vidspotai-shared 1.0.86 → 1.0.88

package/lib/utils/errors.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.USER_FACING_ERROR_CODES = exports.UserFacingError = void 0;
+exports.USER_FACING_ERROR_MESSAGES = exports.USER_FACING_ERROR_CODES = exports.UserFacingError = void 0;
+exports.friendlyMessageForCode = friendlyMessageForCode;
+exports.sanitizeUserFacingMessage = sanitizeUserFacingMessage;
 /**
  * Thrown when an error should be shown to the user rather than retried/escalated.
  * These are logged as `warn` (Loki only) instead of `error` (Slack) to reduce noise.
@@ -45,3 +47,75 @@ exports.USER_FACING_ERROR_CODES = {
     /** Provider classified the request as unavailable (general service degradation, 5xx persistent). */
     PROVIDER_UNAVAILABLE: "PROVIDER_UNAVAILABLE",
 };
+/**
+ * Canned, user-safe default message per code. The frontend translates by `code`
+ * via the `Toasts` namespace; these are the English fallback shown when a code
+ * isn't translated AND the safe text we store in `scene.errorMessage` so raw
+ * provider internals (billing consoles, API-key hints, request ids) never reach
+ * a user. Each reassures "you haven't been charged" where the failure is ours /
+ * the provider's, matching the credit-refund behaviour on failed jobs.
+ */
+exports.USER_FACING_ERROR_MESSAGES = {
+    [exports.USER_FACING_ERROR_CODES.VIDEO_PROVIDER_RATE_LIMITED]: "Our video provider is handling a lot of requests right now and couldn't start your video. You haven't been charged — please try again in a few minutes.",
+    [exports.USER_FACING_ERROR_CODES.VIDEO_PROVIDER_HIGH_DEMAND]: "The video model is experiencing high demand right now. You haven't been charged — please try again in a few minutes.",
+    [exports.USER_FACING_ERROR_CODES.VIDEO_PROVIDER_TIMEOUT]: "Your video took too long to generate and timed out. You haven't been charged — please try again.",
+    [exports.USER_FACING_ERROR_CODES.ACCOUNT_QUOTA_EXCEEDED]: "We've hit a temporary capacity limit with this video model. You haven't been charged — please try again shortly, or pick a different model.",
+    [exports.USER_FACING_ERROR_CODES.PROVIDER_UNAVAILABLE]: "The video service is temporarily unavailable. You haven't been charged — please try again in a few minutes.",
+    [exports.USER_FACING_ERROR_CODES.PROVIDER_AUTH_ERROR]: "Something went wrong on our side starting your video. You haven't been charged — please try again, and contact support if it keeps happening.",
+    [exports.USER_FACING_ERROR_CODES.TTS_PROVIDER_TIMEOUT]: "The voiceover service timed out. Please try again.",
+    [exports.USER_FACING_ERROR_CODES.TTS_PROVIDER_UNAVAILABLE]: "The voiceover service is temporarily unavailable. Please try again in a few minutes.",
+    [exports.USER_FACING_ERROR_CODES.PROMPT_TOO_LONG]: "Your prompt is too long for this model. Please shorten it and try again.",
+    [exports.USER_FACING_ERROR_CODES.PROMPT_INVALID]: "Your prompt was rejected by the model. Please simplify or rephrase it and try again.",
+    [exports.USER_FACING_ERROR_CODES.INPUT_IMAGE_REJECTED]: "Your input image was rejected. Please try a different image.",
+    [exports.USER_FACING_ERROR_CODES.CONTENT_POLICY_VIOLATION]: "Your prompt was flagged by the model's safety filters. Please rephrase and try again.",
+    [exports.USER_FACING_ERROR_CODES.CAPABILITY_MISMATCH]: "This combination of settings isn't supported by the selected model. Please adjust your options and try again.",
+};
+/** Friendly default for a code, or undefined if the code is unknown/unset. */
+function friendlyMessageForCode(code) {
+    return code ? exports.USER_FACING_ERROR_MESSAGES[code] : undefined;
+}
+// Detection patterns (non-global, for .test) for provider-internal detail that
+// must never be shown to a user: billing/console URLs, dashboards, API-key
+// hints, and request ids. Kept in sync with REPLACE_PATTERNS below.
+const LEAK_DETECT_PATTERNS = [
+    /https?:\/\/\S+/i,
+    /ai\.studio|aistudio\.google|console\.cloud\.google|platform\.openai|dashboard/i,
+    /prepayment|\bbilling\b|quota project|API[_ ]?key|service account|GOOGLE_[A-Z_]+/i,
+    /Request id:/i,
+];
+// Replacement patterns (global) used to strip leaked fragments when we have no
+// canned message to substitute.
+const LEAK_REPLACE_PATTERNS = [
+    /https?:\/\/\S+/gi,
+    /\s*Request id:.*$/gi,
+];
+const GENERIC_USER_FACING_MESSAGE = "Something went wrong generating your video. You haven't been charged — please try again, and contact support if it keeps happening.";
+/**
+ * Display-boundary guard. Returns a message that is safe to show a user:
+ *  - if `code` has a canned friendly message, always prefer it (provider text
+ *    is never authoritative for display);
+ *  - else, if the message contains provider-internal leak markers, strip them;
+ *    if stripping leaves it too short / still internal, fall back to generic;
+ *  - else return the message unchanged.
+ *
+ * This is the last line of defence against ANY provider (Google, Kling, Runway,
+ * …) leaking billing/console/internal text into a user-visible error.
+ */
+function sanitizeUserFacingMessage(message, code) {
+    const canned = friendlyMessageForCode(code);
+    if (canned)
+        return canned;
+    if (!message)
+        return GENERIC_USER_FACING_MESSAGE;
+    const hasLeak = LEAK_DETECT_PATTERNS.some((re) => re.test(message));
+    if (!hasLeak)
+        return message;
+    let scrubbed = message;
+    for (const re of LEAK_REPLACE_PATTERNS)
+        scrubbed = scrubbed.replace(re, "");
+    scrubbed = scrubbed.replace(/\s{2,}/g, " ").trim();
+    // If, after stripping, the remaining text still trips a detector or is too
+    // short to be meaningful, don't risk it — use the generic message.
+    const stillLeaks = LEAK_DETECT_PATTERNS.some((re) => re.test(scrubbed));
+    return !stillLeaks && scrubbed.length >= 12 ? scrubbed : GENERIC_USER_FACING_MESSAGE;
+}

package/lib/utils/helpers.d.ts

@@ -4,7 +4,14 @@ import { ETextGenModels } from "../globals";
 export declare const getPlanTypeById: (priceId: string) => ESUBSCRIPTION_PLANS | null;
 export declare const getFreqById: (priceId: string) => ERENEWAL_FREQUENCY | null;
 export declare const getPriceIdByType: (type: ESUBSCRIPTION_PLANS, freq?: ERENEWAL_FREQUENCY) => string;
-export declare const getCreditsFromCost: (cost: number, applyFloor?: boolean) => number;
+export declare const getCreditsFromCost: (cost: number, applyFloor?: boolean, 
+/**
+ * Per-op minimum when `applyFloor`. Defaults to MIN_CREDITS_PER_PAID_OP (10).
+ * Image-gen passes a lower floor (MIN_CREDITS_PER_IMAGE_OP) so cheap images
+ * aren't billed as if they cost $1 — see creditUnit.ts. Callers other than
+ * the image path leave it unset and keep the standard floor.
+ */
+floor?: number) => number;
 /**
  * Guard against silent under-billing when a model's `cost` block is missing
  * from `aiModelConfigs`. Every provider's `getCreditUsed()` historically fell

package/lib/utils/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,KACd,mBAAmB,GAAG,IASxB,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,kBAAkB,GAAG,IASlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,MAAM,mBAAmB,EACzB,OAAM,kBAA+C,WAgBtD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,EAAE,oBAAiB,KAAG,MAQpE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,MAAM,MAAM,GAAG,SAAS,EACxB,UAAU,MAAM,KACf,MASF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAInF,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAEnF;AAOD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,GACX,MAAM,6CAA6C,CAAC;AAErD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,SAAQ,EACf,QAAQ,SAAM,oBAQf;AAGD,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,EAAE,CAAC,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAGxB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AA0DrB,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAatE"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/utils/helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,KACd,mBAAmB,GAAG,IASxB,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,kBAAkB,GAAG,IASlE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC3B,MAAM,mBAAmB,EACzB,OAAM,kBAA+C,WAgBtD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,MAAM,MAAM,EACZ,oBAAiB;AACjB;;;;;GAKG;AACH,QAAO,MAAgC,KACtC,MAQF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,MAAM,MAAM,GAAG,SAAS,EACxB,UAAU,MAAM,KACf,MASF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,2BAA2B,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAInF,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAEnF;AAOD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,GACX,MAAM,6CAA6C,CAAC;AAErD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,SAAQ,EACf,QAAQ,SAAM,oBAQf;AAGD,wBAAsB,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,EAAE,CAAC,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAGxB,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AA0DrB,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAatE"}

package/lib/utils/helpers.js

@@ -50,13 +50,20 @@ const getPriceIdByType = (type, freq = types_1.ERENEWAL_FREQUENCY.MONTHLY) => {
         : planDetails?.monthly?.id;
 };
 exports.getPriceIdByType = getPriceIdByType;
-const getCreditsFromCost = (cost, applyFloor = true) => {
+const getCreditsFromCost = (cost, applyFloor = true, 
+/**
+ * Per-op minimum when `applyFloor`. Defaults to MIN_CREDITS_PER_PAID_OP (10).
+ * Image-gen passes a lower floor (MIN_CREDITS_PER_IMAGE_OP) so cheap images
+ * aren't billed as if they cost $1 — see creditUnit.ts. Callers other than
+ * the image path leave it unset and keep the standard floor.
+ */
+floor = creditUnit_1.MIN_CREDITS_PER_PAID_OP) => {
     if (cost <= 0)
         return 0;
     // Canonical rate (see globals/creditUnit.ts). USD_PER_CREDIT is cost basis;
     // the 2× user markup lives in plan pricing, not here.
     const credits = Math.ceil(cost / creditUnit_1.USD_PER_CREDIT);
-    return applyFloor ? Math.max(credits, creditUnit_1.MIN_CREDITS_PER_PAID_OP) : credits;
+    return applyFloor ? Math.max(credits, floor) : credits;
 };
 exports.getCreditsFromCost = getCreditsFromCost;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vidspotai-shared",
-  "version": "1.0.86",
+  "version": "1.0.88",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "exports": {