@mevdragon/vidfarm-devcli 0.15.0 → 0.17.0

package/dist/src/app.js

@@ -17,11 +17,25 @@ import { config } from "./config.js";
 import { recordMatchesSearchQuery, serverlessRecords } from "./services/serverless-records.js";
 import { renderDevApp } from "./dev-app.js";
 import { CUSTOMER_PLAN_TIERS } from "./domain.js";
+import { SWIPE_STACK_TARGET_DEPTH, customizeOneMore, reconcileSwipeRows, NoProviderKeyError } from "./services/swipe-customize.js";
 import { sanitizeChatPayload, sanitizeHttpExchange } from "./editor-chat-history.js";
 import { assertForkAccess, resolveForkAccess, ForkAccessDeniedError, ForkNotFoundError } from "./services/fork-access.js";
 import { writeForkManifest } from "./services/fork-manifest.js";
 import { renderHelpPage } from "./help-page.js";
 import { renderHomepage } from "./homepage.js";
+import { renderLandingPage } from "./landing-page.js";
+import { renderReskinIndex } from "./reskin/index-page.js";
+import { renderReskinSettings } from "./reskin/settings-page.js";
+import { renderReskinLibrary } from "./reskin/library-page.js";
+import { renderReskinDiscover } from "./reskin/discover-page.js";
+import { renderReskinChat } from "./reskin/chat-page.js";
+import { renderReskinCalendar } from "./reskin/calendar-page.js";
+import { renderReskinJobRuns } from "./reskin/job-runs-page.js";
+import { renderReskinAgency } from "./reskin/agency-page.js";
+import { renderReskinPricing } from "./reskin/pricing-page.js";
+import { renderReskinLogin } from "./reskin/login-page.js";
+import { renderReskinHelp } from "./reskin/help-page.js";
+import { POPULAR_INSPIRATION_GROUPS } from "./frontend/homepage-shared.js";
 import { COMPOSITION_RUNTIME_SCRIPT_BODY } from "./composition-runtime.js";
 import { CAPTION_ANIM_CSS, CAPTION_STYLE_MARKER, KEN_BURNS_CSS, KEN_BURNS_STYLE_MARKER, TRANSITION_CSS, TRANSITION_STYLE_MARKER, upgradeLegacyTransitionCss } from "./hyperframes/composition.js";
 import { normalizeCompositionZIndexHtml, sanitizeCompositionHtml } from "./services/composition-sanitize.js";
@@ -1658,6 +1672,9 @@ function primitiveOperationPathForJob(job) {
     if (job.templateId === "primitive:audio_normalize" && job.operationName === "run") {
         return `${PRIMITIVES_PREFIX}/audio/normalize`;
     }
+    if (job.templateId === "primitive:speech_regenerate" && job.operationName === "run") {
+        return `${PRIMITIVES_PREFIX}/audio/regenerate-speech`;
+    }
     if (job.templateId === "primitive:brainstorm_hooks" && job.operationName === "run") {
         return `${PRIMITIVES_PREFIX}/brainstorm/hooks`;
     }
@@ -3146,6 +3163,7 @@ function buildPrimitiveEditorDocsRoutes() {
         { method: "POST", path: `${PRIMITIVES_PREFIX}/audio/speech`, summary: "Primitive text-to-speech (TTS) job using saved OpenAI, Gemini, or OpenRouter provider keys. Body must be { tracer, payload: { text, voice?, instructions?, provider?, model?, output_format? }, webhook_url? }. instructions is a free-form voice-style prompt (tone, pacing, accent, emotion, persona — e.g. \"calm, warm bedtime narrator with a slight British accent\"). voice is a provider preset (OpenAI: alloy/ash/coral/…; Gemini: Kore/Puck/Charon/…); provider is inferred from the voice when omitted, and a voice paired with the wrong provider is rejected with a 400. Returns a durable platform audio URL (mp3 or wav). Alias: POST /api/v1/primitives/tts." },
         { method: "POST", path: `${PRIMITIVES_PREFIX}/audio/transcribe`, summary: "Primitive speech-to-text (STT) job using saved provider keys. Accepts VIDEO or AUDIO sources; video audio is demuxed automatically. Body must be { tracer, payload: { source_url (aliases: source_video_url, source_audio_url, url), diarize?, language?, prompt?, provider?, model? }, webhook_url? }. Returns TWO formats in one job: a simple subtitle transcript (plain text + timed SRT cues, no speakers) and an advanced multi-speaker version (speaker-attributed timed segments for multi-narration), plus transcript.json/.srt/.txt artifacts. diarize defaults to true; speaker attribution needs a Gemini key (openai/openrouter degrade to a plain single-speaker transcript). Sources over ~40 minutes of speech must be trimmed first. Alias: POST /api/v1/primitives/stt. Pass word_timestamps: true for word-level timings on each segment (real timestamps on an OpenAI key via whisper-1; other providers stay segment-level)." },
         { method: "POST", path: `${PRIMITIVES_PREFIX}/audio/captions`, summary: "ANIMATED CAPTIONS from speech: one job transcribes narration WITH word-level timings and pages it into word-by-word caption cues ready for the editor's set_captions action. Body must be { tracer, payload: { source_url (video or audio; video audio is demuxed) OR text (page a script instead of transcribing), style? (spotlight|karaoke|word-pop|stack-up|neon|bounce), animation?, active_color?, highlight_color?, uppercase?, color?, background?, background_style?, font_family?, font_size?, max_words_per_cue?, offset_sec?, language?, provider?, window_start?/window_duration? (text mode) }, webhook_url? }. The finished job's result carries captions (the cue array) and set_captions_action (fully-formed editor_action arguments — apply verbatim). Real word timestamps need an OpenAI key (whisper-1, tried first); gemini/openrouter fall back to estimated word windows. Alias: POST /api/v1/primitives/captions." },
+        { method: "POST", path: `${PRIMITIVES_PREFIX}/audio/regenerate-speech`, summary: "REGENERATE SPEECH IN THE ORIGINAL SPEAKER'S VOICE (approximate match, not a clone): one job listens to a video/audio source, profiles the speaker's voice (needs a saved Gemini key; other keys degrade to transcript-only with no voice match), rewords the transcript per your instruction (or takes an exact replacement script), and returns new TTS audio using the closest preset voice + a style prompt matched to the speaker. Body must be { tracer, payload: { source_url (video or audio; video audio is demuxed; aliases source_video_url/source_audio_url/url), rewrite_instruction? (how to reword, e.g. \"mention the summer sale instead of the discount code\") OR text? (exact new script — one of the two is required), voice? (explicit preset override), instructions? (extra style guidance), provider?, model?, language?, output_format? }, webhook_url? }. Result carries audioUrl (durable, place with add_layer), script, original_transcript, voice_profile, and voice_match: \"approximate\"|\"none\" — OpenAI/Gemini APIs cannot clone voice identity, so always tell the user the voice is a matched approximation. Alias: POST /api/v1/primitives/regenerate-speech." },
         { method: "POST", path: `${PRIMITIVES_PREFIX}/brainstorm/coldstart`, summary: "Primitive cold-start strategy questionnaire. Body should usually be { tracer, payload: { user_message }, webhook_url? }. user_message can be rough, like \"I don't know where to start\" or a messy description. count is optional only when the user explicitly wants more or fewer questions. offer_description remains accepted as a backward-compatible alias." },
         { method: "POST", path: `${PRIMITIVES_PREFIX}/brainstorm/awareness_stages`, summary: "Primitive awareness-stage recommendation. Body must be { tracer, payload: { offer_description }, webhook_url? }. Use this when the customer is unsure what type of ads to produce." },
         { method: "POST", path: `${PRIMITIVES_PREFIX}/brainstorm/angles`, summary: "Primitive ad-angle brainstorm. Body must be { tracer, payload: { offer_description, problem_awareness, solution_awareness }, webhook_url? }. Allowed values: problem_awareness is problem_unaware|problem_aware, solution_awareness is solution_unaware|solution_aware. count is optional only when the user explicitly wants more or fewer angles. Returns diverse persuasive TikTok angles with explanations." },
@@ -3744,7 +3762,7 @@ function normalizeOperationRequestTracer(tracer) {
 }
 function createTemplateHttpTool(input) {
     return tool({
-        description: "Call exactly one Vidfarm REST API route and inspect the response before deciding the next call. Use template routes for metadata, skill, config, operations, jobs, logs, and cancel routes. Use primitive routes under /api/v1/primitives for reusable image generation, image editing, inpainting, still rendering, social/media video download, AI video generation, video slide rendering, burned-in caption removal, video trim/extract/probe/mute/concat operations, audio trim/probe/concat/normalize operations, text-to-speech narration (audio/speech) and speech-to-text transcription (audio/transcribe) routes, brainstorm strategy routes, and primitive job inspection; these primitive routes are allowed directly from editor chat even when they are not specific to the current template. Primitive POST bodies must use { tracer, payload: { ...primitive fields... }, webhook_url? }; do not put prompt, source_image_url, instruction, slides, html, or other primitive fields at the top level. Never say primitive image generation, image edit, inpaint, HTML render, video download, AI video generation, caption removal, trim, probe, extract-audio, concat, mute, video render, text-to-speech, speech transcription, or brainstorm routes are unavailable here when the route exists. If the user asks to generate a new image similar to an attachment, call POST /api/v1/primitives/images/generate with body { tracer, payload: { prompt, prompt_attachments: [exact attachment URL] } }. If the user asks to revise the attached image itself, call POST /api/v1/primitives/images/edit with body { tracer, payload: { source_image_url, instruction } }. If the user asks to download a social/media post into a durable MP4, call POST /api/v1/primitives/videos/download with body { tracer, payload: { source_url|video_url|url, quality?: \"best\"|\"hd\"|\"full_hd\" } }. If the user asks to generate a new AI video, call POST /api/v1/primitives/videos/generate with body { tracer, payload: { prompt, provider?: \"openai\"|\"gemini\"|\"openrouter\", duration?: seconds, input_references?: [direct image asset URL], frame_images?: [{ image_url, frame_type }] } }; never send webpage or social post URLs in input_references. duration is seconds, not milliseconds, and duration_ms belongs only to /videos/render-slides slides. Default video models are openai/sora-2, gemini/veo-3.0-generate-001, and openrouter/bytedance/seedance-2.0. Use POST /api/v1/primitives/videos/render-slides only to assemble existing media URLs into an MP4 slideshow. Use POST /api/v1/primitives/media/dedupe to apply subtle dedupe transforms (zoom/tilt/rotate/saturation/speed/horizontal_flip/contrast/brightness/hue_rotate/blur/tint) to any image or video URL, with body { tracer, payload: { source_media_url, media_type?, effects?, tint_color?, tint_opacity?, width?, height?, duration_ms?, object_fit?, background_color?, output_format? }, webhook_url? }. Use POST /api/v1/primitives/videos/trim for clipping, /videos/extract-audio for demuxing, /videos/probe or /audio/probe for metadata-only JSON outputs, /videos/extract-frame for stills, /videos/mute to remove audio, /videos/replace-audio to swap tracks, /videos/concat for sequential muted MP4 joins, /audio/trim for clipped audio, /audio/concat for stitched audio, and /audio/normalize for leveled/re-encoded audio. If the user asks for AI voiceover, narration, or dub audio from text (a script, hook, or caption read aloud), call POST /api/v1/primitives/audio/speech with body { tracer, payload: { text, voice?, instructions? } } — instructions is a free-form voice-style prompt like \"excited sports announcer, fast paced\" and the job returns a durable audio URL you can place with add_layer. If the user asks to transcribe a video or audio, get subtitles/captions from speech, or identify who says what, call POST /api/v1/primitives/audio/transcribe with body { tracer, payload: { source_url, diarize?, language? } } — it accepts video or audio URLs (video audio is demuxed automatically) and one job returns BOTH a simple subtitle transcript (plain text + timed SRT cues) and an advanced multi-speaker version (speaker-attributed timed segments for multi-narration); speaker attribution needs a Gemini key, and word_timestamps: true adds word-level timings per segment (real on an OpenAI key via whisper-1). If the user wants ANIMATED word-by-word captions generated from narration, call POST /api/v1/primitives/audio/captions with body { tracer, payload: { source_url (narration audio or video URL) OR text (a script to page), style?: \"spotlight\"|\"karaoke\"|\"word-pop\"|\"stack-up\"|\"neon\"|\"bounce\", max_words_per_cue?, offset_sec?, language?, provider? } } — the finished job's result carries captions (the cue array) and set_captions_action (fully-formed editor_action arguments); apply them with the editor_action tool (action_type=set_captions) so the change flows through the editor state. Real word timestamps need an OpenAI key (whisper-1, tried first); gemini/openrouter estimate word windows. If the user asks to remove burned-in captions, subtitles, or on-screen text from a video, call POST /api/v1/primitives/videos/remove-captions with body { tracer, payload: { source_video_url } } — an async job that returns a durable caption-free MP4 and bills about $0.10 per 30 seconds of source video. Caption removal is capped at ~15 minutes of source and must NEVER be used on long-form video: when the user wants short clips out of a long video (a podcast, stream VOD, webinar, or any YouTube/TikTok/IG/X URL), call POST /clips/scan instead with body { source_url | temp_file_id | s3_key, prompt, ranges?: [\"MM:SS-MM:SS\"], target_duration_sec?, aspect?: \"9:16\"|\"16:9\"|\"4:3\"|\"1:1\", avoid_text?, provider?: \"gemini\"|\"openai\"|\"openrouter\", tracer? } — target_duration_sec is a SOFT range (30 → 20-40s), ranges restrict the hunt to those source windows (big cost saver on long videos), aspect crops every clip, and avoid_text prefers scenes WITHOUT on-screen text via scene SELECTION (never caption removal on the source). The hunt is async: it returns scan_id immediately; poll GET /clips/scan/:scanId, then browse results via GET /clips/feed?source=<source_video_id> or POST /clips/search. Hunts bill AWS compute only — the AI tagging runs on the user's own saved provider keys (auto-picked gemini → openai → openrouter unless body.provider names one). To remove captions from a finished HUNTED clip, pass that clip's short mp4 to /videos/remove-captions afterwards. If the user explicitly asks for hooks, angles, awareness-stage advice, or a cold-start strategy questionnaire, call the matching brainstorm route immediately instead of brainstorming in chat from memory. Use POST /api/v1/primitives/brainstorm/coldstart when the customer is starting from zero, /brainstorm/awareness_stages when they do not know what ad types to make, /brainstorm/angles when they want persuasive angles, and /brainstorm/hooks when they want many openings. Product placement is a first-class brainstorm primitive like angles and hooks: when the user wants to identify product-placement opportunities in a video or repurpose a video into a native ad for their product, call POST /api/v1/primitives/brainstorm/product_placement with body { tracer, payload: { source_video_url, offer_description }, webhook_url? } — it watches the video and returns timestamped native placement opportunities and prefers a Gemini key. You may also analyze an attached video directly to answer product-placement questions conversationally instead of the primitive when the user just wants a quick take. For brainstorm routes, do not send count by default; only include count when the user explicitly asks for a specific number of hooks, angles, questions, or opportunities. When brainstorm jobs finish and the response includes a JSON artifact, tell the user to open and review that JSON in the chat UI because it contains the structured output. When the user asks for content ideas or says they do not know where to start, prefer the sequence coldstart -> awareness_stages -> angles -> hooks, then use the output to choose templates. For template operation POST bodies, use top-level template_preview_media=\"auto\" by default, \"include\" when the user wants the template to use catalog preview media as references where supported, and \"exclude\" when the user asks not to use preview media as references. Templates decide which generation steps honor that policy. If a POST returns a queued job, do not poll it in this same response; continue with any remaining requested POST calls, then summarize the queued job ids and tracers. If you know a job_id but not the template or primitive, use GET /api/v1/user/me/jobs/:jobId or its /logs and /artifacts subroutes instead of paging through job lists. Use GET /api/v1/compositions/:forkId/remove-video-captions to look up both the original source video URL and the subtitle-removed mirrored URL for the current fork before feeding a video URL into a primitive route; this is a read-only, non-billing status check — never confuse it with POST /remove-video-captions-poll (which advances the fork's decompose-time subtitle-removal job and can bill). Use POST /api/v1/approved/posts with title, caption, pinned_comment, media URLs, and tracer to approve a finished output into a preview/share page. Use POST /api/v1/approved/posts/:postId/schedules with destination_type, destination_id, scheduled_at, timezone, and optional settings/additional_notes to schedule an approved post. When a rendered video was built from slideshow frame images, include both versions in one media array: final MP4 first with kind=\"video\" and role=\"primary\", then every finished captioned slide frame image in order with kind=\"image\" and role=\"slide\". Prefer create-slideshow result.renderVideoInput.slides[].imageUrl or result.slides[].frameImageUrl for carousel media; do not use backgroundImageUrl, manifests, thumbnails, or a partial files array as the full slide set. If the user supplies exact media file URLs for approval, use those URLs as the backup source of truth, preserve their order, infer kind when needed, and assign primary/video and slide/image roles correctly. If the user asks for N distinct generated outputs, make N sequential POST calls rather than one combined POST and do not stop after the first queued job.",
+        description: "Call exactly one Vidfarm REST API route and inspect the response before deciding the next call. Use template routes for metadata, skill, config, operations, jobs, logs, and cancel routes. Use primitive routes under /api/v1/primitives for reusable image generation, image editing, inpainting, still rendering, social/media video download, AI video generation, video slide rendering, burned-in caption removal, video trim/extract/probe/mute/concat operations, audio trim/probe/concat/normalize operations, text-to-speech narration (audio/speech) and speech-to-text transcription (audio/transcribe) routes, brainstorm strategy routes, and primitive job inspection; these primitive routes are allowed directly from editor chat even when they are not specific to the current template. Primitive POST bodies must use { tracer, payload: { ...primitive fields... }, webhook_url? }; do not put prompt, source_image_url, instruction, slides, html, or other primitive fields at the top level. Never say primitive image generation, image edit, inpaint, HTML render, video download, AI video generation, caption removal, trim, probe, extract-audio, concat, mute, video render, text-to-speech, speech transcription, or brainstorm routes are unavailable here when the route exists. If the user asks to generate a new image similar to an attachment, call POST /api/v1/primitives/images/generate with body { tracer, payload: { prompt, prompt_attachments: [exact attachment URL] } }. If the user asks to revise the attached image itself, call POST /api/v1/primitives/images/edit with body { tracer, payload: { source_image_url, instruction } }. If the user asks to download a social/media post into a durable MP4, call POST /api/v1/primitives/videos/download with body { tracer, payload: { source_url|video_url|url, quality?: \"best\"|\"hd\"|\"full_hd\" } }. If the user asks to generate a new AI video, call POST /api/v1/primitives/videos/generate with body { tracer, payload: { prompt, provider?: \"openai\"|\"gemini\"|\"openrouter\", duration?: seconds, input_references?: [direct image asset URL], frame_images?: [{ image_url, frame_type }] } }; never send webpage or social post URLs in input_references. duration is seconds, not milliseconds, and duration_ms belongs only to /videos/render-slides slides. Default video models are openai/sora-2, gemini/veo-3.0-generate-001, and openrouter/bytedance/seedance-2.0. Use POST /api/v1/primitives/videos/render-slides only to assemble existing media URLs into an MP4 slideshow. Use POST /api/v1/primitives/media/dedupe to apply subtle dedupe transforms (zoom/tilt/rotate/saturation/speed/horizontal_flip/contrast/brightness/hue_rotate/blur/tint) to any image or video URL, with body { tracer, payload: { source_media_url, media_type?, effects?, tint_color?, tint_opacity?, width?, height?, duration_ms?, object_fit?, background_color?, output_format? }, webhook_url? }. Use POST /api/v1/primitives/videos/trim for clipping, /videos/extract-audio for demuxing, /videos/probe or /audio/probe for metadata-only JSON outputs, /videos/extract-frame for stills, /videos/mute to remove audio, /videos/replace-audio to swap tracks, /videos/concat for sequential muted MP4 joins, /audio/trim for clipped audio, /audio/concat for stitched audio, and /audio/normalize for leveled/re-encoded audio. If the user asks for AI voiceover, narration, or dub audio from text (a script, hook, or caption read aloud), call POST /api/v1/primitives/audio/speech with body { tracer, payload: { text, voice?, instructions? } } — instructions is a free-form voice-style prompt like \"excited sports announcer, fast paced\" and the job returns a durable audio URL you can place with add_layer. If the user asks to transcribe a video or audio, get subtitles/captions from speech, or identify who says what, call POST /api/v1/primitives/audio/transcribe with body { tracer, payload: { source_url, diarize?, language? } } — it accepts video or audio URLs (video audio is demuxed automatically) and one job returns BOTH a simple subtitle transcript (plain text + timed SRT cues) and an advanced multi-speaker version (speaker-attributed timed segments for multi-narration); speaker attribution needs a Gemini key, and word_timestamps: true adds word-level timings per segment (real on an OpenAI key via whisper-1). If the user wants ANIMATED word-by-word captions generated from narration, call POST /api/v1/primitives/audio/captions with body { tracer, payload: { source_url (narration audio or video URL) OR text (a script to page), style?: \"spotlight\"|\"karaoke\"|\"word-pop\"|\"stack-up\"|\"neon\"|\"bounce\", max_words_per_cue?, offset_sec?, language?, provider? } } — the finished job's result carries captions (the cue array) and set_captions_action (fully-formed editor_action arguments); apply them with the editor_action tool (action_type=set_captions) so the change flows through the editor state. Real word timestamps need an OpenAI key (whisper-1, tried first); gemini/openrouter estimate word windows. If the user wants the SAME speaker to say DIFFERENT words — reword, revoice, redub, or regenerate existing narration so it sounds like the original voice — call POST /api/v1/primitives/audio/regenerate-speech with body { tracer, payload: { source_url (video or audio; video audio is demuxed), rewrite_instruction (how to reword the original transcript) OR text (the exact new script), voice?, instructions?, provider?, language?, output_format? } } — the job listens to the source, profiles the speaker's voice (needs a saved Gemini key; other keys degrade to transcript-only with no voice match), rewords the script, and returns a durable audio URL spoken by the closest PRESET voice with a style prompt matched to the speaker. OpenAI/Gemini APIs cannot clone voice identity, so always present regenerate-speech output as an approximation of the original voice, never a clone; place the finished audio with editor_action add_layer, typically after muting the original span with /videos/mute or swapping tracks with /videos/replace-audio. If the user asks to remove burned-in captions, subtitles, or on-screen text from a video, call POST /api/v1/primitives/videos/remove-captions with body { tracer, payload: { source_video_url } } — an async job that returns a durable caption-free MP4 and bills about $0.10 per 30 seconds of source video. Caption removal is capped at ~15 minutes of source and must NEVER be used on long-form video: when the user wants short clips out of a long video (a podcast, stream VOD, webinar, or any YouTube/TikTok/IG/X URL), call POST /clips/scan instead with body { source_url | temp_file_id | s3_key, prompt, ranges?: [\"MM:SS-MM:SS\"], target_duration_sec?, aspect?: \"9:16\"|\"16:9\"|\"4:3\"|\"1:1\", avoid_text?, provider?: \"gemini\"|\"openai\"|\"openrouter\", tracer? } — target_duration_sec is a SOFT range (30 → 20-40s), ranges restrict the hunt to those source windows (big cost saver on long videos), aspect crops every clip, and avoid_text prefers scenes WITHOUT on-screen text via scene SELECTION (never caption removal on the source). The hunt is async: it returns scan_id immediately; poll GET /clips/scan/:scanId, then browse results via GET /clips/feed?source=<source_video_id> or POST /clips/search. Hunts bill AWS compute only — the AI tagging runs on the user's own saved provider keys (auto-picked gemini → openai → openrouter unless body.provider names one). To remove captions from a finished HUNTED clip, pass that clip's short mp4 to /videos/remove-captions afterwards. If the user explicitly asks for hooks, angles, awareness-stage advice, or a cold-start strategy questionnaire, call the matching brainstorm route immediately instead of brainstorming in chat from memory. Use POST /api/v1/primitives/brainstorm/coldstart when the customer is starting from zero, /brainstorm/awareness_stages when they do not know what ad types to make, /brainstorm/angles when they want persuasive angles, and /brainstorm/hooks when they want many openings. Product placement is a first-class brainstorm primitive like angles and hooks: when the user wants to identify product-placement opportunities in a video or repurpose a video into a native ad for their product, call POST /api/v1/primitives/brainstorm/product_placement with body { tracer, payload: { source_video_url, offer_description }, webhook_url? } — it watches the video and returns timestamped native placement opportunities and prefers a Gemini key. You may also analyze an attached video directly to answer product-placement questions conversationally instead of the primitive when the user just wants a quick take. For brainstorm routes, do not send count by default; only include count when the user explicitly asks for a specific number of hooks, angles, questions, or opportunities. When brainstorm jobs finish and the response includes a JSON artifact, tell the user to open and review that JSON in the chat UI because it contains the structured output. When the user asks for content ideas or says they do not know where to start, prefer the sequence coldstart -> awareness_stages -> angles -> hooks, then use the output to choose templates. For template operation POST bodies, use top-level template_preview_media=\"auto\" by default, \"include\" when the user wants the template to use catalog preview media as references where supported, and \"exclude\" when the user asks not to use preview media as references. Templates decide which generation steps honor that policy. If a POST returns a queued job, do not poll it in this same response; continue with any remaining requested POST calls, then summarize the queued job ids and tracers. If you know a job_id but not the template or primitive, use GET /api/v1/user/me/jobs/:jobId or its /logs and /artifacts subroutes instead of paging through job lists. Use GET /api/v1/compositions/:forkId/remove-video-captions to look up both the original source video URL and the subtitle-removed mirrored URL for the current fork before feeding a video URL into a primitive route; this is a read-only, non-billing status check — never confuse it with POST /remove-video-captions-poll (which advances the fork's decompose-time subtitle-removal job and can bill). Use POST /api/v1/approved/posts with title, caption, pinned_comment, media URLs, and tracer to approve a finished output into a preview/share page. Use POST /api/v1/approved/posts/:postId/schedules with destination_type, destination_id, scheduled_at, timezone, and optional settings/additional_notes to schedule an approved post. When a rendered video was built from slideshow frame images, include both versions in one media array: final MP4 first with kind=\"video\" and role=\"primary\", then every finished captioned slide frame image in order with kind=\"image\" and role=\"slide\". Prefer create-slideshow result.renderVideoInput.slides[].imageUrl or result.slides[].frameImageUrl for carousel media; do not use backgroundImageUrl, manifests, thumbnails, or a partial files array as the full slide set. If the user supplies exact media file URLs for approval, use those URLs as the backup source of truth, preserve their order, infer kind when needed, and assign primary/video and slide/image roles correctly. If the user asks for N distinct generated outputs, make N sequential POST calls rather than one combined POST and do not stop after the first queued job.",
         inputSchema: z.object({
             method: z.enum(["GET", "POST"]).describe("HTTP method to use."),
             path: z.string().min(1).describe("Absolute path or same-origin URL for an allowed Vidfarm REST route."),
@@ -4883,8 +4901,37 @@ function redirectToPublicPath(c, pathname) {
     return redirect(c, `${pathname}${url.search}`, 303);
 }
 app.get("/", async (c) => {
-    return redirect(c, "/discover");
-});
+    // vidfarm.cc landing page — standalone marketing page (own HTML/CSS in
+    // src/landing-page.ts) using the farmville-saas-ux design system. No longer
+    // redirects to /discover; the studio itself still lives at /discover.
+    const customer = await getOptionalPreferredBrowserCustomer(c);
+    return c.html(renderLandingPage({ isLoggedIn: Boolean(customer) }));
+});
+// /reskin/* — isolated design-system migration surface (see src/reskin/).
+// Each page is a standalone document with its own CSS; renders sample data so
+// it's viewable without auth. Ported pages are wired here one at a time.
+app.get("/reskin", (c) => c.html(renderReskinIndex()));
+app.get("/reskin/settings", (c) => c.html(renderReskinSettings()));
+// Library hosts two tabs at distinct URLs (approved projects + mined clips).
+app.get("/reskin/library", (c) => redirect(c, "/reskin/library/approved"));
+app.get("/reskin/library/approved", (c) => c.html(renderReskinLibrary("approved")));
+app.get("/reskin/library/clips", (c) => c.html(renderReskinLibrary("clips")));
+app.get("/reskin/clips", (c) => redirect(c, "/reskin/library/clips")); // merged into Library
+// Discover has three modes at distinct URLs (feed / swipe / categories).
+app.get("/reskin/discover", (c) => redirect(c, "/reskin/discover/feed"));
+app.get("/reskin/discover/:mode", (c) => {
+    const mode = c.req.param("mode");
+    if (mode !== "feed" && mode !== "swipe" && mode !== "categories")
+        return c.notFound();
+    return c.html(renderReskinDiscover(mode));
+});
+app.get("/reskin/chat", (c) => c.html(renderReskinChat()));
+app.get("/reskin/calendar", (c) => c.html(renderReskinCalendar()));
+app.get("/reskin/job-runs", (c) => c.html(renderReskinJobRuns()));
+app.get("/reskin/agency", (c) => c.html(renderReskinAgency()));
+app.get("/reskin/pricing", (c) => c.html(renderReskinPricing()));
+app.get("/reskin/login", (c) => c.html(renderReskinLogin()));
+app.get("/reskin/help", (c) => c.html(renderReskinHelp()));
 app.get("/discover", async (c) => renderApprovedHomepage(c));
 app.get("/editor/:templateId", async (c) => {
     const templateId = c.req.param("templateId");
@@ -4937,6 +4984,28 @@ app.get("/editor/:templateId", async (c) => {
         if (!forkRecord || forkRecord.deletedAt) {
             effectiveForkParam = null;
         }
+        else if (customer) {
+            // A caller who can VIEW but not EDIT this fork (e.g. a public template's
+            // default fork opened via a shared deep link) must not be pinned onto it:
+            // the editor would happily let them "edit", but every composition.html PUT
+            // is 403'd and the change silently reverts on reload — the exact "the AI
+            // said it changed the text but it didn't" failure. Drop the fork and fall
+            // through to per-user resolution so they get (or mint) their own editable
+            // copy instead.
+            try {
+                const access = await resolveForkAccess({
+                    forkId: effectiveForkParam,
+                    customerId: customer.id,
+                    shareToken: readShareToken(c) ?? undefined
+                });
+                if (!access.capabilities.canEdit) {
+                    effectiveForkParam = null;
+                }
+            }
+            catch {
+                effectiveForkParam = null;
+            }
+        }
     }
     if (!effectiveForkParam) {
         // Per-user default fork resolution: prefer caller's most-recently-updated
@@ -4953,8 +5022,14 @@ app.get("/editor/:templateId", async (c) => {
             if (mostRecent)
                 targetForkId = mostRecent.id;
         }
-        if (!targetForkId)
+        // Only fall back to the template's canonical default fork when the caller can
+        // actually edit it — i.e. they own the template. A non-owner sent to the
+        // default fork would land back on a read-only fork (and, since it's also the
+        // page we just dropped, loop). Leaving targetForkId null routes them to the
+        // bare editor, where the client mints their own editable fork on first save.
+        if (!targetForkId && template.customerId === customer?.id) {
             targetForkId = template.defaultForkId;
+        }
         if (targetForkId) {
             // Do NOT auto-attach a thread_id here: the caller's browser is the
             // source of truth for "which chat is active" via localStorage. Injecting
@@ -5062,6 +5137,11 @@ app.get("/discover/feed", async (c) => {
     }
     const templates = await serverlessRecords.listTemplatesFeed({ limit, query });
     for (const template of templates) {
+        // Curated "Popular" picks live only under the Popular toggle
+        // (GET /discover/popular) — keep them out of the continuously-grown Feed
+        // so the two views stay distinct.
+        if (typeof template.popularGroup === "string" && template.popularGroup.trim().length > 0)
+            continue;
         const entry = buildTemplateHomepageEntry(template);
         if (entry)
             templateEntries.push(entry);
@@ -5078,7 +5158,7 @@ app.get("/discover/feed", async (c) => {
         const upstreamFeed = (await upstreamJson(`/discover/feed?${search.toString()}`)).json?.templates ?? [];
         const seen = new Set(templateEntries.map((entry) => entry.templateId));
         for (const entry of upstreamFeed) {
-            if (entry && typeof entry.templateId === "string" && !seen.has(entry.templateId)) {
+            if (entry && typeof entry.templateId === "string" && !seen.has(entry.templateId) && !entry.popularGroup) {
                 templateEntries.push(entry);
                 seen.add(entry.templateId);
             }
@@ -5093,16 +5173,368 @@ app.get("/discover/feed", async (c) => {
         next_cursor: null
     });
 });
+// Curated "Popular" feed: the editorial list surfaced under the /discover
+// Popular toggle. Same template records as Feed, just the ones flagged with a
+// popularGroup — rendered client-side as autoplay TemplateCards grouped by that
+// label. Public + identical for everyone, so it caches shared. Mirrors upstream
+// (vidfarm serve) exactly like /discover/feed so a locally-empty box still sees
+// the cloud-seeded picks. Seed with POST /api/v1/admin/popular/seed.
+app.get("/discover/popular", async (c) => {
+    const templateEntries = [];
+    const seen = new Set();
+    const popular = await serverlessRecords.listPopularTemplates();
+    for (const template of popular) {
+        const entry = buildTemplateHomepageEntry(template);
+        if (entry) {
+            templateEntries.push(entry);
+            seen.add(entry.templateId);
+        }
+    }
+    if (isUpstreamEnabled()) {
+        const upstream = (await upstreamJson(`/discover/popular`)).json?.templates ?? [];
+        for (const entry of upstream) {
+            if (entry && typeof entry.templateId === "string" && !seen.has(entry.templateId) && entry.popularGroup) {
+                templateEntries.push(entry);
+                seen.add(entry.templateId);
+            }
+        }
+    }
+    // Stable editorial order: popularRank is a global sequence assigned by the
+    // seed (group index * 1000 + item index), so a plain rank sort preserves both
+    // group order and within-group order. Group label is only a tiebreak.
+    templateEntries.sort((a, b) => {
+        const rankCompare = (a.popularRank ?? 0) - (b.popularRank ?? 0);
+        if (rankCompare !== 0)
+            return rankCompare;
+        return String(a.popularGroup ?? "").localeCompare(String(b.popularGroup ?? ""));
+    });
+    c.header("cache-control", "public, max-age=60");
+    return c.json({
+        templates: templateEntries,
+        next_cursor: null
+    });
+});
+// ---------------------------------------------------------------------------
+// Swipe mode: a Tinder-style deck of the customer's own product, auto-recut
+// from decomposed + caption-clean templates. Previews are live HyperFrames
+// compositions (the card iframe loads /composition/current.html?fork=), never a
+// baked MP4 — the MP4 render only happens on approve.
+function serializeSwipeCard(record) {
+    return {
+        id: record.id,
+        template_id: record.templateId,
+        fork_id: record.forkId,
+        source_title: record.sourceTitle,
+        title: record.tailoredTitle ?? record.sourceTitle ?? record.templateId,
+        caption: record.tailoredCaption ?? "",
+        pinned_comment: record.tailoredPinnedComment ?? null,
+        // Self-contained live composition doc that scales itself to the card iframe
+        // and autoplays muted+looping (see /discover/swipe/:id/preview).
+        preview_url: record.forkId ? `/discover/swipe/${encodeURIComponent(record.id)}/preview` : null,
+        duration_seconds: record.durationSeconds ?? null,
+        status: record.status,
+        ready_post_id: record.readyPostId ?? null
+    };
+}
+// Current un-swiped deck for the caller (oldest first = top of stack) plus a
+// count of variants still customizing so the client can show a "preparing"
+// placeholder and know whether to keep refilling.
+app.get("/discover/swipe/stack", async (c) => {
+    const customer = await requireBrowserCustomer(c);
+    if (!customer)
+        return c.json({ ok: false, error: "Unauthorized" }, 401);
+    const listed = await serverlessRecords.listSwipeCustomizationsForCustomer(customer.id);
+    // Lazily supersede un-swiped variants built by an older customize pipeline so
+    // stale (e.g. double-captioned) cards never reach the deck; their templates
+    // become eligible again and the client's refill loop rebuilds them properly.
+    const rows = await reconcileSwipeRows(customer.id, listed);
+    const ready = rows
+        .filter((r) => r.status === "ready" && r.forkId)
+        .sort((a, b) => String(a.createdAt).localeCompare(String(b.createdAt)));
+    return c.json({
+        ok: true,
+        target_depth: SWIPE_STACK_TARGET_DEPTH,
+        customizing: rows.filter((r) => r.status === "customizing").length,
+        buffered: ready.length,
+        product_description_set: Boolean((customer.about ?? "").trim()),
+        stack: ready.map(serializeSwipeCard)
+    });
+});
+// Compositions are authored at their design resolution (data-width×data-height,
+// root = 100vw×100vh, caption font-size in absolute px). In a small card iframe
+// that renders everything ~2-3× oversized, so this injects a script that sizes
+// the root to its design px and uniformly transform-scales it to fit the iframe
+// (fonts scale too). It also mutes every media element and drives __player so
+// the preview autoplays (muted autoplay is the only kind browsers allow) and
+// loops. Kept OUT of the shared /composition/current.html so the editor stage is
+// unaffected.
+function injectSwipePreviewFit(doc, cardId) {
+    const inject = `<style>
+    html, body { margin: 0; padding: 0; width: 100%; height: 100%; background: #000; overflow: hidden; }
+    [data-composition-id] { position: absolute; transform-origin: top left; }
+  </style>
+  <script>(function () {
+    var CARD_ID = ${JSON.stringify(cardId)};
+    function boot() {
+      var root = document.querySelector('[data-composition-id]');
+      if (!root) { return; }
+      var dw = parseFloat(root.getAttribute('data-width')) || 720;
+      var dh = parseFloat(root.getAttribute('data-height')) || 1280;
+      root.style.width = dw + 'px';
+      root.style.height = dh + 'px';
+      function fit() {
+        var vw = window.innerWidth || dw, vh = window.innerHeight || dh;
+        var s = Math.min(vw / dw, vh / dh);
+        root.style.transform = 'scale(' + s + ')';
+        root.style.left = ((vw - dw * s) / 2) + 'px';
+        root.style.top = ((vh - dh * s) / 2) + 'px';
+      }
+      fit();
+      window.addEventListener('resize', fit);
+      // Sound: the deck (same-origin parent) owns the toggle and names which
+      // card may be audible — only ever the TOP one (the 2nd iframe is
+      // preloaded; without the id gate both would play audio at once). Cards
+      // always START muted (the only autoplay browsers permit); the tick below
+      // re-syncs to the parent's flags, so a toggle or a card advancing to the
+      // top picks up sound within ~400ms of the user's gesture.
+      function wantSound() {
+        try {
+          var w = window.parent;
+          return Boolean(w) && w.__VF_SWIPE_SOUND__ === true && w.__VF_SWIPE_SOUND_TOP__ === CARD_ID;
+        } catch (e) { return false; }
+      }
+      // Drive ONLY the player's main mute. The runtime's applyMediaState
+      // computes each element's muted state as previewMuted || authored-muted
+      // and honors per-clip data-volume — force-unmuting every <video>/<audio>
+      // here (the first version of this script) made muted-authored overlapping
+      // clips of the same source all audible at once (the duplicate-audio bug).
+      // Touching elements directly would also pollute the runtime's
+      // initialMuted capture, so hands off; before __player boots nothing plays
+      // (playback only ever starts via __player.play()), so there is no
+      // unmuted-autoplay window to guard.
+      function applySound(on) {
+        try { if (window.__player && window.__player.setMuted) { window.__player.setMuted(!on); } } catch (e) {}
+      }
+      function play() {
+        try { if (window.__player) { window.__player.play(); } } catch (e) {}
+      }
+      applySound(false);
+      play();
+      var lastWant = false;
+      var stalled = 0;
+      var mutedFallback = false;
+      setInterval(function () {
+        try {
+          var want = wantSound();
+          if (want !== lastWant) { lastWant = want; mutedFallback = false; stalled = 0; }
+          applySound(want && !mutedFallback);
+          if (!window.__player || !window.__player.getDuration) { return; }
+          var t = window.__player.getTime(), d = window.__player.getDuration();
+          if (d > 0 && t >= d - 0.08) { window.__player.seek(0, { keepPlaying: true }); }
+          else if (!window.__player.isPlaying()) {
+            stalled += 1;
+            // Unmuted playback needs prior interaction with the page; if the
+            // browser keeps blocking it (e.g. Safari), drop back to muted so
+            // the preview never freezes on a frame.
+            if (stalled >= 3 && want && !mutedFallback) { mutedFallback = true; applySound(false); }
+            play();
+          } else { stalled = 0; }
+        } catch (e) {}
+      }, 400);
+    }
+    if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', boot); } else { boot(); }
+  })();</script>`;
+    return /<\/body>/i.test(doc) ? doc.replace(/<\/body>/i, `${inject}\n</body>`) : `${doc}\n${inject}`;
+}
+// The self-fitting, muted-autoplay live composition doc for one deck card.
+app.get("/discover/swipe/:id/preview", async (c) => {
+    const customer = await requireBrowserCustomer(c);
+    if (!customer)
+        return c.text("Unauthorized", 401);
+    const record = await serverlessRecords.getSwipeCustomization(c.req.param("id"));
+    if (!record || record.customerId !== customer.id || !record.forkId)
+        return c.text("Not found", 404);
+    const html = await storage.readText(storage.compositionForkWorkingKey(record.forkId, "composition.html"));
+    if (!html)
+        return c.text("Composition missing", 404);
+    const doc = injectSwipePreviewFit(rewriteHyperframesDraftCompositionHtml(html, `forks/${encodeURIComponent(record.forkId)}`), record.id);
+    return c.html(doc, 200, { "cache-control": "no-store" });
+});
+// Progressive top-up: customize exactly ONE more eligible template (awaited, so
+// it is cloud-safe — the work finishes inside the request). The client calls
+// this to fill the deck on open and +1 after every swipe. BYOK LLM.
+app.post("/discover/swipe/refill", async (c) => {
+    const customer = await requireBrowserCustomer(c);
+    if (!customer)
+        return c.json({ ok: false, error: "Unauthorized" }, 401);
+    const productDescription = (customer.about ?? "").trim();
+    if (!productDescription) {
+        return c.json({ ok: false, error: "Add a product / offer description in Settings, then reload Swipe.", need_product_description: true }, 400);
+    }
+    const listed = await serverlessRecords.listSwipeCustomizationsForCustomer(customer.id);
+    const rows = await reconcileSwipeRows(customer.id, listed);
+    const buffered = rows.filter((r) => r.status === "ready" || r.status === "customizing").length;
+    if (buffered >= SWIPE_STACK_TARGET_DEPTH) {
+        return c.json({ ok: true, filled: false, reason: "at_target", buffered });
+    }
+    try {
+        const record = await customizeOneMore({ customerId: customer.id, productDescription });
+        if (!record)
+            return c.json({ ok: true, filled: false, reason: "no_eligible" });
+        return c.json({ ok: true, filled: record.status === "ready", status: record.status, record: serializeSwipeCard(record) });
+    }
+    catch (error) {
+        if (error instanceof NoProviderKeyError)
+            return c.json({ ok: false, error: error.message, need_provider_key: true }, 400);
+        return c.json({ ok: false, error: error instanceof Error ? error.message : "Customization failed." }, 500);
+    }
+});
+// Approve: mint the /library post (title/caption now, rendered MP4 backfilled by
+// finalizeSwipeApproveRender when the render job finishes) and mark the
+// customization approved. Then the client refills (+1).
+app.post("/discover/swipe/:id/approve", async (c) => {
+    const customer = await requireBrowserCustomer(c);
+    if (!customer)
+        return c.json({ ok: false, error: "Unauthorized" }, 401);
+    const loaded = await serverlessRecords.getSwipeCustomization(c.req.param("id"));
+    if (!loaded || loaded.customerId !== customer.id)
+        return c.json({ ok: false, error: "Not found" }, 404);
+    // A deck loaded before a pipeline bump can still hold stale cards — supersede
+    // instead of publishing a known-broken variant to /library.
+    const [record] = await reconcileSwipeRows(customer.id, [loaded]);
+    if (record.status !== "ready" || !record.forkId) {
+        return c.json({ ok: false, superseded: record.status === "superseded", error: `Cannot approve a customization in status "${record.status}".` }, 409);
+    }
+    const fork = await serverlessRecords.getCompositionFork(record.forkId);
+    if (!fork)
+        return c.json({ ok: false, error: "Customized composition not found." }, 404);
+    const post = await serverlessRecords.createReadyPost({
+        customerId: customer.id,
+        source: "hyperframes",
+        status: "ready",
+        compositionId: fork.id,
+        tracer: `swipe:${record.id}`,
+        title: record.tailoredTitle,
+        caption: record.tailoredCaption,
+        pinnedComment: record.tailoredPinnedComment,
+        mediaAssets: []
+    });
+    let renderJobId = null;
+    try {
+        const html = await storage.readText(storage.compositionForkWorkingKey(fork.id, "composition.html"));
+        const jsonText = await storage.readText(storage.compositionForkWorkingKey(fork.id, "composition.json"));
+        if (html) {
+            const compositionData = jsonText ? asRecord(JSON.parse(jsonText)) : null;
+            const rendered = await publishCompositionToRenderer({
+                customer,
+                compositionHtml: stampCompositionIdentity(html, { forkId: fork.id, version: (fork.latestVersion ?? 0) + 1 }),
+                compositionData: compositionData ?? null,
+                projectFiles: [],
+                slugId: fork.templateId,
+                title: record.tailoredTitle ?? fork.templateId,
+                tracer: `swipe:${record.id}:render`
+            });
+            if (!("preflight" in rendered)) {
+                renderJobId = rendered.job.id;
+                await serverlessRecords.updateCompositionFork({ forkId: fork.id, patch: { currentRenderJobId: renderJobId } });
+                void finalizeSwipeApproveRender({
+                    customerId: customer.id,
+                    swipeId: record.id,
+                    readyPostId: post.id,
+                    renderJobId,
+                    title: record.tailoredTitle ?? fork.templateId
+                });
+            }
+        }
+    }
+    catch (error) {
+        console.error("swipe approve render dispatch failed", error instanceof Error ? error.message : error);
+    }
+    const updated = await serverlessRecords.updateSwipeCustomization({
+        customerId: customer.id,
+        id: record.id,
+        patch: { status: "approved", decidedAt: nowIso(), readyPostId: post.id, renderJobId }
+    });
+    return c.json({ ok: true, status: "approved", ready_post_id: post.id, render_job_id: renderJobId, record: serializeSwipeCard(updated) });
+});
+// Reject: drop the variant from the deck. It persists (findable in /job-runs).
+app.post("/discover/swipe/:id/reject", async (c) => {
+    const customer = await requireBrowserCustomer(c);
+    if (!customer)
+        return c.json({ ok: false, error: "Unauthorized" }, 401);
+    const loaded = await serverlessRecords.getSwipeCustomization(c.req.param("id"));
+    if (!loaded || loaded.customerId !== customer.id)
+        return c.json({ ok: false, error: "Not found" }, 404);
+    // Rejecting a stale card would permanently re-consume the template the
+    // supersede migration is trying to free — supersede it instead.
+    const [record] = await reconcileSwipeRows(customer.id, [loaded]);
+    if (record.status !== "ready") {
+        return c.json({ ok: false, superseded: record.status === "superseded", error: `Cannot reject a customization in status "${record.status}".` }, 409);
+    }
+    const updated = await serverlessRecords.updateSwipeCustomization({
+        customerId: customer.id,
+        id: record.id,
+        patch: { status: "rejected", decidedAt: nowIso() }
+    });
+    return c.json({ ok: true, status: "rejected", record: serializeSwipeCard(updated) });
+});
+// Poll the approve-time render job to completion and backfill the finished MP4
+// into the library post's media. In-process (works on a `vidfarm serve` box
+// where the render also runs in-process); a cloud box's render is driven by its
+// own worker and this poll simply reads the shared job record until it lands.
+async function finalizeSwipeApproveRender(input) {
+    const deadline = Date.now() + 5 * 60 * 1000;
+    for (;;) {
+        if (Date.now() > deadline)
+            return;
+        await new Promise((resolve) => setTimeout(resolve, 2500));
+        let job = null;
+        try {
+            job = await jobs.getJobAsync(input.renderJobId);
+        }
+        catch {
+            continue;
+        }
+        const status = String(job?.status ?? "");
+        if (status === "succeeded" || status === "completed") {
+            const url = extractOutputUrlFromJob(job);
+            if (url) {
+                const slug = (input.title || "swipe-ad").replace(/[^a-z0-9]+/gi, "-").replace(/^-+|-+$/g, "").toLowerCase().slice(0, 40) || "swipe-ad";
+                const asset = {
+                    id: `swipe-${input.swipeId}`,
+                    url,
+                    fileName: `${slug}.mp4`,
+                    contentType: "video/mp4",
+                    kind: "video",
+                    role: "primary"
+                };
+                await serverlessRecords.setReadyPostMedia({ customerId: input.customerId, postId: input.readyPostId, mediaAssets: [asset] });
+            }
+            return;
+        }
+        if (status === "failed" || status === "cancelled") {
+            await serverlessRecords.updateSwipeCustomization({
+                customerId: input.customerId,
+                id: input.swipeId,
+                patch: { status: "failed", error: `Approve render ${status}.` }
+            });
+            return;
+        }
+    }
+}
 function buildTemplateHomepageEntry(template) {
     // Undecomposed templates (no defaultForkId yet) still appear on /discover so
     // users can open them and mint the first fork via the Decompose modal.
     if (!template.videoUrl)
         return null;
     const isPrivate = template.visibility === "private";
+    const isPopular = typeof template.popularGroup === "string" && template.popularGroup.trim().length > 0;
     // Older records stored the source host ("youtube.com") as a title fallback —
     // never show that as a card title; the template id is the canonical default.
     const storedTitle = template.title && template.title !== template.sourceHost ? template.title : null;
-    const title = isPrivate ? (storedTitle || template.id) : template.id;
+    // Public feed cards default to the template id, but curated Popular picks show
+    // their editorial title (the whole point of the Popular list).
+    const title = (isPrivate || isPopular) ? (storedTitle || template.id) : template.id;
     const previewUrl = template.thumbnailUrl || template.videoUrl || null;
     return {
         title,
@@ -5122,6 +5554,8 @@ function buildTemplateHomepageEntry(template) {
         summary: template.searchSummary ?? null,
         visibility: template.visibility,
         origin: template.origin ?? "inspiration",
+        popularGroup: template.popularGroup ?? null,
+        popularRank: template.popularRank ?? null,
         notes: template.notes,
         status: "ready"
     };
@@ -5489,6 +5923,8 @@ function buildPendingInspirationHomepageEntry(inspiration) {
         durationSeconds: inspiration.durationSeconds ?? null,
         visibility: "private",
         origin: inspiration.origin ?? "inspiration",
+        popularGroup: inspiration.popularGroup ?? null,
+        popularRank: inspiration.popularRank ?? null,
         notes: inspiration.notes,
         status: inspiration.status === "failed" ? "failed" : "processing"
     };
@@ -7131,6 +7567,13 @@ app.post(`${INSPIRATIONS_PREFIX}/:inspirationId/decompose`, async (c) => {
 // so a forced re-run may start. Must exceed the longest real decompose but stay
 // under the API lambda's 15-min timeout.
 const DECOMPOSE_PROCESSING_STALE_MS = 10 * 60 * 1000;
+// Inspiration ingest + auto-decompose no longer hard-cap the source at 120s.
+// Users can bring longer inspiration; an operator can still re-impose a ceiling
+// via INSPIRATION_MAX_DURATION_SEC (>0). 0 → unlimited, translated to Infinity so
+// probeMediaAsset never rejects a source purely on length.
+const INSPIRATION_PROBE_MAX_DURATION_SECONDS = config.INSPIRATION_MAX_DURATION_SEC > 0
+    ? config.INSPIRATION_MAX_DURATION_SEC
+    : Number.POSITIVE_INFINITY;
 async function readDecomposeJobState(forkId) {
     const text = await storage.readText(storage.compositionForkWorkingKey(forkId, "decompose.json"));
     if (!text)
@@ -7250,7 +7693,10 @@ app.post(`${COMPOSITIONS_PREFIX}/:forkId/auto-decompose`, async (c) => {
         let probedDurationSeconds = null;
         if (sourceUrl) {
             try {
-                const probe = await probeMediaAsset({ sourceUrl });
+                const probe = await probeMediaAsset({
+                    sourceUrl,
+                    maxDurationSeconds: INSPIRATION_PROBE_MAX_DURATION_SECONDS
+                });
                 const probed = probe.metadata.durationSeconds;
                 if (Number.isFinite(probed) && probed && probed > 0) {
                     probedDurationSeconds = probed;
@@ -7298,7 +7744,17 @@ app.post(`${COMPOSITIONS_PREFIX}/:forkId/auto-decompose`, async (c) => {
             ghostcutSkipReason = "ghostcut_not_configured";
             console.warn(`ghostcut: skipping subtitle removal for fork ${fork.id} — GHOSTCUT_KEY/GHOSTCUT_SECRET not configured. Composition will keep the original video with baked-in text.`);
         }
-        if (sourceUrl && sourceIsVideo && isGhostcutConfigured()) {
+        else if (config.GHOSTCUT_DECOMPOSE_MAX_DURATION_SEC > 0 &&
+            probedDurationSeconds !== null &&
+            probedDurationSeconds > config.GHOSTCUT_DECOMPOSE_MAX_DURATION_SEC) {
+            // GhostCut is per-30s-chunk and meant for short clips. Long inspiration is
+            // now allowed through ingest/decompose, but laundering a multi-minute video
+            // through GhostCut is disproportionately expensive — skip it and keep the
+            // original burned-in captions instead.
+            ghostcutSkipReason = `source_too_long:${probedDurationSeconds.toFixed(1)}s>${config.GHOSTCUT_DECOMPOSE_MAX_DURATION_SEC}s`;
+            console.warn(`ghostcut: skipping subtitle removal for fork ${fork.id} — source is ${probedDurationSeconds.toFixed(1)}s, over the ${config.GHOSTCUT_DECOMPOSE_MAX_DURATION_SEC}s decompose ceiling. Composition keeps the original burned-in captions.`);
+        }
+        if (sourceUrl && sourceIsVideo && isGhostcutConfigured() && !ghostcutSkipReason) {
             try {
                 const submission = await submitSubtitleRemoval(sourceUrl);
                 ghostcutTaskId = submission.taskId;
@@ -9118,6 +9574,8 @@ function serializeInspiration(inspiration) {
         summary: inspiration.searchSummary ?? null,
         visibility: inspiration.visibility ?? "public",
         origin: inspiration.origin ?? "inspiration",
+        popular_group: inspiration.popularGroup ?? null,
+        popular_rank: inspiration.popularRank ?? null,
         notes: inspiration.notes ?? null,
         ingester_customer_id: inspiration.customerId,
         error: inspiration.errorMessage,
@@ -10217,10 +10675,54 @@ app.get("/job-runs/history", async (c) => {
         }
         return true;
     });
+    // Surface Swipe-mode customizations (approved AND rejected, plus in-flight and
+    // failed) in Run History so every auto-recut variant is findable — they don't
+    // pass through the api-call-history middleware, so synthesize them here in the
+    // same entry shape the client already renders. Skipped under a template/tracer
+    // filter since they carry no linked job/template.
+    let entriesWithSwipe = entries;
+    if (!templateFilter && !tracerFilter) {
+        const swipeRows = await serverlessRecords.listSwipeCustomizationsForCustomer(customer.id);
+        // Superseded rows are internal pipeline-migration artifacts, not runs the
+        // customer fired — surfacing them would show phantom in-flight customizes.
+        const swipeEntries = swipeRows.filter((r) => r.status !== "superseded").map((r) => {
+            const action = r.status === "approved" ? "approve" : r.status === "rejected" ? "reject" : "customize";
+            return {
+                id: `swipe:${r.id}`,
+                customerId: customer.id,
+                method: "POST",
+                path: `/discover/swipe/${action}`,
+                routePrefix: "/discover/swipe",
+                tracer: `swipe:${r.templateId}`,
+                jobId: r.renderJobId ?? null,
+                status: r.status === "failed" ? 500 : r.status === "rejected" ? 200 : 202,
+                durationMs: 0,
+                request: { query: {}, body: { template_id: r.templateId, source_title: r.sourceTitle }, bodyOmittedReason: null },
+                response: {
+                    body: {
+                        swipe_id: r.id,
+                        status: r.status,
+                        tailored_title: r.tailoredTitle,
+                        ready_post_id: r.readyPostId,
+                        fork_id: r.forkId,
+                        swipe_customization: true
+                    },
+                    bodyOmittedReason: null
+                },
+                mediaUrls: [],
+                linkedJob: null,
+                outputMediaUrls: [],
+                createdAt: r.updatedAt ?? r.createdAt
+            };
+        });
+        if (swipeEntries.length) {
+            entriesWithSwipe = [...entries, ...swipeEntries].sort((a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt));
+        }
+    }
     const filteredEntries = parseCreatedAtIdCursor(query.cursor)
-        ? entries.filter((entry) => (Date.parse(entry.createdAt) < Date.parse(parseCreatedAtIdCursor(query.cursor).createdAt)
+        ? entriesWithSwipe.filter((entry) => (Date.parse(entry.createdAt) < Date.parse(parseCreatedAtIdCursor(query.cursor).createdAt)
             || (entry.createdAt === parseCreatedAtIdCursor(query.cursor).createdAt && entry.id < parseCreatedAtIdCursor(query.cursor).id)))
-        : entries;
+        : entriesWithSwipe;
     const page = paginateDescendingByCreatedAt(filteredEntries, limit);
     return c.json({
         entries: page.items,
@@ -11222,7 +11724,10 @@ async function ensureInspirationReadyThenFork(input) {
     // the true length instead of a placeholder.
     if (!inspiration.durationSeconds) {
         try {
-            const probe = await probeMediaAsset({ sourceUrl: inspiration.videoUrl });
+            const probe = await probeMediaAsset({
+                sourceUrl: inspiration.videoUrl,
+                maxDurationSeconds: input.maxDurationSeconds ?? INSPIRATION_PROBE_MAX_DURATION_SECONDS
+            });
             const probedDuration = probe.metadata.durationSeconds;
             if (Number.isFinite(probedDuration) && probedDuration && probedDuration > 0) {
                 inspiration = (await serverlessRecords.updateInspiration({
@@ -11301,6 +11806,167 @@ function buildTemplateEditorUrl(publicBaseUrl, templateId) {
     const path = `/editor/${encodeURIComponent(templateId)}`;
     return publicBaseUrl ? `${publicBaseUrl.replace(/\/$/, "")}${path}` : path;
 }
+// Seed the curated "Popular" catalog from POPULAR_INSPIRATION_GROUPS: ingest
+// each URL once into a real PUBLIC template (same path as admin TikTok
+// submissions) and stamp it with the editorial title + popularGroup +
+// popularRank so it always shows under the /discover Popular toggle and
+// autoplays inline exactly like a Feed card. Curated picks accept ANY length
+// (the 120s ingest cap is lifted). Idempotent — find-or-create by URL, then
+// (re)stamp; a legacy 115s clip is re-downloaded in full. Requires RAPIDAPI_KEY
+// (the download primitive), so run this on staging/prod.
+app.post(`${API_PREFIX}/admin/popular/seed`, async (c) => {
+    try {
+        requireSuperagency(c);
+    }
+    catch (error) {
+        return c.json({ error: error instanceof Error ? error.message : "Forbidden" }, 403);
+    }
+    const body = asRecord(await c.req.json().catch(() => ({}))) ?? {};
+    const requestedOwnerEmail = readNonEmptyString(body.owner_email)?.trim().toLowerCase();
+    const ownerEmail = requestedOwnerEmail ?? config.adminEmails[0]?.trim().toLowerCase();
+    if (!ownerEmail)
+        return c.json({ error: "No owner_email supplied and no admin email configured." }, 400);
+    const ownerCustomer = await serverlessRecords.getCustomerByEmail(ownerEmail);
+    if (!ownerCustomer)
+        return c.json({ error: `Owner not found: ${ownerEmail}` }, 404);
+    const primitive = primitiveRegistry.get("primitive:video_download");
+    if (!primitive)
+        return c.json({ error: "video_download primitive missing" }, 500);
+    const operation = primitive.operations["run"];
+    if (!operation)
+        return c.json({ error: "video_download.run missing" }, 500);
+    const publicBaseUrl = config.PUBLIC_BASE_URL?.trim() || "";
+    try {
+        await assertWalletCanQueueJobs(ownerCustomer.id);
+    }
+    catch (error) {
+        if (error instanceof InsufficientWalletFundsError)
+            return insufficientFundsResponse(c, error);
+        throw error;
+    }
+    // Flatten the manifest into one ranked list. popularRank is a global sequence
+    // (group index * 1000 + item index) so a plain rank sort restores both the
+    // group order and the order within each group.
+    const allItems = POPULAR_INSPIRATION_GROUPS.flatMap((group, gi) => group.items.map((item, ri) => ({ title: item.title, url: item.url, group: group.label, rank: gi * 1000 + ri })));
+    // Optional { groups: [...] } filter seeds one category at a time so a large
+    // catalog stays well under the Lambda timeout (each URL downloads inline).
+    // Reconcile below still runs against the FULL manifest, so a partial seed
+    // never retires the groups it skipped.
+    const onlyGroups = Array.isArray(body.groups) ? new Set(body.groups.map((g) => String(g))) : null;
+    const items = onlyGroups ? allItems.filter((it) => onlyGroups.has(it.group)) : allItems;
+    const results = [];
+    for (const item of items) {
+        const originalUrl = stripTrackingParams(item.url);
+        const sourceHost = safeUrlHostname(originalUrl);
+        if (!sourceHost) {
+            results.push({ source_url: item.url, title: item.title, error: "invalid URL" });
+            continue;
+        }
+        let inspiration = await serverlessRecords.findInspirationByOriginalUrl(originalUrl);
+        // (Re)start the download when there's no usable video yet (a genuine
+        // download failure), OR the stored video is a legacy 115s clip (videoStorageKey
+        // under popular-clips) — long picks are now ingested in full, so a clip must
+        // be re-downloaded from the original source.
+        const isLegacyClip = Boolean(inspiration?.videoStorageKey?.includes("popular-clips"));
+        const needsIngest = !inspiration
+            || (!inspiration.videoUrl && inspiration.status !== "downloading")
+            || isLegacyClip;
+        if (needsIngest) {
+            const payload = operation.inputSchema.parse({ source_url: originalUrl, save_manifest: true });
+            let job;
+            try {
+                job = await jobs.createRootJob({
+                    templateId: primitive.id,
+                    operationName: "run",
+                    workflowName: operation.workflow,
+                    tracer: `popular_seed_ingest:${ownerCustomer.id}`,
+                    payload,
+                    webhookUrl: null,
+                    customer: ownerCustomer,
+                    providerHint: undefined
+                });
+            }
+            catch (error) {
+                results.push({ source_url: item.url, title: item.title, error: error instanceof Error ? error.message : String(error) });
+                continue;
+            }
+            inspiration = inspiration
+                ? ((await serverlessRecords.updateInspiration({
+                    inspirationId: inspiration.id,
+                    patch: { status: "downloading", downloadJobId: job.id, errorMessage: null, videoUrl: null, videoStorageKey: null, durationSeconds: null }
+                })) ?? inspiration)
+                : await serverlessRecords.createInspiration({
+                    customerId: ownerCustomer.id,
+                    sourceUrl: item.url,
+                    originalUrl,
+                    sourceHost,
+                    downloadJobId: job.id,
+                    trendTagline: item.title
+                });
+        }
+        // Stamp the editorial marker + curated title up front so a still-downloading
+        // pick already surfaces under Popular with the right label (pending cards
+        // read trendTagline, which finalize never clobbers).
+        inspiration = (await serverlessRecords.updateInspiration({
+            inspirationId: inspiration.id,
+            patch: { title: item.title, trendTagline: item.title, popularGroup: item.group, popularRank: item.rank, visibility: "public" }
+        })) ?? inspiration;
+        // On a local box (no Step Functions) the download job would queue forever —
+        // run it in-process so ensureInspirationReadyThenFork can finalize.
+        if (!config.VIDFARM_JOB_STATE_MACHINE_ARN && inspiration.status === "downloading" && inspiration.downloadJobId) {
+            const pendingJobId = inspiration.downloadJobId;
+            void runPrimitiveJobInProcess(pendingJobId).catch((error) => {
+                console.error("popular seed download failed", pendingJobId, error instanceof Error ? error.message : error);
+            });
+        }
+        // Curated Popular picks accept ANY length — the 120s ingest cap is lifted
+        // here so long reference videos (podcasts, gameplay, etc.) ingest in full.
+        const finalized = await ensureInspirationReadyThenFork({ inspiration, ownerCustomer, publicBaseUrl, note: null, maxDurationSeconds: Number.MAX_SAFE_INTEGER });
+        const templateId = typeof finalized.template_id === "string" ? finalized.template_id : null;
+        let durationSec = null;
+        if (templateId) {
+            const done = await serverlessRecords.getInspiration(inspiration.id);
+            durationSec = Number.isFinite(done?.durationSeconds) ? Number(done?.durationSeconds) : null;
+            // Keep the template's video/duration in sync with the (re)ingested source,
+            // so re-seeding a previously-clipped pick swaps in the full-length video.
+            await serverlessRecords.updateTemplate({
+                templateId,
+                patch: {
+                    title: item.title,
+                    popularGroup: item.group,
+                    popularRank: item.rank,
+                    visibility: "public",
+                    ...(done?.videoUrl ? { videoUrl: done.videoUrl } : {}),
+                    ...(done?.thumbnailUrl !== undefined ? { thumbnailUrl: done.thumbnailUrl } : {}),
+                    durationSeconds: durationSec
+                }
+            });
+        }
+        results.push({
+            source_url: item.url,
+            title: item.title,
+            group: item.group,
+            rank: item.rank,
+            template_id: templateId,
+            status: templateId ? "ready" : (finalized.status ?? null),
+            duration_sec: durationSec,
+            pending: finalized.pending ?? false
+        });
+    }
+    // Reconcile: any previously-seeded pick whose URL is no longer in the manifest
+    // (a replaced or removed entry) gets un-flagged so it drops out of the Popular
+    // view — the manifest is the single source of truth. Compared after the same
+    // tracking-param stripping the stored originalUrl went through.
+    const manifestUrls = new Set(allItems.map((it) => stripTrackingParams(it.url)));
+    const retired = [];
+    for (const tmpl of await serverlessRecords.listPopularTemplates()) {
+        if (!manifestUrls.has(tmpl.originalUrl)) {
+            await serverlessRecords.updateTemplate({ templateId: tmpl.id, patch: { popularGroup: null, popularRank: null } });
+            retired.push({ template_id: tmpl.id, title: tmpl.title, original_url: tmpl.originalUrl });
+        }
+    }
+    return c.json({ ok: true, owner_customer_id: ownerCustomer.id, count: results.length, items: results, retired }, 202);
+});
 function buildRawTikTokCompositionHtml(input) {
     const duration = Number.isFinite(input.durationSeconds) && input.durationSeconds > 0
         ? Number(input.durationSeconds.toFixed(3))
@@ -14298,7 +14964,8 @@ const AI_PRIMITIVE_IDS = new Set([
     "primitive:video_generate",
     "primitive:tts",
     "primitive:stt",
-    "primitive:captions"
+    "primitive:captions",
+    "primitive:speech_regenerate"
 ]);
 async function preflightAiProviderKeys(input) {
     if (!operationMayUseAiProvider(input)) {
@@ -14824,6 +15491,9 @@ app.post(`${PRIMITIVES_PREFIX}/stt`, async (c) => createPrimitiveJob(c, { primit
 // Animated-caption cues from narration (STT + word timings + cue paging).
 app.post(`${PRIMITIVES_PREFIX}/audio/captions`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:captions", operationName: "run" }));
 app.post(`${PRIMITIVES_PREFIX}/captions`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:captions", operationName: "run" }));
+// Voice-matched speech regeneration (profile original voice → reword → TTS).
+app.post(`${PRIMITIVES_PREFIX}/audio/regenerate-speech`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:speech_regenerate", operationName: "run" }));
+app.post(`${PRIMITIVES_PREFIX}/regenerate-speech`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:speech_regenerate", operationName: "run" }));
 app.post(`${PRIMITIVES_PREFIX}/brainstorm/hooks`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:brainstorm_hooks", operationName: "run" }));
 app.post(`${PRIMITIVES_PREFIX}/brainstorm/awareness_stages`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:brainstorm_awareness_stages", operationName: "run" }));
 app.post(`${PRIMITIVES_PREFIX}/brainstorm/angles`, async (c) => createPrimitiveJob(c, { primitiveId: "primitive:brainstorm_angles", operationName: "run" }));