Deploy SalonView AI (brand single-source)

Dockerfile

@@ -23,9 +23,12 @@ ENV PYTHONUNBUFFERED=1 \
 WORKDIR /app
 
 # Build + runtime libs: build-essential/cmake for insightface; libglib/libgomp for opencv/onnxruntime.
+# fonts-nanum: AI 고지 워터마크가 한글이라 CJK 폰트가 없으면 □□□(두부 글자)로 찍힌다.
+# 고지가 읽히지 않으면 표시 의무를 지키지 못한 것과 같으므로 이미지에 반드시 포함한다.
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential gcc g++ cmake \
     libpq-dev libjpeg-dev zlib1g-dev libglib2.0-0 libgomp1 libgl1 \
+    fonts-nanum \
     && rm -rf /var/lib/apt/lists/*
 
 COPY requirements.txt .

app/api/v1/endpoints/photos.py

@@ -105,11 +105,16 @@ def _share_image_url(share_token: str, request: Request) -> str:
     )
 
 
-def _share_video_url(share_token: str, request: Request) -> str:
-    """Customer-facing result VIDEO URL — share_token based, same rules as the image."""
+def _operator_video_url(task_id: str, request: Request) -> str:
+    """OWNER-ONLY promo video URL (access-code gated).
+
+    Video is a salon marketing tool, NOT a customer deliverable — so it is served
+    from an access-code-gated endpoint keyed by the internal task id, never from the
+    customer share_token path. The customer share page never receives a video URL.
+    """
     return (
         f"{_request_base_url(request)}{settings.api_v1_prefix}"
-        f"/photos/share/{share_token}/video"
+        f"/photos/video-file/{task_id}"
     )
 
 
@@ -202,9 +207,11 @@ def list_history(
         has_video = t.video_status == "SUCCEEDED" and bool(t.video_key)
         items.append(HistoryItem(
             token=t.share_token,
+            task_id=t.task_id,
             created_at=t.created_at,
             image_url=_share_image_url(t.share_token, request),
-            video_url=_share_video_url(t.share_token, request) if has_video else None,
+            # 영상은 원장 전용(접속코드 게이트) 경로로만 — 손님 share 경로로는 절대 안 나간다.
+            video_url=_operator_video_url(t.task_id, request) if has_video else None,
             has_video=has_video,
             name=(consent.client_name if consent else None),
         ))
@@ -457,10 +464,9 @@ def get_share(
         status=task.status,
         # share_token based URL only — never expose internal task uuid / result path
         result_image_url=_share_image_url(task.share_token, request),
-        video_url=(
-            _share_video_url(task.share_token, request)
-            if task.video_status == "SUCCEEDED" and task.video_key else None
-        ),
+        # 영상은 손님에게 전달하지 않는다(홍보용, 원장 전용). 손님 공유 페이지에는
+        # 언제나 사진만 나간다 — 원장이 나중에 홍보 영상을 만들어도 이 링크에는 안 뜬다.
+        video_url=None,
         expires_at=task.result_expires_at,
         original_shared=task.original_shared,
         privacy=SharePrivacy(
@@ -663,7 +669,7 @@ def _video_response(task, request: Request) -> VideoResponse:
         task_id=task.task_id,
         video_status=status,
         video_url=(
-            _share_video_url(task.share_token, request)
+            _operator_video_url(task.task_id, request)
             if status == "SUCCEEDED" and task.video_key else None
         ),
         video_error=task.video_error,
@@ -741,39 +747,45 @@ def create_video(
 
 @router.get("/video/{task_id}", response_model=VideoResponse)
 def get_video_status(
-    task_id: str, request: Request, db: Session = Depends(get_db)
+    task_id: str,
+    request: Request,
+    access_code: str | None = Header(default=None, alias="X-Access-Code"),
+    db: Session = Depends(get_db),
 ) -> VideoResponse:
-    """Operator poll: current video state (+ tokenized URL when done)."""
+    """Operator poll: current promo-video state (+ owner video URL when done).
+
+    Access-code gated like the rest of the operator surface — video is owner-only."""
+    if _shop_for_code(access_code) is None:
+        raise HTTPException(403, "invalid access code")
     task = task_repo.get_task(db, task_id)
     if task is None:
         raise HTTPException(404, "task not found")
     return _video_response(task, request)
 
 
-@router.get("/share/{share_token}/video")
-def get_share_video(
-    share_token: str,
+@router.get("/video-file/{task_id}")
+def get_video_file(
+    task_id: str,
+    access_code: str | None = Header(default=None, alias="X-Access-Code"),
     range_header: str | None = Header(default=None, alias="Range"),
     db: Session = Depends(get_db),
 ) -> Response:
-    """Serve the result video by share_token (customer-facing) — same gates as the image.
+    """Serve the OWNER's promo video (access-code gated) — never the customer path.
 
-    Supports HTTP Range (206): iOS Safari's media stack probes with `Range: bytes=0-1`
-    and REFUSES to play sources that answer a plain 200 — without this, the paid clip
-    simply never plays on iPhones (audit finding). Also enables seeking everywhere."""
-    task = task_repo.get_task_by_share_token(db, share_token)
+    Video is a salon marketing tool, so this endpoint is gated by the shop access code
+    (same as the work-history list) and keyed by the internal task id, which is only
+    handed to the operator through the gated /history response. The customer share
+    page and token never expose a video. Supports HTTP Range (206) so the operator's
+    <video> can seek and iOS can play it."""
+    if _shop_for_code(access_code) is None:
+        raise HTTPException(403, "invalid access code")
+    task = task_repo.get_task(db, task_id)
     if task is None:
         raise HTTPException(404, "not found")
     if task.status in (TaskStatus.EXPIRED, TaskStatus.DELETED) or _is_expired(
         task, _utcnow()
     ):
         raise HTTPException(410, "result expired")
-    if task.status != TaskStatus.SUCCEEDED:
-        raise HTTPException(409, "result is not ready")
-
-    consent = task_repo.get_consent(db, task.task_id)
-    if not _qr_allowed(consent):
-        raise HTTPException(403, "QR delivery is not allowed")
 
     if task.video_status != "SUCCEEDED" or not task.video_key:
         raise HTTPException(404, "video is not available")

app/schemas/photo.py

@@ -70,11 +70,17 @@ class VideoResponse(BaseModel):
 
 
 class HistoryItem(BaseModel):
-    """운영자 작업내역 1건 — share_token 기반 URL만 노출(task_id/내부경로 없음)."""
+    """운영자 작업내역 1건.
+
+    이미지 URL 은 손님과 공유하는 share_token 기반이지만, task_id 는 원장 전용
+    작업(홍보 영상 생성/저장)에 쓰인다 — 작업내역은 접속코드로 게이트되므로
+    운영자에게만 노출된다. 영상은 손님 공유 경로가 아니라 접속코드로 보호되는
+    /photos/video-file/{task_id} 로만 받을 수 있다."""
 
     token: str
+    task_id: str
     created_at: datetime
     image_url: str
-    video_url: str | None = None
+    video_url: str | None = None  # 원장 전용 영상 파일 URL(접속코드 필요)
     has_video: bool = False
     name: str | None = None

app/services/watermark.py

@@ -23,7 +23,12 @@ from app.core.config import settings
 logger = logging.getLogger(__name__)
 
 # Best-effort CJK-capable fonts (Windows / common Linux). Falls back to default.
+# 절대경로를 먼저 둔다: 컨테이너(Debian)에서는 이름만으로는 폰트를 못 찾아 한글이 □□□ 로 찍힌다.
+# (Dockerfile 이 fonts-nanum 을 설치한다.)
 _FONT_CANDIDATES = (
+    "/usr/share/fonts/truetype/nanum/NanumGothic.ttf",
+    "/usr/share/fonts/truetype/nanum/NanumBarunGothic.ttf",
+    "/usr/share/fonts/opentype/noto/NotoSansCJK-Regular.ttc",
     "malgun.ttf", "malgunbd.ttf", "NanumGothic.ttf",
     "NotoSansCJK-Regular.ttc", "NotoSansKR-Regular.otf", "arial.ttf",
 )

static/index.html

@@ -150,15 +150,11 @@
         </div>
       </section>
 
-      <!-- 5/7 RESULT -->
+      <!-- 5/7 RESULT — 손님 전달은 사진만. 홍보 영상은 '작업 내역'에서 원장이 따로 만든다
+           (손님을 기다리게 하지 않고, 영상 비용은 원장이 고른 사진에만 든다). -->
       <section class="screen" id="screen-result" data-step="4">
         <header class="topbar"><button class="icon-btn" data-go="capture" aria-label="뒤로">‹</button><span class="topbar-title">결과</span><span class="icon-btn ghost"></span></header>
         <div class="screen-body">
-          <!-- photo/video shown SEPARATELY (tabs appear only after a clip is made) -->
-          <div class="share-tabs" id="result-tabs" hidden>
-            <button type="button" class="share-tab active" id="result-tab-photo">사진</button>
-            <button type="button" class="share-tab" id="result-tab-video">영상</button>
-          </div>
           <div id="result-photo-wrap">
             <div class="ba" id="ba">
               <img class="ba-after" id="ba-after" alt="AI 결과" />
@@ -169,9 +165,6 @@
             </div>
             <input type="range" id="ba-range" class="ba-range" min="0" max="100" value="50" aria-label="원본/AI 비교" />
           </div>
-          <div class="share-frame" id="result-video-wrap" hidden>
-            <video id="result-video" class="share-video" controls playsinline loop muted></video>
-          </div>
           <div class="chips center">
             <span class="chip gold">헤어 유지</span><span class="chip gold">배경 유지</span><span class="chip gold">AI 가상 모델 표시</span>
           </div>
@@ -179,11 +172,7 @@
         </div>
         <div class="screen-foot">
           <button class="btn btn-primary" id="result-go">QR로 전달하기</button>
-          <div class="action-row">
-            <button class="btn btn-outline" id="btn-save">📥 사진 저장</button>
-            <button class="btn btn-outline" id="btn-video">✨ 영상 만들기</button>
-          </div>
-          <p class="video-status" id="video-status" hidden></p>
+          <button class="btn btn-outline" id="btn-save">📥 사진 저장</button>
           <button class="btn btn-text" data-go="capture">다시 찍기</button>
         </div>
       </section>
@@ -225,20 +214,12 @@
         </div>
       </section>
 
-      <!-- CUSTOMER SHARE (/result/{token}) -->
+      <!-- CUSTOMER SHARE (/result/{token}) — 손님에게는 사진만. 영상은 원장 홍보용이라
+           손님 공유 페이지에는 절대 나오지 않는다(대기·비용 없음). -->
       <section class="screen" id="screen-share">
         <div class="share-head"><p class="brand-logo small">{{BRAND_WORDMARK}}</p></div>
         <div class="screen-body center-col">
-          <!-- photo/video are SEPARATE views: tabs appear only when a video exists;
-               the photo shows alone by default (clean, no frame decorations) -->
-          <div class="share-tabs" id="share-tabs" hidden>
-            <button type="button" class="share-tab active" id="tab-photo">사진</button>
-            <button type="button" class="share-tab" id="tab-video">영상</button>
-          </div>
           <div class="share-frame" id="share-photo-wrap"><img id="share-img" class="share-img" alt="AI 결과" /></div>
-          <div class="share-frame" id="share-video-wrap" hidden>
-            <video id="share-video" class="share-video" controls playsinline loop muted></video>
-          </div>
           <button class="btn btn-primary" id="share-save">📥 사진 저장</button>
           <p class="disclosure">AI로 생성·편집된 가상 결과 이미지입니다.</p>
           <p class="fineprint">저장 버튼을 누르면 갤러리에 저장돼요 · 링크는 7일 후 만료됩니다.</p>
@@ -276,7 +257,8 @@
         </div>
       </section>
 
-      <!-- RECENT VIEW (tap a thumbnail — photo/video shown SEPARATELY, save either) -->
+      <!-- RECENT VIEW — 원장이 저장된 결과에서 마음에 드는 사진을 골라 홍보 영상을 만드는 곳.
+           영상은 이 매장 홍보용이며 손님에게는 전달되지 않는다. -->
       <section class="screen" id="screen-recent-view">
         <header class="topbar"><button class="icon-btn" data-go="recent" aria-label="뒤로">‹</button><span class="topbar-title">결과 보기</span><span class="icon-btn ghost"></span></header>
         <div class="screen-body center-col">
@@ -289,8 +271,12 @@
           <p class="disclosure">AI로 생성·편집된 가상 결과입니다.</p>
         </div>
         <div class="screen-foot">
-          <button class="btn btn-primary" id="rv-save">📥 저장</button>
+          <!-- 홍보 영상 만들기: 원장 전용. 이 사진으로 5초 홍보 영상을 만든다(유료 AI 호출이라 버튼을 눌러야만 생성). -->
+          <button class="btn btn-primary" id="rv-make-video" hidden>✨ 이 사진으로 홍보 영상 만들기</button>
+          <p class="video-status" id="rv-video-status" hidden></p>
+          <button class="btn btn-outline" id="rv-save">📥 저장</button>
           <div class="link-row"><span class="link-text" id="recent-link"></span><button class="btn-copy" id="recent-copy">복사</button></div>
+          <p class="fineprint">공유 링크는 손님에게 <b>사진만</b> 전달됩니다 · 영상은 매장 홍보용이에요</p>
         </div>
       </section>
     </main>

static/js/app.js

@@ -17,7 +17,6 @@ const state = {
   accessCode: "",
   gender: "auto",     // operator pick on capture screen: "auto" | "woman" | "man"
   retryTo: "capture",
-  videoStatus: "NONE", // NONE | PROCESSING | SUCCEEDED | FAILED (per current task)
 };
 let CFG = { access_required: false, video_enabled: true };
 
@@ -352,110 +351,18 @@ function showResult() {
   range.oninput = apply;
   range.value = 50; apply();
   $("#result-go").disabled = !state.deliveryAvailable;
-  resetVideoUi();
   showScreen("result");
   addRecent(tokenFromResultUrl(state.resultUrl));   // remember it in the local gallery
 }
 
-// --- result video (operator button -> 5s live clip; paid call, so explicit per customer) ---
-let videoPollTimer = null;
-function resetVideoUi() {
-  state.videoStatus = "NONE";
-  state.videoUrl = null;
-  if (videoPollTimer) { clearTimeout(videoPollTimer); videoPollTimer = null; }
-  const btn = $("#btn-video"), stat = $("#video-status");
-  btn.hidden = !CFG.video_enabled;
-  btn.disabled = false;
-  btn.textContent = "✨ 영상 만들기";
-  stat.hidden = true; stat.textContent = "";
-  // reset the result photo/video view back to photo for the next customer
-  $("#result-tabs").hidden = true;
-  const rv = $("#result-video"); rv.pause && rv.pause(); rv.removeAttribute("src");
-  resultShow("photo");
-}
-
-// operator result screen: photo (before/after) vs the generated clip — one at a time
-function resultShow(which) {
-  const photo = which === "photo";
-  $("#result-photo-wrap").hidden = !photo;
-  $("#result-video-wrap").hidden = photo;
-  $("#result-tab-photo").classList.toggle("active", photo);
-  $("#result-tab-video").classList.toggle("active", !photo);
-  $("#btn-save").textContent = photo ? "📥 사진 저장" : "📥 영상 저장";
-  const v = $("#result-video");
-  if (photo) { try { v.pause(); } catch (e) { /* noop */ } }
-  else {
-    if (state.videoUrl) prefetchMedia(state.videoUrl);   // warm for 저장
-    try { v.play(); } catch (e) { /* needs a tap */ }
-  }
-}
-$("#result-tab-photo").addEventListener("click", () => resultShow("photo"));
-$("#result-tab-video").addEventListener("click", () => resultShow("video"));
-// save the result image onto the OPERATOR's device (marketing use — independent of the
-// server's 7-day retention, so a wiped/expired server can't take the keepsake with it)
+// Result screen is PHOTO-ONLY: the customer is handed a photo (fast, no video wait/cost).
+// Promo video is made later by the owner from '작업 내역' (recent-view). Save the result
+// photo onto the OPERATOR's device (independent of the server's 7-day retention).
 $("#btn-save").addEventListener("click", () => {
-  const showingVideo = !$("#result-video-wrap").hidden;
-  if (showingVideo && state.videoUrl) {
-    saveMediaToGallery(state.videoUrl, `${BRAND.slug}_${Date.now()}.mp4`, "영상");
-  } else if (state.resultUrl) {
-    saveMediaToGallery(state.resultUrl, `${BRAND.slug}_${Date.now()}.png`, "사진");
-  } else { showToast("결과가 아직 없어요."); }
+  if (state.resultUrl) saveMediaToGallery(state.resultUrl, `${BRAND.slug}_${Date.now()}.png`, "사진");
+  else showToast("결과가 아직 없어요.");
 });
 
-$("#btn-video").addEventListener("click", startVideo);
-async function startVideo() {
-  if (!state.taskId || state.videoStatus === "PROCESSING") return;
-  const tid = state.taskId;  // same guard as pollVideo: ignore replies for a stale task
-  const btn = $("#btn-video"), stat = $("#video-status");
-  btn.disabled = true;
-  stat.hidden = false;
-  stat.textContent = "영상을 만들고 있어요… 빠르면 30초, 보통 1분 정도예요";
-  const data = new FormData();
-  data.append("access_code", state.accessCode || "");
-  try {
-    const r = await api(`${API}/video/${tid}`, { method: "POST", body: data });
-    if (state.taskId !== tid) return;
-    state.videoStatus = r.video_status;
-    if (r.video_status === "SUCCEEDED") { state.videoUrl = sameOriginPath(r.video_url); videoReady(); return; }
-    pollVideo();
-  } catch (e) {
-    if (state.taskId !== tid) return;
-    state.videoStatus = "FAILED";
-    btn.disabled = false;
-    stat.textContent = "영상 생성을 시작하지 못했어요. 다시 시도해 주세요.";
-  }
-}
-async function pollVideo() {
-  if (!state.taskId) return;
-  const tid = state.taskId;  // guard: a reply landing after the operator moved to a NEW
-  try {                      // customer must not touch the new screen's video UI
-    const st = await api(`${API}/video/${tid}`);
-    if (state.taskId !== tid) return;
-    state.videoStatus = st.video_status;
-    if (st.video_status === "SUCCEEDED") { state.videoUrl = sameOriginPath(st.video_url); videoReady(); return; }
-    if (st.video_status === "FAILED") {
-      $("#btn-video").disabled = false;
-      $("#video-status").hidden = false;
-      $("#video-status").textContent = "영상 생성에 실패했어요. 다시 시도해 주세요.";
-      return;
-    }
-  } catch (e) { /* transient poll error -> keep trying */ }
-  videoPollTimer = setTimeout(pollVideo, 5000);
-}
-function videoReady() {
-  const btn = $("#btn-video"), stat = $("#video-status");
-  btn.disabled = true;
-  btn.textContent = "영상 완성 ✓";
-  stat.hidden = false;
-  stat.textContent = "영상이 완성됐어요! 아래 '영상' 탭에서 바로 확인하세요.";
-  // show the clip RIGHT HERE on the result screen (no need to hand off to QR first)
-  if (state.videoUrl) {
-    $("#result-video").src = state.videoUrl;
-    $("#result-tabs").hidden = false;
-    resultShow("video");
-  }
-  showToast("영상이 완성됐어요!");
-}
 $("#result-go").addEventListener("click", loadQr);
 
 async function loadQr() {
@@ -490,27 +397,20 @@ $("#done-home").addEventListener("click", () => {
   showScreen("landing");
 });
 
-// --- customer share view (/result/{token}) ---
-let shareData = { token: null, imageUrl: null, videoUrl: null };
+// --- customer share view (/result/{token}) — PHOTO ONLY ---
+// The customer is never handed a video: video is the salon's promo tool, so it never
+// appears here (no wait, no cost surprise). The server also returns no video URL for
+// the customer share path — this is enforced on both ends.
+let shareData = { token: null, imageUrl: null };
 async function loadSharedResult(token) {
   // A sleeping/waking server or a cell blip must NOT show a paying customer the terminal
   // "링크가 만료되었습니다" screen — only a real 410 means expired. Retry transient failures.
   for (let attempt = 0; attempt < 20; attempt++) {
     try {
       const share = await api(`${API}/share/${encodeURIComponent(token)}`);
-      shareData = { token, imageUrl: sameOriginPath(share.result_image_url),
-                    videoUrl: share.video_url ? sameOriginPath(share.video_url) : null };
+      shareData = { token, imageUrl: sameOriginPath(share.result_image_url) };
       $("#share-img").src = shareData.imageUrl;
-      // photo and video are SEPARATE views: the photo shows alone by default; when a clip
-      // exists, tabs appear and each tab shows exactly one of them (no stacked clutter).
-      if (shareData.videoUrl) {
-        $("#share-video").src = shareData.videoUrl;
-        $("#share-tabs").hidden = false;
-        prefetchMedia(shareData.imageUrl);
-      } else {
-        pollShareVideo(token);   // the operator may still be generating the clip
-      }
-      shareShow("photo");
+      prefetchMedia(shareData.imageUrl);   // warm the blob so 저장 fires within the tap window
       showScreen("share");
       return;
     } catch (e) {
@@ -525,47 +425,8 @@ async function loadSharedResult(token) {
   showScreen("expired");
 }
 
-// The realistic salon sequence is: customer scans the QR FIRST, then the operator taps
-// 영상 만들기 (1-3 min). Poll quietly so the clip appears on the already-open page.
-let shareVideoPollCount = 0;
-async function pollShareVideo(token) {
-  if (shareVideoPollCount++ > 16 || shareData.videoUrl) return;  // ~4 min budget
-  setTimeout(async () => {
-    try {
-      const share = await api(`${API}/share/${encodeURIComponent(token)}`);
-      if (share.video_url) {
-        shareData.videoUrl = sameOriginPath(share.video_url);
-        $("#share-video").src = shareData.videoUrl;
-        $("#share-tabs").hidden = false;
-        showToast("영상이 도착했어요! '영상' 탭에서 확인하세요.");
-        return;
-      }
-    } catch (e) { /* transient — keep polling */ }
-    pollShareVideo(token);
-  }, 15000);
-}
-
-function shareShow(which) {
-  const photo = which === "photo";
-  $("#share-photo-wrap").hidden = !photo;
-  $("#share-video-wrap").hidden = photo;
-  $("#tab-photo").classList.toggle("active", photo);
-  $("#tab-video").classList.toggle("active", !photo);
-  $("#share-save").textContent = photo ? "📥 사진 저장" : "📥 영상 저장";
-  const v = $("#share-video");
-  if (photo) { try { v.pause(); } catch (e) { /* not loaded yet */ } }
-  else {
-    prefetchMedia(shareData.videoUrl);  // warm the blob so 저장 works within the tap window
-    try { v.play(); } catch (e) { /* browser wants a direct tap on controls */ }
-  }
-}
-$("#tab-photo").addEventListener("click", () => shareShow("photo"));
-$("#tab-video").addEventListener("click", () => shareShow("video"));
 $("#share-save").addEventListener("click", () => {
-  const showingVideo = !$("#share-video-wrap").hidden;
-  if (showingVideo && shareData.videoUrl) {
-    saveMediaToGallery(shareData.videoUrl, `${BRAND.slug}_${shareData.token}.mp4`, "영상");
-  } else if (shareData.imageUrl) {
+  if (shareData.imageUrl) {
     saveMediaToGallery(shareData.imageUrl, `${BRAND.slug}_${shareData.token}.png`, "사진");
   }
 });
@@ -640,17 +501,47 @@ function renderHistoryCell(grid, empty, it) {
   grid.appendChild(cell);
 }
 
+// promo video is OWNER-only: served access-code gated and keyed by task_id (never the
+// customer share path). A custom header can't ride on a <video src>, so the bytes are
+// fetched here with the code and played from a blob URL.
+let rvVideoPollTimer = null;
+async function fetchOperatorVideoBlob(taskId) {
+  const r = await fetch(`${API}/video-file/${encodeURIComponent(taskId)}`,
+    { headers: { "X-Access-Code": state.accessCode || "" } });
+  if (!r.ok) throw new Error(String(r.status));
+  return r.blob();
+}
+async function loadRecentVideo(taskId) {
+  try {
+    const blob = await fetchOperatorVideoBlob(taskId);
+    if (!recentViewItem || recentViewItem.task_id !== taskId) return false;
+    if (recentViewItem._videoObjUrl) URL.revokeObjectURL(recentViewItem._videoObjUrl);
+    const url = URL.createObjectURL(blob);
+    recentViewItem._videoObjUrl = url;   // reused by 저장 without a second fetch
+    $("#rv-video").src = url;
+    $("#rv-tabs").hidden = false;
+    return true;
+  } catch (e) { return false; }
+}
+
 function openRecentView(it) {
   recentViewItem = it;
+  if (rvVideoPollTimer) { clearTimeout(rvVideoPollTimer); rvVideoPollTimer = null; }
   const imgUrl = sameOriginPath(it.image_url) || recentImageUrl(it.token);
   $("#rv-img").src = imgUrl;
   prefetchMedia(imgUrl);   // warm for 저장 (share-sheet must fire within the tap window)
-  const vwrap = $("#rv-video"), hasVideo = !!(it.has_video && it.video_url);
-  if (hasVideo) vwrap.src = sameOriginPath(it.video_url); else vwrap.removeAttribute("src");
-  $("#rv-tabs").hidden = !hasVideo;
+  $("#rv-video").removeAttribute("src");
+  $("#rv-tabs").hidden = true;
+  const hasVideo = !!(it.has_video && it.task_id);
+  // make-video button: shown only when video is enabled, we have a task_id, and none exists yet
+  const mk = $("#rv-make-video"), st = $("#rv-video-status");
+  st.hidden = true; st.textContent = "";
+  mk.disabled = false; mk.textContent = "✨ 이 사진으로 홍보 영상 만들기";
+  mk.hidden = !(CFG.video_enabled && it.task_id && !hasVideo);
   rvShow("photo");
   $("#recent-link").textContent = recentShareUrl(it.token);
   showScreen("recent-view");
+  if (hasVideo) loadRecentVideo(it.task_id);   // fetch + play the existing promo clip
 }
 function rvShow(which) {
   const photo = which === "photo";
@@ -660,12 +551,63 @@ function rvShow(which) {
   $("#rv-tab-video").classList.toggle("active", !photo);
   const v = $("#rv-video");
   if (photo) { try { v.pause(); } catch (e) { /* not loaded */ } }
-  else {
-    if (recentViewItem && recentViewItem.video_url) prefetchMedia(sameOriginPath(recentViewItem.video_url));
-    try { v.play(); } catch (e) { /* needs a tap */ }
-  }
+  else { try { v.play(); } catch (e) { /* needs a tap */ } }
   $("#rv-save").textContent = photo ? "📥 사진 저장" : "📥 영상 저장";
 }
+
+// --- make a promo video from THIS saved photo (owner action; paid fal call, explicit) ---
+$("#rv-make-video").addEventListener("click", startRecentVideo);
+async function startRecentVideo() {
+  const it = recentViewItem;
+  if (!it || !it.task_id) return;
+  const tid = it.task_id;
+  const mk = $("#rv-make-video"), st = $("#rv-video-status");
+  mk.disabled = true;
+  st.hidden = false;
+  st.textContent = "홍보 영상을 만들고 있어요… 빠르면 30초, 보통 1분 정도예요";
+  const data = new FormData();
+  data.append("access_code", state.accessCode || "");
+  try {
+    const r = await api(`${API}/video/${encodeURIComponent(tid)}`, { method: "POST", body: data });
+    if (!recentViewItem || recentViewItem.task_id !== tid) return;
+    if (r.video_status === "SUCCEEDED") { recentVideoReady(tid); return; }
+    if (r.video_status === "FAILED") { rvVideoFailed(); return; }
+    pollRecentVideo(tid);
+  } catch (e) {
+    if (!recentViewItem || recentViewItem.task_id !== tid) return;
+    rvVideoFailed("영상 생성을 시작하지 못했어요. 다시 시도해 주세요.");
+  }
+}
+async function pollRecentVideo(tid) {
+  try {
+    const r = await fetch(`${API}/video/${encodeURIComponent(tid)}`,
+      { headers: { "X-Access-Code": state.accessCode || "" } });
+    if (!r.ok) throw new Error(String(r.status));
+    const j = await r.json();
+    if (!recentViewItem || recentViewItem.task_id !== tid) return;   // moved away: stop
+    if (j.video_status === "SUCCEEDED") { recentVideoReady(tid); return; }
+    if (j.video_status === "FAILED") { rvVideoFailed(); return; }
+  } catch (e) { /* transient poll error -> keep trying */ }
+  rvVideoPollTimer = setTimeout(() => pollRecentVideo(tid), 5000);
+}
+async function recentVideoReady(tid) {
+  const mk = $("#rv-make-video"), st = $("#rv-video-status");
+  const ok = await loadRecentVideo(tid);
+  if (recentViewItem && recentViewItem.task_id === tid) recentViewItem.has_video = true;
+  mk.hidden = true;
+  st.hidden = false;
+  st.textContent = ok
+    ? "홍보 영상이 완성됐어요! '영상' 탭에서 확인하고 저장하세요."
+    : "영상이 완성됐어요. '영상' 탭에서 확인하세요.";
+  if (ok) rvShow("video");
+  showToast("홍보 영상이 완성됐어요!");
+}
+function rvVideoFailed(msg) {
+  const mk = $("#rv-make-video"), st = $("#rv-video-status");
+  mk.disabled = false;
+  st.hidden = false;
+  st.textContent = msg || "영상 생성에 실패했어요. 다시 시도해 주세요.";
+}
 // Save a photo/video to the phone's GALLERY. Web Share API (navigator.share with a File)
 // gives the native sheet with "사진에 저장 / Save to Photos" on both iOS and Android — the
 // only reliable way to reach the gallery from a web page (a plain <a download> lands in
@@ -697,8 +639,9 @@ async function saveMediaToGallery(url, filename, label) {
 $("#rv-save").addEventListener("click", () => {
   if (!recentViewItem) return;
   const showingVideo = !$("#rv-video-wrap").hidden;
-  if (showingVideo && recentViewItem.video_url) {
-    saveMediaToGallery(sameOriginPath(recentViewItem.video_url), `${BRAND.slug}_${recentViewItem.token}.mp4`, "영상");
+  if (showingVideo && recentViewItem._videoObjUrl) {
+    // the promo clip was already fetched with the access code into a blob — save that
+    saveMediaToGallery(recentViewItem._videoObjUrl, `${BRAND.slug}_${recentViewItem.token}.mp4`, "영상");
   } else {
     saveMediaToGallery(sameOriginPath(recentViewItem.image_url) || recentImageUrl(recentViewItem.token),
                        `${BRAND.slug}_${recentViewItem.token}.png`, "사진");