fix: route dashboard reads through AWS API

Author: richiemcilroy

apps/site/lib/asset-api.ts

@@ -1016,7 +1016,7 @@ export async function fetchAssetThumbnail(
 
   const upstream = await controlPlaneFetch(
     auth,
-    `/internal/site/assets/${encodeURIComponent(normalizedAssetId)}/thumbnail`,
+    `/v1/site/assets/${encodeURIComponent(normalizedAssetId)}/thumbnail`,
     {
       headers: { accept: "image/jpeg,image/*;q=0.8,*/*;q=0.5" },
     }
@@ -1129,7 +1129,7 @@ export async function fetchAssetPlayerTelemetry(
   if (options.playbackSessionId) params.set("playback_session_id", options.playbackSessionId);
   const upstream = await controlPlaneFetch(
     auth,
-    `/internal/site/assets/${encodeURIComponent(normalizedAssetId)}/player-events?${params}`
+    `/v1/site/assets/${encodeURIComponent(normalizedAssetId)}/player-events?${params}`
   );
   const data = await readUpstreamJson(upstream);
   if (!isRecord(data) || safeAssetId(data.asset_id) !== normalizedAssetId || !Array.isArray(data.events)) {

apps/site/lib/asset-routes.test.mts

@@ -152,7 +152,7 @@ test("asset thumbnail client streams binary thumbnail responses without playback
       );
 
       assert.equal(calls.length, 1);
-      assert.equal(calls[0].url, "http://127.0.0.1:4000/internal/site/assets/00000000-0000-0000-0000-000000000001/thumbnail");
+      assert.equal(calls[0].url, "http://127.0.0.1:4000/v1/site/assets/00000000-0000-0000-0000-000000000001/thumbnail");
       assert.equal(calls[0].accept, "image/jpeg,image/*;q=0.8,*/*;q=0.5");
       assert.equal(response.headers.get("content-type"), "image/jpeg");
       assert.equal(response.headers.get("cache-control"), "private, max-age=31536000, immutable");
@@ -168,7 +168,7 @@ test("asset player telemetry client reads durable events and strips invalid rows
     await withMockFetch(async (url, init) => {
       assert.equal(
         String(url),
-        `http://127.0.0.1:4000/internal/site/assets/${assetId}/player-events?limit=20`
+        `http://127.0.0.1:4000/v1/site/assets/${assetId}/player-events?limit=20`
       );
       const headers = new Headers(init?.headers);
       assert.equal(headers.get("x-rend-site-token"), "site-internal-token");

services/rend-api/src/main.rs

@@ -2086,7 +2086,7 @@ fn build_app(state: Arc<AppState>, request_timeout: Duration) -> Router {
         .merge(metrics_routes)
         .merge(authenticated_routes)
         .merge(site_player_telemetry_routes)
-        .nest("/internal/site", site_internal_routes)
+        .nest("/v1/site", site_internal_routes)
         .nest("/internal/edges", edge_routes)
         .nest("/internal/operator", operator_routes)
         .nest("/internal/telemetry", telemetry_routes);

services/rend-api/src/tests.rs

@@ -992,7 +992,7 @@ async fn playback_analytics_endpoint_requires_dev_api_key() {
 #[tokio::test]
 async fn recent_player_events_endpoint_requires_dev_api_key() {
     let app = build_app(test_state(), Duration::from_secs(10));
-    let path = "/internal/site/assets/00000000-0000-0000-0000-000000000001/player-events";
+    let path = "/v1/site/assets/00000000-0000-0000-0000-000000000001/player-events";
 
     let response = route_response(app.clone(), path, None).await;
     assert_eq!(response.status(), StatusCode::UNAUTHORIZED);