ai rec works

as intended, needs refinments

apps/admin/src/app/api/recommendations/approve/route.ts

@@ -0,0 +1,49 @@
+import { NextResponse } from "next/server";
+import { getDatabase } from "@/lib/database";
+
+export async function POST(req: Request) {
+    try {
+        const { recommendationId, status, approvedBy } = await req.json();
+
+        if (!recommendationId || !status) {
+            return NextResponse.json(
+                { error: "Recommendation ID and status are required" },
+                { status: 400 }
+            );
+        }
+
+        const db = await getDatabase();
+
+        // Update recommendation status
+        const updates: any = {
+            status,
+            approvedAt: status === "approved" ? new Date() : undefined,
+            approvedBy: status === "approved" ? approvedBy : undefined,
+        };
+
+        // Remove undefined keys
+        Object.keys(updates).forEach(key => updates[key] === undefined && delete updates[key]);
+
+        const updatedRecommendation = await db.updateRecommendation(recommendationId, updates);
+
+        if (!updatedRecommendation) {
+            return NextResponse.json(
+                { error: "Recommendation not found" },
+                { status: 404 }
+            );
+        }
+
+        // If approved, create a notification for the user
+        // Note: IDatabase doesn't have createNotification yet, so we'll skip it for now
+        // or we need to add it to IDatabase/SQLiteDatabase
+        // For now, let's assume the notification is handled elsewhere or add it later
+
+        return NextResponse.json(updatedRecommendation);
+    } catch (error) {
+        console.error("Error approving recommendation:", error);
+        return NextResponse.json(
+            { error: "Internal server error" },
+            { status: 500 }
+        );
+    }
+}

apps/admin/src/app/api/recommendations/generate/route.ts

@@ -0,0 +1,120 @@
+import { NextResponse } from "next/server";
+import { getDatabase } from "@/lib/database";
+
+export async function POST(req: Request) {
+    try {
+        const { userId } = await req.json();
+
+        if (!userId) {
+            return NextResponse.json({ error: "User ID is required" }, { status: 400 });
+        }
+
+        const db = await getDatabase();
+
+        // Fetch fitness profile
+        const profile = await db.getFitnessProfileByUserId(userId);
+
+        if (!profile) {
+            return NextResponse.json(
+                { error: "Fitness profile not found for this user" },
+                { status: 404 }
+            );
+        }
+
+        // Construct prompt for Ollama
+        const prompt = `
+      You are a professional fitness trainer and nutritionist.
+      Generate a detailed daily recommendation for a user with the following profile:
+      - Height: ${profile.height} cm
+      - Weight: ${profile.weight} kg
+      - Age: ${profile.age}
+      - Gender: ${profile.gender}
+      - Goal: ${profile.fitnessGoals.join(", ")}
+      - Activity Level: ${profile.activityLevel}
+      - Medical Conditions: ${profile.medicalConditions || "None"}
+      - Injuries: ${profile.injuries || "None"}
+
+      Please provide the response in the following JSON format ONLY, no other text. Do not use markdown formatting or code blocks:
+      {
+        "recommendationText": "General advice and motivation for today.",
+        "activityPlan": "Detailed workout or activity plan for today.",
+        "dietPlan": "Detailed meal plan for today."
+      }
+    `;
+
+        // Call Ollama
+        const ollamaResponse = await fetch("http://localhost:11434/api/generate", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                model: "gemma3:latest", // Make sure this model is pulled
+                prompt: prompt,
+                stream: false,
+                format: "json",
+            }),
+        });
+
+        if (!ollamaResponse.ok) {
+            console.error("Ollama API error:", await ollamaResponse.text());
+            return NextResponse.json(
+                { error: "Failed to generate recommendation from AI service" },
+                { status: 500 }
+            );
+        }
+
+        const aiData = await ollamaResponse.json();
+        console.log("Raw AI Response:", aiData.response);
+
+        let parsedResponse;
+        try {
+            // Helper to clean up the response
+            let cleanResponse = aiData.response.trim();
+
+            // Remove markdown code blocks if present
+            if (cleanResponse.startsWith("```json")) {
+                cleanResponse = cleanResponse.replace(/^```json\s*/, "").replace(/\s*```$/, "");
+            } else if (cleanResponse.startsWith("```")) {
+                cleanResponse = cleanResponse.replace(/^```\s*/, "").replace(/\s*```$/, "");
+            }
+
+            // Find the first '{' and last '}' to extract the JSON object
+            const firstBrace = cleanResponse.indexOf("{");
+            const lastBrace = cleanResponse.lastIndexOf("}");
+
+            if (firstBrace !== -1 && lastBrace !== -1) {
+                cleanResponse = cleanResponse.substring(firstBrace, lastBrace + 1);
+            }
+
+            parsedResponse = JSON.parse(cleanResponse);
+        } catch (e) {
+            // Fallback if model doesn't return perfect JSON despite instruction
+            console.error("Failed to parse AI response:", aiData.response);
+            return NextResponse.json(
+                { error: "Invalid response format from AI model" },
+                { status: 500 }
+            );
+        }
+
+        // Save to database
+        const recommendation = await db.createRecommendation({
+            id: crypto.randomUUID(),
+            userId,
+            fitnessProfileId: profile.userId, // Using userId as ID for now since it's 1:1
+            type: 'ai_plan',
+            content: parsedResponse.recommendationText,
+            activityPlan: parsedResponse.activityPlan,
+            dietPlan: parsedResponse.dietPlan,
+            status: 'pending'
+        });
+
+        return NextResponse.json(recommendation);
+    } catch (error) {
+        console.error("Error generating recommendation:", error);
+        return NextResponse.json(
+            { error: "Internal server error" },
+            { status: 500 }
+        );
+    }
+}

apps/admin/src/app/api/recommendations/route.ts

@@ -12,12 +12,21 @@ export async function GET(request: Request) {
         const { searchParams } = new URL(request.url)
         const targetUserId = searchParams.get('userId')
 
-        if (!targetUserId) {
-            return new NextResponse('User ID is required', { status: 400 })
-        }
-
         const db = await getDatabase()
 
+        // If no userId provided, check if staff and return all recommendations
+        if (!targetUserId) {
+            const currentUser = await db.getUserById(currentUserId)
+            const isStaff = currentUser?.role === 'admin' || currentUser?.role === 'superAdmin' || currentUser?.role === 'trainer'
+
+            if (!isStaff) {
+                return new NextResponse('User ID is required', { status: 400 })
+            }
+
+            const recommendations = await db.getAllRecommendations()
+            return NextResponse.json({ recommendations })
+        }
+
         // Check permissions: Users can view their own, Admins/Trainers can view anyone's
         if (currentUserId !== targetUserId) {
             const currentUser = await db.getUserById(currentUserId)
@@ -52,21 +61,37 @@ export async function POST(request: Request) {
         }
 
         const body = await request.json()
-        const { userId, type, content, status } = body
+        const { userId, fitnessProfileId, recommendationText, activityPlan, dietPlan, status, type, content } = body
 
-        if (!userId || !type || !content) {
-            return new NextResponse('Missing required fields', { status: 400 })
+        // Handle AI Plan (Legacy/Specific)
+        if (recommendationText && activityPlan && dietPlan && fitnessProfileId) {
+            const recommendation = await db.createRecommendation({
+                id: crypto.randomUUID(),
+                userId,
+                fitnessProfileId,
+                type: 'ai_plan',
+                content: recommendationText,
+                activityPlan,
+                dietPlan,
+                status: status || 'pending'
+            })
+            return NextResponse.json(recommendation)
         }
 
-        const recommendation = await db.createRecommendation({
-            id: crypto.randomUUID(),
-            userId,
-            type,
-            content,
-            status: status || 'pending'
-        })
+        // Handle User Goal (Generic)
+        if (type && content) {
+            const recommendation = await db.createRecommendation({
+                id: crypto.randomUUID(),
+                userId,
+                type,
+                content,
+                status: status || 'pending'
+            })
+            return NextResponse.json(recommendation)
+        }
+
+        return NextResponse.json('Missing required fields', { status: 400 })
 
-        return NextResponse.json(recommendation)
     } catch (error) {
         console.error('Error creating recommendation:', error)
         return new NextResponse('Internal Server Error', { status: 500 })
@@ -81,7 +106,7 @@ export async function PUT(request: Request) {
         }
 
         const body = await request.json()
-        const { id, status, content } = body
+        const { id, status, recommendationText, activityPlan, dietPlan, content } = body
 
         if (!id) {
             return new NextResponse('Recommendation ID is required', { status: 400 })
@@ -89,13 +114,12 @@ export async function PUT(request: Request) {
 
         const db = await getDatabase()
 
-        // Users can update status (e.g. mark as completed), Staff can update content too
-        // Ideally we'd check ownership for status update, but for now let's allow it if they have the ID
-        // A stricter check would be: fetch recommendation, check if userId matches currentUserId OR if currentUser is staff
-
         const updated = await db.updateRecommendation(id, {
             ...(status && { status }),
-            ...(content && { content })
+            ...(recommendationText && { content: recommendationText }), // Map legacy field
+            ...(content && { content }),
+            ...(activityPlan && { activityPlan }),
+            ...(dietPlan && { dietPlan })
         })
 
         return NextResponse.json(updated)

apps/admin/src/app/api/users/route.ts

@@ -74,7 +74,7 @@ export async function POST(request: NextRequest) {
     }
 
     // Enforce Hierarchy
-    const allowed = {
+    const allowed: Record<string, string[]> = {
       superAdmin: ["admin", "trainer", "client"],
       admin: ["trainer", "client"],
       trainer: ["client"],