vidspotai-shared 1.0.125 → 1.0.126

package/lib/models/user.model.d.ts

@@ -15,7 +15,7 @@ export interface IUserModel {
     stripeCustomerId?: string;
     paymentSession?: {
         sessionId: string;
-        paymentStatus: "processing" | "succeeded" | "failed";
+        paymentStatus: "processing" | "succeeded" | "failed" | "trial_blocked";
         lastUpdatedAt: Date;
     };
     metadata?: {
@@ -88,6 +88,12 @@ export interface IUserSubscription {
     trialUsed?: boolean;
     trialStart?: number | null;
     trialEnd?: number | null;
+    /**
+     * Set when a trial checkout was refused by the cross-account abuse guard
+     * (device / card / mailbox / network already used for another account's
+     * trial). The subscription is canceled and no trial credits are granted.
+     */
+    trialBlockedReason?: string;
     cancelAt?: number | null;
     /**
      * Raw Stripe subscription status (active | trialing | past_due | unpaid |

package/lib/models/user.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../src/models/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3D,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE;QAEf,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;QACrD,aAAa,EAAE,IAAI,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,UAAU,CAAC;IACtC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,oBAAoB,CAAC;IAE7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAOrC"}
+{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../src/models/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3D,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE;QAEf,SAAS,EAAE,MAAM,CAAC;QAGlB,aAAa,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC;QACvE,aAAa,EAAE,IAAI,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,UAAU,CAAC;IACtC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,oBAAoB,CAAC;IAE7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAOrC"}

package/lib/services/aiGen/providers/google/google.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAuIlB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAiUjC;;;;;;;OAOG;YACW,iBAAiB;YAoGjB,eAAe;IA4EvB,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyEjD;;;;OAIG;YACW,oBAAoB;IAkH5B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAyM5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CAoCpJ"}
+{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAuIlB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAiUjC;;;;;;;OAOG;YACW,iBAAiB;YAoGjB,eAAe;IA4EvB,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyEjD;;;;OAIG;YACW,oBAAoB;IAkH5B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAkP5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CAoCpJ"}

package/lib/services/aiGen/providers/google/google.service.js

@@ -836,6 +836,9 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
         // 200 with the images filtered out — so the reason is only available here.
         // Mirrors the Veo video path (raiMediaFilteredReasons, above).
         const blockReasons = [];
+        // Nano Banana declining with a text-only answer instead of an image —
+        // see the 2026-09-30 comment below where this is populated.
+        const textDeclines = [];
         if (isImagen) {
             const resp = await this.ai.models.generateImages({
                 model: modelId,
@@ -929,6 +932,7 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
             })));
             for (const resp of responses) {
                 const candidates = resp.candidates ?? [];
+                let gotImageThisResponse = false;
                 for (const cand of candidates) {
                     for (const part of cand.content?.parts ?? []) {
                         const inline = part.inlineData;
@@ -937,6 +941,7 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                                 bytes: Buffer.from(inline.data, "base64"),
                                 mime: inline.mimeType ?? "image/png",
                             });
+                            gotImageThisResponse = true;
                         }
                     }
                 }
@@ -954,6 +959,28 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                         blockReasons.push(finish);
                     }
                 }
+                // 2026-09-30: gemini-3.1-flash-image (Nano Banana 2) refuses some
+                // requests with finishReason "STOP" and NO promptFeedback block — it
+                // just answers with a TEXT part instead of an image. Verified by
+                // replaying prod job 9NyH60DhQD5wZiS6UenP (an edit asking to undress
+                // a person in an uploaded photo): candidates[0] = one text part, in
+                // the user's language ("Saya tidak bisa mengubah gambar ... karena
+                // adanya pelanggaran kebijakan terkait konten seksual"),
+                // finishReason STOP, no promptFeedback. Neither block signal above
+                // fires, so this used to fall through to the generic "no image
+                // bytes" Error and page Slack on every refusal. Harvest the model's
+                // text as the reason. It is logged (warn) for triage but never shown
+                // to the user — it is model-language-specific free text.
+                if (!gotImageThisResponse) {
+                    const declineText = candidates
+                        .flatMap((cand) => cand.content?.parts ?? [])
+                        .map((part) => part.text)
+                        .filter((text) => Boolean(text && text.trim()))
+                        .join(" ")
+                        .trim();
+                    if (declineText)
+                        textDeclines.push(declineText);
+                }
             }
         }
         else {
@@ -974,8 +1001,20 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                 });
                 throw new errors_1.UserFacingError("Your prompt was flagged by Google's safety filters. Please rephrase and try again.", errors_1.USER_FACING_ERROR_CODES.CONTENT_POLICY_VIOLATION);
             }
-            // No block reason at all — genuinely unexpected; keep it loud so a real
-            // platform/SDK regression isn't muted by the branch above.
+            if (textDeclines.length) {
+                logger_1.logger.warn("Google image generation declined with text instead of an image", {
+                    modelKey: params.modelKey,
+                    modelId,
+                    declines: textDeclines,
+                });
+                // A text-only STOP from an image model is a refusal (policy), same
+                // outcome as the safety-filter branch above, so same code: the
+                // frontend already maps it to "flagged by the model's safety filters".
+                throw new errors_1.UserFacingError("Your prompt was flagged by Google's safety filters. Please rephrase and try again.", errors_1.USER_FACING_ERROR_CODES.CONTENT_POLICY_VIOLATION);
+            }
+            // No block reason and no text at all — genuinely unexpected; keep it
+            // loud so a real platform/SDK regression isn't muted by the branches
+            // above.
             throw new Error("Google image generation returned no image bytes");
         }
         const ts = Date.now();

package/lib/services/index.d.ts

@@ -38,6 +38,7 @@ export * from "./socialAI";
 export * from "./socialInsights";
 export * from "./socialAccounts";
 export * from "./freePlan";
+export * from "./trialGuard";
 export * from "./organizationCredit.service";
 export * from "./email";
 export * from "./assetPool";

package/lib/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qCAAqC,CAAC;AACpD,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qCAAqC,CAAC;AACpD,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,6CAA6C,CAAC"}

package/lib/services/index.js

@@ -54,6 +54,7 @@ __exportStar(require("./socialAI"), exports);
 __exportStar(require("./socialInsights"), exports);
 __exportStar(require("./socialAccounts"), exports);
 __exportStar(require("./freePlan"), exports);
+__exportStar(require("./trialGuard"), exports);
 __exportStar(require("./organizationCredit.service"), exports);
 __exportStar(require("./email"), exports);
 __exportStar(require("./assetPool"), exports);

package/lib/services/trialGuard/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./trialSignals";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/trialGuard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/lib/services/trialGuard/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./trialSignals"), exports);

package/lib/services/trialGuard/trialSignals.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Pure (no I/O) half of the free-trial abuse guard: turns a request + user into
+ * a set of identity signals, and decides eligibility from previously recorded
+ * trial claims. The Firestore half lives in the functions app
+ * (services/trialGuard/trialGuard.service.ts).
+ *
+ * Why several signals: each one alone is easy to dodge or too blunt.
+ *  - deviceId   random id the browser keeps in localStorage + a cookie. Exact,
+ *               never collides between two people, but cleared by incognito /
+ *               clearing site data.
+ *  - fp + ip    browser fingerprint (FingerprintJS OSS). Survives incognito,
+ *               but identical phones of the same model produce the same value,
+ *               so on its own it would block strangers. Paired with the network
+ *               it means "same browser on the same network".
+ *  - card       Stripe card fingerprint — identical for the same physical card
+ *               across Stripe customers. Strongest signal; only known after
+ *               Checkout, so it's enforced in the webhook.
+ *  - email      normalized mailbox (gmail dots / +tags folded) so a.b+1@gmail
+ *               and ab@gmail are one person.
+ *  - ip         soft cap: at most N trials per network per window. Kept loose
+ *               because mobile carriers put many real users behind one IP.
+ *  - disposable throwaway / lab inbox domains never get a trial.
+ */
+export type TrialClaimKind = "device" | "fpip" | "card" | "email" | "ip";
+export interface TrialSignals {
+    deviceId?: string;
+    fp?: string;
+    ip?: string;
+    email?: string;
+    cardFingerprint?: string;
+}
+export interface TrialClaimEvent {
+    userId: string;
+    at: number;
+}
+/** A recorded claim doc in `trialClaims/{kind}_{hash}`. */
+export interface TrialClaimDoc {
+    kind: TrialClaimKind;
+    userIds: string[];
+    events: TrialClaimEvent[];
+}
+export type TrialDenyReason = "disposable_email" | "device_reused" | "browser_network_reused" | "card_reused" | "email_reused" | "ip_limit";
+export type TrialDecision = {
+    eligible: true;
+} | {
+    eligible: false;
+    reason: TrialDenyReason;
+};
+export declare const TRIAL_IP_WINDOW_MS: number;
+export declare const TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+export declare const TRIAL_CLAIM_EVENTS_CAP = 20;
+export declare function normalizeEmail(raw: string): string | undefined;
+export declare function isThrowawayEmail(email: string | undefined): boolean;
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+export declare function networkKey(ip: string | undefined): string | undefined;
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+export declare function clientIpFromHeaders(forwardedFor: string | string[] | undefined, socketAddress: string | undefined): string | undefined;
+export declare function sanitizeDeviceId(v: unknown): string | undefined;
+export declare function sanitizeFingerprint(v: unknown): string | undefined;
+export interface ClaimKey {
+    kind: TrialClaimKind;
+    docId: string;
+}
+export declare function claimKeys(signals: TrialSignals): ClaimKey[];
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+export declare function decideTrial(params: {
+    userId: string;
+    signals: TrialSignals;
+    existing: Map<string, TrialClaimDoc | undefined>;
+    now: number;
+    maxPerIp?: number;
+}): TrialDecision;
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+export declare function withClaim(doc: TrialClaimDoc | undefined, kind: TrialClaimKind, userId: string, now: number): TrialClaimDoc;
+//# sourceMappingURL=trialSignals.d.ts.map

package/lib/services/trialGuard/trialSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trialSignals.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/trialSignals.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAEjD,eAAO,MAAM,kBAAkB,QAA2B,CAAC;AAC3D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AASzC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9D;AAUD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOnE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAYrE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC3C,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAIpB;AAKD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElE;AAOD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,QAAQ,EAAE,CAY3D;AASD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,aAAa,CAyBhB;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CACvB,GAAG,EAAE,aAAa,GAAG,SAAS,EAC9B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,aAAa,CASf"}

package/lib/services/trialGuard/trialSignals.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRIAL_CLAIM_EVENTS_CAP = exports.TRIAL_MAX_PER_IP_DEFAULT = exports.TRIAL_IP_WINDOW_MS = void 0;
+exports.normalizeEmail = normalizeEmail;
+exports.isThrowawayEmail = isThrowawayEmail;
+exports.networkKey = networkKey;
+exports.clientIpFromHeaders = clientIpFromHeaders;
+exports.sanitizeDeviceId = sanitizeDeviceId;
+exports.sanitizeFingerprint = sanitizeFingerprint;
+exports.claimKeys = claimKeys;
+exports.decideTrial = decideTrial;
+exports.withClaim = withClaim;
+const crypto_1 = require("crypto");
+const disposable_email_domains_js_1 = require("disposable-email-domains-js");
+exports.TRIAL_IP_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+exports.TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+exports.TRIAL_CLAIM_EVENTS_CAP = 20;
+// Inbox domains that are throwaway in practice but missing from the public
+// disposable list. qwiklabs.net = Google Cloud Skills Boost lab accounts,
+// auto-generated per lab session (seen abusing trials 2026-10-05).
+const EXTRA_BLOCKED_DOMAINS = ["qwiklabs.net"];
+const GMAIL_DOMAINS = new Set(["gmail.com", "googlemail.com"]);
+function normalizeEmail(raw) {
+    const email = raw.trim().toLowerCase();
+    const at = email.lastIndexOf("@");
+    if (at <= 0 || at === email.length - 1)
+        return undefined;
+    let local = email.slice(0, at);
+    let domain = email.slice(at + 1);
+    local = local.split("+")[0] ?? "";
+    if (GMAIL_DOMAINS.has(domain)) {
+        local = local.replace(/\./g, "");
+        domain = "gmail.com";
+    }
+    return local ? `${local}@${domain}` : undefined;
+}
+function blockedDomains() {
+    const fromEnv = (process.env.TRIAL_BLOCKED_EMAIL_DOMAINS ?? "")
+        .split(",")
+        .map((d) => d.trim().toLowerCase())
+        .filter(Boolean);
+    return [...EXTRA_BLOCKED_DOMAINS, ...fromEnv];
+}
+function isThrowawayEmail(email) {
+    if (!email)
+        return false;
+    const domain = email.trim().toLowerCase().split("@").pop() ?? "";
+    if (!domain)
+        return false;
+    if ((0, disposable_email_domains_js_1.isDisposableEmailDomain)(domain))
+        return true;
+    // Match the domain itself or any subdomain of a blocked domain.
+    return blockedDomains().some((d) => domain === d || domain.endsWith(`.${d}`));
+}
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+function networkKey(ip) {
+    if (!ip)
+        return undefined;
+    let addr = ip.trim();
+    if (addr.startsWith("::ffff:"))
+        addr = addr.slice(7); // IPv4-mapped
+    if (!addr)
+        return undefined;
+    if (!addr.includes(":"))
+        return addr;
+    const [head, tail = ""] = addr.split("::");
+    const headParts = head ? head.split(":") : [];
+    const tailParts = tail ? tail.split(":") : [];
+    const fill = Array(Math.max(0, 8 - headParts.length - tailParts.length)).fill("0");
+    const groups = addr.includes("::") ? [...headParts, ...fill, ...tailParts] : headParts;
+    return `${groups.slice(0, 4).map((g) => g.replace(/^0+(?=.)/, "")).join(":")}::/64`;
+}
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+function clientIpFromHeaders(forwardedFor, socketAddress) {
+    const raw = Array.isArray(forwardedFor) ? forwardedFor.join(",") : forwardedFor;
+    const parts = (raw ?? "").split(",").map((p) => p.trim()).filter(Boolean);
+    return parts[parts.length - 1] || socketAddress || undefined;
+}
+const DEVICE_ID_RE = /^[A-Za-z0-9-]{16,64}$/;
+const FP_RE = /^[A-Za-z0-9]{16,64}$/;
+function sanitizeDeviceId(v) {
+    return typeof v === "string" && DEVICE_ID_RE.test(v) ? v : undefined;
+}
+function sanitizeFingerprint(v) {
+    return typeof v === "string" && FP_RE.test(v) ? v.toLowerCase() : undefined;
+}
+/** Raw values are hashed before storage — the claims collection never holds an IP or email. */
+function hash(value) {
+    return (0, crypto_1.createHash)("sha256").update(value).digest("hex").slice(0, 40);
+}
+function claimKeys(signals) {
+    const keys = [];
+    const add = (kind, value) => {
+        if (value)
+            keys.push({ kind, docId: `${kind}_${hash(`${kind}:${value}`)}` });
+    };
+    const net = networkKey(signals.ip);
+    add("device", signals.deviceId);
+    add("fpip", signals.fp && net ? `${signals.fp}|${net}` : undefined);
+    add("card", signals.cardFingerprint);
+    add("email", signals.email ? normalizeEmail(signals.email) : undefined);
+    add("ip", net);
+    return keys;
+}
+const EXACT_REASON = {
+    device: "device_reused",
+    fpip: "browser_network_reused",
+    card: "card_reused",
+    email: "email_reused",
+};
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+function decideTrial(params) {
+    const { userId, signals, existing, now } = params;
+    const maxPerIp = params.maxPerIp ?? exports.TRIAL_MAX_PER_IP_DEFAULT;
+    if (isThrowawayEmail(signals.email)) {
+        return { eligible: false, reason: "disposable_email" };
+    }
+    for (const key of claimKeys(signals)) {
+        const doc = existing.get(key.docId);
+        if (!doc)
+            continue;
+        if (key.kind === "ip") {
+            const others = new Set(doc.events
+                .filter((e) => e.userId !== userId && now - e.at < exports.TRIAL_IP_WINDOW_MS)
+                .map((e) => e.userId));
+            if (others.size >= maxPerIp)
+                return { eligible: false, reason: "ip_limit" };
+            continue;
+        }
+        if (doc.userIds.some((id) => id !== userId)) {
+            return { eligible: false, reason: EXACT_REASON[key.kind] };
+        }
+    }
+    return { eligible: true };
+}
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+function withClaim(doc, kind, userId, now) {
+    const userIds = doc?.userIds ?? [];
+    const events = doc?.events ?? [];
+    if (userIds.includes(userId))
+        return { kind, userIds, events };
+    return {
+        kind,
+        userIds: [...userIds, userId],
+        events: [...events, { userId, at: now }].slice(-exports.TRIAL_CLAIM_EVENTS_CAP),
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.125",
+  "version": "1.0.126",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {
@@ -23,6 +23,7 @@
     "audio-decode": "^3.10.1",
     "axios": "^1.12.2",
     "bullmq": "^5.61.0",
+    "disposable-email-domains-js": "^1.26.0",
     "essentia.js": "^0.1.3",
     "firebase-admin": "^13.5.0",
     "fs-extra": "^11.3.2",