Add GET /api/chat/pending for Chief of Staff polling

README.md

@@ -19,16 +19,17 @@ Public FastAPI bridge for the Command Center PWA (`https://simzy420.github.io`).
 | Method | Path | Auth | Description |
 |--------|------|------|-------------|
 | GET | `/health` | none | Health check `{ ok: true }` |
-| OPTIONS | `/api/chat`, `/api/chat/reply` | none | CORS preflight |
+| OPTIONS | `/api/chat`, `/api/chat/reply`, `/api/chat/pending` | none | CORS preflight |
 | POST | `/api/chat` | none | Client sends a user message; forwards to Grok webhook |
 | GET | `/api/chat?sessionId=` | none | Poll session messages |
+| GET | `/api/chat/pending` | Bearer `CHAT_BRIDGE_SECRET` | Unanswered user messages (no assistant `final` yet), oldest first, max 50 |
 | POST | `/api/chat/reply` | Bearer `CHAT_BRIDGE_SECRET` | Grok/agent posts assistant replies |
 
 ## Space secrets (set in Settings → Variables and secrets)
 
 | Secret | Required | Purpose |
 |--------|----------|---------|
-| `CHAT_BRIDGE_SECRET` | **yes** | Bearer token for `POST /api/chat/reply` |
+| `CHAT_BRIDGE_SECRET` | **yes** | Bearer token for `POST /api/chat/reply` and `GET /api/chat/pending` |
 | `GROK_WEBHOOK_URL` | for live Grok | Webhook URL that receives client chat payloads |
 | `GROK_WEBHOOK_SENDER_KEY` | for live Grok | Sent as `Authorization: Bearer …`, `X-Webhook-Key`, and `?key=` |
 
@@ -58,6 +59,10 @@ curl -s -X POST https://simzy-command-center-chat.hf.space/api/chat/reply \
   -H 'Content-Type: application/json' \
   -H 'Authorization: Bearer YOUR_CHAT_BRIDGE_SECRET' \
   -d '{"sessionId":"demo","clientMsgId":"m1","botId":"grok","text":"hi back","status":"final"}'
+
+# Pending unanswered (agent poll; use your CHAT_BRIDGE_SECRET)
+curl -s https://simzy-command-center-chat.hf.space/api/chat/pending \
+  -H 'Authorization: Bearer YOUR_CHAT_BRIDGE_SECRET'
 ```
 
 Hardware: CPU basic. Visibility: public (phone PWA must call it; secrets stay in Space secrets).