Migrate the API backend to FastAPI (uvicorn · SSE · Pydantic · Scalar)#53

Merged

thalida merged 31 commits into

mainfrom

worktree-fastapi-migration

Jun 10, 2026

Commits on Jun 3, 2026

build: add fastapi/uvicorn/sse-starlette, drop direct watchfiles
thalida
committed
refactor: move scan/cache/clone/media under api/services (no behavior change)

thalida
and
claude
committed
refactor: env.py -> config.py (live env reads, size constants)

thalida
and
claude
committed
feat: extract allowed_roots trust model into api/security.py

thalida
and
claude
committed
feat: Pydantic manifest models (port of types.py)

thalida
and
claude
committed
feat: Pydantic response + SSE event models

thalida
and
claude
committed
feat: FastAPI app factory + health/config router + SPA static + Scalar docs

thalida
and
claude
committed
feat: /api/file router (trust-gated, 413 oversize, text coercion)

thalida
and
claude
committed
feat: /api/commit router (sha validation + multi-root lookup)

thalida
and
claude
committed
feat: source resolution + /api/manifest/signature + cache-delete routes

thalida
and
claude
committed
feat: SSE /api/manifest stream (errors as events, cancel via is_disconnected, cache-on-final)
thalida
committed
test: real-socket SSE disconnect does not hang server
thalida
committed
refactor: retire hand-rolled server/types/reload; uvicorn entrypoint

thalida
and
claude
committed
build: document uvicorn entrypoint; fix stale server.py static-dir ref

thalida
and
claude
committed
feat: generate manifest TS types from OpenAPI + compile-time drift guard

thalida
and
claude
committed
feat: frontend manifest stream NDJSON -> EventSource (same ScanStreamEvent contract)

thalida
and
claude
committed
docs: describe FastAPI/SSE/Scalar backend; log migration follow-ups

thalida
and
claude
committed
fix: make scan.py + cache.py pyright-strict clean (whole project now 0 errors)

thalida
and
claude
committed
build: copy app/.npmrc into the web-builder stage before npm ci

thalida
and
claude
committed
refactor: address code-review feedback on the FastAPI layer

thalida
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Migrate the API backend to FastAPI (uvicorn · SSE · Pydantic · Scalar)#53

Migrate the API backend to FastAPI (uvicorn · SSE · Pydantic · Scalar)#53
thalida merged 31 commits into
mainfrom
worktree-fastapi-migration

Commits on Jun 3, 2026

build: add fastapi/uvicorn/sse-starlette, drop direct watchfiles

refactor: move scan/cache/clone/media under api/services (no behavior change)

refactor: env.py -> config.py (live env reads, size constants)

feat: extract allowed_roots trust model into api/security.py

feat: Pydantic manifest models (port of types.py)

feat: Pydantic response + SSE event models

feat: FastAPI app factory + health/config router + SPA static + Scalar docs

feat: /api/file router (trust-gated, 413 oversize, text coercion)

feat: /api/commit router (sha validation + multi-root lookup)

feat: source resolution + /api/manifest/signature + cache-delete routes

feat: SSE /api/manifest stream (errors as events, cancel via is_disconnected, cache-on-final)

test: real-socket SSE disconnect does not hang server

refactor: retire hand-rolled server/types/reload; uvicorn entrypoint

build: document uvicorn entrypoint; fix stale server.py static-dir ref

feat: generate manifest TS types from OpenAPI + compile-time drift guard

feat: frontend manifest stream NDJSON -> EventSource (same ScanStreamEvent contract)

docs: describe FastAPI/SSE/Scalar backend; log migration follow-ups

fix: make scan.py + cache.py pyright-strict clean (whole project now 0 errors)

build: copy app/.npmrc into the web-builder stage before npm ci

refactor: address code-review feedback on the FastAPI layer

Commits on Jun 10, 2026

fix: address code-review findings on the FastAPI SSE layer

refactor: rename SSE events to describe content, not sequence position

refactor: move source resolution into api/services/source.py

refactor: single-source the cache root in config; clone gets CLONES_ROOT

fix: exclude the SPA static catch-all from the OpenAPI schema/docs

test: pin commit author via --author so test_commit_lookup_ok is container-safe

style: prettier-format loadingReactions.ts after the ScanPhase rename

build: add ruff (the prettier of Python) + gate it in hook/CI

style: apply ruff format across api/ + scripts/

fix: make manifest wire-model optionality match the true wire

feat: stream-gzip the SSE manifest stream (per-event flush)