The Booking Engine contains a Bunny-backed maintenance-media path. The source
contract is verified; the Bunny account, storage zone, pull zone, CDN hostname,
credentials, and fresh upload/delivery state are not.
Source-implemented role
The verified Engine source can:- fetch Twilio media with server-held provider credentials;
- decode attachment content included in a Postmark payload;
- upload media bytes to Bunny Storage;
- return a CDN-backed attachment URL after a successful upload; and
- preserve typed provider-fallback/storage-error evidence when the path cannot complete.
Source configuration contract
The source expects server-side configuration for:- storage zone;
- storage host;
- CDN base URL; and
- storage credential.
Media flows
Twilio source path:Twilio media referenceauthenticated Engine fetchBunny upload attemptstored CDN evidence or provider fallbackAdmin renders Engine-returned truth
Postmark source path:
Postmark attachment payloadEngine validates available contentBunny upload attemptstored CDN evidence or provider fallbackAdmin renders Engine-returned truth
The Postmark path is implemented in current source when attachment content is
present. The old blanket statement that Postmark attachment storage was
deferred is no longer accurate.
Provider and delivery boundary
Not reverified on 2026-08-12:- Bunny account or zone configuration;
- configured storage/CDN host values;
- credential validity;
- a fresh Twilio or Postmark media upload;
- CDN availability for a newly stored object; and
- browser rendering of that same object.