@loom-framework/core 0.1.0-alpha.15 → 0.1.0-alpha.150

package/dist/backend/routes/auth-routes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Authentication Routes
+ *
+ * POST /api/v1/auth/login      - Login with username/password
+ * POST /api/v1/auth/register   - Register new user (admin only)
+ * POST /api/v1/auth/logout     - Logout (revoke refresh token)
+ * POST /api/v1/auth/refresh    - Refresh access token
+ * GET  /api/v1/auth/whoami     - Current user info
+ * GET  /api/v1/auth/roles      - List roles + permissions
+ * GET  /api/v1/auth/users      - List users (admin only)
+ * POST /api/v1/auth/users      - Create user (admin only)
+ * GET  /api/v1/auth/users/:id  - Get user
+ * PUT  /api/v1/auth/users/:id  - Update user (admin only)
+ * DELETE /api/v1/auth/users/:id - Delete user (admin only)
+ */
+import type { FastifyInstance } from 'fastify';
+import type { AuthConfig } from '../../types/auth.js';
+import type { UserStore } from '../auth/user-store.js';
+import type { TokenStore } from '../auth/token-store.js';
+export interface AuthRouteOptions {
+    config: AuthConfig;
+    userStore: UserStore;
+    tokenStore: TokenStore;
+}
+export declare function registerAuthRoutes(fastify: FastifyInstance, options: AuthRouteOptions): void;
+//# sourceMappingURL=auth-routes.d.ts.map

package/dist/backend/routes/auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.d.ts","sourceRoot":"","sources":["../../../src/backend/routes/auth-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAMzD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAuU5F"}

package/dist/backend/routes/auth-routes.js

@@ -0,0 +1,301 @@
+/**
+ * Authentication Routes
+ *
+ * POST /api/v1/auth/login      - Login with username/password
+ * POST /api/v1/auth/register   - Register new user (admin only)
+ * POST /api/v1/auth/logout     - Logout (revoke refresh token)
+ * POST /api/v1/auth/refresh    - Refresh access token
+ * GET  /api/v1/auth/whoami     - Current user info
+ * GET  /api/v1/auth/roles      - List roles + permissions
+ * GET  /api/v1/auth/users      - List users (admin only)
+ * POST /api/v1/auth/users      - Create user (admin only)
+ * GET  /api/v1/auth/users/:id  - Get user
+ * PUT  /api/v1/auth/users/:id  - Update user (admin only)
+ * DELETE /api/v1/auth/users/:id - Delete user (admin only)
+ */
+import { validatePasswordStrength } from '../auth/password.js';
+import { signAccessToken, signRefreshToken, refreshAccessToken } from '../auth/jwt.js';
+import { resolvePermission, hasPermission } from '../auth/rbac.js';
+import { issueServiceToken } from '../auth/service-token.js';
+export function registerAuthRoutes(fastify, options) {
+    const { config, userStore, tokenStore } = options;
+    const isAdmin = (role) => hasPermission(resolvePermission('*', role, config), 'admin');
+    // POST /api/v1/auth/login
+    fastify.post('/api/v1/auth/login', async (req, reply) => {
+        const { username, password } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const user = await userStore.verifyCredentials(username, password);
+        if (!user) {
+            reply.code(401).send({ error: 'Invalid credentials' });
+            return;
+        }
+        const payload = { userId: user.userId, username: user.username, role: user.role };
+        const accessToken = signAccessToken(payload, config);
+        const refreshToken = signRefreshToken(payload, config);
+        // Store refresh token
+        const ttl = config.refreshTokenTtl ?? 604800;
+        const expiresAt = new Date(Date.now() + ttl * 1000).toISOString();
+        await tokenStore.store(refreshToken, user.userId, expiresAt);
+        req.log.info({ userId: user.userId, username: user.username, role: user.role }, 'Auth: login');
+        reply.send({
+            accessToken,
+            refreshToken,
+            user: { userId: user.userId, username: user.username, role: user.role },
+        });
+    });
+    // POST /api/v1/auth/register (admin only — requires authentication)
+    fastify.post('/api/v1/auth/register', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Authentication required' });
+            return;
+        }
+        // Only admin can register new users with arbitrary roles
+        const adminLevel = resolvePermission('*', req.user.role, config);
+        if (!hasPermission(adminLevel, 'admin')) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const { username, password, role } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const validation = validatePasswordStrength(password);
+        if (!validation.valid) {
+            reply.code(400).send({ error: validation.message });
+            return;
+        }
+        // Default to the last (least-privileged) defined role if not specified
+        const defaultRole = config.roles.length > 0 ? config.roles[config.roles.length - 1].role : 'viewer';
+        const assignedRole = role ?? defaultRole;
+        try {
+            const user = await userStore.createUser({ username, password, role: assignedRole });
+            const serviceToken = issueServiceToken(user.userId, user.username, user.role, config);
+            req.log.info({ username, role: assignedRole }, 'Auth: user registered');
+            reply.code(201).send({ user, serviceToken });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Registration failed';
+            reply.code(400).send({ error: message });
+        }
+    });
+    // POST /api/v1/auth/logout
+    fastify.post('/api/v1/auth/logout', async (req, reply) => {
+        const { refreshToken } = req.body;
+        if (refreshToken) {
+            await tokenStore.delete(refreshToken);
+        }
+        // Also delete all tokens for the user if they want full logout
+        if (req.user) {
+            await tokenStore.deleteByUserId(req.user.userId);
+        }
+        req.log.info({ userId: req.user?.userId }, 'Auth: logout');
+        reply.send({ message: 'Logged out' });
+    });
+    // POST /api/v1/auth/refresh
+    fastify.post('/api/v1/auth/refresh', async (req, reply) => {
+        const { refreshToken } = req.body;
+        if (!refreshToken) {
+            reply.code(400).send({ error: 'Refresh token is required' });
+            return;
+        }
+        // Check if token is still in store (not revoked)
+        const stored = await tokenStore.find(refreshToken);
+        if (!stored) {
+            reply.code(401).send({ error: 'Refresh token has been revoked' });
+            return;
+        }
+        try {
+            const newAccessToken = refreshAccessToken(refreshToken, config);
+            reply.send({ accessToken: newAccessToken });
+        }
+        catch {
+            reply.code(401).send({ error: 'Invalid refresh token' });
+        }
+    });
+    // GET /api/v1/auth/whoami
+    fastify.get('/api/v1/auth/whoami', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const user = await userStore.readUser(req.user.userId);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        reply.send({ user });
+    });
+    // GET /api/v1/auth/roles
+    fastify.get('/api/v1/auth/roles', async (_req, reply) => {
+        reply.send({
+            roles: config.roles.map(r => ({
+                role: r.role,
+                permissions: r.permissions,
+            })),
+            defaults: config.permissions.defaults,
+        });
+    });
+    // ── User Management (admin-only) ──
+    // GET /api/v1/auth/users
+    fastify.get('/api/v1/auth/users', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        // Only admin can list users
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const users = await userStore.listUsers();
+        reply.send({ users });
+    });
+    // POST /api/v1/auth/users
+    fastify.post('/api/v1/auth/users', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const { username, password, role } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const validation = validatePasswordStrength(password);
+        if (!validation.valid) {
+            reply.code(400).send({ error: validation.message });
+            return;
+        }
+        try {
+            const user = await userStore.createUser({ username, password, role: role ?? 'viewer' });
+            const serviceToken = issueServiceToken(user.userId, user.username, user.role, config);
+            reply.code(201).send({ user, serviceToken });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'User creation failed';
+            reply.code(400).send({ error: message });
+        }
+    });
+    // GET /api/v1/auth/users/:id
+    fastify.get('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        // Allow users to view their own profile
+        if (req.user.userId === id) {
+            const user = await userStore.readUser(id);
+            if (!user) {
+                reply.code(404).send({ error: 'User not found' });
+                return;
+            }
+            reply.send({ user });
+            return;
+        }
+        // Admin can view any user
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const user = await userStore.readUser(id);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        reply.send({ user });
+    });
+    // PUT /api/v1/auth/users/:id
+    fastify.put('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        const updates = req.body;
+        const userIsAdmin = isAdmin(req.user.role);
+        // Users can update their own password, admin can update everything
+        if (req.user.userId === id) {
+            if (updates.role && !userIsAdmin) {
+                reply.code(403).send({ error: 'Cannot change your own role' });
+                return;
+            }
+            if (updates.password) {
+                // Self-password-change requires current password verification
+                if (!updates.currentPassword) {
+                    reply.code(400).send({ error: 'Current password is required' });
+                    return;
+                }
+                const verified = await userStore.verifyCredentials(req.user.username, updates.currentPassword);
+                if (!verified) {
+                    reply.code(400).send({ error: 'Current password is incorrect' });
+                    return;
+                }
+                const validation = validatePasswordStrength(updates.password);
+                if (!validation.valid) {
+                    reply.code(400).send({ error: validation.message });
+                    return;
+                }
+            }
+            const { currentPassword: _, ...safeUpdates } = updates;
+            const user = await userStore.updateUser(id, safeUpdates);
+            if (!user) {
+                reply.code(404).send({ error: 'User not found' });
+                return;
+            }
+            reply.send({ user });
+            return;
+        }
+        if (!userIsAdmin) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        if (updates.password) {
+            const validation = validatePasswordStrength(updates.password);
+            if (!validation.valid) {
+                reply.code(400).send({ error: validation.message });
+                return;
+            }
+        }
+        const user = await userStore.updateUser(id, updates);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        reply.send({ user });
+    });
+    // DELETE /api/v1/auth/users/:id
+    fastify.delete('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        const userIsAdmin = isAdmin(req.user.role);
+        if (!userIsAdmin) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        if (req.user.userId === id) {
+            reply.code(400).send({ error: 'Cannot delete your own account' });
+            return;
+        }
+        const deleted = await userStore.deleteUser(id);
+        if (!deleted) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        // Revoke all tokens for deleted user
+        await tokenStore.deleteByUserId(id);
+        reply.send({ message: 'User deleted' });
+    });
+}
+//# sourceMappingURL=auth-routes.js.map

package/dist/backend/routes/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../../src/backend/routes/auth-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAQ7D,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAyB;IACpF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAElD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CACxC,aAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAE/D,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAgD,CAAC;QAEpF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvD,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;QAE/F,KAAK,CAAC,IAAI,CAAC;YACT,WAAW;YACX,YAAY;YACZ,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpG,MAAM,YAAY,GAAG,IAAI,IAAI,WAAW,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACpF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAiC,CAAC;QAE/D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAED,+DAA+D;QAC/D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;QAE3D,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAiC,CAAC;QAE/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACtD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qCAAqC;IAErC,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;QACzG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;YACxF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAE5C,wCAAwC;QACxC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAyF,CAAC;QAE9G,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,mEAAmE;QACnE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC/F,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,qCAAqC;QACrC,MAAM,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/routes/chat-sse.d.ts

@@ -0,0 +1,17 @@
+/**
+ * SSE Helpers - Server-Sent Events utility functions for chat streaming
+ */
+import type { FastifyReply } from 'fastify';
+import type { SSEChatEvent } from '../../types/chat.js';
+export interface SSEConnectionState {
+    heartbeat: NodeJS.Timeout;
+    timeout: NodeJS.Timeout;
+    clientConnected: boolean;
+}
+export declare function startHeartbeat(reply: FastifyReply): NodeJS.Timeout;
+export declare function startIdleTimeout(reply: FastifyReply, onTimeout: () => void): NodeJS.Timeout;
+export declare function refreshIdleTimeout(state: SSEConnectionState, reply: FastifyReply, onTimeout: () => void): void;
+export declare function cleanupSSE(state: SSEConnectionState): void;
+export declare function sendSSE(reply: FastifyReply, event: SSEChatEvent): Promise<boolean>;
+export declare function endSSE(reply: FastifyReply): void;
+//# sourceMappingURL=chat-sse.d.ts.map

package/dist/backend/routes/chat-sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-sse.d.ts","sourceRoot":"","sources":["../../../src/backend/routes/chat-sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,OAAO,CAQlE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAS3F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI,CAG9G;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAI1D;AAID,wBAAsB,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAexF;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAMhD"}

package/dist/backend/routes/chat-sse.js

@@ -0,0 +1,60 @@
+/**
+ * SSE Helpers - Server-Sent Events utility functions for chat streaming
+ */
+export function startHeartbeat(reply) {
+    return setInterval(() => {
+        try {
+            reply.raw.write(':\n\n'); // SSE comment line - keeps connection alive
+        }
+        catch {
+            // Connection already closed
+        }
+    }, 30000);
+}
+export function startIdleTimeout(reply, onTimeout) {
+    return setTimeout(() => {
+        try {
+            reply.raw.end();
+        }
+        catch {
+            // Already closed
+        }
+        onTimeout();
+    }, 5 * 60 * 1000); // 5 minutes idle timeout
+}
+export function refreshIdleTimeout(state, reply, onTimeout) {
+    clearTimeout(state.timeout);
+    state.timeout = startIdleTimeout(reply, onTimeout);
+}
+export function cleanupSSE(state) {
+    clearInterval(state.heartbeat);
+    clearTimeout(state.timeout);
+    state.clientConnected = false;
+}
+// ── SSE Send Helpers ──
+export async function sendSSE(reply, event) {
+    try {
+        const ok = reply.raw.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (!ok) {
+            // Backpressure: wait for drain or timeout after 5s
+            await new Promise((resolve) => {
+                const drainHandler = () => { reply.raw.off('drain', drainHandler); resolve(); };
+                reply.raw.once('drain', drainHandler);
+                setTimeout(() => { reply.raw.off('drain', drainHandler); resolve(); }, 5000);
+            });
+        }
+        return true;
+    }
+    catch {
+        return false; // Client disconnected
+    }
+}
+export function endSSE(reply) {
+    try {
+        reply.raw.end();
+    }
+    catch {
+        // Already closed
+    }
+}
+//# sourceMappingURL=chat-sse.js.map

package/dist/backend/routes/chat-sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-sse.js","sourceRoot":"","sources":["../../../src/backend/routes/chat-sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,SAAqB;IACzE,OAAO,UAAU,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,yBAAyB;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,KAAmB,EAAE,SAAqB;IACtG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;AAChC,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB,EAAE,KAAmB;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,mDAAmD;YACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACtC,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,sBAAsB;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAmB;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC"}

package/dist/backend/routes/chat.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Chat SSE Route - HTTP Server-Sent Events streaming for AI chat
+ *
+ * Replaces WebSocket with HTTP SSE for AI conversation streaming.
+ * Ant Design X (useXChat + XRequest) natively consumes this format.
+ *
+ * POST /api/v1/chat
+ *   Body: { content, session_id, button_id?, context?, files? }
+ *   Response: SSE stream with data lines containing JSON chunks
+ */
+import type { FastifyInstance } from 'fastify';
+import type { AIEngine } from '../../types/ai.js';
+import type { LoomConfig } from '../../types/config.js';
+import { SessionManager } from '../ai/session-manager.js';
+import { AIInteractionLogger } from '../observe/index.js';
+export interface ChatRouteOptions {
+    engine: AIEngine;
+    sessionManager: SessionManager;
+    config: LoomConfig;
+    logger?: AIInteractionLogger;
+    projectRoot: string;
+}
+/**
+ * Register chat SSE route and session REST routes
+ */
+export declare function registerChatRoutes(fastify: FastifyInstance, options: ChatRouteOptions): void;
+//# sourceMappingURL=chat.d.ts.map

package/dist/backend/routes/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/backend/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,QAAQ,EAAW,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAIxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAY1D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,QAAQ,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;CACrB;AA+BD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,gBAAgB,GACxB,IAAI,CAgMN"}