@mux/ai 0.2.0 → 0.3.1

package/dist/index.js

@@ -72,10 +72,9 @@ var env = parseEnv();
 var env_default = env;
 
 // src/lib/url-signing.ts
-async function resolveSigningContext(config) {
-  "use step";
-  const keyId = config.muxSigningKey ?? env_default.MUX_SIGNING_KEY;
-  const keySecret = config.muxPrivateKey ?? env_default.MUX_PRIVATE_KEY;
+function getMuxSigningContextFromEnv() {
+  const keyId = env_default.MUX_SIGNING_KEY;
+  const keySecret = env_default.MUX_PRIVATE_KEY;
   if (!keyId || !keySecret) {
     return void 0;
   }
@@ -112,10 +111,11 @@ async function signUrl(url, playbackId, context, type = "video", params) {
 
 // src/primitives/storyboards.ts
 var DEFAULT_STORYBOARD_WIDTH = 640;
-async function getStoryboardUrl(playbackId, width = DEFAULT_STORYBOARD_WIDTH, signingContext) {
+async function getStoryboardUrl(playbackId, width = DEFAULT_STORYBOARD_WIDTH, shouldSign = false) {
   "use step";
   const baseUrl = `https://image.mux.com/${playbackId}/storyboard.png`;
-  if (signingContext) {
+  if (shouldSign) {
+    const signingContext = getMuxSigningContextFromEnv();
     return signUrl(baseUrl, playbackId, signingContext, "storyboard", { width });
   }
   return `${baseUrl}?width=${width}`;
@@ -209,7 +209,7 @@ function chunkText(text, strategy) {
 // src/primitives/thumbnails.ts
 async function getThumbnailUrls(playbackId, duration, options = {}) {
   "use step";
-  const { interval = 10, width = 640, signingContext } = options;
+  const { interval = 10, width = 640, shouldSign = false } = options;
   const timestamps = [];
   if (duration <= 50) {
     const spacing = duration / 6;
@@ -223,7 +223,8 @@ async function getThumbnailUrls(playbackId, duration, options = {}) {
   }
   const baseUrl = `https://image.mux.com/${playbackId}/thumbnail.png`;
   const urlPromises = timestamps.map(async (time) => {
-    if (signingContext) {
+    if (shouldSign) {
+      const signingContext = getMuxSigningContextFromEnv();
       return signUrl(baseUrl, playbackId, signingContext, "thumbnail", { time, width });
     }
     return `${baseUrl}?time=${time}&width=${width}`;
@@ -339,17 +340,18 @@ function parseVTTCues(vttContent) {
   }
   return cues;
 }
-async function buildTranscriptUrl(playbackId, trackId, signingContext) {
+async function buildTranscriptUrl(playbackId, trackId, shouldSign = false) {
   "use step";
   const baseUrl = `https://stream.mux.com/${playbackId}/text/${trackId}.vtt`;
-  if (signingContext) {
+  if (shouldSign) {
+    const signingContext = getMuxSigningContextFromEnv();
     return signUrl(baseUrl, playbackId, signingContext, "video");
   }
   return baseUrl;
 }
 async function fetchTranscriptForAsset(asset, playbackId, options = {}) {
   "use step";
-  const { languageCode, cleanTranscript = true, signingContext } = options;
+  const { languageCode, cleanTranscript = true, shouldSign } = options;
   const track = findCaptionTrack(asset, languageCode);
   if (!track) {
     return { transcriptText: "" };
@@ -357,7 +359,7 @@ async function fetchTranscriptForAsset(asset, playbackId, options = {}) {
   if (!track.id) {
     return { transcriptText: "", track };
   }
-  const transcriptUrl = await buildTranscriptUrl(playbackId, track.id, signingContext);
+  const transcriptUrl = await buildTranscriptUrl(playbackId, track.id, shouldSign);
   try {
     const response = await fetch(transcriptUrl);
     if (!response.ok) {
@@ -414,22 +416,22 @@ function requireEnv(value, name) {
   }
   return value;
 }
-function createLanguageModelFromConfig(provider, modelId, credentials) {
+function createLanguageModelFromConfig(provider, modelId) {
   switch (provider) {
     case "openai": {
-      const apiKey = credentials.openaiApiKey;
+      const apiKey = env_default.OPENAI_API_KEY;
       requireEnv(apiKey, "OPENAI_API_KEY");
       const openai = createOpenAI({ apiKey });
       return openai(modelId);
     }
     case "anthropic": {
-      const apiKey = credentials.anthropicApiKey;
+      const apiKey = env_default.ANTHROPIC_API_KEY;
       requireEnv(apiKey, "ANTHROPIC_API_KEY");
       const anthropic = createAnthropic({ apiKey });
       return anthropic(modelId);
     }
     case "google": {
-      const apiKey = credentials.googleApiKey;
+      const apiKey = env_default.GOOGLE_GENERATIVE_AI_API_KEY;
       requireEnv(apiKey, "GOOGLE_GENERATIVE_AI_API_KEY");
       const google = createGoogleGenerativeAI({ apiKey });
       return google(modelId);
@@ -440,16 +442,16 @@ function createLanguageModelFromConfig(provider, modelId, credentials) {
     }
   }
 }
-function createEmbeddingModelFromConfig(provider, modelId, credentials) {
+function createEmbeddingModelFromConfig(provider, modelId) {
   switch (provider) {
     case "openai": {
-      const apiKey = credentials.openaiApiKey;
+      const apiKey = env_default.OPENAI_API_KEY;
       requireEnv(apiKey, "OPENAI_API_KEY");
       const openai = createOpenAI({ apiKey });
       return openai.embedding(modelId);
     }
     case "google": {
-      const apiKey = credentials.googleApiKey;
+      const apiKey = env_default.GOOGLE_GENERATIVE_AI_API_KEY;
       requireEnv(apiKey, "GOOGLE_GENERATIVE_AI_API_KEY");
       const google = createGoogleGenerativeAI({ apiKey });
       return google.textEmbeddingModel(modelId);
@@ -465,7 +467,7 @@ function resolveLanguageModel(options = {}) {
   const modelId = options.model || DEFAULT_LANGUAGE_MODELS[provider];
   switch (provider) {
     case "openai": {
-      const apiKey = options.openaiApiKey ?? env_default.OPENAI_API_KEY;
+      const apiKey = env_default.OPENAI_API_KEY;
       requireEnv(apiKey, "OPENAI_API_KEY");
       const openai = createOpenAI({
         apiKey
@@ -477,7 +479,7 @@ function resolveLanguageModel(options = {}) {
       };
     }
     case "anthropic": {
-      const apiKey = options.anthropicApiKey ?? env_default.ANTHROPIC_API_KEY;
+      const apiKey = env_default.ANTHROPIC_API_KEY;
       requireEnv(apiKey, "ANTHROPIC_API_KEY");
       const anthropic = createAnthropic({
         apiKey
@@ -489,7 +491,7 @@ function resolveLanguageModel(options = {}) {
       };
     }
     case "google": {
-      const apiKey = options.googleApiKey ?? env_default.GOOGLE_GENERATIVE_AI_API_KEY;
+      const apiKey = env_default.GOOGLE_GENERATIVE_AI_API_KEY;
       requireEnv(apiKey, "GOOGLE_GENERATIVE_AI_API_KEY");
       const google = createGoogleGenerativeAI({
         apiKey
@@ -511,7 +513,7 @@ function resolveEmbeddingModel(options = {}) {
   const modelId = options.model || DEFAULT_EMBEDDING_MODELS[provider];
   switch (provider) {
     case "openai": {
-      const apiKey = options.openaiApiKey ?? env_default.OPENAI_API_KEY;
+      const apiKey = env_default.OPENAI_API_KEY;
       requireEnv(apiKey, "OPENAI_API_KEY");
       const openai = createOpenAI({
         apiKey
@@ -523,7 +525,7 @@ function resolveEmbeddingModel(options = {}) {
       };
     }
     case "google": {
-      const apiKey = options.googleApiKey ?? env_default.GOOGLE_GENERATIVE_AI_API_KEY;
+      const apiKey = env_default.GOOGLE_GENERATIVE_AI_API_KEY;
       requireEnv(apiKey, "GOOGLE_GENERATIVE_AI_API_KEY");
       const google = createGoogleGenerativeAI({
         apiKey
@@ -542,13 +544,45 @@ function resolveEmbeddingModel(options = {}) {
 }
 
 // src/lib/client-factory.ts
-async function validateCredentials(options, requiredProvider) {
-  "use step";
-  const muxTokenId = options.muxTokenId ?? env_default.MUX_TOKEN_ID;
-  const muxTokenSecret = options.muxTokenSecret ?? env_default.MUX_TOKEN_SECRET;
-  const openaiApiKey = options.openaiApiKey ?? env_default.OPENAI_API_KEY;
-  const anthropicApiKey = options.anthropicApiKey ?? env_default.ANTHROPIC_API_KEY;
-  const googleApiKey = options.googleApiKey ?? env_default.GOOGLE_GENERATIVE_AI_API_KEY;
+function getMuxCredentialsFromEnv() {
+  const muxTokenId = env_default.MUX_TOKEN_ID;
+  const muxTokenSecret = env_default.MUX_TOKEN_SECRET;
+  if (!muxTokenId || !muxTokenSecret) {
+    throw new Error(
+      "Mux credentials are required. Set MUX_TOKEN_ID and MUX_TOKEN_SECRET environment variables."
+    );
+  }
+  return { muxTokenId, muxTokenSecret };
+}
+function getApiKeyFromEnv(provider) {
+  const envVarMap = {
+    openai: env_default.OPENAI_API_KEY,
+    anthropic: env_default.ANTHROPIC_API_KEY,
+    google: env_default.GOOGLE_GENERATIVE_AI_API_KEY,
+    hive: env_default.HIVE_API_KEY,
+    elevenlabs: env_default.ELEVENLABS_API_KEY
+  };
+  const apiKey = envVarMap[provider];
+  if (!apiKey) {
+    const envVarNames = {
+      openai: "OPENAI_API_KEY",
+      anthropic: "ANTHROPIC_API_KEY",
+      google: "GOOGLE_GENERATIVE_AI_API_KEY",
+      hive: "HIVE_API_KEY",
+      elevenlabs: "ELEVENLABS_API_KEY"
+    };
+    throw new Error(
+      `${provider} API key is required. Set ${envVarNames[provider]} environment variable.`
+    );
+  }
+  return apiKey;
+}
+async function validateCredentials(requiredProvider) {
+  const muxTokenId = env_default.MUX_TOKEN_ID;
+  const muxTokenSecret = env_default.MUX_TOKEN_SECRET;
+  const openaiApiKey = env_default.OPENAI_API_KEY;
+  const anthropicApiKey = env_default.ANTHROPIC_API_KEY;
+  const googleApiKey = env_default.GOOGLE_GENERATIVE_AI_API_KEY;
   if (!muxTokenId || !muxTokenSecret) {
     throw new Error(
       "Mux credentials are required. Provide muxTokenId and muxTokenSecret in options or set MUX_TOKEN_ID and MUX_TOKEN_SECRET environment variables."
@@ -578,9 +612,8 @@ async function validateCredentials(options, requiredProvider) {
   };
 }
 async function createWorkflowConfig(options, provider) {
-  "use step";
   const providerToUse = provider || options.provider || "openai";
-  const credentials = await validateCredentials(options, providerToUse);
+  const credentials = await validateCredentials(providerToUse);
   const resolved = resolveLanguageModel({
     ...options,
     provider: providerToUse
@@ -701,11 +734,12 @@ function getPlaybackId(asset) {
     "No public or signed playback ID found for this asset. A public or signed playback ID is required. DRM playback IDs are not currently supported."
   );
 }
-async function getPlaybackIdForAsset(credentials, assetId) {
+async function getPlaybackIdForAsset(assetId) {
   "use step";
+  const { muxTokenId, muxTokenSecret } = getMuxCredentialsFromEnv();
   const mux = new Mux2({
-    tokenId: credentials.muxTokenId,
-    tokenSecret: credentials.muxTokenSecret
+    tokenId: muxTokenId,
+    tokenSecret: muxTokenSecret
   });
   const asset = await mux.video.assets.retrieve(assetId);
   const { id: playbackId, policy } = getPlaybackId(asset);
@@ -884,16 +918,11 @@ async function analyzeStoryboard({
   imageDataUrl,
   provider,
   modelId,
-  credentials,
   userPrompt,
   systemPrompt
 }) {
   "use step";
-  const model = createLanguageModelFromConfig(
-    provider,
-    modelId,
-    credentials
-  );
+  const model = createLanguageModelFromConfig(provider, modelId);
   const response = await generateObject({
     model,
     schema: burnedInCaptionsSchema,
@@ -938,14 +967,14 @@ async function hasBurnedInCaptions(assetId, options = {}) {
     { ...config, model },
     provider
   );
-  const { playbackId, policy } = await getPlaybackIdForAsset(workflowConfig.credentials, assetId);
-  const signingContext = await resolveSigningContext(options);
+  const { playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
     );
   }
-  const imageUrl = await getStoryboardUrl(playbackId, 640, policy === "signed" ? signingContext : void 0);
+  const imageUrl = await getStoryboardUrl(playbackId, 640, policy === "signed");
   let analysisResponse;
   if (imageSubmissionMode === "base64") {
     const base64Data = await fetchImageAsBase64(imageUrl, imageDownloadOptions);
@@ -953,7 +982,6 @@ async function hasBurnedInCaptions(assetId, options = {}) {
       imageDataUrl: base64Data,
       provider: workflowConfig.provider,
       modelId: workflowConfig.modelId,
-      credentials: workflowConfig.credentials,
       userPrompt,
       systemPrompt: SYSTEM_PROMPT
     });
@@ -962,7 +990,6 @@ async function hasBurnedInCaptions(assetId, options = {}) {
       imageDataUrl: imageUrl,
       provider: workflowConfig.provider,
       modelId: workflowConfig.modelId,
-      credentials: workflowConfig.credentials,
       userPrompt,
       systemPrompt: SYSTEM_PROMPT
     });
@@ -1035,16 +1062,11 @@ var chaptersSchema = z3.object({
 async function generateChaptersWithAI({
   provider,
   modelId,
-  credentials,
   timestampedTranscript,
   systemPrompt
 }) {
   "use step";
-  const model = createLanguageModelFromConfig(
-    provider,
-    modelId,
-    credentials
-  );
+  const model = createLanguageModelFromConfig(provider, modelId);
   const response = await withRetry(
     () => generateObject2({
       model,
@@ -1087,8 +1109,8 @@ async function generateChapters(assetId, languageCode, options = {}) {
   "use workflow";
   const { provider = "openai", model } = options;
   const config = await createWorkflowConfig({ ...options, model }, provider);
-  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(config.credentials, assetId);
-  const signingContext = await resolveSigningContext(options);
+  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -1098,7 +1120,7 @@ async function generateChapters(assetId, languageCode, options = {}) {
     languageCode,
     cleanTranscript: false,
     // keep timestamps for chapter segmentation
-    signingContext: policy === "signed" ? signingContext : void 0
+    shouldSign: policy === "signed"
   });
   if (!transcriptResult.track || !transcriptResult.transcriptText) {
     const availableLanguages = getReadyTextTracks(assetData).map((t) => t.language_code).filter(Boolean).join(", ");
@@ -1115,7 +1137,6 @@ async function generateChapters(assetId, languageCode, options = {}) {
     chaptersData = await generateChaptersWithAI({
       provider: config.provider,
       modelId: config.modelId,
-      credentials: config.credentials,
       timestampedTranscript,
       systemPrompt: SYSTEM_PROMPT2
     });
@@ -1162,11 +1183,10 @@ function averageEmbeddings(embeddings) {
 async function generateSingleChunkEmbedding({
   chunk,
   provider,
-  modelId,
-  credentials
+  modelId
 }) {
   "use step";
-  const model = createEmbeddingModelFromConfig(provider, modelId, credentials);
+  const model = createEmbeddingModelFromConfig(provider, modelId);
   const response = await withRetry(
     () => embed({
       model,
@@ -1192,13 +1212,9 @@ async function generateVideoEmbeddings(assetId, options = {}) {
     chunkingStrategy = { type: "token", maxTokens: 500, overlap: 100 },
     batchSize = 5
   } = options;
-  const credentials = await validateCredentials(options, provider === "google" ? "google" : "openai");
   const embeddingModel = resolveEmbeddingModel({ ...options, provider, model });
-  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(
-    credentials,
-    assetId
-  );
-  const signingContext = await resolveSigningContext(options);
+  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -1208,7 +1224,7 @@ async function generateVideoEmbeddings(assetId, options = {}) {
   const transcriptResult = await fetchTranscriptForAsset(assetData, playbackId, {
     languageCode,
     cleanTranscript: !useVttChunking,
-    signingContext: policy === "signed" ? signingContext : void 0
+    shouldSign: policy === "signed"
   });
   if (!transcriptResult.track || !transcriptResult.transcriptText) {
     const availableLanguages = getReadyTextTracks(assetData).map((t) => t.language_code).filter(Boolean).join(", ");
@@ -1237,8 +1253,7 @@ async function generateVideoEmbeddings(assetId, options = {}) {
           (chunk) => generateSingleChunkEmbedding({
             chunk,
             provider: embeddingModel.provider,
-            modelId: embeddingModel.modelId,
-            credentials
+            modelId: embeddingModel.modelId
           })
         )
       );
@@ -1323,19 +1338,20 @@ async function processConcurrently(items, processor, maxConcurrent = 5) {
   }
   return results;
 }
-async function requestOpenAIModeration(imageUrls, apiKey, model, maxConcurrent = 5, submissionMode = "url", downloadOptions) {
+async function requestOpenAIModeration(imageUrls, model, maxConcurrent = 5, submissionMode = "url", downloadOptions) {
   "use step";
   const targetUrls = submissionMode === "base64" ? (await downloadImagesAsBase64(imageUrls, downloadOptions, maxConcurrent)).map(
-    (img) => ({ url: img.url, image: img.base64Data, apiKey, model })
-  ) : imageUrls.map((url) => ({ url, image: url, apiKey, model }));
+    (img) => ({ url: img.url, image: img.base64Data, model })
+  ) : imageUrls.map((url) => ({ url, image: url, model }));
   const moderate = async (entry) => {
     "use step";
+    const apiKey = getApiKeyFromEnv("openai");
     try {
       const res = await fetch("https://api.openai.com/v1/moderations", {
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          "Authorization": `Bearer ${entry.apiKey}`
+          "Authorization": `Bearer ${apiKey}`
         },
         body: JSON.stringify({
           model: entry.model,
@@ -1381,7 +1397,7 @@ function getHiveCategoryScores(classes, categoryNames) {
   const scores = categoryNames.map((category) => scoreMap[category] || 0);
   return Math.max(...scores, 0);
 }
-async function requestHiveModeration(imageUrls, apiKey, maxConcurrent = 5, submissionMode = "url", downloadOptions) {
+async function requestHiveModeration(imageUrls, maxConcurrent = 5, submissionMode = "url", downloadOptions) {
   "use step";
   const targets = submissionMode === "base64" ? (await downloadImagesAsBase64(imageUrls, downloadOptions, maxConcurrent)).map((img) => ({
     url: img.url,
@@ -1396,6 +1412,7 @@ async function requestHiveModeration(imageUrls, apiKey, maxConcurrent = 5, submi
   }));
   const moderate = async (entry) => {
     "use step";
+    const apiKey = getApiKeyFromEnv("hive");
     try {
       const formData = new FormData();
       if (entry.source.kind === "url") {
@@ -1452,10 +1469,9 @@ async function getModerationScores(assetId, options = {}) {
     imageSubmissionMode = "url",
     imageDownloadOptions
   } = options;
-  const credentials = await validateCredentials(options, provider === "openai" ? "openai" : void 0);
-  const { asset, playbackId, policy } = await getPlaybackIdForAsset(credentials, assetId);
+  const { asset, playbackId, policy } = await getPlaybackIdForAsset(assetId);
   const duration = asset.duration || 0;
-  const signingContext = await resolveSigningContext(options);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -1464,30 +1480,20 @@ async function getModerationScores(assetId, options = {}) {
   const thumbnailUrls = await getThumbnailUrls(playbackId, duration, {
     interval: thumbnailInterval,
     width: thumbnailWidth,
-    signingContext: policy === "signed" ? signingContext : void 0
+    shouldSign: policy === "signed"
   });
   let thumbnailScores;
   if (provider === "openai") {
-    const apiKey = credentials.openaiApiKey;
-    if (!apiKey) {
-      throw new Error("OpenAI API key is required for moderation. Set OPENAI_API_KEY or pass openaiApiKey.");
-    }
     thumbnailScores = await requestOpenAIModeration(
       thumbnailUrls,
-      apiKey,
       model || "omni-moderation-latest",
       maxConcurrent,
       imageSubmissionMode,
       imageDownloadOptions
     );
   } else if (provider === "hive") {
-    const hiveApiKey = options.hiveApiKey || env_default.HIVE_API_KEY;
-    if (!hiveApiKey) {
-      throw new Error("Hive API key is required for moderation. Set HIVE_API_KEY or pass hiveApiKey.");
-    }
     thumbnailScores = await requestHiveModeration(
       thumbnailUrls,
-      hiveApiKey,
       maxConcurrent,
       imageSubmissionMode,
       imageDownloadOptions
@@ -1520,9 +1526,10 @@ var summarySchema = z4.object({
   title: z4.string(),
   description: z4.string()
 });
+var VALID_TONES = ["neutral", "playful", "professional"];
 var TONE_INSTRUCTIONS = {
-  normal: "Provide a clear, straightforward analysis.",
-  sassy: "Channel your inner diva! Answer with maximum sass, wit, and playful attitude. Don't hold back - be cheeky, clever, and delightfully snarky. Make it pop!",
+  neutral: "Provide a clear, straightforward analysis.",
+  playful: "Channel your inner diva! Answer with maximum sass, wit, and playful attitude. Don't hold back - be cheeky, clever, and delightfully snarky. Make it pop!",
   professional: "Provide a professional, executive-level analysis suitable for business reporting."
 };
 var summarizationPromptBuilder = createPromptBuilder({
@@ -1638,13 +1645,9 @@ function buildUserPrompt2({
   }
   return summarizationPromptBuilder.buildWithContext(promptOverrides, contextSections);
 }
-async function analyzeStoryboard2(imageDataUrl, workflowConfig, userPrompt, systemPrompt) {
+async function analyzeStoryboard2(imageDataUrl, provider, modelId, userPrompt, systemPrompt) {
   "use step";
-  const model = createLanguageModelFromConfig(
-    workflowConfig.provider,
-    workflowConfig.modelId,
-    workflowConfig.credentials
-  );
+  const model = createLanguageModelFromConfig(provider, modelId);
   const response = await generateObject3({
     model,
     schema: summarySchema,
@@ -1701,7 +1704,7 @@ async function getSummaryAndTags(assetId, options) {
   const {
     provider = "openai",
     model,
-    tone = "normal",
+    tone = "neutral",
     includeTranscript = true,
     cleanTranscript = true,
     imageSubmissionMode = "url",
@@ -1709,12 +1712,17 @@ async function getSummaryAndTags(assetId, options) {
     abortSignal: _abortSignal,
     promptOverrides
   } = options ?? {};
+  if (!VALID_TONES.includes(tone)) {
+    throw new Error(
+      `Invalid tone "${tone}". Valid tones are: ${VALID_TONES.join(", ")}`
+    );
+  }
   const config = await createWorkflowConfig(
     { ...options, model },
     provider
   );
-  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(config.credentials, assetId);
-  const signingContext = await resolveSigningContext(options ?? {});
+  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -1722,7 +1730,7 @@ async function getSummaryAndTags(assetId, options) {
   }
   const transcriptText = includeTranscript ? (await fetchTranscriptForAsset(assetData, playbackId, {
     cleanTranscript,
-    signingContext: policy === "signed" ? signingContext : void 0
+    shouldSign: policy === "signed"
   })).transcriptText : "";
   const userPrompt = buildUserPrompt2({
     tone,
@@ -1730,19 +1738,20 @@ async function getSummaryAndTags(assetId, options) {
     isCleanTranscript: cleanTranscript,
     promptOverrides
   });
-  const imageUrl = await getStoryboardUrl(playbackId, 640, policy === "signed" ? signingContext : void 0);
+  const imageUrl = await getStoryboardUrl(playbackId, 640, policy === "signed");
   let analysisResponse;
   try {
     if (imageSubmissionMode === "base64") {
       const downloadResult = await downloadImageAsBase64(imageUrl, imageDownloadOptions);
       analysisResponse = await analyzeStoryboard2(
         downloadResult.base64Data,
-        config,
+        config.provider,
+        config.modelId,
         userPrompt,
         SYSTEM_PROMPT3
       );
     } else {
-      analysisResponse = await withRetry(() => analyzeStoryboard2(imageUrl, config, userPrompt, SYSTEM_PROMPT3));
+      analysisResponse = await withRetry(() => analyzeStoryboard2(imageUrl, config.provider, config.modelId, userPrompt, SYSTEM_PROMPT3));
     }
   } catch (error) {
     throw new Error(
@@ -1947,11 +1956,12 @@ function getReadyAudioStaticRendition(asset) {
   );
 }
 var hasReadyAudioStaticRendition = (asset) => Boolean(getReadyAudioStaticRendition(asset));
-async function requestStaticRenditionCreation(credentials, assetId) {
+async function requestStaticRenditionCreation(assetId) {
   "use step";
+  const { muxTokenId, muxTokenSecret } = getMuxCredentialsFromEnv();
   const mux = new Mux3({
-    tokenId: credentials.muxTokenId,
-    tokenSecret: credentials.muxTokenSecret
+    tokenId: muxTokenId,
+    tokenSecret: muxTokenSecret
   });
   try {
     await mux.video.assets.createStaticRendition(assetId, {
@@ -1970,13 +1980,13 @@ async function requestStaticRenditionCreation(credentials, assetId) {
 }
 async function waitForAudioStaticRendition({
   assetId,
-  credentials,
   initialAsset
 }) {
   "use step";
+  const { muxTokenId, muxTokenSecret } = getMuxCredentialsFromEnv();
   const mux = new Mux3({
-    tokenId: credentials.muxTokenId,
-    tokenSecret: credentials.muxTokenSecret
+    tokenId: muxTokenId,
+    tokenSecret: muxTokenSecret
   });
   let currentAsset = initialAsset;
   if (hasReadyAudioStaticRendition(currentAsset)) {
@@ -1984,9 +1994,9 @@ async function waitForAudioStaticRendition({
   }
   const status = currentAsset.static_renditions?.status ?? "not_requested";
   if (status === "not_requested" || status === void 0) {
-    await requestStaticRenditionCreation(credentials, assetId);
+    await requestStaticRenditionCreation(assetId);
   } else if (status === "errored") {
-    await requestStaticRenditionCreation(credentials, assetId);
+    await requestStaticRenditionCreation(assetId);
   } else {
     console.warn(`\u2139\uFE0F Static rendition already ${status}. Waiting for it to finish...`);
   }
@@ -2022,10 +2032,10 @@ async function createElevenLabsDubbingJob({
   audioBuffer,
   assetId,
   elevenLabsLangCode,
-  elevenLabsApiKey,
   numSpeakers
 }) {
   "use step";
+  const elevenLabsApiKey = getApiKeyFromEnv("elevenlabs");
   const audioBlob = new Blob([audioBuffer], { type: "audio/mp4" });
   const formData = new FormData();
   formData.append("file", audioBlob);
@@ -2046,10 +2056,10 @@ async function createElevenLabsDubbingJob({
   return dubbingData.dubbing_id;
 }
 async function checkElevenLabsDubbingStatus({
-  dubbingId,
-  elevenLabsApiKey
+  dubbingId
 }) {
   "use step";
+  const elevenLabsApiKey = getApiKeyFromEnv("elevenlabs");
   const statusResponse = await fetch(`https://api.elevenlabs.io/v1/dubbing/${dubbingId}`, {
     headers: {
       "xi-api-key": elevenLabsApiKey
@@ -2066,10 +2076,10 @@ async function checkElevenLabsDubbingStatus({
 }
 async function downloadDubbedAudioFromElevenLabs({
   dubbingId,
-  languageCode,
-  elevenLabsApiKey
+  languageCode
 }) {
   "use step";
+  const elevenLabsApiKey = getApiKeyFromEnv("elevenlabs");
   const audioUrl = `https://api.elevenlabs.io/v1/dubbing/${dubbingId}/audio/${languageCode}`;
   const audioResponse = await fetch(audioUrl, {
     headers: {
@@ -2087,14 +2097,14 @@ async function uploadDubbedAudioToS3({
   toLanguageCode,
   s3Endpoint,
   s3Region,
-  s3Bucket,
-  s3AccessKeyId,
-  s3SecretAccessKey
+  s3Bucket
 }) {
   "use step";
   const { S3Client, GetObjectCommand } = await import("@aws-sdk/client-s3");
   const { Upload } = await import("@aws-sdk/lib-storage");
   const { getSignedUrl } = await import("@aws-sdk/s3-request-presigner");
+  const s3AccessKeyId = env_default.S3_ACCESS_KEY_ID;
+  const s3SecretAccessKey = env_default.S3_SECRET_ACCESS_KEY;
   const s3Client = new S3Client({
     region: s3Region,
     endpoint: s3Endpoint,
@@ -2127,11 +2137,12 @@ async function uploadDubbedAudioToS3({
   console.warn(`\u{1F517} Generated presigned URL (expires in 1 hour)`);
   return presignedUrl;
 }
-async function createAudioTrackOnMux(credentials, assetId, languageCode, presignedUrl) {
+async function createAudioTrackOnMux(assetId, languageCode, presignedUrl) {
   "use step";
+  const { muxTokenId, muxTokenSecret } = getMuxCredentialsFromEnv();
   const mux = new Mux3({
-    tokenId: credentials.muxTokenId,
-    tokenSecret: credentials.muxTokenSecret
+    tokenId: muxTokenId,
+    tokenSecret: muxTokenSecret
   });
   const languageName = new Intl.DisplayNames(["en"], { type: "language" }).of(languageCode) || languageCode.toUpperCase();
   const trackName = `${languageName} (auto-dubbed)`;
@@ -2158,21 +2169,20 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
   if (provider !== "elevenlabs") {
     throw new Error("Only ElevenLabs provider is currently supported for audio translation");
   }
-  const credentials = await validateCredentials(options);
   const elevenLabsKey = elevenLabsApiKey ?? env_default.ELEVENLABS_API_KEY;
   const s3Endpoint = options.s3Endpoint ?? env_default.S3_ENDPOINT;
   const s3Region = options.s3Region ?? env_default.S3_REGION ?? "auto";
   const s3Bucket = options.s3Bucket ?? env_default.S3_BUCKET;
-  const s3AccessKeyId = options.s3AccessKeyId ?? env_default.S3_ACCESS_KEY_ID;
-  const s3SecretAccessKey = options.s3SecretAccessKey ?? env_default.S3_SECRET_ACCESS_KEY;
+  const s3AccessKeyId = env_default.S3_ACCESS_KEY_ID;
+  const s3SecretAccessKey = env_default.S3_SECRET_ACCESS_KEY;
   if (!elevenLabsKey) {
     throw new Error("ElevenLabs API key is required. Provide elevenLabsApiKey in options or set ELEVENLABS_API_KEY environment variable.");
   }
   if (uploadToMux && (!s3Endpoint || !s3Bucket || !s3AccessKeyId || !s3SecretAccessKey)) {
     throw new Error("S3 configuration is required for uploading to Mux. Provide s3Endpoint, s3Bucket, s3AccessKeyId, and s3SecretAccessKey in options or set S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY_ID, and S3_SECRET_ACCESS_KEY environment variables.");
   }
-  const { asset: initialAsset, playbackId, policy } = await getPlaybackIdForAsset(credentials, assetId);
-  const signingContext = await resolveSigningContext(options);
+  const { asset: initialAsset, playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -2183,7 +2193,6 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
     console.warn("\u274C No ready audio static rendition found. Requesting one now...");
     currentAsset = await waitForAudioStaticRendition({
       assetId,
-      credentials,
       initialAsset: currentAsset
     });
   }
@@ -2213,7 +2222,6 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
       audioBuffer,
       assetId,
       elevenLabsLangCode,
-      elevenLabsApiKey: elevenLabsKey,
       numSpeakers
     });
     console.warn(`\u2705 Dubbing job created with ID: ${dubbingId}`);
@@ -2230,8 +2238,7 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
     pollAttempts++;
     try {
       const statusResult = await checkElevenLabsDubbingStatus({
-        dubbingId,
-        elevenLabsApiKey: elevenLabsKey
+        dubbingId
       });
       dubbingStatus = statusResult.status;
       targetLanguages = statusResult.targetLanguages;
@@ -2274,8 +2281,7 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
     }
     dubbedAudioBuffer = await downloadDubbedAudioFromElevenLabs({
       dubbingId,
-      languageCode: downloadLangCode,
-      elevenLabsApiKey: elevenLabsKey
+      languageCode: downloadLangCode
     });
     console.warn("\u2705 Dubbed audio downloaded successfully!");
   } catch (error) {
@@ -2290,9 +2296,7 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
       toLanguageCode,
       s3Endpoint,
       s3Region,
-      s3Bucket,
-      s3AccessKeyId,
-      s3SecretAccessKey
+      s3Bucket
     });
   } catch (error) {
     throw new Error(`Failed to upload audio to S3: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -2301,7 +2305,7 @@ async function translateAudio(assetId, toLanguageCode, options = {}) {
   let uploadedTrackId;
   const muxLangCode = toISO639_1(toLanguageCode);
   try {
-    uploadedTrackId = await createAudioTrackOnMux(credentials, assetId, muxLangCode, presignedUrl);
+    uploadedTrackId = await createAudioTrackOnMux(assetId, muxLangCode, presignedUrl);
     const languageName = new Intl.DisplayNames(["en"], { type: "language" }).of(muxLangCode) || muxLangCode.toUpperCase();
     const trackName = `${languageName} (auto-dubbed)`;
     console.warn(`\u2705 Track added to Mux asset with ID: ${uploadedTrackId}`);
@@ -2343,15 +2347,10 @@ async function translateVttWithAI({
   toLanguageCode,
   provider,
   modelId,
-  credentials,
   abortSignal
 }) {
   "use step";
-  const languageModel = createLanguageModelFromConfig(
-    provider,
-    modelId,
-    credentials
-  );
+  const languageModel = createLanguageModelFromConfig(provider, modelId);
   const response = await generateObject4({
     model: languageModel,
     schema: translationSchema,
@@ -2383,14 +2382,14 @@ async function uploadVttToS3({
   toLanguageCode,
   s3Endpoint,
   s3Region,
-  s3Bucket,
-  s3AccessKeyId,
-  s3SecretAccessKey
+  s3Bucket
 }) {
   "use step";
   const { S3Client, GetObjectCommand } = await import("@aws-sdk/client-s3");
   const { Upload } = await import("@aws-sdk/lib-storage");
   const { getSignedUrl } = await import("@aws-sdk/s3-request-presigner");
+  const s3AccessKeyId = env_default.S3_ACCESS_KEY_ID;
+  const s3SecretAccessKey = env_default.S3_SECRET_ACCESS_KEY;
   const s3Client = new S3Client({
     region: s3Region,
     endpoint: s3Endpoint,
@@ -2421,11 +2420,12 @@ async function uploadVttToS3({
   });
   return presignedUrl;
 }
-async function createTextTrackOnMux(credentials, assetId, languageCode, trackName, presignedUrl) {
+async function createTextTrackOnMux(assetId, languageCode, trackName, presignedUrl) {
   "use step";
+  const { muxTokenId, muxTokenSecret } = getMuxCredentialsFromEnv();
   const mux = new Mux4({
-    tokenId: credentials.muxTokenId,
-    tokenSecret: credentials.muxTokenSecret
+    tokenId: muxTokenId,
+    tokenSecret: muxTokenSecret
   });
   const trackResponse = await mux.video.assets.createTrack(assetId, {
     type: "text",
@@ -2447,15 +2447,13 @@ async function translateCaptions(assetId, fromLanguageCode, toLanguageCode, opti
     s3Endpoint: providedS3Endpoint,
     s3Region: providedS3Region,
     s3Bucket: providedS3Bucket,
-    s3AccessKeyId: providedS3AccessKeyId,
-    s3SecretAccessKey: providedS3SecretAccessKey,
     uploadToMux: uploadToMuxOption
   } = options;
   const s3Endpoint = providedS3Endpoint ?? env_default.S3_ENDPOINT;
   const s3Region = providedS3Region ?? env_default.S3_REGION ?? "auto";
   const s3Bucket = providedS3Bucket ?? env_default.S3_BUCKET;
-  const s3AccessKeyId = providedS3AccessKeyId ?? env_default.S3_ACCESS_KEY_ID;
-  const s3SecretAccessKey = providedS3SecretAccessKey ?? env_default.S3_SECRET_ACCESS_KEY;
+  const s3AccessKeyId = env_default.S3_ACCESS_KEY_ID;
+  const s3SecretAccessKey = env_default.S3_SECRET_ACCESS_KEY;
   const uploadToMux = uploadToMuxOption !== false;
   const config = await createWorkflowConfig(
     { ...options, model },
@@ -2464,8 +2462,8 @@ async function translateCaptions(assetId, fromLanguageCode, toLanguageCode, opti
   if (uploadToMux && (!s3Endpoint || !s3Bucket || !s3AccessKeyId || !s3SecretAccessKey)) {
     throw new Error("S3 configuration is required for uploading to Mux. Provide s3Endpoint, s3Bucket, s3AccessKeyId, and s3SecretAccessKey in options or set S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY_ID, and S3_SECRET_ACCESS_KEY environment variables.");
   }
-  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(config.credentials, assetId);
-  const signingContext = await resolveSigningContext(options);
+  const { asset: assetData, playbackId, policy } = await getPlaybackIdForAsset(assetId);
+  const signingContext = getMuxSigningContextFromEnv();
   if (policy === "signed" && !signingContext) {
     throw new Error(
       "Signed playback ID requires signing credentials. Provide muxSigningKey and muxPrivateKey in options or set MUX_SIGNING_KEY and MUX_PRIVATE_KEY environment variables."
@@ -2499,7 +2497,6 @@ async function translateCaptions(assetId, fromLanguageCode, toLanguageCode, opti
       toLanguageCode,
       provider: config.provider,
       modelId: config.modelId,
-      credentials: config.credentials,
       abortSignal: options.abortSignal
     });
     translatedVtt = result.translatedVtt;
@@ -2530,9 +2527,7 @@ async function translateCaptions(assetId, fromLanguageCode, toLanguageCode, opti
       toLanguageCode,
       s3Endpoint,
       s3Region,
-      s3Bucket,
-      s3AccessKeyId,
-      s3SecretAccessKey
+      s3Bucket
     });
   } catch (error) {
     throw new Error(`Failed to upload VTT to S3: ${error instanceof Error ? error.message : "Unknown error"}`);
@@ -2541,7 +2536,7 @@ async function translateCaptions(assetId, fromLanguageCode, toLanguageCode, opti
   try {
     const languageName = getLanguageName(toLanguageCode);
     const trackName = `${languageName} (auto-translated)`;
-    uploadedTrackId = await createTextTrackOnMux(config.credentials, assetId, toLanguageCode, trackName, presignedUrl);
+    uploadedTrackId = await createTextTrackOnMux(assetId, toLanguageCode, trackName, presignedUrl);
   } catch (error) {
     console.warn(`Failed to add track to Mux asset: ${error instanceof Error ? error.message : "Unknown error"}`);
   }