@gotcos/glasses-server 6.44.2 → 6.44.3

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 6.44.3
+
+A task row carries enough to show and edit it.
+
+- `GET /api/tasks` rows gain `text` (the whole description), `source`, `checked`, and `owner`/`agentState`/`agentNo` when present. `title` still exists and is still capped at 44 characters, which is a G2 lens row budget: applying it to every surface is why COS Control rendered "Send James/John the call recording + recap…" in a window 1900px wide. Additive on purpose so clients through 6.9.451, which read `title`, keep working.
+- `PUT /api/domains` sets the user's domain list, so a settings pane can write it instead of the user hand-editing `~/.cos-glasses/.cos-profile.json`. It replaces the configured list wholesale and validates each name for path safety; discovered folders are never written, so removing a name from config cannot hide a folder that still holds tasks.
+- `PATCH /api/tasks/:id` accepts `text`, rewriting a task's words through a new `task-set-text` bridge subcommand. The source block, the `[run ...]` schedule, and any agent marker are rebuilt from parsed state, so editing the words never drops provenance. A task with a running agent is refused, since rewriting the line would change the task the agent was dispatched against.
+
 ## 6.44.2
 
 Task domains come from the user, not from the build.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.44.2",
+  "version": "6.44.3",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, Cursor Agent CLI, or local Ollama",
   "type": "module",
   "bin": {

package/server/lib/task-store.ts

@@ -116,7 +116,16 @@ export interface TaskBoardRow {
   id: string
   ref: string
   domain: string
+  /** Capped to TASK_TITLE_MAX for a lens row. */
   title: string
+  /** The whole description, for surfaces with room. */
+  text: string
+  source?: string
+  owner?: string
+  delegated?: boolean
+  agentState?: 'running' | 'done' | 'failed'
+  agentNo?: number
+  checked: boolean
   column: TaskColumn
   priority: string
   runAt?: string
@@ -389,6 +398,17 @@ export function projectRow(
     ref: row.ref,
     domain: row.domain,
     title: taskTitle(row.description),
+    // `title` stays capped for the lens; `text` is the whole line. The cap is a
+    // G2 row budget and was being applied to every surface, so a Mac window
+    // 1900px wide showed "Send James/John the call recording + recap…". Additive
+    // on purpose: clients through 6.9.451 read `title` and must keep working.
+    text: row.description,
+    ...(row.source ? { source: row.source } : {}),
+    ...(row.owner ? { owner: row.owner } : {}),
+    ...(row.delegated ? { delegated: true } : {}),
+    ...(row.agent_state ? { agentState: row.agent_state } : {}),
+    ...(row.agent_no != null ? { agentNo: row.agent_no } : {}),
+    checked: row.is_checked,
     column: col,
     priority: row.priority,
     ...(runAt ? { runAt: new Date(taskInstant(runAt.day, runAt.minutes, tz)).toISOString() } : {}),
@@ -458,6 +478,14 @@ export async function setTaskRunAt(domain: string, id: string, runAt: string | n
   await withLockRetry(() => bridge(args))
 }
 
+/** Rewrite a task's words. The bridge preserves its source block and schedule. */
+export async function setTaskText(domain: string, id: string, text: string): Promise<void> {
+  const clean = text.replace(/\s+/g, ' ').trim()
+  if (!clean) throw new TaskRunError(400, 'text_required', 'text is required')
+  if (clean.length > 2000) throw new TaskRunError(422, 'text_too_long', 'text must be 2000 characters or fewer')
+  await withLockRetry(() => bridge(['task-set-text', domain, id], clean))
+}
+
 export async function moveTask(domain: string, id: string, section: string, nowMs = Date.now()): Promise<void> {
   const { clock } = briefContext(nowMs)
   const args = ['task-move', domain, id, '--section', section]

package/server/routes/tasks.ts

@@ -1,7 +1,8 @@
 import { Router } from 'express'
 import { queryJobCoordinator } from '../lib/query-job-runtime.js'
 import { runTaskNow } from '../lib/task-dispatcher.js'
-import { domainAbbreviation } from '../lib/domains.js'
+import { domainAbbreviation, isSafeDomainName } from '../lib/domains.js'
+import { updateProfileFields } from '../lib/profile.js'
 import { domainLabel } from '../lib/domain-label.js'
 import {
   TaskBridgeError,
@@ -14,6 +15,7 @@ import {
   moveTask,
   saveDispatchCap,
   setTaskRunAt,
+  setTaskText,
   taskDomains,
   tasksGate,
   workBadgeCount,
@@ -127,6 +129,46 @@ tasksRouter.get('/domains', (_req, res) => {
   }
 })
 
+/** Set the user's domain list. Replaces it wholesale: the client shows the
+ *  current list and sends back what it wants, which is what a settings pane does.
+ *  Discovered folders are NOT written here — they keep showing because the read
+ *  side unions them in, so removing a name from config never hides a folder that
+ *  still holds tasks. */
+tasksRouter.put('/domains', (req, res) => {
+  try {
+    const raw = (req.body ?? {}).domains
+    if (!Array.isArray(raw)) throw new TaskRunError(400, 'domains_required', 'domains must be an array')
+    if (raw.length > 32) throw new TaskRunError(422, 'too_many_domains', 'at most 32 domains')
+    const names: string[] = []
+    const seen = new Set<string>()
+    for (const entry of raw) {
+      const name = typeof entry === 'string'
+        ? entry
+        : (entry && typeof entry === 'object' && typeof (entry as { name?: unknown }).name === 'string')
+          ? (entry as { name: string }).name
+          : ''
+      const trimmed = name.trim()
+      if (!trimmed) continue
+      if (!isSafeDomainName(trimmed)) {
+        throw new TaskRunError(422, 'invalid_domain_name', `not a usable domain name: ${trimmed}`)
+      }
+      const key = trimmed.toLowerCase()
+      if (seen.has(key)) continue
+      seen.add(key)
+      names.push(trimmed)
+    }
+    updateProfileFields({ domains: names })
+    const resolved = taskDomains()
+    res.json({
+      domains: resolved.map(name => ({ name, abbr: domainAbbreviation(name), label: domainLabel(name) })),
+      configured: names,
+      gate: tasksGate(),
+    })
+  } catch (error) {
+    sendError(res, error)
+  }
+})
+
 tasksRouter.get('/tasks', async (req, res) => {
   try {
     const column = typeof req.query.column === 'string' ? req.query.column : undefined
@@ -141,14 +183,16 @@ tasksRouter.patch('/tasks/:id', async (req, res) => {
   try {
     const body = req.body ?? {}
     const domain = requireDomain(body.domain)
-    if ('runAt' in body) {
+    if ('text' in body) {
+      await setTaskText(domain, req.params.id, String(body.text))
+    } else if ('runAt' in body) {
       await setTaskRunAt(domain, req.params.id, body.runAt == null || body.runAt === '' ? null : String(body.runAt))
     } else if ('section' in body) {
       await moveTask(domain, req.params.id, String(body.section))
     } else if ('checked' in body) {
       await checkTask({ domain, id: req.params.id, checked: body.checked === true })
     } else {
-      throw new TaskRunError(400, 'invalid_patch', 'Expected runAt, section, or checked.')
+      throw new TaskRunError(400, 'invalid_patch', 'Expected text, runAt, section, or checked.')
     }
     res.json({ ok: true })
   } catch (error) {