Show redacted event details on dashboard

Author: gaoguobin

src/codex_fast_proxy/dashboard.py

@@ -12,6 +12,22 @@
 DASHBOARD_PATH = "/__codex_fast_proxy/dashboard"
 DASHBOARD_EVENT_LIMIT = 8
 BENCHMARK_FILENAME = "fast_proxy.benchmark.json"
+EVENT_DETAIL_FIELDS = (
+    "ts",
+    "request_id",
+    "method",
+    "path",
+    "status",
+    "duration_ms",
+    "eligible",
+    "service_tier_before",
+    "service_tier_after",
+    "service_tier_injected",
+    "stream",
+    "json_error",
+    "response_content_type",
+    "error_type",
+)
 
 
 def safe_url_display(url: str) -> str:
@@ -512,7 +528,7 @@ def render_dashboard(server: Any) -> str:
           <h2>Recent requests</h2>
           <p>pid {html_value(os.getpid())} / injected {injected_count}</p>
         </div>
-        {render_status_badge(last_status)}
+        {render_status_badge(last_status, event_detail(latest_event))}
       </div>
       <div class="table-wrap">
         <table>
@@ -600,17 +616,30 @@ def render_injection_state(event: dict[str, Any] | None) -> str:
     return "yes" if event.get("service_tier_injected") else "no"
 
 
-def render_status_badge(status: Any) -> str:
+def event_detail(event: dict[str, Any] | None) -> str | None:
+    if not event:
+        return None
+
+    lines = []
+    for field in EVENT_DETAIL_FIELDS:
+        value = event.get(field)
+        if value is not None:
+            lines.append(f"{field}: {value}")
+    return "\n".join(lines) if lines else None
+
+
+def render_status_badge(status: Any, detail: str | None = None) -> str:
+    title = f' title="{html_value(detail, "")}"' if detail else ""
     if status is None:
-        return '<span class="badge"><span class="dot warn" aria-hidden="true"></span>No events</span>'
+        return f'<span class="badge"{title}><span class="dot warn" aria-hidden="true"></span>No events</span>'
     try:
         status_code = int(status)
     except (TypeError, ValueError):
-        return f'<span class="badge"><span class="dot warn" aria-hidden="true"></span>{html_value(status)}</span>'
+        return f'<span class="badge"{title}><span class="dot warn" aria-hidden="true"></span>{html_value(status)}</span>'
 
     dot_class = "bad" if status_code >= 400 else ""
     label = "Needs attention" if status_code >= 400 else "Healthy"
-    return f'<span class="badge"><span class="dot {dot_class}" aria-hidden="true"></span>{label}</span>'
+    return f'<span class="badge"{title}><span class="dot {dot_class}" aria-hidden="true"></span>{label}</span>'
 
 
 def benchmark_fast_label(benchmark: dict[str, Any]) -> str:
@@ -726,7 +755,7 @@ def render_event_row(event: dict[str, Any]) -> str:
         "<tr>"
         f"<td>{render_time_value(event.get('ts'))}</td>"
         f"<td class=\"path\" title=\"{html_value(event.get('path'), '')}\">{html_value(event.get('method'))} {html_value(event.get('path'))}</td>"
-        f"<td>{render_status_badge(status)}</td>"
+        f"<td>{render_status_badge(status, event_detail(event))}</td>"
         f"<td>{html_value(format_duration(event.get('duration_ms')))}</td>"
         f"<td>{render_tier_change(event)}</td>"
         f"<td>{render_boolean_badge(injected)}</td>"

tests/test_proxy.py

@@ -277,6 +277,55 @@ def test_dashboard_uses_only_redacted_event_fields(self) -> None:
         self.assertNotIn("Bearer should-not-render", html)
         self.assertNotIn("prompt should-not-render", html)
 
+    def test_dashboard_status_badge_exposes_redacted_event_detail(self) -> None:
+        temp_root = ROOT / ".test_tmp"
+        temp_root.mkdir(exist_ok=True)
+        temp_dir = temp_root / f"dashboard-detail-{uuid.uuid4().hex}"
+        temp_dir.mkdir()
+        try:
+            log_path = temp_dir / "fast_proxy.jsonl"
+            log_path.write_text(
+                json.dumps({
+                    "ts": "2026-05-05T06:10:39.890+00:00",
+                    "request_id": "req-demo",
+                    "method": "POST",
+                    "path": "/v1/responses",
+                    "status": 502,
+                    "duration_ms": 24501.2,
+                    "eligible": True,
+                    "service_tier_before": "<absent>",
+                    "service_tier_after": "priority",
+                    "service_tier_injected": True,
+                    "stream": True,
+                    "response_content_type": None,
+                    "error_type": "client_disconnected",
+                    "Authorization": "Bearer should-not-render",
+                    "input": "prompt should-not-render",
+                })
+                + "\n",
+                encoding="utf-8",
+            )
+            server = SimpleNamespace(
+                log_path=log_path,
+                server_address=("127.0.0.1", 8787),
+                proxy_base="/v1",
+                upstream_base="https://api.example.test/v1",
+                service_tier="priority",
+            )
+
+            html = render_dashboard(server)
+        finally:
+            shutil.rmtree(temp_dir)
+
+        self.assertIn("Needs attention", html)
+        self.assertIn("request_id: req-demo", html)
+        self.assertIn("status: 502", html)
+        self.assertIn("duration_ms: 24501.2", html)
+        self.assertIn("error_type: client_disconnected", html)
+        self.assertIn("service_tier_before: &lt;absent&gt;", html)
+        self.assertNotIn("Bearer should-not-render", html)
+        self.assertNotIn("prompt should-not-render", html)
+
     def test_dashboard_renders_saved_benchmark_result(self) -> None:
         temp_root = ROOT / ".test_tmp"
         temp_root.mkdir(exist_ok=True)