Upload 4 files

app/core/config.py

@@ -1,7 +1,7 @@
 from functools import lru_cache
 from typing import Literal
 
-from pydantic import Field
+from pydantic import Field, model_validator
 from pydantic_settings import BaseSettings, SettingsConfigDict
 
 
@@ -13,8 +13,19 @@ class Settings(BaseSettings):
     supabase_anon_key: str = ""
     supabase_service_role_key: str = ""
     supabase_jwt_audience: str = "authenticated"
-    ai_provider: str = "mock"
+    ai_provider: Literal["openai", "gemini", "openrouter", "deterministic"] = "openai"
     openai_api_key: str = ""
+    openai_model: str = Field(
+        default="gpt-5.5", pattern=r"^[A-Za-z0-9][A-Za-z0-9._:/-]*$"
+    )
+    gemini_api_key: str = ""
+    gemini_model: str = Field(
+        default="gemini-2.5-pro", pattern=r"^[A-Za-z0-9][A-Za-z0-9._:/-]*$"
+    )
+    openrouter_api_key: str = ""
+    openrouter_model: str = Field(
+        default="openai/gpt-5.5", pattern=r"^[A-Za-z0-9][A-Za-z0-9._:/-]*$"
+    )
     n8n_base_url: str = ""
     n8n_api_key: str = ""
     rate_limit_per_minute: int = Field(default=120, ge=10, le=10_000)
@@ -26,6 +37,31 @@ class Settings(BaseSettings):
         extra="ignore",
     )
 
+    @model_validator(mode="after")
+    def validate_production_configuration(self) -> "Settings":
+        if self.environment != "production":
+            return self
+        missing = []
+        if not self.auth_required:
+            missing.append("AUTH_REQUIRED=true")
+        if not self.supabase_url:
+            missing.append("SUPABASE_URL")
+        if not self.supabase_service_role_key:
+            missing.append("SUPABASE_SERVICE_ROLE_KEY")
+        provider_keys = {
+            "openai": (self.openai_api_key, "OPENAI_API_KEY"),
+            "gemini": (self.gemini_api_key, "GEMINI_API_KEY"),
+            "openrouter": (self.openrouter_api_key, "OPENROUTER_API_KEY"),
+        }
+        provider_key = provider_keys.get(self.ai_provider)
+        if provider_key and not provider_key[0]:
+            missing.append(provider_key[1])
+        if missing:
+            raise ValueError(
+                "Production configuration is incomplete: " + ", ".join(missing)
+            )
+        return self
+
     @property
     def allowed_origins(self) -> list[str]:
         return [origin.strip() for origin in self.frontend_url.split(",") if origin.strip()]

app/core/errors.py

@@ -0,0 +1,3 @@
+class ServiceConfigurationError(RuntimeError):
+    """Raised when an operation requires an unconfigured external service."""
+