vidspotai-shared 1.0.100 → 1.0.101

package/lib/services/demo/demoMusic.js

@@ -46,23 +46,29 @@ function moodForStyle(spec) {
  * a dead CDN edge silently ships no music rather than 404-crashing the mux.
  * (Same guard shape as `selectMusicForPlan`'s `pickFirstReachable`.)
  */
+async function urlReachable(url) {
+    try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 5000);
+        const r = await fetch(url, { method: "HEAD", signal: controller.signal });
+        clearTimeout(timeout);
+        if (r.ok)
+            return true;
+        logger_1.logger.warn(`${TAG} track HEAD non-2xx, skipping`, { url, status: r.status });
+        return false;
+    }
+    catch (e) {
+        logger_1.logger.warn(`${TAG} track HEAD failed, skipping`, {
+            url,
+            err: e instanceof Error ? e.message : String(e),
+        });
+        return false;
+    }
+}
 async function firstReachable(tracks) {
     for (const t of tracks) {
-        try {
-            const controller = new AbortController();
-            const timeout = setTimeout(() => controller.abort(), 5000);
-            const r = await fetch(t.url, { method: "HEAD", signal: controller.signal });
-            clearTimeout(timeout);
-            if (r.ok)
-                return t;
-            logger_1.logger.warn(`${TAG} track HEAD non-2xx, skipping`, { url: t.url, status: r.status });
-        }
-        catch (e) {
-            logger_1.logger.warn(`${TAG} track HEAD failed, skipping`, {
-                url: t.url,
-                err: e instanceof Error ? e.message : String(e),
-            });
-        }
+        if (await urlReachable(t.url))
+            return t;
     }
     return undefined;
 }
@@ -70,7 +76,17 @@ async function firstReachable(tracks) {
  * Pick a reachable background-music bed for a demo. Returns null (never throws)
  * when nothing is reachable — the caller ships the video without a bed.
  */
-async function selectDemoMusic(spec) {
+async function selectDemoMusic(spec, opts) {
+    // User-provided track wins when reachable (still fail-soft to the catalog).
+    if (opts?.preferredUrl && (await urlReachable(opts.preferredUrl))) {
+        logger_1.logger.info(`${TAG} using user-provided bed`, { url: opts.preferredUrl });
+        return { url: opts.preferredUrl, attribution: "User-provided" };
+    }
+    if (opts?.preferredUrl) {
+        logger_1.logger.warn(`${TAG} user bed unreachable — falling back to catalog`, {
+            url: opts.preferredUrl,
+        });
+    }
     const { mood, query, bpmTarget } = moodForStyle(spec);
     try {
         // Don't pass durationSecMin — every curated track is looped to the video

package/lib/services/demo/demoScriptPrompt.d.ts

@@ -36,7 +36,8 @@ export declare function wordCount(text: string): number;
  *   1. keep as many WHOLE sentences as fit within budget;
  *   2. if even the first sentence is over budget, cap at `budget` words and back
  *      off to the last clause boundary (comma/semicolon/dash) in that span;
- *   3. always end on terminal punctuation.
+ *   3. drop any dangling function-word tail so the line ends on a content word;
+ *   4. always end on terminal punctuation.
  * Never lengthens. Returns the (possibly) trimmed text + whether it changed.
  */
 export declare function fitNarrationToBudget(text: string, budget: number): {

package/lib/services/demo/demoScriptPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"demoScriptPrompt.d.ts","sourceRoot":"","sources":["../../../src/services/demo/demoScriptPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAY3C,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED,mDAAmD;AACnD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AA4BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAuED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,EAAE,CAU5E;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAkBpD;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,oBAAoB,EAAE,GAC7B,MAAM,CAuBR"}
+{"version":3,"file":"demoScriptPrompt.d.ts","sourceRoot":"","sources":["../../../src/services/demo/demoScriptPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAY3C,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED,mDAAmD;AACnD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AA0DD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAuED,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,oBAAoB,EAAE,CAU5E;AAED,wBAAgB,2BAA2B,IAAI,MAAM,CAkBpD;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,oBAAoB,EAAE,GAC7B,MAAM,CAuBR"}

package/lib/services/demo/demoScriptPrompt.js

@@ -72,6 +72,32 @@ function splitSentences(text) {
         out.push(text.slice(last).trim());
     return out.filter(Boolean);
 }
+/**
+ * Words that must never END a trimmed line: cutting here yields a dangling
+ * fragment ("…describe what you want and.") that reads as broken copy and sounds
+ * worse spoken than a shorter, complete phrase. Conjunctions, prepositions,
+ * articles, and auxiliaries all imply a continuation that was cut away.
+ */
+const DANGLING_TAIL_WORDS = new Set([
+    "a", "an", "and", "as", "at", "but", "by", "for", "from", "if", "in", "into",
+    "is", "it", "its", "of", "on", "or", "so", "than", "that", "the", "then",
+    "to", "up", "was", "were", "when", "which", "while", "with", "you", "your",
+]);
+/**
+ * Drop trailing function words so a capped span ends on a content word. Bounded:
+ * never strips below half the words it was given, so a line made entirely of
+ * function words degrades to the plain cap rather than to nothing.
+ */
+function trimDanglingTail(text) {
+    const words = text.trim().split(/\s+/).filter(Boolean);
+    const floor = Math.ceil(words.length / 2);
+    let end = words.length;
+    while (end > floor &&
+        DANGLING_TAIL_WORDS.has(words[end - 1].toLowerCase().replace(/[^\p{L}']/gu, ""))) {
+        end--;
+    }
+    return words.slice(0, end).join(" ");
+}
 /**
  * Deterministically fit narration to a spoken-word `budget` so the synthesized
  * speech lands INSIDE its scene window — instead of overrunning and either
@@ -83,7 +109,8 @@ function splitSentences(text) {
  *   1. keep as many WHOLE sentences as fit within budget;
  *   2. if even the first sentence is over budget, cap at `budget` words and back
  *      off to the last clause boundary (comma/semicolon/dash) in that span;
- *   3. always end on terminal punctuation.
+ *   3. drop any dangling function-word tail so the line ends on a content word;
+ *   4. always end on terminal punctuation.
  * Never lengthens. Returns the (possibly) trimmed text + whether it changed.
  */
 function fitNarrationToBudget(text, budget) {
@@ -110,7 +137,7 @@ function fitNarrationToBudget(text, budget) {
     const out = clauseIdx > 0 && wordCount(capped.slice(0, clauseIdx)) >= Math.ceil(budget * 0.5)
         ? capped.slice(0, clauseIdx)
         : capped;
-    return { text: ensureTerminalPunctuation(out), trimmed: true };
+    return { text: ensureTerminalPunctuation(trimDanglingTail(out)), trimmed: true };
 }
 /** Pull the salient on-screen copy from a scene so narration can complement it. */
 function sceneCopyDigest(scene) {

package/lib/services/demo/demoStockAssets.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Stock-asset resolution for the SaaS Demo Video pipeline — the "real library"
+ * half of the planner's `generatedAssets` (see DemoGeneratedAssetSchema, where
+ * `source:"stock"` requests a real photo/clip instead of an AI generation).
+ *
+ * Free, instant, and REAL: for generic real-world subjects (a laptop on a desk,
+ * a city street, a coffee shop) a licensed stock shot beats a synthesized one —
+ * so the planner can prefer it and skip the generation cost. Resolution reuses
+ * the same provider cascade the agent flow uses (Pexels → Pixabay → Unsplash for
+ * images; Pexels → Pixabay for video), gated on env keys. Fail-soft: returns
+ * null when nothing is reachable/available, and the caller marks the asset failed
+ * and strips its `gen://` ref so the scene degrades to its coded surface.
+ *
+ * Kept in `shared` (next to demoMusic) so it can import the provider services via
+ * relative paths — they are not part of the package's public surface. Deliberately
+ * cache-free: demo runs are infrequent and each stock ref resolves once per spec.
+ */
+import type { DemoGeneratedAsset, DemoSpec } from "../../schemas/demoSpec.schema";
+/** Whether any stock provider is configured — the prompt only offers stock when true. */
+export declare function stockAssetsAvailable(): boolean;
+/**
+ * Resolve one `source:"stock"` asset to a real media URL, trying each configured
+ * provider in turn. Returns null (never throws) when no provider yields a hit.
+ */
+export declare function resolveStockAsset(request: DemoGeneratedAsset, spec: DemoSpec): Promise<{
+    url: string;
+    attribution?: string;
+} | null>;
+//# sourceMappingURL=demoStockAssets.d.ts.map

package/lib/services/demo/demoStockAssets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoStockAssets.d.ts","sourceRoot":"","sources":["../../../src/services/demo/demoStockAssets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAYlF,yFAAyF;AACzF,wBAAgB,oBAAoB,IAAI,OAAO,CAM9C;AAkDD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA+CvD"}

package/lib/services/demo/demoStockAssets.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stockAssetsAvailable = stockAssetsAvailable;
+exports.resolveStockAsset = resolveStockAsset;
+const pexels_service_1 = require("../aiGen/providers/pexels/pexels.service");
+const pixabay_service_1 = require("../aiGen/providers/pixabay/pixabay.service");
+const unsplash_service_1 = require("../aiGen/providers/unsplash/unsplash.service");
+const logger_1 = require("../../utils/logger");
+const TAG = "[DemoStockAssets]";
+/** Whether any stock provider is configured — the prompt only offers stock when true. */
+function stockAssetsAvailable() {
+    return Boolean(process.env.PEXELS_API_KEY ||
+        process.env.PIXABAY_API_KEY ||
+        process.env.UNSPLASH_ACCESS_KEY);
+}
+/** Provider cascade — same order/precedence as the agent's search_stock tool. */
+function buildChain(kind) {
+    const pexels = new pexels_service_1.PexelsProviderService();
+    const pixabay = new pixabay_service_1.PixabayProviderService();
+    const unsplash = new unsplash_service_1.UnsplashProviderService();
+    const chain = [
+        {
+            name: "pexels",
+            available: () => Boolean(process.env.PEXELS_API_KEY),
+            supports: () => true,
+            search: (p) => pexels.searchStock(p),
+        },
+        {
+            name: "pixabay",
+            available: () => Boolean(process.env.PIXABAY_API_KEY),
+            supports: () => true,
+            search: (p) => pixabay.searchStock(p),
+        },
+        {
+            name: "unsplash",
+            available: () => Boolean(process.env.UNSPLASH_ACCESS_KEY),
+            supports: (k) => k === "image",
+            search: (p) => unsplash.searchStock(p),
+        },
+    ];
+    return chain.filter((l) => l.supports(kind) && l.available());
+}
+/** Plain search terms from the request (`query` wins; else the prompt's first words). */
+function searchQuery(request) {
+    const q = request.query?.trim();
+    if (q)
+        return q;
+    // Fallback: first ~6 words of the generation prompt, stripped of punctuation.
+    return request.prompt
+        .replace(/[^\p{L}\p{N}\s]/gu, " ")
+        .split(/\s+/)
+        .filter(Boolean)
+        .slice(0, 6)
+        .join(" ");
+}
+/**
+ * Resolve one `source:"stock"` asset to a real media URL, trying each configured
+ * provider in turn. Returns null (never throws) when no provider yields a hit.
+ */
+async function resolveStockAsset(request, spec) {
+    const kind = request.kind; // "image" | "video"
+    const chain = buildChain(kind);
+    if (chain.length === 0) {
+        logger_1.logger.warn(`${TAG} no stock provider configured — cannot resolve`, {
+            id: request.id,
+            kind,
+        });
+        return null;
+    }
+    const params = {
+        query: searchQuery(request),
+        kind,
+        aspectRatio: request.aspect ?? spec.aspect,
+        perPage: 5,
+        ...(kind === "video"
+            ? { minDurationSec: 2, maxDurationSec: request.durationSec ?? 15 }
+            : {}),
+    };
+    for (const link of chain) {
+        try {
+            const result = await link.search(params);
+            const asset = result.assets?.[0];
+            if (asset?.url) {
+                logger_1.logger.info(`${TAG} resolved ${kind} "${request.id}" via ${link.name}`, {
+                    query: params.query,
+                });
+                return {
+                    url: asset.url,
+                    ...(asset.attribution?.name
+                        ? { attribution: `${asset.attribution.name} (${asset.source})` }
+                        : {}),
+                };
+            }
+            logger_1.logger.warn(`${TAG} ${link.name} returned no results`, {
+                id: request.id,
+                query: params.query,
+            });
+        }
+        catch (err) {
+            logger_1.logger.warn(`${TAG} ${link.name} search failed — trying next`, {
+                id: request.id,
+                err: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return null;
+}

package/lib/services/demo/index.d.ts

@@ -13,7 +13,9 @@ export * from "./demoAuthor";
 export * from "./demoCredits";
 export * from "./demoScriptPrompt";
 export * from "./demoScriptWriter";
+export * from "./demoCaptions";
 export * from "./demoMusic";
+export * from "./demoStockAssets";
 export * from "./demoMediaGuard";
 export * from "./demoRevisePrompt";
 export * from "./demoReviser";
@@ -21,4 +23,5 @@ export * from "./demoPrefill";
 export * from "./demoTriage";
 export * from "./githubOAuth";
 export * from "./githubOAuthState";
+export * from "./productConnection.service";
 //# sourceMappingURL=index.d.ts.map

package/lib/services/demo/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/demo/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/demo/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC"}

package/lib/services/demo/index.js

@@ -29,7 +29,9 @@ __exportStar(require("./demoAuthor"), exports);
 __exportStar(require("./demoCredits"), exports);
 __exportStar(require("./demoScriptPrompt"), exports);
 __exportStar(require("./demoScriptWriter"), exports);
+__exportStar(require("./demoCaptions"), exports);
 __exportStar(require("./demoMusic"), exports);
+__exportStar(require("./demoStockAssets"), exports);
 __exportStar(require("./demoMediaGuard"), exports);
 __exportStar(require("./demoRevisePrompt"), exports);
 __exportStar(require("./demoReviser"), exports);
@@ -37,3 +39,4 @@ __exportStar(require("./demoPrefill"), exports);
 __exportStar(require("./demoTriage"), exports);
 __exportStar(require("./githubOAuth"), exports);
 __exportStar(require("./githubOAuthState"), exports);
+__exportStar(require("./productConnection.service"), exports);

package/lib/services/demo/productConnection.service.d.ts

@@ -0,0 +1,78 @@
+import { IProductConnectionModel } from "../../models/productConnection.model";
+/**
+ * Product sign-in connection store (Tier 2 product-footage-capture —
+ * notes/PRODUCT_FOOTAGE_CAPTURE_PLAN.md). Owns the encrypt-at-write /
+ * decrypt-at-read of a user's captured browser sign-in session so both the
+ * live-session capture endpoint AND the worker's authed replay go through one
+ * place. Mirrors the githubConnection token flow (AES-256-GCM via the shared
+ * vault, `SOCIAL_TOKEN_ENC_KEY`) — plaintext state never touches Firestore.
+ */
+/**
+ * A Playwright-compatible browser storage snapshot — the RESULT of a sign-in
+ * (never credentials). Shape matches Playwright's `storageState()` so the worker
+ * can seed cookies + localStorage before navigating past the auth wall.
+ */
+export interface ProductStorageState {
+    cookies: Array<{
+        name: string;
+        value: string;
+        domain: string;
+        path: string;
+        /** Unix seconds; -1 / absent for session cookies. */
+        expires?: number;
+        httpOnly?: boolean;
+        secure?: boolean;
+        sameSite?: "Strict" | "Lax" | "None";
+    }>;
+    origins: Array<{
+        origin: string;
+        localStorage: Array<{
+            name: string;
+            value: string;
+        }>;
+    }>;
+}
+/** Public-safe view of a connection — everything EXCEPT the encrypted state. */
+export interface ProductConnectionSummary {
+    host: string;
+    productUrl: string;
+    origins: string[];
+    label?: string;
+    status: IProductConnectionModel["status"];
+    expiresHint?: number;
+}
+/** Origin host of a URL, lowercased, or null if unparseable. */
+export declare function hostOf(url: string): string | null;
+/** True when the vault is configured — connections are unusable without it. */
+export declare function isProductConnectionEnabled(): boolean;
+/**
+ * Upsert a captured sign-in session (encrypted). Idempotent per (user, host):
+ * re-connecting the same product replaces the expired snapshot. Returns the
+ * host used as the connection key.
+ */
+export declare function saveProductConnection(args: {
+    userId: string;
+    productUrl: string;
+    storageState: ProductStorageState;
+    label?: string;
+}): Promise<{
+    host: string;
+}>;
+/**
+ * Read + decrypt a user's connection for a host. Returns the storageState +
+ * metadata, or null when there's no ACTIVE connection / the vault can't decrypt
+ * (best-effort — the caller treats null as "not connected" and asks the user).
+ */
+export declare function getProductConnection(userId: string, host: string): Promise<{
+    state: ProductStorageState;
+    conn: IProductConnectionModel;
+} | null>;
+/** List a user's connections as public-safe summaries (no encrypted state). */
+export declare function listProductConnections(userId: string): Promise<ProductConnectionSummary[]>;
+/** Delete (revoke) a user's connection for a host. */
+export declare function deleteProductConnection(userId: string, host: string): Promise<void>;
+/** Flag a connection expired after a replay found the session no longer authenticates. */
+export declare function markProductConnectionExpired(userId: string, host: string): Promise<void>;
+/** Stamp lastUsedAt after a successful replay (observability; best-effort). */
+export declare function touchProductConnection(userId: string, host: string): Promise<void>;
+//# sourceMappingURL=productConnection.service.d.ts.map

package/lib/services/demo/productConnection.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"productConnection.service.d.ts","sourceRoot":"","sources":["../../../src/services/demo/productConnection.service.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,EAExB,MAAM,sCAAsC,CAAC;AAG9C;;;;;;;GAOG;AAEH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,qDAAqD;QACrD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KACtC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtD,CAAC,CAAC;CACJ;AAED,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gEAAgE;AAChE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMjD;AAWD,+EAA+E;AAC/E,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,mBAAmB,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAgC5B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,GAAG,IAAI,CAAC,CAY/E;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAerC;AAED,sDAAsD;AACtD,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,0FAA0F;AAC1F,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/lib/services/demo/productConnection.service.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hostOf = hostOf;
+exports.isProductConnectionEnabled = isProductConnectionEnabled;
+exports.saveProductConnection = saveProductConnection;
+exports.getProductConnection = getProductConnection;
+exports.listProductConnections = listProductConnections;
+exports.deleteProductConnection = deleteProductConnection;
+exports.markProductConnectionExpired = markProductConnectionExpired;
+exports.touchProductConnection = touchProductConnection;
+const firestore_1 = require("firebase-admin/firestore");
+const firestore_service_1 = require("../firestore.service");
+const productConnection_model_1 = require("../../models/productConnection.model");
+const tokenVault_1 = require("../crypto/tokenVault");
+/** Origin host of a URL, lowercased, or null if unparseable. */
+function hostOf(url) {
+    try {
+        return new URL(url).host.toLowerCase();
+    }
+    catch {
+        return null;
+    }
+}
+/** Earliest real cookie expiry (epoch ms) across the snapshot, for the reconnect UX. */
+function earliestCookieExpiry(state) {
+    const future = state.cookies
+        .map((c) => c.expires)
+        .filter((e) => typeof e === "number" && e > 0)
+        .map((e) => e * 1000);
+    return future.length ? Math.min(...future) : undefined;
+}
+/** True when the vault is configured — connections are unusable without it. */
+function isProductConnectionEnabled() {
+    return (0, tokenVault_1.isTokenVaultConfigured)();
+}
+/**
+ * Upsert a captured sign-in session (encrypted). Idempotent per (user, host):
+ * re-connecting the same product replaces the expired snapshot. Returns the
+ * host used as the connection key.
+ */
+async function saveProductConnection(args) {
+    const { userId, productUrl, storageState, label } = args;
+    const host = hostOf(productUrl);
+    if (!host)
+        throw new Error("saveProductConnection: unparseable productUrl");
+    const origins = [
+        ...new Set(storageState.origins
+            .map((o) => o.origin)
+            .concat(new URL(productUrl).origin)),
+    ];
+    const expiresHint = earliestCookieExpiry(storageState);
+    const stateEnc = (0, tokenVault_1.encryptToken)(JSON.stringify(storageState));
+    const doc = {
+        userId,
+        host,
+        productUrl,
+        origins,
+        ...(label ? { label } : {}),
+        stateEnc,
+        ...(expiresHint ? { expiresHint } : {}),
+        status: "active",
+        capturedAt: firestore_1.FieldValue.serverTimestamp(),
+        updatedAt: firestore_1.FieldValue.serverTimestamp(),
+    };
+    await firestore_service_1.FirestoreService.productConnectionsCol
+        .doc((0, productConnection_model_1.productConnectionDocId)(userId, host))
+        .set(doc);
+    return { host };
+}
+/**
+ * Read + decrypt a user's connection for a host. Returns the storageState +
+ * metadata, or null when there's no ACTIVE connection / the vault can't decrypt
+ * (best-effort — the caller treats null as "not connected" and asks the user).
+ */
+async function getProductConnection(userId, host) {
+    const snap = await firestore_service_1.FirestoreService.productConnectionsCol
+        .doc((0, productConnection_model_1.productConnectionDocId)(userId, host))
+        .get();
+    const conn = snap.data();
+    if (!conn || conn.status !== "active" || !conn.stateEnc)
+        return null;
+    try {
+        const state = JSON.parse((0, tokenVault_1.decryptToken)(conn.stateEnc));
+        return { state, conn };
+    }
+    catch {
+        return null;
+    }
+}
+/** List a user's connections as public-safe summaries (no encrypted state). */
+async function listProductConnections(userId) {
+    const snap = await firestore_service_1.FirestoreService.productConnectionsCol
+        .where("userId", "==", userId)
+        .get();
+    return snap.docs.map((d) => {
+        const c = d.data();
+        return {
+            host: c.host,
+            productUrl: c.productUrl,
+            origins: c.origins,
+            ...(c.label ? { label: c.label } : {}),
+            status: c.status,
+            ...(c.expiresHint ? { expiresHint: c.expiresHint } : {}),
+        };
+    });
+}
+/** Delete (revoke) a user's connection for a host. */
+async function deleteProductConnection(userId, host) {
+    await firestore_service_1.FirestoreService.productConnectionsCol
+        .doc((0, productConnection_model_1.productConnectionDocId)(userId, host))
+        .delete();
+}
+/** Flag a connection expired after a replay found the session no longer authenticates. */
+async function markProductConnectionExpired(userId, host) {
+    await firestore_service_1.FirestoreService.productConnectionsCol
+        .doc((0, productConnection_model_1.productConnectionDocId)(userId, host))
+        .set({ status: "expired", updatedAt: firestore_1.FieldValue.serverTimestamp() }, { merge: true });
+}
+/** Stamp lastUsedAt after a successful replay (observability; best-effort). */
+async function touchProductConnection(userId, host) {
+    await firestore_service_1.FirestoreService.productConnectionsCol
+        .doc((0, productConnection_model_1.productConnectionDocId)(userId, host))
+        .set({ lastUsedAt: firestore_1.FieldValue.serverTimestamp(), updatedAt: firestore_1.FieldValue.serverTimestamp() }, { merge: true })
+        .catch(() => { });
+}

package/lib/services/editor/planToProject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"planToProject.d.ts","sourceRoot":"","sources":["../../../src/services/editor/planToProject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,OAAO,EAIR,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEpF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAwZhE"}
+{"version":3,"file":"planToProject.d.ts","sourceRoot":"","sources":["../../../src/services/editor/planToProject.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAKV,OAAO,EAIR,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEpF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CA6bhE"}

package/lib/services/editor/planToProject.helpers.d.ts

@@ -15,6 +15,7 @@ export declare const TRACK_ID: {
     readonly music: "track-music";
     readonly text: "track-text";
     readonly caption: "track-caption";
+    readonly logo: "track-logo";
 };
 export declare function isStillStrategy(s: SceneAssetStrategy): boolean;
 /** A passable URL we can put in skeleton clips so ProjectSchema.url() passes. */

package/lib/services/editor/planToProject.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"planToProject.helpers.d.ts","sourceRoot":"","sources":["../../../src/services/editor/planToProject.helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EACR,KAAK,EACL,UAAU,EACX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,cAAc,EACd,SAAS,EACV,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;;;GAMG;AAIH,eAAO,MAAM,QAAQ;;;;;;;CASX,CAAC;AASX,wBAAgB,eAAe,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAE9D;AAED,iFAAiF;AACjF,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAInD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAW5F;AAID,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,CASjF,CAAC;AAIF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,kBAAkB,GAAG,SAAS,GACtC,UAAU,CAiBZ;AA4CD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,WAAW,EAAE,MAAM;AACnB;;;;GAIG;AACH,SAAS,CAAC,EAAE,aAAa,GACxB,QAAQ,EAAE,CA2CZ;AAED,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,CAAC,EAAE,MAAM,GACrB,KAAK,CAYP"}
+{"version":3,"file":"planToProject.helpers.d.ts","sourceRoot":"","sources":["../../../src/services/editor/planToProject.helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EACR,KAAK,EACL,UAAU,EACX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,cAAc,EACd,SAAS,EACV,MAAM,gCAAgC,CAAC;AAExC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;;;GAMG;AAIH,eAAO,MAAM,QAAQ;;;;;;;;CAYX,CAAC;AASX,wBAAgB,eAAe,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAE9D;AAED,iFAAiF;AACjF,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAInD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAW5F;AAID,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,CASjF,CAAC;AAIF,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,kBAAkB,GAAG,SAAS,GACtC,UAAU,CAiBZ;AA4CD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,WAAW,EAAE,MAAM;AACnB;;;;GAIG;AACH,SAAS,CAAC,EAAE,aAAa,GACxB,QAAQ,EAAE,CA2CZ;AAED,wBAAgB,SAAS,CACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,aAAa,CAAC,EAAE,MAAM,GACrB,KAAK,CAYP"}

package/lib/services/editor/planToProject.helpers.js

@@ -24,6 +24,9 @@ exports.TRACK_ID = {
     music: "track-music",
     text: "track-text",
     caption: "track-caption",
+    // Brand-logo overlay lane — a single image clip pinned to a corner, spanning
+    // the whole video, painted on top of everything (Reach per-recipient logo).
+    logo: "track-logo",
 };
 // ─── strategy → clip kind ────────────────────────────────────────────────
 const STILL_STRATEGIES = new Set([

package/lib/services/editor/planToProject.js

@@ -335,6 +335,39 @@ function planToProject(input) {
         };
         clips.push(musicClip);
     }
+    // Reach per-recipient brand logo — a single contained ImageClip pinned to the
+    // top-right corner, spanning the whole video, painted on top of every track.
+    // Only emitted when the outreach fan-out injected plan.brandLogoUrl (the
+    // planner never sets it), so scene visuals are untouched for every other flow.
+    let hasLogo = false;
+    if (plan.brandLogoUrl && offsetMs > 0) {
+        hasLogo = true;
+        // Square box (contain letterboxes any logo aspect — no crop), ~16% of the
+        // short side, inset by a ~4%-of-width margin from the top-right corner.
+        const side = Math.round(Math.min(size.width, size.height) * 0.16);
+        const margin = Math.round(size.width * 0.04);
+        const logoClip = {
+            id: "brand-logo",
+            trackId: planToProject_helpers_1.TRACK_ID.logo,
+            type: "image",
+            display: { from: 0, to: offsetMs },
+            name: "Brand logo",
+            src: plan.brandLogoUrl,
+            fit: "contain",
+            box: {
+                left: size.width - side - margin,
+                top: margin,
+                width: side,
+                height: side,
+            },
+            provenance: { tier: "T0", source: "user-upload", creditsSpent: 0 },
+            effects: [],
+            transform: { x: 0, y: 0, scaleX: 1, scaleY: 1, rotation: 0, opacity: 1 },
+            locked: false,
+            metadata: { brandLogo: true },
+        };
+        clips.push(logoClip);
+    }
     // Stage 7 (lock enforcement) — overlay preserved clips verbatim. Runs after
     // ALL clips (incl. music) are built so a preserved clip cleanly displaces
     // its freshly-rebuilt twin by id (ids are deterministic: scene-N-visual /
@@ -376,6 +409,9 @@ function planToProject(input) {
                 case planToProject_helpers_1.TRACK_ID.caption:
                     hasCaptions = true;
                     break;
+                case planToProject_helpers_1.TRACK_ID.logo:
+                    hasLogo = true;
+                    break;
                 default: break; // visual track is always declared
             }
         }
@@ -400,6 +436,9 @@ function planToProject(input) {
     // row per source group, and regen/new captions route back onto it.
     if (hasCaptions)
         tracks.push((0, planToProject_helpers_1.makeTrack)(planToProject_helpers_1.TRACK_ID.caption, "caption", trackIndex++, "Voiceover · Captions", planToProject_helpers_1.TRACK_ID.voiceover));
+    // Logo lane is declared LAST → highest track index → painted on top of all.
+    if (hasLogo)
+        tracks.push((0, planToProject_helpers_1.makeTrack)(planToProject_helpers_1.TRACK_ID.logo, "video", trackIndex++, "Logo"));
     const durationMs = Math.max(1, offsetMs);
     return {
         schemaVersion: project_schema_1.PROJECT_SCHEMA_VERSION,

package/lib/services/editor/projectToDesign.js

@@ -153,7 +153,19 @@ function videoDetails(clip) {
     };
 }
 function imageDetails(clip) {
-    return { src: clip.src };
+    const d = { src: clip.src };
+    // Positioned overlay images (e.g. a corner brand logo) carry an explicit
+    // pixel box + fit; the renderer's container/media styles read left/top/
+    // width/height/objectFit. Absent → full-frame cover as before.
+    if (clip.box) {
+        d.left = clip.box.left;
+        d.top = clip.box.top;
+        d.width = clip.box.width;
+        d.height = clip.box.height;
+    }
+    if (clip.fit)
+        d.objectFit = clip.fit;
+    return d;
 }
 function audioDetails(clip) {
     return {