fix(router): register BroadcastHandler for POST /broadcast (OFFSEC-015)

OFFSEC-015 requires the POST /workspaces/:id/broadcast endpoint to be wired in the router. workspace_broadcast.go exists but was not registered in Setup(), so all broadcast requests would 404. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-15 06:42:38 +00:00
1 changed files with 4 additions and 0 deletions
@@ -224,6 +224,10 @@ func Setup(hub *ws.Hub, broadcaster *events.Broadcaster, prov *provisioner.Provi
 		wsAuth.POST("/delegations/record", delh.Record)
 		wsAuth.POST("/delegations/:delegation_id/update", delh.UpdateStatus)

+		// Workspace broadcast (OFFSEC-015 org isolation)
+		bch := handlers.NewBroadcastHandler(broadcaster)
+		wsAuth.POST("/broadcast", bch.Broadcast)
+
 		// Traces (Langfuse proxy)
 		trh := handlers.NewTracesHandler()
 		wsAuth.GET("/traces", trh.List)