vidspotai-shared 1.0.115 → 1.0.117

package/lib/libs/firebase.d.ts

@@ -4,4 +4,15 @@ export declare const firestore: admin.firestore.Firestore;
 export declare const FieldValue: typeof FirebaseFirestore.FieldValue;
 export declare const storage: import("firebase-admin/lib/storage/storage").Storage;
 export declare function getBucket(): import("@google-cloud/storage").Bucket;
+/**
+ * OAuth2 access token for the service account backing this Admin app.
+ * Scoped by firebase-admin to include cloud-platform + identitytoolkit
+ * (see firebase-admin's credential-internal.js), so it's valid against any
+ * Google API the service account has IAM permission for — not just the
+ * Admin SDK's own wrapped calls. Use this instead of minting a token by hand
+ * when a check needs a raw REST call the Admin SDK doesn't expose (e.g. the
+ * Identity Toolkit admin/v2 config endpoint, which the Node SDK's
+ * ProjectConfig doesn't surface `authorizedDomains` on).
+ */
+export declare function getGoogleAccessToken(): Promise<string>;
 //# sourceMappingURL=firebase.d.ts.map

package/lib/libs/firebase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../../src/libs/firebase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAwBxC,eAAO,MAAM,IAAI,6CAAe,CAAC;AACjC,eAAO,MAAM,SAAS,2BAAoB,CAAC;AAE3C,eAAO,MAAM,UAAU,qCAA6B,CAAC;AACrD,eAAO,MAAM,OAAO,sDAAkB,CAAC;AAEvC,wBAAgB,SAAS,2CAExB"}
+{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../../src/libs/firebase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAwBxC,eAAO,MAAM,IAAI,6CAAe,CAAC;AACjC,eAAO,MAAM,SAAS,2BAAoB,CAAC;AAE3C,eAAO,MAAM,UAAU,qCAA6B,CAAC;AACrD,eAAO,MAAM,OAAO,sDAAkB,CAAC;AAEvC,wBAAgB,SAAS,2CAExB;AAED;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAM5D"}

package/lib/libs/firebase.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.storage = exports.FieldValue = exports.firestore = exports.auth = void 0;
 exports.getBucket = getBucket;
+exports.getGoogleAccessToken = getGoogleAccessToken;
 const admin = __importStar(require("firebase-admin"));
 const dotenv = __importStar(require("dotenv"));
 dotenv.config();
@@ -64,3 +65,20 @@ exports.storage = admin.storage();
 function getBucket() {
     return exports.storage.bucket();
 }
+/**
+ * OAuth2 access token for the service account backing this Admin app.
+ * Scoped by firebase-admin to include cloud-platform + identitytoolkit
+ * (see firebase-admin's credential-internal.js), so it's valid against any
+ * Google API the service account has IAM permission for — not just the
+ * Admin SDK's own wrapped calls. Use this instead of minting a token by hand
+ * when a check needs a raw REST call the Admin SDK doesn't expose (e.g. the
+ * Identity Toolkit admin/v2 config endpoint, which the Node SDK's
+ * ProjectConfig doesn't surface `authorizedDomains` on).
+ */
+async function getGoogleAccessToken() {
+    const token = await admin.app().options.credential?.getAccessToken();
+    if (!token?.access_token) {
+        throw new Error("Failed to obtain a Google access token from the Firebase Admin credential");
+    }
+    return token.access_token;
+}

package/lib/libs/storage/MediaStorage.d.ts

@@ -35,6 +35,20 @@
  * `mirrorFromReadable` below for a best-effort R2 copy. Those still write
  * real bytes to GCS today — converting them is a separate, larger effort
  * (see the notes doc §9).
+ *
+ * ⚠️ RE-DOWNLOADING a URL this returned, anywhere else in the backend (a
+ * provider re-fetching a bible reference image, a pipeline step re-fetching a
+ * scene clip to post-process it, ASR re-fetching an audio URL, handing a URL
+ * to an external API that dereferences it server-side, etc): NEVER call raw
+ * `fetch()`/`axios.get()` on it. Since the flip above, it's GCS-shaped but
+ * R2-backed, so a direct fetch against storage.googleapis.com 404s — it only
+ * resolves through the CDN Worker's R2 read-through. Use `fetchOwnMedia()`
+ * (drop-in `fetch()` replacement) when you're doing the fetching yourself, or
+ * `toCdnUrl(url, { visibility: "private" })` when you're just embedding the
+ * URL string into a payload for someone else to fetch — both in ./cdnUrl,
+ * both safe no-ops on a genuinely external URL. This is not hypothetical:
+ * ~10 independent call sites had each rolled their own raw download and
+ * broke in production the same day this flipped (see notes doc §9).
  */
 import type { Readable } from "stream";
 import type { IStorageBackend } from "./StorageBackend";

package/lib/libs/storage/MediaStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MediaStorage.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/MediaStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,qBAAa,YAAY;IACvB,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;gBAEhC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe;IAK9D;;;;;;OAMG;IACG,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC;IAKlB;;;;;OAKG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMzC;;;;;;;OAOG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;OAKG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;;OAMG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAShB,iDAAiD;IACjD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD;;;;;;;;OAQG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;OAKG;YACW,gBAAgB;CAa/B;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,cAAsD,CAAC"}
+{"version":3,"file":"MediaStorage.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/MediaStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,qBAAa,YAAY;IACvB,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;gBAEhC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe;IAK9D;;;;;;OAMG;IACG,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC;IAKlB;;;;;OAKG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMzC;;;;;;;OAOG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;OAKG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;;OAMG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAShB,iDAAiD;IACjD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD;;;;;;;;OAQG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;OAKG;YACW,gBAAgB;CAa/B;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,cAAsD,CAAC"}

package/lib/libs/storage/cdnUrl.d.ts

@@ -24,4 +24,30 @@ export type MediaVisibility = "public" | "private";
 export declare function toCdnUrl(url: string, opts?: {
     visibility?: MediaVisibility;
 }): string;
+/**
+ * The sanctioned way to RE-DOWNLOAD a URL this backend itself minted via
+ * `mediaStorage.put()`/`putFromFile()`, from anywhere in the backend (a
+ * provider re-fetching a bible reference image, a pipeline step re-fetching a
+ * scene clip to post-process it, etc).
+ *
+ * Why this exists: since the Stage 2 R2-primary flip (see MediaStorage.ts's
+ * class doc), those URLs are GCS-signed-SHAPED but R2-BACKED — the object no
+ * longer exists at the literal storage.googleapis.com address, only under the
+ * CDN Worker's R2 read-through. A plain `fetch(url)` on one 404s. This
+ * wrapper is the fix, applied once, here — use it instead of a raw `fetch()`
+ * so a future call site can't reintroduce the same bug by forgetting to
+ * rewrite the URL first (which is exactly how this broke: ~10 independent
+ * fetch/axios call sites had each rolled their own download, see
+ * notes/R2_MEDIA_MIGRATION_PLAN.md §9).
+ *
+ * Safe no-op passthrough for a genuinely external URL (AI provider output,
+ * stock API, etc) — `toCdnUrl` only rewrites our own host prefixes.
+ *
+ * Not applicable when WE aren't the one fetching — e.g. handing a URL to an
+ * external API that dereferences it server-side (AssemblyAI's `audio_url`,
+ * Veo's `video.uri`, PixVerse's `image_url`). Those need the same rewrite,
+ * but via `toCdnUrl()` directly on the string embedded in the request, since
+ * there's no local `fetch()` call to wrap.
+ */
+export declare function fetchOwnMedia(url: string, init?: RequestInit): Promise<Response>;
 //# sourceMappingURL=cdnUrl.d.ts.map

package/lib/libs/storage/cdnUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdnUrl.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/cdnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAAE,GACtC,MAAM,CAeR"}
+{"version":3,"file":"cdnUrl.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/cdnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAAE,GACtC,MAAM,CAeR;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEhF"}

package/lib/libs/storage/cdnUrl.js

@@ -14,6 +14,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.toCdnUrl = toCdnUrl;
+exports.fetchOwnMedia = fetchOwnMedia;
 const FIREBASE_STORAGE_HOST = "https://firebasestorage.googleapis.com";
 const GCS_HOST = "https://storage.googleapis.com";
 const BUCKET = "vidspot-firebase.firebasestorage.app";
@@ -46,3 +47,31 @@ function toCdnUrl(url, opts) {
     }
     return url;
 }
+/**
+ * The sanctioned way to RE-DOWNLOAD a URL this backend itself minted via
+ * `mediaStorage.put()`/`putFromFile()`, from anywhere in the backend (a
+ * provider re-fetching a bible reference image, a pipeline step re-fetching a
+ * scene clip to post-process it, etc).
+ *
+ * Why this exists: since the Stage 2 R2-primary flip (see MediaStorage.ts's
+ * class doc), those URLs are GCS-signed-SHAPED but R2-BACKED — the object no
+ * longer exists at the literal storage.googleapis.com address, only under the
+ * CDN Worker's R2 read-through. A plain `fetch(url)` on one 404s. This
+ * wrapper is the fix, applied once, here — use it instead of a raw `fetch()`
+ * so a future call site can't reintroduce the same bug by forgetting to
+ * rewrite the URL first (which is exactly how this broke: ~10 independent
+ * fetch/axios call sites had each rolled their own download, see
+ * notes/R2_MEDIA_MIGRATION_PLAN.md §9).
+ *
+ * Safe no-op passthrough for a genuinely external URL (AI provider output,
+ * stock API, etc) — `toCdnUrl` only rewrites our own host prefixes.
+ *
+ * Not applicable when WE aren't the one fetching — e.g. handing a URL to an
+ * external API that dereferences it server-side (AssemblyAI's `audio_url`,
+ * Veo's `video.uri`, PixVerse's `image_url`). Those need the same rewrite,
+ * but via `toCdnUrl()` directly on the string embedded in the request, since
+ * there's no local `fetch()` call to wrap.
+ */
+function fetchOwnMedia(url, init) {
+    return fetch(toCdnUrl(url, { visibility: "private" }), init);
+}

package/lib/services/agent/bibleImageVision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bibleImageVision.d.ts","sourceRoot":"","sources":["../../../src/services/agent/bibleImageVision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA4BD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}
+{"version":3,"file":"bibleImageVision.d.ts","sourceRoot":"","sources":["../../../src/services/agent/bibleImageVision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAKH,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA4BD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CA2C3B"}

package/lib/services/agent/bibleImageVision.js

@@ -32,6 +32,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runBibleImageVision = runBibleImageVision;
 const genai_1 = require("@google/genai");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const DEFAULT_MODEL = "gemini-2.5-flash";
 /**
@@ -122,7 +123,7 @@ async function describeImage(ai, model, imageUrl, prompt, timeoutMs) {
     let bytes;
     let mimeType;
     try {
-        const r = await fetch(imageUrl, { signal: controller.signal });
+        const r = await (0, cdnUrl_1.fetchOwnMedia)(imageUrl, { signal: controller.signal });
         if (!r.ok) {
             throw new Error(`fetch ${r.status} ${r.statusText}`);
         }

package/lib/services/aiGen/providers/google/google.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AA+ElB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IA2T3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAmK3C,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAqK5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CA8BpJ"}
+{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AA+ElB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAgU3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAmK3C,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAqK5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CA8BpJ"}

package/lib/services/aiGen/providers/google/google.service.js

@@ -318,7 +318,12 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
         };
         // Video extension takes precedence over image (mutually exclusive in Veo API).
         if (params.inputVideoUrl) {
-            request.video = { uri: params.inputVideoUrl };
+            // Veo's own servers dereference this URI directly — unlike
+            // fetchAsImage() below, WE never fetch it ourselves, so the URL string
+            // itself must already resolve publicly. Our own mediaStorage URLs are
+            // GCS-shaped but R2-backed post Stage-2-flip, so route through the CDN
+            // Worker's R2 read-through (no-op for a genuinely external URL).
+            request.video = { uri: (0, storage_1.toCdnUrl)(params.inputVideoUrl, { visibility: "private" }) };
         }
         else if (params.inputImageUrl) {
             request.image = await this.withTransientRetry("input-image fetch", () => (0, googleFetch_1.fetchAsImage)(params.inputImageUrl));

package/lib/services/aiGen/providers/google/googleFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"googleFetch.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/googleFetch.ts"],"names":[],"mappings":"AAkCA,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAiB1E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAOvD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBjG"}
+{"version":3,"file":"googleFetch.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/googleFetch.ts"],"names":[],"mappings":"AAmCA,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAiB1E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAOvD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAyBjG"}

package/lib/services/aiGen/providers/google/googleFetch.js

@@ -5,6 +5,7 @@ exports.isTransientFetchError = isTransientFetchError;
 exports.inferImageMime = inferImageMime;
 exports.fetchAsImage = fetchAsImage;
 const errors_1 = require("../../../../utils/errors");
+const cdnUrl_1 = require("../../../../libs/storage/cdnUrl");
 /**
  * Network + image helpers for the Google provider: transient-error detection
  * (for withTransientRetry) and downloading an input image as Veo-compatible
@@ -73,7 +74,7 @@ function inferImageMime(url) {
     return "image/png";
 }
 async function fetchAsImage(url) {
-    const resp = await fetch(url);
+    const resp = await (0, cdnUrl_1.fetchOwnMedia)(url);
     // fetch() does NOT throw on 4xx/5xx — surface the HTTP error so we don't
     // encode an HTML error page as image bytes (Veo silently rejects them).
     if (!resp.ok) {

package/lib/services/aiGen/providers/openai/openai.service.js

@@ -237,7 +237,7 @@ class OpenaiService extends baseAiGenProvider_service_1.BaseAiGenProviderService
         let resp;
         if (isEdit) {
             const images = await Promise.all(refs.map(async (url) => {
-                const r = await fetch(url);
+                const r = await (0, storage_1.fetchOwnMedia)(url);
                 if (!r.ok) {
                     logger_1.logger.error("openai: ref fetch failed", {
                         url,
@@ -251,7 +251,7 @@ class OpenaiService extends baseAiGenProvider_service_1.BaseAiGenProviderService
             }));
             const mask = params.maskImageUrl
                 ? await (async () => {
-                    const r = await fetch(params.maskImageUrl);
+                    const r = await (0, storage_1.fetchOwnMedia)(params.maskImageUrl);
                     if (!r.ok) {
                         logger_1.logger.error("openai: mask fetch failed", {
                             url: params.maskImageUrl,

package/lib/services/aiGen/providers/pixverse/pixverse.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pixverse.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/pixverse/pixverse.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAgGlB,qBAAa,eAAgB,SAAQ,wBAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAK1E;;;;;;OAMG;YACW,WAAW;IA6CnB,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAyL3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoHjD,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;CAkDjD"}
+{"version":3,"file":"pixverse.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/pixverse/pixverse.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAgGlB,qBAAa,eAAgB,SAAQ,wBAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAK1E;;;;;;OAMG;YACW,WAAW;IAkDnB,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAyL3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoHjD,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;CAkDjD"}

package/lib/services/aiGen/providers/pixverse/pixverse.service.js

@@ -95,7 +95,12 @@ class PixVerseService extends baseAiGenProvider_service_1.BaseAiGenProviderServi
      */
     async uploadImage(imageUrl, traceId) {
         const form = new FormData();
-        form.append("image_url", imageUrl);
+        // PixVerse's own servers dereference this URL directly — we never fetch
+        // it ourselves, so the URL string itself must already resolve publicly.
+        // Our own mediaStorage URLs are GCS-shaped but R2-backed post
+        // Stage-2-flip, so route through the CDN Worker (no-op for a genuinely
+        // external/user-uploaded URL).
+        form.append("image_url", (0, storage_1.toCdnUrl)(imageUrl, { visibility: "private" }));
         return (0, transientRetry_1.withTransientRetry)("pixverse:uploadImage", async () => {
             const resp = await fetch(`https://app-api.pixverse.ai/openapi/v2/image/upload`, {
                 method: "POST",

package/lib/services/asr/assemblyai.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assemblyai.service.d.ts","sourceRoot":"","sources":["../../../src/services/asr/assemblyai.service.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uCAAuC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,sDAAsD;IACtD,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;YASlB,OAAO;IAyBrB,yEAAyE;IACnE,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAWzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAaxD;;;;OAIG;IACG,UAAU,CACd,MAAM,EAAE,gBAAgB,EACxB,EAAE,SAAmB,EAAE,UAAiB,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3F,OAAO,CAAC,gBAAgB,CAAC;IAc5B;;;;;OAKG;IACH,aAAa,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,UAAQ,GAAG,MAAM;CAMvE"}
+{"version":3,"file":"assemblyai.service.d.ts","sourceRoot":"","sources":["../../../src/services/asr/assemblyai.service.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uCAAuC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,sDAAsD;IACtD,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;YASlB,OAAO;IAyBrB,yEAAyE;IACnE,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAaxD;;;;OAIG;IACG,UAAU,CACd,MAAM,EAAE,gBAAgB,EACxB,EAAE,SAAmB,EAAE,UAAiB,EAAE,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3F,OAAO,CAAC,gBAAgB,CAAC;IAc5B;;;;;OAKG;IACH,aAAa,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,UAAQ,GAAG,MAAM;CAMvE"}

package/lib/services/asr/assemblyai.service.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AssemblyAIService = void 0;
 const axios_1 = __importDefault(require("axios"));
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const helpers_1 = require("../../utils/helpers");
 class AssemblyAIService {
@@ -36,7 +37,12 @@ class AssemblyAIService {
     /** Submit a transcription job. Returns the transcript id immediately. */
     async submit(params) {
         const body = {
-            audio_url: params.audioUrl,
+            // AssemblyAI's own servers dereference this URL directly — we never
+            // fetch it ourselves, so the URL string itself must already resolve
+            // publicly. Our own mediaStorage URLs are GCS-shaped but R2-backed
+            // post Stage-2-flip, so route through the CDN Worker (no-op for a
+            // genuinely external/user-uploaded URL).
+            audio_url: (0, cdnUrl_1.toCdnUrl)(params.audioUrl, { visibility: "private" }),
             ...(params.languageCode ? { language_code: params.languageCode } : { language_detection: true }),
             ...(params.speakerLabels ? { speaker_labels: true } : {}),
             ...(params.redactPii ? { redact_pii: true, redact_pii_policies: ["us_social_security_number", "credit_card_number", "email_address", "phone_number"] } : {}),

package/lib/services/asr/whisper.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"whisper.service.d.ts","sourceRoot":"","sources":["../../../src/services/asr/whisper.service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AA2B/E,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;IAShC;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwDrE;;;;OAIG;IACH,aAAa,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM;CAIhD"}
+{"version":3,"file":"whisper.service.d.ts","sourceRoot":"","sources":["../../../src/services/asr/whisper.service.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AA2B/E,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;IAShC;;;;OAIG;IACG,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8DrE;;;;OAIG;IACH,aAAa,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM;CAIhD"}

package/lib/services/asr/whisper.service.js

@@ -39,6 +39,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WhisperAsrService = void 0;
 const axios_1 = __importDefault(require("axios"));
 const openai_1 = __importStar(require("openai"));
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const helpers_1 = require("../../utils/helpers");
 /**
@@ -83,7 +84,10 @@ class WhisperAsrService {
         if (params.redactPii) {
             logger_1.logger.warn("Whisper fallback requested with redactPii=true — Whisper has no native PII redaction, returning unredacted transcript");
         }
-        const { data: audioBuf, headers } = await axios_1.default.get(params.audioUrl, {
+        // Our own mediaStorage URLs are GCS-shaped but R2-backed post
+        // Stage-2-flip — must go through the CDN Worker's R2 read-through
+        // rather than being fetched directly against storage.googleapis.com.
+        const { data: audioBuf, headers } = await axios_1.default.get((0, cdnUrl_1.toCdnUrl)(params.audioUrl, { visibility: "private" }), {
             responseType: "arraybuffer",
             timeout: DOWNLOAD_TIMEOUT_MS,
             maxContentLength: WHISPER_MAX_BYTES,

package/lib/services/translation/translation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAqGvD;;;;GAIG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAiDD;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}
+{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAwIvD;;;;GAIG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAuDD;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}

package/lib/services/translation/translation.service.js

@@ -78,9 +78,18 @@ const PRIMARY_MAX_ATTEMPTS = 2;
 // two layers compounded into an unbounded stall — a Vietnamese request was
 // measured at 48s in prod (2026-07-26): ~12s burning both primary attempts,
 // then ~36s waiting on a slow generateText that nothing was bounding. Cap the
-// fallback so the worst case is primary (~12.2s) + fallback (15s) ≈ 27s and the
-// caller gets a definite answer instead of holding the request open.
-const FALLBACK_TIMEOUT_MS = 15000;
+// fallback so the worst case is primary (~12.2s) + fallback (~16s) ≈ 28s and
+// the caller gets a definite answer instead of holding the request open.
+//
+// 2026-09-22: a single un-retried 15s shot then ALSO started losing — both
+// primary AND fallback failed in prod for `id`→`en` (Slack: "translation
+// failed on BOTH primary and LLM fallback"), at ~27.2s total, matching this
+// budget almost exactly. One bad connection with zero recovery chance was
+// enough to take the whole fallback down. Split the same total budget into
+// two shorter attempts so a transient hiccup (dropped connection, slow TLS
+// handshake) gets a second, fresh try instead of being fatal.
+const FALLBACK_ATTEMPT_TIMEOUT_MS = 8000;
+const FALLBACK_MAX_ATTEMPTS = 2;
 // gpt-4o-mini: cheap (~$0.15/1M in, $0.60/1M out → fractions of a cent per
 // prompt), reliable, and independent of the Google video quota. Swap here if a
 // cheaper effective model becomes available.
@@ -104,12 +113,27 @@ async function callPrimaryTranslate(text, from, to, version) {
     }
     return translated;
 }
-/**
- * FALLBACK: translate via a cheap LLM. Lazy-imports the provider factory so this
- * module stays light (utils/helpers re-exports it) and to avoid an import cycle
- * with the aiGen layer.
- */
-async function callLlmTranslate(text, from, to) {
+/** Races `promise` against a timeout; the loser is abandoned (no AbortSignal
+ * on this path), but the caller is unblocked — which is the point. */
+async function withTimeout(promise, ms, label) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/** One un-retried LLM translate attempt. Lazy-imports the provider factory so
+ * this module stays light (utils/helpers re-exports it) and to avoid an
+ * import cycle with the aiGen layer. */
+async function callLlmTranslateOnce(text, from, to) {
     const { getAiGenProviderService } = await Promise.resolve().then(() => __importStar(require("../aiGen/aiGenFactory.service")));
     const service = getAiGenProviderService(FALLBACK_MODEL);
     const target = languageLabel(to);
@@ -117,25 +141,13 @@ async function callLlmTranslate(text, from, to) {
         `Preserve meaning, tone, names, numbers, hashtags, emojis and line breaks. ` +
         `Output ONLY the translated text — no quotes, no language labels, no commentary. ` +
         `If the text is already in ${target}, return it unchanged.`;
-    // Bounded: generateText itself takes no timeout, so race it. The loser is
-    // abandoned rather than cancelled (there is no AbortSignal on this path), but
-    // the caller is unblocked — which is the point.
-    let timer;
-    const { text: out } = await Promise.race([
-        service.generateText({
-            input: [
-                { role: "system", content: system },
-                { role: "user", content: text },
-            ],
-            modelKey: FALLBACK_MODEL,
-            options: { temperature: 0 },
-        }),
-        new Promise((_, reject) => {
-            timer = setTimeout(() => reject(new Error(`LLM fallback timed out after ${FALLBACK_TIMEOUT_MS}ms`)), FALLBACK_TIMEOUT_MS);
-        }),
-    ]).finally(() => {
-        if (timer)
-            clearTimeout(timer);
+    const { text: out } = await service.generateText({
+        input: [
+            { role: "system", content: system },
+            { role: "user", content: text },
+        ],
+        modelKey: FALLBACK_MODEL,
+        options: { temperature: 0 },
     });
     const trimmed = (out ?? "").trim();
     if (!trimmed || trimmed === "No response") {
@@ -143,6 +155,20 @@ async function callLlmTranslate(text, from, to) {
     }
     return trimmed;
 }
+/** FALLBACK: translate via a cheap LLM, with a real retry — see the
+ * FALLBACK_ATTEMPT_TIMEOUT_MS comment above for why one shot wasn't enough. */
+async function callLlmTranslate(text, from, to) {
+    let lastErr;
+    for (let attempt = 1; attempt <= FALLBACK_MAX_ATTEMPTS; attempt++) {
+        try {
+            return await withTimeout(callLlmTranslateOnce(text, from, to), FALLBACK_ATTEMPT_TIMEOUT_MS, "LLM fallback");
+        }
+        catch (err) {
+            lastErr = err;
+        }
+    }
+    throw lastErr;
+}
 /**
  * Translate `text` from → to (default English). Primary CF first (with a couple
  * of quick retries), then a cheap LLM. Throws Error(TRANSLATION_FAILED) only if
@@ -188,40 +214,23 @@ async function translate(text, from, to = types_1.ELANGUAGE_CODE.en, version = "
         throw e;
     }
 }
-/**
- * FALLBACK: detect via the same cheap LLM `translate` falls back to. Returns
- * the bare ISO 639-1 code. Throws if the reply doesn't look like a code.
- */
-async function callLlmDetect(text) {
+/** One un-retried LLM detect attempt. */
+async function callLlmDetectOnce(text) {
     const { getAiGenProviderService } = await Promise.resolve().then(() => __importStar(require("../aiGen/aiGenFactory.service")));
     const service = getAiGenProviderService(FALLBACK_MODEL);
     const system = "You are a language identification engine. Reply with ONLY the ISO 639-1 " +
         "code of the language the user's text is written in — two lowercase " +
         'letters, nothing else (e.g. "es", "ja", "ar"). Use "zh-cn" or "zh-tw" ' +
         "for Chinese. No punctuation, no explanation.";
-    // Bounded the same way as callLlmTranslate (see comment above it): this is
-    // called synchronously from POST /v1/video/generate before the BullMQ
-    // enqueue, so an unbounded generateText here stalls the HTTP request all
-    // the way to the Cloud Run 300s ceiling instead of failing over to the
-    // "default to en" path below.
-    let timer;
-    const { text: out } = await Promise.race([
-        service.generateText({
-            // Only the opening slice matters for identification, and capping it
-            // keeps this cheap when a long-form brief triggers the fallback.
-            input: [
-                { role: "system", content: system },
-                { role: "user", content: text.slice(0, 1000) },
-            ],
-            modelKey: FALLBACK_MODEL,
-            options: { temperature: 0 },
-        }),
-        new Promise((_, reject) => {
-            timer = setTimeout(() => reject(new Error(`LLM detect timed out after ${FALLBACK_TIMEOUT_MS}ms`)), FALLBACK_TIMEOUT_MS);
-        }),
-    ]).finally(() => {
-        if (timer)
-            clearTimeout(timer);
+    const { text: out } = await service.generateText({
+        // Only the opening slice matters for identification, and capping it
+        // keeps this cheap when a long-form brief triggers the fallback.
+        input: [
+            { role: "system", content: system },
+            { role: "user", content: text.slice(0, 1000) },
+        ],
+        modelKey: FALLBACK_MODEL,
+        options: { temperature: 0 },
     });
     const code = (out ?? "").trim().toLowerCase().replace(/[^a-z-]/g, "");
     if (!/^[a-z]{2}(-[a-z]{2})?$/.test(code)) {
@@ -229,6 +238,27 @@ async function callLlmDetect(text) {
     }
     return code;
 }
+/**
+ * FALLBACK: detect via the same cheap LLM `translate` falls back to, with the
+ * same retry treatment as callLlmTranslate. Returns the bare ISO 639-1 code.
+ *
+ * This is called synchronously from POST /v1/video/generate before the
+ * BullMQ enqueue, so an unbounded generateText here stalls the HTTP request
+ * all the way to the Cloud Run 300s ceiling instead of failing over to the
+ * "default to en" path below — hence the same per-attempt bound as translate.
+ */
+async function callLlmDetect(text) {
+    let lastErr;
+    for (let attempt = 1; attempt <= FALLBACK_MAX_ATTEMPTS; attempt++) {
+        try {
+            return await withTimeout(callLlmDetectOnce(text), FALLBACK_ATTEMPT_TIMEOUT_MS, "LLM detect");
+        }
+        catch (err) {
+            lastErr = err;
+        }
+    }
+    throw lastErr;
+}
 /**
  * Detect the language of `text`. Primary CF → cheap LLM → fail OPEN to English.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.115",
+  "version": "1.0.117",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {