add crud for adding providers and models to resources

server/routers/siteResource/addAiModelToSiteResource.ts

@@ -1,11 +1,6 @@
 import { Request, Response, NextFunction } from "express";
 import { z } from "zod";
-import {
-    db,
-    siteResources,
-    siteResourceAiModels,
-    aiModels
-} from "@server/db";
+import { db, siteResources, siteResourceAiModels } from "@server/db";
 import { eq, and } from "drizzle-orm";
 import response from "@server/lib/response";
 import HttpCode from "@server/types/HttpCode";
@@ -13,6 +8,10 @@ import createHttpError from "http-errors";
 import logger from "@server/logger";
 import { fromError } from "zod-validation-error";
 import { OpenAPITags, registry } from "@server/openApi";
+import {
+    assertSiteAllowlistApiEligible,
+    assertModelsBelongToSiteAllowlistProviders
+} from "@server/lib/aiInferenceResource";
 
 const addAiModelToSiteResourceBodySchema = z.strictObject({
     modelId: z.int().positive()
@@ -26,7 +25,7 @@ registry.registerPath({
     method: "post",
     path: "/site-resource/{siteResourceId}/ai-models/add",
     description:
-        "Add a single AI model to a site resource's model restriction allow-list.",
+        "Add a single catalog model to an inference site resource allowlist. Requires at least one attached AI provider in allowlist mode. The model must belong to a provider attached in allowlist mode.",
     tags: [OpenAPITags.PrivateResource],
     request: {
         params: addAiModelToSiteResourceParamsSchema,
@@ -102,33 +101,19 @@ export async function addAiModelToSiteResource(
             );
         }
 
-        if (!siteResource.aiProviderId) {
-            return next(
-                createHttpError(
-                    HttpCode.BAD_REQUEST,
-                    "Site resource has no AI provider linked"
-                )
-            );
+        const eligibleError =
+            await assertSiteAllowlistApiEligible(siteResource);
+        if (eligibleError) {
+            return next(createHttpError(HttpCode.BAD_REQUEST, eligibleError));
         }
 
-        const [model] = await db
-            .select()
-            .from(aiModels)
-            .where(
-                and(
-                    eq(aiModels.modelId, modelId),
-                    eq(aiModels.providerId, siteResource.aiProviderId)
-                )
-            )
-            .limit(1);
-
-        if (!model) {
-            return next(
-                createHttpError(
-                    HttpCode.NOT_FOUND,
-                    "Model not found or does not belong to this site resource's AI provider"
-                )
-            );
+        const modelError = await assertModelsBelongToSiteAllowlistProviders({
+            orgId: siteResource.orgId,
+            siteResourceId,
+            modelIds: [modelId]
+        });
+        if (modelError) {
+            return next(createHttpError(HttpCode.BAD_REQUEST, modelError));
         }
 
         const existingEntry = await db