Telegram: https://t.me/+DOylgFv1jyJlNzM0
Why this matters
backend/src/routes/events.routes.ts (the non-v1 legacy SSE router) is dead code — nothing imports it (app.ts mounts only routes/v1/index.js and replaces /events with a 410 deprecation stub). Worse, its /subscribe handler mounts subscribe without requireAuth, unlike the live routes/v1/events.routes.ts which guards it. Leaving an unauthenticated SSE subscribe handler lying around is a foot-gun: a future re-mount would silently expose it.
Acceptance criteria
Files to touch
backend/src/routes/events.routes.ts (delete)
Out of scope
- The active
routes/v1/events.routes.ts; the deprecated /events 410 stub in app.ts.
Telegram: https://t.me/+DOylgFv1jyJlNzM0
Why this matters
backend/src/routes/events.routes.ts(the non-v1legacy SSE router) is dead code — nothing imports it (app.tsmounts onlyroutes/v1/index.jsand replaces/eventswith a 410 deprecation stub). Worse, its/subscribehandler mountssubscribewithoutrequireAuth, unlike the liveroutes/v1/events.routes.tswhich guards it. Leaving an unauthenticated SSE subscribe handler lying around is a foot-gun: a future re-mount would silently expose it.Acceptance criteria
routes/events.routes.ts(it currently has none).backend/src/routes/events.routes.ts.Files to touch
backend/src/routes/events.routes.ts(delete)Out of scope
routes/v1/events.routes.ts; the deprecated/events410 stub inapp.ts.