@gotcos/glasses-server 6.44.1 → 6.44.2

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 6.44.2
+
+Task domains come from the user, not from the build.
+
+- `FULL_DOMAINS` was `['quilt','personal','hermit_crabs','sprocket_rocket']` — one user's business units, compiled into everyone's copy. The task store and dispatcher now resolve domains through `taskDomainNames`, a union of the profile's `domains` and every directory under `operations/` holding a `tasks.md`. On an install with no configured domains this returns exactly the folders already there, so nothing changes for an existing setup; a fresh COS gets `personal` and `business`.
+- Task discovery keys on `tasks.md`, deliberately NOT on the `meetings/YYYY-MM` tree that `discoveredDomains` requires. Measured here: `uncategorized/` has a months tree and no `tasks.md`, so reusing meetings discovery would have offered a task domain whose file does not exist, and a domain with tasks but no meetings yet would have been invisible.
+- Capture now rejects an unknown domain with the name it was given instead of "full domain required".
+- New `GET /api/domains` returns `{ domains: [{ name, abbr, label }], gate }` so no client hardcodes a picker. `abbr` is derived server-side, ending the two disagreeing abbreviation maps; `label` is derived from the key and leaves a name the user wrote as prose ("DNP study") untouched.
+
 ## 6.44.1
 
 Board and lens titles are readable.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.44.1",
+  "version": "6.44.2",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, Cursor Agent CLI, or local Ollama",
   "type": "module",
   "bin": {

package/server/lib/domain-label.ts

@@ -0,0 +1,13 @@
+/** Human label for a domain key.
+ *
+ *  `hermit_crabs` should read "Hermit Crabs" in a picker, but the label must be
+ *  DERIVED, never a lookup table: a table is how one user's four business units
+ *  ended up compiled into everyone's build. A user-supplied domain that is
+ *  already prose ("DNP study") is returned as-is apart from its separators. */
+export function domainLabel(name: string): string {
+  const words = name.split(/[_-]+/).filter(Boolean)
+  if (words.length === 0) return name
+  // Only lowercase words are title-cased. A name the user already capitalised
+  // ("DNP study", "iOS") keeps their capitalisation.
+  return words.map(w => (w === w.toLowerCase() ? w.charAt(0).toUpperCase() + w.slice(1) : w)).join(' ')
+}

package/server/lib/domains.ts

@@ -134,6 +134,45 @@ export function discoveredDomains(operationsDir: string | null): string[] {
   }).sort()
 }
 
+/**
+ * Immediate subdirectories of `operationsDir` holding a `tasks.md`.
+ *
+ * A SEPARATE signal from `discoveredDomains`, deliberately. That one requires a
+ * `meetings/YYYY-MM` tree, which is the right shape for the meeting lister and
+ * the wrong shape here: measured on this install, `uncategorized/` has a months
+ * tree and no `tasks.md`, so reusing meetings discovery would offer a task
+ * domain whose file does not exist, while a domain with tasks and no meetings
+ * yet would be invisible. The task store reads `tasks.md`, so that is the file
+ * that decides.
+ */
+export function discoveredTaskDomains(operationsDir: string | null): string[] {
+  if (!operationsDir || !existsSync(operationsDir)) return []
+  let names: string[]
+  try {
+    names = readdirSync(operationsDir, { withFileTypes: true })
+      .filter(e => e.isDirectory()).map(e => e.name)
+  } catch { return [] }
+  return names.filter(isSafeDomainName).filter(name => {
+    try { return statSync(join(operationsDir, name, 'tasks.md')).isFile() } catch { return false }
+  }).sort()
+}
+
+/**
+ * Task domains: configured first, then any directory with a `tasks.md`.
+ *
+ * Same union rule as `resolveDomains` and for the same reason — Miles has no
+ * `domains` in his profile, discovery finds his four, and the union is exactly
+ * his four, so switching the task store onto this changes nothing about his
+ * install while removing one user's business units from everyone else's build.
+ */
+export function taskDomainNames(operationsDir: string | null): string[] {
+  const configured = configuredDomains().map(d => d.name)
+  const discovered = discoveredTaskDomains(operationsDir)
+  if (configured.length === 0 && discovered.length === 0) return [...DEFAULT_DOMAINS]
+  const known = new Set(configured.map(n => n.toLowerCase()))
+  return [...configured, ...discovered.filter(n => !known.has(n.toLowerCase()))]
+}
+
 /**
  * Every domain this COS has, as a UNION of configuration and what is on disk.
  *

package/server/lib/task-dispatcher.ts

@@ -29,7 +29,7 @@ import {
   type QueryJobSnapshot,
 } from './query-job-types.js'
 import {
-  FULL_DOMAINS,
+  taskDomains,
   TASK_DISPATCH_LIMITS,
   TASK_DISPATCH_WALL_MS,
   TASK_JOB_LOST_MS,
@@ -597,7 +597,7 @@ export async function reconcileDispatch(injected?: TaskDispatcherDeps): Promise<
   }
   const timer = setTimeout(() => lease?.release(), TASK_LEASE_CEILING_MS)
   try {
-    const groups = await Promise.all(FULL_DOMAINS.map(domain => (deps.loadRows ? deps.loadRows(clock.day) : loadDomainRows(domain, clock.day))))
+    const groups = await Promise.all(taskDomains().map(domain => (deps.loadRows ? deps.loadRows(clock.day) : loadDomainRows(domain, clock.day))))
     const rows = groups.flat()
     const ledger = loadTaskLedger(pathsOf(deps))
     const live = ledger.filter(run => run.status === 'dispatching' || run.status === 'running')

package/server/lib/task-store.ts

@@ -10,6 +10,8 @@ import {
 } from './morning-brief-config.js'
 import { localClock, shiftDay, taskInstant } from './morning-brief-schedule.js'
 import { callPython, pythonBridgeAvailable } from './python-bridge.js'
+import { resolveCosOperationsDir } from './cos-operations-meetings.js'
+import { taskDomainNames } from './domains.js'
 import { isClientJobId } from './query-job-types.js'
 import { DEFAULT_MODEL, isClaudeModel } from '../../shared/model-preference.js'
 
@@ -30,8 +32,16 @@ export const TASK_BRIDGE_TIMEOUT_MS = 12_000
 export const TASK_JOB_LOST_MS = 6 * 60 * 60_000
 export const TASK_LOCK_RETRY = Object.freeze({ attempts: 3, spacingMs: 300 })
 export const TASK_TODAY_PURGE_HORIZON_DAYS = 7
-export const FULL_DOMAINS = ['quilt', 'personal', 'hermit_crabs', 'sprocket_rocket'] as const
-export type TaskDomain = (typeof FULL_DOMAINS)[number]
+/** Domains come from the user's own config and their own `operations/` tree, not
+ *  from a list baked into the build. The previous constant here was one user's
+ *  four business units, which is why a second COS install could not name
+ *  anything that worked. `taskDomainNames` unions configured domains with every
+ *  directory holding a `tasks.md`. */
+export function taskDomains(): string[] {
+  return taskDomainNames(resolveCosOperationsDir())
+}
+
+export type TaskDomain = string
 export type TaskRunStatus = 'dispatching' | 'running' | 'done' | 'superseded' | 'failed' | 'orphaned'
 export const TASK_RUN_TERMINAL = new Set<TaskRunStatus>(['done', 'superseded', 'failed', 'orphaned'])
 export type TaskColumn = 'done' | 'running' | 'today' | 'carried' | 'scheduled' | 'inbox'
@@ -329,7 +339,7 @@ export async function loadDomainRows(domain: TaskDomain, day: string): Promise<B
 }
 
 export async function loadAllRows(day: string): Promise<BridgeTaskRow[]> {
-  const groups = await Promise.all(FULL_DOMAINS.map(domain => loadDomainRows(domain, day)))
+  const groups = await Promise.all(taskDomains().map(domain => loadDomainRows(domain, day)))
   return groups.flat()
 }
 
@@ -420,8 +430,8 @@ export async function captureTask(body: {
   if (!pythonBridgeAvailable()) throw new TaskRunError(503, 'cos_pipeline_not_configured', 'COS pipeline is not configured.')
   if (!body.captureId) throw new TaskRunError(400, 'capture_id_required', 'captureId is required.')
   if (!isClientJobId(body.captureId)) throw new TaskRunError(422, 'invalid_capture_id', 'captureId must be a UUID v4.')
-  if (!FULL_DOMAINS.includes(body.domain as TaskDomain)) {
-    throw new TaskRunError(400, 'invalid_domain', 'full domain required')
+  if (!taskDomains().includes(body.domain)) {
+    throw new TaskRunError(400, 'invalid_domain', `unknown domain: ${body.domain}`)
   }
   const paths = taskStorePaths()
   const seen = loadCapturesSeen(paths)

package/server/routes/tasks.ts

@@ -1,6 +1,8 @@
 import { Router } from 'express'
 import { queryJobCoordinator } from '../lib/query-job-runtime.js'
 import { runTaskNow } from '../lib/task-dispatcher.js'
+import { domainAbbreviation } from '../lib/domains.js'
+import { domainLabel } from '../lib/domain-label.js'
 import {
   TaskBridgeError,
   TaskRunError,
@@ -12,6 +14,7 @@ import {
   moveTask,
   saveDispatchCap,
   setTaskRunAt,
+  taskDomains,
   tasksGate,
   workBadgeCount,
 } from '../lib/task-store.js'
@@ -109,6 +112,21 @@ tasksRouter.patch('/tasks/dispatch-cap', (req, res) => {
   }
 })
 
+/** The domain list a client should offer, so no picker hardcodes one user's
+ *  business units. `abbr` is derived server-side so every surface agrees on the
+ *  badge; the two abbreviation maps that used to live in the app disagreed. */
+tasksRouter.get('/domains', (_req, res) => {
+  try {
+    const names = taskDomains()
+    res.json({
+      domains: names.map(name => ({ name, abbr: domainAbbreviation(name), label: domainLabel(name) })),
+      gate: tasksGate(),
+    })
+  } catch (error) {
+    sendError(res, error)
+  }
+})
+
 tasksRouter.get('/tasks', async (req, res) => {
   try {
     const column = typeof req.query.column === 'string' ? req.query.column : undefined