phase2: add worker job queue endpoints

backend/api.py

@@ -131,3 +131,72 @@ def notify_unknown(payload: Dict[str, Any]):
     )
 
     return {"ok": True}
+
+# ------------------------------------------------------------------
+# Worker job queue (in-memory, Phase 2)
+# ------------------------------------------------------------------
+
+from collections import deque
+from dataclasses import dataclass, asdict
+from typing import Optional
+from uuid import uuid4
+import time
+from fastapi import Header
+from fastapi.responses import JSONResponse
+from pydantic import BaseModel
+
+WORKER_TOKEN = os.getenv("WORKER_TOKEN", "")
+
+def _require_worker_token(x_worker_token: Optional[str]):
+    if not WORKER_TOKEN:
+        raise HTTPException(status_code=500, detail="Server missing WORKER_TOKEN")
+    if not x_worker_token or x_worker_token != WORKER_TOKEN:
+        raise HTTPException(status_code=401, detail="Unauthorized worker")
+
+@dataclass
+class Job:
+    id: str
+    payload: dict
+    created_at: float
+    status: str = "queued"  # queued|running|done|failed
+    message: str = ""
+
+JOBQ: deque[Job] = deque()
+JOBS: dict[str, Job] = {}
+
+class EnqueueReq(BaseModel):
+    payload: dict
+
+@app.post("/api/jobs/enqueue")
+def enqueue_job(req: EnqueueReq):
+    job_id = uuid4().hex
+    job = Job(id=job_id, payload=req.payload, created_at=time.time())
+    JOBQ.append(job)
+    JOBS[job_id] = job
+    return {"job_id": job_id, "status": job.status}
+
+@app.get("/api/jobs/next")
+def jobs_next(x_worker_token: Optional[str] = Header(default=None)):
+    _require_worker_token(x_worker_token)
+    while JOBQ:
+        job = JOBQ.popleft()
+        if job.status == "queued":
+            job.status = "running"
+            return asdict(job)
+    return JSONResponse(status_code=204, content=None)
+
+class StatusReq(BaseModel):
+    status: str  # running|done|failed
+    message: str = ""
+
+@app.post("/api/jobs/{job_id}/status")
+def jobs_status(job_id: str, req: StatusReq, x_worker_token: Optional[str] = Header(default=None)):
+    _require_worker_token(x_worker_token)
+    job = JOBS.get(job_id)
+    if not job:
+        raise HTTPException(status_code=404, detail="Unknown job_id")
+    if req.status not in ("running", "done", "failed"):
+        raise HTTPException(status_code=400, detail="Invalid status")
+    job.status = req.status
+    job.message = req.message
+    return {"ok": True, "job_id": job_id, "status": job.status}