Function createAddieChatRouter

server/src/routes/addie-chat.ts:674–1460

()

};

export function createAddieChatRouter(): { pageRouter: Router; apiRouter: Router } {
  const pageRouter = Router();
  const apiRouter = Router();

  // Enable CORS for all API routes (for native app support)
  apiRouter.use(cors(chatCorsOptions));

  // Initialize client after server starts (deferred to avoid blocking startup with sync I/O)
  setTimeout(() => {
    initializeChatClient().catch((err) => {
      logger.error({ err }, "Failed to initialize Addie chat client");
    });
  }, 5000);

  // =========================================================================
  // PAGE ROUTES (mounted at /chat)
  // =========================================================================

  // GET / - Serve the chat page (mounted at /chat, so this serves /chat)
  pageRouter.get("/", optionalAuth, (req, res) => {
    // Video call iframe needs camera, microphone, and autoplay permissions
    res.setHeader("Permissions-Policy", "camera=*, microphone=*, autoplay=*");
    serveHtmlWithConfig(req, res, "chat.html").catch((err) => {
      logger.error({ err }, "Error serving chat page");
      res.status(500).send("Internal server error");
    });
  });

  // =========================================================================
  // API ROUTES (mounted at /api/addie/chat)
  // =========================================================================

  // POST /api/addie/chat - Send a message and get a response
  // optionalAuth runs first so rate limiters can check auth status
  apiRouter.post("/", optionalAuth, chatRateLimiter, anonymousDailyLimiter, async (req, res) => {
    const startTime = Date.now();
    const threadService = getThreadService();

    try {
      if (!initialized || !claudeClient) {
        return res.status(503).json({
          error: "Service unavailable",
          message: "Addie is not configured. Please set ANTHROPIC_API_KEY.",
        });
      }

      const { message, conversation_id, user_name } = req.body;

      if (!message || typeof message !== "string") {
        return res.status(400).json({ error: "Message is required" });
      }

      // Sanitize input
      const inputValidation = sanitizeInput(message);
      if (inputValidation.flagged) {
        logger.warn({ reason: inputValidation.reason }, "Addie Chat: Input flagged");
      }