feat(ai): stream AI suggestions over HTTP

[Reversean]

• AI suggestion stream is served through a dedicated GET /integration/ai/stream Express route.
• The Fetch API Response returned by the AI SDK's toUIMessageStreamResponse() is adapted onto the Express response.
• Declares ReadableStream/Response as ESLint globals (.eslintrc.js) - valid Node 18+ runtime globals that predate ESLint's bundled node env.

[e11sy]

probably could be typed, since you assign it right away

[Reversean]

Added FakeResponse for this.

[e11sy]

we can just use

result.pipeUIMessageStreamToResponse(res);

with extra options or just

result.pipeTextStreamToResponse(res);

since we don't need any metadata toolcalls etc

[Reversean]

Good suggestion. And since I don't see any possibilities that ask-ai will need text/event-stream format, I'm using pipeTextStreamToResponse here.

@FeironoX5 If you're still working on stream receiving in hawk.garage, could you agree/disagree with this?

[codecov-commenter]

Codecov Report

❌ Patch coverage is 92.37288% with 9 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (fix/ai-prompt-injection@69868b3). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
test/helpers/expressRequest.ts	90.74%	5 Missing ⚠️
src/integrations/vercel-ai/routes.ts	91.83%	4 Missing ⚠️

Additional details and impacted files

@@                    Coverage Diff                     @@
##             fix/ai-prompt-injection     #664   +/-   ##
==========================================================
  Coverage                           ?   47.98%           
==========================================================
  Files                              ?       59           
  Lines                              ?     2684           
  Branches                           ?      569           
==========================================================
  Hits                               ?     1288           
  Misses                             ?     1318           
  Partials                           ?       78           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Adds an HTTP streaming endpoint for AI suggestions and wires it into the API, alongside extending the Vercel AI integration with a streaming call and updating tests/utilities to support streaming responses.

Changes:

• Introduces GET /integration/ai/stream Express route and app wiring for AI suggestion streaming.
• Extends the Vercel AI integration with a stream() method and adds service-level streamSuggestion().
• Adds/updates Jest tests and introduces a reusable Express request/response test helper that can capture streamed bodies/headers.

Reviewed changes

Copilot reviewed 13 out of 13 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
test/services/askAiRoutes.test.ts	New tests covering auth/validation/error cases and streaming response behavior for /integration/ai/stream.
test/services/askAi.test.ts	Adds service-level coverage for streamSuggestion() behavior.
test/integrations/vercel-ai.test.ts	Adds integration-level coverage for vercelAIApi.stream() forwarding to streamText.
test/integrations/github-routes.test.ts	Refactors tests to reuse the new makeExpressRequest helper.
test/helpers/expressRequest.ts	New helper to drive Express apps without a socket and capture streamed responses/headers.
src/services/types.ts	Exports Event type for reuse by services.
src/services/askAi/service.ts	Adds streamSuggestion() and refactors event lookup into getEventOrThrow().
src/services/askAi/routes.ts	New Express router for AI streaming endpoint and authorization checks.
src/services/askAi/index.ts	Exports appendAiAssistantRoutes for app integration.
src/integrations/vercel-ai/index.ts	Adds stream() wrapper around streamText and centralizes provider gateway options.
src/index.ts	Registers AI assistant routes on the main Express app.
src/directives/requireUserInWorkspace.ts	Exports checkUserInWorkspaceByProjectId for use from Express routes.
package.json	Bumps package version.

Suppressed comments (2)

src/services/askAi/routes.ts:87

• The inner catch converts any streamSuggestion error into a 404 and returns error.message to the caller. That will misreport transport/DB failures as "not found" and can leak internal error details (e.g. events factory errors that include ids). Only map the known not-found case to 404; rethrow unexpected errors so the outer handler can next(error) and return a 5xx.

      try {
        result = await askAiService.streamSuggestion(eventsFactory, eventId, originalEventId);
      } catch (error) {
        res.status(404).json({ error: error instanceof Error ? error.message : 'Event not found' });

src/services/askAi/routes.ts:91

• This route calls result.pipeTextStreamToResponse(res), but the PR description says the AI SDK's toUIMessageStreamResponse() (a Fetch API Response) is adapted onto the Express response. As written, there is no adaptation and the call isn’t type-checked (because result is implicitly any), so a wrong method name or incompatible stream type would only fail at runtime. Consider explicitly using toUIMessageStreamResponse() and piping its status/headers/body into Express.

      result.pipeTextStreamToResponse(res);

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.