@automagik/omni 2.260704.12 → 2.260705.2

package/dist/server/index.js

@@ -35134,9 +35134,17 @@ var init_config = __esm(() => {
   });
 });
 
+// ../channel-sdk/src/media-backends/types.ts
+function isMediaNotFoundError(error) {
+  if (!error || typeof error !== "object")
+    return false;
+  const code = error.code;
+  return code === "ENOENT" || code === "NoSuchKey";
+}
+
 // ../channel-sdk/src/media-backends/local-backend.ts
 import { createWriteStream, existsSync, mkdirSync, writeFileSync } from "fs";
-import { mkdir as mkdir2, readFile, rm } from "fs/promises";
+import { mkdir as mkdir2, open, readFile, rm, stat as stat2 } from "fs/promises";
 import { dirname, resolve, sep } from "path";
 import { Transform } from "stream";
 import { pipeline } from "stream/promises";
@@ -35192,6 +35200,32 @@ class LocalMediaBackend {
   async read(key) {
     return readFile(this.getSafePath(key));
   }
+  async stat(key) {
+    try {
+      const info = await stat2(this.getSafePath(key));
+      return { size: Number(info.size) };
+    } catch (error) {
+      if (isMediaNotFoundError(error))
+        return null;
+      throw error;
+    }
+  }
+  async readRange(key, start, endInclusive) {
+    const length = endInclusive - start + 1;
+    const handle = await open(this.getSafePath(key), "r");
+    try {
+      const buffer2 = Buffer.alloc(length);
+      const { bytesRead } = await handle.read(buffer2, 0, length, start);
+      return bytesRead === length ? buffer2 : buffer2.subarray(0, bytesRead);
+    } finally {
+      await handle.close();
+    }
+  }
+  async readStream(key) {
+    const path = this.getSafePath(key);
+    await stat2(path);
+    return Bun.file(path).stream();
+  }
   async presignedUrl(_key, _ttlSeconds) {
     throw new Error("presignedUrl is only available in remote mode (set OMNI_MEDIA_MODE=remote)");
   }
@@ -35270,6 +35304,23 @@ class S3MediaBackend {
     log19.debug("Read media from S3", { key, size: bytes.byteLength });
     return Buffer.from(bytes);
   }
+  async stat(key) {
+    try {
+      const info = await this.client.file(key).stat();
+      return { size: info.size };
+    } catch (error) {
+      if (isMediaNotFoundError(error))
+        return null;
+      throw error;
+    }
+  }
+  async readRange(key, start, endInclusive) {
+    const bytes = await this.client.file(key).slice(start, endInclusive + 1).arrayBuffer();
+    return Buffer.from(bytes);
+  }
+  async readStream(key) {
+    return this.client.file(key).stream();
+  }
   async presignedUrl(key, ttlSeconds = this.presignTtlSeconds) {
     return this.presignClient.presign(key, { expiresIn: ttlSeconds, method: "GET" });
   }
@@ -35315,6 +35366,7 @@ __export(exports_src, {
   isVoiceCapable: () => isVoiceCapable,
   isValidInstanceId: () => isValidInstanceId,
   isValidChannelType: () => isValidChannelType,
+  isMediaNotFoundError: () => isMediaNotFoundError,
   getDefaultPackagesDir: () => getDefaultPackagesDir,
   formatValidationErrors: () => formatValidationErrors,
   eventTypeToPattern: () => eventTypeToPattern,
@@ -84898,12 +84950,12 @@ var require_form_data = __commonJS((exports, module) => {
       if (value.end != null && value.end != Infinity && value.start != null) {
         callback(null, value.end + 1 - (value.start ? value.start : 0));
       } else {
-        fs.stat(value.path, function(err, stat2) {
+        fs.stat(value.path, function(err, stat3) {
           if (err) {
             callback(err);
             return;
           }
-          var fileSize = stat2.size - (value.start ? value.start : 0);
+          var fileSize = stat3.size - (value.start ? value.start : 0);
           callback(null, fileSize);
         });
       }
@@ -119075,13 +119127,13 @@ var require_view2 = __commonJS((exports, module) => {
   View.prototype.resolve = function resolve3(dir, file) {
     var ext = this.ext;
     var path2 = join3(dir, file);
-    var stat2 = tryStat(path2);
-    if (stat2 && stat2.isFile()) {
+    var stat3 = tryStat(path2);
+    if (stat3 && stat3.isFile()) {
       return path2;
     }
     path2 = join3(dir, basename(file, ext), "index" + ext);
-    stat2 = tryStat(path2);
-    if (stat2 && stat2.isFile()) {
+    stat3 = tryStat(path2);
+    if (stat3 && stat3.isFile()) {
       return path2;
     }
   };
@@ -119132,9 +119184,9 @@ var require_etag = __commonJS((exports, module) => {
     }
     return obj && typeof obj === "object" && "ctime" in obj && toString2.call(obj.ctime) === "[object Date]" && "mtime" in obj && toString2.call(obj.mtime) === "[object Date]" && "ino" in obj && typeof obj.ino === "number" && "size" in obj && typeof obj.size === "number";
   }
-  function stattag(stat2) {
-    var mtime = stat2.mtime.getTime().toString(16);
-    var size = stat2.size.toString(16);
+  function stattag(stat3) {
+    var mtime = stat3.mtime.getTime().toString(16);
+    var size = stat3.size.toString(16);
     return '"' + size + "-" + mtime + '"';
   }
 });
@@ -122670,8 +122722,8 @@ var require_send = __commonJS((exports, module) => {
     this.sendFile(path2);
     return res;
   };
-  SendStream.prototype.send = function send2(path2, stat2) {
-    var len = stat2.size;
+  SendStream.prototype.send = function send2(path2, stat3) {
+    var len = stat3.size;
     var options = this.options;
     var opts = {};
     var res = this.res;
@@ -122683,7 +122735,7 @@ var require_send = __commonJS((exports, module) => {
       return;
     }
     debug2('pipe "%s"', path2);
-    this.setHeader(path2, stat2);
+    this.setHeader(path2, stat3);
     this.type(path2);
     if (this.isConditionalGET()) {
       if (this.isPreconditionFailure()) {
@@ -122740,19 +122792,19 @@ var require_send = __commonJS((exports, module) => {
     var i = 0;
     var self2 = this;
     debug2('stat "%s"', path2);
-    fs.stat(path2, function onstat(err, stat2) {
+    fs.stat(path2, function onstat(err, stat3) {
       var pathEndsWithSep = path2[path2.length - 1] === sep2;
       if (err && err.code === "ENOENT" && !extname(path2) && !pathEndsWithSep) {
         return next(err);
       }
       if (err)
         return self2.onStatError(err);
-      if (stat2.isDirectory())
+      if (stat3.isDirectory())
         return self2.redirect(path2);
       if (pathEndsWithSep)
         return self2.error(404);
-      self2.emit("file", path2, stat2);
-      self2.send(path2, stat2);
+      self2.emit("file", path2, stat3);
+      self2.send(path2, stat3);
     });
     function next(err) {
       if (self2._extensions.length <= i) {
@@ -122760,13 +122812,13 @@ var require_send = __commonJS((exports, module) => {
       }
       var p2 = path2 + "." + self2._extensions[i++];
       debug2('stat "%s"', p2);
-      fs.stat(p2, function(err2, stat2) {
+      fs.stat(p2, function(err2, stat3) {
         if (err2)
           return next(err2);
-        if (stat2.isDirectory())
+        if (stat3.isDirectory())
           return next();
-        self2.emit("file", p2, stat2);
-        self2.send(p2, stat2);
+        self2.emit("file", p2, stat3);
+        self2.send(p2, stat3);
       });
     }
   };
@@ -122781,13 +122833,13 @@ var require_send = __commonJS((exports, module) => {
       }
       var p2 = join3(path2, self2._index[i]);
       debug2('stat "%s"', p2);
-      fs.stat(p2, function(err2, stat2) {
+      fs.stat(p2, function(err2, stat3) {
         if (err2)
           return next(err2);
-        if (stat2.isDirectory())
+        if (stat3.isDirectory())
           return next();
-        self2.emit("file", p2, stat2);
-        self2.send(p2, stat2);
+        self2.emit("file", p2, stat3);
+        self2.send(p2, stat3);
       });
     }
     next();
@@ -122819,9 +122871,9 @@ var require_send = __commonJS((exports, module) => {
     debug2("content-type %s", type2);
     res.setHeader("Content-Type", type2);
   };
-  SendStream.prototype.setHeader = function setHeader(path2, stat2) {
+  SendStream.prototype.setHeader = function setHeader(path2, stat3) {
     var res = this.res;
-    this.emit("headers", res, path2, stat2);
+    this.emit("headers", res, path2, stat3);
     if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
       debug2("accept ranges");
       res.setHeader("Accept-Ranges", "bytes");
@@ -122835,12 +122887,12 @@ var require_send = __commonJS((exports, module) => {
       res.setHeader("Cache-Control", cacheControl);
     }
     if (this._lastModified && !res.getHeader("Last-Modified")) {
-      var modified = stat2.mtime.toUTCString();
+      var modified = stat3.mtime.toUTCString();
       debug2("modified %s", modified);
       res.setHeader("Last-Modified", modified);
     }
     if (this._etag && !res.getHeader("ETag")) {
-      var val = etag(stat2);
+      var val = etag(stat3);
       debug2("etag %s", val);
       res.setHeader("ETag", val);
     }
@@ -137100,8 +137152,8 @@ var init_FileTokenizer = __esm(() => {
   FileTokenizer = class FileTokenizer extends AbstractTokenizer {
     static async fromFile(sourceFilePath) {
       const fileHandle = await fsOpen(sourceFilePath, "r");
-      const stat2 = await fileHandle.stat();
-      return new FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat2.size } });
+      const stat3 = await fileHandle.stat();
+      return new FileTokenizer(fileHandle, { fileInfo: { path: sourceFilePath, size: stat3.size } });
     }
     constructor(fileHandle, options) {
       super(options);
@@ -137146,9 +137198,9 @@ import { stat as fsStat } from "fs/promises";
 async function fromStream2(stream, options) {
   const rst = fromStream(stream, options);
   if (stream.path) {
-    const stat2 = await fsStat(stream.path);
+    const stat3 = await fsStat(stream.path);
     rst.fileInfo.path = stream.path;
-    rst.fileInfo.size = stat2.size;
+    rst.fileInfo.size = stat3.size;
   }
   return rst;
 }
@@ -155536,7 +155588,7 @@ __export(exports_audio_converter, {
 import { spawn as spawn2 } from "child_process";
 import { promises as fs5, createWriteStream as createWriteStream5 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
-import { join as join10 } from "path";
+import { join as join9 } from "path";
 import { Readable as Readable2 } from "stream";
 import { pipeline as pipeline4 } from "stream/promises";
 function spawnWithEvents2(command, args) {
@@ -155586,7 +155638,7 @@ async function downloadToTemp(url) {
   if (!response.ok) {
     throw new Error(`Failed to download audio: ${response.status} ${response.statusText}`);
   }
-  const tempPath = join10(tmpdir5(), `omni-audio-${Date.now()}-input`);
+  const tempPath = join9(tmpdir5(), `omni-audio-${Date.now()}-input`);
   const body = response.body;
   if (!body) {
     throw new Error("No response body");
@@ -155597,7 +155649,7 @@ async function downloadToTemp(url) {
   return tempPath;
 }
 async function convertToOggOpus(inputPath) {
-  const outputPath = join10(tmpdir5(), `omni-audio-${Date.now()}-output.ogg`);
+  const outputPath = join9(tmpdir5(), `omni-audio-${Date.now()}-output.ogg`);
   return new Promise((resolve2, reject) => {
     const ffmpeg = spawnWithEvents2("ffmpeg", [
       "-i",
@@ -155673,7 +155725,7 @@ async function convertBufferForVoiceNote(buffer2, mimeType) {
   let inputPath = null;
   let outputPath = null;
   try {
-    inputPath = join10(tmpdir5(), `omni-audio-${Date.now()}-input`);
+    inputPath = join9(tmpdir5(), `omni-audio-${Date.now()}-input`);
     await fs5.writeFile(inputPath, buffer2);
     outputPath = await convertToOggOpus(inputPath);
     const convertedBuffer = await fs5.readFile(outputPath);
@@ -171985,14 +172037,14 @@ var require_require_in_the_middle = __commonJS((exports, module) => {
         moduleName = parsedPath.name;
         basedir = parsedPath.dir;
       } else {
-        const stat2 = moduleDetailsFromPath(filename);
-        if (stat2 === undefined) {
+        const stat3 = moduleDetailsFromPath(filename);
+        if (stat3 === undefined) {
           debug34("could not parse filename: %s", filename);
           return exports2;
         }
-        moduleName = stat2.name;
-        basedir = stat2.basedir;
-        const fullModuleName = resolveModuleName(stat2);
+        moduleName = stat3.name;
+        basedir = stat3.basedir;
+        const fullModuleName = resolveModuleName(stat3);
         debug34("resolved filename to module: %s (id: %s, resolved: %s, basedir: %s)", moduleName, id, fullModuleName, basedir);
         let matchFound = false;
         if (hasWhitelist) {
@@ -172054,9 +172106,9 @@ var require_require_in_the_middle = __commonJS((exports, module) => {
       }
     }
   };
-  function resolveModuleName(stat2) {
-    const normalizedPath = path.sep !== "/" ? stat2.path.split(path.sep).join("/") : stat2.path;
-    return path.posix.join(stat2.name, normalizedPath).replace(normalize3, "");
+  function resolveModuleName(stat3) {
+    const normalizedPath = path.sep !== "/" ? stat3.path.split(path.sep).join("/") : stat3.path;
+    return path.posix.join(stat3.name, normalizedPath).replace(normalize3, "");
   }
 });
 
@@ -176960,7 +177012,7 @@ var init_childProcess = __esm(() => {
 import { execFile } from "child_process";
 import { readFile as readFile2, readdir as readdir2 } from "fs";
 import * as os2 from "os";
-import { join as join12 } from "path";
+import { join as join11 } from "path";
 import { promisify as promisify4 } from "util";
 function _updateContext(contexts) {
   if (contexts.app?.app_memory) {
@@ -177160,7 +177212,7 @@ async function getLinuxInfo() {
     if (!distroFile) {
       return linuxInfo;
     }
-    const distroPath = join12("/etc", distroFile.name);
+    const distroPath = join11("/etc", distroFile.name);
     const contents = (await readFileAsync(distroPath, { encoding: "utf-8" })).toLowerCase();
     const { distros } = distroFile;
     linuxInfo.name = distros.find((d2) => contents.indexOf(getLinuxDistroId(d2)) >= 0) || distros[0];
@@ -178071,7 +178123,7 @@ var init_detection = __esm(() => {
 
 // ../../node_modules/.bun/@sentry+node-core@10.52.0+6488de8736d8e524/node_modules/@sentry/node-core/build/esm/integrations/modules.js
 import { existsSync as existsSync2, readFileSync } from "fs";
-import { dirname as dirname4, join as join13 } from "path";
+import { dirname as dirname4, join as join12 } from "path";
 function getRequireCachePaths() {
   try {
     return __require.cache ? Object.keys(__require.cache) : [];
@@ -178102,7 +178154,7 @@ function collectRequireModules() {
       if (mainPaths.indexOf(dir) < 0) {
         return updir();
       }
-      const pkgfile = join13(orig, "package.json");
+      const pkgfile = join12(orig, "package.json");
       seen.add(orig);
       if (!existsSync2(pkgfile)) {
         return updir();
@@ -178124,7 +178176,7 @@ function _getModules() {
 }
 function getPackageJson() {
   try {
-    const filePath = join13(process.cwd(), "package.json");
+    const filePath = join12(process.cwd(), "package.json");
     const packageJson = JSON.parse(readFileSync(filePath, "utf8"));
     return packageJson;
   } catch {
@@ -183545,10 +183597,10 @@ var require_commonjs3 = __commonJS((exports) => {
         }
         return filtered.join("/");
       }).join("|");
-      const [open, close2] = set.length > 1 ? ["(?:", ")"] : ["", ""];
-      re = "^" + open + re + close2 + "$";
+      const [open2, close2] = set.length > 1 ? ["(?:", ")"] : ["", ""];
+      re = "^" + open2 + re + close2 + "$";
       if (this.partial) {
-        re = "^(?:\\/|" + open + re.slice(1, -1) + close2 + ")$";
+        re = "^(?:\\/|" + open2 + re.slice(1, -1) + close2 + ")$";
       }
       if (this.negate)
         re = "^(?!" + re + ").+$";
@@ -205361,7 +205413,7 @@ var require_path = __commonJS((exports) => {
   function isAbsolute2(path) {
     return path.charAt(0) === "/";
   }
-  function join14(...args) {
+  function join13(...args) {
     return normalizePath2(args.join("/"));
   }
   function dirname5(path) {
@@ -205386,7 +205438,7 @@ var require_path = __commonJS((exports) => {
   exports.basename = basename3;
   exports.dirname = dirname5;
   exports.isAbsolute = isAbsolute2;
-  exports.join = join14;
+  exports.join = join13;
   exports.normalizePath = normalizePath2;
   exports.relative = relative2;
   exports.resolve = resolve3;
@@ -225538,7 +225590,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260704.12",
+    version: "2.260705.2",
     type: "module",
     exports: {
       ".": {
@@ -242241,9 +242293,9 @@ var require_async2 = __commonJS((exports, module) => {
     ];
   }
   var defaultIsFile = function isFile(file, cb) {
-    fs6.stat(file, function(err, stat2) {
+    fs6.stat(file, function(err, stat3) {
       if (!err) {
-        return cb(null, stat2.isFile() || stat2.isFIFO());
+        return cb(null, stat3.isFile() || stat3.isFIFO());
       }
       if (err.code === "ENOENT" || err.code === "ENOTDIR")
         return cb(null, false);
@@ -242251,9 +242303,9 @@ var require_async2 = __commonJS((exports, module) => {
     });
   };
   var defaultIsDir = function isDirectory(dir, cb) {
-    fs6.stat(dir, function(err, stat2) {
+    fs6.stat(dir, function(err, stat3) {
       if (!err) {
-        return cb(null, stat2.isDirectory());
+        return cb(null, stat3.isDirectory());
       }
       if (err.code === "ENOENT" || err.code === "ENOTDIR")
         return cb(null, false);
@@ -242762,23 +242814,23 @@ var require_sync = __commonJS((exports, module) => {
   }
   var defaultIsFile = function isFile(file) {
     try {
-      var stat2 = fs6.statSync(file, { throwIfNoEntry: false });
+      var stat3 = fs6.statSync(file, { throwIfNoEntry: false });
     } catch (e) {
       if (e && (e.code === "ENOENT" || e.code === "ENOTDIR"))
         return false;
       throw e;
     }
-    return !!stat2 && (stat2.isFile() || stat2.isFIFO());
+    return !!stat3 && (stat3.isFile() || stat3.isFIFO());
   };
   var defaultIsDir = function isDirectory(dir) {
     try {
-      var stat2 = fs6.statSync(dir, { throwIfNoEntry: false });
+      var stat3 = fs6.statSync(dir, { throwIfNoEntry: false });
     } catch (e) {
       if (e && (e.code === "ENOENT" || e.code === "ENOTDIR"))
         return false;
       throw e;
     }
-    return !!stat2 && stat2.isDirectory();
+    return !!stat3 && stat3.isDirectory();
   };
   var defaultRealpathSync = function realpathSync(x) {
     try {
@@ -243187,14 +243239,14 @@ var require_require_in_the_middle2 = __commonJS((exports, module) => {
         moduleName = parsedPath.name;
         basedir = parsedPath.dir;
       } else {
-        const stat2 = moduleDetailsFromPath(filename);
-        if (stat2 === undefined) {
+        const stat3 = moduleDetailsFromPath(filename);
+        if (stat3 === undefined) {
           debug34("could not parse filename: %s", filename);
           return exports2;
         }
-        moduleName = stat2.name;
-        basedir = stat2.basedir;
-        const fullModuleName = resolveModuleName(stat2);
+        moduleName = stat3.name;
+        basedir = stat3.basedir;
+        const fullModuleName = resolveModuleName(stat3);
         debug34("resolved filename to module: %s (id: %s, resolved: %s, basedir: %s)", moduleName, id, fullModuleName, basedir);
         let matchFound = false;
         if (hasWhitelist) {
@@ -243256,9 +243308,9 @@ var require_require_in_the_middle2 = __commonJS((exports, module) => {
       }
     }
   };
-  function resolveModuleName(stat2) {
-    const normalizedPath = path.sep !== "/" ? stat2.path.split(path.sep).join("/") : stat2.path;
-    return path.posix.join(stat2.name, normalizedPath).replace(normalize3, "");
+  function resolveModuleName(stat3) {
+    const normalizedPath = path.sep !== "/" ? stat3.path.split(path.sep).join("/") : stat3.path;
+    return path.posix.join(stat3.name, normalizedPath).replace(normalize3, "");
   }
 });
 
@@ -273280,7 +273332,7 @@ var init_sql = __esm(() => {
       return new SQL([new StringChunk(str)]);
     }
     sql2.raw = raw;
-    function join14(chunks, separator) {
+    function join13(chunks, separator) {
       const result = [];
       for (const [i, chunk2] of chunks.entries()) {
         if (i > 0 && separator !== undefined) {
@@ -273290,7 +273342,7 @@ var init_sql = __esm(() => {
       }
       return new SQL(result);
     }
-    sql2.join = join14;
+    sql2.join = join13;
     function identifier(value) {
       return new Name(value);
     }
@@ -276522,7 +276574,7 @@ var init_select2 = __esm(() => {
       return (table2, on) => {
         const baseTableName = this.tableName;
         const tableName = getTableLikeName(table2);
-        if (typeof tableName === "string" && this.config.joins?.some((join14) => join14.alias === tableName)) {
+        if (typeof tableName === "string" && this.config.joins?.some((join13) => join13.alias === tableName)) {
           throw new Error(`Alias "${tableName}" is already used in this query`);
         }
         if (!this.isPartialSelect) {
@@ -277033,7 +277085,7 @@ var init_update = __esm(() => {
     createJoin(joinType) {
       return (table2, on) => {
         const tableName = getTableLikeName(table2);
-        if (typeof tableName === "string" && this.config.joins.some((join14) => join14.alias === tableName)) {
+        if (typeof tableName === "string" && this.config.joins.some((join13) => join13.alias === tableName)) {
           throw new Error(`Alias "${tableName}" is already used in this query`);
         }
         if (typeof on === "function") {
@@ -277083,10 +277135,10 @@ var init_update = __esm(() => {
             const fromFields = this.getTableLikeFields(this.config.from);
             fields[tableName] = fromFields;
           }
-          for (const join14 of this.config.joins) {
-            const tableName2 = getTableLikeName(join14.table);
-            if (typeof tableName2 === "string" && !is(join14.table, SQL)) {
-              const fromFields = this.getTableLikeFields(join14.table);
+          for (const join13 of this.config.joins) {
+            const tableName2 = getTableLikeName(join13.table);
+            if (typeof tableName2 === "string" && !is(join13.table, SQL)) {
+              const fromFields = this.getTableLikeFields(join13.table);
               fields[tableName2] = fromFields;
             }
           }
@@ -280694,7 +280746,7 @@ import fs6 from "fs";
 function Postgres(a, b3) {
   const options = parseOptions(a, b3), subscribe6 = options.no_subscribe || Subscribe(Postgres, { ...options });
   let ending = false;
-  const queries = queue_default(), connecting = queue_default(), reserved = queue_default(), closed = queue_default(), ended = queue_default(), open = queue_default(), busy = queue_default(), full = queue_default(), queues = { connecting, reserved, closed, ended, open, busy, full };
+  const queries = queue_default(), connecting = queue_default(), reserved = queue_default(), closed = queue_default(), ended = queue_default(), open2 = queue_default(), busy = queue_default(), full = queue_default(), queues = { connecting, reserved, closed, ended, open: open2, busy, full };
   const connections = [...Array(options.max)].map(() => connection_default(options, queues, { onopen, onend, onclose }));
   const sql4 = Sql(handler);
   Object.assign(sql4, {
@@ -280806,7 +280858,7 @@ function Postgres(a, b3) {
   }
   async function reserve() {
     const queue = queue_default();
-    const c = open.length ? open.shift() : await new Promise((resolve3, reject) => {
+    const c = open2.length ? open2.shift() : await new Promise((resolve3, reject) => {
       const query = { reserve: resolve3, reject };
       queries.push(query);
       closed.length && connect5(closed.shift(), query);
@@ -280879,7 +280931,7 @@ function Postgres(a, b3) {
     c.queue.remove(c);
     queue.push(c);
     c.queue = queue;
-    queue === open ? c.idleTimer.start() : c.idleTimer.cancel();
+    queue === open2 ? c.idleTimer.start() : c.idleTimer.cancel();
     return c;
   }
   function json3(x) {
@@ -280893,8 +280945,8 @@ function Postgres(a, b3) {
   function handler(query) {
     if (ending)
       return query.reject(Errors.connection("CONNECTION_ENDED", options, options));
-    if (open.length)
-      return go(open.shift(), query);
+    if (open2.length)
+      return go(open2.shift(), query);
     if (closed.length)
       return connect5(closed.shift(), query);
     busy.length ? go(busy.shift(), query) : queries.push(query);
@@ -280936,7 +280988,7 @@ function Postgres(a, b3) {
   }
   function onopen(c) {
     if (queries.length === 0)
-      return move(c, open);
+      return move(c, open2);
     let max = Math.ceil(queries.length / (connecting.length + 1)), ready = true;
     while (ready && queries.length && max-- > 0) {
       const query = queries.shift();
@@ -283268,7 +283320,7 @@ var init_path2 = () => {};
 var ENCODINGS, ENCODINGS_ORDERED_KEYS, DEFAULT_DOCUMENT = "index.html", serveStatic = (options) => {
   const root = options.root ?? "./";
   const optionPath = options.path;
-  const join15 = options.join ?? defaultJoin;
+  const join14 = options.join ?? defaultJoin;
   return async (c, next) => {
     if (c.finalized) {
       return next();
@@ -283287,9 +283339,9 @@ var ENCODINGS, ENCODINGS_ORDERED_KEYS, DEFAULT_DOCUMENT = "index.html", serveSta
         return next();
       }
     }
-    let path2 = join15(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
+    let path2 = join14(root, !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename) : filename);
     if (options.isDir && await options.isDir(path2)) {
-      path2 = join15(path2, DEFAULT_DOCUMENT);
+      path2 = join14(path2, DEFAULT_DOCUMENT);
     }
     const getContent = options.getContent;
     let content = await getContent(path2, c);
@@ -283336,8 +283388,8 @@ var init_serve_static = __esm(() => {
 });
 
 // ../../node_modules/.bun/hono@4.12.18/node_modules/hono/dist/adapter/bun/serve-static.js
-import { stat as stat2 } from "fs/promises";
-import { join as join15 } from "path";
+import { stat as stat3 } from "fs/promises";
+import { join as join14 } from "path";
 var serveStatic2 = (options) => {
   return async function serveStatic22(c, next) {
     const getContent = async (path2) => {
@@ -283347,7 +283399,7 @@ var serveStatic2 = (options) => {
     const isDir = async (path2) => {
       let isDir2;
       try {
-        const stats = await stat2(path2);
+        const stats = await stat3(path2);
         isDir2 = stats.isDirectory();
       } catch {}
       return isDir2;
@@ -283355,7 +283407,7 @@ var serveStatic2 = (options) => {
     return serveStatic({
       ...options,
       getContent,
-      join: join15,
+      join: join14,
       isDir
     })(c, next);
   };
@@ -285293,6 +285345,11 @@ function enforceInstanceAllowlist(apiKey, target) {
 function enforceOutboundRecipientAllowlist(apiKey, target) {
   return enforceAllowlist(apiKey.profile ?? null, "outboundRecipientAllowlist", apiKey.outboundRecipientAllowlist ?? [], target);
 }
+function mediaPathInstance(method, cleanPath2) {
+  if (method !== "GET")
+    return null;
+  return firstPathSegment(cleanPath2, PATH_MEDIA_INSTANCE_PREFIX);
+}
 function firstPathSegment(cleanPath2, prefix) {
   if (!cleanPath2.startsWith(prefix))
     return null;
@@ -285325,7 +285382,7 @@ function readHeaderTargets(c) {
 function extractLockTargets(method, rawPath, body, headers) {
   const cleanPath2 = normalizePath2(rawPath);
   const { instanceId, to, chatId } = readBodyTargets(body);
-  const pathInstance = PATH_INSTANCE_PREFIXES.map((p2) => firstPathSegment(cleanPath2, p2)).find((v2) => v2 != null) ?? null;
+  const pathInstance = PATH_INSTANCE_PREFIXES.map((p2) => firstPathSegment(cleanPath2, p2)).find((v2) => v2 != null) ?? mediaPathInstance(method, cleanPath2);
   const pathChat = PATH_CHAT_PREFIXES.map((p2) => firstPathSegment(cleanPath2, p2)).find((v2) => v2 != null) ?? null;
   const headerInstance = headers?.instance && headers.instance.length > 0 ? headers.instance : null;
   const headerChat = headers?.chat && headers.chat.length > 0 ? headers.chat : null;
@@ -285367,7 +285424,7 @@ function lockDenyResponse(c, lock, result) {
     }
   }, 403);
 }
-var log60, OUTBOUND_SEND_PREFIXES, PATH_INSTANCE_PREFIXES, PATH_CHAT_PREFIXES, scopeEnforcerMiddleware;
+var log60, OUTBOUND_SEND_PREFIXES, PATH_INSTANCE_PREFIXES, PATH_CHAT_PREFIXES, PATH_MEDIA_INSTANCE_PREFIX = "/media/", scopeEnforcerMiddleware;
 var init_scope_enforcer = __esm(() => {
   init_src();
   init_factory2();
@@ -294316,7 +294373,7 @@ var require_src64 = __commonJS((exports) => {
 // ../../node_modules/.bun/@google+genai@1.52.0+6dc9e9ccb27012c9/node_modules/@google/genai/dist/node/index.mjs
 import { createWriteStream as createWriteStream6 } from "fs";
 import * as fs9 from "fs/promises";
-import { writeFile as writeFile4 } from "fs/promises";
+import { writeFile as writeFile3 } from "fs/promises";
 import { Readable as Readable4 } from "stream";
 import { finished } from "stream/promises";
 import * as NodeWs from "ws";
@@ -305768,7 +305825,7 @@ class NodeDownloader {
         await finished(writer);
       } else {
         try {
-          await writeFile4(params.downloadPath, response, {
+          await writeFile3(params.downloadPath, response, {
             encoding: "base64"
           });
         } catch (error3) {
@@ -311384,7 +311441,7 @@ var init_stt = __esm(() => {
 import { spawn as spawn3 } from "child_process";
 import { promises as fs10 } from "fs";
 import { tmpdir as tmpdir6 } from "os";
-import { join as join16 } from "path";
+import { join as join15 } from "path";
 function spawnWithEvents3(command, args) {
   return spawn3(command, args);
 }
@@ -311553,8 +311610,8 @@ function estimatePcmDurationMs(byteCount, sampleRate, channels, bitsPerSample) {
 }
 async function convertWavToOggOpus(wavBuffer) {
   const stamp = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-  const inputPath = join16(tmpdir6(), `omni-gemini-tts-${stamp}-input.wav`);
-  const outputPath = join16(tmpdir6(), `omni-gemini-tts-${stamp}-output.ogg`);
+  const inputPath = join15(tmpdir6(), `omni-gemini-tts-${stamp}-input.wav`);
+  const outputPath = join15(tmpdir6(), `omni-gemini-tts-${stamp}-output.ogg`);
   try {
     await fs10.writeFile(inputPath, wavBuffer);
     await new Promise((resolve3, reject) => {
@@ -311600,7 +311657,7 @@ async function convertWavToOggOpus(wavBuffer) {
   }
 }
 async function getAudioDurationMs(audioBuffer) {
-  const tempPath = join16(tmpdir6(), `omni-gemini-tts-${Date.now()}-duration.ogg`);
+  const tempPath = join15(tmpdir6(), `omni-gemini-tts-${Date.now()}-duration.ogg`);
   try {
     await fs10.writeFile(tempPath, audioBuffer);
     return await new Promise((resolve3) => {
@@ -312078,7 +312135,7 @@ var init_imagegen2 = __esm(() => {
 import { execFile as execFile2 } from "child_process";
 import { promises as fs11 } from "fs";
 import { tmpdir as tmpdir7 } from "os";
-import { join as join17 } from "path";
+import { join as join16 } from "path";
 import { promisify as promisify5 } from "util";
 
 class OpenAiSttProvider {
@@ -312233,9 +312290,9 @@ async function normalizeForOpenAiAudioChat(audio, mimeType) {
   if (format === "mp3" || format === "wav") {
     return { audio, format };
   }
-  const dir = await fs11.mkdtemp(join17(tmpdir7(), "omni-openai-audio-"));
-  const input = join17(dir, `input.${sourceExtension(mimeType)}`);
-  const output = join17(dir, "output.mp3");
+  const dir = await fs11.mkdtemp(join16(tmpdir7(), "omni-openai-audio-"));
+  const input = join16(dir, `input.${sourceExtension(mimeType)}`);
+  const output = join16(dir, "output.mp3");
   try {
     await fs11.writeFile(input, audio);
     await execFileAsync("ffmpeg", [
@@ -312311,7 +312368,7 @@ var init_stt3 = __esm(() => {
 import { spawn as spawn4 } from "child_process";
 import { promises as fs12 } from "fs";
 import { tmpdir as tmpdir8 } from "os";
-import { join as join18 } from "path";
+import { join as join17 } from "path";
 function spawnWithEvents4(command, args) {
   return spawn4(command, args);
 }
@@ -312428,8 +312485,8 @@ function mimeForFormat(format) {
 }
 async function convertAudio(input, from, to) {
   const stamp = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
-  const inputPath = join18(tmpdir8(), `omni-openai-tts-${stamp}.${from === "pcm" ? "wav" : from}`);
-  const outputPath = join18(tmpdir8(), `omni-openai-tts-${stamp}.${to}`);
+  const inputPath = join17(tmpdir8(), `omni-openai-tts-${stamp}.${from === "pcm" ? "wav" : from}`);
+  const outputPath = join17(tmpdir8(), `omni-openai-tts-${stamp}.${to}`);
   try {
     await fs12.writeFile(inputPath, input);
     await new Promise((resolve3, reject) => {
@@ -316103,7 +316160,7 @@ import { execFile as execFile3 } from "child_process";
 import { promises as fs13 } from "fs";
 import { statSync } from "fs";
 import { tmpdir as tmpdir9 } from "os";
-import { basename as basename4, join as join19 } from "path";
+import { basename as basename4, join as join18 } from "path";
 import { promisify as promisify6 } from "util";
 function shouldStopAudioFallback(result) {
   return result.success || Boolean(result.errorMessage?.includes("Normalized audio still exceeds provider upload limit"));
@@ -316156,8 +316213,8 @@ async function normalizeAudioFileForProvider(filePath, mimeType) {
   if ((format === "mp3" || format === "wav") && stats.size <= PROVIDER_AUDIO_TARGET_BYTES) {
     return { filePath, mimeType: format === "wav" ? "audio/wav" : "audio/mpeg", format };
   }
-  const dir = await fs13.mkdtemp(join19(tmpdir9(), "omni-provider-audio-"));
-  const output = join19(dir, `${basename4(filePath)}.provider.mp3`);
+  const dir = await fs13.mkdtemp(join18(tmpdir9(), "omni-provider-audio-"));
+  const output = join18(dir, `${basename4(filePath)}.provider.mp3`);
   try {
     await execFileAsync2("ffmpeg", [
       "-y",
@@ -323388,14 +323445,14 @@ import { execFile as execFile4 } from "child_process";
 import { readFileSync as readFileSync4, statSync as statSync2 } from "fs";
 import { promises as fs14 } from "fs";
 import { tmpdir as tmpdir10 } from "os";
-import { basename as basename5, join as join20 } from "path";
+import { basename as basename5, join as join19 } from "path";
 import { promisify as promisify7 } from "util";
 async function prepareVideoForGemini(filePath, mimeType, sizeBytes) {
   if (sizeBytes <= MAX_VIDEO_SIZE_MB * 1024 * 1024) {
     return { filePath, mimeType, size: sizeBytes, normalized: false };
   }
-  const dir = await fs14.mkdtemp(join20(tmpdir10(), "omni-gemini-video-"));
-  const output = join20(dir, `${basename5(filePath)}.provider.mp4`);
+  const dir = await fs14.mkdtemp(join19(tmpdir10(), "omni-gemini-video-"));
+  const output = join19(dir, `${basename5(filePath)}.provider.mp4`);
   const durationSeconds = await probeDurationSeconds(filePath);
   const targetDurationSeconds = Math.min(durationSeconds ?? MAX_VIDEO_PROVIDER_DURATION_SECONDS, MAX_VIDEO_PROVIDER_DURATION_SECONDS);
   const targetKbps = Math.max(96, Math.floor(TARGET_VIDEO_SIZE_BYTES * 8 / 1000 / Math.max(1, targetDurationSeconds)) - 48);
@@ -323751,7 +323808,7 @@ var require_BufferList = __commonJS((exports, module) => {
       this.head = this.tail = null;
       this.length = 0;
     };
-    BufferList.prototype.join = function join21(s) {
+    BufferList.prototype.join = function join20(s) {
       if (this.length === 0)
         return "";
       var p2 = this.head;
@@ -333215,28 +333272,77 @@ var init_batch_pricing = __esm(() => {
   };
 });
 
-// ../api/src/services/media-storage.ts
-import { randomUUID as randomUUID2 } from "crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
-import { rm as rm3, writeFile as writeFile5 } from "fs/promises";
-import { tmpdir as tmpdir11 } from "os";
-import { extname as extname2, join as join21 } from "path";
-function normalizeMimeType2(value) {
-  return value?.split(";")[0]?.trim().toLowerCase() || undefined;
+// ../api/src/utils/safe-media-fetch.ts
+import { lookup } from "dns/promises";
+import { isIP as isIP3 } from "net";
+function isMediaUrlGuardEnabled(env2 = process.env) {
+  return env2.OMNI_MEDIA_URL_GUARD?.trim().toLowerCase() !== "off";
 }
-function isHtmlMime2(value) {
-  const mimeType = normalizeMimeType2(value);
-  return mimeType === "text/html" || mimeType === "application/xhtml+xml";
+function isDeniedIpv4(address) {
+  const octets = address.split(".").map((part) => Number.parseInt(part, 10));
+  const [a, b3] = octets;
+  if (a === undefined || b3 === undefined)
+    return true;
+  if (a === 0)
+    return true;
+  if (a === 10)
+    return true;
+  if (a === 127)
+    return true;
+  if (a === 169 && b3 === 254)
+    return true;
+  if (a === 172 && b3 >= 16 && b3 <= 31)
+    return true;
+  if (a === 192 && b3 === 168)
+    return true;
+  return false;
 }
-function looksLikeHtml2(buffer3) {
-  const preview = buffer3.subarray(0, 512).toString("utf8").trimStart().toLowerCase();
-  return preview.startsWith("<!doctype html") || preview.startsWith("<html>") || preview.startsWith("<html ");
+function isDeniedIpv6(address) {
+  const normalized = address.toLowerCase();
+  if (normalized === "::" || normalized === "::1")
+    return true;
+  const mapped = normalized.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
+  if (mapped?.[1])
+    return isDeniedIpv4(mapped[1]);
+  const firstHextet = normalized.split(":", 1)[0] ?? "";
+  if (firstHextet.startsWith("fc") || firstHextet.startsWith("fd"))
+    return true;
+  if (/^fe[89ab]/.test(firstHextet))
+    return true;
+  return false;
 }
-function shouldRejectHtmlMedia(expectedMimeType, responseMimeType, buffer3) {
-  const expected = normalizeMimeType2(expectedMimeType);
-  if (!expected || isHtmlMime2(expected))
-    return false;
-  return isHtmlMime2(responseMimeType) || looksLikeHtml2(buffer3);
+function isPrivateOrReservedAddress(address) {
+  const family = isIP3(address);
+  if (family === 4)
+    return isDeniedIpv4(address);
+  if (family === 6)
+    return isDeniedIpv6(address);
+  return true;
+}
+async function assertSafeMediaUrl(url, resolveAddresses = defaultLookup, env2 = process.env) {
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new UnsafeMediaUrlError(url.toString(), `scheme ${url.protocol} is not allowed`);
+  }
+  if (!isMediaUrlGuardEnabled(env2))
+    return;
+  const hostname3 = url.hostname.replace(/^\[|\]$/g, "");
+  if (isIP3(hostname3) !== 0) {
+    if (isPrivateOrReservedAddress(hostname3)) {
+      throw new UnsafeMediaUrlError(url.toString(), `address ${hostname3} is in a private or reserved range`);
+    }
+    return;
+  }
+  let addresses;
+  try {
+    addresses = await resolveAddresses(hostname3);
+  } catch {
+    return;
+  }
+  for (const { address } of addresses) {
+    if (isPrivateOrReservedAddress(address)) {
+      throw new UnsafeMediaUrlError(url.toString(), `host ${hostname3} resolves to private address ${address}`);
+    }
+  }
 }
 function hostMatchesSuffix2(hostname3, suffix) {
   const normalizedHost = hostname3.toLowerCase();
@@ -333252,14 +333358,12 @@ function headersWithOptionalAuthorization2(headers, preserveAuthorization) {
     nextHeaders.delete("authorization");
   return nextHeaders;
 }
-async function fetchWithOptionalAuthenticatedRedirects(url, fetchOptions) {
+async function fetchMediaUrl(url, fetchOptions) {
   const { preserveAuthRedirectHostSuffixes, ...init5 } = fetchOptions ?? {};
-  if (!preserveAuthRedirectHostSuffixes?.length) {
-    return fetch(url, init5);
-  }
   let currentUrl = new URL(url);
+  await assertSafeMediaUrl(currentUrl);
   let currentHeaders = new Headers(init5.headers);
-  for (let redirects = 0;redirects <= 5; redirects++) {
+  for (let redirects = 0;redirects <= MAX_MEDIA_REDIRECTS; redirects++) {
     const response = await fetch(currentUrl.toString(), {
       ...init5,
       headers: currentHeaders,
@@ -333271,12 +333375,46 @@ async function fetchWithOptionalAuthenticatedRedirects(url, fetchOptions) {
     if (!location)
       return response;
     const nextUrl = new URL(location, currentUrl);
-    const preserveAuthorization = shouldPreserveAuthForRedirect(currentUrl, preserveAuthRedirectHostSuffixes) && shouldPreserveAuthForRedirect(nextUrl, preserveAuthRedirectHostSuffixes);
+    await assertSafeMediaUrl(nextUrl);
+    const preserveAuthorization = nextUrl.origin === currentUrl.origin || shouldPreserveAuthForRedirect(currentUrl, preserveAuthRedirectHostSuffixes) && shouldPreserveAuthForRedirect(nextUrl, preserveAuthRedirectHostSuffixes);
     currentHeaders = headersWithOptionalAuthorization2(init5.headers, preserveAuthorization);
     currentUrl = nextUrl;
   }
   throw new Error("Failed to download media: too many redirects");
 }
+var UnsafeMediaUrlError, defaultLookup = async (hostname3) => lookup(hostname3, { all: true }), MAX_MEDIA_REDIRECTS = 5;
+var init_safe_media_fetch = __esm(() => {
+  UnsafeMediaUrlError = class UnsafeMediaUrlError extends Error {
+    constructor(url, reason) {
+      super(`Refusing to fetch media URL: ${reason} (${url})`);
+      this.name = "UnsafeMediaUrlError";
+    }
+  };
+});
+
+// ../api/src/services/media-storage.ts
+import { randomUUID as randomUUID2 } from "crypto";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2 } from "fs";
+import { rm as rm3, writeFile as writeFile4 } from "fs/promises";
+import { tmpdir as tmpdir11 } from "os";
+import { extname as extname2, join as join20 } from "path";
+function normalizeMimeType2(value) {
+  return value?.split(";")[0]?.trim().toLowerCase() || undefined;
+}
+function isHtmlMime2(value) {
+  const mimeType = normalizeMimeType2(value);
+  return mimeType === "text/html" || mimeType === "application/xhtml+xml";
+}
+function looksLikeHtml2(buffer3) {
+  const preview = buffer3.subarray(0, 512).toString("utf8").trimStart().toLowerCase();
+  return preview.startsWith("<!doctype html") || preview.startsWith("<html>") || preview.startsWith("<html ");
+}
+function shouldRejectHtmlMedia(expectedMimeType, responseMimeType, buffer3) {
+  const expected = normalizeMimeType2(expectedMimeType);
+  if (!expected || isHtmlMime2(expected))
+    return false;
+  return isHtmlMime2(responseMimeType) || looksLikeHtml2(buffer3);
+}
 function getExtensionFromMime2(mimeType) {
   const mimeToExt = {
     "image/jpeg": ".jpg",
@@ -333335,10 +333473,10 @@ class MediaStorageService {
     const date3 = timestamp3 ?? new Date;
     const yearMonth = `${date3.getFullYear()}-${String(date3.getMonth() + 1).padStart(2, "0")}`;
     const ext = mimeType ? getExtensionFromMime2(mimeType) : ".bin";
-    return join21(instanceId, yearMonth, `${messageId}${ext}`);
+    return join20(instanceId, yearMonth, `${messageId}${ext}`);
   }
   buildPath(instanceId, messageId, mimeType, timestamp3) {
-    return join21(this.basePath, this.buildKey(instanceId, messageId, mimeType, timestamp3));
+    return join20(this.basePath, this.buildKey(instanceId, messageId, mimeType, timestamp3));
   }
   async storeFromBase64(instanceId, messageId, base64Data, mimeType, timestamp3) {
     const buffer3 = Buffer.from(base64Data, "base64");
@@ -333362,7 +333500,7 @@ class MediaStorageService {
     };
   }
   async storeFromUrl(instanceId, messageId, url, mimeType, timestamp3, fetchOptions) {
-    const response = await fetchWithOptionalAuthenticatedRedirects(url, fetchOptions);
+    const response = await fetchMediaUrl(url, fetchOptions);
     if (!response.ok) {
       throw new Error(`Failed to download media: ${response.status}`);
     }
@@ -333377,30 +333515,25 @@ class MediaStorageService {
   async updateMessageLocalPath(messageId, localPath) {
     await this.db.update(messages2).set({ mediaLocalPath: localPath }).where(eq(messages2.id, messageId));
   }
-  readMedia(relativePath) {
-    const fullPath = join21(this.basePath, relativePath);
-    if (!existsSync3(fullPath)) {
-      return null;
-    }
-    try {
-      const buffer3 = readFileSync6(fullPath);
-      const stat4 = statSync3(fullPath);
-      return {
-        buffer: buffer3,
-        size: Number(stat4.size)
-      };
-    } catch {
-      return null;
-    }
-  }
   async readMediaViaBackend(relativePath) {
     try {
       const buffer3 = await this.backend.read(relativePath);
       return { buffer: buffer3, size: buffer3.length };
-    } catch {
-      return null;
+    } catch (error3) {
+      if (isMediaNotFoundError(error3))
+        return null;
+      throw error3;
     }
   }
+  async statMedia(reference) {
+    return this.backend.stat(reference);
+  }
+  async readMediaRange(reference, start, endInclusive) {
+    return this.backend.readRange(reference, start, endInclusive);
+  }
+  async readMediaStream(reference) {
+    return this.backend.readStream(reference);
+  }
   getMimeType(filePath) {
     const ext = extname2(filePath).toLowerCase();
     const extToMime = {
@@ -333457,13 +333590,13 @@ class MediaStorageService {
   }
   async materializeForProcessing(reference) {
     if (this.backend.mode === "local") {
-      return { path: join21(this.basePath, reference), cleanup: async () => {} };
+      return { path: join20(this.basePath, reference), cleanup: async () => {} };
     }
     const buffer3 = await this.backend.read(reference);
     const ext = extname2(reference) || ".bin";
-    const tempPath = join21(tmpdir11(), `omni-media-${randomUUID2()}${ext}`);
+    const tempPath = join20(tmpdir11(), `omni-media-${randomUUID2()}${ext}`);
     try {
-      await writeFile5(tempPath, buffer3);
+      await writeFile4(tempPath, buffer3);
     } catch (error3) {
       await rm3(tempPath, { force: true }).catch(() => {});
       throw error3;
@@ -333482,6 +333615,7 @@ var init_media_storage = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
+  init_safe_media_fetch();
   log83 = createLogger("services:media-storage");
 });
 
@@ -337676,12 +337810,12 @@ var init_context3 = __esm(() => {
 
 // ../api/src/plugins/loader.ts
 import { existsSync as existsSync4 } from "fs";
-import { dirname as dirname6, join as join22 } from "path";
+import { dirname as dirname6, join as join21 } from "path";
 import { fileURLToPath } from "url";
 function findMonorepoRoot(startDir) {
   let current = startDir;
   while (current !== dirname6(current)) {
-    if (existsSync4(join22(current, "turbo.json"))) {
+    if (existsSync4(join21(current, "turbo.json"))) {
       return current;
     }
     current = dirname6(current);
@@ -337700,7 +337834,7 @@ function getMonorepoPackagesDir() {
   if (!monorepoRoot) {
     throw new Error("Could not find monorepo root (no turbo.json found). " + "Ensure you run from repo root or set OMNI_PACKAGES_DIR env var.");
   }
-  return join22(monorepoRoot, "packages");
+  return join21(monorepoRoot, "packages");
 }
 async function loadChannelPlugins2(options) {
   const { eventBus, db: db2 } = options;
@@ -338589,9 +338723,9 @@ var init_session_storage = __esm(() => {
 
 // ../api/src/plugins/agent-dispatcher.ts
 import { createHash as createHash10 } from "crypto";
-import { unlink, writeFile as writeFile6 } from "fs/promises";
+import { unlink, writeFile as writeFile5 } from "fs/promises";
 import { tmpdir as tmpdir12 } from "os";
-import { join as join23, resolve as resolve3 } from "path";
+import { join as join22, resolve as resolve3 } from "path";
 function sha256Digest(value) {
   return `sha256:${createHash10("sha256").update(value).digest("hex")}`;
 }
@@ -339042,7 +339176,7 @@ async function resolveDispatchMediaPath(mediaStorage, reference) {
       return null;
     }
   }
-  return resolve3(join23(MEDIA_BASE_PATH3, reference));
+  return resolve3(join22(MEDIA_BASE_PATH3, reference));
 }
 async function remoteMediaFile(m2, mimeType, mediaStorage, allowedTypes) {
   const key = m2.payload.rawPayload?.mediaLocalPath;
@@ -339101,7 +339235,7 @@ function checkProcessedColumn(msg, column2) {
   if (typeof processed === "string" && processed.startsWith("[error"))
     return "error";
   if (processed) {
-    const localPath = msg.mediaLocalPath ? resolve3(join23(MEDIA_BASE_PATH3, msg.mediaLocalPath)) : null;
+    const localPath = msg.mediaLocalPath ? resolve3(join22(MEDIA_BASE_PATH3, msg.mediaLocalPath)) : null;
     return {
       content: processed,
       localPath
@@ -340268,13 +340402,13 @@ function mimeToContentType(mimeType) {
 }
 async function downloadToTempFile(url, mimeType) {
   try {
-    const res = await fetch(url);
+    const res = await fetchMediaUrl(url);
     if (!res.ok)
       return null;
     const buffer3 = Buffer.from(await res.arrayBuffer());
     const ext = (mimeType.split("/")[1]?.split(";")[0] ?? "bin").replace(/[^a-z0-9]/gi, "");
-    const tmpPath = join23(tmpdir12(), `omni-hist-${Date.now()}-${Math.random().toString(36).slice(2)}.${ext}`);
-    await writeFile6(tmpPath, buffer3);
+    const tmpPath = join22(tmpdir12(), `omni-hist-${Date.now()}-${Math.random().toString(36).slice(2)}.${ext}`);
+    await writeFile5(tmpPath, buffer3);
     return tmpPath;
   } catch {
     return null;
@@ -341722,6 +341856,7 @@ var init_agent_dispatcher = __esm(() => {
   init_sentry_scrub();
   init_agent_runner();
   init_turn_events();
+  init_safe_media_fetch();
   init_agent_dispatch_limiter();
   init_loader2();
   init_message_debouncer();
@@ -342736,7 +342871,7 @@ var init_sync_jobs = __esm(() => {
 import { spawn as spawn5 } from "child_process";
 import { promises as fs15 } from "fs";
 import { tmpdir as tmpdir13 } from "os";
-import { join as join24 } from "path";
+import { join as join23 } from "path";
 function spawnWithEvents5(command, args) {
   return spawn5(command, args);
 }
@@ -342844,8 +342979,8 @@ var init_tts3 = __esm(() => {
       return Buffer.from(await response.arrayBuffer());
     }
     async convertToOggOpus(mp3Buffer) {
-      const inputPath = join24(tmpdir13(), `omni-tts-${Date.now()}-input.mp3`);
-      const outputPath = join24(tmpdir13(), `omni-tts-${Date.now()}-output.ogg`);
+      const inputPath = join23(tmpdir13(), `omni-tts-${Date.now()}-input.mp3`);
+      const outputPath = join23(tmpdir13(), `omni-tts-${Date.now()}-output.ogg`);
       try {
         await fs15.writeFile(inputPath, mp3Buffer);
         await new Promise((resolve4, reject) => {
@@ -342891,7 +343026,7 @@ var init_tts3 = __esm(() => {
       }
     }
     async getAudioDurationMs(audioBuffer) {
-      const tempPath = join24(tmpdir13(), `omni-tts-${Date.now()}-duration.ogg`);
+      const tempPath = join23(tmpdir13(), `omni-tts-${Date.now()}-duration.ogg`);
       try {
         await fs15.writeFile(tempPath, audioBuffer);
         return await new Promise((resolve4) => {
@@ -343711,17 +343846,17 @@ var init_timeout = __esm(() => {
 });
 
 // ../api/src/middleware/version-headers.ts
-import { existsSync as existsSync5, readFileSync as readFileSync7 } from "fs";
-import { join as join25 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync6 } from "fs";
+import { join as join24 } from "path";
 function loadRepoPackageVersion() {
   try {
     for (const candidate of [
-      join25(import.meta.dir, "..", "..", "..", "..", "package.json"),
-      join25(process.cwd(), "package.json")
+      join24(import.meta.dir, "..", "..", "..", "..", "package.json"),
+      join24(process.cwd(), "package.json")
     ]) {
       if (!existsSync5(candidate))
         continue;
-      const parsed = JSON.parse(readFileSync7(candidate, "utf-8"));
+      const parsed = JSON.parse(readFileSync6(candidate, "utf-8"));
       if (parsed.version)
         return parsed.version;
     }
@@ -343739,13 +343874,13 @@ function resolveFallbackVersion() {
 function loadServerVersionInfo() {
   try {
     for (const candidate of [
-      join25(import.meta.dir, "..", "..", "..", "..", "version.json"),
-      join25(process.cwd(), "version.json")
+      join24(import.meta.dir, "..", "..", "..", "..", "version.json"),
+      join24(process.cwd(), "version.json")
     ]) {
       if (!existsSync5(candidate)) {
         continue;
       }
-      const parsed = JSON.parse(readFileSync7(candidate, "utf-8"));
+      const parsed = JSON.parse(readFileSync6(candidate, "utf-8"));
       return {
         version: parsed.version ?? resolveFallbackVersion(),
         commit: parsed.commit ?? FALLBACK_COMMIT
@@ -354677,7 +354812,7 @@ var init_instances3 = __esm(() => {
   });
   instancesRoutes.post("/:id/sync", instanceAccess2, zValidator("json", syncRequestSchema), async (c) => {
     const id = c.req.param("id");
-    const { type, depth, channelId, downloadMedia: downloadMedia2, chatJids } = c.req.valid("json");
+    const { type, depth, channelId, downloadMedia, chatJids } = c.req.valid("json");
     const services = c.get("services");
     const instance4 = await services.instances.getById(id);
     if (type === "profile") {
@@ -354726,7 +354861,7 @@ var init_instances3 = __esm(() => {
       config: {
         depth: depth ?? "7d",
         channelId,
-        downloadMedia: downloadMedia2 ?? instance4.downloadMediaOnSync,
+        downloadMedia: downloadMedia ?? instance4.downloadMediaOnSync,
         ...chatJids?.length ? { chatJids } : {}
       }
     });
@@ -356978,40 +357113,52 @@ var init_media = __esm(() => {
     const relativePath = `${instanceId}/${path3}`;
     const db2 = c.get("services");
     const storage = getMediaStorage(db2);
-    const result = await storage.readMediaViaBackend(relativePath);
-    if (!result) {
-      return c.json({ error: { code: "NOT_FOUND", message: "Media not found" } }, 404);
-    }
-    const buffer3 = result.buffer;
-    const fileSize = result.size;
-    const mimeType = storage.getMimeType(path3);
-    const rangeHeader = c.req.header("Range");
-    if (rangeHeader) {
-      const matches = rangeHeader.match(/bytes=(\d+)-(\d*)/);
-      if (matches?.[1]) {
-        const start = Number.parseInt(matches[1], 10);
-        const end = matches[2] ? Number.parseInt(matches[2], 10) : fileSize - 1;
-        const chunkSize = end - start + 1;
-        return new Response(buffer3.subarray(start, end + 1), {
-          status: 206,
-          headers: {
-            "Content-Type": mimeType,
-            "Content-Length": String(chunkSize),
-            "Content-Range": `bytes ${start}-${end}/${fileSize}`,
-            "Accept-Ranges": "bytes"
+    try {
+      const stat5 = await storage.statMedia(relativePath);
+      if (!stat5) {
+        return c.json({ error: { code: "NOT_FOUND", message: "Media not found" } }, 404);
+      }
+      const fileSize = stat5.size;
+      const mimeType = storage.getMimeType(path3);
+      const rangeHeader = c.req.header("Range");
+      if (rangeHeader) {
+        const matches = rangeHeader.match(/bytes=(\d+)-(\d*)/);
+        if (matches?.[1]) {
+          const start = Number.parseInt(matches[1], 10);
+          const requestedEnd = matches[2] ? Number.parseInt(matches[2], 10) : fileSize - 1;
+          const end = Math.min(requestedEnd, fileSize - 1);
+          if (start >= fileSize || start > end) {
+            return new Response(null, {
+              status: 416,
+              headers: { "Content-Range": `bytes */${fileSize}`, "Accept-Ranges": "bytes" }
+            });
           }
-        });
+          const chunk2 = await storage.readMediaRange(relativePath, start, end);
+          return new Response(chunk2, {
+            status: 206,
+            headers: {
+              "Content-Type": mimeType,
+              "Content-Length": String(end - start + 1),
+              "Content-Range": `bytes ${start}-${end}/${fileSize}`,
+              "Accept-Ranges": "bytes"
+            }
+          });
+        }
       }
+      const stream2 = await storage.readMediaStream(relativePath);
+      return new Response(stream2, {
+        status: 200,
+        headers: {
+          "Content-Type": mimeType,
+          "Content-Length": String(fileSize),
+          "Accept-Ranges": "bytes",
+          "Cache-Control": "public, max-age=31536000"
+        }
+      });
+    } catch (err) {
+      log110.error("Media backend read failed", { relativePath, error: String(err) });
+      return c.json({ error: { code: "MEDIA_BACKEND_UNAVAILABLE", message: "Media storage backend unavailable, retry later" } }, 503);
     }
-    return new Response(buffer3, {
-      status: 200,
-      headers: {
-        "Content-Type": mimeType,
-        "Content-Length": String(fileSize),
-        "Accept-Ranges": "bytes",
-        "Cache-Control": "public, max-age=31536000"
-      }
-    });
   });
 });
 
@@ -357049,7 +357196,7 @@ var init__close_contact_config = __esm(() => {
 
 // ../api/src/routes/v2/messages.ts
 import { existsSync as existsSync6 } from "fs";
-import { extname as extname3, join as join26 } from "path";
+import { extname as extname3, join as join25 } from "path";
 function inferMediaMimeType(type, filename) {
   if (filename) {
     const fromExtension = MIME_BY_EXTENSION[extname3(filename).toLowerCase()];
@@ -357608,7 +357755,7 @@ var init_messages5 = __esm(() => {
     let mediaLocalPath = message2.mediaLocalPath;
     let cached = false;
     if (mediaLocalPath) {
-      const fullPath = join26(mediaStorage2.getBasePath(), mediaLocalPath);
+      const fullPath = join25(mediaStorage2.getBasePath(), mediaLocalPath);
       if (existsSync6(fullPath)) {
         cached = true;
       } else {
@@ -371273,9 +371420,9 @@ function popStackToMatchingTag(openStack, name) {
 }
 function appendTagTokenToState(state, tokenValue) {
   const close = parseClosingTag(tokenValue);
-  const open = parseOpeningTag(tokenValue);
-  if (open) {
-    if (!canAppendPlainHtml(state, tokenValue, open))
+  const open2 = parseOpeningTag(tokenValue);
+  if (open2) {
+    if (!canAppendPlainHtml(state, tokenValue, open2))
       flushPlainHtmlState(state);
   } else if (!canAppendPlainHtml(state, tokenValue)) {
     flushPlainHtmlState(state);
@@ -371285,8 +371432,8 @@ function appendTagTokenToState(state, tokenValue) {
     popStackToMatchingTag(state.openStack, close.name);
     return;
   }
-  if (open)
-    state.openStack.push(open);
+  if (open2)
+    state.openStack.push(open2);
 }
 function appendTextTokenToState(state, text) {
   let remaining = text;
@@ -476016,9 +476163,9 @@ function makeLibSignalRepository(auth, logger5, pnToLIDFunc) {
       if (!session) {
         return null;
       }
-      const open = session.getOpenSession?.();
-      const baseKey = open?.indexInfo?.baseKey;
-      const registrationId = open?.registrationId;
+      const open2 = session.getOpenSession?.();
+      const baseKey = open2?.indexInfo?.baseKey;
+      const registrationId = open2?.registrationId;
       if (!baseKey || typeof registrationId !== "number") {
         return null;
       }
@@ -484632,13 +484779,13 @@ function resetConnectionState2(instanceId) {
 // ../channel-whatsapp/src/handlers/messages.ts
 init_src2();
 init_src();
-import { basename, join as join9 } from "path";
+import { basename, join as join8 } from "path";
 
 // ../channel-whatsapp/src/utils/download.ts
 init_src2();
 import { createWriteStream as createWriteStream4 } from "fs";
-import { mkdir as mkdir3, rm as rm2, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname2, join as join8 } from "path";
+import { mkdir as mkdir3, rm as rm2 } from "fs/promises";
+import { dirname as dirname2 } from "path";
 import { Transform as Transform3 } from "stream";
 import { pipeline as pipeline3 } from "stream/promises";
 
@@ -485176,8 +485323,8 @@ async function tryDownloadMedia(msg, instanceId, externalId, apiBaseUrl, backend
     const yearMonth = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
     const ext = getExtension2(mediaInfo.mimeType);
     const safeExternalId = basename(externalId).replace(/[^a-zA-Z0-9_\-]/g, "_");
-    const relativePath = join9(instanceId, yearMonth, `${safeExternalId}${ext}`);
-    const result = backend.mode === "remote" ? await streamMediaWithRetry(() => downloadMediaToBackend(msg, backend, relativePath, downloadGuard5.maxSizeBytes)) : await streamMediaWithRetry(() => downloadMediaToFile(msg, join9(MEDIA_BASE_PATH2, relativePath), downloadGuard5.maxSizeBytes));
+    const relativePath = join8(instanceId, yearMonth, `${safeExternalId}${ext}`);
+    const result = backend.mode === "remote" ? await streamMediaWithRetry(() => downloadMediaToBackend(msg, backend, relativePath, downloadGuard5.maxSizeBytes)) : await streamMediaWithRetry(() => downloadMediaToFile(msg, join8(MEDIA_BASE_PATH2, relativePath), downloadGuard5.maxSizeBytes));
     if (!result)
       return null;
     log51.debug("Downloaded media", { externalId, path: relativePath, size: result.size, mode: backend.mode });