Fix critical billing, tenant isolation, and false-success regressions

[cursor]

Summary

• Scope project milestone PATCH/DELETE by project id and authenticated user to prevent cross-tenant milestone mutation/deletion.
• Charge scaffold, legacy analysis, and Build This App to the authenticated user with atomic credit deductions and refunds on hard failures.
• Stop Build This App from reporting success on file generation or repo push failures; create GitHub repos private and dedupe generated file paths.
• Preserve prior analysis blueprints until replacement blueprints are fully saved; fail analysis runs on truncated AI output.
• Add Stripe webhook event idempotency and retry on unmapped paid subscription events.

Validation

• pnpm exec tsc --noEmit
• pnpm exec eslint app/api/analyses/[id]/analyze/route.ts app/api/analyses/[id]/run/route.ts app/api/build-app/route.ts app/api/generate-scaffold/route.ts app/api/projects/[id]/milestones/[milestoneId]/route.ts app/api/stripe/webhook/route.ts lib/credits.ts lib/queries.ts (passes with one pre-existing lib/queries.ts warning)
• Mocked runtime harness: build success/private/dedupe, build generation failure, build push failure, scaffold user binding/charge
• Mocked runtime harness: Stripe duplicate/unmapped retry behavior, milestone route scoping arguments, atomic credit deduction SQL shape

  

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
repo-app-architect	Ready	Preview, Comment	Jun 21, 2026 11:18am
repofuse	Ready	Preview, Comment, Open in v0	Jun 21, 2026 11:18am
v0-repo-app-architect	Ready	Preview, Comment, Open in v0	Jun 21, 2026 11:18am