Update app.py

app.py

@@ -1,32 +1,29 @@
 from fastapi import FastAPI, Request
 from fastapi.middleware.cors import CORSMiddleware
 import requests
+import os
 
 app = FastAPI()
+app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
 
-# 🔱 සියලුම සන්නිවේදන බාධක ඉවත් කිරීම
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=["*"],
-    allow_methods=["*"],
-    allow_headers=["*"],
-)
-
-API_URL = "https://api.us-west-2.modal.direct/v1/chat/completions"
-API_KEY = "modalresearch_0yKf_z9azDFpOXr-W1N1WsmBUgXf6Ux-yvpVsFQWzks"
+# 🔱 Secrets වලින් Key එක ලබාගැනීම (Invisible to View Source)
+API_KEY = os.getenv("OPENROUTER_KEY")
+MODEL = "tencent/hy3-preview:free"
 
 @app.post("/generate")
 async def generate(request: Request):
     try:
         data = await request.json()
-        headers = {"Authorization": f"Bearer {API_KEY}", "Content-Type": "application/json"}
+        headers = {
+            "Authorization": f"Bearer {API_KEY}",
+            "HTTP-Referer": "https://hf.space",
+            "Content-Type": "application/json"
+        }
         payload = {
-            "model": "zai-org/GLM-5.1-FP8",
-            "messages": [{"role": "user", "content": data.get("prompt")}],
-            "max_tokens": 1024
+            "model": MODEL,
+            "messages": [{"role": "user", "content": data.get("prompt")}]
         }
-        # සර්වර් එක හරහා යන නිසා බ්‍රවුසරයට බාධා කළ නොහැක
-        response = requests.post(API_URL, headers=headers, json=payload)
+        response = requests.post("https://openrouter.ai/api/v1/chat/completions", headers=headers, json=payload)
         return response.json()
     except Exception as e:
         return {"error": str(e)}