Arnaud
623e5bcd34
Chatbot (general assistant + per-recipe Q&A) now resolves its default model from its own site setting (DEFAULT_CHAT_PROVIDER/MODEL) instead of sharing the generic "text" use case with recipe generation, so admins can point it at a different model. Added AI_TOOL_CALLING_ENABLED: turns off the chatbot's createRecipe/ addToShoppingList tools (and the forced-retry pass) for models that don't reliably support tool calling — it falls back to plain text answers. Simplified the admin AI Configuration page: it showed provider keys and routing settings twice (a read-only card, then an identical edit form). Merged into one editable section; the resolved fallback provider is now a one-line note instead of its own card. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
65 lines
1.9 KiB
TypeScript
65 lines
1.9 KiB
TypeScript
import { type NextRequest, NextResponse } from "next/server";
|
|
import { headers } from "next/headers";
|
|
import { auth } from "@/lib/auth/server";
|
|
import { db, users, auditLogs, eq } from "@epicure/db";
|
|
import { setSiteSetting, type SiteSettingKey } from "@/lib/site-settings";
|
|
import { randomUUID } from "crypto";
|
|
|
|
const ALLOWED_KEYS: SiteSettingKey[] = [
|
|
"OPENAI_API_KEY",
|
|
"ANTHROPIC_API_KEY",
|
|
"OPENROUTER_API_KEY",
|
|
"OPENROUTER_DEFAULT_MODEL",
|
|
"OLLAMA_BASE_URL",
|
|
"NEXT_PUBLIC_VAPID_PUBLIC_KEY",
|
|
"VAPID_PRIVATE_KEY",
|
|
"SIGNUPS_DISABLED",
|
|
"DEFAULT_TEXT_PROVIDER",
|
|
"DEFAULT_TEXT_MODEL",
|
|
"DEFAULT_VISION_PROVIDER",
|
|
"DEFAULT_VISION_MODEL",
|
|
"DEFAULT_MEAL_PLAN_PROVIDER",
|
|
"DEFAULT_MEAL_PLAN_MODEL",
|
|
"DEFAULT_CHAT_PROVIDER",
|
|
"DEFAULT_CHAT_MODEL",
|
|
"AI_TOOL_CALLING_ENABLED",
|
|
"GITEA_URL",
|
|
"GITEA_TOKEN",
|
|
"GITEA_REPO",
|
|
];
|
|
|
|
async function requireAdmin() {
|
|
const session = await auth.api.getSession({ headers: await headers() });
|
|
if (!session) return null;
|
|
const [dbUser] = await db.select({ role: users.role }).from(users).where(eq(users.id, session.user.id));
|
|
if (dbUser?.role !== "admin") return null;
|
|
return session;
|
|
}
|
|
|
|
export async function PUT(req: NextRequest) {
|
|
const session = await requireAdmin();
|
|
if (!session) return NextResponse.json({ error: "Forbidden" }, { status: 403 });
|
|
|
|
const body = (await req.json()) as Record<string, string | null>;
|
|
|
|
const changed: string[] = [];
|
|
for (const [key, value] of Object.entries(body)) {
|
|
if (!ALLOWED_KEYS.includes(key as SiteSettingKey)) continue;
|
|
await setSiteSetting(key as SiteSettingKey, value, session.user.id);
|
|
changed.push(key);
|
|
}
|
|
|
|
if (changed.length > 0) {
|
|
await db.insert(auditLogs).values({
|
|
id: randomUUID(),
|
|
userId: session.user.id,
|
|
action: "admin.settings.update",
|
|
targetType: "site_settings",
|
|
metadata: JSON.stringify({ keys: changed }),
|
|
createdAt: new Date(),
|
|
});
|
|
}
|
|
|
|
return NextResponse.json({ ok: true });
|
|
}
|