From 32d787b810ba34eed6aa9115e9a0325e00a50482 Mon Sep 17 00:00:00 2001
From: cartermp <pcarter@fastmail.com>
Date: Mon, 6 Apr 2026 10:29:34 -0700
Subject: [PATCH] more

---
 app/api/chat/route.ts | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/app/api/chat/route.ts b/app/api/chat/route.ts
index e19802d..be5b86b 100644
--- a/app/api/chat/route.ts
+++ b/app/api/chat/route.ts
@@ -143,6 +143,14 @@ export async function POST(req: NextRequest) {
     ctx.status = 400; ctx.error = 'invalid_model';
     return new Response(`Unknown model: ${model}`, { status: 400 });
   }
+  if (systemPrompt !== undefined && typeof systemPrompt !== 'string') {
+    ctx.status = 400; ctx.error = 'invalid_system_prompt';
+    return new Response('Invalid systemPrompt', { status: 400 });
+  }
+  if (webSearch !== undefined && typeof webSearch !== 'boolean') {
+    ctx.status = 400; ctx.error = 'invalid_web_search';
+    return new Response('Invalid webSearch', { status: 400 });
+  }
 
   const provider = getProvider(model);
   ctx.model = model;
-- 
2.51.2