fix(botid): re-add bot protection to demo branch

app/(chat)/api/chat/route.ts

@@ -1,3 +1,4 @@
+import { checkBotId } from "botid/server";
 import { geolocation, ipAddress } from "@vercel/functions";
 import {
   convertToModelMessages,
@@ -64,7 +65,10 @@ export async function POST(request: Request) {
     const { id, message, messages, selectedChatModel, selectedVisibilityType } =
       requestBody;
 
-    const session = await auth();
+    const [, session] = await Promise.all([
+      checkBotId().catch(() => null),
+      auth(),
+    ]);
 
     if (!session?.user) {
       return new ChatbotError("unauthorized:chat").toResponse();
@@ -80,10 +84,10 @@ export async function POST(request: Request) {
 
     const messageCount = await getMessageCountByUserId({
       id: session.user.id,
-      differenceInHours: 24,
+      differenceInHours: 1,
     });
 
-    if (messageCount > entitlementsByUserType[userType].maxMessagesPerDay) {
+    if (messageCount > entitlementsByUserType[userType].maxMessagesPerHour) {
       return new ChatbotError("rate_limit:chat").toResponse();
     }
 

instrumentation-client.ts

@@ -1 +1,10 @@
-export {};
+import { initBotId } from "botid/client/core";
+
+initBotId({
+  protect: [
+    {
+      path: "/api/chat",
+      method: "POST",
+    },
+  ],
+});

lib/ai/entitlements.ts

@@ -1,22 +1,22 @@
 import type { UserType } from "@/app/(auth)/auth";
 
 type Entitlements = {
-  maxMessagesPerDay: number;
+  maxMessagesPerHour: number;
 };
 
 export const entitlementsByUserType: Record<UserType, Entitlements> = {
   /*
    * For users without an account
    */
   guest: {
-    maxMessagesPerDay: 10,
+    maxMessagesPerHour: 10,
   },
 
   /*
    * For users with an account
    */
   regular: {
-    maxMessagesPerDay: 10,
+    maxMessagesPerHour: 10,
   },
 
   /*

lib/ratelimit.ts

@@ -3,8 +3,8 @@ import { createClient } from "redis";
 import { isProductionEnvironment } from "@/lib/constants";
 import { ChatbotError } from "@/lib/errors";
 
-const MAX_MESSAGES_PER_DAY = 10;
-const TTL_SECONDS = 60 * 60 * 24;
+const MAX_MESSAGES = 10;
+const TTL_SECONDS = 60 * 60;
 
 let client: ReturnType<typeof createClient> | null = null;
 
@@ -37,7 +37,7 @@ export async function checkIpRateLimit(ip: string | undefined) {
       .expire(key, TTL_SECONDS, "NX")
       .exec();
 
-    if (typeof count === "number" && count > MAX_MESSAGES_PER_DAY) {
+    if (typeof count === "number" && count > MAX_MESSAGES) {
       throw new ChatbotError("rate_limit:chat");
     }
   } catch (error) {

next.config.ts

@@ -1,3 +1,4 @@
+import { withBotId } from "botid/next/config";
 import type { NextConfig } from "next";
 
 const basePath = "/demo";
@@ -24,4 +25,4 @@ const nextConfig: NextConfig = {
   },
 };
 
-export default nextConfig;
+export default withBotId(nextConfig);

package.json

@@ -49,6 +49,7 @@
     "@xyflow/react": "^12.10.0",
     "ai": "6.0.37",
     "bcrypt-ts": "^5.0.2",
+    "botid": "^1.5.11",
     "class-variance-authority": "^0.7.1",
     "classnames": "^2.5.1",
     "clsx": "^2.1.1",