# Operator Profile & Appearance

## Display Name

The top-bar chip shows your **display name**; selecting it opens this page. Use
the **Display name** form to set the label you want to see there:

- Letters and numbers in any script, spaces, and `. _ - '` are accepted, up to 64
  characters.
- **Save display name** stores it; **Use sign-on name** clears it and returns the
  chip to your verified single sign-on name.
- The display name is cosmetic. It never replaces your verified identity, never
  grants access, and the read-only **Account** panel below always reports the
  authoritative sign-on name, email, subject, and identity provider.

Like the theme choice, it persists **server-side, not in the browser**: the
CSRF-guarded `PUT /api/v1/preferences` writes an HttpOnly
`ch-dashboard-display-name` cookie, and `GET /api/v1/profile` returns it as
`preferences.displayName`. A value that no longer matches the allowed pattern is
ignored on read, so a tampered cookie cannot inject content.

## Identity Details

The Profile panel displays your authenticated Cloudflare Access principal information:

- **Email:** Account email address.
- **Subject ID:** Unique Cloudflare Access subject identifier (`sub`).
- **Session Expiry:** Time remaining on your active dashboard login session.

## Theme & Appearance

Cloud Harness MCP supports three theme modes:

- **System:** Automatically tracks your operating system `prefers-color-scheme`.
- **Light:** The light companion, with white surfaces and darkened blue and status accents.
  The top bar and navigation rail turn light too.
- **Dark:** The default base — a deep blue-graphite canvas with the cyan accent.

Dark is the base theme, so a machine whose OS expresses no preference renders
dark. `System` still follows your OS when it does express one.

### Server-Side Persistence

To comply with strict CSP rules forbidding browser storage (`localStorage`), your theme preference is persisted server-side via `PUT /api/v1/preferences` into a secure `ch-dashboard-theme` HttpOnly cookie. The dashboard shell injects `data-theme` directly on initial HTML delivery, preventing screen flicker on page load.