpot renewal task per subscription on the subscriber's contact and company. Nothing is written until the user confirms.

**Step 1: Read expiring subscriptions from 2Checkout**

Call `2checkout-get-subscription` with `expiration-date.from` set to today, `expiration-date.to` set to today plus `{days-ahead}` days (30 if empty) and `max-records` set to `{max-records}` (25 if empty). Keep only rows whose `status` shows the subscription is active. Keep `subscription-reference`, `product-name`, `expiration-date` and `end-user-email`. Set aside subscriptions with no email and count them.

**Step 2: Check how each one renews in 2Checkout**

For each subscription, call `2checkout-get-subscriptionrenewal` with `subscription-reference` set to it and keep `recurring-enabled`. A subscription with recurring billing off will lapse unless someone renews it, so it gets priority HIGH; one with recurring on gets priority MEDIUM.

**Step 3: Find the contact in HubSpot**

The join is the 2Checkout `end-user-email` against the HubSpot contact `email`, compared case-insensitively after trimming. For each email, call `hubspot-get-contacts` with `email` set to it and keep `record-id` and `company-id`. If no contact or more than one comes back, list the subscription as unmatched and do not create a task for it.

**Step 4: Skip subscriptions that already have a task**

For each matched subscription, call `hubspot-get-tasks` with `task-title.contains` set to the `subscription-reference`. If a task comes back whose `task-status` is not completed, skip the subscription and show that task.

**Step 5: Confirm**

Show a table: contact email, product, subscription reference, expiry, recurring on or off, priority, and due date (7 days before `expiration-date`, or today if that has passed). Ask for an explicit yes and offer to exclude rows. Do not continue without a yes.

**Step 6: Write and verify**

For each confirmed row, call `hubspot-add-task` once with `subject` set to "Renew 2Checkout subscription <subscription-reference>", `body` set to the product, expiry date and recurring setting, `due-date` as above, `status` NOT_STARTED, `priority` as above, `type` TODO, `contact-ids` set to the contact `record-id` and `company-ids` set to the `company-id` when there is one. Set `owner-id` only when `{owner-id}` is a numeric HubSpot owner ID; otherwise leave it unset, because no tool turns a person's name into an owner ID. Then call `hubspot-get-tasks` with `task-title.contains` set to each reference and confirm the task exists. Report created, failed and skipped rows.

**Rules & Guidelines:**

* Tools whose names start with 2checkout belong to the 2checkout server and tools whose names start with hubspot belong to the HubSpot server. Both servers must be connected.
* The only write tool allowed is `hubspot-add-task`, once per confirmed subscription and only after the confirmation in Step 5. Call no other hubspot-add, hubspot-update, hubspot-rename, hubspot-remove, hubspot-subscribe, hubspot-unsubscribe or hubspot-import tool, and do not use the engagement task tools.
* Never call `2checkout-subscription-renew`, `2checkout-subscription-extend`, `2checkout-subscription-enablerecurring`, `2checkout-subscription-update` or any other 2checkout tool that adds, updates, renews, extends, enables or disables. 2Checkout is only read here.
* Keep the subject format exactly as given; the complete-renewal-tasks-for-renewed-subscriptions prompt finds these tasks by it.
* Never put activation keys or payment details in the task.

**Validation:**

* If no active subscription expires in the window, say so and stop.
* If the user declines or does not answer, stop with nothing written.
* Never create a second open task for the same subscription reference.