yuanzonghao
65b7daff0b
Address PR-agent review findings: - resolveVoice fast path: replace ambiguous boolean comparison (voiceProvider === "stepfun") === serverStepfun with explicit per-provider equality checks. Prevents an undefined or unknown provider from matching the non-stepfun (xiaomi) branch by accident. - /api/beat-audio route: reject requests whose voice.provider is present but not in the VALID_TTS_PROVIDERS whitelist (e.g. "azure"). Previously such a request would pass validation when fallback fields were also present, and resolveVoice might use the invalid voice directly instead of falling back to reprovision — producing a silent beat instead of a voiced one.
59 lines
2.2 KiB
TypeScript
59 lines
2.2 KiB
TypeScript
import { requestBeatAudio } from "@infiplot/engine";
|
|
import type { BeatAudioRequest } from "@infiplot/types";
|
|
import { NextResponse } from "next/server";
|
|
import { loadEngineConfig } from "@/lib/config";
|
|
import { requireUser } from "@/lib/supabase/guard";
|
|
|
|
export const runtime = "nodejs";
|
|
|
|
export async function POST(req: Request) {
|
|
const auth = await requireUser();
|
|
if (auth instanceof NextResponse) return auth;
|
|
|
|
let body: BeatAudioRequest;
|
|
try {
|
|
body = (await req.json()) as BeatAudioRequest;
|
|
} catch {
|
|
return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
|
|
}
|
|
|
|
// Voice is now optional — when the server runs StepFun, the client omits
|
|
// the ~220KB Xiaomi reference audio and sends stepfunVoiceId /
|
|
// voiceDescription instead (saves Fast Origin Transfer bandwidth). The
|
|
// engine's resolveVoice re-provisions on a provider mismatch. We only
|
|
// require the beat text + SOMETHING to synthesize from.
|
|
const VALID_TTS_PROVIDERS = ["xiaomi", "stepfun"];
|
|
const hasInvalidVoiceProvider =
|
|
!!body.voice?.provider && !VALID_TTS_PROVIDERS.includes(body.voice.provider);
|
|
const hasVoice =
|
|
!!body.voice?.provider && VALID_TTS_PROVIDERS.includes(body.voice.provider);
|
|
const hasFallback =
|
|
!!body.stepfunVoiceId || !!body.voiceDescription;
|
|
if (
|
|
!body.beat?.id ||
|
|
!body.beat?.line ||
|
|
hasInvalidVoiceProvider ||
|
|
(!hasVoice && !hasFallback)
|
|
) {
|
|
return NextResponse.json(
|
|
{ error: "beat.id and beat.line are required, plus either voice.provider (xiaomi|stepfun) or stepfunVoiceId/voiceDescription" },
|
|
{ status: 400 },
|
|
);
|
|
}
|
|
|
|
try {
|
|
const config = loadEngineConfig();
|
|
const result = await requestBeatAudio(config, body);
|
|
if (!result.audio) return new Response(null, { status: 204 });
|
|
const binary = Buffer.from(result.audio.base64, "base64");
|
|
return new Response(binary, {
|
|
headers: { "Content-Type": result.audio.mime },
|
|
});
|
|
} catch (err) {
|
|
// Engine already swallows synth errors and returns audio:null. Anything
|
|
// that reaches here is config-level — surface so the client can log it.
|
|
const message = err instanceof Error ? err.message : "Unknown error";
|
|
return NextResponse.json({ error: message }, { status: 500 });
|
|
}
|
|
}
|