Momento/memento-note/app/api/ai/echo/route.ts

import { NextRequest, NextResponse } from 'next/server'
import { auth } from '@/auth'
import { memoryEchoService } from '@/lib/ai/services/memory-echo.service'
import { hasUserAiConsent } from '@/lib/consent/server-consent'
import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'

/**
 * GET /api/ai/echo
 * Fetch next Memory Echo insight for current user
 */
export async function GET(req: NextRequest) {
  try {
    const session = await auth()

    if (!session?.user?.id) {
      return NextResponse.json(
        { error: 'Unauthorized' },
        { status: 401 }
      )
    }

    // GDPR AI Consent check
    if (!(await hasUserAiConsent())) {
      return NextResponse.json(
        { error: 'ai_consent_required' },
        { status: 403 }
      )
    }

    // Get next insight (respects frequency limits)
    await reserveUsageOrThrow(session.user.id, 'reformulate')
    const insight = await memoryEchoService.getNextInsight(session.user.id)

    if (!insight) {
      return NextResponse.json(
        {
          insight: null,
          message: 'No new insights available at the moment. Memory Echo will notify you when we discover connections between your notes.'
        }
      )
    }

    return NextResponse.json({ insight })

  } catch (error) {
    if (error instanceof QuotaExceededError) {
      return NextResponse.json(error.toJSON(), { status: 429 })
    }
    console.error('[/api/ai/echo] GET error:', error)
    return NextResponse.json(
      { error: 'Failed to fetch Memory Echo insight' },
      { status: 500 }
    )
  }
}

/**
 * POST /api/ai/echo
 * Submit feedback or mark as viewed
 */
export async function POST(req: NextRequest) {
  try {
    const session = await auth()

    if (!session?.user?.id) {
      return NextResponse.json(
        { error: 'Unauthorized' },
        { status: 401 }
      )
    }

    const body = await req.json()
    const { action, insightId, feedback } = body

    if (action === 'view') {
      // Mark insight as viewed
      await memoryEchoService.markAsViewed(insightId)

      return NextResponse.json({ success: true })

    } else if (action === 'feedback') {
      // Submit feedback (thumbs_up or thumbs_down)
      if (!feedback || !['thumbs_up', 'thumbs_down'].includes(feedback)) {
        return NextResponse.json(
          { error: 'Invalid feedback. Must be thumbs_up or thumbs_down' },
          { status: 400 }
        )
      }

      await memoryEchoService.submitFeedback(insightId, feedback)

      return NextResponse.json({ success: true })

    } else {
      return NextResponse.json(
        { error: 'Invalid action. Must be "view" or "feedback"' },
        { status: 400 }
      )
    }

  } catch (error) {
    console.error('[/api/ai/echo] POST error:', error)
    return NextResponse.json(
      { error: 'Failed to process request' },
      { status: 500 }
    )
  }
}