vidspotai-shared 1.0.124 → 1.0.126

package/lib/services/klingElements/klingElementLibrary.service.js

@@ -0,0 +1,179 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KlingElementLibrary = void 0;
+const klingElement_model_1 = require("../../models/klingElement.model");
+const logger_1 = require("../../utils/logger");
+const errors_1 = require("../../utils/errors");
+const kling_service_1 = require("../aiGen/providers/kling/kling.service");
+const firestore_service_1 = require("../firestore.service");
+const TAG = "[KlingElementLibrary]";
+/** Preset list barely changes; one fetch per instance per 30 min is plenty. */
+const PRESET_CACHE_MS = 30 * 60 * 1000;
+/** Pending creation tasks refreshed per list call, to bound Kling calls. */
+const MAX_REFRESH_PER_LIST = 10;
+let presetCache;
+function toPreset(e) {
+    return {
+        elementId: String(e.element_id),
+        name: e.element_name,
+        description: e.element_description,
+        referenceType: e.reference_type,
+    };
+}
+function invalid(message) {
+    throw new errors_1.UserFacingError(message, errors_1.USER_FACING_ERROR_CODES.CAPABILITY_MISMATCH);
+}
+/**
+ * Per-user view over Kling's Element Library. Kling only knows our account,
+ * so ownership lives in Firestore (`klingElements`): a user sees, uses and
+ * deletes only elements they created, plus Kling's official presets.
+ */
+class KlingElementLibrary {
+    static async create(userId, input) {
+        const name = input.name.trim();
+        const description = input.description.trim();
+        if (!name || name.length > klingElement_model_1.KLING_ELEMENT_LIMITS.nameMaxChars) {
+            invalid(`Element name must be 1–${klingElement_model_1.KLING_ELEMENT_LIMITS.nameMaxChars} characters.`);
+        }
+        if (!description || description.length > klingElement_model_1.KLING_ELEMENT_LIMITS.descriptionMaxChars) {
+            invalid(`Element description must be 1–${klingElement_model_1.KLING_ELEMENT_LIMITS.descriptionMaxChars} characters.`);
+        }
+        const referImageUrls = input.referImageUrls ?? [];
+        const isVideo = !!input.videoUrl;
+        if (isVideo === !!input.frontalImageUrl) {
+            invalid("Give either a front image (with 1–3 more angles) or one video, not both.");
+        }
+        if (!isVideo &&
+            (referImageUrls.length < klingElement_model_1.KLING_ELEMENT_LIMITS.minReferImages ||
+                referImageUrls.length > klingElement_model_1.KLING_ELEMENT_LIMITS.maxReferImages)) {
+            invalid(`An image element needs ${klingElement_model_1.KLING_ELEMENT_LIMITS.minReferImages}–${klingElement_model_1.KLING_ELEMENT_LIMITS.maxReferImages} images besides the front view.`);
+        }
+        // Creation is free to the user but may cost us Kling units — cap it.
+        const existing = await firestore_service_1.FirestoreService.getDataByKeyField(firestore_service_1.FirestoreService.klingElementsCol, "userId", "==", userId);
+        const live = existing.filter((r) => r.status !== "deleted" && r.status !== "failed").length;
+        if (live >= klingElement_model_1.KLING_ELEMENT_LIMITS.maxPerUser) {
+            invalid(`You can keep up to ${klingElement_model_1.KLING_ELEMENT_LIMITS.maxPerUser} elements. Delete one to add another.`);
+        }
+        const referenceType = isVideo ? "video_refer" : "image_refer";
+        const body = {
+            element_name: name,
+            element_description: description,
+            reference_type: referenceType,
+            ...(isVideo
+                ? { element_video_list: { refer_videos: [{ video_url: input.videoUrl }] } }
+                : {
+                    element_image_list: {
+                        frontal_image: input.frontalImageUrl,
+                        refer_images: referImageUrls.map((image_url) => ({ image_url })),
+                    },
+                }),
+        };
+        const taskId = await new kling_service_1.KlingService().createElement(body);
+        const now = new Date().toISOString();
+        const doc = {
+            userId,
+            taskId,
+            name,
+            description,
+            referenceType,
+            status: "submitted",
+            ...(isVideo ? { videoUrl: input.videoUrl } : { frontalImageUrl: input.frontalImageUrl, referImageUrls }),
+            createdAt: now,
+            updatedAt: now,
+        };
+        await firestore_service_1.FirestoreService.addData(firestore_service_1.FirestoreService.klingElementsCol, taskId, doc);
+        logger_1.logger.info(`${TAG} Element creation submitted`, { userId, taskId, referenceType });
+        return doc;
+    }
+    /** The user's elements (newest first), refreshing any still being created. */
+    static async listForUser(userId) {
+        // Equality-only query + in-memory sort: no composite index to deploy.
+        const rows = await firestore_service_1.FirestoreService.getDataByKeyField(firestore_service_1.FirestoreService.klingElementsCol, "userId", "==", userId);
+        const live = rows.filter((r) => r.status !== "deleted");
+        const pending = live.filter((r) => r.status === "submitted" || r.status === "processing");
+        const refreshed = new Map();
+        await Promise.all(pending.slice(0, MAX_REFRESH_PER_LIST).map(async (row) => {
+            const next = await this.refresh(row).catch((err) => {
+                logger_1.logger.warn(`${TAG} Element refresh failed`, {
+                    taskId: row.taskId,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                return row;
+            });
+            refreshed.set(row.taskId, next);
+        }));
+        return live
+            .map((r) => refreshed.get(r.taskId) ?? r)
+            .sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    }
+    /** Poll Kling for one creation task and persist the outcome. */
+    static async refresh(row) {
+        const task = await new kling_service_1.KlingService().getElementTask(row.taskId);
+        if (task.task_status === row.status)
+            return row;
+        const element = task.task_result?.elements?.[0];
+        const patch = {
+            status: task.task_status,
+            updatedAt: new Date().toISOString(),
+            ...(element ? { elementId: String(element.element_id) } : {}),
+            ...(task.task_status_msg ? { statusMessage: task.task_status_msg } : {}),
+            ...(task.final_unit_deduction ? { unitsCharged: task.final_unit_deduction } : {}),
+        };
+        await firestore_service_1.FirestoreService.updateData(firestore_service_1.FirestoreService.klingElementsCol, row.taskId, patch);
+        if (task.final_unit_deduction) {
+            // Element creation isn't on Kling's price list; log what it really costs.
+            logger_1.logger.info(`${TAG} Element creation charged`, {
+                taskId: row.taskId,
+                units: task.final_unit_deduction,
+            });
+        }
+        return { ...row, ...patch };
+    }
+    static async listPresets() {
+        if (presetCache && Date.now() - presetCache.at < PRESET_CACHE_MS)
+            return presetCache.presets;
+        const presets = (await new kling_service_1.KlingService().listPresetElements())
+            .filter((e) => e.status !== "deleted")
+            .map(toPreset);
+        presetCache = { at: Date.now(), presets };
+        return presets;
+    }
+    static async delete(userId, taskId) {
+        const row = await firestore_service_1.FirestoreService.getDataById(firestore_service_1.FirestoreService.klingElementsCol, taskId);
+        if (!row || row.userId !== userId)
+            invalid("Element not found.");
+        if (row.elementId && row.status === "succeed") {
+            await new kling_service_1.KlingService().deleteElement(row.elementId);
+        }
+        await firestore_service_1.FirestoreService.updateData(firestore_service_1.FirestoreService.klingElementsCol, taskId, {
+            status: "deleted",
+            updatedAt: new Date().toISOString(),
+        });
+    }
+    /**
+     * Resolve element ids from a generate request. Each must be a finished
+     * element the user owns or an official preset; anything else is rejected so
+     * one user can never reference another user's element.
+     */
+    static async resolveForGeneration(userId, elementIds) {
+        const ids = [...new Set(elementIds.map((id) => id.trim()).filter(Boolean))];
+        if (!ids.length)
+            return [];
+        const own = (await this.listForUser(userId)).filter((r) => r.status === "succeed" && r.elementId);
+        const ownById = new Map(own.map((r) => [r.elementId, r]));
+        const needPresets = ids.some((id) => !ownById.has(id));
+        const presetById = needPresets
+            ? new Map((await this.listPresets()).map((p) => [p.elementId, p]))
+            : new Map();
+        return ids.map((id) => {
+            const mine = ownById.get(id);
+            if (mine)
+                return { elementId: id, referenceType: mine.referenceType, name: mine.name };
+            const preset = presetById.get(id);
+            if (preset)
+                return { elementId: id, referenceType: preset.referenceType, name: preset.name };
+            return invalid(`Element ${id} isn't in your element library (or is still being created).`);
+        });
+    }
+}
+exports.KlingElementLibrary = KlingElementLibrary;

package/lib/services/trialGuard/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./trialSignals";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/trialGuard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/lib/services/trialGuard/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./trialSignals"), exports);

package/lib/services/trialGuard/trialSignals.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Pure (no I/O) half of the free-trial abuse guard: turns a request + user into
+ * a set of identity signals, and decides eligibility from previously recorded
+ * trial claims. The Firestore half lives in the functions app
+ * (services/trialGuard/trialGuard.service.ts).
+ *
+ * Why several signals: each one alone is easy to dodge or too blunt.
+ *  - deviceId   random id the browser keeps in localStorage + a cookie. Exact,
+ *               never collides between two people, but cleared by incognito /
+ *               clearing site data.
+ *  - fp + ip    browser fingerprint (FingerprintJS OSS). Survives incognito,
+ *               but identical phones of the same model produce the same value,
+ *               so on its own it would block strangers. Paired with the network
+ *               it means "same browser on the same network".
+ *  - card       Stripe card fingerprint — identical for the same physical card
+ *               across Stripe customers. Strongest signal; only known after
+ *               Checkout, so it's enforced in the webhook.
+ *  - email      normalized mailbox (gmail dots / +tags folded) so a.b+1@gmail
+ *               and ab@gmail are one person.
+ *  - ip         soft cap: at most N trials per network per window. Kept loose
+ *               because mobile carriers put many real users behind one IP.
+ *  - disposable throwaway / lab inbox domains never get a trial.
+ */
+export type TrialClaimKind = "device" | "fpip" | "card" | "email" | "ip";
+export interface TrialSignals {
+    deviceId?: string;
+    fp?: string;
+    ip?: string;
+    email?: string;
+    cardFingerprint?: string;
+}
+export interface TrialClaimEvent {
+    userId: string;
+    at: number;
+}
+/** A recorded claim doc in `trialClaims/{kind}_{hash}`. */
+export interface TrialClaimDoc {
+    kind: TrialClaimKind;
+    userIds: string[];
+    events: TrialClaimEvent[];
+}
+export type TrialDenyReason = "disposable_email" | "device_reused" | "browser_network_reused" | "card_reused" | "email_reused" | "ip_limit";
+export type TrialDecision = {
+    eligible: true;
+} | {
+    eligible: false;
+    reason: TrialDenyReason;
+};
+export declare const TRIAL_IP_WINDOW_MS: number;
+export declare const TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+export declare const TRIAL_CLAIM_EVENTS_CAP = 20;
+export declare function normalizeEmail(raw: string): string | undefined;
+export declare function isThrowawayEmail(email: string | undefined): boolean;
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+export declare function networkKey(ip: string | undefined): string | undefined;
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+export declare function clientIpFromHeaders(forwardedFor: string | string[] | undefined, socketAddress: string | undefined): string | undefined;
+export declare function sanitizeDeviceId(v: unknown): string | undefined;
+export declare function sanitizeFingerprint(v: unknown): string | undefined;
+export interface ClaimKey {
+    kind: TrialClaimKind;
+    docId: string;
+}
+export declare function claimKeys(signals: TrialSignals): ClaimKey[];
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+export declare function decideTrial(params: {
+    userId: string;
+    signals: TrialSignals;
+    existing: Map<string, TrialClaimDoc | undefined>;
+    now: number;
+    maxPerIp?: number;
+}): TrialDecision;
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+export declare function withClaim(doc: TrialClaimDoc | undefined, kind: TrialClaimKind, userId: string, now: number): TrialClaimDoc;
+//# sourceMappingURL=trialSignals.d.ts.map

package/lib/services/trialGuard/trialSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trialSignals.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/trialSignals.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAEjD,eAAO,MAAM,kBAAkB,QAA2B,CAAC;AAC3D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AASzC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9D;AAUD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOnE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAYrE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC3C,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAIpB;AAKD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElE;AAOD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,QAAQ,EAAE,CAY3D;AASD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,aAAa,CAyBhB;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CACvB,GAAG,EAAE,aAAa,GAAG,SAAS,EAC9B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,aAAa,CASf"}

package/lib/services/trialGuard/trialSignals.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRIAL_CLAIM_EVENTS_CAP = exports.TRIAL_MAX_PER_IP_DEFAULT = exports.TRIAL_IP_WINDOW_MS = void 0;
+exports.normalizeEmail = normalizeEmail;
+exports.isThrowawayEmail = isThrowawayEmail;
+exports.networkKey = networkKey;
+exports.clientIpFromHeaders = clientIpFromHeaders;
+exports.sanitizeDeviceId = sanitizeDeviceId;
+exports.sanitizeFingerprint = sanitizeFingerprint;
+exports.claimKeys = claimKeys;
+exports.decideTrial = decideTrial;
+exports.withClaim = withClaim;
+const crypto_1 = require("crypto");
+const disposable_email_domains_js_1 = require("disposable-email-domains-js");
+exports.TRIAL_IP_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+exports.TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+exports.TRIAL_CLAIM_EVENTS_CAP = 20;
+// Inbox domains that are throwaway in practice but missing from the public
+// disposable list. qwiklabs.net = Google Cloud Skills Boost lab accounts,
+// auto-generated per lab session (seen abusing trials 2026-10-05).
+const EXTRA_BLOCKED_DOMAINS = ["qwiklabs.net"];
+const GMAIL_DOMAINS = new Set(["gmail.com", "googlemail.com"]);
+function normalizeEmail(raw) {
+    const email = raw.trim().toLowerCase();
+    const at = email.lastIndexOf("@");
+    if (at <= 0 || at === email.length - 1)
+        return undefined;
+    let local = email.slice(0, at);
+    let domain = email.slice(at + 1);
+    local = local.split("+")[0] ?? "";
+    if (GMAIL_DOMAINS.has(domain)) {
+        local = local.replace(/\./g, "");
+        domain = "gmail.com";
+    }
+    return local ? `${local}@${domain}` : undefined;
+}
+function blockedDomains() {
+    const fromEnv = (process.env.TRIAL_BLOCKED_EMAIL_DOMAINS ?? "")
+        .split(",")
+        .map((d) => d.trim().toLowerCase())
+        .filter(Boolean);
+    return [...EXTRA_BLOCKED_DOMAINS, ...fromEnv];
+}
+function isThrowawayEmail(email) {
+    if (!email)
+        return false;
+    const domain = email.trim().toLowerCase().split("@").pop() ?? "";
+    if (!domain)
+        return false;
+    if ((0, disposable_email_domains_js_1.isDisposableEmailDomain)(domain))
+        return true;
+    // Match the domain itself or any subdomain of a blocked domain.
+    return blockedDomains().some((d) => domain === d || domain.endsWith(`.${d}`));
+}
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+function networkKey(ip) {
+    if (!ip)
+        return undefined;
+    let addr = ip.trim();
+    if (addr.startsWith("::ffff:"))
+        addr = addr.slice(7); // IPv4-mapped
+    if (!addr)
+        return undefined;
+    if (!addr.includes(":"))
+        return addr;
+    const [head, tail = ""] = addr.split("::");
+    const headParts = head ? head.split(":") : [];
+    const tailParts = tail ? tail.split(":") : [];
+    const fill = Array(Math.max(0, 8 - headParts.length - tailParts.length)).fill("0");
+    const groups = addr.includes("::") ? [...headParts, ...fill, ...tailParts] : headParts;
+    return `${groups.slice(0, 4).map((g) => g.replace(/^0+(?=.)/, "")).join(":")}::/64`;
+}
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+function clientIpFromHeaders(forwardedFor, socketAddress) {
+    const raw = Array.isArray(forwardedFor) ? forwardedFor.join(",") : forwardedFor;
+    const parts = (raw ?? "").split(",").map((p) => p.trim()).filter(Boolean);
+    return parts[parts.length - 1] || socketAddress || undefined;
+}
+const DEVICE_ID_RE = /^[A-Za-z0-9-]{16,64}$/;
+const FP_RE = /^[A-Za-z0-9]{16,64}$/;
+function sanitizeDeviceId(v) {
+    return typeof v === "string" && DEVICE_ID_RE.test(v) ? v : undefined;
+}
+function sanitizeFingerprint(v) {
+    return typeof v === "string" && FP_RE.test(v) ? v.toLowerCase() : undefined;
+}
+/** Raw values are hashed before storage — the claims collection never holds an IP or email. */
+function hash(value) {
+    return (0, crypto_1.createHash)("sha256").update(value).digest("hex").slice(0, 40);
+}
+function claimKeys(signals) {
+    const keys = [];
+    const add = (kind, value) => {
+        if (value)
+            keys.push({ kind, docId: `${kind}_${hash(`${kind}:${value}`)}` });
+    };
+    const net = networkKey(signals.ip);
+    add("device", signals.deviceId);
+    add("fpip", signals.fp && net ? `${signals.fp}|${net}` : undefined);
+    add("card", signals.cardFingerprint);
+    add("email", signals.email ? normalizeEmail(signals.email) : undefined);
+    add("ip", net);
+    return keys;
+}
+const EXACT_REASON = {
+    device: "device_reused",
+    fpip: "browser_network_reused",
+    card: "card_reused",
+    email: "email_reused",
+};
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+function decideTrial(params) {
+    const { userId, signals, existing, now } = params;
+    const maxPerIp = params.maxPerIp ?? exports.TRIAL_MAX_PER_IP_DEFAULT;
+    if (isThrowawayEmail(signals.email)) {
+        return { eligible: false, reason: "disposable_email" };
+    }
+    for (const key of claimKeys(signals)) {
+        const doc = existing.get(key.docId);
+        if (!doc)
+            continue;
+        if (key.kind === "ip") {
+            const others = new Set(doc.events
+                .filter((e) => e.userId !== userId && now - e.at < exports.TRIAL_IP_WINDOW_MS)
+                .map((e) => e.userId));
+            if (others.size >= maxPerIp)
+                return { eligible: false, reason: "ip_limit" };
+            continue;
+        }
+        if (doc.userIds.some((id) => id !== userId)) {
+            return { eligible: false, reason: EXACT_REASON[key.kind] };
+        }
+    }
+    return { eligible: true };
+}
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+function withClaim(doc, kind, userId, now) {
+    const userIds = doc?.userIds ?? [];
+    const events = doc?.events ?? [];
+    if (userIds.includes(userId))
+        return { kind, userIds, events };
+    return {
+        kind,
+        userIds: [...userIds, userId],
+        events: [...events, { userId, at: now }].slice(-exports.TRIAL_CLAIM_EVENTS_CAP),
+    };
+}

package/lib/utils/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,KACd,mBAAmB,GAAG,IASxB,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,kBAAkB,GAAG,IASlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,MAAM,mBAAmB,EACzB,OAAM,kBAA+C,WAgBtD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,MAAM,MAAM,EACZ,oBAAiB;AACjB;;;;;GAKG;AACH,QAAO,MAAgC,KACtC,MAQF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,MAAM,MAAM,GAAG,SAAS,EACxB,UAAU,MAAM,KACf,MASF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAInF,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAEnF;AAOD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,GACX,MAAM,6CAA6C,CAAC;AAErD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,SAAQ,EACf,QAAQ,SAAM,oBAQf;AAGD,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,EAAE,CAAC,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAGxB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AA0DrB,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAatE"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,KACd,mBAAmB,GAAG,IASxB,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,kBAAkB,GAAG,IASlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,MAAM,mBAAmB,EACzB,OAAM,kBAA+C,WAgBtD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,MAAM,MAAM,EACZ,oBAAiB;AACjB;;;;;GAKG;AACH,QAAO,MAAgC,KACtC,MAYF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,MAAM,MAAM,GAAG,SAAS,EACxB,UAAU,MAAM,KACf,MASF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAInF,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAEnF;AAOD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,GACX,MAAM,6CAA6C,CAAC;AAErD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,SAAQ,EACf,QAAQ,SAAM,oBAQf;AAGD,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,EAAE,CAAC,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAGxB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AA0DrB,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAatE"}

package/lib/utils/helpers.js

@@ -62,7 +62,11 @@ floor = creditUnit_1.MIN_CREDITS_PER_PAID_OP) => {
         return 0;
     // Canonical rate (see globals/creditUnit.ts). USD_PER_CREDIT is cost basis;
     // the 2× user markup lives in plan pricing, not here.
-    const credits = Math.ceil(cost / creditUnit_1.USD_PER_CREDIT);
+    // const credits = Math.ceil(cost / USD_PER_CREDIT); // REMOVED FOR v2 — ceil of float noise over-billed a credit
+    // Rounded to 6 dp first: summed per-second rates carry float noise
+    // ($1.00 + $1.40 = 2.4000000000000004 → 24.000000000000004 credits) that a
+    // bare ceil turned into 25. Real fractions of a credit still round up.
+    const credits = Math.ceil(Number((cost / creditUnit_1.USD_PER_CREDIT).toFixed(6)));
     return applyFloor ? Math.max(credits, floor) : credits;
 };
 exports.getCreditsFromCost = getCreditsFromCost;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.124",
+  "version": "1.0.126",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {
@@ -23,6 +23,7 @@
     "audio-decode": "^3.10.1",
     "axios": "^1.12.2",
     "bullmq": "^5.61.0",
+    "disposable-email-domains-js": "^1.26.0",
     "essentia.js": "^0.1.3",
     "firebase-admin": "^13.5.0",
     "fs-extra": "^11.3.2",