"""Zion PM - mobile control desk (PWA) + JSON API. Zero deps (stdlib only).

Serves a polished, installable mobile web app that reads/writes the same state/ files the

conductor uses: approve/reject outbox items, add tasks, see workers + activity. Pair with push

(bin/notify.sh) so you get pinged and tap through.

Run:  bash bin/pm-web.sh          (wrapper; or: python3 bin/pm-web.py)

Env:  PM_WEB_PORT (default 8780), PM_WEB_TOKEN (shared secret; if unset, binds localhost only)

Front it with Traefik + Authentik later for REDACTED-HOST.

"""

import json, os, time, http.server, socketserver, urllib.parse

PM = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))

ST = os.path.join(PM, "state")

INBOX = os.path.join(PM, "inbox")

PORT = int(os.environ.get("PM_WEB_PORT", "8780"))

TOKEN = os.environ.get("PM_WEB_TOKEN", "")

BIND = "0.0.0.0" if TOKEN else "127.0.0.1"

def _load(name, default):

    try:

        with open(os.path.join(ST, name)) as f: return json.load(f)

    except Exception: return default

def _save(name, obj):

    p = os.path.join(ST, name); tmp = p + ".tmp"

    with open(tmp, "w") as f: json.dump(obj, f, indent=2)

    os.replace(tmp, p)

def _ts(): return time.strftime("%Y-%m-%dT%H:%M:%S")

def _log(event, **kw):

    with open(os.path.join(ST, "activity.jsonl"), "a") as f:

        f.write(json.dumps({"ts": _ts(), "event": event, **kw}) + "\n")

def state_blob():

    tasks = _load("tasks.json", {"tasks": []})["tasks"]

    outbox = _load("outbox.json", {"pending": [], "history": []})

    cond = _load("conductor_state.json", {})

    wdir = os.path.join(PM, "workers")

    running = []

    if os.path.isdir(wdir):

        running = [d for d in os.listdir(wdir)

                   if os.path.isdir(os.path.join(wdir, d))

                   and not os.path.exists(os.path.join(wdir, d, "result.json"))]

    act = []

    ap = os.path.join(ST, "activity.jsonl")

    if os.path.exists(ap):

        act = [json.loads(l) for l in open(ap).read().splitlines()[-15:] if l.strip()]

    return {

        "tasks": [t for t in tasks if t["status"] not in ("done", "cancelled")],

        "approvals": outbox["pending"],

        "workers": running,

        "activity": list(reversed(act)),

        "heartbeat": cond.get("last_tick"),

        "ticks": cond.get("ticks", 0),

    }

def decide(oid, decision, reason=""):

    o = _load("outbox.json", {"pending": [], "history": []})

    keep, hit = [], None

    for p in o["pending"]:

        if p["id"] == oid: hit = p

        else: keep.append(p)

    if not hit: return False

    hit["decision"] = decision; hit["decided_at"] = _ts(); hit["reason"] = reason

    o["pending"] = keep; o["history"].append(hit)

    _save("outbox.json", o); _log("outbox_" + decision, id=oid, kind=hit.get("kind"))

    return True

def add_task(title, project=None, ttype="misc"):

    import uuid

    t = _load("tasks.json", {"tasks": []})

    tid = "t-" + uuid.uuid4().hex[:8]

    t["tasks"].append({"id": tid, "title": title, "project": project, "type": ttype,

                       "status": "open", "created": _ts(), "artifacts": [], "worker": None})

    _save("tasks.json", t)

    with open(os.path.join(INBOX, tid + ".task"), "w") as f: f.write(title + "\n")

    _log("task_added", id=tid, title=title)

    return tid

INDEX = r"""<!doctype html><html lang=en><head><meta charset=utf-8>

<meta name=viewport content="width=device-width,initial-scale=1,viewport-fit=cover">

<meta name=theme-color content="#0b0f17"><link rel=manifest href=/manifest.json>

<meta name=apple-mobile-web-app-capable content=yes>

<meta name=apple-mobile-web-app-status-bar-style content=black-translucent>

<title>Zion PM</title><style>

:root{--bg:

--grn:

*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);

font:15px/1.45 -apple-system,BlinkMacSystemFont,"Segoe UI",Inter,sans-serif;

padding:env(safe-area-inset-top) 0 calc(env(safe-area-inset-bottom) + 80px)}

header{position:sticky;top:0;background:rgba(11,15,23,.92);backdrop-filter:blur(12px);

padding:16px 18px 12px;border-bottom:1px solid var(--line);z-index:5}

h1{font-size:20px;margin:0;font-weight:800;letter-spacing:-.3px}

.hb{color:var(--mut);font-size:12px;margin-top:3px}

.wrap{padding:14px 14px 0;max-width:680px;margin:0 auto}

.sec{margin-bottom:22px}.sec h2{font-size:12px;text-transform:uppercase;letter-spacing:.08em;

color:var(--mut);margin:0 0 9px;font-weight:800}

.card{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:14px;margin-bottom:10px}

.card.appr{border-left:3px solid var(--gold)}

.k{font-size:11px;font-weight:800;text-transform:uppercase;color:var(--gold);letter-spacing:.05em}

.pv{white-space:pre-wrap;color:var(--ink);font-size:13px;margin:7px 0 12px;

max-height:160px;overflow:auto;background:

.row{display:flex;gap:9px}.btn{flex:1;border:0;border-radius:11px;padding:12px;font-weight:800;

font-size:14px;color:

.task{display:flex;align-items:center;gap:10px}.dot{width:8px;height:8px;border-radius:9px;background:var(--blu);flex:0 0 auto}

.task .st{margin-left:auto;font-size:11px;color:var(--mut);text-transform:uppercase}

.proj{font-size:11px;color:var(--mut)}

.act{font-size:12px;color:var(--mut);padding:5px 0;border-bottom:1px solid var(--line)}

.empty{color:var(--mut);font-size:13px;padding:4px 2px}

.add{position:fixed;bottom:0;left:0;right:0;background:rgba(11,15,23,.95);backdrop-filter:blur(12px);

border-top:1px solid var(--line);padding:12px 14px calc(12px + env(safe-area-inset-bottom));display:flex;gap:8px}

.add input{flex:1;background:var(--panel);border:1px solid var(--line);border-radius:12px;

padding:13px;color:var(--ink);font-size:15px}.add button{background:var(--blu);border:0;border-radius:12px;

padding:0 18px;color:

.chip{display:inline-block;background:

padding:2px 8px;font-size:11px;color:var(--mut);margin-left:6px}

</style></head><body>

<header><h1>Zion PM</h1><div class=hb id=hb>connecting…</div></header>

<div class=wrap>

  <div class=sec><h2>Approvals</h2><div id=appr></div></div>

  <div class=sec><h2>Today</h2><div id=tasks></div></div>

  <div class=sec><h2>Workers</h2><div id=workers></div></div>

  <div class=sec><h2>Activity</h2><div id=activity></div></div>

</div>

<div class=add><input id=ti placeholder="Tell the PM to do something…"

  onkeydown="if(event.key==='Enter')addTask()"><button onclick=addTask()>+</button></div>

<script>

const TOK=new URLSearchParams(location.search).get('t')||'';

const H=TOK?{'X-PM-Token':TOK}:{};

async function api(p,m='GET',b){const r=await fetch(p,{method:m,headers:{...H,'Content-Type':'application/json'},

  body:b?JSON.stringify(b):undefined});return r.json()}

function esc(s){return (s||'').replace(/[&<>]/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;'}[c]))}

async function load(){let s;try{s=await api('/api/state')}catch(e){document.getElementById('hb').textContent='offline';return}

  document.getElementById('hb').textContent=`${s.ticks} ticks · last ${s.heartbeat||'never'} · ${s.workers.length} workers`;

  const A=document.getElementById('appr');

  A.innerHTML=s.approvals.length?s.approvals.map(p=>`<div class="card appr"><div class=k>${esc(p.kind)}</div>

    <div class=pv>${esc(p.preview)}</div><div class=row>

    <button class="btn ok" onclick="act('${p.id}','approve')">Approve</button>

    <button class="btn no" onclick="act('${p.id}','reject')">Reject</button></div></div>`).join(''):'<div class=empty>nothing waiting on you</div>';

  document.getElementById('tasks').innerHTML=s.tasks.length?s.tasks.map(t=>`<div class=card><div class=task>

    <span class=dot></span><div><div>${esc(t.title)}</div><div class=proj>${esc(t.project||'')}</div></div>

    <span class=st>${esc(t.status)}</span></div></div>`).join(''):'<div class=empty>no open tasks</div>';

  document.getElementById('workers').innerHTML=s.workers.length?s.workers.map(w=>`<div class=card>${esc(w)} <span class=chip>running</span></div>`).join(''):'<div class=empty>idle</div>';

  document.getElementById('activity').innerHTML=s.activity.map(a=>`<div class=act>${esc(a.ts)} · ${esc(a.event)} ${esc(a.title||a.id||'')}</div>`).join('')||'<div class=empty>-</div>';

}

async function act(id,d){await api('/api/'+d,'POST',{id});load()}

async function addTask(){const i=document.getElementById('ti');if(!i.value.trim())return;

  await api('/api/add','POST',{title:i.value.trim()});i.value='';load()}

load();setInterval(load,4000);

if('serviceWorker'in navigator)navigator.serviceWorker.register('/sw.js').catch(()=>{});

</script></body></html>"""

MANIFEST = json.dumps({

    "name": "Zion PM", "short_name": "Zion PM", "start_url": "/", "display": "standalone",

    "background_color": "#0b0f17", "theme_color": "#0b0f17",

    "icons": [{"src": "/icon.png", "sizes": "512x512", "type": "image/png"}]

})

SW = "self.addEventListener('fetch',()=>{});"

class H(http.server.BaseHTTPRequestHandler):

    def _auth(self):

        if not TOKEN: return True

        return self.headers.get("X-PM-Token") == TOKEN

    def _send(self, code, body, ctype="application/json"):

        b = body.encode() if isinstance(body, str) else body

        self.send_response(code); self.send_header("Content-Type", ctype)

        self.send_header("Content-Length", str(len(b))); self.end_headers(); self.wfile.write(b)

    def log_message(self, *a): pass

    def do_GET(self):

        path = urllib.parse.urlparse(self.path).path

        if path == "/": return self._send(200, INDEX, "text/html; charset=utf-8")

        if path == "/manifest.json": return self._send(200, MANIFEST)

        if path == "/sw.js": return self._send(200, SW, "application/javascript")

        if path == "/icon.png": return self._send(200, b"", "image/png")

        if path == "/api/state":

            if not self._auth(): return self._send(401, '{"error":"auth"}')

            return self._send(200, json.dumps(state_blob()))

        self._send(404, '{"error":"nf"}')

    def do_POST(self):

        if not self._auth(): return self._send(401, '{"error":"auth"}')

        path = urllib.parse.urlparse(self.path).path

        n = int(self.headers.get("Content-Length", 0))

        body = json.loads(self.rfile.read(n) or b"{}")

        if path == "/api/approve": return self._send(200, json.dumps({"ok": decide(body["id"], "approved")}))

        if path == "/api/reject": return self._send(200, json.dumps({"ok": decide(body["id"], "rejected")}))

        if path == "/api/add":

            tid = add_task(body["title"], body.get("project"), body.get("type", "misc"))

            return self._send(200, json.dumps({"ok": True, "id": tid}))

        self._send(404, '{"error":"nf"}')

class TS(socketserver.ThreadingMixIn, http.server.HTTPServer): daemon_threads = True

if __name__ == "__main__":

    print(f"[pm-web] http://{BIND}:{PORT}  auth={'token' if TOKEN else 'LOCALHOST-ONLY (set PM_WEB_TOKEN)'}")

    TS((BIND, PORT), H).serve_forever()