@gotcos/glasses-server 6.99.16 → 6.99.20

package/server/routes/work-orchestrator.ts

@@ -5,6 +5,9 @@
  *   POST /api/work/orchestrator/input  {workID, meetingWorkIDs?, snapshot?}
  *        Stores Control's snapshot when one is sent (Phase A: Control pushes, the server keeps the copy), then answers
  *        the card's planner rows, what was left out and why, and the usage snapshot.
+ *   POST /api/work/orchestrator/snapshot {workID, revision, serverInstanceId, snapshot}
+ *        Bound to this server and a current canonical card revision. Stores validated Control evidence only;
+ *        no discovery, usage refresh, model, link/receipt write or dispatch.
  *   GET  /api/work/orchestrator/usage[?refresh=1]
  *        The usage snapshot per provider, read on demand: Claude and Codex are re-read when their reading is older than
  *        10 minutes (`refresh=1`: 2 minutes). No timer reads usage unless COS_WORK_USAGE_POLL=1.
@@ -14,6 +17,11 @@ import { parseSnapshot, type ControlSnapshot } from '../lib/work-orchestrator/sn
 import type { OrchestratorInput } from '../lib/work-orchestrator/input.js'
 import type { UsageMonitor, UsageView } from '../lib/work-orchestrator/usage.js'
 import { orchestratorInputFor, orchestratorSnapshots, orchestratorUsage } from '../lib/work-orchestrator/runtime.js'
+import { listBoard, type TaskBoardRow } from '../lib/task-store.js'
+import { createWorkBoardReader } from '../lib/work-board-reader.js'
+import { getServerInstanceId } from '../lib/server-instance-id.js'
+import { maintenanceAdmissionsOpen, acquireMaintenanceWork } from '../lib/maintenance-lifecycle.js'
+import { AskWorkPlanError, resolveAskWorkTask } from '../lib/ask-work-plan.js'
 
 const WORK_ID = /^task:[a-z_]+:[a-f0-9]{12}$/
 const MEETING_ID = /^meeting:[^\u0000-\u001f]{1,250}$/
@@ -24,6 +32,10 @@ export interface WorkOrchestratorDeps {
   input: (workID: string, meetingWorkIDs: string[]) => Promise<OrchestratorInput>
   usage: (refresh: boolean) => Promise<UsageView[]>
   now: () => number
+  board: () => Promise<TaskBoardRow[]>
+  serverInstanceId: () => string | null
+  admissions: () => boolean
+  lease: () => { release(): void }
 }
 
 /** GET /usage reads on demand: a reading older than 10 minutes is re-read (`refresh=1`: 2 minutes). */
@@ -34,12 +46,57 @@ const DEFAULTS: WorkOrchestratorDeps = {
   input: orchestratorInputFor,
   usage: refresh => readUsage(refresh),
   now: () => Date.now(),
+  board: () => createWorkBoardReader(() => listBoard()).read(0),
+  serverInstanceId: getServerInstanceId,
+  admissions: maintenanceAdmissionsOpen,
+  lease: () => acquireMaintenanceWork('api_mutation'),
 }
 
 export function createWorkOrchestratorRouter(given: Partial<WorkOrchestratorDeps> = {}) {
   const deps = { ...DEFAULTS, ...given }
   const router = Router()
   router.use('/work/orchestrator', (_req, res, next) => { res.set('Cache-Control', 'private, no-store'); next() })
+  router.post('/work/orchestrator/snapshot', async (req, res) => {
+    const body = req.body
+    if (!body || typeof body !== 'object' || Array.isArray(body)
+      || Object.keys(body).some(k => !['workID', 'revision', 'serverInstanceId', 'snapshot'].includes(k))
+      || typeof body.workID !== 'string' || body.workID.length > 256 || !WORK_ID.test(body.workID)
+      || typeof body.revision !== 'string' || !/^[a-f0-9]{64}$/.test(body.revision)
+      || typeof body.serverInstanceId !== 'string'
+      || !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(body.serverInstanceId)) {
+      return res.status(400).json({ error: 'invalid_snapshot_binding' })
+    }
+    if (Buffer.byteLength(JSON.stringify(body)) > ORCHESTRATOR_BODY_BYTES) return res.status(413).json({ error: 'snapshot_too_large' })
+    let snapshot: ControlSnapshot
+    try { snapshot = parseSnapshot(body.snapshot, deps.now()) }
+    catch { return res.status(400).json({ error: 'invalid_snapshot' }) }
+    const binding = () => {
+      const id = deps.serverInstanceId()
+      if (!id) throw new AskWorkPlanError('server_instance_unavailable', 503)
+      if (id !== body.serverInstanceId) throw new AskWorkPlanError('server_instance_changed', 409)
+      if (!deps.admissions()) throw new AskWorkPlanError('maintenance', 503)
+      return id
+    }
+    let lease: ReturnType<WorkOrchestratorDeps['lease']> | undefined
+    try {
+      binding()
+      lease = deps.lease()
+      let rows: TaskBoardRow[]
+      try { rows = await deps.board() }
+      catch { throw new AskWorkPlanError('work_board_unavailable', 503) }
+      resolveAskWorkTask(body, rows)
+      const serverInstanceId = binding()
+      if (res.destroyed) return
+      // This is the same paired-client evidence cache as /input, not execution authority. parseSnapshot
+      // retains only its known fields; arbitrary automatic/forkable/capability fields never enter the cache.
+      deps.putSnapshot(snapshot)
+      return res.json({ protocolVersion: 1, accepted: true, workID: body.workID, revision: body.revision, serverInstanceId })
+    } catch (error) {
+      if (res.destroyed) return
+      const known = error instanceof AskWorkPlanError
+      return res.status(known ? error.status : 503).json({ error: known ? error.code : 'snapshot_unavailable' })
+    } finally { lease?.release() }
+  })
   router.post('/work/orchestrator/input', async (req, res) => {
     const body = req.body
     const meetings: unknown = body?.meetingWorkIDs ?? []

package/server/web-control/panes/cos-chat.css

@@ -172,3 +172,25 @@
 /* 6.99.16: the COS thread's one quiet line, under the title row. */
 .cc-thread { flex-basis: 100%; margin: 0; font-size: 12.5px; line-height: 1.35; color: var(--tertiary); }
 .cc-thread:empty { display: none; }
+
+/* 6.99.19: the Prep composer, above the chat's own. The live meeting view's panel, Files row and composer (meetings.css
+   .mt-panel, .mt-files, .mt-composer), so it reads as the same tool. */
+.cc-prep { padding: 10px 0 2px; }
+.cc-prep-panel { display: grid; gap: 6px; }
+.cc-prep-panel .mt-ask-line { margin: 0 0 4px; }
+.cc-prep-title { min-width: 0; overflow-wrap: anywhere; }
+.cc-prep-head-acts { display: flex; flex: none; gap: 4px 14px; flex-wrap: wrap; justify-content: flex-end; }
+.cc-prep-panel .mt-files { max-width: none; margin: 0; }
+.cc-prep-panel .mt-files-list li.mt-up { min-height: 44px; align-content: center; }
+.cc-prep-form { margin-top: 2px; }
+.cc-prep-form .field { min-height: 76px; max-height: 220px; }
+.cc-prep-acts { display: flex; align-items: center; gap: 8px; justify-content: flex-end; flex-wrap: wrap; }
+.cc-prep-count { flex: 1; min-width: 0; font-size: 12px; }
+.cc-prep-add { position: relative; cursor: pointer; }
+.cc-prep-add:focus-within { outline: 2px solid var(--accent); outline-offset: 2px; }
+.cc-prep-acts .cx-btn { height: 40px; }
+.cc-prep-note { margin: 0; font-size: 13px; }
+.cc-prep-note[hidden] { display: none; }
+.cc-prep.dragging .cc-prep-panel { outline: 2px dashed var(--accent); outline-offset: 4px; }
+.cc-prep { scroll-margin-top: calc(64px + var(--safe-top, 0px)); }
+@media (min-width: 860px) { .msg-right .cc-prep { padding: 10px 16px 0; max-height: 55%; overflow-y: auto; flex: none; } }