@automagik/omni 2.260922.13 → 2.260922.15

package/dist/server/index.js

@@ -136088,8 +136088,12 @@ var init_types10 = __esm(() => {
 
 // ../channel-slack/src/connection/bolt-client.ts
 function buildActingClients(options, botClient) {
-  if (options.authMode !== "user")
+  if (options.authMode !== "user") {
+    if (!botClient) {
+      throw new SlackError(SlackErrorCode.INVALID_TOKEN, "botToken (xoxb-...) is required unless authMode is 'user'");
+    }
     return { actingClient: botClient };
+  }
   if (!options.userToken) {
     throw new SlackError(SlackErrorCode.CONNECTION_FAILED, "userToken is required when authMode is 'user'");
   }
@@ -136276,6 +136280,9 @@ var init_bolt_client = __esm(() => {
 
 // ../channel-slack/src/connection/app-receiver.ts
 import { createHash as createHash6 } from "crypto";
+function hasBotToken(attachment) {
+  return Boolean(attachment.botToken);
+}
 function receiverKeyFor(opts) {
   const mode = opts.mode ?? "socket";
   if (mode === "http") {
@@ -136425,8 +136432,7 @@ class SlackAppReceiver {
     }
     this.attachmentMap.delete(attachment.instanceId);
     this.attachmentMap.set(attachment.instanceId, attachment);
-    const newest = this.latestAttachmentFor(attachment.teamId) ?? attachment;
-    this.botClients.set(newest.teamId, this.clientForBotToken(newest.botToken));
+    this.refreshBotClient(attachment.teamId);
     this.logger.debug("Instance attached to Slack receiver", {
       receiver: this.key,
       instanceId: attachment.instanceId,
@@ -136439,21 +136445,13 @@ class SlackAppReceiver {
     if (!removed)
       return false;
     this.attachmentMap.delete(instanceId);
-    const remainingForTeam = this.latestAttachmentFor(removed.teamId);
-    if (remainingForTeam) {
-      this.botClients.set(remainingForTeam.teamId, this.clientForBotToken(remainingForTeam.botToken));
-    } else {
-      this.botClients.delete(removed.teamId);
-    }
-    let tokenStillUsed = false;
-    for (const attachment of this.attachmentMap.values()) {
-      if (attachment.botToken === removed.botToken) {
-        tokenStillUsed = true;
-        break;
-      }
+    this.refreshBotClient(removed.teamId);
+    if (hasBotToken(removed)) {
+      const token = removed.botToken;
+      const tokenStillUsed = [...this.attachmentMap.values()].some((attachment) => attachment.botToken === token);
+      if (!tokenStillUsed)
+        this.clientsByToken.delete(token);
     }
-    if (!tokenStillUsed)
-      this.clientsByToken.delete(removed.botToken);
     this.logger.debug("Instance detached from Slack receiver", {
       receiver: this.key,
       instanceId,
@@ -136471,16 +136469,25 @@ class SlackAppReceiver {
       return [];
     const teamAttachments = this.teamAttachmentsFor(teamId);
     if (teamAttachments.length <= 1)
-      return teamAttachments;
+      return this.soleTargets(teamAttachments, body);
     this.announceNarrowing(teamId, teamAttachments.length);
     return selectAuthorizedTargets(teamAttachments, await this.authorizationsFor(body));
   }
+  async soleTargets(teamAttachments, body) {
+    const [only] = teamAttachments;
+    if (!only || hasBotToken(only))
+      return teamAttachments;
+    if (selectAuthorizedTargets(teamAttachments, body.authorizations ?? []).length > 0)
+      return teamAttachments;
+    return selectAuthorizedTargets(teamAttachments, await this.authorizationsFor(body));
+  }
   async targetsForActor(teamId, actorUserId) {
     if (!teamId)
       return [];
     const teamAttachments = this.teamAttachmentsFor(teamId);
-    if (teamAttachments.length <= 1)
-      return teamAttachments;
+    if (teamAttachments.length <= 1) {
+      return teamAttachments.filter((attachment) => hasBotToken(attachment) || actorUserId !== undefined && attachment.actingUserId === actorUserId);
+    }
     const own = actorUserId ? teamAttachments.find((attachment) => attachment.authMode === "user" && attachment.actingUserId === actorUserId) : undefined;
     if (own) {
       this.announceNarrowing(teamId, teamAttachments.length);
@@ -136570,27 +136577,31 @@ class SlackAppReceiver {
   }
   async authorize(source) {
     const teamId = source.teamId;
-    const attachment = teamId ? this.latestAttachmentFor(teamId) : undefined;
-    if (!attachment) {
+    if (!teamId || this.teamAttachmentsFor(teamId).length === 0) {
       throw new SlackError(SlackErrorCode.NOT_CONNECTED, `No Slack instance attached for team ${teamId ?? "(none)"} on receiver ${this.key}`, true);
     }
-    return {
-      botToken: attachment.botToken,
-      botId: attachment.botId,
-      botUserId: attachment.botUserId,
-      teamId: attachment.teamId
-    };
+    const bot = this.latestBotAttachmentFor(teamId);
+    if (!bot)
+      return { teamId };
+    return { botToken: bot.botToken, botId: bot.botId, botUserId: bot.botUserId, teamId: bot.teamId };
   }
-  latestAttachmentFor(teamId) {
+  latestBotAttachmentFor(teamId) {
     let latest;
     for (const attachment of this.attachmentMap.values()) {
-      if (attachment.teamId !== teamId)
+      if (attachment.teamId !== teamId || !hasBotToken(attachment))
         continue;
       if (!latest || attachment.attachedAt >= latest.attachedAt)
         latest = attachment;
     }
     return latest;
   }
+  refreshBotClient(teamId) {
+    const newest = this.latestBotAttachmentFor(teamId);
+    if (newest)
+      this.botClients.set(teamId, this.clientForBotToken(newest.botToken));
+    else
+      this.botClients.delete(teamId);
+  }
   botAttachmentFor(teamId) {
     for (const attachment of this.attachmentMap.values()) {
       if (attachment.teamId === teamId && attachment.authMode !== "user")
@@ -136707,7 +136718,7 @@ class SlackAppReceiver {
         affected.push(attachment);
         continue;
       }
-      const revoked = attachment.authMode === "user" ? attachment.actingUserId !== undefined && (tokens.oauth?.includes(attachment.actingUserId) ?? false) : tokens.bot?.includes(attachment.botUserId) ?? false;
+      const revoked = attachment.authMode === "user" ? attachment.actingUserId !== undefined && (tokens.oauth?.includes(attachment.actingUserId) ?? false) : attachment.botUserId !== undefined && (tokens.bot?.includes(attachment.botUserId) ?? false);
       if (revoked)
         affected.push(attachment);
     }
@@ -136810,7 +136821,7 @@ function headersWithOptionalAuthorization(botToken, preserveAuthorization) {
 }
 async function fetchSlackPrivateUrl(url, botToken) {
   let currentUrl = new URL(url);
-  let preserveAuthorization = true;
+  let preserveAuthorization = isSlackHost(currentUrl);
   for (let redirects = 0;redirects <= 5; redirects++) {
     const response = await fetch(currentUrl.toString(), {
       headers: headersWithOptionalAuthorization(botToken, preserveAuthorization),
@@ -137211,7 +137222,8 @@ function setupMessageHandlers2(app, target, botUserId, callbacks, dmPolicyConfig
     const meta = extractMessageMeta(msg);
     if (await enforceDmPolicy(meta, userId, dmPolicyConfig, instanceId, callbacks, logger5))
       return;
-    await processMessage2(instanceId, msg, resolveBotUserId(), callbacks, logger5, reliability, filterConfig);
+    const mentionUserId = resolveBotUserId() ?? resolveActingUserId();
+    await processMessage2(instanceId, msg, mentionUserId, callbacks, logger5, reliability, filterConfig);
   };
   if (app) {
     app.message(async ({ message: message2 }) => handle(message2));
@@ -149754,7 +149766,7 @@ function resolveSlackTokens(slackConfig, rawOptions, rawCredentials) {
   const appToken = slackConfig.appToken ?? rawCredentials.appToken;
   const signingSecret = slackConfig.signingSecret ?? rawCredentials.signingSecret;
   const mode = slackConfig.mode ?? "socket";
-  if (!botToken) {
+  if (!botToken && authMode !== "user") {
     throw new SlackError(SlackErrorCode.INVALID_TOKEN, "botToken (xoxb-...) is required");
   }
   if (authMode === "user" && !userToken) {
@@ -149774,6 +149786,16 @@ function resolveSlackTokens(slackConfig, rawOptions, rawCredentials) {
 function readConnectOverrides(rawOptions) {
   return { force: rawOptions.force === true };
 }
+function resolveAttachmentTeamId(botTeamId, userTeamId) {
+  if (botTeamId && userTeamId && botTeamId !== userTeamId) {
+    throw new SlackError(SlackErrorCode.CONNECTION_FAILED, `The bot token belongs to workspace ${botTeamId} but the user token to ${userTeamId}; both must come from the same workspace`);
+  }
+  const teamId = botTeamId ?? userTeamId;
+  if (!teamId) {
+    throw new SlackError(SlackErrorCode.CONNECTION_FAILED, "auth.test returned no team_id for the user token; cannot tell which workspace this instance belongs to");
+  }
+  return teamId;
+}
 function resolvePresentedIdentity(attachment) {
   if (attachment.authMode === "user" && attachment.actingUserId) {
     return {
@@ -149962,29 +149984,30 @@ var init_plugin = __esm(() => {
       return { key, receiver };
     }
     async buildAttachment(instanceId, receiver, options, config2, caches) {
-      const botClient = receiver.clientForBotToken(options.botToken);
-      const identity = await resolveWorkspaceIdentity(botClient);
+      const botClient = options.botToken ? receiver.clientForBotToken(options.botToken) : undefined;
+      const identity = botClient ? await resolveWorkspaceIdentity(botClient) : undefined;
       const { actingClient, userClient } = buildActingClients(options, botClient);
       let actingUserId;
       let actingUserName;
+      let actingTeamId;
       if (userClient) {
-        ({ actingUserId, actingUserName } = await this.resolveActingUserId(userClient));
+        ({ actingUserId, actingUserName, teamId: actingTeamId } = await this.resolveActingUserId(userClient));
         if (!actingUserId) {
           throw new SlackError(SlackErrorCode.CONNECTION_FAILED, "User mode requires a resolved acting user id, but it could not be determined from the user token. Refusing to connect.");
         }
       }
       return {
         instanceId,
-        teamId: identity.teamId,
+        teamId: resolveAttachmentTeamId(identity?.teamId, actingTeamId),
         authMode: options.authMode ?? "bot",
         actingClient,
         userClient,
         actingUserId,
         actingUserName,
-        botUserId: identity.botUserId,
-        botId: identity.botId,
-        botToken: options.botToken,
-        botName: identity.botName,
+        botUserId: identity?.botUserId,
+        botId: identity?.botId,
+        botToken: botClient ? options.botToken : undefined,
+        botName: identity?.botName,
         config: config2,
         dedupeCache: caches.dedupeCache,
         debouncer: caches.debouncer,
@@ -150002,7 +150025,7 @@ var init_plugin = __esm(() => {
         const username = auth.user ?? undefined;
         const actingUserName = actingUserId ? await resolveActingUserName(userClient, actingUserId, username, this.logger) : username;
         this.logger.info("Acting user identity resolved", { actingUserId, actingUser: actingUserName });
-        return { actingUserId, actingUserName };
+        return { actingUserId, actingUserName, teamId: auth.team_id ?? undefined };
       } catch (error) {
         this.logger.warn("Failed to resolve the acting user identity from the user token", {
           error: String(error)
@@ -150578,12 +150601,12 @@ var init_plugin = __esm(() => {
       if (!channelId || !threadTs)
         return { totalFetched: 0, messages: [] };
       const botUserId = attachment.botUserId;
-      const botToken = attachment.botToken;
+      const downloadToken = attachment.authMode === "user" && attachment.userClient?.token || attachment.botToken;
       const limit = options.limit ?? 200;
-      const messages = await this.paginateThreadHistory(attachment, channelId, threadTs, botUserId, botToken, limit);
+      const messages = await this.paginateThreadHistory(attachment, channelId, threadTs, botUserId, downloadToken, limit);
       return { totalFetched: messages.length, messages };
     }
-    async paginateThreadHistory(attachment, channelId, threadTs, botUserId, botToken, maxMessages) {
+    async paginateThreadHistory(attachment, channelId, threadTs, botUserId, downloadToken, maxMessages) {
       const messages = [];
       let cursor;
       do {
@@ -150594,7 +150617,7 @@ var init_plugin = __esm(() => {
           cursor
         });
         for (const msg of response.messages ?? []) {
-          const result = await this.buildHistorySyncMessage(msg, channelId, botUserId, botToken, attachment.botId);
+          const result = await this.buildHistorySyncMessage(msg, channelId, botUserId, downloadToken, attachment.botId);
           if (result)
             messages.push(result);
           if (messages.length >= maxMessages)
@@ -150604,13 +150627,13 @@ var init_plugin = __esm(() => {
       } while (cursor && messages.length < maxMessages);
       return messages;
     }
-    async downloadSlackMediaToTemp(file, botToken, ts) {
+    async downloadSlackMediaToTemp(file, downloadToken, ts) {
       const mimeType = file.mimetype ?? "application/octet-stream";
       const urlPrivate = file.url_private_download ?? file.url_private;
-      if (!urlPrivate)
+      if (!urlPrivate || !downloadToken)
         return { mimeType, localPath: undefined };
       try {
-        const { buffer: buffer2 } = await downloadSlackFile(urlPrivate, botToken, this.logger);
+        const { buffer: buffer2 } = await downloadSlackFile(urlPrivate, downloadToken, this.logger);
         const ext = (mimeType.split("/")[1]?.split(";")[0] ?? "bin").replace(/[^a-z0-9]/gi, "");
         const tmpPath = join4(tmpdir(), `omni-slack-hist-${Date.now()}-${Math.random().toString(36).slice(2)}.${ext}`);
         await writeFile2(tmpPath, buffer2);
@@ -150620,7 +150643,7 @@ var init_plugin = __esm(() => {
         return { mimeType, localPath: undefined };
       }
     }
-    async buildHistorySyncMessage(msg, channelId, botUserId, botToken, ownBotId) {
+    async buildHistorySyncMessage(msg, channelId, botUserId, downloadToken, ownBotId) {
       const userId = msg.user;
       if (!userId || shouldSkipMessage(msg, [botUserId], ownBotId))
         return null;
@@ -150629,7 +150652,7 @@ var init_plugin = __esm(() => {
       const files = msg.files;
       const timestamp = new Date(Number.parseFloat(ts) * 1000);
       if (files && files.length > 0) {
-        const { mimeType, localPath } = await this.downloadSlackMediaToTemp(files[0], botToken, ts);
+        const { mimeType, localPath } = await this.downloadSlackMediaToTemp(files[0], downloadToken, ts);
         return {
           externalId: ts,
           chatId: channelId,
@@ -266412,7 +266435,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260922.13",
+    version: "2.260922.15",
     private: true,
     type: "module",
     exports: {
@@ -408999,6 +409022,484 @@ var init_media3 = __esm(() => {
   });
 });
 
+// ../api/src/plugins/media-processor.ts
+function getContentFieldForType(processingType, contentType) {
+  switch (processingType) {
+    case "transcription":
+      return "transcription";
+    case "description":
+      return contentType === "video" ? "videoDescription" : "imageDescription";
+    case "extraction":
+      return "documentExtraction";
+    default:
+      return;
+  }
+}
+function inferProcessingType(contentType) {
+  switch (contentType) {
+    case "audio":
+      return "transcription";
+    case "image":
+    case "video":
+      return "description";
+    case "document":
+      return "extraction";
+    default:
+      return "transcription";
+  }
+}
+function shouldProcess(contentType) {
+  if (!contentType)
+    return false;
+  return PROCESSABLE_MEDIA_TYPES.has(contentType);
+}
+function isUuid(value) {
+  return typeof value === "string" && isValidUuid(value);
+}
+function envelopeTenantId(envelope2) {
+  const classification = classifyEnvelope(envelope2.metadata);
+  return classification.world === "tenant" ? classification.tenantId : undefined;
+}
+function runMediaDb(ctx, trustedTenantId, fn) {
+  return trustedTenantId === undefined ? fn() : runInWorkerTenantScope(ctx.db, trustedTenantId, fn);
+}
+function getMimeType2(content) {
+  if (content.mimeType)
+    return content.mimeType;
+  switch (content.type) {
+    case "audio":
+      return "audio/ogg";
+    case "image":
+      return "image/jpeg";
+    case "video":
+      return "video/mp4";
+    case "document":
+      return "application/octet-stream";
+    default:
+      return;
+  }
+}
+function isSlackFileUrl(mediaUrl) {
+  let url;
+  try {
+    url = new URL(mediaUrl);
+  } catch {
+    return false;
+  }
+  return url.protocol === "https:" && hostMatchesSuffix4(url.hostname, "slack.com");
+}
+function selectSlackDownloadToken(instance4, mediaUrl) {
+  if (!isSlackFileUrl(mediaUrl))
+    return;
+  const slackAuthMode = instance4.slackAuthMode;
+  const slackUserToken = instance4.slackUserToken;
+  if (slackAuthMode === "user" && typeof slackUserToken === "string" && slackUserToken.length > 0) {
+    return slackUserToken;
+  }
+  return instance4.slackBotToken;
+}
+async function buildFetchOptions2(ctx, instanceId, mediaUrl, channelType, trustedTenantId) {
+  if (channelType !== "slack")
+    return;
+  try {
+    const instance4 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.instances.getById(instanceId));
+    const token = selectSlackDownloadToken(instance4, mediaUrl);
+    if (token) {
+      return { headers: { Authorization: `Bearer ${token}` } };
+    }
+  } catch {}
+  return;
+}
+async function downloadMediaFromUrl(ctx, instanceId, messageId, mediaUrl, mimeType, platformTimestamp, channelType, trustedTenantId) {
+  const fetchOptions = await buildFetchOptions2(ctx, instanceId, mediaUrl, channelType, trustedTenantId);
+  try {
+    const result = await ctx.mediaStorage.storeFromUrl(instanceId, messageId, mediaUrl, mimeType, platformTimestamp, fetchOptions, trustedTenantId);
+    await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
+    log125.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
+    return result.localPath;
+  } catch (error3) {
+    log125.error("Failed to download media", { error: String(error3), mediaUrl });
+    return null;
+  }
+}
+async function downloadMediaViaPlugin(ctx, instanceId, messageId, channelType, mediaRef, fallbackMimeType, platformTimestamp, trustedTenantId) {
+  const plugin13 = await (ctx.resolveChannelPlugin ?? getPlugin)(channelType);
+  if (!plugin13?.downloadInboundMedia) {
+    log125.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
+    return null;
+  }
+  try {
+    const { buffer: buffer3, mimeType } = pluginMediaSchema.parse(await plugin13.downloadInboundMedia(instanceId, mediaRef));
+    const result = await ctx.mediaStorage.storeFromBuffer(instanceId, messageId, buffer3, mimeType || fallbackMimeType, platformTimestamp, trustedTenantId);
+    await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
+    log125.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
+    return result.localPath;
+  } catch (error3) {
+    log125.error("Failed to download inbound media via plugin", {
+      error: String(error3),
+      channelType,
+      messageId
+    });
+    return null;
+  }
+}
+async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, mimeType, channelType, trustedTenantId) {
+  const maxWaitMs = 5000;
+  const pollMs = 250;
+  const deadline = Date.now() + maxWaitMs;
+  let chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
+  while (!chat2 && Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, pollMs));
+    chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
+  }
+  if (!chat2) {
+    log125.debug("Chat not found, cannot process media", { chatId, externalId });
+    return null;
+  }
+  const chatDbId = chat2.id;
+  let message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
+  while (!message2 && Date.now() < deadline) {
+    await new Promise((r) => setTimeout(r, pollMs));
+    message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
+  }
+  if (!message2) {
+    log125.debug("Message not found after waiting, cannot process media", { externalId });
+    return null;
+  }
+  let filePath = message2.mediaLocalPath;
+  if (!filePath && content.mediaUrl) {
+    filePath = await downloadMediaFromUrl(ctx, instanceId, message2.id, content.mediaUrl, mimeType, message2.platformTimestamp ?? undefined, channelType, trustedTenantId);
+    if (!filePath)
+      return null;
+  }
+  if (!filePath && content.mediaId && channelType) {
+    filePath = await downloadMediaViaPlugin(ctx, instanceId, message2.id, channelType, content.mediaId, mimeType, message2.platformTimestamp ?? undefined, trustedTenantId);
+    if (!filePath)
+      return null;
+  }
+  if (!filePath) {
+    log125.debug("No media file path available", { externalId });
+    return null;
+  }
+  return {
+    messageId: message2.id,
+    filePath
+  };
+}
+async function resolveSafeMediaContentEventId(ctx, envelope2, eventId) {
+  if (!isUuid(eventId))
+    return null;
+  const id = eventId;
+  const maxWaitMs = 250;
+  const pollMs = 50;
+  const deadline = Date.now() + maxWaitMs;
+  while (true) {
+    let found;
+    try {
+      found = await runConsumerInTenantContext(ctx.db, envelope2, async () => {
+        const [event] = await scopedHandle(ctx.db).select({ id: omniEvents.id }).from(omniEvents).where(eq(omniEvents.id, id)).limit(1);
+        return event?.id ?? null;
+      });
+    } catch (error3) {
+      log125.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
+      return null;
+    }
+    if (found)
+      return found;
+    if (Date.now() >= deadline) {
+      log125.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
+      return null;
+    }
+    await new Promise((resolve4) => setTimeout(resolve4, pollMs));
+  }
+}
+async function persistProcessingResult(ctx, messageId, safeEventId, result, contentType) {
+  if (result.content) {
+    const updateField = getContentFieldForType(result.processingType, contentType);
+    if (updateField) {
+      await scopedHandle(ctx.db).update(messages2).set({ [updateField]: result.content }).where(eq(messages2.id, messageId));
+    }
+  }
+  try {
+    const sdb = scopedHandle(ctx.db);
+    const row = {
+      eventId: safeEventId ?? null,
+      mediaId: messageId,
+      processingType: result.processingType,
+      content: result.content ?? "",
+      model: result.model,
+      provider: result.provider,
+      language: result.language,
+      duration: result.duration,
+      tokensUsed: result.inputTokens ? result.inputTokens + (result.outputTokens ?? 0) : undefined,
+      costUsd: result.costCents != null ? String(Math.round(result.costCents)) : null,
+      processingTimeMs: result.processingTimeMs
+    };
+    if (currentTenantScope()) {
+      await sdb.transaction(async (sp) => {
+        await sp.insert(mediaContent).values(row);
+      });
+    } else {
+      await sdb.insert(mediaContent).values(row);
+    }
+  } catch (error3) {
+    log125.warn("Failed to insert media_content record (non-critical)", {
+      messageId,
+      error: String(error3)
+    });
+  }
+}
+function getPromptOverride(ctx, contentType) {
+  if (contentType === "audio")
+    return ctx.promptOverrides.audio;
+  if (contentType === "image")
+    return ctx.promptOverrides.image;
+  if (contentType === "video")
+    return ctx.promptOverrides.video;
+  if (contentType === "document")
+    return ctx.promptOverrides.document;
+  return;
+}
+async function processMessageMedia(ctx, payload, metadata, envelope2) {
+  const { instanceId, eventId } = metadata;
+  const { content, externalId } = payload;
+  const mimeType = getMimeType2(content);
+  const trustedTenantId = envelopeTenantId(envelope2);
+  if (!mimeType || !ctx.mediaService.canProcess(mimeType)) {
+    log125.debug("MIME type not processable or missing", { mimeType, externalId });
+    return;
+  }
+  const media = await resolveMediaPath2(ctx, instanceId, payload.chatId, externalId, content, mimeType, metadata.channelType, trustedTenantId);
+  if (!media)
+    return;
+  const processable = await ctx.mediaStorage.materializeForProcessing(media.filePath);
+  log125.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
+  let result;
+  try {
+    result = await ctx.mediaService.process(processable.path, mimeType, {
+      language: ctx.defaultLanguage,
+      caption: content.text,
+      prompt: getPromptOverride(ctx, content.type)
+    });
+  } finally {
+    await processable.cleanup();
+  }
+  if (!result.success) {
+    const reason = result.errorMessage ?? "unknown";
+    log125.warn("Media processing failed", { messageId: media.messageId, error: reason });
+    const processingType = result.processingType ?? inferProcessingType(content.type);
+    const errorColumn = getContentFieldForType(processingType, content.type);
+    if (errorColumn) {
+      const marker = `[error: media processing failed \u2014 ${reason}]`;
+      await runConsumerInTenantContext(ctx.db, envelope2, async () => {
+        await scopedHandle(ctx.db).update(messages2).set({ [errorColumn]: marker }).where(eq(messages2.id, media.messageId));
+      });
+    }
+    await ctx.eventBus.publish("media.processing.failed", {
+      eventId: eventId ?? media.messageId,
+      mediaId: media.messageId,
+      processingType,
+      error: reason,
+      provider: result.provider,
+      model: result.model
+    }, { instanceId, channelType: metadata.channelType });
+    await ctx.eventBus.publish("media.processed", {
+      eventId: eventId ?? media.messageId,
+      mediaId: media.messageId,
+      processingType,
+      content: "",
+      error: reason
+    }, { instanceId, channelType: metadata.channelType });
+    return;
+  }
+  const safeEventId = await resolveSafeMediaContentEventId(ctx, envelope2, eventId);
+  await runConsumerInTenantContext(ctx.db, envelope2, () => persistProcessingResult(ctx, media.messageId, safeEventId, result, content.type));
+  log125.info("Media processing complete", {
+    messageId: media.messageId,
+    processingType: result.processingType,
+    provider: result.provider,
+    model: result.model,
+    costCents: result.costCents,
+    processingTimeMs: result.processingTimeMs
+  });
+  await ctx.eventBus.publish("media.processed", {
+    eventId: eventId ?? media.messageId,
+    mediaId: media.messageId,
+    processingType: result.processingType,
+    content: result.content ?? "",
+    model: result.model,
+    provider: result.provider,
+    tokensUsed: result.inputTokens ? result.inputTokens + (result.outputTokens ?? 0) : undefined
+  }, { instanceId, channelType: metadata.channelType });
+}
+async function publishMediaCrashEvents(ctx, eventId, payload, metadata, error3, trustedTenantId) {
+  try {
+    const processingType = inferProcessingType(payload.content.type);
+    const reason = `unexpected: ${String(error3)}`;
+    const mediaId = await resolveMediaIdForCrash(ctx, metadata.instanceId ?? "", payload, trustedTenantId);
+    const meta = { instanceId: metadata.instanceId, channelType: metadata.channelType };
+    await ctx.eventBus.publish("media.processing.failed", {
+      eventId,
+      mediaId,
+      processingType,
+      error: reason,
+      provider: "unknown",
+      model: "unknown"
+    }, meta);
+    await ctx.eventBus.publish("media.processed", {
+      eventId,
+      mediaId,
+      processingType,
+      content: "",
+      error: reason
+    }, meta);
+  } catch (publishError) {
+    log125.error("Failed to publish media failure event", { error: String(publishError) });
+  }
+}
+async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId) {
+  try {
+    const msg = await runMediaDb(ctx, trustedTenantId, async () => {
+      const chat2 = await ctx.services.chats.findByExternalIdSmart(instanceId, payload.chatId);
+      if (!chat2)
+        return null;
+      return ctx.services.messages.getByExternalId(chat2.id, payload.externalId);
+    });
+    if (msg)
+      return msg.id;
+  } catch (lookupError) {
+    log125.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
+      error: String(lookupError),
+      instanceId,
+      chatId: payload.chatId
+    });
+  }
+  return payload.externalId;
+}
+async function setupMediaProcessor(eventBus, db2, services) {
+  const [
+    groqApiKey,
+    openaiApiKey,
+    geminiApiKey,
+    defaultLanguage,
+    audioProvider,
+    audioModel,
+    geminiAudioModel,
+    audioPrompt,
+    imagePrompt,
+    videoPrompt,
+    documentPrompt,
+    geminiVisionModel,
+    openaiVisionModel
+  ] = await Promise.all([
+    services.settings.getSecret("groq.api_key", "GROQ_API_KEY"),
+    services.settings.getSecret("openai.api_key", "OPENAI_API_KEY"),
+    services.settings.getSecret("gemini.api_key", "GEMINI_API_KEY"),
+    services.settings.getString("media.default_language", "DEFAULT_LANGUAGE", "pt"),
+    services.settings.getString("stt.provider", "STT_PROVIDER", "openai"),
+    services.settings.getString("stt.openai.model", "OPENAI_STT_MODEL", OPENAI_TRANSCRIBE_MODEL),
+    services.settings.getString("stt.gemini.model", "GEMINI_STT_MODEL", GEMINI_AUDIO_MODEL),
+    services.settings.getString("prompt.audio_transcription"),
+    services.settings.getString("prompt.image_description"),
+    services.settings.getString("prompt.video_description"),
+    services.settings.getString("prompt.document_ocr"),
+    services.settings.getString("media.gemini.model", "GEMINI_MEDIA_MODEL", GEMINI_MODEL),
+    services.settings.getString("media.openai.vision_model", "OPENAI_VISION_MODEL", OPENAI_VISION_MODEL)
+  ]);
+  const mediaService = createMediaProcessingService({
+    groqApiKey,
+    openaiApiKey,
+    geminiApiKey,
+    defaultLanguage,
+    audioProvider: audioProvider ?? "openai",
+    audioModel: audioModel ?? OPENAI_TRANSCRIBE_MODEL,
+    geminiAudioModel: geminiAudioModel ?? GEMINI_AUDIO_MODEL,
+    geminiVisionModel: geminiVisionModel ?? GEMINI_MODEL,
+    openaiVisionModel: openaiVisionModel ?? OPENAI_VISION_MODEL,
+    audioPrompt: audioPrompt ?? undefined
+  });
+  const mediaStorage2 = new MediaStorageService(db2);
+  const ctx = {
+    db: db2,
+    eventBus,
+    services,
+    mediaService,
+    mediaStorage: mediaStorage2,
+    defaultLanguage: defaultLanguage ?? "pt",
+    promptOverrides: {
+      audio: audioPrompt,
+      image: imagePrompt,
+      video: videoPrompt,
+      document: documentPrompt
+    }
+  };
+  await eventBus.subscribe("message.received", async (event) => {
+    const payload = event.payload;
+    const metadata = event.metadata;
+    if (!metadata.instanceId)
+      return;
+    if (!shouldProcess(payload.content.type))
+      return;
+    try {
+      await processMessageMedia(ctx, payload, {
+        instanceId: metadata.instanceId,
+        eventId: event.id,
+        channelType: metadata.channelType
+      }, event);
+    } catch (error3) {
+      log125.error("Failed to process media", {
+        externalId: payload.externalId,
+        error: String(error3)
+      });
+      await publishMediaCrashEvents(ctx, event.id, payload, metadata, error3, envelopeTenantId(event));
+    }
+  }, {
+    durable: "media-processor",
+    queue: "media-processor",
+    maxRetries: 2,
+    retryDelayMs: 1000,
+    startFrom: "first",
+    concurrency: 5
+  });
+  setGlobalCircuitBreakerStateChangeCallback((name, from, to) => {
+    log125.warn("Circuit breaker state change", { provider: name, from, to });
+  });
+  await eventBus.subscribePattern("media.health.request", async (event) => {
+    const tracker = getMediaHealthTracker();
+    const report = tracker.getReport();
+    const correlationId = event.metadata?.correlationId ?? event.id;
+    await eventBus.publishGeneric("system.media.health.response", { correlationId, report }, { source: "media-processor" });
+    log125.debug("Published media health report", {
+      correlationId,
+      totalRequests: report.overall.totalRequests,
+      successRate: report.overall.successRate
+    });
+  }, {
+    durable: "media-health-responder",
+    queue: "media-health-responder"
+  });
+  log125.info("Media processor initialized");
+}
+var log125, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
+var init_media_processor = __esm(() => {
+  init_src();
+  init_src6();
+  init_src9();
+  init_drizzle_orm();
+  init_zod();
+  init_media_storage();
+  init_tenant_scope();
+  init_worker_tenant_context();
+  init_safe_media_fetch();
+  init_loader2();
+  log125 = createLogger("media-processor");
+  PROCESSABLE_MEDIA_TYPES = new Set(["audio", "image", "document", "video"]);
+  pluginMediaSchema = exports_external.object({
+    buffer: exports_external.instanceof(Buffer),
+    mimeType: exports_external.string().min(1).optional()
+  });
+});
+
 // ../api/src/routes/v2/_close-contact-config.ts
 function resolveCloseContactConfig(outcome, instanceSettings) {
   const override = instanceSettings?.closeContactConfig;
@@ -409062,7 +409563,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
         recoverable: false
       });
     }
-    log125.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log126.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       resolvedTo,
       messageId,
@@ -409072,7 +409573,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
   }
   const target = isUUID(messageId) ? await getReactionTargetByOmniId(services, instanceId, chat2.id, messageId) : await services.messages.getByExternalId(chat2.id, messageId);
   if (!target) {
-    log125.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log126.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       chatId: chat2.id,
       messageId,
@@ -409223,7 +409724,7 @@ function resolveSentByAgentId(sentBy, instance4) {
   if (sentBy !== "agent")
     return;
   if (!instance4.agentId) {
-    log125.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
+    log126.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
     return;
   }
   return instance4.agentId;
@@ -409279,14 +409780,14 @@ async function resolveMessageFromRef(services, ref) {
   }
   return found;
 }
-function buildMediaDownloadFetchOptions(instance4) {
+function buildMediaDownloadFetchOptions(instance4, mediaUrl) {
   if (instance4.channel !== "slack")
     return;
-  const slackBotToken = typeof instance4.slackBotToken === "string" ? instance4.slackBotToken : undefined;
-  if (!slackBotToken)
+  const token = selectSlackDownloadToken(instance4, mediaUrl);
+  if (!token)
     return;
   return {
-    headers: { Authorization: `Bearer ${slackBotToken}` },
+    headers: { Authorization: `Bearer ${token}` },
     preserveAuthRedirectHostSuffixes: ["slack.com"]
   };
 }
@@ -409339,10 +409840,10 @@ async function resolveChannelMessageId(services, messageId, instanceId) {
     return messageId;
   const message2 = await services.messages.getById(messageId);
   await verifyMessageInstanceOwnership(services, message2, instanceId);
-  log125.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
+  log126.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
   return message2.externalId;
 }
-var log125, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema15, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
+var log126, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema15, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
 var init_messages6 = __esm(() => {
   init_dist6();
   init_src2();
@@ -409353,13 +409854,14 @@ var init_messages6 = __esm(() => {
   init_dist2();
   init_zod();
   init_sentry_scrub();
+  init_media_processor();
   init_date_query();
   init_messages5();
   init_api_keys();
   init_media_storage();
   init_tenant_scope();
   init__close_contact_config();
-  log125 = createLogger("routes:messages");
+  log126 = createLogger("routes:messages");
   mediaDownloadLog = createLogger("routes:messages:media-download");
   messagesRoutes = new Hono2;
   MIME_BY_EXTENSION = {
@@ -409668,7 +410170,7 @@ var init_messages6 = __esm(() => {
     }
     if (!cached) {
       try {
-        const result = await mediaStorage2.storeFromUrl(instanceId, message2.id, mediaUrl, message2.mediaMimeType ?? undefined, message2.platformTimestamp ?? undefined, buildMediaDownloadFetchOptions(instance4), currentTenantScope()?.tenantId ?? undefined);
+        const result = await mediaStorage2.storeFromUrl(instanceId, message2.id, mediaUrl, message2.mediaMimeType ?? undefined, message2.platformTimestamp ?? undefined, buildMediaDownloadFetchOptions(instance4, mediaUrl), currentTenantScope()?.tenantId ?? undefined);
         mediaLocalPath = result.localPath;
         await mediaStorage2.updateMessageLocalPath(message2.id, result.localPath);
         mediaDownloadLog.info("Downloaded and cached media", {
@@ -410297,7 +410799,7 @@ var init_messages6 = __esm(() => {
         channelHandoffSupported: hasNativeHandoff,
         ...data.motivoHandoff ? { motivoHandoff: data.motivoHandoff } : {}
       }
-    }).catch((err2) => log125.warn("Failed to persist handoff log", { error: String(err2) }));
+    }).catch((err2) => log126.warn("Failed to persist handoff log", { error: String(err2) }));
     return c.json({
       data: {
         messageId: channelSendResult?.messageId ?? null,
@@ -410400,7 +410902,7 @@ var init_messages6 = __esm(() => {
         closedFields: data.closeFields ?? null,
         closedAt: closedAt.toISOString()
       };
-      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log125.debug("Failed to publish chat.closed", { error: String(err2) }));
+      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log126.debug("Failed to publish chat.closed", { error: String(err2) }));
     }
     return c.json({
       data: {
@@ -412103,9 +412605,10 @@ function buildSlackAuthorizeUrl(input) {
   const scopes = slackAuthorizeScopes();
   const url = new URL(SLACK_AUTHORIZE_URL);
   url.searchParams.set("client_id", input.clientId);
-  url.searchParams.set("scope", scopes.scope);
   if (input.mode === "user")
     url.searchParams.set("user_scope", scopes.user_scope);
+  else
+    url.searchParams.set("scope", scopes.scope);
   url.searchParams.set("redirect_uri", input.redirectUri);
   url.searchParams.set("state", input.state);
   return url.toString();
@@ -412302,7 +412805,7 @@ function matchesIdentity(row, input) {
 async function findExisting(instances2, input) {
   const page = await instances2.list({ channel: ["slack"], limit: SLACK_LOOKUP_LIMIT });
   if (page.hasMore) {
-    log126.warn("Slack OAuth identity lookup truncated; add a service finder", { limit: SLACK_LOOKUP_LIMIT });
+    log127.warn("Slack OAuth identity lookup truncated; add a service finder", { limit: SLACK_LOOKUP_LIMIT });
   }
   return page.items.find((row) => matchesIdentity(row, input));
 }
@@ -412320,7 +412823,7 @@ function isUniqueViolation(error3) {
 }
 function credentialColumns(input) {
   return {
-    slackBotToken: input.botToken,
+    slackBotToken: input.mode === "bot" ? input.botToken ?? null : null,
     slackUserToken: input.mode === "user" ? input.userToken ?? null : null,
     slackAuthMode: input.mode,
     slackAppToken: input.appToken,
@@ -412368,9 +412871,12 @@ function applyProfileMetadata(options, metadata) {
     options.dmAllowlist = metadata.dmAllowlist;
 }
 function buildConnectOptions(input, row) {
-  const options = { forceNewQr: false, token: input.botToken };
+  const options = { forceNewQr: false };
   applyProfileMetadata(options, row.profileMetadata);
-  options.botToken = input.botToken;
+  if (input.mode === "bot" && input.botToken) {
+    options.token = input.botToken;
+    options.botToken = input.botToken;
+  }
   if (input.mode === "user" && input.userToken)
     options.userToken = input.userToken;
   options.authMode = input.mode;
@@ -412389,7 +412895,7 @@ async function upsertSlackOAuthInstance(deps, input) {
   const existing = await findExisting(deps.instances, input);
   const row = existing ? await deps.instances.update(existing.id, credentialColumns(input)) : await createWithUniqueName(deps.instances, input);
   const created = !existing;
-  log126.info(created ? "Slack OAuth instance created" : "Slack OAuth instance re-authorized", {
+  log127.info(created ? "Slack OAuth instance created" : "Slack OAuth instance re-authorized", {
     instanceId: row.id,
     teamId: input.teamId,
     mode: input.mode
@@ -412398,18 +412904,18 @@ async function upsertSlackOAuthInstance(deps, input) {
     await plugin13.connect(row.id, { instanceId: row.id, credentials: {}, options: buildConnectOptions(input, row) });
   } catch (error3) {
     const connectError = redactSlackTokens(error3 instanceof Error ? error3.message : "Unknown error");
-    log126.error("Slack OAuth instance failed to connect", { instanceId: row.id, error: connectError });
+    log127.error("Slack OAuth instance failed to connect", { instanceId: row.id, error: connectError });
     return { instanceId: row.id, created, connectError };
   }
   return { instanceId: row.id, created };
 }
-var log126, SLACK_LOOKUP_LIMIT = 1000, NAME_MAX = 200, NAME_SUFFIX_ATTEMPTS = 20;
+var log127, SLACK_LOOKUP_LIMIT = 1000, NAME_MAX = 200, NAME_SUFFIX_ATTEMPTS = 20;
 var init_slack_oauth2 = __esm(() => {
   init_src4();
   init_src();
   init_slack_app();
   init_slack_oauth();
-  log126 = createLogger("api:slack-oauth");
+  log127 = createLogger("api:slack-oauth");
 });
 
 // ../api/src/routes/v2/slack.ts
@@ -412501,6 +413007,17 @@ async function resolveSlackAppForCallback(c, state) {
 function slackError(code, message2) {
   return `${code}: ${message2}`;
 }
+function grantTokens(mode, access) {
+  if (mode === "bot") {
+    return access.access_token ? { ok: true, botToken: access.access_token } : { ok: false, code: "SLACK_OAUTH_EXCHANGE_FAILED", message: "Slack returned no workspace bot token" };
+  }
+  const userToken = access.authed_user.access_token;
+  return userToken ? { ok: true, userToken } : {
+    ok: false,
+    code: "SLACK_USER_TOKEN_MISSING",
+    message: "Slack granted no user token; the user scopes were not authorized"
+  };
+}
 async function completeSlackInstall(deps, pending2, code, credentials) {
   const tenantId = pending2.tenantContext?.tenantId ?? null;
   let access;
@@ -412519,22 +413036,21 @@ async function completeSlackInstall(deps, pending2, code, credentials) {
     return errorOutcome(tenantId, "SLACK_ENTERPRISE_INSTALL_UNSUPPORTED", "Enterprise Grid (org-wide) installs are not supported; install into a single workspace");
   }
   const teamId = access.team?.id;
-  if (!teamId || !access.access_token) {
-    return errorOutcome(tenantId, "SLACK_OAUTH_EXCHANGE_FAILED", "Slack returned no workspace bot token");
-  }
-  const userToken = access.authed_user.access_token;
-  if (pending2.mode === "user" && !userToken) {
-    return errorOutcome(tenantId, "SLACK_USER_TOKEN_MISSING", "Slack granted no user token; the user scopes were not authorized");
+  if (!teamId) {
+    return errorOutcome(tenantId, "SLACK_OAUTH_EXCHANGE_FAILED", "Slack returned no workspace id");
   }
-  const displayName = pending2.mode === "user" ? await fetchSlackUserDisplayName(access.access_token, access.authed_user.id) : undefined;
+  const tokens = grantTokens(pending2.mode, access);
+  if (!tokens.ok)
+    return errorOutcome(tenantId, tokens.code, tokens.message);
+  const displayName = tokens.userToken ? await fetchSlackUserDisplayName(tokens.userToken, access.authed_user.id) : undefined;
   const input = {
     mode: pending2.mode,
     teamId,
     teamName: access.team?.name,
     userId: access.authed_user.id,
     displayName,
-    botToken: access.access_token,
-    userToken,
+    botToken: tokens.botToken,
+    userToken: tokens.userToken,
     appToken: credentials.appToken,
     signingSecret: credentials.signingSecret
   };
@@ -412790,7 +413306,7 @@ function makeClient(cfg) {
 function variablesToBodyParameters(variables) {
   return Object.entries(variables).map(([k2, v2]) => [Number.parseInt(k2, 10), v2]).filter(([n2]) => Number.isFinite(n2) && n2 >= 1).sort((a, b3) => a[0] - b3[0]).map(([, v2]) => v2);
 }
-var log127, templatesRoutes, instanceAccess4, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema20, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
+var log128, templatesRoutes, instanceAccess4, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema20, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
 var init_templates3 = __esm(() => {
   init_dist6();
   init_src7();
@@ -412801,7 +413317,7 @@ var init_templates3 = __esm(() => {
   init_dist2();
   init_zod();
   init_auth();
-  log127 = createLogger("routes:whatsapp-templates");
+  log128 = createLogger("routes:whatsapp-templates");
   templatesRoutes = new Hono2;
   instanceAccess4 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema6 = exports_external.object({
@@ -412928,7 +413444,7 @@ var init_templates3 = __esm(() => {
       });
       return c.json({ data: persisted.row }, persisted.created ? 201 : 200);
     } catch (dbErr) {
-      log127.error("[whatsapp-business] local template mirror failed after Meta create", {
+      log128.error("[whatsapp-business] local template mirror failed after Meta create", {
         instanceId,
         metaTemplateId: result.id,
         name: body.name,
@@ -413630,7 +414146,7 @@ async function readProfilePhotoUpload(c) {
     fileType: blob.type || "image/jpeg"
   };
 }
-var log128, whatsappBusinessRoutes, instanceAccess5, analyticsQuerySchema2, updateProfileSchema;
+var log129, whatsappBusinessRoutes, instanceAccess5, analyticsQuerySchema2, updateProfileSchema;
 var init_whatsapp_business3 = __esm(() => {
   init_dist6();
   init_src7();
@@ -413641,7 +414157,7 @@ var init_whatsapp_business3 = __esm(() => {
   init_oauth_token_cache();
   init_whatsapp_business_connection();
   init_auth();
-  log128 = createLogger("api:whatsapp-business");
+  log129 = createLogger("api:whatsapp-business");
   whatsappBusinessRoutes = new Hono2;
   instanceAccess5 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   whatsappBusinessRoutes.use("/:id/whatsapp-business/*", instanceAccess5);
@@ -413667,7 +414183,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log128.error("OAuth exchange failed", { error: message2 });
+      log129.error("OAuth exchange failed", { error: message2 });
       return c.json({ error: { code: "OAUTH_EXCHANGE_FAILED", message: message2 } }, 400);
     }
   });
@@ -413727,7 +414243,7 @@ var init_whatsapp_business3 = __esm(() => {
         await services.instances.update(id, { metaDisplayPhoneNumber: displayPhoneNumber });
       }
     } catch (err2) {
-      log128.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
+      log129.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
         instanceId: id,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -413753,7 +414269,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log128.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
+      log129.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
       return c.json({ error: { code: "CONNECT_FAILED", message: message2 } }, 500);
     }
     return c.json({
@@ -413781,7 +414297,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ ok: true });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log128.error("register phone number failed", { instanceId: id, error: message2 });
+      log129.error("register phone number failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "REGISTER_FAILED", message: message2 } }, 500);
     }
   });
@@ -413800,7 +414316,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ subscribed: result.success });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log128.error("subscribe app failed", { instanceId: id, error: message2 });
+      log129.error("subscribe app failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "SUBSCRIBE_FAILED", message: message2 } }, 500);
     }
   });
@@ -413838,7 +414354,7 @@ var init_whatsapp_business3 = __esm(() => {
       try {
         await plugin13.disconnect(id);
       } catch (err2) {
-        log128.warn("plugin.disconnect failed during connection delete", {
+        log129.warn("plugin.disconnect failed during connection delete", {
           instanceId: id,
           error: err2 instanceof Error ? err2.message : String(err2)
         });
@@ -414051,7 +414567,7 @@ function flowJsonInvalid(issues) {
     issues
   };
 }
-var log129, whatsappFlowsRoutes, instanceAccess6, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
+var log130, whatsappFlowsRoutes, instanceAccess6, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
 var init_whatsapp_flows3 = __esm(() => {
   init_dist6();
   init_src7();
@@ -414064,7 +414580,7 @@ var init_whatsapp_flows3 = __esm(() => {
   init_auth();
   init_sealed_credentials();
   init_whatsapp_business3();
-  log129 = createLogger("routes:whatsapp-flows");
+  log130 = createLogger("routes:whatsapp-flows");
   whatsappFlowsRoutes = new Hono2;
   instanceAccess6 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema8 = exports_external.object({
@@ -414175,7 +414691,7 @@ var init_whatsapp_flows3 = __esm(() => {
       }
     });
     const status = await resolved.client.getBusinessPublicKey().catch(() => null);
-    log129.info("flow encryption key registered", { instanceId });
+    log130.info("flow encryption key registered", { instanceId });
     return c.json({
       data: {
         uploaded: true,
@@ -414307,7 +414823,7 @@ var init_whatsapp_flows3 = __esm(() => {
       metadata: { flow: { ...flow, flowToken } }
     });
     if (!result.success) {
-      log129.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
+      log130.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
       return c.json(jsonError2(result.error ?? "Flow send failed", result.errorCode ?? "SEND_FAILED"), 500);
     }
     return c.json({ messageId: result.messageId, flowToken }, 201);
@@ -415379,12 +415895,12 @@ async function setupEventPersistence(eventBus, db2) {
           const tracker = getJourneyTracker();
           tracker.recordCheckpoint(metadata.correlationId, "T4", JOURNEY_STAGES.T4);
         }
-        log130.debug("Persisted message.received", {
+        log131.debug("Persisted message.received", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log130.error("Failed to persist message.received", {
+        log131.error("Failed to persist message.received", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -415430,12 +415946,12 @@ async function setupEventPersistence(eventBus, db2) {
           };
           await sdb.insert(omniEvents).values({ ...eventIdInsert(event.id), ...columns2 }).onConflictDoUpdate({ target: omniEvents.id, set: columns2 });
         });
-        log130.debug("Persisted message.sent", {
+        log131.debug("Persisted message.sent", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log130.error("Failed to persist message.sent", {
+        log131.error("Failed to persist message.sent", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -415472,11 +415988,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log130.debug("Persisted message.delivered", {
+        log131.debug("Persisted message.delivered", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log130.error("Failed to persist message.delivered", {
+        log131.error("Failed to persist message.delivered", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -415512,11 +416028,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log130.debug("Persisted message.read", {
+        log131.debug("Persisted message.read", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log130.error("Failed to persist message.read", {
+        log131.error("Failed to persist message.read", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -415568,14 +416084,14 @@ async function setupEventPersistence(eventBus, db2) {
           }
           return updated.length;
         });
-        log130.debug("Persisted message.failed", {
+        log131.debug("Persisted message.failed", {
           chatId: payload.chatId,
           externalId: payload.externalId,
           updatedRows,
           error: payload.error
         });
       } catch (error3) {
-        log130.error("Failed to persist message.failed", {
+        log131.error("Failed to persist message.failed", {
           chatId: payload.chatId,
           error: String(error3)
         });
@@ -415610,9 +416126,9 @@ async function setupEventPersistence(eventBus, db2) {
             };
             await sdb.insert(omniEvents).values({ ...eventIdInsert(event.id), ...columns2 }).onConflictDoUpdate({ target: omniEvents.id, set: columns2 });
           });
-          log130.debug(`Persisted ${type}`, { messageId: payload.messageId, emoji: payload.emoji });
+          log131.debug(`Persisted ${type}`, { messageId: payload.messageId, emoji: payload.emoji });
         } catch (error3) {
-          log130.error(`Failed to persist ${type}`, { messageId: payload.messageId, error: String(error3) });
+          log131.error(`Failed to persist ${type}`, { messageId: payload.messageId, error: String(error3) });
         }
       }, { ...CONSUMER_OPTIONS, durable: `event-persistence-${type.replace(".", "-")}` });
     }
@@ -415636,9 +416152,9 @@ async function setupEventPersistence(eventBus, db2) {
       durable: "event-persistence-agent-run-completed",
       startFrom: "new"
     });
-    log130.info("Event persistence initialized - listening for message events");
+    log131.info("Event persistence initialized - listening for message events");
   } catch (error3) {
-    log130.error("Failed to set up event persistence", { error: String(error3) });
+    log131.error("Failed to set up event persistence", { error: String(error3) });
     throw error3;
   }
 }
@@ -415676,14 +416192,14 @@ async function journalInternalEvent(db2, event) {
       await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
     });
   } catch (error3) {
-    log130.error("Failed to persist custom event", {
+    log131.error("Failed to persist custom event", {
       eventType: event.type,
       eventId: event.id,
       error: String(error3)
     });
   }
 }
-var log130, NO_CHAT_LINK, CONSUMER_OPTIONS;
+var log131, NO_CHAT_LINK, CONSUMER_OPTIONS;
 var init_event_persistence = __esm(() => {
   init_src();
   init_src6();
@@ -415691,7 +416207,7 @@ var init_event_persistence = __esm(() => {
   init_chats();
   init_tenant_scope();
   init_worker_tenant_context();
-  log130 = createLogger("event-persistence");
+  log131 = createLogger("event-persistence");
   NO_CHAT_LINK = { chatUuid: null, canonicalChatId: null };
   CONSUMER_OPTIONS = {
     queue: "event-persistence",
@@ -415702,472 +416218,6 @@ var init_event_persistence = __esm(() => {
   };
 });
 
-// ../api/src/plugins/media-processor.ts
-function getContentFieldForType(processingType, contentType) {
-  switch (processingType) {
-    case "transcription":
-      return "transcription";
-    case "description":
-      return contentType === "video" ? "videoDescription" : "imageDescription";
-    case "extraction":
-      return "documentExtraction";
-    default:
-      return;
-  }
-}
-function inferProcessingType(contentType) {
-  switch (contentType) {
-    case "audio":
-      return "transcription";
-    case "image":
-    case "video":
-      return "description";
-    case "document":
-      return "extraction";
-    default:
-      return "transcription";
-  }
-}
-function shouldProcess(contentType) {
-  if (!contentType)
-    return false;
-  return PROCESSABLE_MEDIA_TYPES.has(contentType);
-}
-function isUuid(value) {
-  return typeof value === "string" && isValidUuid(value);
-}
-function envelopeTenantId(envelope2) {
-  const classification = classifyEnvelope(envelope2.metadata);
-  return classification.world === "tenant" ? classification.tenantId : undefined;
-}
-function runMediaDb(ctx, trustedTenantId, fn) {
-  return trustedTenantId === undefined ? fn() : runInWorkerTenantScope(ctx.db, trustedTenantId, fn);
-}
-function getMimeType2(content) {
-  if (content.mimeType)
-    return content.mimeType;
-  switch (content.type) {
-    case "audio":
-      return "audio/ogg";
-    case "image":
-      return "image/jpeg";
-    case "video":
-      return "video/mp4";
-    case "document":
-      return "application/octet-stream";
-    default:
-      return;
-  }
-}
-function selectSlackDownloadToken(instance4) {
-  const slackAuthMode = instance4.slackAuthMode;
-  const slackUserToken = instance4.slackUserToken;
-  if (slackAuthMode === "user" && typeof slackUserToken === "string" && slackUserToken.length > 0) {
-    return slackUserToken;
-  }
-  return instance4.slackBotToken;
-}
-async function buildFetchOptions2(ctx, instanceId, channelType, trustedTenantId) {
-  if (channelType !== "slack")
-    return;
-  try {
-    const instance4 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.instances.getById(instanceId));
-    const token = selectSlackDownloadToken(instance4);
-    if (token) {
-      return { headers: { Authorization: `Bearer ${token}` } };
-    }
-  } catch {}
-  return;
-}
-async function downloadMediaFromUrl(ctx, instanceId, messageId, mediaUrl, mimeType, platformTimestamp, channelType, trustedTenantId) {
-  const fetchOptions = await buildFetchOptions2(ctx, instanceId, channelType, trustedTenantId);
-  try {
-    const result = await ctx.mediaStorage.storeFromUrl(instanceId, messageId, mediaUrl, mimeType, platformTimestamp, fetchOptions, trustedTenantId);
-    await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log131.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
-    return result.localPath;
-  } catch (error3) {
-    log131.error("Failed to download media", { error: String(error3), mediaUrl });
-    return null;
-  }
-}
-async function downloadMediaViaPlugin(ctx, instanceId, messageId, channelType, mediaRef, fallbackMimeType, platformTimestamp, trustedTenantId) {
-  const plugin13 = await (ctx.resolveChannelPlugin ?? getPlugin)(channelType);
-  if (!plugin13?.downloadInboundMedia) {
-    log131.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
-    return null;
-  }
-  try {
-    const { buffer: buffer3, mimeType } = pluginMediaSchema.parse(await plugin13.downloadInboundMedia(instanceId, mediaRef));
-    const result = await ctx.mediaStorage.storeFromBuffer(instanceId, messageId, buffer3, mimeType || fallbackMimeType, platformTimestamp, trustedTenantId);
-    await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log131.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
-    return result.localPath;
-  } catch (error3) {
-    log131.error("Failed to download inbound media via plugin", {
-      error: String(error3),
-      channelType,
-      messageId
-    });
-    return null;
-  }
-}
-async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, mimeType, channelType, trustedTenantId) {
-  const maxWaitMs = 5000;
-  const pollMs = 250;
-  const deadline = Date.now() + maxWaitMs;
-  let chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
-  while (!chat2 && Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, pollMs));
-    chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
-  }
-  if (!chat2) {
-    log131.debug("Chat not found, cannot process media", { chatId, externalId });
-    return null;
-  }
-  const chatDbId = chat2.id;
-  let message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
-  while (!message2 && Date.now() < deadline) {
-    await new Promise((r) => setTimeout(r, pollMs));
-    message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
-  }
-  if (!message2) {
-    log131.debug("Message not found after waiting, cannot process media", { externalId });
-    return null;
-  }
-  let filePath = message2.mediaLocalPath;
-  if (!filePath && content.mediaUrl) {
-    filePath = await downloadMediaFromUrl(ctx, instanceId, message2.id, content.mediaUrl, mimeType, message2.platformTimestamp ?? undefined, channelType, trustedTenantId);
-    if (!filePath)
-      return null;
-  }
-  if (!filePath && content.mediaId && channelType) {
-    filePath = await downloadMediaViaPlugin(ctx, instanceId, message2.id, channelType, content.mediaId, mimeType, message2.platformTimestamp ?? undefined, trustedTenantId);
-    if (!filePath)
-      return null;
-  }
-  if (!filePath) {
-    log131.debug("No media file path available", { externalId });
-    return null;
-  }
-  return {
-    messageId: message2.id,
-    filePath
-  };
-}
-async function resolveSafeMediaContentEventId(ctx, envelope2, eventId) {
-  if (!isUuid(eventId))
-    return null;
-  const id = eventId;
-  const maxWaitMs = 250;
-  const pollMs = 50;
-  const deadline = Date.now() + maxWaitMs;
-  while (true) {
-    let found;
-    try {
-      found = await runConsumerInTenantContext(ctx.db, envelope2, async () => {
-        const [event] = await scopedHandle(ctx.db).select({ id: omniEvents.id }).from(omniEvents).where(eq(omniEvents.id, id)).limit(1);
-        return event?.id ?? null;
-      });
-    } catch (error3) {
-      log131.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
-      return null;
-    }
-    if (found)
-      return found;
-    if (Date.now() >= deadline) {
-      log131.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
-      return null;
-    }
-    await new Promise((resolve4) => setTimeout(resolve4, pollMs));
-  }
-}
-async function persistProcessingResult(ctx, messageId, safeEventId, result, contentType) {
-  if (result.content) {
-    const updateField = getContentFieldForType(result.processingType, contentType);
-    if (updateField) {
-      await scopedHandle(ctx.db).update(messages2).set({ [updateField]: result.content }).where(eq(messages2.id, messageId));
-    }
-  }
-  try {
-    const sdb = scopedHandle(ctx.db);
-    const row = {
-      eventId: safeEventId ?? null,
-      mediaId: messageId,
-      processingType: result.processingType,
-      content: result.content ?? "",
-      model: result.model,
-      provider: result.provider,
-      language: result.language,
-      duration: result.duration,
-      tokensUsed: result.inputTokens ? result.inputTokens + (result.outputTokens ?? 0) : undefined,
-      costUsd: result.costCents != null ? String(Math.round(result.costCents)) : null,
-      processingTimeMs: result.processingTimeMs
-    };
-    if (currentTenantScope()) {
-      await sdb.transaction(async (sp) => {
-        await sp.insert(mediaContent).values(row);
-      });
-    } else {
-      await sdb.insert(mediaContent).values(row);
-    }
-  } catch (error3) {
-    log131.warn("Failed to insert media_content record (non-critical)", {
-      messageId,
-      error: String(error3)
-    });
-  }
-}
-function getPromptOverride(ctx, contentType) {
-  if (contentType === "audio")
-    return ctx.promptOverrides.audio;
-  if (contentType === "image")
-    return ctx.promptOverrides.image;
-  if (contentType === "video")
-    return ctx.promptOverrides.video;
-  if (contentType === "document")
-    return ctx.promptOverrides.document;
-  return;
-}
-async function processMessageMedia(ctx, payload, metadata, envelope2) {
-  const { instanceId, eventId } = metadata;
-  const { content, externalId } = payload;
-  const mimeType = getMimeType2(content);
-  const trustedTenantId = envelopeTenantId(envelope2);
-  if (!mimeType || !ctx.mediaService.canProcess(mimeType)) {
-    log131.debug("MIME type not processable or missing", { mimeType, externalId });
-    return;
-  }
-  const media = await resolveMediaPath2(ctx, instanceId, payload.chatId, externalId, content, mimeType, metadata.channelType, trustedTenantId);
-  if (!media)
-    return;
-  const processable = await ctx.mediaStorage.materializeForProcessing(media.filePath);
-  log131.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
-  let result;
-  try {
-    result = await ctx.mediaService.process(processable.path, mimeType, {
-      language: ctx.defaultLanguage,
-      caption: content.text,
-      prompt: getPromptOverride(ctx, content.type)
-    });
-  } finally {
-    await processable.cleanup();
-  }
-  if (!result.success) {
-    const reason2 = result.errorMessage ?? "unknown";
-    log131.warn("Media processing failed", { messageId: media.messageId, error: reason2 });
-    const processingType = result.processingType ?? inferProcessingType(content.type);
-    const errorColumn = getContentFieldForType(processingType, content.type);
-    if (errorColumn) {
-      const marker = `[error: media processing failed \u2014 ${reason2}]`;
-      await runConsumerInTenantContext(ctx.db, envelope2, async () => {
-        await scopedHandle(ctx.db).update(messages2).set({ [errorColumn]: marker }).where(eq(messages2.id, media.messageId));
-      });
-    }
-    await ctx.eventBus.publish("media.processing.failed", {
-      eventId: eventId ?? media.messageId,
-      mediaId: media.messageId,
-      processingType,
-      error: reason2,
-      provider: result.provider,
-      model: result.model
-    }, { instanceId, channelType: metadata.channelType });
-    await ctx.eventBus.publish("media.processed", {
-      eventId: eventId ?? media.messageId,
-      mediaId: media.messageId,
-      processingType,
-      content: "",
-      error: reason2
-    }, { instanceId, channelType: metadata.channelType });
-    return;
-  }
-  const safeEventId = await resolveSafeMediaContentEventId(ctx, envelope2, eventId);
-  await runConsumerInTenantContext(ctx.db, envelope2, () => persistProcessingResult(ctx, media.messageId, safeEventId, result, content.type));
-  log131.info("Media processing complete", {
-    messageId: media.messageId,
-    processingType: result.processingType,
-    provider: result.provider,
-    model: result.model,
-    costCents: result.costCents,
-    processingTimeMs: result.processingTimeMs
-  });
-  await ctx.eventBus.publish("media.processed", {
-    eventId: eventId ?? media.messageId,
-    mediaId: media.messageId,
-    processingType: result.processingType,
-    content: result.content ?? "",
-    model: result.model,
-    provider: result.provider,
-    tokensUsed: result.inputTokens ? result.inputTokens + (result.outputTokens ?? 0) : undefined
-  }, { instanceId, channelType: metadata.channelType });
-}
-async function publishMediaCrashEvents(ctx, eventId, payload, metadata, error3, trustedTenantId) {
-  try {
-    const processingType = inferProcessingType(payload.content.type);
-    const reason2 = `unexpected: ${String(error3)}`;
-    const mediaId = await resolveMediaIdForCrash(ctx, metadata.instanceId ?? "", payload, trustedTenantId);
-    const meta = { instanceId: metadata.instanceId, channelType: metadata.channelType };
-    await ctx.eventBus.publish("media.processing.failed", {
-      eventId,
-      mediaId,
-      processingType,
-      error: reason2,
-      provider: "unknown",
-      model: "unknown"
-    }, meta);
-    await ctx.eventBus.publish("media.processed", {
-      eventId,
-      mediaId,
-      processingType,
-      content: "",
-      error: reason2
-    }, meta);
-  } catch (publishError) {
-    log131.error("Failed to publish media failure event", { error: String(publishError) });
-  }
-}
-async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId) {
-  try {
-    const msg = await runMediaDb(ctx, trustedTenantId, async () => {
-      const chat2 = await ctx.services.chats.findByExternalIdSmart(instanceId, payload.chatId);
-      if (!chat2)
-        return null;
-      return ctx.services.messages.getByExternalId(chat2.id, payload.externalId);
-    });
-    if (msg)
-      return msg.id;
-  } catch (lookupError) {
-    log131.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
-      error: String(lookupError),
-      instanceId,
-      chatId: payload.chatId
-    });
-  }
-  return payload.externalId;
-}
-async function setupMediaProcessor(eventBus, db2, services) {
-  const [
-    groqApiKey,
-    openaiApiKey,
-    geminiApiKey,
-    defaultLanguage,
-    audioProvider,
-    audioModel,
-    geminiAudioModel,
-    audioPrompt,
-    imagePrompt,
-    videoPrompt,
-    documentPrompt,
-    geminiVisionModel,
-    openaiVisionModel
-  ] = await Promise.all([
-    services.settings.getSecret("groq.api_key", "GROQ_API_KEY"),
-    services.settings.getSecret("openai.api_key", "OPENAI_API_KEY"),
-    services.settings.getSecret("gemini.api_key", "GEMINI_API_KEY"),
-    services.settings.getString("media.default_language", "DEFAULT_LANGUAGE", "pt"),
-    services.settings.getString("stt.provider", "STT_PROVIDER", "openai"),
-    services.settings.getString("stt.openai.model", "OPENAI_STT_MODEL", OPENAI_TRANSCRIBE_MODEL),
-    services.settings.getString("stt.gemini.model", "GEMINI_STT_MODEL", GEMINI_AUDIO_MODEL),
-    services.settings.getString("prompt.audio_transcription"),
-    services.settings.getString("prompt.image_description"),
-    services.settings.getString("prompt.video_description"),
-    services.settings.getString("prompt.document_ocr"),
-    services.settings.getString("media.gemini.model", "GEMINI_MEDIA_MODEL", GEMINI_MODEL),
-    services.settings.getString("media.openai.vision_model", "OPENAI_VISION_MODEL", OPENAI_VISION_MODEL)
-  ]);
-  const mediaService = createMediaProcessingService({
-    groqApiKey,
-    openaiApiKey,
-    geminiApiKey,
-    defaultLanguage,
-    audioProvider: audioProvider ?? "openai",
-    audioModel: audioModel ?? OPENAI_TRANSCRIBE_MODEL,
-    geminiAudioModel: geminiAudioModel ?? GEMINI_AUDIO_MODEL,
-    geminiVisionModel: geminiVisionModel ?? GEMINI_MODEL,
-    openaiVisionModel: openaiVisionModel ?? OPENAI_VISION_MODEL,
-    audioPrompt: audioPrompt ?? undefined
-  });
-  const mediaStorage2 = new MediaStorageService(db2);
-  const ctx = {
-    db: db2,
-    eventBus,
-    services,
-    mediaService,
-    mediaStorage: mediaStorage2,
-    defaultLanguage: defaultLanguage ?? "pt",
-    promptOverrides: {
-      audio: audioPrompt,
-      image: imagePrompt,
-      video: videoPrompt,
-      document: documentPrompt
-    }
-  };
-  await eventBus.subscribe("message.received", async (event) => {
-    const payload = event.payload;
-    const metadata = event.metadata;
-    if (!metadata.instanceId)
-      return;
-    if (!shouldProcess(payload.content.type))
-      return;
-    try {
-      await processMessageMedia(ctx, payload, {
-        instanceId: metadata.instanceId,
-        eventId: event.id,
-        channelType: metadata.channelType
-      }, event);
-    } catch (error3) {
-      log131.error("Failed to process media", {
-        externalId: payload.externalId,
-        error: String(error3)
-      });
-      await publishMediaCrashEvents(ctx, event.id, payload, metadata, error3, envelopeTenantId(event));
-    }
-  }, {
-    durable: "media-processor",
-    queue: "media-processor",
-    maxRetries: 2,
-    retryDelayMs: 1000,
-    startFrom: "first",
-    concurrency: 5
-  });
-  setGlobalCircuitBreakerStateChangeCallback((name, from, to) => {
-    log131.warn("Circuit breaker state change", { provider: name, from, to });
-  });
-  await eventBus.subscribePattern("media.health.request", async (event) => {
-    const tracker = getMediaHealthTracker();
-    const report = tracker.getReport();
-    const correlationId = event.metadata?.correlationId ?? event.id;
-    await eventBus.publishGeneric("system.media.health.response", { correlationId, report }, { source: "media-processor" });
-    log131.debug("Published media health report", {
-      correlationId,
-      totalRequests: report.overall.totalRequests,
-      successRate: report.overall.successRate
-    });
-  }, {
-    durable: "media-health-responder",
-    queue: "media-health-responder"
-  });
-  log131.info("Media processor initialized");
-}
-var log131, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
-var init_media_processor = __esm(() => {
-  init_src();
-  init_src6();
-  init_src9();
-  init_drizzle_orm();
-  init_zod();
-  init_media_storage();
-  init_tenant_scope();
-  init_worker_tenant_context();
-  init_loader2();
-  log131 = createLogger("media-processor");
-  PROCESSABLE_MEDIA_TYPES = new Set(["audio", "image", "document", "video"]);
-  pluginMediaSchema = exports_external.object({
-    buffer: exports_external.instanceof(Buffer),
-    mimeType: exports_external.string().min(1).optional()
-  });
-});
-
 // ../api/src/tenancy/inflight-revocation.ts
 function resolveInflightRecheckIntervalMs() {
   return Math.floor(INFLIGHT_REVOCATION_CEILING_SECONDS * 1000 / 2);