Stream Turn Replay

GET 
/api/websites/builder/turn/:turn_id/stream

Replay (and continue) a turn's SSE event stream from Redis.

Authorization model: the turn id is high-entropy but we still cross- check the caller's tenant against the row's tenant_id BEFORE opening the Redis read — without this, a malicious caller could brute-force turn ids and replay other tenants' LLM output. Returns 404 (not 403) on a tenant mismatch so the existence of the turn isn't leaked.

No LLM call is triggered. Multiple readers can subscribe to the same turn — Redis Streams (not pub/sub) give every reader the full event log + the live tail, so concurrency doesn't double-bill.

Request​