cctally 1.59.0 → 1.60.0

package/CHANGELOG.md

@@ -5,6 +5,23 @@ based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.60.0] - 2026-07-03
+
+### Changed
+- Dashboard **Recent Sessions** is denser and more useful. When every recent session uses the same model, the redundant per-row model column is dropped entirely — it previously rendered as a column of dots under a still-labelled "Model" header, which read as broken — and a single "all · model" caption in the header says it instead; a mixed set of models still shows the column. Two columns that carry real signal take its place: a **Session** title for each row (its first prompt, or an AI-generated summary when one exists) and a **Cache** hit-rate. The title is private conversation content, so it appears only when transcript viewing is enabled for how you reached the dashboard (on your own machine, or on the LAN only if you have explicitly exposed transcripts) and shows a dash otherwise. All the columns now fit at a common laptop width without sideways scrolling, and a long title shortens with the full text available on hover (#264).
+- Dashboard **$/1% Trend** detail view reads better and gains a cost column. When there is too little history to compute a four-week median, the two formerly-empty "—" median tiles collapse into a single "needs 4 weeks" hint instead of looking broken. The weekly table gains a sortable **Cost** column (what you spent that week) and the whole view opens in a wider two-pane layout — the chart and its headline numbers on the left, the sortable weekly table on the right — so it fills the space instead of stacking tall and scrolling; sorting the table reorders only the pop-up, not the small card behind it (#264).
+- The dashboard's usage history is split back into three independent **Daily**, **Weekly**, and **Monthly** cards, each opening its own detail view — undoing an earlier consolidation that folded them into a single "History" card and hid Weekly and Monthly behind an easy-to-miss Day/Week/Month toggle. Every card now has a discoverable header and a keyboard shortcut, and the Weekly and Monthly views open in a wider two-pane layout — the period navigator across the top, the selected period's model-and-token breakdown on the left, and a sortable table of every period on the right — so the full history fits without scrolling. The daily heatmap still deep-links a clicked day straight into the Daily view (#264).
+- Dashboard board and hero redesigned to fix the wasted space the previous facelift left behind. The board is now a content-aware **bento grid** — cards sit in height-matched rows sized to their content and the layout goes full-width (fluid up to 2100px) instead of capping at 1600px — so a wide screen fills with data instead of stranding a tall column of half-empty full-width cards, roughly halving the page height, while still collapsing to a single column on mobile and keeping drag-to-reorder within each row. The hero is rebuilt into three zones so the two questions you actually ask each get a dominant number: weekly usage % (with 5-hour usage paired beside it and the reset countdown) and dollars spent this week (with $/1% as its sub-line), alongside a compact support column for the end-of-week forecast, the week-over-week $/1% trend, and a snapshot-freshness reading that now stays calm for a normal few-minute-old snapshot and only turns amber, then red, once the data is genuinely stale. Every card also gains a consistent ⤢ expand control in its header to open its detail view (previously some cards signalled "open" only via the share icon, and the Blocks card had no click-to-open at all), the Forecast card gains a pace bar toward its 100% cap, and the empty Alerts card shows a teaching gauge of your current usage against the configured alert thresholds (#264).
+- Dashboard desktop board fixes that finish the bento redesign. Cards whose content is taller than their row now scroll inside their own frame instead of overflowing and rendering on top of the card below them — previously the $/1% Trend chart could spill over the Daily card beneath it, and the Weekly and Monthly cards did the same. The 5-hour **Blocks** card now shows every block for the week (scroll inside the card to reach them all) instead of only the three most recent with no way to see the rest. The **Daily** heatmap shows each day's dollar amount again on the card, not just in its detail view. And the per-card collapse arrow — which did nothing on desktop once the board became height-matched — is removed there (the ⤢ expand control opens each card's detail); it still works on smaller stacked screens (#264).
+- Dashboard mobile fixes. The **Recent Sessions** panel title is no longer crushed to nothing on a phone; each session in the list now leads with its title (what the session was about) instead of hiding it; the at-a-glance hero is a compact card rather than three tall stacked zones; and the Daily card title no longer clips (#264).
+
+### Fixed
+- Dashboard: the empty **Recent Alerts** card no longer sits bottom-heavy with a band of empty space above it — it now shows the same "you're clear" gauge as the alerts detail view (your current usage against the configured alert thresholds), centered and sized to the card, so it reads as balanced as its Forecast and Blocks neighbours (#265).
+- Dashboard: the **$/1% Trend** card keeps its sparkline and "older ▸ newer" legend pinned in view and scrolls the weekly table beneath them, so with only a few weeks of history the chart is no longer half-hidden below the card's internal scroll fold (#265).
+- Dashboard: the **Blocks** card's expand (⤢) control is now disabled on a week with no activity blocks yet, instead of looking clickable but opening nothing when pressed (#265).
+- Dashboard: the **Weekly** and **Monthly** cards now list every week and month and scroll within the card, instead of showing only the three most recent behind a scrollbar that revealed nothing more — so the whole history is reachable without opening the detail view (#265).
+- Dashboard: the **Daily** heatmap no longer clips the top off each day-of-month number — the card row is a little taller so every day's number and its dollar amount are fully legible (#265).
+
 ## [1.59.0] - 2026-07-02
 
 ### Changed

package/bin/_cctally_dashboard.py

@@ -4500,10 +4500,22 @@ def snapshot_to_envelope(snap: "DataSnapshot", *,
                          monotonic_now: "float | None" = None,
                          oauth_usage_cfg: "dict | None" = None,
                          display_tz_pref_override: "str | None" = None,
-                         runtime_bind: "str | None" = None) -> dict:
+                         runtime_bind: "str | None" = None,
+                         transcripts_visible: bool = False) -> dict:
     """Serialize a DataSnapshot into the JSON envelope consumed by the
     browser (design spec §2.2).
 
+    ``transcripts_visible`` gates the transcript-derived session ``title``
+    (#264 S3): the key is emitted ONLY when the flag is True AND the row has
+    a title, so False (the default) fails closed for any caller that forgets
+    to pass it — no ``title`` key, no leaked prompt content. The two
+    browser-serving emit sites (``GET /api/data`` + the SSE loop) pass the
+    per-request ``_transcripts_visible_to_request()`` — the SAME predicate
+    that drives ``transcriptsEnabled`` and the per-row "open conversation"
+    button; every other caller (share builders, fixtures, tests) keeps the
+    default. ``cache_hit_pct`` (sessions) and ``cost_usd`` (trend) are plain
+    numbers and are never gated.
+
     Pure function — no I/O on the snapshot data path. Reads
     ``config.json`` once for ``display.tz`` and once for the
     ``alerts_settings`` mirror (cheap atomic-rename reads); the
@@ -5101,6 +5113,14 @@ def snapshot_to_envelope(snap: "DataSnapshot", *,
                         "dollar_per_pct": w.dollars_per_percent,
                         "delta":          w.delta_dpp,
                         "is_current":     bool(w.is_current),
+                        # #264 S3: additive weekly cost (already on the row via
+                        # build_trend_view); rendered by the Trend modal's Cost
+                        # column. ``getattr`` (like ``project_key`` /
+                        # ``trend_history_median_dpp``) tolerates minimal trend
+                        # shapes — SimpleNamespace test rows / older fixtures —
+                        # that predate this nullable field. ``None`` when the
+                        # week has no cost snapshot.
+                        "cost_usd":       round(_wc, 4) if (_wc := getattr(w, "weekly_cost_usd", None)) is not None else None,
                     }
                     for w in snap.trend
                 ],
@@ -5112,6 +5132,9 @@ def snapshot_to_envelope(snap: "DataSnapshot", *,
                         "dollar_per_pct": w.dollars_per_percent,
                         "delta":          w.delta_dpp,
                         "is_current":     bool(w.is_current),
+                        # #264 S3: additive weekly cost (see weeks[] above; same
+                        # getattr tolerance for minimal/older trend shapes).
+                        "cost_usd":       round(_wc, 4) if (_wc := getattr(w, "weekly_cost_usd", None)) is not None else None,
                     }
                     for w in (snap.weekly_history or [])
                 ],
@@ -5155,6 +5178,20 @@ def snapshot_to_envelope(snap: "DataSnapshot", *,
                     # resolve (the React cell falls back to plain text).
                     "project_key":  getattr(s, "project_key", None),
                     "cost_usd":     round(s.cost_usd, 4) if s.cost_usd is not None else None,
+                    # #264 S3: cache-hit % is a plain metric — always serialized
+                    # (never gated). ``None`` when the row has no denominator.
+                    "cache_hit_pct": round(s.cache_hit_pct, 1) if s.cache_hit_pct is not None else None,
+                    # The session title is transcript-derived content: emit the
+                    # `title` KEY only when the per-request transcript gate is
+                    # open AND a title exists. Omitted (not null) otherwise, so
+                    # a gated-off or untitled session renders the client's
+                    # em-dash fallback and committed goldens (empty conversation
+                    # fixtures -> no title) never carry a `title` key. Default
+                    # transcripts_visible=False therefore fails fully closed.
+                    **({"title": getattr(s, "title", None)}
+                       if (transcripts_visible
+                           and getattr(s, "title", None) is not None)
+                       else {}),
                 }
                 for s in snap.sessions
             ],
@@ -7356,6 +7393,10 @@ class DashboardHTTPHandler(BaseHTTPRequestHandler):
             cfg_oauth = _get_oauth_usage_config(load_config())
         except OauthUsageConfigError:
             cfg_oauth = dict(sys.modules["cctally"]._OAUTH_USAGE_DEFAULTS)
+        # Resolve the per-request transcript gate ONCE and use it for both the
+        # in-envelope session `title` gate (#264 S3) and the `transcriptsEnabled`
+        # client signal below — one predicate, two consumers, desync impossible.
+        visible = self._transcripts_visible_to_request()
         env = snapshot_to_envelope(
             snap,
             # `_now_utc()` honors CCTALLY_AS_OF for harness determinism;
@@ -7368,6 +7409,7 @@ class DashboardHTTPHandler(BaseHTTPRequestHandler):
             oauth_usage_cfg=cfg_oauth,
             display_tz_pref_override=type(self).display_tz_pref_override,
             runtime_bind=type(self).cctally_host,
+            transcripts_visible=visible,
         )
         # Conversation viewer (Plan 2, spec §5): inject the client signal
         # PER-REQUEST and Host-aware — NOT inside snapshot_to_envelope (the
@@ -7376,7 +7418,7 @@ class DashboardHTTPHandler(BaseHTTPRequestHandler):
         # request that the transcript GETs would 403 shows
         # transcriptsEnabled=false, never enabled-then-403 (the pass-2 P2
         # finding) — one predicate, two consumers, desync impossible.
-        env["transcriptsEnabled"] = self._transcripts_visible_to_request()
+        env["transcriptsEnabled"] = visible
         body = json.dumps(env, ensure_ascii=False).encode("utf-8")
         self.send_response(200)
         self.send_header("Content-Type", "application/json; charset=utf-8")
@@ -8295,6 +8337,9 @@ class DashboardHTTPHandler(BaseHTTPRequestHandler):
                     oauth_usage_cfg=cfg_oauth,
                     display_tz_pref_override=type(self).display_tz_pref_override,
                     runtime_bind=type(self).cctally_host,
+                    # #264 S3: gate the in-envelope session `title` on the same
+                    # connection-scoped predicate that drives transcriptsEnabled.
+                    transcripts_visible=transcripts_enabled,
                 )
                 env["transcriptsEnabled"] = transcripts_enabled
                 msg = (

package/bin/_cctally_tui.py

@@ -1609,7 +1609,40 @@ def _tui_build_sessions(
     view = c.build_sessions_view(
         entries, now_utc=now_utc, limit=limit, display_tz=None,
     )
-    return list(view.rows)
+    rows = list(view.rows)
+    # Attach human-readable titles for the dashboard/TUI Sessions surface.
+    # Reuses the conversation viewer's title derivation (AI title wins, else
+    # first non-marker human line), which reads the CACHE db
+    # (conversation_messages / conversation_ai_titles). Fail-soft: any cache
+    # failure leaves titles ``None`` -> the client renders an em-dash. One
+    # bounded indexed query (<= `limit` session ids, rides idx_conv_session_ts)
+    # per snapshot build. Titles are stashed unconditionally on this
+    # server-internal row; the privacy gate is applied later, at envelope
+    # serialization (``snapshot_to_envelope(transcripts_visible=...)``).
+    if rows:
+        session_ids = [r.session_id for r in rows if r.session_id]
+        try:
+            conn = c.open_cache_db()
+        except (sqlite3.DatabaseError, OSError):
+            conn = None
+        if conn is not None:
+            try:
+                titles = c._load_sibling(
+                    "_lib_conversation_query"
+                )._session_titles_map(conn, session_ids)
+                rows = [
+                    dataclasses.replace(r, title=titles.get(r.session_id))
+                    if r.session_id in titles else r
+                    for r in rows
+                ]
+            except (sqlite3.DatabaseError, OSError):
+                pass  # fail-soft: leave titles None
+            finally:
+                try:
+                    conn.close()
+                except sqlite3.Error:
+                    pass
+    return rows
 
 
 @dataclass

package/bin/_lib_view_models.py

@@ -264,6 +264,16 @@ class TuiSessionRow:
     # without re-reading ``session_files`` and so the share path can
     # privacy-scrub via ``_lib_share._scrub``.
     project_path: str | None = None
+    # Dashboard/TUI-only: the human-readable session title (AI-generated
+    # title when present, else the first non-marker user prompt). Populated
+    # by the dashboard/TUI snapshot wrapper (``_cctally_tui._tui_build_sessions``)
+    # via ``_lib_conversation_query._session_titles_map``; left ``None`` on the
+    # CLI ``session`` / share paths (they call ``build_sessions_view`` directly).
+    # This is transcript-derived content — it rides the per-request transcript
+    # privacy gate at envelope serialization (never emitted when the gate is
+    # closed). Defaults ``None`` so fixture rows built positionally stay
+    # compatible.
+    title: str | None = None
 
 
 # === Internal helpers ======================================================