Update app.js

app.js

@@ -593,31 +593,41 @@ app.post('/project/ping', async (req, res) => {
 });
 */
 
-app.post('/poll', async (req, res) => {
-    const { token } = req.body;
-    if (!token) return res.status(400).json({ error: 'Token required' });
-    
-    const decoded = jwt.decode(token);
-    if (!decoded) return res.status(401).json({ error: 'Malformed token' });
-    
-    const secret = await getSessionSecret(decoded.uid, decoded.projectId);
-    if (!secret) return res.status(404).json({ error: 'Session revoked' });
+app.post('/project/ping', async (req, res) => {
+    const { projectId, userId, isFrontend } = req.body;
+    if (!projectId || !userId) return res.status(400).json({ error: "Missing IDs" });
     
-    try {
-        jwt.verify(token, secret);
-        const targetUrl = EXTERNAL_SERVER_URL.replace(/\/$/, '') + '/project/ping'; 
-        
-        // UPDATE: Send isFrontend: true so we get the text snapshot for the plugin UI
-        const response = await axios.post(targetUrl, { 
-            projectId: decoded.projectId, 
-            userId: decoded.uid,
-            isFrontend: true 
-        });
+    const project = await StateManager.getProject(projectId);
+    if (!project || project.userId !== userId) return res.json({ action: "IDLE" });
+
+    // 1. BASE RESPONSE (Visuals)
+    // Both Frontend and Plugin need this to show "Thinking..." or text generation
+    const response = {
+        action: "IDLE",
+        status: StateManager.getStatus(projectId),
+        snapshot: StateManager.getSnapshot(projectId)
+    };
+
+    // 2. EXECUTOR LOGIC (Plugin Only)
+    // Only pop commands if this is NOT the passive frontend viewer
+    if (!isFrontend) {
+        const command = await StateManager.popCommand(projectId);
         
-        return res.json(response.data); 
-    } catch (err) { return res.status(403).json({ error: 'Invalid Token' }); }
+        // We don't need 'streamBuffers' anymore since we use 'snapshot' for visuals.
+        // But if you have legacy stream logic, we can leave it or remove it. 
+        // For this hybrid model, snapshot is king.
+
+        if (command) {
+            response.action = command.type; 
+            response.target = command.payload;
+            response.code = command.type === 'EXECUTE' ? command.payload : null;
+        }
+    }
+
+    res.json(response);
 });
 
+
 app.post('/human/override', validateRequest, async (req, res) => {
     const { projectId, instruction, userId } = req.body;
     try {