codex-multi-auth 2.21.0 → 2.23.0

package/dist/lib/schemas.d.ts

@@ -5,6 +5,11 @@
  */
 import { z } from "zod";
 export declare const PluginConfigSchema: z.ZodObject<{
+    locale: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
+        en: "en";
+        zh: "zh";
+    }>>;
     codexMode: z.ZodOptional<z.ZodBoolean>;
     codexRuntimeRotationProxy: z.ZodOptional<z.ZodBoolean>;
     codexTuiV2: z.ZodOptional<z.ZodBoolean>;

package/dist/lib/schemas.js

@@ -22,6 +22,7 @@ function schemaLog() {
 // Plugin Configuration Schema
 // ============================================================================
 export const PluginConfigSchema = z.object({
+    locale: z.enum(["auto", "en", "zh"]).optional(),
     codexMode: z.boolean().optional(),
     codexRuntimeRotationProxy: z.boolean().optional(),
     codexTuiV2: z.boolean().optional(),

package/dist/lib/storage/credential-sidecars.js

@@ -1,4 +1,5 @@
 import { promises as fs } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { join } from "node:path";
 import { getApiRoutesPath } from "../api-route-store.js";
 import { withRetry } from "../fs-retry.js";
@@ -13,18 +14,49 @@ const retry = { maxAttempts: 6, backoffMs: 25 };
  */
 export async function clearCredentialSidecars() {
     const routes = getApiRoutesPath();
-    // Same locks as saveApiRoutes, so a concurrent menu save cannot resurrect keys.
-    await withStorageLock(() => withFileTransactionLock(routes, () => withRetry(() => fs.rm(routes, { force: true }), retry)));
     const dir = getCodexMultiAuthDir();
+    // Same locks as saveApiRoutes, so a concurrent menu save cannot resurrect keys.
+    await withStorageLock(() => withFileTransactionLock(routes, async () => {
+        await withRetry(() => fs.rm(routes, { force: true }), retry);
+        const leases = join(dir, "api-probe-locks");
+        try {
+            const stat = await fs.lstat(leases);
+            if (!stat.isDirectory() || stat.isSymbolicLink())
+                throw Error("Invalid API probe lease directory; manual repair required");
+            // Detach while publication is excluded; never recursively delete a
+            // canonical directory that a replacement owner can populate.
+            await withRetry(() => fs.rename(leases, join(dir, `api-probe-locks.wiped-${randomUUID()}`)), retry);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }));
     // Each writer read-modify-writes under its file lock; deleting under the same
     // lock stops an in-flight refresh or redemption renaming its old state (and a
     // last-resort policy) back after the reset.
     for (const path of [
         join(dir, "reset-credits.json"),
         join(dir, "api-capability-probes.json"),
+        join(dir, "automatic-api-checks.json"),
     ]) {
         await withFileTransactionLock(path, () => withRetry(() => fs.rm(path, { force: true }), retry));
     }
+    // Also finish deletion after an interrupted earlier wipe. These unique paths
+    // can contain old holders/candidates, but never a new canonical lease.
+    let leftovers;
+    try {
+        leftovers = await fs.readdir(dir);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+        leftovers = [];
+    }
+    for (const entry of leftovers) {
+        if (/^api-probe-locks\.wiped-[a-f0-9-]{36}$/.test(entry))
+            await withRetry(() => fs.rm(join(dir, entry), { recursive: true, force: true }), retry);
+    }
     // Per-account timestamps only; their writers take no lock and hold no secrets.
     const activity = join(dir, "inference-activity");
     await withRetry(() => fs.rm(activity, { recursive: true, force: true }), retry);

package/dist/lib/storage/file-lock.d.ts

@@ -5,4 +5,6 @@
  */
 export declare function withFileTransactionLock<T>(path: string, action: () => Promise<T>, options?: {
     waitMs?: number;
+    signal?: AbortSignal;
+    guardAcquisition?: <R>(action: () => Promise<R>) => Promise<R>;
 }): Promise<T>;

package/dist/lib/storage/file-lock.js

@@ -145,21 +145,32 @@ async function recoverDeadCandidates(lock) {
  * A reused PID fails closed (bounded contention) rather than risking two writers.
  */
 export async function withFileTransactionLock(path, action, options = {}) {
-    const absolute = resolve(path);
-    await fs.mkdir(dirname(absolute), { recursive: true, mode: 0o700 });
-    // Canonicalize the existing parent so /tmp and its symlink aliases share a lock.
-    const key = join(await fs.realpath(dirname(absolute)), absolute.slice(dirname(absolute).length + 1));
-    if (leases.getStore()?.get(key)?.active)
-        return action();
-    const lock = `${key}.write-lock`;
-    await recoverDeadCandidates(lock);
-    const candidate = await fs.mkdtemp(`${lock}.candidate-`);
+    options.signal?.throwIfAborted();
+    const guard = options.guardAcquisition ?? (async (run) => run());
+    let key = "", lock = "", candidate;
     const owner = `${host}.${process.pid}.${randomUUID()}`;
-    let published = false;
+    let published = false, reentrant = false;
     try {
-        await fs.chmod(candidate, 0o700);
-        await fs.writeFile(join(candidate, owner), "", { flag: "wx", mode: 0o600 });
-        await withRetry(async () => {
+        await guard(async () => {
+            options.signal?.throwIfAborted();
+            const absolute = resolve(path);
+            await fs.mkdir(dirname(absolute), { recursive: true, mode: 0o700 });
+            key = join(await fs.realpath(dirname(absolute)), absolute.slice(dirname(absolute).length + 1));
+            options.signal?.throwIfAborted();
+            if (leases.getStore()?.get(key)?.active) {
+                reentrant = true;
+                return;
+            }
+            lock = `${key}.write-lock`;
+            await recoverDeadCandidates(lock);
+            candidate = await fs.mkdtemp(`${lock}.candidate-`);
+            await fs.chmod(candidate, 0o700);
+            await fs.writeFile(join(candidate, owner), "", { flag: "wx", mode: 0o600 });
+        });
+        if (reentrant)
+            return action();
+        await withRetry(() => guard(async () => {
+            options.signal?.throwIfAborted();
             try {
                 await fs.rename(candidate, lock);
                 published = true;
@@ -179,12 +190,13 @@ export async function withFileTransactionLock(path, action, options = {}) {
                 await recoverDeadOwner(lock);
                 throw Object.assign(Error("Storage is busy with another live writer; retry shortly."), { code: "ELOCKED" });
             }
-        }, {
+        }), {
             maxAttempts: lockMaxAttemptsForWaitMs(options.waitMs ?? 10000),
             backoffMs: lockRetryBaseDelayMs,
             jitterMs: LOCK_RETRY_JITTER_MS,
             retryableCodes: ["ELOCKED", "EBUSY", "EPERM", "EACCES", "EAGAIN"],
         });
+        options.signal?.throwIfAborted();
         const lease = { active: true };
         const context = new Map(leases.getStore());
         context.set(key, lease);
@@ -197,22 +209,24 @@ export async function withFileTransactionLock(path, action, options = {}) {
     }
     finally {
         const directory = published ? lock : candidate;
-        try {
-            await withRetry(async () => {
-                try {
-                    await fs.unlink(join(directory, owner));
-                }
-                catch (error) {
-                    if (code(error) !== "ENOENT")
-                        throw error;
-                }
-                await removeEmpty(directory);
-            }, { maxAttempts: 6, backoffMs: 25 });
-        }
-        catch (error) {
-            abandonedOwners.add(owner);
-            retryAbandonedRelease(directory, owner);
-            logWarn("Storage lock cleanup deferred", { code: code(error) ?? "unknown" });
+        if (directory) {
+            try {
+                await withRetry(async () => {
+                    try {
+                        await fs.unlink(join(directory, owner));
+                    }
+                    catch (error) {
+                        if (code(error) !== "ENOENT")
+                            throw error;
+                    }
+                    await removeEmpty(directory);
+                }, { maxAttempts: 6, backoffMs: 25 });
+            }
+            catch (error) {
+                abandonedOwners.add(owner);
+                retryAbandonedRelease(directory, owner);
+                logWarn("Storage lock cleanup deferred", { code: code(error) ?? "unknown" });
+            }
         }
     }
 }

package/dist/lib/usage/ledger.js

@@ -24,6 +24,7 @@ const VALID_OPERATIONS = new Set([
     "images",
     "models",
     "thread-goal",
+    "transcribe",
     "auth-refresh",
     "diagnostic",
     "unknown",

package/dist/lib/usage/redaction.js

@@ -13,6 +13,7 @@ const VALID_OPERATIONS = new Set([
     "images",
     "models",
     "thread-goal",
+    "transcribe",
     "auth-refresh",
     "diagnostic",
     "unknown",

package/dist/lib/usage/types.d.ts

@@ -1,5 +1,5 @@
 export type UsageLedgerSource = "runtime-proxy" | "plugin-host" | "local-bridge" | "cli" | "unknown";
-export type UsageLedgerOperation = "responses" | "images" | "models" | "thread-goal" | "auth-refresh" | "diagnostic" | "unknown";
+export type UsageLedgerOperation = "responses" | "images" | "models" | "thread-goal" | "transcribe" | "auth-refresh" | "diagnostic" | "unknown";
 export type UsageLedgerOutcome = "success" | "failure" | "blocked" | "cancelled";
 /**
  * The service tier a response was actually billed at.

package/dist/lib/web-dashboard-html.d.ts

@@ -0,0 +1 @@
+export declare function renderDashboardHtml(token: string | null, locale?: "en" | "zh"): string;

package/dist/lib/web-dashboard-html.js

@@ -0,0 +1,66 @@
+const DASHBOARD_HTML = `
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Codex Multi-Auth · 号池监控</title>
+<style>
+:root{color-scheme:dark;--bg:#09111f;--panel:#101c2f;--panel2:#14243b;--line:#223653;--text:#edf5ff;--muted:#8ea5c2;--green:#36d399;--amber:#f7c95c;--red:#fb7185;--blue:#65a8ff;--shadow:0 14px 40px rgba(0,0,0,.25)}
+*{box-sizing:border-box}body{margin:0;background:radial-gradient(circle at 20% 0,#17345a 0,transparent 38%),var(--bg);color:var(--text);font:14px/1.5 ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}
+.shell{max-width:1440px;margin:0 auto;padding:28px 26px 48px}.top{display:flex;justify-content:space-between;align-items:flex-start;gap:18px;margin-bottom:26px}.brand{display:flex;gap:14px;align-items:center}.mark{width:44px;height:44px;border-radius:13px;display:grid;place-items:center;background:linear-gradient(135deg,#4b8dff,#55d6ae);color:#07111f;font-weight:900;font-size:18px;box-shadow:0 8px 24px #3b82f655}.eyebrow{color:var(--blue);font-size:12px;letter-spacing:.12em;text-transform:uppercase}.title{font-size:28px;font-weight:800;letter-spacing:-.03em}.subtitle{color:var(--muted);margin-top:2px}.actions{display:flex;gap:10px;align-items:center}.button{border:1px solid var(--line);background:var(--panel);color:var(--text);border-radius:9px;padding:9px 13px;cursor:pointer}.button:hover{border-color:var(--blue);background:var(--panel2)}.live{display:flex;gap:7px;align-items:center;color:var(--muted);font-size:12px}.dot{width:8px;height:8px;border-radius:50%;background:var(--green);box-shadow:0 0 10px var(--green)}.dot.off{background:var(--red);box-shadow:0 0 10px var(--red)}
+.summary{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:12px;margin-bottom:22px}.card,.panel{background:linear-gradient(145deg,#122139dd,#0e192add);border:1px solid var(--line);border-radius:14px;box-shadow:var(--shadow)}.card{padding:17px}.label{color:var(--muted);font-size:12px}.value{font-size:26px;font-weight:800;margin-top:7px}.value.green{color:var(--green)}.value.amber{color:var(--amber)}.value.red{color:var(--red)}.value.blue{color:var(--blue)}
+.grid{display:grid;grid-template-columns:minmax(0,1.7fr) minmax(280px,.7fr);gap:18px;align-items:start}.panel{padding:18px}.panel-head{display:flex;justify-content:space-between;align-items:center;margin-bottom:12px}.panel-title{font-size:16px;font-weight:750}.panel-meta{color:var(--muted);font-size:12px}.accounts{display:grid;gap:10px}.account{padding:15px;border:1px solid var(--line);border-radius:11px;background:#0e1a2caa}.account-head{display:flex;justify-content:space-between;gap:12px;align-items:flex-start}.account-name{font-weight:700;overflow-wrap:anywhere}.account-meta{color:var(--muted);font-size:12px;margin-top:3px}.badge{border-radius:99px;padding:3px 9px;font-size:11px;white-space:nowrap;border:1px solid #ffffff18}.badge.ready{color:var(--green);background:#36d39918}.badge.login{color:var(--red);background:#fb718518}.badge.disabled{color:var(--muted);background:#8ea5c218}.badge.current{color:var(--blue);background:#65a8ff18}.account-stats{display:grid;grid-template-columns:1fr 1fr 120px;gap:15px;margin-top:14px}.quota{min-width:0}.quota-row{display:flex;justify-content:space-between;gap:7px;color:var(--muted);font-size:11px;margin-top:8px}.bar{height:8px;border-radius:99px;background:#243752;overflow:hidden;margin-top:5px}.fill{height:100%;border-radius:99px;background:linear-gradient(90deg,var(--green),#7de2ab)}.fill.warn{background:linear-gradient(90deg,var(--amber),#ff9e5c)}.fill.danger{background:linear-gradient(90deg,var(--red),#ffadad)}.risk{text-align:right}.risk-num{font-size:23px;font-weight:800}.risk-low{color:var(--green)}.risk-medium{color:var(--amber)}.risk-high{color:var(--red)}.reason{color:var(--muted);font-size:12px;margin-top:8px;overflow-wrap:anywhere}.empty{padding:35px;text-align:center;color:var(--muted)}.subhead{margin:14px 0 4px;color:var(--muted);font-size:11px;letter-spacing:.1em;text-transform:uppercase}.side{display:grid;gap:18px}.kv{display:flex;justify-content:space-between;gap:12px;padding:9px 0;border-bottom:1px solid #ffffff0d}.kv:last-child{border-bottom:0}.kv b{font-weight:650;text-align:right;overflow-wrap:anywhere}.notice{padding:12px;border-radius:10px;background:#f7c95c13;border:1px solid #f7c95c3d;color:#fbe6a2;font-size:12px}.error{padding:12px;border-radius:10px;background:#fb718513;border:1px solid #fb71853d;color:#ffc2cb;font-size:12px}.foot{color:var(--muted);font-size:12px;margin-top:20px;text-align:center}
+@media(max-width:1050px){.summary{grid-template-columns:repeat(3,minmax(0,1fr))}.grid{grid-template-columns:1fr}.side{grid-template-columns:repeat(2,minmax(0,1fr))}}@media(max-width:680px){.shell{padding:18px 13px 36px}.top{display:block}.actions{margin-top:15px;justify-content:space-between}.summary{grid-template-columns:repeat(2,minmax(0,1fr))}.account-stats{grid-template-columns:1fr 1fr}.risk{text-align:left}.side{grid-template-columns:1fr}.title{font-size:23px}}
+</style>
+</head>
+<body>
+<main class="shell">
+<header class="top"><div class="brand"><div class="mark">MA</div><div><div class="eyebrow">Codex Multi-Auth</div><div class="title" data-i18n="title">号池实时监控</div><div class="subtitle" data-i18n="subtitle">账号、配额与轮换状态</div></div></div><div class="actions"><div class="live"><span id="dot" class="dot"></span><span id="connection" data-i18n="connecting">连接中…</span></div><button id="lang" class="button">EN</button><button id="refresh" class="button" data-i18n="refresh">刷新</button></div></header>
+<section id="summary" class="summary"></section>
+<div id="error" class="error" hidden></div>
+<section class="grid"><section class="panel"><div class="panel-head"><div class="panel-title" data-i18n="accounts">账号池</div><div id="updated" class="panel-meta">—</div></div><div id="accounts" class="accounts"></div></section><aside class="side"><section class="panel"><div class="panel-head"><div class="panel-title" data-i18n="routing">路由</div></div><div id="routing"></div></section><section class="panel"><div class="panel-head"><div class="panel-title" data-i18n="runtime">运行时</div></div><div id="runtime"></div></section></aside></section>
+<div class="foot" data-i18n="foot">数据来自本机号池；页面默认仅监听回环地址，按 Ctrl-C 停止服务。</div>
+</main>
+<script>
+(function(){
+  var token="__CMA_TOKEN__";
+  var lang="__CMA_LANG__";
+  var text={zh:{title:"号池实时监控",subtitle:"账号、配额与轮换状态",connecting:"连接中…",connected:"实时连接",offline:"连接中断",refresh:"刷新",accounts:"账号池",apiAccounts:"API/ZDR 账号",routing:"路由",runtime:"运行时",total:"总账号",ready:"可用",login:"需重新登录",disabled:"已禁用",enabled:"已启用",recommend:"推荐账号",active:"当前账号",requests:"请求",success:"成功",failed:"失败",last:"最近请求",quota:"配额",risk:"风险",unknown:"未知",reason:"原因",primary:"主窗口",secondary:"次窗口",priority:"优先级",models:"可见模型",foot:"数据来自本机号池；页面默认仅监听回环地址，按 Ctrl-C 停止服务。"},en:{title:"Pool live monitor",subtitle:"Accounts, quota and routing",connecting:"Connecting…",connected:"Live",offline:"Disconnected",refresh:"Refresh",accounts:"Account pool",apiAccounts:"API/ZDR accounts",routing:"Routing",runtime:"Runtime",total:"Accounts",ready:"Ready",login:"Re-login needed",disabled:"Disabled",enabled:"Enabled",recommend:"Recommended",active:"Current",requests:"Requests",success:"Success",failed:"Failed",last:"Last request",quota:"Quota",risk:"Risk",unknown:"Unknown",reason:"Reason",primary:"primary",secondary:"secondary",priority:"priority",models:"visible models",foot:"Data comes from the local pool; the server listens on loopback by default. Ctrl-C stops it."}};
+  function t(k){return text[lang][k]||k}
+  function label(v){var s=String(v==null?"":v);return lang==="zh"?s.replace(/^Account /,"账号 ").replace(/Token account/g,"令牌账号").replace(/, id:/g,"，ID:").replace(/, /g,"，"):s}
+  function reasonText(v){var s=String(v==null?"—":v);if(lang!=="zh")return s;return s.replace("token-invalid — re-login needed","令牌无效——需要重新登录").replace("primary quota ","主窗口配额 ").replace(" secondary quota "," 次窗口配额 ").replace(" used","已使用").replace("account is disabled","账号已禁用").replace("quota cache exhausted","配额缓存已用尽")}
+  function esc(v){return String(v==null?"":v).replace(/[&<>"']/g,function(c){return({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[c]})}
+  function api(path){return path+(path.indexOf("?")>=0?"&":"?")+"token="+encodeURIComponent(token)}
+  function ago(ms){if(typeof ms!=="number"||!isFinite(ms))return "—";var s=Math.max(0,Math.round(ms/1000));if(s<60)return s+"s";if(s<3600)return Math.floor(s/60)+"m";if(s<86400)return Math.floor(s/3600)+"h";return Math.floor(s/86400)+"d"}
+  function statusClass(a){var m=(a.markers||[]).join(" ");if(a.enabled===false)return "disabled";if(/invalid|sign-in|re-login/i.test(m))return "login";return "ready"}
+  function winLabel(w,key){var m=w&&w.windowMinutes;if(typeof m==="number"&&isFinite(m)&&m>0){var zh=lang==="zh";if(m%1440===0)return (m/1440)+(zh?"天":"d");if(m%60===0)return (m/60)+(zh?"小时":"h");return m+(zh?"分钟":"m")}return t(key)}
+  function bar(window,key){if(!window||typeof window.usedPercent!=="number")return '<div class="label">'+t("unknown")+"</div>";var p=Math.max(0,Math.min(100,Math.round(window.usedPercent)));var cls=p>=90?" danger":p>=75?" warn":"";return '<div class="quota-row"><span>'+esc(winLabel(window,key))+" "+t("quota")+'</span><span>'+p+"% / "+(100-p)+"%</span></div><div class="bar"><div class="fill'+cls+'" style="width:'+p+'%"></div></div>'}
+  function draw(data){window.__data=data;var all=data.accounts||[];var ready=all.filter(function(a){return a.enabled!==false&&statusClass(a)==="ready"}).length;var login=all.filter(function(a){return statusClass(a)==="login"}).length;var disabled=all.filter(function(a){return a.enabled===false}).length;var rec=data.recommendedIndex==null?"—":"#"+(data.recommendedIndex+1);var rt=data.runtime||{};document.getElementById("summary").innerHTML='<div class="card"><div class="label">'+t("total")+'</div><div class="value blue">'+(data.totalAccountCount||all.length)+'</div></div><div class="card"><div class="label">'+t("ready")+'</div><div class="value green">'+ready+'</div></div><div class="card"><div class="label">'+t("login")+'</div><div class="value red">'+login+'</div></div><div class="card"><div class="label">'+t("disabled")+'</div><div class="value">'+disabled+'</div></div><div class="card"><div class="label">'+t("recommend")+'</div><div class="value amber">'+rec+'</div></div>';
+    document.getElementById("accounts").innerHTML=all.length?all.map(function(a){var sub=a.subscription||{};var q=a.quota||{};var risk=a.forecastRiskScore==null?"—":a.forecastRiskScore+"/100";var rl=a.forecastRiskLevel||"low";var badges=(a.markers||[]).map(function(m){return '<span class="badge '+(/current/.test(m)?"current":statusClass(a))+'">'+esc(label(m))+'</span>'}).join(" ");return '<article class="account"><div class="account-head"><div><div class="account-name">'+esc(label(a.label||("Account "+(a.index+1))))+'</div><div class="account-meta">'+esc(sub.planLabel||t("unknown"))+" · "+esc(label(sub.selectedWorkspace||""))+'</div></div><div>'+badges+' <span class="badge '+statusClass(a)+'">'+(statusClass(a)==="ready"?t("ready"):statusClass(a)==="login"?t("login"):t("disabled"))+'</span></div></div><div class="account-stats"><div class="quota">'+bar(q.primary,"primary")+bar(q.secondary,"secondary")+'</div><div><div class="label">'+t("last")+'</div><div class="value" style="font-size:18px">'+ago(a.lastInferenceRequestAt?Date.now()-a.lastInferenceRequestAt:null)+'</div><div class="reason">'+t("reason")+": "+esc(reasonText(a.reason||"—"))+'</div></div><div class="risk"><div class="label">'+t("risk")+'</div><div class="risk-num risk-'+esc(rl)+'">'+esc(risk)+"</div></div></div></article>"}).join(""):'<div class="empty">'+t("unknown")+"</div>";
+    var apis=(data.apiAccounts||[]).map(function(a){return '<article class="account"><div class="account-head"><div><div class="account-name">'+esc(label(a.label||"API"))+'</div><div class="account-meta">'+esc(a.kind||"api")+" · "+t("priority")+" "+esc(a.priority==null?"—":a.priority)+'</div></div><div><span class="badge '+(a.enabled===false?"disabled":"ready")+'">'+(a.enabled===false?t("disabled"):t("enabled"))+'</span></div></div><div class="account-meta">'+t("models")+": "+esc((a.visibleModels||[]).length||"—")+" · "+t("last")+": "+ago(a.lastInferenceRequestAt?Date.now()-a.lastInferenceRequestAt:null)+'</div></article>'}).join("");
+    if(apis)document.getElementById("accounts").innerHTML+='<div class="subhead">'+t("apiAccounts")+"</div>"+apis;
+    var recReason=data.recommendationReason||"—";document.getElementById("routing").innerHTML='<div class="kv"><span>'+t("active")+'</span><b>'+esc(data.activeIndex==null?"—":"#"+(data.activeIndex+1))+'</b></div><div class="kv"><span>'+t("recommend")+'</span><b>'+esc(rec)+"</b></div><div class="kv"><span>'+t("reason")+'</span><b>'+esc(recReason)+'</b></div>';
+    document.getElementById("runtime").innerHTML='<div class="kv"><span>'+t("requests")+'</span><b>'+esc(rt.responsesRequests==null?"—":rt.responsesRequests)+'</b></div><div class="kv"><span>'+t("success")+'</span><b>'+esc(rt.successfulRequests==null?"—":rt.successfulRequests)+'</b></div><div class="kv"><span>'+t("failed")+'</span><b>'+esc(rt.failedRequests==null?"—":rt.failedRequests)+'</b></div><div class="kv"><span>'+t("last")+'</span><b>'+esc(data.runtimeInUseIndex==null?"—":"#"+(data.runtimeInUseIndex+1))+'</b></div>';
+    document.getElementById("updated").textContent=new Date().toLocaleTimeString();document.getElementById("error").hidden=true;document.getElementById("dot").className="dot";document.getElementById("connection").textContent=t("connected")
+  }
+  function setLang(){document.documentElement.lang=lang==="zh"?"zh-CN":"en";document.querySelectorAll("[data-i18n]").forEach(function(e){e.textContent=t(e.getAttribute("data-i18n"))});document.getElementById("lang").textContent=lang==="zh"?"EN":"中文";if(window.__data)draw(window.__data)}
+  function failed(e){document.getElementById("error").hidden=false;document.getElementById("error").textContent=e&&e.message?e.message:"Request failed";document.getElementById("dot").className="dot off";document.getElementById("connection").textContent=t("offline")}
+  function load(){fetch(api("/api/status"),{cache:"no-store"}).then(function(r){if(!r.ok)throw Error("HTTP "+r.status);return r.json()}).then(draw).catch(failed)}
+  document.getElementById("refresh").onclick=load;document.getElementById("lang").onclick=function(){lang=lang==="zh"?"en":"zh";setLang()};setLang();load();try{var es=new EventSource(api("/events"));es.onmessage=function(e){try{draw(JSON.parse(e.data))}catch(_){}};es.onerror=function(){document.getElementById("dot").className="dot off";document.getElementById("connection").textContent=t("offline")}}catch(_){setInterval(load,5000)}
+})();
+</script>
+</body>
+</html>`;
+export function renderDashboardHtml(token, locale = "zh") {
+    const safeToken = JSON.stringify(token ?? "")
+        .slice(1, -1)
+        .replace(/</g, "\\u003c")
+        .replace(/>/g, "\\u003e")
+        .replace(/&/g, "\\u0026")
+        .replace(/\u2028/g, "\\u2028")
+        .replace(/\u2029/g, "\\u2029");
+    return DASHBOARD_HTML
+        .replace("__CMA_TOKEN__", safeToken)
+        .replace("__CMA_LANG__", locale === "zh" ? "zh" : "en");
+}

package/dist/lib/web-dashboard.d.ts

@@ -0,0 +1,36 @@
+import { type Server, type ServerResponse } from "node:http";
+import { type OutputLocale } from "./locale.js";
+export interface WebStatusSnapshot {
+    [key: string]: unknown;
+}
+export interface WebServerOptions {
+    host?: string;
+    port?: number;
+    token?: string | null;
+    refreshMs?: number;
+    getStatus: () => Promise<WebStatusSnapshot>;
+    openBrowser?: (url: string) => void;
+    locale?: OutputLocale;
+    /** Called when an SSE client is dropped for falling behind on broadcasts. */
+    onSseClientDrop?: (client: ServerResponse) => void;
+}
+export interface WebServerHandle {
+    server: Server;
+    url: string;
+    token: string | null;
+    close: () => Promise<void>;
+}
+export declare function startWebServer(options: WebServerOptions): Promise<WebServerHandle>;
+export declare function runWebCommand(args: string[], deps: {
+    getStatus: () => Promise<WebStatusSnapshot>;
+    logInfo?: (message: string) => void;
+    openBrowser?: (url: string) => void;
+    locale?: OutputLocale;
+}): Promise<number>;
+export declare function parseWebCommandArgs(args: string[]): {
+    host: string;
+    port: number;
+    token: string | null;
+    refreshMs: number;
+    openBrowser: boolean;
+};