The AI generation was the easy part. Auth, billing, idempotent webhooks, privacy-safe analytics and clear event semantics are what made it production-ready.