fix(audit): add /v1/ai/transcribe endpoint + fix cross-package storage require in worker

apps/api/src/routes/ai.ts

@@ -75,4 +75,30 @@ export async function aiRoutes(fastify: FastifyInstance) {
 
         return { success: true, url: downloadUrl };
     });
+
+    // 5. Transcribe audio (called by Railway worker after downloading media from Meta)
+    // Accepts: { audioBase64: string, filename: string }
+    // Returns: { text: string }
+    fastify.post('/transcribe', async (request, reply) => {
+        const bodySchema = z.object({
+            audioBase64: z.string(),
+            filename: z.string().default('message.ogg')
+        });
+
+        const { audioBase64, filename } = bodySchema.parse(request.body);
+
+        console.log(`[AI] Transcribing audio: ${filename}`);
+
+        const buffer = Buffer.from(audioBase64, 'base64');
+
+        try {
+            const text = await aiService.transcribeAudio(buffer, filename);
+            return { success: true, text };
+        } catch (err: any) {
+            if (err?.name === 'QuotaExceededError') {
+                return reply.code(429).send({ error: 'quota_exceeded', retryAfterMs: err.retryAfterMs });
+            }
+            throw err;
+        }
+    });
 }

apps/whatsapp-worker/src/index.ts

@@ -109,14 +109,16 @@ const worker = new Worker('whatsapp-queue', async (job: Job) => {
             try {
                 const { buffer } = await downloadMedia(mediaId, accessToken);
 
-                // Upload audio to R2 storage for archiving
-                try {
-                    const { uploadToR2 } = require('../../api/src/services/storage');
-                    const ext = mimeType.includes('mp4') ? 'mp4' : 'ogg';
-                    await uploadToR2(buffer, `audio/${Date.now()}-${phone}.${ext}`, mimeType);
-                } catch {
-                    console.warn('[WORKER] R2 upload failed — continuing without storage.');
-                }
+                // Best-effort: store audio on R2 via the API (non-blocking, silent if fails)
+                // No direct require — that path doesn't exist in the worker Docker image
+                const API_URL_STORE = process.env.API_URL || 'http://localhost:3001';
+                const apiKeyStore = process.env.ADMIN_API_KEY || '';
+                fetch(`${API_URL_STORE}/v1/ai/store-audio`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${apiKeyStore}` },
+                    body: JSON.stringify({ audioBase64: buffer.toString('base64'), mimeType, phone })
+                }).catch(() => { /* silent — audio archiving is optional */ });
+
 
                 // Transcribe with Whisper via API
                 const API_URL = process.env.API_URL || 'http://localhost:3001';