update startup patches

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

var/docker/start.sh

@@ -3,35 +3,6 @@ set -e
 
 echo "=== Postiz HF Space Startup ==="
 
-# Run endpoint connectivity check (diagnostic)
-bash /app/endpoint-check.sh || true
-
-# Start cloudflared access tcp proxy for PostgreSQL (if configured)
-if [ -n "$TUNNEL_SERVICE_TOKEN_ID" ] && [ -n "$CF_TUNNEL_HOSTNAME" ]; then
-  echo "Starting cloudflared access tcp proxy -> $CF_TUNNEL_HOSTNAME (PG)"
-  cloudflared access tcp \
-    --hostname "$CF_TUNNEL_HOSTNAME" \
-    --url localhost:5432 &
-  for i in $(seq 1 30); do
-    (echo > /dev/tcp/localhost/5432) 2>/dev/null && break
-    sleep 1
-  done
-  echo "cloudflared PostgreSQL proxy ready"
-fi
-
-# Start cloudflared access tcp proxy for Redis (if configured)
-if [ -n "$TUNNEL_SERVICE_TOKEN_ID" ] && [ -n "$CF_REDIS_HOSTNAME" ]; then
-  echo "Starting cloudflared access tcp proxy -> $CF_REDIS_HOSTNAME (Redis)"
-  cloudflared access tcp \
-    --hostname "$CF_REDIS_HOSTNAME" \
-    --url localhost:6379 &
-  for i in $(seq 1 30); do
-    (echo > /dev/tcp/localhost/6379) 2>/dev/null && break
-    sleep 1
-  done
-  echo "cloudflared Redis proxy ready"
-fi
-
 # Patch compiled temporal.module.js to support mTLS client certificates
 # Field names must match @temporalio/common TLSConfig:
 #   serverNameOverride, serverRootCACertificate, clientCertPair: { crt, key }
@@ -86,7 +57,6 @@ fi
 # ============================================================
 
 # Patch 1: temporal.module.js (orchestrator only)
-# Replace the socialIntegrationList workers array with a single main worker
 WORKER_TARGET="$PATCH_DIR/apps/orchestrator/dist/libraries/nestjs-libraries/src/temporal/temporal.module.js"
 if [ -f "$WORKER_TARGET" ]; then
   echo "Patching $WORKER_TARGET for worker consolidation..."
@@ -176,7 +146,7 @@ for DISCORD_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestr
     node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$DISCORD_TARGET', 'utf8');
-code = code.replace(/https:\/\/discord\.com\/api\//g, 'https://discord.proxy.firela.io/api/');
+code = code.replace(/https:\/\/discord\.com\/api\//g, 'https://discord-proxy.firela.io/api/');
 fs.writeFileSync('$DISCORD_TARGET', code);
 console.log('Discord proxy patched (API calls only)');
 "
@@ -184,8 +154,6 @@ console.log('Discord proxy patched (API calls only)');
 done
 
 # Patch threads.provider.js: route Threads API calls through reverse proxy
-# HF Spaces blocks connections to graph.threads.net (TypeError: fetch failed)
-# Must patch BOTH backend and orchestrator
 for THREADS_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
   THREADS_TARGET="$THREADS_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/threads.provider.js"
   if [ -f "$THREADS_TARGET" ]; then
@@ -193,7 +161,7 @@ for THREADS_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestr
     node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$THREADS_TARGET', 'utf8');
-code = code.replace(/https:\/\/graph\.threads\.net/g, 'https://threads.proxy.firela.io');
+code = code.replace(/https:\/\/graph\.threads\.net/g, 'https://threads-proxy.firela.io');
 fs.writeFileSync('$THREADS_TARGET', code);
 console.log('Threads proxy patched');
 "
@@ -201,7 +169,6 @@ console.log('Threads proxy patched');
 done
 
 # Patch facebook.provider.js + instagram.provider.js: route through reverse proxy
-# HF Spaces blocks graph.facebook.com (used by Facebook Page + Instagram Business)
 for FB_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
   for FB_TARGET in \
     "$FB_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/facebook.provider.js" \
@@ -211,7 +178,7 @@ for FB_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/
       node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$FB_TARGET', 'utf8');
-code = code.replace(/https:\/\/graph\.facebook\.com/g, 'https://fb.proxy.firela.io');
+code = code.replace(/https:\/\/graph\.facebook\.com/g, 'https://fb-proxy.firela.io');
 fs.writeFileSync('$FB_TARGET', code);
 console.log('Facebook proxy patched');
 "
@@ -220,7 +187,6 @@ console.log('Facebook proxy patched');
 done
 
 # Patch instagram.standalone.provider.js: route through reverse proxy
-# HF Spaces blocks both api.instagram.com and graph.instagram.com
 for IG_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
   IG_TARGET="$IG_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/instagram.standalone.provider.js"
   if [ -f "$IG_TARGET" ]; then
@@ -228,8 +194,8 @@ for IG_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/
     node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$IG_TARGET', 'utf8');
-code = code.replace(/https:\/\/api\.instagram\.com/g, 'https://ig-api.proxy.firela.io');
-code = code.replace(/https:\/\/graph\.instagram\.com/g, 'https://ig-graph.proxy.firela.io');
+code = code.replace(/https:\/\/api\.instagram\.com/g, 'https://ig-api-proxy.firela.io');
+code = code.replace(/https:\/\/graph\.instagram\.com/g, 'https://ig-graph-proxy.firela.io');
 fs.writeFileSync('$IG_TARGET', code);
 console.log('Instagram Standalone proxy patched');
 "
@@ -237,7 +203,6 @@ console.log('Instagram Standalone proxy patched');
 done
 
 # Patch hashnode.provider.js: route through reverse proxy
-# HF Spaces blocks gql.hashnode.com
 for HN_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
   HN_TARGET="$HN_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/hashnode.provider.js"
   if [ -f "$HN_TARGET" ]; then
@@ -245,7 +210,7 @@ for HN_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/
     node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$HN_TARGET', 'utf8');
-code = code.replace(/https:\/\/gql\.hashnode\.com/g, 'https://hashnode.proxy.firela.io');
+code = code.replace(/https:\/\/gql\.hashnode\.com/g, 'https://hashnode-proxy.firela.io');
 fs.writeFileSync('$HN_TARGET', code);
 console.log('Hashnode proxy patched');
 "
@@ -253,15 +218,13 @@ console.log('Hashnode proxy patched');
 done
 
 # Patch node-telegram-bot-api: route through reverse proxy
-# HF Spaces blocks api.telegram.org
-# Package lives at /app/node_modules/, not inside dist/
 TG_TARGET="$PATCH_DIR/node_modules/node-telegram-bot-api/src/telegram.js"
 if [ -f "$TG_TARGET" ]; then
   echo "Patching $TG_TARGET for Telegram proxy..."
   node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$TG_TARGET', 'utf8');
-code = code.replace(/https:\/\/api\.telegram\.org/g, 'https://telegram.proxy.firela.io');
+code = code.replace(/https:\/\/api\.telegram\.org/g, 'https://telegram-proxy.firela.io');
 fs.writeFileSync('$TG_TARGET', code);
 console.log('Telegram proxy patched');
 "
@@ -290,7 +253,6 @@ if (code.includes(oldUpload)) {
 fi
 
 # Patch integration.service.js to wrap uploadSimple in try-catch
-# so channel creation doesn't fail when avatar download fails
 INTEG_SVC_TARGET="$PATCH_DIR/apps/backend/dist/libraries/nestjs-libraries/src/database/prisma/integrations/integration.service.js"
 if [ -f "$INTEG_SVC_TARGET" ]; then
   echo "Patching $INTEG_SVC_TARGET for resilient picture upload..."
@@ -312,7 +274,7 @@ ISPATCH
   node /app/patches/integ-svc.js "$INTEG_SVC_TARGET"
 fi
 
-# Patch youtube.provider.js to remove youtubepartner scope (restricted, most users won't have it)
+# Patch youtube.provider.js to remove youtubepartner scope
 mkdir -p /app/patches
 cat > /app/patches/yt-scope.js << 'YTPATCH'
 const fs = require('fs');
@@ -350,8 +312,6 @@ for YT_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/
 done
 
 # Write a global Node.js preload script to extend undici fetch timeout
-# HF Spaces has intermittent connectivity to external APIs (e.g. Discord)
-# Default undici connect timeout is 10s; we extend to 30s
 mkdir -p /app/patches
 cat > /app/patches/extend-timeout.js << 'PRELOAD'
 try {
@@ -370,7 +330,6 @@ PRELOAD
 echo "NODE_OPTIONS=--require /app/patches/extend-timeout.js" >> /app/.env
 
 # Patch posts.service.js in backend to log startWorkflow calls and errors
-# Discord workflow was silently not starting - need to see why
 POSTS_SVC_TARGET="$PATCH_DIR/apps/backend/dist/libraries/nestjs-libraries/src/database/prisma/posts/posts.service.js"
 if [ -f "$POSTS_SVC_TARGET" ]; then
   echo "Patching $POSTS_SVC_TARGET for startWorkflow logging..."
@@ -380,20 +339,11 @@ const fs = require('fs');
 const target = process.argv[2];
 let code = fs.readFileSync(target, 'utf8');
 
-// Find the pattern by looking for startWorkflow in createPost context
-// The compiled JS may use different variable names
-// Strategy: find ".startWorkflow(" calls that are followed by ".catch"
 const lines = code.split('\n');
 let patched = false;
 for (let i = 0; i < lines.length; i++) {
   if (lines[i].includes('.startWorkflow(') && !lines[i].includes('async startWorkflow')) {
-    // Add logging before this line
     const indent = lines[i].match(/^(\s*)/)[1];
-    // Extract the arguments pattern - log the call
-    const logLine = indent + 'console.log("[startWorkflow] line:", JSON.stringify(' + lines[i].trim().replace('.startWorkflow(', '.startWorkflow.args || ').replace(/\.catch.*$/, '') + '));';
-    // Simpler approach: just add a log line
-    const logLine2 = indent + 'console.log("[startWorkflow] call found at line ' + i + ':", typeof post !== "undefined" ? post?.settings?.__type : "no-post-context");';
-    // Even simpler: patch the .catch((err) => {}) to log errors
     if (lines[i].includes('.catch(')) {
       lines[i] = lines[i].replace('.catch((err) => {})', '.catch((err) => { console.error("[startWorkflow] FAILED:", err?.message || String(err)); })');
       if (lines[i] !== code.split('\n')[i]) {
@@ -401,7 +351,6 @@ for (let i = 0; i < lines.length; i++) {
         console.log('Patched .catch at line ' + i);
       }
     }
-    // Also try the version without arrow function body
     if (lines[i].includes('.catch(() => {})') || lines[i].includes('.catch(()=>{})')) {
       lines[i] = lines[i].replace(/\.catch\(\(\) => \{\}\)/g, '.catch((err) => { console.error("[startWorkflow] FAILED:", err?.message || String(err)); })');
       lines[i] = lines[i].replace(/\.catch\(\(\)=>\{\}\)/g, '.catch((err) => { console.error("[startWorkflow] FAILED:", err?.message || String(err)); })');
@@ -411,11 +360,9 @@ for (let i = 0; i < lines.length; i++) {
   }
 }
 
-// Also add logging at the start of startWorkflow method itself
 const swStart = 'async startWorkflow(';
 const swIdx = code.indexOf(swStart);
 if (swIdx !== -1) {
-  // Find the opening brace after the method signature
   const braceIdx = code.indexOf('{', swIdx);
   if (braceIdx !== -1) {
     const before = code.substring(0, braceIdx + 1);
@@ -431,12 +378,10 @@ if (patched) {
   fs.writeFileSync(target, lines.join('\n'));
   console.log('startWorkflow logging patched');
 } else {
-  // Fallback: dump the context around startWorkflow for debugging
   console.log('No .catch patterns found, dumping startWorkflow context...');
   const idx = code.indexOf('async startWorkflow');
   if (idx !== -1) {
     console.log('startWorkflow method found at offset:', idx);
-    // Find the method and the call sites
     const callSites = [];
     let pos = 0;
     while ((pos = code.indexOf('.startWorkflow(', pos)) !== -1) {
@@ -452,7 +397,6 @@ POSTSPATCH
 fi
 
 # Patch social.abstract.js in orchestrator to log raw errors from social providers
-# The default error handling swallows unknown X API errors as 'Unknown Error'
 for SA_DIST_DIR in "$PATCH_DIR/apps/orchestrator/dist" "$PATCH_DIR/apps/backend/dist"; do
   SA_TARGET="$SA_DIST_DIR/libraries/nestjs-libraries/src/integrations/social.abstract.js"
   if [ -f "$SA_TARGET" ]; then
@@ -460,7 +404,6 @@ for SA_DIST_DIR in "$PATCH_DIR/apps/orchestrator/dist" "$PATCH_DIR/apps/backend/
     node -e "
 const fs = require('fs');
 let code = fs.readFileSync('$SA_TARGET', 'utf8');
-// Add logging before the handleErrors call to capture raw error details
 const oldCatch = \"const handle = this.handleErrors(safeStringify(err), 200);\";
 const newCatch = \"console.error('[social-abstract] runInConcurrent error:', err?.message || err); console.error('[social-abstract] raw error body:', safeStringify(err)?.substring(0, 2000)); const handle = this.handleErrors(safeStringify(err), 200);\";
 if (code.includes(oldCatch)) {
@@ -474,6 +417,330 @@ if (code.includes(oldCatch)) {
   fi
 done
 
+# ============================================================
+# Social platform reverse proxy patches
+# All platforms: route API calls through Cloudflare-proxied domains
+# to bypass HF Space outbound HTTPS blocking
+# ============================================================
+
+# --- LinkedIn (api.linkedin.com + www.linkedin.com for OAuth) ---
+for LI_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  for LI_TARGET in \
+    "$LI_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/linkedin.provider.js" \
+    "$LI_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/linkedin.page.provider.js"; do
+    if [ -f "$LI_TARGET" ]; then
+      echo "Patching $LI_TARGET for LinkedIn proxy..."
+      node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$LI_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.linkedin\.com/g, 'https://linkedin-proxy.firela.io');
+code = code.replace(/https:\/\/www\.linkedin\.com/g, 'https://linkedin-www-proxy.firela.io');
+fs.writeFileSync('$LI_TARGET', code);
+console.log('LinkedIn proxy patched');
+"
+    fi
+  done
+done
+
+# --- Reddit (oauth.reddit.com + www.reddit.com for OAuth) ---
+for RD_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  RD_TARGET="$RD_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/reddit.provider.js"
+  if [ -f "$RD_TARGET" ]; then
+    echo "Patching $RD_TARGET for Reddit proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$RD_TARGET', 'utf8');
+code = code.replace(/https:\/\/oauth\.reddit\.com/g, 'https://reddit-proxy.firela.io');
+code = code.replace(/https:\/\/www\.reddit\.com/g, 'https://reddit-www-proxy.firela.io');
+fs.writeFileSync('$RD_TARGET', code);
+console.log('Reddit proxy patched');
+"
+  fi
+done
+
+# --- TikTok (open.tiktokapis.com) ---
+for TK_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  TK_TARGET="$TK_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/tiktok.provider.js"
+  if [ -f "$TK_TARGET" ]; then
+    echo "Patching $TK_TARGET for TikTok proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$TK_TARGET', 'utf8');
+code = code.replace(/https:\/\/open\.tiktokapis\.com/g, 'https://tiktok-proxy.firela.io');
+fs.writeFileSync('$TK_TARGET', code);
+console.log('TikTok proxy patched');
+"
+  fi
+done
+
+# --- Pinterest (api.pinterest.com) ---
+for PI_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  PI_TARGET="$PI_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/pinterest.provider.js"
+  if [ -f "$PI_TARGET" ]; then
+    echo "Patching $PI_TARGET for Pinterest proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$PI_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.pinterest\.com/g, 'https://pinterest-proxy.firela.io');
+fs.writeFileSync('$PI_TARGET', code);
+console.log('Pinterest proxy patched');
+"
+  fi
+done
+
+# --- Slack (slack.com) ---
+for SL_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  SL_TARGET="$SL_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/slack.provider.js"
+  if [ -f "$SL_TARGET" ]; then
+    echo "Patching $SL_TARGET for Slack proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$SL_TARGET', 'utf8');
+code = code.replace(/https:\/\/slack\.com/g, 'https://slack-proxy.firela.io');
+fs.writeFileSync('$SL_TARGET', code);
+console.log('Slack proxy patched');
+"
+  fi
+done
+
+# --- Twitch (api.twitch.tv + id.twitch.tv for OAuth) ---
+for TW_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  TW_TARGET="$TW_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/twitch.provider.js"
+  if [ -f "$TW_TARGET" ]; then
+    echo "Patching $TW_TARGET for Twitch proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$TW_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.twitch\.tv/g, 'https://twitch-proxy.firela.io');
+code = code.replace(/https:\/\/id\.twitch\.tv/g, 'https://twitch-id-proxy.firela.io');
+fs.writeFileSync('$TW_TARGET', code);
+console.log('Twitch proxy patched');
+"
+  fi
+done
+
+# --- Kick (api.kick.com + id.kick.com for OAuth) ---
+for KI_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  KI_TARGET="$KI_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/kick.provider.js"
+  if [ -f "$KI_TARGET" ]; then
+    echo "Patching $KI_TARGET for Kick proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$KI_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.kick\.com/g, 'https://kick-proxy.firela.io');
+code = code.replace(/https:\/\/id\.kick\.com/g, 'https://kick-id-proxy.firela.io');
+fs.writeFileSync('$KI_TARGET', code);
+console.log('Kick proxy patched');
+"
+  fi
+done
+
+# --- Bluesky (bsky.social + video.bsky.app) ---
+for BS_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  BS_TARGET="$BS_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/bluesky.provider.js"
+  if [ -f "$BS_TARGET" ]; then
+    echo "Patching $BS_TARGET for Bluesky proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$BS_TARGET', 'utf8');
+code = code.replace(/https:\/\/bsky\.social/g, 'https://bluesky-proxy.firela.io');
+code = code.replace(/https:\/\/video\.bsky\.app/g, 'https://bluesky-video-proxy.firela.io');
+fs.writeFileSync('$BS_TARGET', code);
+console.log('Bluesky proxy patched');
+"
+  fi
+done
+
+# --- Dribbble (api.dribbble.com + dribbble.com + api-sandbox.pinterest.com) ---
+for DR_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  DR_TARGET="$DR_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/dribbble.provider.js"
+  if [ -f "$DR_TARGET" ]; then
+    echo "Patching $DR_TARGET for Dribbble proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$DR_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.dribbble\.com/g, 'https://dribbble-proxy.firela.io');
+code = code.replace(/https:\/\/dribbble\.com/g, 'https://dribbble-www-proxy.firela.io');
+code = code.replace(/https:\/\/api-sandbox\.pinterest\.com/g, 'https://dribbble-sandbox-proxy.firela.io');
+fs.writeFileSync('$DR_TARGET', code);
+console.log('Dribbble proxy patched');
+"
+  fi
+done
+
+# --- Medium (api.medium.com) ---
+for MD_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  MD_TARGET="$MD_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/medium.provider.js"
+  if [ -f "$MD_TARGET" ]; then
+    echo "Patching $MD_TARGET for Medium proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$MD_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.medium\.com/g, 'https://medium-proxy.firela.io');
+fs.writeFileSync('$MD_TARGET', code);
+console.log('Medium proxy patched');
+"
+  fi
+done
+
+# --- VK (api.vk.com + id.vk.com for OAuth) ---
+for VK_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  VK_TARGET="$VK_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/vk.provider.js"
+  if [ -f "$VK_TARGET" ]; then
+    echo "Patching $VK_TARGET for VK proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$VK_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.vk\.com/g, 'https://vk-proxy.firela.io');
+code = code.replace(/https:\/\/id\.vk\.com/g, 'https://vk-id-proxy.firela.io');
+fs.writeFileSync('$VK_TARGET', code);
+console.log('VK proxy patched');
+"
+  fi
+done
+
+# --- Farcaster/Neynar (api.neynar.com) ---
+for FC_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  FC_TARGET="$FC_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/farcaster.provider.js"
+  if [ -f "$FC_TARGET" ]; then
+    echo "Patching $FC_TARGET for Farcaster proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$FC_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.neynar\.com/g, 'https://farcaster-proxy.firela.io');
+fs.writeFileSync('$FC_TARGET', code);
+console.log('Farcaster proxy patched');
+"
+  fi
+done
+
+# --- Dev.to (dev.to) ---
+for DV_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  DV_TARGET="$DV_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/dev.to.provider.js"
+  if [ -f "$DV_TARGET" ]; then
+    echo "Patching $DV_TARGET for Dev.to proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$DV_TARGET', 'utf8');
+code = code.replace(/https:\/\/dev\.to/g, 'https://devto-proxy.firela.io');
+fs.writeFileSync('$DV_TARGET', code);
+console.log('Dev.to proxy patched');
+"
+  fi
+done
+
+# --- MeWe (mewe.com) ---
+for MW_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  MW_TARGET="$MW_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/mewe.provider.js"
+  if [ -f "$MW_TARGET" ]; then
+    echo "Patching $MW_TARGET for MeWe proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$MW_TARGET', 'utf8');
+code = code.replace(/https:\/\/mewe\.com/g, 'https://mewe-proxy.firela.io');
+fs.writeFileSync('$MW_TARGET', code);
+console.log('MeWe proxy patched');
+"
+  fi
+done
+
+# --- Moltbook (www.moltbook.com) ---
+for MB_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  MB_TARGET="$MB_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/moltbook.provider.js"
+  if [ -f "$MB_TARGET" ]; then
+    echo "Patching $MB_TARGET for Moltbook proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$MB_TARGET', 'utf8');
+code = code.replace(/https:\/\/www\.moltbook\.com/g, 'https://moltbook-proxy.firela.io');
+fs.writeFileSync('$MB_TARGET', code);
+console.log('Moltbook proxy patched');
+"
+  fi
+done
+
+# --- Whop (api.whop.com) ---
+for WP_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  WP_TARGET="$WP_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/whop.provider.js"
+  if [ -f "$WP_TARGET" ]; then
+    echo "Patching $WP_TARGET for Whop proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$WP_TARGET', 'utf8');
+code = code.replace(/https:\/\/api\.whop\.com/g, 'https://whop-proxy.firela.io');
+fs.writeFileSync('$WP_TARGET', code);
+console.log('Whop proxy patched');
+"
+  fi
+done
+
+# --- Skool (api2.skool.com) ---
+for SK_DIST_DIR in "$PATCH_DIR/apps/backend/dist" "$PATCH_DIR/apps/orchestrator/dist"; do
+  SK_TARGET="$SK_DIST_DIR/libraries/nestjs-libraries/src/integrations/social/skool.provider.js"
+  if [ -f "$SK_TARGET" ]; then
+    echo "Patching $SK_TARGET for Skool proxy..."
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$SK_TARGET', 'utf8');
+code = code.replace(/https:\/\/api2\.skool\.com/g, 'https://skool-proxy.firela.io');
+fs.writeFileSync('$SK_TARGET', code);
+console.log('Skool proxy patched');
+"
+  fi
+done
+
+# --- X/Twitter (api.x.com + upload.x.com via twitter-api-v2 package) ---
+X_PKG="$PATCH_DIR/node_modules/twitter-api-v2/dist"
+if [ -d "$X_PKG" ]; then
+  echo "Patching twitter-api-v2 package for X proxy..."
+  for X_FILE in "$X_PKG"/*.js; do
+    if [ -f "$X_FILE" ]; then
+      node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$X_FILE', 'utf8');
+let changed = false;
+if (code.includes('api.x.com')) {
+  code = code.replace(/https:\/\/api\.x\.com/g, 'https://x-proxy.firela.io');
+  changed = true;
+}
+if (code.includes('upload.x.com')) {
+  code = code.replace(/https:\/\/upload\.x\.com/g, 'https://x-upload-proxy.firela.io');
+  changed = true;
+}
+if (changed) {
+  fs.writeFileSync('$X_FILE', code);
+  console.log('Patched:', '$X_FILE');
+}
+"
+    fi
+  done
+fi
+
+# --- YouTube/Google (www.googleapis.com + youtube.googleapis.com via googleapis package) ---
+YT_PKG="$PATCH_DIR/node_modules/googleapis/build/src"
+if [ -d "$YT_PKG" ]; then
+  echo "Patching googleapis package for YouTube/Google proxy..."
+  find "$YT_PKG" -name "*.js" | while read YT_FILE; do
+    node -e "
+const fs = require('fs');
+let code = fs.readFileSync('$YT_FILE', 'utf8');
+let changed = false;
+if (code.includes('youtube.googleapis.com')) {
+  code = code.replace(/https:\/\/youtube\.googleapis\.com/g, 'https://yt-proxy.firela.io');
+  changed = true;
+}
+if (code.includes('www.googleapis.com')) {
+  code = code.replace(/https:\/\/www\.googleapis\.com/g, 'https://googleapis-proxy.firela.io');
+  changed = true;
+}
+if (changed) {
+  fs.writeFileSync('$YT_FILE', code);
+  console.log('Patched:', '$YT_FILE');
+}
+"
+  done
+fi
+
 echo "=== Patching complete, starting app ==="
 
 # Delegate to original entrypoint + CMD (nginx && pnpm run pm2)