@odla-ai/brand 0.7.0 → 0.7.1

package/dist/index.js

@@ -2953,7 +2953,8 @@ async function handleDesignPreview(ctx, req, bookId, assetId) {
   const asset = await linkedAsset(ctx, book, assetId);
   if (asset.kind !== DESIGN_ASSET_KIND) throw new BrandNotFoundError(`design ${assetId}`);
   const signed = await ctx.db.storage.sign(asset.path, SIGNED_READ_TTL_SECONDS);
-  const fetched = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const fetched = await fetchPrivateAsset(signed, {
     headers: { accept: "text/html" },
     redirect: "manual",
     signal: req.signal
@@ -3838,7 +3839,8 @@ async function handleBrandDiscussionAsset(ctx, req, target) {
     await ctx.db.storage.sign(before.path, SIGN_TTL_SECONDS)
   );
   if (!signed) throw new BrandInputError("private asset signing failed");
-  const response = await ctx.fetchPrivateAsset(signed, {
+  const fetchPrivateAsset = ctx.fetchPrivateAsset;
+  const response = await fetchPrivateAsset(signed, {
     headers: { accept: contentType },
     redirect: "manual",
     signal: req.signal
@@ -4075,7 +4077,10 @@ function createBrandRoutes(options) {
     newId: options.newId ?? (() => crypto.randomUUID()),
     maxUploadBytes: options.maxUploadBytes ?? 8 * 1024 * 1024,
     discussionBasePath: options.discussionBasePath ?? "/",
-    fetchPrivateAsset: options.fetchPrivateAsset ?? fetch,
+    // Bound: this is stored on the context and invoked from route handlers,
+    // where a property call would set the receiver to that context and
+    // Cloudflare's fetch refuses a foreign receiver ("Illegal invocation").
+    fetchPrivateAsset: options.fetchPrivateAsset ?? globalThis.fetch.bind(globalThis),
     previewFrameAncestors: options.previewFrameAncestors ?? ["'self'"]
   };
   return async (req) => {