V4 dashboard

.gitignore

@@ -3,10 +3,23 @@ dist/
 .dev/
 node_modules/
 /config.json
+# ClawBot 微信推送的扫码凭证（含 bot token），严禁提交
+/clawbot-auth.json
+# 运行时配置/账号文件可能被放到 src/ 下（Load.ts 的查找路径之一），防止误提交
+/src/config.json
+/src/accounts.json
+/src/accounts.dev.json
 /.vscode
 /diagnostics
 note
 .DS_Store
 .playwright-chromium-installed
 .stfolder/
-.env
+.envlogs/
+/logs
+# 本地私密配置与编辑器工作目录，严禁提交
+/.env
+/.zcode/
+
+# dynamic accounts (credentials)
+/config/accounts.extra.json

Dockerfile

@@ -1,7 +1,8 @@
 ###############################################################################
 # Stage 1: Builder
 ###############################################################################
-FROM node:24-slim AS builder
+# 国内镜像源加速拉取（m.daocloud.io 代理 Docker Hub）；海外环境可改回 node:24-slim
+FROM m.daocloud.io/docker.io/library/node:24-slim AS builder
 
 WORKDIR /usr/src/microsoft-rewards-script
 
@@ -25,7 +26,7 @@ RUN rm -rf node_modules \
 ###############################################################################
 # Stage 2: Runtime
 ###############################################################################
-FROM node:24-slim AS runtime
+FROM m.daocloud.io/docker.io/library/node:24-slim AS runtime
 
 WORKDIR /usr/src/microsoft-rewards-script
 
@@ -37,13 +38,19 @@ ENV NODE_ENV=production \
     NODE_OPTIONS=--disable-warning=ExperimentalWarning
 
 # Install minimal system libraries required for Chromium headless to run,
-# plus jq (for config generation/patching) and gettext-base (for envsubst)
+# plus jq (for config generation/patching) and gettext-base (for envsubst).
+# xvfb/x11vnc/novnc/websockify power the dashboard's in-browser manual login
+# (headed browser under a virtual display, viewed through noVNC).
 RUN apt-get update && apt-get install -y --no-install-recommends \
     cron \
     gettext-base \
     jq \
     tzdata \
     ca-certificates \
+    xvfb \
+    x11vnc \
+    novnc \
+    websockify \
     libglib2.0-0 \
     libdbus-1-3 \
     libexpat1 \
@@ -83,10 +90,11 @@ COPY --from=builder /usr/src/microsoft-rewards-script/dist ./dist
 COPY --from=builder /usr/src/microsoft-rewards-script/package*.json ./
 COPY --from=builder /usr/src/microsoft-rewards-script/node_modules ./node_modules
 
-# Install patchright's stealth-patched Chromium headless shell.
-# The container is headless-only so the full browser isn't needed; then clean up
+# Install patchright's stealth-patched Chromium. The full browser is required
+# (not just the headless shell) because the dashboard's manual-login feature
+# runs the browser headed under Xvfb; clean up apt lists afterwards.
 RUN set -eux; \
-    npx patchright install --with-deps --only-shell chromium; \
+    npx patchright install --with-deps chromium; \
     rm -rf /var/lib/apt/lists/* /var/cache/apt/archives/*
 
 # Copy config example into the image so entrypoint can use it as a fallback
@@ -103,8 +111,12 @@ COPY config.example.json ./config.example.json
 COPY --chmod=755 scripts/docker/run_daily.sh ./scripts/docker/run_daily.sh
 COPY --chmod=755 scripts/docker/healthcheck.sh ./scripts/docker/healthcheck.sh
 COPY --chmod=755 scripts/api/ ./scripts/api/
+COPY --chmod=755 scripts/main/ ./scripts/main/
+COPY --chmod=644 scripts/utils.js ./scripts/utils.js
 COPY --chmod=644 scripts/env.js ./scripts/env.js
 COPY --chmod=644 scripts/package.json ./scripts/package.json
+# Embedded web dashboard (zero-dependency Node; started by entrypoint when DASHBOARD_ENABLED)
+COPY --chmod=644 dashboard/ ./dashboard/
 COPY --chmod=644 src/crontab.template /etc/cron.d/microsoft-rewards-cron.template
 COPY --chmod=755 scripts/docker/entrypoint.sh /usr/local/bin/entrypoint.sh