Add Decodex app usage estimates

README.md

@@ -134,9 +134,12 @@ global selector; project configs do not pin specific accounts. Account display-n
 rerolls are also global Decodex state under `[codex.account_names.offsets]` in
 `~/.codex/decodex/config.toml` so the operator dashboard and Decodex App show the same
 privacy-preserving names. Client-only presentation preferences such as theme, sorting,
-and whether identities are hidden remain local to each UI. To switch the account used
-by the Codex CLI itself, run `decodex account use <selector>` or use the Decodex App
-row action; this overwrites `$CODEX_HOME/auth.json` or `~/.codex/auth.json` from the
+and whether identities are hidden remain local to each UI. Usage probes keep bounded
+seven-day account usage estimates in
+`~/.codex/decodex/account-usage-history.jsonl`; the file stores daily percentage
+snapshots for local display and no token material. To switch the account used by the
+Codex CLI itself, run `decodex account use <selector>` or use the Decodex App row
+action; this overwrites `$CODEX_HOME/auth.json` or `~/.codex/auth.json` from the
 matching `accounts.jsonl` entry.
 
 `decodex diagnose --json` writes the local agent evidence index under

apps/decodex-app/README.md

@@ -9,12 +9,14 @@ or the full operator dashboard.
 
 ## Scope
 
-The first Decodex App release manages the shared Codex account pool through the local
-Decodex server. On launch the app connects to an existing `decodex serve` on the
-default local endpoint when one is available; otherwise it starts the bundled
-`decodex serve --api-only` binary and talks to that server. App-started servers do not
-poll registered projects or dispatch Linear work. The helper remains available for
-interactive login flows that need streamed command output:
+The first Decodex App release manages the shared Codex account pool through the
+bundled Rust app helper so account UI stays on the same CLI-owned files even when a
+long-running local `decodex serve` is older than the app bundle. On launch the app also
+connects to an existing `decodex serve` on the default local endpoint when one is
+available; otherwise it starts the bundled `decodex serve --api-only` binary for
+operator snapshot and WebUI routes. App-started servers do not poll registered projects
+or dispatch Linear work. The helper owns account operations and interactive login flows
+that need streamed command output:
 
 - list accounts without printing token material
 - pin future Decodex runs to one account
@@ -31,7 +33,9 @@ The app and operator dashboard share account-pool state through the Rust account
 stored accounts come from `~/.codex/decodex/accounts.jsonl`, run routing and account
 display-name offsets come from `~/.codex/decodex/config.toml`, and Codex CLI auth
 switching writes `auth.json`. Presentation-only choices such as local privacy
-visibility remain client-local.
+visibility remain client-local. Usage probes update the bounded seven-day local
+estimate file at `~/.codex/decodex/account-usage-history.jsonl`; it stores daily
+percentage snapshots for account-pool display and does not contain token material.
 
 ## Development