vidspotai-shared 1.0.127 → 1.0.129

package/lib/libs/storage/MediaStorage.d.ts

@@ -37,6 +37,11 @@
  * real bytes to GCS today — converting them is a separate, larger effort
  * (see the notes doc §9).
  *
+ * ✅ Since 2026-10-10 every URL this returns is ALREADY the working CDN form
+ * (see `signedReadUrl`), so new URLs are safe to fetch, embed, or hand to a
+ * third party as-is. The warning below still applies to URLs STORED between
+ * 2026-09-22 and 2026-10-10 (raw GCS-signed shape, dead at that address):
+ *
  * ⚠️ RE-DOWNLOADING a URL this returned, anywhere else in the backend (a
  * provider re-fetching a bible reference image, a pipeline step re-fetching a
  * scene clip to post-process it, ASR re-fetching an audio URL, handing a URL
@@ -107,7 +112,19 @@ export declare class MediaStorage {
      * backend doesn't implement streaming writes, or on failure.
      */
     mirrorFromReadable(objectPath: string, stream: Readable, contentType: string, size: number): Promise<void>;
-    /** Delivery URL for an object already stored. */
+    /**
+     * Delivery URL for an object already stored — ALWAYS the CDN form
+     * (`https://cdn.vidspotai.com/gcs-priv/<bucket>/<object>?<signature>`).
+     *
+     * 2026-10-10: this used to return the raw GCS-signed URL. Since the
+     * R2-primary flip that URL is dead at its literal address (the bytes live
+     * only in R2), so it only worked for consumers that remembered to rewrite
+     * it through `toCdnUrl()`/`cdn()` — and the ones that didn't (providers,
+     * the renderer, MCP results, webhooks, a dozen UI surfaces) broke in prod.
+     * Minting the working URL HERE means no consumer can get it wrong. The
+     * consumer-side rewrites stay as idempotent no-ops for the URLs already
+     * stored between 2026-09-22 and this change.
+     */
     signedReadUrl(objectPath: string): Promise<string>;
     /**
      * Delete the object's bytes from R2. Does NOT touch GCS — since 2026-09-22

package/lib/libs/storage/MediaStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MediaStorage.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/MediaStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,qBAAa,YAAY;IACvB,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;gBAEhC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe;IAK9D;;;;;;OAMG;IACG,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC;IAKlB;;;;;OAKG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMzC;;;;;;;OAOG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;OAKG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;;OAMG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAShB,iDAAiD;IACjD,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD;;;;;;;;OAQG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;OAKG;YACW,gBAAgB;CAa/B;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,cAAsD,CAAC"}
+{"version":3,"file":"MediaStorage.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/MediaStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIxD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,qBAAa,YAAY;IACvB,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;gBAEhC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe;IAK9D;;;;;;OAMG;IACG,GAAG,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC;IAKlB;;;;;OAKG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMzC;;;;;;;OAOG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;OAKG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;;;;OAMG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC;IAShB;;;;;;;;;;;;OAYG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxD;;;;;;;;OAQG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;OAKG;YACW,gBAAgB;CAa/B;AAED,8EAA8E;AAC9E,eAAO,MAAM,YAAY,cAAsD,CAAC"}

package/lib/libs/storage/MediaStorage.js

@@ -5,6 +5,7 @@ exports.isR2WriteEnabled = isR2WriteEnabled;
 const GcsBackend_1 = require("./GcsBackend");
 const R2Backend_1 = require("./R2Backend");
 const logger_1 = require("../../utils/logger");
+const cdnUrl_1 = require("./cdnUrl");
 /**
  * Legacy pipeline mirror-writes (see NOT COVERED above) stay opt-in behind
  * this flag; unrelated to the `put`/`putFromFile`/`delete` R2-primary path,
@@ -27,7 +28,7 @@ class MediaStorage {
      */
     async put(objectPath, body, contentType) {
         await this.bytes.write(objectPath, body, contentType);
-        return this.urlMinter.signedReadUrl(objectPath);
+        return this.signedReadUrl(objectPath);
     }
     /**
      * Stream a local file to the primary (no whole-file buffering) and return the
@@ -37,7 +38,7 @@ class MediaStorage {
      */
     async putFromFile(objectPath, localPath, contentType) {
         const size = await this.bytes.writeFromFile(objectPath, localPath, contentType);
-        const url = await this.urlMinter.signedReadUrl(objectPath);
+        const url = await this.signedReadUrl(objectPath);
         return { url, size };
     }
     /**
@@ -78,9 +79,21 @@ class MediaStorage {
             return;
         await this.bestEffortMirror(() => this.bytes.writeFromReadable(objectPath, stream, contentType, size), objectPath);
     }
-    /** Delivery URL for an object already stored. */
-    signedReadUrl(objectPath) {
-        return this.urlMinter.signedReadUrl(objectPath);
+    /**
+     * Delivery URL for an object already stored — ALWAYS the CDN form
+     * (`https://cdn.vidspotai.com/gcs-priv/<bucket>/<object>?<signature>`).
+     *
+     * 2026-10-10: this used to return the raw GCS-signed URL. Since the
+     * R2-primary flip that URL is dead at its literal address (the bytes live
+     * only in R2), so it only worked for consumers that remembered to rewrite
+     * it through `toCdnUrl()`/`cdn()` — and the ones that didn't (providers,
+     * the renderer, MCP results, webhooks, a dozen UI surfaces) broke in prod.
+     * Minting the working URL HERE means no consumer can get it wrong. The
+     * consumer-side rewrites stay as idempotent no-ops for the URLs already
+     * stored between 2026-09-22 and this change.
+     */
+    async signedReadUrl(objectPath) {
+        return (0, cdnUrl_1.toCdnUrl)(await this.urlMinter.signedReadUrl(objectPath), { visibility: "private" });
     }
     /**
      * Delete the object's bytes from R2. Does NOT touch GCS — since 2026-09-22

package/lib/libs/storage/cdnUrl.d.ts

@@ -24,6 +24,27 @@ export type MediaVisibility = "public" | "private";
 export declare function toCdnUrl(url: string, opts?: {
     visibility?: MediaVisibility;
 }): string;
+/**
+ * Deep copy of `value` with every one of OUR storage URLs (at any depth, in
+ * plain objects and arrays) rewritten to its CDN form. For payloads that carry
+ * many media URLs to something that will dereference them — provider request
+ * params (start frames, reference images, input audio), an editor project
+ * handed to the Remotion renderer, etc. Since the R2-primary flip those URLs
+ * only resolve through the CDN; see `fetchOwnMedia` below.
+ *
+ * External URLs, CDN URLs and non-URL strings pass through unchanged, and
+ * non-plain objects (Buffer, Date, class instances) are kept by reference.
+ */
+export declare function toCdnUrlsDeep<T>(value: T, opts?: {
+    visibility?: MediaVisibility;
+}): T;
+/**
+ * `toCdnUrl` for every one of our storage URLs embedded in free text (a tool
+ * result line like "• Video: <url>", an email body). Other text is untouched.
+ */
+export declare function toCdnUrlsInText(text: string, opts?: {
+    visibility?: MediaVisibility;
+}): string;
 /**
  * The sanctioned way to RE-DOWNLOAD a URL this backend itself minted via
  * `mediaStorage.put()`/`putFromFile()`, from anywhere in the backend (a

package/lib/libs/storage/cdnUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cdnUrl.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/cdnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAAE,GACtC,MAAM,CAeR;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGvD"}
+{"version":3,"file":"cdnUrl.d.ts","sourceRoot":"","sources":["../../../src/libs/storage/cdnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAeH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAAE,GACtC,MAAM,CAeR;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,KAAK,EAAE,CAAC,EACR,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAA8B,GACjE,CAAC,CASH;AAQD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,eAAe,CAAA;CAA8B,GACjE,MAAM,CAER;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGvD"}

package/lib/libs/storage/cdnUrl.js

@@ -14,6 +14,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.toCdnUrl = toCdnUrl;
+exports.toCdnUrlsDeep = toCdnUrlsDeep;
+exports.toCdnUrlsInText = toCdnUrlsInText;
 exports.fetchOwnMedia = fetchOwnMedia;
 exports.publicCdnUrl = publicCdnUrl;
 const FIREBASE_STORAGE_HOST = "https://firebasestorage.googleapis.com";
@@ -48,6 +50,45 @@ function toCdnUrl(url, opts) {
     }
     return url;
 }
+function isPlainObject(v) {
+    if (v === null || typeof v !== "object")
+        return false;
+    const proto = Object.getPrototypeOf(v);
+    return proto === Object.prototype || proto === null;
+}
+/**
+ * Deep copy of `value` with every one of OUR storage URLs (at any depth, in
+ * plain objects and arrays) rewritten to its CDN form. For payloads that carry
+ * many media URLs to something that will dereference them — provider request
+ * params (start frames, reference images, input audio), an editor project
+ * handed to the Remotion renderer, etc. Since the R2-primary flip those URLs
+ * only resolve through the CDN; see `fetchOwnMedia` below.
+ *
+ * External URLs, CDN URLs and non-URL strings pass through unchanged, and
+ * non-plain objects (Buffer, Date, class instances) are kept by reference.
+ */
+function toCdnUrlsDeep(value, opts = { visibility: "private" }) {
+    if (typeof value === "string")
+        return toCdnUrl(value, opts);
+    if (Array.isArray(value))
+        return value.map((v) => toCdnUrlsDeep(v, opts));
+    if (isPlainObject(value)) {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = toCdnUrlsDeep(v, opts);
+        return out;
+    }
+    return value;
+}
+const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
+const OWN_URL_IN_TEXT = new RegExp(`(?:${escapeRe(FIREBASE_STORAGE_HOST)}|${escapeRe(GCS_SIGNED_PREFIX)})[^\\s"'<>)\\]]+`, "g");
+/**
+ * `toCdnUrl` for every one of our storage URLs embedded in free text (a tool
+ * result line like "• Video: <url>", an email body). Other text is untouched.
+ */
+function toCdnUrlsInText(text, opts = { visibility: "private" }) {
+    return text.replace(OWN_URL_IN_TEXT, (url) => toCdnUrl(url, opts));
+}
 /**
  * The sanctioned way to RE-DOWNLOAD a URL this backend itself minted via
  * `mediaStorage.put()`/`putFromFile()`, from anywhere in the backend (a

package/lib/services/agent/sceneLayoutVision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sceneLayoutVision.d.ts","sourceRoot":"","sources":["../../../src/services/agent/sceneLayoutVision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,UAAU,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,uEAAuE;IACvE,OAAO,EAAE;QACP,GAAG,EAAE,aAAa,CAAC;QACnB,MAAM,EAAE,aAAa,CAAC;QACtB,MAAM,EAAE,aAAa,CAAC;KACvB,CAAC;IACF,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgCD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAuDzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,uBAAuB,EAC/B,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,EAAE,MAAM,GACxB,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,CAqB9F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAkB7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,GAClB;IAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAWvD"}
+{"version":3,"file":"sceneLayoutVision.d.ts","sourceRoot":"","sources":["../../../src/services/agent/sceneLayoutVision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAMH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,UAAU,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,uEAAuE;IACvE,OAAO,EAAE;QACP,GAAG,EAAE,aAAa,CAAC;QACnB,MAAM,EAAE,aAAa,CAAC;QACtB,MAAM,EAAE,aAAa,CAAC;KACvB,CAAC;IACF,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAgCD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAuDzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,uBAAuB,EAC/B,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,EAAE,MAAM,GACxB,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,GAAG,kBAAkB,CAqB9F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAkB7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,aAAa,GAClB;IAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAWvD"}

package/lib/services/agent/sceneLayoutVision.js

@@ -27,6 +27,7 @@ exports.pickCompositionFromVision = pickCompositionFromVision;
 exports.regionForPosition = regionForPosition;
 exports.autoContrastFor = autoContrastFor;
 const genai_1 = require("@google/genai");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const DEFAULT_MODEL = "gemini-2.5-flash";
 const CLASSIFY_PROMPT = [
@@ -68,7 +69,7 @@ async function classifySceneLayout(imageUrl, config) {
         let bytes;
         let mimeType;
         try {
-            const r = await fetch(imageUrl, { signal: controller.signal });
+            const r = await (0, cdnUrl_1.fetchOwnMedia)(imageUrl, { signal: controller.signal });
             if (!r.ok)
                 throw new Error(`fetch ${r.status} ${r.statusText}`);
             bytes = Buffer.from(await r.arrayBuffer());

package/lib/services/agent/stitchedVideoCritic.gemini.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stitchedVideoCritic.gemini.d.ts","sourceRoot":"","sources":["../../../src/services/agent/stitchedVideoCritic.gemini.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,mBAAmB,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAwB,MAAM,kBAAkB,CAAC;AAwBxE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,IAKnD,MAAM;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChD,KAAG,OAAO,CAAC,mBAAmB,CAAC,CA+FjC;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,kBAAkB,IAK3D,MAAM;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3C,KAAG,OAAO,CAAC,cAAc,CAAC,CAwD5B"}
+{"version":3,"file":"stitchedVideoCritic.gemini.d.ts","sourceRoot":"","sources":["../../../src/services/agent/stitchedVideoCritic.gemini.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,mBAAmB,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAwB,MAAM,kBAAkB,CAAC;AAwBxE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAOD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,IAKnD,MAAM;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChD,KAAG,OAAO,CAAC,mBAAmB,CAAC,CA+FjC;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,kBAAkB,IAK3D,MAAM;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3C,KAAG,OAAO,CAAC,cAAc,CAAC,CAwD5B"}

package/lib/services/agent/stitchedVideoCritic.gemini.js

@@ -4,6 +4,7 @@ exports.buildGeminiCriticInvoker = buildGeminiCriticInvoker;
 exports.buildGeminiPerSceneCriticInvoker = buildGeminiPerSceneCriticInvoker;
 const genai_1 = require("@google/genai");
 const zod_1 = require("zod");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const stitchedVideoCritic_1 = require("./stitchedVideoCritic");
 const perSceneCritic_1 = require("./perSceneCritic");
@@ -43,7 +44,7 @@ function buildGeminiCriticInvoker(config) {
         const dlTimeout = setTimeout(() => controller.abort(), remain());
         let buf;
         try {
-            const r = await fetch(args.videoUrl, { signal: controller.signal });
+            const r = await (0, cdnUrl_1.fetchOwnMedia)(args.videoUrl, { signal: controller.signal });
             if (!r.ok) {
                 throw new Error(`stitchedCritic.gemini: video fetch ${r.status} ${r.statusText}`);
             }
@@ -136,7 +137,7 @@ function buildGeminiPerSceneCriticInvoker(config) {
         const dlTimeout = setTimeout(() => controller.abort(), Math.max(1000, deadline - Date.now()));
         let buf;
         try {
-            const r = await fetch(args.videoUrl, { signal: controller.signal });
+            const r = await (0, cdnUrl_1.fetchOwnMedia)(args.videoUrl, { signal: controller.signal });
             if (!r.ok)
                 throw new Error(`perSceneCritic.gemini: fetch ${r.status} ${r.statusText}`);
             buf = Buffer.from(await r.arrayBuffer());

package/lib/services/aiGen/aiGenFactory.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aiGenFactory.service.d.ts","sourceRoot":"","sources":["../../../src/services/aiGen/aiGenFactory.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,iBAAiB,EAEjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,qBAAqB,EAErB,qBAAqB,EAErB,eAAe,EACf,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAgBhC,KAAK,uBAAuB,GAAG,UAAU,wBAAwB,CAAC;AASlE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CACpC,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAiGjD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,iBAAiB,EACjB,uBAAuB,CAsDxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,eAAe,EACf,uBAAuB,CAMxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,aAAa,EACb,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAsBzE,CAAC;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GACpB,wBAAwB,CAmB1B"}
+{"version":3,"file":"aiGenFactory.service.d.ts","sourceRoot":"","sources":["../../../src/services/aiGen/aiGenFactory.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,iBAAiB,EAEjB,eAAe,EACf,aAAa,EACb,cAAc,EACd,qBAAqB,EAErB,qBAAqB,EAErB,eAAe,EACf,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAiBhC,KAAK,uBAAuB,GAAG,UAAU,wBAAwB,CAAC;AASlE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CACpC,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAiGjD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,iBAAiB,EACjB,uBAAuB,CAsDxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,eAAe,EACf,uBAAuB,CAMxB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,MAAM,CACjC,aAAa,EACb,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAsBzE,CAAC;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,qBAAqB,EACrB,uBAAuB,CAGxB,CAAC;AA6BF,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,qBAAqB,GAC9B,wBAAwB,CAM1B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,GACpB,wBAAwB,CAmB1B"}

package/lib/services/aiGen/aiGenFactory.service.js

@@ -18,6 +18,7 @@ const elevenlabs_service_1 = require("./providers/elevenlabs/elevenlabs.service"
 const anthropic_service_1 = require("./providers/anthropic/anthropic.service");
 const falUpscale_service_1 = require("./providers/fal/falUpscale.service");
 const xai_service_1 = require("./providers/xai/xai.service");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 // Partial, intentionally: hosted avatar engines (heygen-avatar, tavus-avatar)
 // are NOT generic video models — they're handled by the dedicated avatar seam
 // (getAvatarVideoProvider / IAvatarVideoProvider). getAiGenProviderService gates
@@ -231,36 +232,62 @@ exports.upscaleImageServicesMap = {
 exports.upscaleVideoServicesMap = {
     [aiModels_1.EUpscaleVideoModels.TOPAZ_VIDEO_PROTEUS]: falUpscale_service_1.FalUpscaleService, // was: TopazService
 };
+/**
+ * Rewrites our own storage URLs in every request's params to their CDN form
+ * before the provider sees them. Since the R2-primary flip (2026-09-22) a URL
+ * minted by `mediaStorage.put()` is GCS-shaped but its bytes live only in R2,
+ * so a provider dereferencing it (a generated image used as a start frame,
+ * TTS audio driving an avatar, an image being upscaled) got a 403. Done once
+ * here so every provider, current and future, is covered; providers that
+ * already call `toCdnUrl` themselves are unaffected (CDN URLs pass through).
+ */
+function withCdnInputs(service) {
+    const generateVideo = service.generateVideo.bind(service);
+    service.generateVideo = (params) => generateVideo((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const generateImage = service.generateImage.bind(service);
+    service.generateImage = (params) => generateImage((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const generateText = service.generateText.bind(service);
+    service.generateText = (params) => generateText((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const generateMusic = service.generateMusic.bind(service);
+    service.generateMusic = (params) => generateMusic((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const generateSoundEffects = service.generateSoundEffects.bind(service);
+    service.generateSoundEffects = (params) => generateSoundEffects((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const upscaleImage = service.upscaleImage.bind(service);
+    service.upscaleImage = (params) => upscaleImage((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    const upscaleVideo = service.upscaleVideo.bind(service);
+    service.upscaleVideo = (params) => upscaleVideo((0, cdnUrl_1.toCdnUrlsDeep)(params));
+    return service;
+}
 function getUpscaleImageProviderService(modelKey) {
     const Service = exports.upscaleImageServicesMap[modelKey];
     if (!Service) {
         throw new Error(`Unsupported upscale image model: ${modelKey}`);
     }
-    return new Service();
+    return withCdnInputs(new Service());
 }
 function getUpscaleVideoProviderService(modelKey) {
     const Service = exports.upscaleVideoServicesMap[modelKey];
     if (!Service) {
         throw new Error(`Unsupported upscale video model: ${modelKey}`);
     }
-    return new Service();
+    return withCdnInputs(new Service());
 }
 function getAiGenProviderService(modelKey) {
     const VideoService = exports.videoServicesMap[modelKey];
     if (VideoService) {
-        return new VideoService();
+        return withCdnInputs(new VideoService());
     }
     if (modelKey in exports.imageServicesMap) {
-        return new exports.imageServicesMap[modelKey]();
+        return withCdnInputs(new exports.imageServicesMap[modelKey]());
     }
     if (modelKey in exports.musicServicesMap) {
-        return new exports.musicServicesMap[modelKey]();
+        return withCdnInputs(new exports.musicServicesMap[modelKey]());
     }
     if (modelKey in exports.sfxServicesMap) {
-        return new exports.sfxServicesMap[modelKey]();
+        return withCdnInputs(new exports.sfxServicesMap[modelKey]());
     }
     if (modelKey in exports.textServicesMap) {
-        return new exports.textServicesMap[modelKey]();
+        return withCdnInputs(new exports.textServicesMap[modelKey]());
     }
     throw new Error(`Unsupported AI generation model: ${modelKey}`);
 }

package/lib/services/avatarGen/avatarProviderFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"avatarProviderFactory.d.ts","sourceRoot":"","sources":["../../../src/services/avatarGen/avatarProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAgDlF,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEhE;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,SAAS,CAEhC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,GACxB,oBAAoB,CAMtB"}
+{"version":3,"file":"avatarProviderFactory.d.ts","sourceRoot":"","sources":["../../../src/services/avatarGen/avatarProviderFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EAGrB,MAAM,wBAAwB,CAAC;AAgDhC,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEhE;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,eAAe,GACxB,kBAAkB,GAAG,SAAS,CAEhC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAEtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,GACxB,oBAAoB,CAMtB"}

package/lib/services/avatarGen/avatarProviderFactory.js

@@ -5,6 +5,8 @@ exports.getAvatarCapabilities = getAvatarCapabilities;
 exports.isHostedAvatarModel = isHostedAvatarModel;
 exports.getAvatarVideoProvider = getAvatarVideoProvider;
 const aiModels_1 = require("../../globals/aiModels");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
+const IAvatarVideoProvider_1 = require("./IAvatarVideoProvider");
 const heygenAvatarProvider_1 = require("./providers/heygenAvatarProvider");
 const klingAvatarProvider_1 = require("./providers/klingAvatarProvider");
 const synthesiaAvatarProvider_1 = require("./providers/synthesiaAvatarProvider");
@@ -53,5 +55,24 @@ function getAvatarVideoProvider(modelKey) {
     if (!factory) {
         throw new Error(`No avatar provider registered for model: ${modelKey}`);
     }
-    return factory(modelKey);
+    return withCdnInputs(factory(modelKey));
+}
+/**
+ * Same as the generic factory's `withCdnInputs`: our own media URLs in a
+ * request (face image, TTS audio, training/dub video) are GCS-shaped but
+ * R2-backed since 2026-09-22, so the engine fetching them gets a 403 unless
+ * they're rewritten to the CDN first.
+ */
+function withCdnInputs(provider) {
+    const generate = provider.generate.bind(provider);
+    provider.generate = (req) => generate((0, cdnUrl_1.toCdnUrlsDeep)(req));
+    if ((0, IAvatarVideoProvider_1.supportsReplica)(provider)) {
+        const createReplica = provider.createReplica.bind(provider);
+        provider.createReplica = (url, consent) => createReplica((0, cdnUrl_1.toCdnUrl)(url, { visibility: "private" }), consent);
+    }
+    if ((0, IAvatarVideoProvider_1.supportsDubbing)(provider)) {
+        const dub = provider.dub.bind(provider);
+        provider.dub = (url, locale) => dub((0, cdnUrl_1.toCdnUrl)(url, { visibility: "private" }), locale);
+    }
+    return provider;
 }

package/lib/services/klingElements/klingElementLibrary.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"klingElementLibrary.service.d.ts","sourceRoot":"","sources":["../../../src/services/klingElements/klingElementLibrary.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAEhB,yBAAyB,EAC1B,MAAM,iCAAiC,CAAC;AAczC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,yBAAyB,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAiBD;;;;GAIG;AACH,qBAAa,mBAAmB;WACjB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAqEhG,8EAA8E;WACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA4BvE,gEAAgE;WACnD,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;WAsB7D,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;WAS5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAelE;;;;OAIG;WACU,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAkBrG"}
+{"version":3,"file":"klingElementLibrary.service.d.ts","sourceRoot":"","sources":["../../../src/services/klingElements/klingElementLibrary.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAEhB,yBAAyB,EAC1B,MAAM,iCAAiC,CAAC;AAezC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,yBAAyB,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAiBD;;;;GAIG;AACH,qBAAa,mBAAmB;WACjB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsEhG,8EAA8E;WACjE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA4BvE,gEAAgE;WACnD,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;WAsB7D,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;WAS5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAelE;;;;OAIG;WACU,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAkBrG"}

package/lib/services/klingElements/klingElementLibrary.service.js

@@ -4,6 +4,7 @@ exports.KlingElementLibrary = void 0;
 const klingElement_model_1 = require("../../models/klingElement.model");
 const logger_1 = require("../../utils/logger");
 const errors_1 = require("../../utils/errors");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const kling_service_1 = require("../aiGen/providers/kling/kling.service");
 const firestore_service_1 = require("../firestore.service");
 const TAG = "[KlingElementLibrary]";
@@ -68,7 +69,8 @@ class KlingElementLibrary {
                     },
                 }),
         };
-        const taskId = await new kling_service_1.KlingService().createElement(body);
+        // Our own uploads are R2-backed since 2026-09-22 — Kling can only fetch them via the CDN.
+        const taskId = await new kling_service_1.KlingService().createElement((0, cdnUrl_1.toCdnUrlsDeep)(body));
         const now = new Date().toISOString();
         const doc = {
             userId,

package/lib/services/outreachWebhooks.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outreachWebhooks.service.d.ts","sourceRoot":"","sources":["../../src/services/outreachWebhooks.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAK3E;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CA+Bf"}
+{"version":3,"file":"outreachWebhooks.service.d.ts","sourceRoot":"","sources":["../../src/services/outreachWebhooks.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAK3E;;;;;GAKG;AACH,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,CAChD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/lib/services/outreachWebhooks.service.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.dispatchOutreachWebhookEvent = dispatchOutreachWebhookEvent;
+const cdnUrl_1 = require("../libs/storage/cdnUrl");
 const crypto_1 = require("crypto");
 const types_1 = require("../globals/types");
 const logger_1 = require("../utils/logger");
@@ -27,7 +28,9 @@ async function dispatchOutreachWebhookEvent(userId, event, data) {
         await Promise.all(snap.docs.map((doc) => bullmq_service_1.bullmq.addJob(types_1.ERedisQueues.WEBHOOK_DELIVERY_JOBS, {
             subscriptionId: doc.id,
             event,
-            data,
+            // Customers' servers fetch these media URLs; ours only resolve
+            // through the CDN since the R2-primary flip (2026-09-22).
+            data: (0, cdnUrl_1.toCdnUrlsDeep)(data),
             deliveryId: (0, crypto_1.randomUUID)(),
         }, { attempts: 5, backoff: { type: "exponential", delay: 5000 } })));
     }

package/lib/services/stock/realPersonSafety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"realPersonSafety.d.ts","sourceRoot":"","sources":["../../../src/services/stock/realPersonSafety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAQH,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,kBAAkB,EAAE,OAAO,CAAC;IAC5B,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0GAA0G;IAC1G,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,gFAAgF;IAChF,kBAAkB,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,UAAU,EAAE,OAAO,CAAC;IACpB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAuCD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,CA6CzB;AA4BD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAyD5B;AAED,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,sBAAsB,EAC9B,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CA8C5B"}
+{"version":3,"file":"realPersonSafety.d.ts","sourceRoot":"","sources":["../../../src/services/stock/realPersonSafety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,kBAAkB,EAAE,OAAO,CAAC;IAC5B,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0GAA0G;IAC1G,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,gFAAgF;IAChF,kBAAkB,EAAE,OAAO,CAAC;IAC5B,6EAA6E;IAC7E,UAAU,EAAE,OAAO,CAAC;IACpB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAuCD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,CA6CzB;AA4BD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAyD5B;AAED,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,sBAAsB,EAC9B,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CA8C5B"}

package/lib/services/stock/realPersonSafety.js

@@ -32,6 +32,7 @@ exports.detectRealPersonNamesInText = detectRealPersonNamesInText;
 exports.detectRealPersonInImage = detectRealPersonInImage;
 exports.screenForRealPerson = screenForRealPerson;
 const genai_1 = require("@google/genai");
+const cdnUrl_1 = require("../../libs/storage/cdnUrl");
 const logger_1 = require("../../utils/logger");
 const DEFAULT_MODEL = "gemini-2.5-flash";
 const DEFAULT_TIMEOUT_MS = 30000;
@@ -154,7 +155,7 @@ async function detectRealPersonInImage(imageUrl, config) {
     const controller = new AbortController();
     const t = setTimeout(() => controller.abort(), timeoutMs);
     try {
-        const r = await fetch(imageUrl, { signal: controller.signal });
+        const r = await (0, cdnUrl_1.fetchOwnMedia)(imageUrl, { signal: controller.signal });
         if (!r.ok)
             throw new Error(`fetch ${r.status} ${r.statusText}`);
         const bytes = Buffer.from(await r.arrayBuffer());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.127",
+  "version": "1.0.129",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {