feat(dashboard): add shared resource controls

docs/dashboard-auth-cli.md

@@ -97,6 +97,10 @@ Shared resource editing:
 - accepts only `shared` or `profile-local`
 - rejects CLIProxy OAuth account keys for this route
 - reconciles the account instance after metadata is updated
+- Dashboard -> Accounts exposes this as a separate Resources action so it is not confused with History Sync.
+- Dashboard -> Shared Resources shows the shared hub inventory for commands, skills, agents, plugins, and `settings.json`.
+- Plugin directories without README/PLUGIN docs render their actual directory inventory.
+- Shared `settings.json` is read-only in the Shared Resources page and still edited through the settings surfaces that own those values.
 
 ## Commands
 

docs/project-roadmap.md

@@ -1,6 +1,6 @@
 # CCS Project Roadmap
 
-Last Updated: 2026-05-07
+Last Updated: 2026-05-09
 
 Forward-looking roadmap documenting current priorities, GitHub issues, and future feature plans.
 
@@ -41,6 +41,7 @@ All major modularization work is complete. The codebase evolved from monolithic
 
 ### Recent Fixes
 
+- **2026-05-09**: **#1199** Existing Claude auth accounts now have dashboard-visible Shared Resources controls separate from History Sync. Accounts exposes a dedicated Resources action for `shared` vs `profile-local`, `/shared` now inventories commands, skills, agents, plugins, and `settings.json`, plugin directories without docs show factual directory contents, and shared settings content is inspectable read-only through the localhost-gated shared-content API.
 - **2026-05-07**: **#760** Codex GPT fast mode is now a first-class CLIProxy model tuning suffix. CCS accepts `gpt-5.4-fast`, `gpt-5.4-high-fast`, and equivalent canonicalized forms in raw env configs, CLI variant creation, and the dashboard model picker; runtime requests now send the base upstream model with `reasoning.effort` plus `service_tier: "priority"` instead of leaking the suffixed alias to CLIProxy upstream routing.
 - **2026-05-07**: **#1103** GitHub Copilot is now treated as a deprecated compatibility bridge. The dashboard moves Copilot out of the active Identity & Access section and into Deprecated, quick setup no longer offers `ghcp` for new onboarding, CLI/help/config copy marks Copilot as deprecated, and existing `ccs copilot` / `ghcp` compatibility paths remain available for current setups.
 - **2026-05-07**: **#1189** Headless settings-profile delegation now preserves native Claude passthrough args without a Claude flag allowlist. Explicit `--channels` values reach Claude Code, future native flags can carry multiple adjacent values, malformed CCS-owned flags no longer swallow the next native flag, and `--prompt=<text>` routes through headless delegation consistently with `--prompt <text>`.

docs/session-sharing-technical-analysis.md

@@ -171,6 +171,13 @@ ccs auth resources work --mode profile-local
 ccs auth resources work --mode shared
 ```
 
+Dashboard:
+
+- Open `ccs config`
+- Go to `Accounts`
+- Use `Resources` to switch an existing account between `shared` and `profile-local`
+- Go to `Shared Resources` to inspect the shared commands, skills, agents, plugins, and `settings.json` hub
+
 No account recreation required for this workflow.
 
 ### Backup Before Changing Sync
@@ -191,7 +198,7 @@ ccs auth backup default
 - Shared context is local filesystem sharing. It does not bypass remote provider permission models.
 - Session continuity still depends on what the upstream tool/provider stores and allows.
 - Context sharing should only be enabled for accounts you intentionally trust to share workspace history.
-- Dashboard controls for existing-account Shared Resources are tracked separately; CLI/API support is the source of truth until that UI lands.
+- Shared Resources inspection is read-only in the dashboard. Editing individual files still belongs to the owning command, skill, plugin, or settings surface.
 
 ## Alternative: CLIProxy Claude Pool