feat: major structural update and portfolio API enhancements

.dockerignore

@@ -1,15 +1,15 @@
 Dockerfile
 .dockerignore
 node_modules
-npm-debug.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
 README.md
 .next
 .git
 .gitignore
-.env*.local
-.env.local
-.env.development.local
-.env.test.local
-.env.production.local
+.env
+.env*
 .DS_Store
 *.pem
+*.tsbuildinfo

Dockerfile

@@ -16,8 +16,17 @@ WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 
-# Set environment variables for build
-ENV NEXT_TELEMETRY_DISABLED 1
+# Build-time environment arguments (optional for embedding at build)
+ARG NEXT_PUBLIC_APPWRITE_ENDPOINT
+ARG NEXT_PUBLIC_APPWRITE_PROJECT
+ARG NEXT_PUBLIC_DOMAIN
+ARG NEXT_PUBLIC_APP_URL
+
+ENV NEXT_PUBLIC_APPWRITE_ENDPOINT=$NEXT_PUBLIC_APPWRITE_ENDPOINT
+ENV NEXT_PUBLIC_APPWRITE_PROJECT=$NEXT_PUBLIC_APPWRITE_PROJECT
+ENV NEXT_PUBLIC_DOMAIN=$NEXT_PUBLIC_DOMAIN
+ENV NEXT_PUBLIC_APP_URL=$NEXT_PUBLIC_APP_URL
+ENV NEXT_TELEMETRY_DISABLED=1
 
 # Build the application
 RUN npm run build
@@ -26,8 +35,8 @@ RUN npm run build
 FROM base AS runner
 WORKDIR /app
 
-ENV NODE_ENV production
-ENV NEXT_TELEMETRY_DISABLED 1
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
 
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs
@@ -44,7 +53,10 @@ USER nextjs
 
 EXPOSE 3000
 
-ENV PORT 3000
-ENV HOSTNAME "0.0.0.0"
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:3000/api/health || exit 1
 
 CMD ["node", "server.js"]

app/api/generate-portfolio/route.ts

@@ -1,9 +1,39 @@
 import { NextRequest, NextResponse } from "next/server";
-import { generateJobId, generationStatus } from "./storage";
-import { createAdminClient, DATABASE_ID, JOBS_COLLECTION_ID } from "@/lib/appwrite";
+import { generateJobId, generationStatus, cleanupOldJobs } from "./storage";
+import { createAdminClient, createSessionClient, DATABASE_ID, JOBS_COLLECTION_ID } from "@/lib/appwrite";
 import { PORTFOLIO_TEMPLATES } from "@/lib/templates";
 
-// Fallback function using OpenAI-compatible API (Groq is free and fast)
+// Simple in-memory rate limiter (per-user, 5 requests per minute)
+const rateLimitMap = new Map<string, { count: number; resetAt: number }>();
+const RATE_LIMIT_WINDOW_MS = 60 * 1000;
+const RATE_LIMIT_MAX = 5;
+
+function checkRateLimit(userId: string): boolean {
+  const now = Date.now();
+  const entry = rateLimitMap.get(userId);
+
+  if (!entry || now > entry.resetAt) {
+    rateLimitMap.set(userId, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });
+    return true;
+  }
+
+  if (entry.count >= RATE_LIMIT_MAX) {
+    return false;
+  }
+
+  entry.count++;
+  return true;
+}
+
+// Strip potentially dangerous content from user input
+function sanitizeInput(input: string): string {
+  return input
+    .replace(/<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script>/gi, '')
+    .replace(/<iframe\b[^<]*(?:(?!<\/iframe>)<[^<]*)*<\/iframe>/gi, '')
+    .replace(/on\w+\s*=\s*["'][^"']*["']/gi, '')
+    .substring(0, 10000); // Limit input length
+}
+
 async function generateWithGroq(userInfo: string, templateId?: string) {
   const apiKey = process.env.GROQ_API_KEY;
   if (!apiKey) {
@@ -23,7 +53,7 @@ async function generateWithGroq(userInfo: string, templateId?: string) {
       "Content-Type": "application/json",
     },
     body: JSON.stringify({
-      model: "llama-3.3-70b-versatile", // Free tier available
+      model: "llama-3.3-70b-versatile",
       messages: [
         {
           role: "system",
@@ -68,19 +98,43 @@ Return ONLY the complete HTML code, no explanations or markdown code blocks. The
 
 export async function POST(request: NextRequest) {
   try {
+    // Authentication check
+    let userId: string;
+    try {
+      const { account } = await createSessionClient();
+      const user = await account.get();
+      userId = user.$id;
+    } catch {
+      return NextResponse.json(
+        { error: "Authentication required. Please sign in." },
+        { status: 401 }
+      );
+    }
+
+    // Rate limiting
+    if (!checkRateLimit(userId)) {
+      return NextResponse.json(
+        { error: "Too many requests. Please wait a minute before trying again." },
+        { status: 429 }
+      );
+    }
+
+    // Cleanup old in-memory jobs
+    cleanupOldJobs();
+
     const formData = await request.formData();
     const details = formData.get("details") as string;
     const cvFile = formData.get("cv") as File | null;
-    const selectedModel = formData.get("model") as string || "gemini-2.5-flash";
+    const selectedModel = formData.get("model") as string || "groq";
     const template = formData.get("template") as string || "";
 
-    let userInfo = details || "";
+    let userInfo = details ? sanitizeInput(details) : "";
 
     // If CV file is provided, extract text from it
     if (cvFile) {
       try {
         const cvText = await cvFile.text();
-        userInfo += `\n\nCV Content:\n${cvText}`;
+        userInfo += `\n\nCV Content:\n${sanitizeInput(cvText)}`;
       } catch (fileError) {
         console.error("Error reading CV file:", fileError);
         return NextResponse.json(
@@ -114,14 +168,10 @@ export async function POST(request: NextRequest) {
           updatedAt: new Date().toISOString()
         }
       );
-      console.log(`[${jobId}] Job created in database`);
     } catch (dbError: unknown) {
       console.warn(`[${jobId}] Database unavailable, using in-memory storage:`, (dbError as Error).message);
-      // Fallback to in-memory storage if database collection doesn't exist
       useDatabase = false;
-      generationStatus.set(jobId, { status: 'processing' });
-      console.log(`[${jobId}] Job created in memory (fallback)`);
-      console.log(`[${jobId}] In-memory jobs after creation:`, Array.from(generationStatus.keys()));
+      generationStatus.set(jobId, { status: 'processing', createdAt: Date.now() });
     }
 
     // Start async generation (don't await)
@@ -134,29 +184,23 @@ export async function POST(request: NextRequest) {
     });
   } catch (error: unknown) {
     const err = error as Error;
-    console.error("Error starting portfolio generation:", err);
+    console.error("Error starting portfolio generation:", err.message);
     return NextResponse.json(
-      { error: "Failed to start portfolio generation", details: err.message },
+      { error: "Failed to start portfolio generation" },
       { status: 500 }
     );
   }
 }
 
 // Async generation function
 async function generatePortfolioAsync(jobId: string, userInfo: string, selectedModel: string, useDatabase: boolean = true, templateId?: string) {
-  console.log(`[${jobId}] Starting portfolio generation with Groq using ${useDatabase ? 'database' : 'in-memory'} storage...`);
-  if (templateId) console.log(`[${jobId}] Requested template: ${templateId}`);
-
   try {
     let portfolio = "";
     let usedProvider = "";
 
-    // Use Groq for generation
     try {
-      console.log(`[${jobId}] Using Groq Llama 3.3 70B...`);
       portfolio = await generateWithGroq(userInfo, templateId);
       usedProvider = `Groq Llama 3.3 70B (${templateId || 'Default'})`;
-      console.log(`[${jobId}] Portfolio generated successfully with Groq, length:`, portfolio.length);
     } catch (groqError) {
       console.error(`[${jobId}] Groq failed:`, (groqError as Error).message);
       throw new Error("Portfolio generation failed. Please try again.");
@@ -169,9 +213,6 @@ async function generatePortfolioAsync(jobId: string, userInfo: string, selectedM
 
     // Clean up the response (remove markdown code blocks if present)
     portfolio = portfolio.replace(/```html\n?/g, "").replace(/```\n?/g, "").trim();
-
-    console.log(`[${jobId}] Final portfolio length:`, portfolio.length);
-    console.log(`[${jobId}] Portfolio preview:`, portfolio.substring(0, 200));
 
     // Update status to completed
     if (useDatabase) {
@@ -188,35 +229,25 @@ async function generatePortfolioAsync(jobId: string, userInfo: string, selectedM
             updatedAt: new Date().toISOString()
           }
         );
-        console.log(`[${jobId}] Portfolio generation completed successfully with ${usedProvider} (saved to database)`);
       } catch (dbError) {
-        console.error(`[${jobId}] Failed to update job status in database, falling back to memory:`, dbError);
-        generationStatus.set(jobId, { status: 'completed', portfolio, provider: usedProvider });
+        console.error(`[${jobId}] Database update failed, falling back to memory:`, dbError);
+        generationStatus.set(jobId, { status: 'completed', portfolio, provider: usedProvider, createdAt: Date.now() });
       }
     } else {
-      generationStatus.set(jobId, { status: 'completed', portfolio, provider: usedProvider });
-      console.log(`[${jobId}] Portfolio generation completed successfully with ${usedProvider} (saved to memory)`);
+      generationStatus.set(jobId, { status: 'completed', portfolio, provider: usedProvider, createdAt: Date.now() });
     }
   } catch (error: unknown) {
     const err = error as Error & { status?: number; statusText?: string };
-    console.error(`[${jobId}] Error generating portfolio:`, err);
-    console.error(`[${jobId}] Error details:`, {
-      message: err.message,
-      stack: err.stack,
-      name: err.name,
-      status: err.status,
-      statusText: err.statusText,
-    });
+    console.error(`[${jobId}] Error generating portfolio:`, err.message);
 
-    // Provide more specific error messages
     let errorMessage = "Failed to generate portfolio. Please try again.";
 
     if (err.message?.includes("API key") || err.message?.includes("API_KEY")) {
-      errorMessage = "Invalid API key. Please check your Gemini API key configuration.";
+      errorMessage = "Invalid API key. Please check your API key configuration.";
     } else if (err.message?.includes("quota") || err.message?.includes("limit") || err.message?.includes("429")) {
       errorMessage = "API quota exceeded. Please try again later or check your API limits.";
     } else if (err.message?.includes("timeout")) {
-      errorMessage = "Request timed out. The portfolio generation took too long. Please try with less information.";
+      errorMessage = "Request timed out. Please try with less information.";
     } else if (err.message?.includes("ENOTFOUND") || err.message?.includes("ECONNREFUSED") || err.message?.includes("fetch")) {
       errorMessage = "Unable to connect to AI service. Please check if the API is accessible.";
     } else if (err.message?.includes("model")) {
@@ -240,11 +271,11 @@ async function generatePortfolioAsync(jobId: string, userInfo: string, selectedM
           }
         );
       } catch (dbError) {
-        console.error(`[${jobId}] Failed to update job status in database, falling back to memory:`, dbError);
-        generationStatus.set(jobId, { status: 'failed', error: errorMessage });
+        console.error(`[${jobId}] Failed to update job status:`, dbError);
+        generationStatus.set(jobId, { status: 'failed', error: errorMessage, createdAt: Date.now() });
       }
     } else {
-      generationStatus.set(jobId, { status: 'failed', error: errorMessage });
+      generationStatus.set(jobId, { status: 'failed', error: errorMessage, createdAt: Date.now() });
     }
   }
 }

app/api/generate-portfolio/status/route.ts

@@ -7,8 +7,6 @@ export async function GET(request: NextRequest) {
     const searchParams = request.nextUrl.searchParams;
     const jobId = searchParams.get("jobId");
 
-    console.log(`[Status Check] jobId: ${jobId}`);
-
     if (!jobId) {
       return NextResponse.json({ error: "Job ID required" }, { status: 400 });
     }
@@ -22,9 +20,6 @@ export async function GET(request: NextRequest) {
         jobId
       );
 
-      console.log(`[Status Check] Job ${jobId} status from database:`, job.status);
-
-      // Return job data
       const response: {
         status: string;
         portfolio?: string;
@@ -42,23 +37,14 @@ export async function GET(request: NextRequest) {
       }
 
       return NextResponse.json(response);
-    } catch (dbError: unknown) {
-      const err = dbError as { code?: number; type?: string; message?: string };
-      console.log(`[Status Check] Database check failed (${err.message}), trying in-memory storage...`);
-
+    } catch {
       // Fallback to in-memory storage
       const memoryStatus = generationStatus.get(jobId);
 
       if (memoryStatus) {
-        console.log(`[Status Check] Job ${jobId} found in memory, status:`, memoryStatus.status);
         return NextResponse.json(memoryStatus);
       }
 
-      console.log(`[Status Check] Job ${jobId} not found in database or memory`);
-      console.log(`[Status Check] Current memory job count: ${generationStatus.size}`);
-      if (generationStatus.size > 0) {
-        console.log(`[Status Check] Available jobs in memory:`, Array.from(generationStatus.keys()).slice(0, 5));
-      }
       return NextResponse.json({ error: "Job not found" }, { status: 404 });
     }
   } catch (error) {

app/api/generate-portfolio/storage.ts

@@ -1,18 +1,35 @@
 // Shared in-memory storage for generation status
-// Use globalThis to persist during HMR in development
+// Use globalThis to persist during HMR in development and across module reloads
 const globalForGeneration = globalThis as unknown as {
   generationStatus: Map<string, {
     status: 'processing' | 'completed' | 'failed';
     portfolio?: string;
     error?: string;
     provider?: string;
+    createdAt?: number;
   }>;
 };
 
 export const generationStatus = globalForGeneration.generationStatus || new Map();
 
-if (process.env.NODE_ENV !== 'production') {
-  globalForGeneration.generationStatus = generationStatus;
+// Always persist to globalThis (not just in dev) to survive module reloads
+globalForGeneration.generationStatus = generationStatus;
+
+// Auto-cleanup old jobs (TTL: 10 minutes) to prevent memory leaks
+const JOB_TTL_MS = 10 * 60 * 1000;
+
+export function cleanupOldJobs(): void {
+  const now = Date.now();
+  for (const [jobId, job] of generationStatus.entries()) {
+    if (job.createdAt && now - job.createdAt > JOB_TTL_MS) {
+      generationStatus.delete(jobId);
+    }
+  }
+}
+
+// Run cleanup every 5 minutes
+if (typeof setInterval !== 'undefined') {
+  setInterval(cleanupOldJobs, 5 * 60 * 1000);
 }
 
 // Generate unique job ID

app/api/health/route.ts

@@ -0,0 +1,13 @@
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  return NextResponse.json(
+    {
+      status: "ok",
+      timestamp: new Date().toISOString(),
+      service: "portfolium",
+      uptime: process.uptime(),
+    },
+    { status: 200 }
+  );
+}