@juspay/neurolink 13.8.17 → 13.8.18

package/dist/avatar/providers/ReplicateAvatar.js

@@ -13,8 +13,8 @@ import { AVATAR_ERROR_CODES, AvatarError, } from "../../utils/avatarProcessor.js
 import { logger } from "../../utils/logger.js";
 import { getReplicateAuth } from "../../adapters/replicate/auth.js";
 import { downloadPredictionOutput, predict, } from "../../adapters/replicate/predictionLifecycle.js";
-import { MAX_AUDIO_BYTES, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, readBoundedBuffer, } from "../../utils/sizeGuard.js";
-import { assertSafeUrl } from "../../utils/ssrfGuard.js";
+import { MAX_AUDIO_BYTES, MAX_IMAGE_BYTES, MAX_VIDEO_BYTES, } from "../../utils/sizeGuard.js";
+import { safeDownload } from "../../utils/safeFetch.js";
 const DEFAULT_MODEL = "douwantech/musetalk:5501004e78525e4bbd9fa20d1e75ad51fddce5a274bec07b9b16d685e34eeaf8";
 /**
  * Replicate Avatar Handler.
@@ -130,27 +130,18 @@ export class ReplicateAvatar {
                 retriable: false,
             });
         }
-        try {
-            await assertSafeUrl(input);
-        }
-        catch (err) {
-            throw new AvatarError({
-                code: AVATAR_ERROR_CODES.INVALID_INPUT,
-                message: `Unsafe URL rejected: ${err instanceof Error ? err.message : String(err)}`,
-                category: ErrorCategory.VALIDATION,
-                severity: ErrorSeverity.HIGH,
-                retriable: false,
-                context: { url: input },
-            });
-        }
+        // `safeDownload`: URL vetted (HTTPS, public host), connection pinned to
+        // the vetted addresses, redirects refused, body bounded while streaming.
         const FETCH_TIMEOUT_MS = 60_000;
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-        let r;
         try {
-            r = await fetch(input, { signal: controller.signal });
+            return await safeDownload(input, {
+                maxBytes,
+                label,
+                timeoutMs: FETCH_TIMEOUT_MS,
+            });
         }
         catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
             if (err instanceof Error && err.name === "AbortError") {
                 throw new AvatarError({
                     code: AVATAR_ERROR_CODES.INVALID_INPUT,
@@ -160,31 +151,33 @@ export class ReplicateAvatar {
                     retriable: true,
                 });
             }
-            throw err;
-        }
-        finally {
-            clearTimeout(timeoutId);
-        }
-        if (!r.ok) {
+            if (/rejected|permitted|blocked range|redirect/i.test(message)) {
+                throw new AvatarError({
+                    code: AVATAR_ERROR_CODES.INVALID_INPUT,
+                    message: `Unsafe URL rejected: ${message}`,
+                    category: ErrorCategory.VALIDATION,
+                    severity: ErrorSeverity.HIGH,
+                    retriable: false,
+                    context: { url: input },
+                });
+            }
+            if (/too large|size cap/i.test(message)) {
+                throw new AvatarError({
+                    code: AVATAR_ERROR_CODES.INVALID_INPUT,
+                    message: `${label} too large: ${message}`,
+                    category: ErrorCategory.VALIDATION,
+                    severity: ErrorSeverity.HIGH,
+                    retriable: false,
+                    context: { url: input },
+                });
+            }
+            const status = /HTTP (\d{3})/.exec(message)?.[1];
             throw new AvatarError({
                 code: AVATAR_ERROR_CODES.INVALID_INPUT,
-                message: `Failed to fetch ${input}: ${r.status}`,
+                message: `Failed to fetch ${input}: ${message}`,
                 category: ErrorCategory.NETWORK,
                 severity: ErrorSeverity.MEDIUM,
-                retriable: r.status >= 500,
-            });
-        }
-        try {
-            return await readBoundedBuffer(r, maxBytes, label);
-        }
-        catch (err) {
-            throw new AvatarError({
-                code: AVATAR_ERROR_CODES.INVALID_INPUT,
-                message: `${label} too large: ${err instanceof Error ? err.message : String(err)}`,
-                category: ErrorCategory.VALIDATION,
-                severity: ErrorSeverity.HIGH,
-                retriable: false,
-                context: { url: input },
+                retriable: status === undefined || Number(status) >= 500,
             });
         }
     }