fix(quotas): unifier le décompte IA (BYOK, rollback) et combler les fuites

Centralise la réserve via ai-quota, corrige admin unavailable (-1), brancher les routes sans quota et le host-pays brainstorm, avec usage-meter élargi, noms de clusters, MCP et ajustements dashboard/insights.

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/api/ai/describe-image/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getAISettings } from '@/app/actions/ai-settings'
 import { describeImages } from '@/lib/ai/services/image-description.service'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(req: NextRequest) {
   try {
@@ -11,7 +12,6 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
     }
 
-    // GDPR AI Consent check
     if (!(await hasUserAiConsent())) {
       return NextResponse.json({ error: 'ai_consent_required' }, { status: 403 })
     }
@@ -27,23 +27,31 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'imageUrls must be a non-empty array' }, { status: 400 })
     }
 
-    const result = await describeImages(
-      imageUrls,
-      mode === 'title' ? 'title' : 'description',
-      language || 'fr'
+    const isTitleMode = mode === 'title'
+    const feature = isTitleMode ? 'auto_title' : 'reformulate'
+    const lane = isTitleMode ? 'tags' : 'chat'
+
+    const result = await withAiQuota(
+      session.user.id,
+      feature,
+      () => describeImages(
+        imageUrls,
+        isTitleMode ? 'title' : 'description',
+        language || 'fr'
+      ),
+      { lane },
     )
 
-    // For title mode, return suggestions in same format as /api/ai/title-suggestions
-    if (mode === 'title' && result.suggestions) {
+    if (isTitleMode && result.suggestions) {
       return NextResponse.json({ suggestions: result.suggestions })
     }
 
     return NextResponse.json(result)
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[describe-image] Error:', error)
-    return NextResponse.json(
-      { error: error.message || 'Failed to describe image' },
-      { status: 500 }
-    )
+    const message = error instanceof Error ? error.message : 'Failed to describe image'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }