import { NextRequest, NextResponse } from "next/server"; import { z } from "zod"; import { requireSessionOrApiKey } from "@/lib/api-auth"; import { applyRateLimit } from "@/lib/rate-limit"; import { withAiQuota, resolveAiConfigOrError } from "@/lib/ai/ai-error"; import { generateRecipe } from "@/lib/ai/features/generate-recipe"; import { getUserPrivateBio } from "@/lib/ai/user-bio"; import { withUserKey } from "@/lib/ai/resolve-user-key"; const Schema = z.object({ prompt: z.string().min(3).max(500), language: z.string().max(10).default("en"), difficulty: z.enum(["easy", "medium", "hard"]).optional(), provider: z.enum(["openai", "anthropic", "openrouter", "ollama"]).optional(), model: z.string().optional(), }); export async function POST(req: NextRequest) { const { session, response } = await requireSessionOrApiKey(req); if (response) return response; const body = await req.json() as unknown; const parsed = Schema.safeParse(body); if (!parsed.success) { return NextResponse.json({ error: "Validation error", issues: parsed.error.issues }, { status: 400 }); } const limited = await applyRateLimit(`rl:ai:${session!.user.id}`, 10, 60); if (limited) return limited; const privateBio = await getUserPrivateBio(session!.user.id); const configResult = await resolveAiConfigOrError(() => withUserKey(session!.user.id, { provider: parsed.data.provider, model: parsed.data.model }) ); if (!configResult.ok) return configResult.response; const aiConfig = configResult.data; const result = await withAiQuota(session!.user.id, session!.user.tier as "free" | "pro" | "family", () => generateRecipe(parsed.data.prompt, { ...aiConfig, language: parsed.data.language, difficulty: parsed.data.difficulty, userContext: privateBio ?? undefined, }), { skipQuota: aiConfig.isByok } ); if (!result.ok) return result.response; return NextResponse.json(result.data); }