vidspotai-shared 1.0.125 → 1.0.127

package/lib/models/user.model.d.ts

@@ -15,7 +15,7 @@ export interface IUserModel {
     stripeCustomerId?: string;
     paymentSession?: {
         sessionId: string;
-        paymentStatus: "processing" | "succeeded" | "failed";
+        paymentStatus: "processing" | "succeeded" | "failed" | "trial_blocked";
         lastUpdatedAt: Date;
     };
     metadata?: {
@@ -88,6 +88,12 @@ export interface IUserSubscription {
     trialUsed?: boolean;
     trialStart?: number | null;
     trialEnd?: number | null;
+    /**
+     * Set when a trial checkout was refused by the cross-account abuse guard
+     * (device / card / mailbox / network already used for another account's
+     * trial). The subscription is canceled and no trial credits are granted.
+     */
+    trialBlockedReason?: string;
     cancelAt?: number | null;
     /**
      * Raw Stripe subscription status (active | trialing | past_due | unpaid |

package/lib/models/user.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../src/models/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3D,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE;QAEf,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;QACrD,aAAa,EAAE,IAAI,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,UAAU,CAAC;IACtC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,oBAAoB,CAAC;IAE7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAOrC"}
+{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../src/models/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,SAAS,EACT,kBAAkB,EAElB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAC3D,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE;QAEf,SAAS,EAAE,MAAM,CAAC;QAGlB,aAAa,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC;QACvE,aAAa,EAAE,IAAI,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,UAAU,CAAC;IACtC;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,UAAU,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,oBAAoB,CAAC;IAE7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAOrC"}

package/lib/services/aiGen/aiGenFactory.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiGenFactory.service.d.ts","sourceRoot":"","sources":["../../../src/services/aiGen/aiGenFactory.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,iBAAiB,EAEjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,qBAAqB,EAErB,qBAAqB,EAErB,eAAe,EACf,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAgBhC,KAAK,uBAAuB,GAAG,UAAU,wBAAwB,CAAC;AASlE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CACpC,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC,CA+FjD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,iBAAiB,EACjB,uBAAuB,CAsDxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,eAAe,EACf,uBAAuB,CAMxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,aAAa,EACb,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAsBzE,CAAC;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GACpB,wBAAwB,CAmB1B"}
+{"version":3,"file":"aiGenFactory.service.d.ts","sourceRoot":"","sources":["../../../src/services/aiGen/aiGenFactory.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,iBAAiB,EAEjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,qBAAqB,EAErB,qBAAqB,EAErB,eAAe,EACf,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAgBhC,KAAK,uBAAuB,GAAG,UAAU,wBAAwB,CAAC;AASlE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CACpC,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAiGjD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,iBAAiB,EACjB,uBAAuB,CAsDxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,eAAe,EACf,uBAAuB,CAMxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,aAAa,EACb,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAsBzE,CAAC;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GACpB,wBAAwB,CAmB1B"}

package/lib/services/aiGen/aiGenFactory.service.js

@@ -82,6 +82,8 @@ exports.videoServicesMap = {
     "kling-motion-control": kling_service_1.KlingService,
     "kling-lip-sync": kling_service_1.KlingService,
     // --- MiniMax ---
+    "minimax-h3": minimax_service_1.MinimaxService,
+    "minimax-h3-max": minimax_service_1.MinimaxService,
     "minimax-hailuo-2.3-fast": minimax_service_1.MinimaxService,
     "minimax-hailuo-2.3": minimax_service_1.MinimaxService,
     "minimax-hailuo-02": minimax_service_1.MinimaxService,

package/lib/services/aiGen/providers/bytedance/bytedance.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bytedance.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/bytedance/bytedance.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AA6BlB;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQlF;AAsBD,qBAAa,gBAAiB,SAAQ,wBAAwB;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CACsD;IAQ9E,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,WAAW;IAIb,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAoP3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqIjD;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAyIlF,+EAA+E;YACjE,mBAAmB;IAoCjC;;;OAGG;YACW,eAAe;IAgD7B,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;CAsFjD"}
+{"version":3,"file":"bytedance.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/bytedance/bytedance.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AA8BlB;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQlF;AAsBD,qBAAa,gBAAiB,SAAQ,wBAAwB;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CACsD;IAQ9E,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,WAAW;IAIb,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IA+Q3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAkJjD;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAyIlF,+EAA+E;YACjE,mBAAmB;IAoCjC;;;OAGG;YACW,eAAe;IAgD7B,aAAa,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;CAsFjD"}

package/lib/services/aiGen/providers/bytedance/bytedance.service.js

@@ -16,6 +16,7 @@ const image_model_1 = require("../../../../models/image.model");
 const helpers_2 = require("../../../../utils/helpers");
 const errors_1 = require("../../../../utils/errors");
 const logger_1 = require("../../../../utils/logger");
+const transientRetry_1 = require("../../transientRetry");
 const crypto_1 = __importDefault(require("crypto"));
 const SEEDREAM_URL = "https://ark.ap-southeast.bytepluses.com/api/v3/images/generations";
 /** Long-edge-equivalent of each `size` tier (tier² = target pixel count). */
@@ -197,13 +198,32 @@ class ByteDanceService extends baseAiGenProvider_service_1.BaseAiGenProviderServ
                 .digest("hex")
                 .slice(0, 16);
         }
-        const resp = await fetch(this.baseUrl, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${process.env.BYTEDANCE_API_KEY}`,
-            },
-            body: JSON.stringify(body),
+        // ModelArk intermittently answers task creation with a 500
+        // InternalServiceError (prod 2026-10-06, several in an hour) that
+        // succeeds on resubmit. Retry 5xx only; 4xx stays permanent and 429 is
+        // left to the worker's rate limiter.
+        const resp = await (0, transientRetry_1.withTransientRetry)("bytedance:generateVideo", async () => {
+            const r = await fetch(this.baseUrl, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${process.env.BYTEDANCE_API_KEY}`,
+                },
+                body: JSON.stringify(body),
+            });
+            if (r.status >= 500) {
+                throw new transientRetry_1.TransientHttpError(r.status, `ByteDance generateVideo failed (${r.status}): ${await r.text()}`);
+            }
+            return r;
+        }, {
+            baseBackoffMs: 2000,
+            onRetry: ({ attempt, maxAttempts, backoffMs, err }) => logger_1.logger.warn("Seedance: transient create error, retrying", {
+                modelKey: params.modelKey,
+                attempt,
+                maxAttempts,
+                backoffMs,
+                error: err.message.slice(0, 300),
+            }),
         });
         if (!resp.ok) {
             const errText = await resp.text();
@@ -310,6 +330,17 @@ class ByteDanceService extends baseAiGenProvider_service_1.BaseAiGenProviderServ
                         errorMessage: JSON.stringify(data.error),
                     };
                 }
+                // ModelArk copies the input image to its own storage and transcodes it
+                // (`x-tos-process=image/format,jpg`); an image it can't decode fails
+                // asynchronously as InvalidParameter "Error while downloading: …ark-…
+                // status code: 400" (prod 2026-10-06, a user-uploaded PNG). That's the
+                // input file, not our system — tell the user to re-export it.
+                if (errCode === "InvalidParameter" && /error while downloading/i.test(errMessage)) {
+                    return {
+                        status: types_1.EVideoSceneStatus.FAILED,
+                        errorMessage: "user_input_error: This model couldn't process your input image. Please re-save it as a standard JPEG or PNG (or use a different image) and try again.",
+                    };
+                }
                 return {
                     status: types_1.EVideoSceneStatus.FAILED,
                     errorMessage: data.error

package/lib/services/aiGen/providers/google/google.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAuIlB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAiUjC;;;;;;;OAOG;YACW,iBAAiB;YAoGjB,eAAe;IA4EvB,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyEjD;;;;OAIG;YACW,oBAAoB;IAkH5B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAyM5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CAoCpJ"}
+{"version":3,"file":"google.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/google/google.service.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAuIlB,qBAAa,aAAc,SAAQ,wBAAwB;IAKzD,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAK;;IAQ/C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAoChC;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAoCvB;;;;OAIG;YACW,kBAAkB;IAsC1B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAiUjC;;;;;;;OAOG;YACW,iBAAiB;YAoGjB,eAAe;IA4EvB,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAyEjD;;;;OAIG;YACW,oBAAoB;IAkH5B,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;YAiBnB,cAAc;IAkP5B;;;;;;OAMG;IACH;;;;OAIG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAIjC,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAY,EAAE,UAAmB,EAAE,SAAiB,EAAE,SAAa,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,iBAAiB,GAAG,MAAM;CAoCpJ"}

package/lib/services/aiGen/providers/google/google.service.js

@@ -836,6 +836,9 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
         // 200 with the images filtered out — so the reason is only available here.
         // Mirrors the Veo video path (raiMediaFilteredReasons, above).
         const blockReasons = [];
+        // Nano Banana declining with a text-only answer instead of an image —
+        // see the 2026-09-30 comment below where this is populated.
+        const textDeclines = [];
         if (isImagen) {
             const resp = await this.ai.models.generateImages({
                 model: modelId,
@@ -929,6 +932,7 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
             })));
             for (const resp of responses) {
                 const candidates = resp.candidates ?? [];
+                let gotImageThisResponse = false;
                 for (const cand of candidates) {
                     for (const part of cand.content?.parts ?? []) {
                         const inline = part.inlineData;
@@ -937,6 +941,7 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                                 bytes: Buffer.from(inline.data, "base64"),
                                 mime: inline.mimeType ?? "image/png",
                             });
+                            gotImageThisResponse = true;
                         }
                     }
                 }
@@ -954,6 +959,28 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                         blockReasons.push(finish);
                     }
                 }
+                // 2026-09-30: gemini-3.1-flash-image (Nano Banana 2) refuses some
+                // requests with finishReason "STOP" and NO promptFeedback block — it
+                // just answers with a TEXT part instead of an image. Verified by
+                // replaying prod job 9NyH60DhQD5wZiS6UenP (an edit asking to undress
+                // a person in an uploaded photo): candidates[0] = one text part, in
+                // the user's language ("Saya tidak bisa mengubah gambar ... karena
+                // adanya pelanggaran kebijakan terkait konten seksual"),
+                // finishReason STOP, no promptFeedback. Neither block signal above
+                // fires, so this used to fall through to the generic "no image
+                // bytes" Error and page Slack on every refusal. Harvest the model's
+                // text as the reason. It is logged (warn) for triage but never shown
+                // to the user — it is model-language-specific free text.
+                if (!gotImageThisResponse) {
+                    const declineText = candidates
+                        .flatMap((cand) => cand.content?.parts ?? [])
+                        .map((part) => part.text)
+                        .filter((text) => Boolean(text && text.trim()))
+                        .join(" ")
+                        .trim();
+                    if (declineText)
+                        textDeclines.push(declineText);
+                }
             }
         }
         else {
@@ -974,8 +1001,20 @@ class GoogleService extends baseAiGenProvider_service_1.BaseAiGenProviderService
                 });
                 throw new errors_1.UserFacingError("Your prompt was flagged by Google's safety filters. Please rephrase and try again.", errors_1.USER_FACING_ERROR_CODES.CONTENT_POLICY_VIOLATION);
             }
-            // No block reason at all — genuinely unexpected; keep it loud so a real
-            // platform/SDK regression isn't muted by the branch above.
+            if (textDeclines.length) {
+                logger_1.logger.warn("Google image generation declined with text instead of an image", {
+                    modelKey: params.modelKey,
+                    modelId,
+                    declines: textDeclines,
+                });
+                // A text-only STOP from an image model is a refusal (policy), same
+                // outcome as the safety-filter branch above, so same code: the
+                // frontend already maps it to "flagged by the model's safety filters".
+                throw new errors_1.UserFacingError("Your prompt was flagged by Google's safety filters. Please rephrase and try again.", errors_1.USER_FACING_ERROR_CODES.CONTENT_POLICY_VIOLATION);
+            }
+            // No block reason and no text at all — genuinely unexpected; keep it
+            // loud so a real platform/SDK regression isn't muted by the branches
+            // above.
             throw new Error("Google image generation returned no image bytes");
         }
         const ts = Date.now();

package/lib/services/aiGen/providers/runway/runway.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runway.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/runway/runway.service.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAWlB,qBAAa,aAAc,SAAQ,wBAAwB;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;YAUlB,OAAO;IAgCf,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAyJ3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuDjD,aAAa,CAAC,EACZ,QAAQ,EACR,QAAY,EACZ,SAAiB,EACjB,SAAa,EACb,WAAW,EACX,WAAW,EACX,UAAU,EACV,KAAK,EACL,aAAa,EACb,qBAAqB,EACrB,cAAkB,EAClB,cAAkB,GACnB,EAAE,iBAAiB,GAAG,MAAM;IAwD7B;;;;;;;;OAQG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;CA+ElC"}
+{"version":3,"file":"runway.service.d.ts","sourceRoot":"","sources":["../../../../../src/services/aiGen/providers/runway/runway.service.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAWlB,qBAAa,aAAc,SAAQ,wBAAwB;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;;YAUlB,OAAO;IA8Cf,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;IAyJ3B,gBAAgB,CAAC,EACrB,IAAI,EACJ,cAAc,EACd,cAAyB,GAC1B,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuDjD,aAAa,CAAC,EACZ,QAAQ,EACR,QAAY,EACZ,SAAiB,EACjB,SAAa,EACb,WAAW,EACX,WAAW,EACX,UAAU,EACV,KAAK,EACL,aAAa,EACb,qBAAqB,EACrB,cAAkB,EAClB,cAAkB,GACnB,EAAE,iBAAiB,GAAG,MAAM;IAwD7B;;;;;;;;OAQG;IACG,aAAa,CACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;CA+ElC"}

package/lib/services/aiGen/providers/runway/runway.service.js

@@ -41,6 +41,14 @@ class RunwayService extends baseAiGenProvider_service_1.BaseAiGenProviderService
             validateStatus: () => true, // manually handle status
         });
         if (response.status < 200 || response.status >= 300) {
+            // Runway validates promptText length server-side (1000 chars on its
+            // native models; prod 2026-10-06 runway-gen4.5). That's the user's
+            // prompt, not a system fault — surface it like every other provider.
+            const issues = response.status === 400 && Array.isArray(response.data?.issues) ? response.data.issues : [];
+            const tooLong = issues.find((i) => i.code === "too_big" && Array.isArray(i.path) && i.path[0] === "promptText");
+            if (tooLong) {
+                throw new errors_1.UserFacingError(`Your prompt is too long for this model${tooLong.maximum ? ` (max ${tooLong.maximum} characters)` : ""}. Please shorten it and try again.`, errors_1.USER_FACING_ERROR_CODES.PROMPT_TOO_LONG);
+            }
             throw new Error(`Runway API Error: ${response.status} ${response.statusText} - ${JSON.stringify(response.data)}`);
         }
         return response.data;

package/lib/services/index.d.ts

@@ -38,6 +38,7 @@ export * from "./socialAI";
 export * from "./socialInsights";
 export * from "./socialAccounts";
 export * from "./freePlan";
+export * from "./trialGuard";
 export * from "./organizationCredit.service";
 export * from "./email";
 export * from "./assetPool";

package/lib/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qCAAqC,CAAC;AACpD,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,6CAA6C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qCAAqC,CAAC;AACpD,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,6CAA6C,CAAC"}

package/lib/services/index.js

@@ -54,6 +54,7 @@ __exportStar(require("./socialAI"), exports);
 __exportStar(require("./socialInsights"), exports);
 __exportStar(require("./socialAccounts"), exports);
 __exportStar(require("./freePlan"), exports);
+__exportStar(require("./trialGuard"), exports);
 __exportStar(require("./organizationCredit.service"), exports);
 __exportStar(require("./email"), exports);
 __exportStar(require("./assetPool"), exports);

package/lib/services/translation/translation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAiDvD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAkB,GAAG,MAAM,EAAE,CA8BjF;AA4ID;;;;;;GAMG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAiGD;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}
+{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAiDvD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAkB,GAAG,MAAM,EAAE,CA8BjF;AA4ID;;;;;;GAMG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAiBjB;AA+ID;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}

package/lib/services/translation/translation.service.js

@@ -276,33 +276,72 @@ async function translate(text, from, to = types_1.ELANGUAGE_CODE.en, version = "
     });
     return translated.join("");
 }
-/** One chunk through primary → LLM fallback. */
+// 2026-10-07: chunking fixed the long-prompt failures, but the two layers
+// still ran strictly in sequence, so a primary that was merely SLOW (not down)
+// burned up to 2 × primaryTimeoutFor() ≈ 17s before the LLM even started —
+// prod paged "slow step >30s: getTranslationWrapper" at 30-40s for short `bg`
+// / `ru` prompts. Hedge instead: if the primary hasn't answered within
+// HEDGE_DELAY_MS (or fails sooner), start the LLM alongside it and take
+// whichever succeeds first. Healthy primaries answer well inside the delay,
+// so the LLM still only runs on the slow/failing tail.
+const HEDGE_DELAY_MS = 3000;
+/** Resolves with the first promise to fulfil; rejects with every error only
+ * once all of them have rejected (Promise.any without the ES2021 lib). */
+function firstSuccess(promises) {
+    return new Promise((resolve, reject) => {
+        const errors = new Array(promises.length);
+        let pending = promises.length;
+        promises.forEach((p, i) => {
+            p.then(resolve, (err) => {
+                errors[i] = err;
+                if (--pending === 0)
+                    reject(errors);
+            });
+        });
+    });
+}
+/** One chunk through primary, hedged with the LLM fallback. */
 async function translateChunk(text, from, to, version) {
     // ── Layer 1: primary Cloud Function ──────────────────────────────────────
     let primaryErr;
-    for (let attempt = 1; attempt <= PRIMARY_MAX_ATTEMPTS; attempt++) {
-        try {
-            return await callPrimaryTranslate(text, from, to, version);
-        }
-        catch (err) {
-            primaryErr = err;
-            if (attempt < PRIMARY_MAX_ATTEMPTS) {
-                await new Promise((r) => setTimeout(r, 200 * attempt));
+    const primary = (async () => {
+        for (let attempt = 1; attempt <= PRIMARY_MAX_ATTEMPTS; attempt++) {
+            try {
+                return await callPrimaryTranslate(text, from, to, version);
+            }
+            catch (err) {
+                primaryErr = err;
+                if (attempt < PRIMARY_MAX_ATTEMPTS) {
+                    await new Promise((r) => setTimeout(r, 200 * attempt));
+                }
             }
         }
-    }
+        throw primaryErr;
+    })();
     // ── Layer 2: LLM fallback (the common recovery path — WARN, not Slack) ────
-    logger_1.logger.warn("translation: primary failed, falling back to LLM", {
-        sourceLang: from,
-        targetLang: to,
-        primaryAttempts: PRIMARY_MAX_ATTEMPTS,
-        fallbackModel: FALLBACK_MODEL,
-        err: errMsg(primaryErr),
+    // Starts on primary failure or after HEDGE_DELAY_MS, whichever comes first.
+    let startFallback;
+    const fallbackGate = new Promise((r) => (startFallback = r));
+    const hedgeTimer = setTimeout(() => startFallback(), HEDGE_DELAY_MS);
+    primary.catch(() => startFallback());
+    const fallback = fallbackGate.then(() => {
+        logger_1.logger.warn(primaryErr
+            ? "translation: primary failed, falling back to LLM"
+            : "translation: primary slow, hedging with LLM", {
+            sourceLang: from,
+            targetLang: to,
+            primaryAttempts: PRIMARY_MAX_ATTEMPTS,
+            hedgeDelayMs: HEDGE_DELAY_MS,
+            fallbackModel: FALLBACK_MODEL,
+            err: primaryErr ? errMsg(primaryErr) : undefined,
+        });
+        return callLlmTranslate(text, from, to);
     });
     try {
-        return await callLlmTranslate(text, from, to);
+        return await firstSuccess([primary, fallback]);
     }
-    catch (fallbackErr) {
+    catch (errors) {
+        const [, fallbackErr] = errors;
         // Both layers down — this is the only case worth a Slack alert.
         logger_1.logger.error("translation failed on BOTH primary and LLM fallback", {
             sourceLang: from,
@@ -314,6 +353,9 @@ async function translateChunk(text, from, to, version) {
         e.cause = fallbackErr;
         throw e;
     }
+    finally {
+        clearTimeout(hedgeTimer);
+    }
 }
 /** One un-retried LLM detect attempt. */
 async function callLlmDetectOnce(text) {

package/lib/services/trialGuard/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./trialSignals";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/trialGuard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC"}

package/lib/services/trialGuard/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./trialSignals"), exports);

package/lib/services/trialGuard/trialSignals.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Pure (no I/O) half of the free-trial abuse guard: turns a request + user into
+ * a set of identity signals, and decides eligibility from previously recorded
+ * trial claims. The Firestore half lives in the functions app
+ * (services/trialGuard/trialGuard.service.ts).
+ *
+ * Why several signals: each one alone is easy to dodge or too blunt.
+ *  - deviceId   random id the browser keeps in localStorage + a cookie. Exact,
+ *               never collides between two people, but cleared by incognito /
+ *               clearing site data.
+ *  - fp + ip    browser fingerprint (FingerprintJS OSS). Survives incognito,
+ *               but identical phones of the same model produce the same value,
+ *               so on its own it would block strangers. Paired with the network
+ *               it means "same browser on the same network".
+ *  - card       Stripe card fingerprint — identical for the same physical card
+ *               across Stripe customers. Strongest signal; only known after
+ *               Checkout, so it's enforced in the webhook.
+ *  - email      normalized mailbox (gmail dots / +tags folded) so a.b+1@gmail
+ *               and ab@gmail are one person.
+ *  - ip         soft cap: at most N trials per network per window. Kept loose
+ *               because mobile carriers put many real users behind one IP.
+ *  - disposable throwaway / lab inbox domains never get a trial.
+ */
+export type TrialClaimKind = "device" | "fpip" | "card" | "email" | "ip";
+export interface TrialSignals {
+    deviceId?: string;
+    fp?: string;
+    ip?: string;
+    email?: string;
+    cardFingerprint?: string;
+}
+export interface TrialClaimEvent {
+    userId: string;
+    at: number;
+}
+/** A recorded claim doc in `trialClaims/{kind}_{hash}`. */
+export interface TrialClaimDoc {
+    kind: TrialClaimKind;
+    userIds: string[];
+    events: TrialClaimEvent[];
+}
+export type TrialDenyReason = "disposable_email" | "device_reused" | "browser_network_reused" | "card_reused" | "email_reused" | "ip_limit";
+export type TrialDecision = {
+    eligible: true;
+} | {
+    eligible: false;
+    reason: TrialDenyReason;
+};
+export declare const TRIAL_IP_WINDOW_MS: number;
+export declare const TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+export declare const TRIAL_CLAIM_EVENTS_CAP = 20;
+export declare function normalizeEmail(raw: string): string | undefined;
+export declare function isThrowawayEmail(email: string | undefined): boolean;
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+export declare function networkKey(ip: string | undefined): string | undefined;
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+export declare function clientIpFromHeaders(forwardedFor: string | string[] | undefined, socketAddress: string | undefined): string | undefined;
+export declare function sanitizeDeviceId(v: unknown): string | undefined;
+export declare function sanitizeFingerprint(v: unknown): string | undefined;
+export interface ClaimKey {
+    kind: TrialClaimKind;
+    docId: string;
+}
+export declare function claimKeys(signals: TrialSignals): ClaimKey[];
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+export declare function decideTrial(params: {
+    userId: string;
+    signals: TrialSignals;
+    existing: Map<string, TrialClaimDoc | undefined>;
+    now: number;
+    maxPerIp?: number;
+}): TrialDecision;
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+export declare function withClaim(doc: TrialClaimDoc | undefined, kind: TrialClaimKind, userId: string, now: number): TrialClaimDoc;
+//# sourceMappingURL=trialSignals.d.ts.map

package/lib/services/trialGuard/trialSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trialSignals.d.ts","sourceRoot":"","sources":["../../../src/services/trialGuard/trialSignals.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,eAAe,GACf,wBAAwB,GACxB,aAAa,GACb,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAEjD,eAAO,MAAM,kBAAkB,QAA2B,CAAC;AAC3D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,KAAK,CAAC;AASzC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9D;AAUD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOnE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAYrE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC3C,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAIpB;AAKD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAElE;AAOD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,QAAQ,EAAE,CAY3D;AASD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,aAAa,CAyBhB;AAED,6EAA6E;AAC7E,wBAAgB,SAAS,CACvB,GAAG,EAAE,aAAa,GAAG,SAAS,EAC9B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,aAAa,CASf"}

package/lib/services/trialGuard/trialSignals.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRIAL_CLAIM_EVENTS_CAP = exports.TRIAL_MAX_PER_IP_DEFAULT = exports.TRIAL_IP_WINDOW_MS = void 0;
+exports.normalizeEmail = normalizeEmail;
+exports.isThrowawayEmail = isThrowawayEmail;
+exports.networkKey = networkKey;
+exports.clientIpFromHeaders = clientIpFromHeaders;
+exports.sanitizeDeviceId = sanitizeDeviceId;
+exports.sanitizeFingerprint = sanitizeFingerprint;
+exports.claimKeys = claimKeys;
+exports.decideTrial = decideTrial;
+exports.withClaim = withClaim;
+const crypto_1 = require("crypto");
+const disposable_email_domains_js_1 = require("disposable-email-domains-js");
+exports.TRIAL_IP_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
+exports.TRIAL_MAX_PER_IP_DEFAULT = 2;
+/** Most recent claim events kept per doc — bounds doc size for busy IPs. */
+exports.TRIAL_CLAIM_EVENTS_CAP = 20;
+// Inbox domains that are throwaway in practice but missing from the public
+// disposable list. qwiklabs.net = Google Cloud Skills Boost lab accounts,
+// auto-generated per lab session (seen abusing trials 2026-10-05).
+const EXTRA_BLOCKED_DOMAINS = ["qwiklabs.net"];
+const GMAIL_DOMAINS = new Set(["gmail.com", "googlemail.com"]);
+function normalizeEmail(raw) {
+    const email = raw.trim().toLowerCase();
+    const at = email.lastIndexOf("@");
+    if (at <= 0 || at === email.length - 1)
+        return undefined;
+    let local = email.slice(0, at);
+    let domain = email.slice(at + 1);
+    local = local.split("+")[0] ?? "";
+    if (GMAIL_DOMAINS.has(domain)) {
+        local = local.replace(/\./g, "");
+        domain = "gmail.com";
+    }
+    return local ? `${local}@${domain}` : undefined;
+}
+function blockedDomains() {
+    const fromEnv = (process.env.TRIAL_BLOCKED_EMAIL_DOMAINS ?? "")
+        .split(",")
+        .map((d) => d.trim().toLowerCase())
+        .filter(Boolean);
+    return [...EXTRA_BLOCKED_DOMAINS, ...fromEnv];
+}
+function isThrowawayEmail(email) {
+    if (!email)
+        return false;
+    const domain = email.trim().toLowerCase().split("@").pop() ?? "";
+    if (!domain)
+        return false;
+    if ((0, disposable_email_domains_js_1.isDisposableEmailDomain)(domain))
+        return true;
+    // Match the domain itself or any subdomain of a blocked domain.
+    return blockedDomains().some((d) => domain === d || domain.endsWith(`.${d}`));
+}
+/**
+ * Network key for an IP. IPv6 is cut to its /64: one subscriber line / phone
+ * usually gets a whole /64 and rotates the low bits, so the full address
+ * would make every request look like a new network.
+ */
+function networkKey(ip) {
+    if (!ip)
+        return undefined;
+    let addr = ip.trim();
+    if (addr.startsWith("::ffff:"))
+        addr = addr.slice(7); // IPv4-mapped
+    if (!addr)
+        return undefined;
+    if (!addr.includes(":"))
+        return addr;
+    const [head, tail = ""] = addr.split("::");
+    const headParts = head ? head.split(":") : [];
+    const tailParts = tail ? tail.split(":") : [];
+    const fill = Array(Math.max(0, 8 - headParts.length - tailParts.length)).fill("0");
+    const groups = addr.includes("::") ? [...headParts, ...fill, ...tailParts] : headParts;
+    return `${groups.slice(0, 4).map((g) => g.replace(/^0+(?=.)/, "")).join(":")}::/64`;
+}
+/**
+ * Client IP on Cloud Run / Cloud Functions v2. Google's front end APPENDS the
+ * real client address to X-Forwarded-For, so anything to its left is
+ * client-supplied and spoofable — take the rightmost entry, not [0].
+ */
+function clientIpFromHeaders(forwardedFor, socketAddress) {
+    const raw = Array.isArray(forwardedFor) ? forwardedFor.join(",") : forwardedFor;
+    const parts = (raw ?? "").split(",").map((p) => p.trim()).filter(Boolean);
+    return parts[parts.length - 1] || socketAddress || undefined;
+}
+const DEVICE_ID_RE = /^[A-Za-z0-9-]{16,64}$/;
+const FP_RE = /^[A-Za-z0-9]{16,64}$/;
+function sanitizeDeviceId(v) {
+    return typeof v === "string" && DEVICE_ID_RE.test(v) ? v : undefined;
+}
+function sanitizeFingerprint(v) {
+    return typeof v === "string" && FP_RE.test(v) ? v.toLowerCase() : undefined;
+}
+/** Raw values are hashed before storage — the claims collection never holds an IP or email. */
+function hash(value) {
+    return (0, crypto_1.createHash)("sha256").update(value).digest("hex").slice(0, 40);
+}
+function claimKeys(signals) {
+    const keys = [];
+    const add = (kind, value) => {
+        if (value)
+            keys.push({ kind, docId: `${kind}_${hash(`${kind}:${value}`)}` });
+    };
+    const net = networkKey(signals.ip);
+    add("device", signals.deviceId);
+    add("fpip", signals.fp && net ? `${signals.fp}|${net}` : undefined);
+    add("card", signals.cardFingerprint);
+    add("email", signals.email ? normalizeEmail(signals.email) : undefined);
+    add("ip", net);
+    return keys;
+}
+const EXACT_REASON = {
+    device: "device_reused",
+    fpip: "browser_network_reused",
+    card: "card_reused",
+    email: "email_reused",
+};
+/**
+ * Decide whether `userId` may start a trial given the existing claim docs for
+ * its signals (`existing` is keyed by docId; missing = never claimed). A claim
+ * held only by this same user never blocks, so webhook retries stay idempotent.
+ */
+function decideTrial(params) {
+    const { userId, signals, existing, now } = params;
+    const maxPerIp = params.maxPerIp ?? exports.TRIAL_MAX_PER_IP_DEFAULT;
+    if (isThrowawayEmail(signals.email)) {
+        return { eligible: false, reason: "disposable_email" };
+    }
+    for (const key of claimKeys(signals)) {
+        const doc = existing.get(key.docId);
+        if (!doc)
+            continue;
+        if (key.kind === "ip") {
+            const others = new Set(doc.events
+                .filter((e) => e.userId !== userId && now - e.at < exports.TRIAL_IP_WINDOW_MS)
+                .map((e) => e.userId));
+            if (others.size >= maxPerIp)
+                return { eligible: false, reason: "ip_limit" };
+            continue;
+        }
+        if (doc.userIds.some((id) => id !== userId)) {
+            return { eligible: false, reason: EXACT_REASON[key.kind] };
+        }
+    }
+    return { eligible: true };
+}
+/** The claim doc after `userId` claims it (idempotent for repeat claims). */
+function withClaim(doc, kind, userId, now) {
+    const userIds = doc?.userIds ?? [];
+    const events = doc?.events ?? [];
+    if (userIds.includes(userId))
+        return { kind, userIds, events };
+    return {
+        kind,
+        userIds: [...userIds, userId],
+        events: [...events, { userId, at: now }].slice(-exports.TRIAL_CLAIM_EVENTS_CAP),
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.125",
+  "version": "1.0.127",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {
@@ -23,6 +23,7 @@
     "audio-decode": "^3.10.1",
     "axios": "^1.12.2",
     "bullmq": "^5.61.0",
+    "disposable-email-domains-js": "^1.26.0",
     "essentia.js": "^0.1.3",
     "firebase-admin": "^13.5.0",
     "fs-extra": "^11.3.2",