codex-copilot-dx 0.9.6 → 0.9.8

package/README.md

@@ -236,6 +236,10 @@ The dashboard loads local status, a live GitHub Copilot model directory, and a s
 
 The transparent, single-color double-peak favicon follows the dashboard's saved light/dark choice without a separate network request.
 
+The saved GitHub Copilot account appears immediately to the left of the Snapshot time. It uses the same local credentials and fingerprint-bound identity metadata as `ccdx auth status`, with username (or numeric ID fallback) and a `SAVED` label; this is not an online entitlement check. Missing, invalid, unidentified, or unreadable credentials are shown explicitly. The account read runs once on page load and on the top Refresh action, independently of adapter status, with no polling or upstream authentication calls. Its loopback-only, custom-header-protected API exposes no token, fingerprint, credential path, or raw metadata. The general status endpoint retains its existing identity-free contract.
+
+Account names containing underscores are supported, including `dingxiao_microsoft`. A numeric ID is a fallback, not a replacement for an available, safely displayable username; the existing length bounds and credential-shaped text suppression still apply.
+
 Usage Analytics is collapsed by default. Opening it adds daily input/output token bars (7/30/90 days) and a 365-day calendar of recorded usage calls or tokens, grouped in the browser's time zone. Cache-read tokens are already part of input and are not added again. Model and range filters use the current snapshot without additional requests; selecting a day shows its filtered model totals in the Usage table, and All history restores the original table. Analytics shares the existing current/rotated-log scan and exposes only bounded metadata (365 days, up to 100 model filters). Days before retained history are hatched, not presented as zero; the oldest retained day may be partial. Counts describe retained usage records, not messages, session time, or all HTTP requests. Refresh explicitly to update the snapshot; there is no background collection or polling.
 
 Terminal Animation is collapsed at the bottom of the page, with an Animation shortcut in the header. Preview frames load only when opened; closing it, hiding the page, or requesting reduced motion stops the preview timer. Unsaved choices survive folding and reopening. Recent upstream failures expand to existing diagnostic fields (time, model, code, message, response/request IDs, and retry policy) with a Copy diagnostic control. These are the last 10 retained `response.failed` events, not complete session histories; a retry attempt does not prove recovery. Diagnostic prose is redacted by the existing recorder but can still contain sensitive context: review before copying or sharing.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-copilot-dx",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "Use Codex App with GitHub Copilot",
   "author": "Dale Xiao",
   "type": "module",

package/src/adapter.mjs

@@ -65,7 +65,7 @@ export {
 
 const ADAPTER_RUNTIME_CONFIG = loadRuntimeConfig();
 const DASHBOARD_PATHS = new Set(["/", "/ui.css", "/theme.js", "/ui.js"]);
-const DASHBOARD_API_PATHS = new Set(["/_ccdx/ui/animation", "/_ccdx/ui/models/live", "/_ccdx/ui/usage"]);
+const DASHBOARD_API_PATHS = new Set(["/_ccdx/ui/animation", "/_ccdx/ui/models/live", "/_ccdx/ui/usage", "/_ccdx/ui/auth"]);
 
 export function requestPath(reqUrl) {
   return new URL(reqUrl || "/", "http://localhost").pathname;

package/src/dashboard/index.html

@@ -20,7 +20,7 @@
       <main>
         <section class="intro">
           <h1><span aria-hidden="true">$</span> ccdx status</h1>
-          <p id="updated">Reading status…</p>
+          <div class="snapshot-meta"><p id="auth-account" role="status" title="Saved GitHub Copilot account / local credentials only; not an online entitlement check.">GitHub / READING</p><p id="updated">Reading status…</p></div>
         </section>
 
         <section class="overview" aria-label="Overview">

package/src/dashboard/ui.css

@@ -25,6 +25,8 @@ button:disabled { opacity: .55; cursor: wait; }
 h1 { margin: 0; font-size: clamp(20px, 3vw, 27px); font-weight: 650; letter-spacing: -.035em; }
 h1 span { color: var(--accent-soft); }
 .intro p { margin: 0; color: var(--subtle); font-size: 11px; }
+.snapshot-meta { display: flex; flex-wrap: wrap; justify-content: flex-end; align-items: baseline; gap: 8px 18px; min-width: 0; }
+.intro .snapshot-meta p { margin: 0; overflow-wrap: anywhere; }
 .overview { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 11px; }
 .card, .panel, .lower { min-width: 0; background: var(--surface); border: 1px solid var(--border); border-radius: 2px; }
 .card { min-height: 139px; padding: 18px; }
@@ -126,5 +128,6 @@ footer { color: var(--footer); font-size: 10px; letter-spacing: .05em; padding:
 @media (max-width: 1000px) { .animation-options { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
 @media (max-width: 900px) { .overview { grid-template-columns: repeat(2, minmax(0, 1fr)); } .details { grid-template-columns: repeat(2, minmax(0, 1fr)); } .details .panel:last-child { grid-column: 1 / -1; } }
 @media (max-width: 680px) { .animation-options { grid-template-columns: 1fr; } }
+@media (max-width: 620px) { .snapshot-meta { justify-content: flex-start; margin-top: 9px; } }
 @media (max-width: 620px) { .shell { padding: 0 16px; } .topbar { min-height: 60px; } .brand-detail { display: none; } .topbar-actions { gap: 11px; } .intro { display: block; padding: 29px 0 21px; } .intro p { margin-top: 9px; } .overview, .details { grid-template-columns: 1fr; } .details .panel:last-child { grid-column: auto; } .card { min-height: 122px; } .card strong { margin-top: 14px; } .lower li { display: block; } .lower li span { display: block; margin-top: 5px; } }
 @media (max-width: 460px) { .topbar { flex-wrap: wrap; padding: 12px 0; gap: 10px; } .topbar-actions { gap: 9px; } .panel-heading { flex-wrap: wrap; } .heading-actions { gap: 10px; } .failure-detail { grid-template-columns: 1fr; gap: 3px; } .failure-detail dd { margin-bottom: 7px; } select { max-width: 210px; } }

package/src/dashboard/ui.js

@@ -3,6 +3,28 @@ const text = (id, value) => { element(id).textContent = value; };
 const finite = (value) => value !== null && value !== undefined && Number.isFinite(Number(value));
 const number = (value) => finite(value) ? Math.max(0, Math.round(Number(value))).toLocaleString() : "—";
 const mib = (value) => finite(value) ? `${(Number(value) / 1048576).toFixed(1)} MiB` : "—";
+let authLoading = false;
+
+function renderAuth(data) {
+  const account = data.login ? `@${data.login}` : data.id ? `ID ${data.id}` : "account unknown";
+  const label = data.reason === "credential_read_failed" ? "UNAVAILABLE"
+    : !data.configured ? "NOT CONFIGURED" : !data.valid ? "INVALID" : `${account} / SAVED`;
+  text("auth-account", `GitHub / ${label}`);
+}
+
+async function loadAuth() {
+  if (authLoading) return;
+  authLoading = true;
+  text("auth-account", "GitHub / READING");
+  try {
+    const response = await fetch("/_ccdx/ui/auth", { cache: "no-store", headers: { "X-CCDX-Dashboard": "1" }, signal: AbortSignal.timeout(5000) });
+    const data = await response.json();
+    if (!response.ok || data.source !== "local_auth_status") throw new Error("Auth status unavailable");
+    renderAuth(data);
+  } catch {
+    text("auth-account", "GitHub / UNAVAILABLE");
+  } finally { authLoading = false; }
+}
 
 function duration(value) {
   if (!finite(value)) return "—";
@@ -127,8 +149,9 @@ async function refresh() {
   }
 }
 
-element("refresh").addEventListener("click", refresh);
+element("refresh").addEventListener("click", () => { refresh(); loadAuth(); });
 refresh();
+loadAuth();
 
 const animationRows = new Map();
 let animationTimelines = [];

package/src/dashboard-api.mjs

@@ -1,5 +1,7 @@
 import os from "node:os";
 import { fetchLiveCopilotModels } from "./cli-models.mjs";
+import { authStatus } from "./cli-auth.mjs";
+import { redactDiagnosticText } from "./diagnostic-text.mjs";
 import { createRequestAbort, readJsonBody } from "./http-transport.mjs";
 import { isLoopbackAddress, isLoopbackHostHeader } from "./observability.mjs";
 import {
@@ -16,6 +18,7 @@ import { readUserSettings, terminalAnimationPreference, writeTerminalAnimationTh
 const ANIMATION_PATH = "/_ccdx/ui/animation";
 const MODELS_PATH = "/_ccdx/ui/models/live";
 const USAGE_PATH = "/_ccdx/ui/usage";
+const AUTH_PATH = "/_ccdx/ui/auth";
 const DISABLED_ANIMATION = /^(0|false|no|off)$/i;
 
 function sendJson(res, statusCode, value) {
@@ -109,6 +112,7 @@ export async function handleDashboardApi(req, res, pathname, {
   home = os.homedir(),
   liveModelsFn = () => fetchLiveCopilotModels({ home }),
   usageSummaryFn = (options) => summarizeUsageLogs(undefined, options),
+  authStatusFn = () => authStatus({ home }),
 } = {}) {
   if (!isLoopbackAddress(req.socket?.remoteAddress)
     || req.headers?.host === undefined
@@ -121,6 +125,27 @@ export async function handleDashboardApi(req, res, pathname, {
     return;
   }
 
+  if (pathname === AUTH_PATH && req.method === "GET") {
+    try {
+      const profile = authStatusFn()?.profiles?.codex;
+      if (!profile || typeof profile.configured !== "boolean" || typeof profile.valid !== "boolean") throw new Error("Invalid auth status");
+      const login = typeof profile.login === "string" && /^[a-z\d_-]{1,39}$/i.test(profile.login)
+        && redactDiagnosticText(profile.login) === profile.login ? profile.login : "";
+      const id = /^\d{1,20}$/.test(String(profile.id || "")) ? String(profile.id) : "";
+      sendJson(res, 200, {
+        source: "local_auth_status",
+        configured: profile.configured,
+        valid: profile.valid,
+        login: profile.valid ? login : "",
+        id: profile.valid ? id : "",
+        reason: ["unconfigured", "empty_token", "credential_read_failed"].includes(profile.reason) ? profile.reason : "",
+      });
+    } catch {
+      sendJson(res, 500, { error: "Could not read local auth status" });
+    }
+    return;
+  }
+
   if (pathname === ANIMATION_PATH && req.method === "GET") {
     try {
       const query = new URL(req.url, "http://localhost").searchParams;