@solongate/proxy 0.59.4 → 0.60.0

package/dist/tui/index.js

@@ -0,0 +1,881 @@
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+
+// src/tui/index.tsx
+import { render } from "ink";
+
+// src/tui/App.tsx
+import { Box as Box8, Text as Text8, useApp, useInput as useInput5 } from "ink";
+import { useState as useState6 } from "react";
+
+// src/cli-utils.ts
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  italic: "\x1B[3m",
+  white: "\x1B[97m",
+  gray: "\x1B[90m",
+  blue1: "\x1B[38;2;20;50;160m",
+  blue2: "\x1B[38;2;40;80;190m",
+  blue3: "\x1B[38;2;60;110;215m",
+  blue4: "\x1B[38;2;90;140;230m",
+  blue5: "\x1B[38;2;130;170;240m",
+  blue6: "\x1B[38;2;170;200;250m",
+  green: "\x1B[38;2;80;200;120m",
+  red: "\x1B[38;2;220;80;80m",
+  cyan: "\x1B[38;2;100;200;220m",
+  yellow: "\x1B[38;2;220;200;80m",
+  bgBlue: "\x1B[48;2;20;50;160m"
+};
+var BANNER_FULL = [
+  " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557      \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
+  " \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551     \u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D",
+  " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2557  ",
+  " \u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2554\u2550\u2550\u255D  ",
+  " \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551   \u2588\u2588\u2551   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
+  " \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D   \u255A\u2550\u255D   \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"
+];
+var BANNER_COLORS = [c.blue1, c.blue2, c.blue3, c.blue4, c.blue5, c.blue6];
+
+// src/tui/components.tsx
+import { Box, Text } from "ink";
+
+// src/tui/theme.ts
+var theme = {
+  accent: "cyan",
+  accentBright: "#5a8ce6",
+  ok: "green",
+  warn: "yellow",
+  bad: "red",
+  dim: "gray"
+};
+function decisionColor(decision) {
+  const d = (decision || "").toUpperCase();
+  if (d === "ALLOW") return theme.ok;
+  if (d === "DENY" || d === "DENIED") return theme.bad;
+  return theme.dim;
+}
+function modeColor(m) {
+  if (m === "block" || m === "active" || m === "on") return theme.ok;
+  if (m === "detect" || m === "idle") return theme.warn;
+  return theme.dim;
+}
+var BLOCKS = ["\u2581", "\u2582", "\u2583", "\u2584", "\u2585", "\u2586", "\u2587", "\u2588"];
+function sparkline(values, width) {
+  let v = values;
+  if (width && v.length > width) v = v.slice(v.length - width);
+  if (v.length === 0) return "";
+  const max = Math.max(...v, 0);
+  if (max === 0) return BLOCKS[0].repeat(v.length);
+  return v.map((n) => BLOCKS[Math.min(BLOCKS.length - 1, Math.round(n / max * (BLOCKS.length - 1)))]).join("");
+}
+function truncate(s, n) {
+  if (!s) return "";
+  return s.length <= n ? s : s.slice(0, Math.max(0, n - 1)) + "\u2026";
+}
+function ago(ts) {
+  const t = typeof ts === "number" ? ts : Date.parse(ts);
+  if (Number.isNaN(t)) return String(ts ?? "");
+  const s = Math.max(0, (Date.now() - t) / 1e3);
+  if (s < 60) return `${Math.floor(s)}s`;
+  if (s < 3600) return `${Math.floor(s / 60)}m`;
+  if (s < 86400) return `${Math.floor(s / 3600)}h`;
+  return `${Math.floor(s / 86400)}d`;
+}
+
+// src/tui/components.tsx
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+function DataView({
+  loading,
+  error,
+  empty,
+  emptyText,
+  children
+}) {
+  if (error) return /* @__PURE__ */ jsxs(Text, { color: theme.bad, children: [
+    "\u2717 ",
+    error
+  ] });
+  if (loading) return /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "Loading\u2026" });
+  if (empty) return /* @__PURE__ */ jsx(Text, { color: theme.dim, children: emptyText ?? "No data." });
+  return /* @__PURE__ */ jsx(Fragment, { children });
+}
+function Table({ columns, rows }) {
+  const fit = (s, w) => {
+    const v = s ?? "";
+    if (v.length > w) return v.slice(0, Math.max(0, w - 1)) + "\u2026";
+    return v.padEnd(w);
+  };
+  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx(Box, { children: columns.map((c2, i) => /* @__PURE__ */ jsx(Text, { color: theme.dim, children: fit(c2.header, c2.width) + "  " }, i)) }),
+    rows.map((row, ri) => /* @__PURE__ */ jsx(Box, { children: row.map((cell, ci) => /* @__PURE__ */ jsx(Text, { color: cell.color, dimColor: cell.dim, bold: cell.bold, children: fit(cell.value, columns[ci]?.width ?? 10) + "  " }, ci)) }, ri))
+  ] });
+}
+function KeyHints({ hints }) {
+  return /* @__PURE__ */ jsx(Box, { children: hints.map(([key, label], i) => /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
+    /* @__PURE__ */ jsx(Text, { color: theme.accent, children: key }),
+    " ",
+    label,
+    i < hints.length - 1 ? "   " : ""
+  ] }, i)) });
+}
+
+// src/tui/panels/Policies.tsx
+import { Box as Box2, Text as Text2, useInput } from "ink";
+import { useState as useState2 } from "react";
+
+// src/api-client/client.ts
+import { readFileSync, existsSync } from "fs";
+import { resolve, join } from "path";
+import { homedir } from "os";
+var DEFAULT_API_URL = "https://api.solongate.com";
+var ApiError = class extends Error {
+  status;
+  code;
+  constructor(status, code, message) {
+    super(message);
+    this.name = "ApiError";
+    this.status = status;
+    this.code = code;
+  }
+};
+var NotAuthenticatedError = class extends Error {
+  constructor() {
+    super("Not logged in. Run `solongate login` first.");
+    this.name = "NotAuthenticatedError";
+  }
+};
+function loginCredentialFile() {
+  try {
+    const p = join(homedir(), ".solongate", "cloud-guard.json");
+    if (!existsSync(p)) return {};
+    const c2 = JSON.parse(readFileSync(p, "utf-8"));
+    return c2 && typeof c2 === "object" ? c2 : {};
+  } catch {
+    return {};
+  }
+}
+function dotenvApiKey() {
+  try {
+    const envPath = resolve(".env");
+    if (!existsSync(envPath)) return void 0;
+    for (const line of readFileSync(envPath, "utf-8").split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const eq = trimmed.indexOf("=");
+      if (eq === -1) continue;
+      const key = trimmed.slice(0, eq).trim();
+      if (key !== "SOLONGATE_API_KEY") continue;
+      return trimmed.slice(eq + 1).trim().replace(/^["']|["']$/g, "");
+    }
+  } catch {
+  }
+  return void 0;
+}
+var cached = null;
+function isAuthenticated() {
+  try {
+    resolveCredentials();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function resolveCredentials(apiUrlOverride) {
+  if (cached && !apiUrlOverride) return cached;
+  const file = loginCredentialFile();
+  const apiKey = process.env["SOLONGATE_API_KEY"] || file.apiKey || dotenvApiKey();
+  if (!apiKey) throw new NotAuthenticatedError();
+  const apiUrl = apiUrlOverride || process.env["SOLONGATE_API_URL"] || file.apiUrl || DEFAULT_API_URL;
+  const creds = { apiKey, apiUrl: apiUrl.replace(/\/$/, "") };
+  if (!apiUrlOverride) cached = creds;
+  return creds;
+}
+function buildUrl(base, path, query) {
+  const url = new URL(`${base}/api/v1${path}`);
+  if (query) {
+    for (const [k, v] of Object.entries(query)) {
+      if (v === void 0) continue;
+      url.searchParams.set(k, String(v));
+    }
+  }
+  return url.toString();
+}
+async function request(method, path, opts = {}) {
+  const creds = resolveCredentials(opts.apiUrl);
+  const url = buildUrl(creds.apiUrl, path, opts.query);
+  const headers = {
+    Authorization: `Bearer ${creds.apiKey}`
+  };
+  let bodyInit;
+  if (opts.body !== void 0) {
+    headers["Content-Type"] = "application/json";
+    bodyInit = JSON.stringify(opts.body);
+  }
+  let res;
+  try {
+    res = await fetch(url, {
+      method,
+      headers,
+      body: bodyInit,
+      signal: AbortSignal.timeout(opts.timeoutMs ?? 15e3)
+    });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    throw new ApiError(0, "NETWORK_ERROR", `Cannot reach SolonGate API: ${msg}`);
+  }
+  const text = await res.text().catch(() => "");
+  let json = void 0;
+  if (text) {
+    try {
+      json = JSON.parse(text);
+    } catch {
+    }
+  }
+  if (!res.ok) {
+    const envelope = json?.error;
+    if (envelope && typeof envelope === "object") {
+      throw new ApiError(res.status, envelope.code || "ERROR", envelope.message || res.statusText);
+    }
+    if (typeof envelope === "string") {
+      throw new ApiError(res.status, "ERROR", envelope);
+    }
+    if (res.status === 401) throw new ApiError(401, "AUTHENTICATION_ERROR", "Invalid API key. Run `solongate login`.");
+    if (res.status === 429) throw new ApiError(429, "RATE_LIMITED", "Rate limited by the API. Slow down and retry.");
+    throw new ApiError(res.status, "ERROR", text || res.statusText || `HTTP ${res.status}`);
+  }
+  return json;
+}
+
+// src/api-client/policies.ts
+var policies_exports = {};
+__export(policies_exports, {
+  active: () => active,
+  addRule: () => addRule,
+  create: () => create,
+  dryRun: () => dryRun,
+  get: () => get,
+  list: () => list,
+  remove: () => remove,
+  revokeRule: () => revokeRule,
+  rollback: () => rollback,
+  setActive: () => setActive,
+  update: () => update,
+  versions: () => versions
+});
+function list() {
+  return request("GET", "/policies");
+}
+function get(id, version) {
+  return request("GET", `/policies/${encodeURIComponent(id)}`, {
+    query: version !== void 0 ? { version } : void 0
+  });
+}
+function create(policy) {
+  return request("POST", "/policies", { body: policy });
+}
+function update(id, policy) {
+  return request("PUT", `/policies/${encodeURIComponent(id)}`, { body: policy });
+}
+function remove(id) {
+  return request("DELETE", `/policies/${encodeURIComponent(id)}`);
+}
+function addRule(id, spec) {
+  return request("POST", `/policies/${encodeURIComponent(id)}/rules`, { body: spec });
+}
+function revokeRule(id, ruleId) {
+  return request("DELETE", `/policies/${encodeURIComponent(id)}/rules/${encodeURIComponent(ruleId)}`);
+}
+function versions(id, opts = {}) {
+  return request("GET", `/policies/${encodeURIComponent(id)}/versions`, { query: opts });
+}
+function rollback(id, version) {
+  return request("POST", `/policies/${encodeURIComponent(id)}/rollback`, { body: { version } });
+}
+function active(agentId) {
+  return request("GET", "/policies/active", { query: agentId ? { agent_id: agentId } : void 0 });
+}
+function setActive(policyId) {
+  return request("POST", "/policies/active", { body: { policyId: policyId ?? "" } });
+}
+function dryRun(body) {
+  return request("POST", "/policies/dry-run", { body });
+}
+
+// src/api-client/settings.ts
+var settings_exports = {};
+__export(settings_exports, {
+  clearRateLimitHistory: () => clearRateLimitHistory,
+  getGuardStatus: () => getGuardStatus,
+  getRateLimitHistory: () => getRateLimitHistory,
+  getSecurityLayers: () => getSecurityLayers,
+  setSecurityLayers: () => setSecurityLayers
+});
+function getSecurityLayers() {
+  return request("GET", "/settings/security-layers");
+}
+function setSecurityLayers(layers) {
+  return request("PUT", "/settings/security-layers", { body: { layers } });
+}
+function getRateLimitHistory() {
+  return request("GET", "/settings/rate-limit-history");
+}
+function clearRateLimitHistory() {
+  return request("DELETE", "/settings/rate-limit-history", { query: { all: 1 } });
+}
+function getGuardStatus() {
+  return request("GET", "/settings/guard-status");
+}
+
+// src/api-client/stats.ts
+var stats_exports = {};
+__export(stats_exports, {
+  drift: () => drift,
+  get: () => get2,
+  securityInsights: () => securityInsights,
+  timeseries: () => timeseries
+});
+function get2() {
+  return request("GET", "/stats");
+}
+function timeseries(opts = {}) {
+  return request("GET", "/stats/timeseries", { query: opts });
+}
+function drift(days) {
+  return request("GET", "/stats/drift", { query: days !== void 0 ? { days } : void 0 });
+}
+function securityInsights(days) {
+  return request("GET", "/stats/security-insights", { query: days !== void 0 ? { days } : void 0 });
+}
+
+// src/api-client/audit.ts
+var audit_exports = {};
+__export(audit_exports, {
+  list: () => list2,
+  whitelist: () => whitelist
+});
+function list2(query = {}) {
+  return request("GET", "/audit-logs", { query });
+}
+function whitelist(id, scope = "exact") {
+  return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
+}
+
+// src/api-client/agents.ts
+var agents_exports = {};
+__export(agents_exports, {
+  anomalies: () => anomalies,
+  get: () => get3,
+  live: () => live
+});
+function live(opts = {}) {
+  return request("GET", "/agents/live", {
+    query: { limit: opts.limit, include_deactivated: opts.includeDeactivated ? 1 : void 0 }
+  });
+}
+function get3(id, scan = false) {
+  return request("GET", `/agents/${encodeURIComponent(id)}`, { query: scan ? { scan: 1 } : void 0 });
+}
+function anomalies(id, limit) {
+  return request("GET", `/agents/${encodeURIComponent(id)}/anomalies`, {
+    query: limit !== void 0 ? { limit } : void 0
+  });
+}
+
+// src/api-client/index.ts
+var api = { policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports };
+
+// src/tui/hooks.ts
+import { useCallback, useEffect, useRef, useState } from "react";
+function useLoader(fn, deps = []) {
+  const [data, setData] = useState(null);
+  const [error, setError] = useState(null);
+  const [loading, setLoading] = useState(true);
+  const [nonce, setNonce] = useState(0);
+  const alive = useRef(true);
+  const fnRef = useRef(fn);
+  fnRef.current = fn;
+  useEffect(() => {
+    alive.current = true;
+    return () => {
+      alive.current = false;
+    };
+  }, []);
+  useEffect(() => {
+    setLoading(true);
+    fnRef.current().then((d) => {
+      if (!alive.current) return;
+      setData(d);
+      setError(null);
+    }).catch((e) => {
+      if (!alive.current) return;
+      setError(e instanceof Error ? e.message : String(e));
+    }).finally(() => {
+      if (alive.current) setLoading(false);
+    });
+  }, [nonce, ...deps]);
+  const reload = useCallback(() => setNonce((n) => n + 1), []);
+  return { data, error, loading, reload };
+}
+function usePoll(reload, intervalMs, enabled = true) {
+  useEffect(() => {
+    if (!enabled) return;
+    const t = setInterval(reload, intervalMs);
+    return () => clearInterval(t);
+  }, [reload, intervalMs, enabled]);
+}
+
+// src/tui/panels/Policies.tsx
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+function PoliciesPanel({ focused }) {
+  const [sel, setSel] = useState2(0);
+  const list3 = useLoader(() => api.policies.list());
+  const policies = list3.data?.policies ?? [];
+  const selected = policies[Math.min(sel, Math.max(0, policies.length - 1))];
+  const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  useInput(
+    (_input, key) => {
+      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
+      if (key.downArrow) setSel((n) => Math.min(policies.length - 1, n + 1));
+    },
+    { isActive: focused }
+  );
+  return /* @__PURE__ */ jsx2(DataView, { loading: list3.loading && !list3.data, error: list3.error, empty: !!list3.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: focused ? "\u2191\u2193 select policy" : "press \u2192 to browse" }),
+    /* @__PURE__ */ jsx2(Box2, { marginTop: 1, flexDirection: "column", children: policies.map((p, i) => /* @__PURE__ */ jsxs2(Text2, { color: i === sel ? theme.accentBright : void 0, bold: i === sel, children: [
+      (i === sel ? "\u25B8 " : "  ") + truncate(p.name, 26).padEnd(27),
+      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+        p.mode.padEnd(10),
+        " ",
+        p.rules.length,
+        " rules \xB7 v",
+        p.version
+      ] })
+    ] }, p.id)) }),
+    selected ? /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+        "Rules of ",
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: selected.id })
+      ] }),
+      /* @__PURE__ */ jsx2(
+        Table,
+        {
+          columns: [
+            { header: "EFFECT", width: 7 },
+            { header: "PRIO", width: 4 },
+            { header: "TOOL", width: 22 },
+            { header: "DESCRIPTION", width: 34 }
+          ],
+          rows: (detail.data?.rules ?? []).slice(0, 10).map((r) => [
+            { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad },
+            { value: String(r.priority), dim: true },
+            { value: truncate(r.toolPattern, 22), color: theme.accent },
+            { value: truncate(r.description || "\u2014", 34) }
+          ])
+        }
+      )
+    ] }) : null
+  ] }) });
+}
+
+// src/tui/panels/RateLimit.tsx
+import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
+import { useEffect as useEffect2, useState as useState3 } from "react";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var MODES = ["off", "detect", "block"];
+var FIELDS = ["mode", "perMinute", "perHour", "perDay"];
+function RateLimitPanel({ focused }) {
+  const layersQ = useLoader(() => api.settings.getSecurityLayers());
+  const historyQ = useLoader(() => api.settings.getRateLimitHistory());
+  const [draft, setDraft] = useState3(null);
+  const [dirty, setDirty] = useState3(false);
+  const [fi, setFi] = useState3(0);
+  const [status, setStatus] = useState3(null);
+  useEffect2(() => {
+    if (layersQ.data && !draft) setDraft({ ...layersQ.data.layers.rateLimit });
+  }, [layersQ.data, draft]);
+  const adjust = (dir) => {
+    if (!draft) return;
+    const field = FIELDS[fi];
+    if (field === "mode") {
+      const idx = (MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length;
+      setDraft({ ...draft, mode: MODES[idx] });
+    } else {
+      const step = 10;
+      setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
+    }
+    setDirty(true);
+    setStatus(null);
+  };
+  const save = async () => {
+    if (!draft || !layersQ.data) return;
+    setStatus("Saving\u2026");
+    try {
+      const next = { ...layersQ.data.layers, rateLimit: draft };
+      const res = await api.settings.setSecurityLayers(next);
+      setDraft({ ...res.layers.rateLimit });
+      setDirty(false);
+      setStatus("\u2713 Saved");
+      historyQ.reload();
+    } catch (e) {
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
+  useInput2(
+    (input, key) => {
+      if (key.upArrow) setFi((n) => (n - 1 + FIELDS.length) % FIELDS.length);
+      else if (key.downArrow) setFi((n) => (n + 1) % FIELDS.length);
+      else if (key.leftArrow) adjust(-1);
+      else if (key.rightArrow) adjust(1);
+      else if (input === "s") void save();
+    },
+    { isActive: focused }
+  );
+  const history = historyQ.data?.history ?? [];
+  return /* @__PURE__ */ jsx3(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: focused ? "\u2191\u2193 field   \u2190\u2192 change   s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx3(Row, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx3(Text3, { color: modeColor(draft.mode), children: draft.mode }) }),
+      /* @__PURE__ */ jsx3(Row, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perMinute }) }),
+      /* @__PURE__ */ jsx3(Row, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
+      /* @__PURE__ */ jsx3(Row, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
+    ] }),
+    history.length ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "history " }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: sparkline(history.map((h) => h.minute), 40) }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  " + history.length + " changes" })
+    ] }) : null,
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
+      dirty ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
+      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] })
+  ] }) : null });
+}
+function Row({ label, active: active2, children }) {
+  return /* @__PURE__ */ jsxs3(Box3, { children: [
+    /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(12) }),
+    children
+  ] });
+}
+
+// src/tui/panels/Dlp.tsx
+import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
+import { useEffect as useEffect3, useState as useState4 } from "react";
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+var MODES2 = ["off", "detect", "block"];
+function DlpPanel({ focused }) {
+  const q = useLoader(() => api.settings.getSecurityLayers());
+  const [dlp, setDlp] = useState4(null);
+  const [available, setAvailable] = useState4([]);
+  const [sel, setSel] = useState4(0);
+  const [status, setStatus] = useState4(null);
+  useEffect3(() => {
+    if (q.data && !dlp) {
+      setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns] });
+      setAvailable(q.data.availablePatterns);
+    }
+  }, [q.data, dlp]);
+  const persist = async (nextDlp) => {
+    if (!q.data) return;
+    setDlp(nextDlp);
+    setStatus("Saving\u2026");
+    try {
+      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp: nextDlp });
+      setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns] });
+      setStatus("\u2713 Saved");
+    } catch (e) {
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
+  useInput3(
+    (input, key) => {
+      if (!dlp) return;
+      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
+      else if (key.downArrow) setSel((n) => Math.min(available.length - 1, n + 1));
+      else if (input === " " || key.return) {
+        const p = available[sel];
+        if (!p) return;
+        const set = new Set(dlp.patterns);
+        if (set.has(p)) set.delete(p);
+        else set.add(p);
+        void persist({ ...dlp, patterns: [...set] });
+      } else if (input === "m") {
+        const idx = (MODES2.indexOf(dlp.mode) + 1) % MODES2.length;
+        void persist({ ...dlp, mode: MODES2[idx] });
+      }
+    },
+    { isActive: focused }
+  );
+  const enabled = new Set(dlp?.patterns ?? []);
+  return /* @__PURE__ */ jsx4(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Text4, { children: "mode: " }),
+      /* @__PURE__ */ jsx4(Text4, { color: modeColor(dlp.mode), children: dlp.mode }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: focused ? "   \u2191\u2193 move \xB7 space toggle \xB7 m mode" : "   press \u2192 to edit" })
+    ] }),
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
+      const on = enabled.has(p);
+      return /* @__PURE__ */ jsxs4(Text4, { color: focused && i === sel ? theme.accentBright : void 0, bold: focused && i === sel, children: [
+        (focused && i === sel ? "\u25B8 " : "  ") + (on ? "\u25CF " : "\u25CB "),
+        /* @__PURE__ */ jsx4(Text4, { color: on ? theme.ok : theme.dim, children: p })
+      ] }, p);
+    }) }),
+    dlp.custom.length ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Custom:" }),
+      dlp.custom.map((c2) => /* @__PURE__ */ jsxs4(Text4, { children: [
+        "  ",
+        /* @__PURE__ */ jsx4(Text4, { color: theme.accent, children: c2.name }),
+        " ",
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: c2.re })
+      ] }, c2.name))
+    ] }) : null,
+    status ? /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
+  ] }) : null });
+}
+
+// src/tui/panels/Stats.tsx
+import { Box as Box5, Text as Text5 } from "ink";
+import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+function StatsPanel({ active: active2 }) {
+  const stats = useLoader(() => api.stats.get());
+  const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
+  usePoll(() => {
+    stats.reload();
+    ts.reload();
+  }, 5e3, active2);
+  const s = stats.data;
+  const points = ts.data?.timeseries ?? [];
+  return /* @__PURE__ */ jsx5(DataView, { loading: stats.loading && !s, error: stats.error, children: s ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsxs5(Text5, { bold: true, children: [
+        s.total_calls,
+        " "
+      ] }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "calls    " }),
+      /* @__PURE__ */ jsxs5(Text5, { color: theme.ok, children: [
+        s.allowed,
+        " allowed"
+      ] }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "    " }),
+      /* @__PURE__ */ jsxs5(Text5, { color: theme.bad, children: [
+        s.denied,
+        " denied"
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs5(Text5, { color: theme.dim, children: [
+      s.active_policies,
+      " policies \xB7 ",
+      s.registered_tools,
+      " tools"
+    ] }),
+    /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs5(Text5, { color: theme.dim, children: [
+        "Last 24h ",
+        ts.data ? `(per ${ts.data.granularity})` : ""
+      ] }),
+      /* @__PURE__ */ jsxs5(Box5, { children: [
+        /* @__PURE__ */ jsx5(Text5, { children: "total   " }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: sparkline(points.map((p) => p.total), 64) })
+      ] }),
+      /* @__PURE__ */ jsxs5(Box5, { children: [
+        /* @__PURE__ */ jsx5(Text5, { children: "allowed " }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.ok, children: sparkline(points.map((p) => p.allowed), 64) })
+      ] }),
+      /* @__PURE__ */ jsxs5(Box5, { children: [
+        /* @__PURE__ */ jsx5(Text5, { children: "denied  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.bad, children: sparkline(points.map((p) => p.denied), 64) })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "Recent" }),
+      /* @__PURE__ */ jsx5(
+        Table,
+        {
+          columns: [
+            { header: "DECISION", width: 9 },
+            { header: "TOOL", width: 20 },
+            { header: "MS", width: 5 },
+            { header: "WHEN", width: 6 }
+          ],
+          rows: (s.recent_activity ?? []).slice(0, 8).map((a) => [
+            { value: a.decision, color: decisionColor(a.decision) },
+            { value: truncate(a.tool_name, 20), color: theme.accent },
+            { value: String(a.evaluation_time_ms ?? "\u2014"), dim: true },
+            { value: ago(a.created_at), dim: true }
+          ])
+        }
+      )
+    ] })
+  ] }) : null });
+}
+
+// src/tui/panels/Audit.tsx
+import { Box as Box6, Text as Text6, useInput as useInput4 } from "ink";
+import { useState as useState5 } from "react";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+var FILTERS = [void 0, "DENY", "ALLOW"];
+function AuditPanel({ active: active2, focused }) {
+  const [fi, setFi] = useState5(0);
+  const filter = FILTERS[fi];
+  const audit = useLoader(() => api.audit.list({ filter, limit: 14 }), [fi]);
+  usePoll(audit.reload, 5e3, active2);
+  useInput4(
+    (input) => {
+      if (input === "f") setFi((n) => (n + 1) % FILTERS.length);
+    },
+    { isActive: focused }
+  );
+  const entries = audit.data?.entries ?? [];
+  return /* @__PURE__ */ jsx6(DataView, { loading: audit.loading && !audit.data, error: audit.error, empty: !!audit.data && entries.length === 0, emptyText: "No audit entries.", children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+      audit.data?.total ?? 0,
+      " entries \xB7 filter: ",
+      /* @__PURE__ */ jsx6(Text6, { color: theme.accent, children: filter ?? "all" }),
+      " (press f)"
+    ] }),
+    /* @__PURE__ */ jsx6(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx6(
+      Table,
+      {
+        columns: [
+          { header: "DECISION", width: 9 },
+          { header: "TOOL", width: 18 },
+          { header: "AGENT", width: 14 },
+          { header: "REASON", width: 26 },
+          { header: "DLP", width: 4 },
+          { header: "WHEN", width: 6 }
+        ],
+        rows: entries.map((e) => [
+          { value: e.decision, color: decisionColor(e.decision) },
+          { value: truncate(e.tool_name, 18), color: theme.accent },
+          { value: truncate(e.agent_name ?? "\u2014", 14), dim: true },
+          { value: truncate(e.reason ?? "\u2014", 26) },
+          { value: e.dlp_matches?.length ? String(e.dlp_matches.length) : "0", color: e.dlp_matches?.length ? theme.bad : void 0, dim: !e.dlp_matches?.length },
+          { value: ago(e.created_at), dim: true }
+        ])
+      }
+    ) })
+  ] }) });
+}
+
+// src/tui/panels/Agents.tsx
+import { Box as Box7, Text as Text7 } from "ink";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+function AgentsPanel({ active: active2 }) {
+  const agents = useLoader(() => api.agents.live({ limit: 14 }));
+  usePoll(agents.reload, 4e3, active2);
+  const data = agents.data;
+  const rows = data?.agents ?? [];
+  return /* @__PURE__ */ jsx7(DataView, { loading: agents.loading && !data, error: agents.error, empty: !!data && rows.length === 0, emptyText: "No agent sessions.", children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    data ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+      /* @__PURE__ */ jsxs7(Text7, { color: theme.ok, children: [
+        data.counts.active,
+        " active"
+      ] }),
+      " \xB7 ",
+      /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
+        data.counts.idle,
+        " idle"
+      ] }),
+      " \xB7 ",
+      data.counts.deactivated,
+      " off"
+    ] }) : null,
+    /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx7(
+      Table,
+      {
+        columns: [
+          { header: "STATUS", width: 7 },
+          { header: "AGENT", width: 20 },
+          { header: "CALLS", width: 6 },
+          { header: "DENY", width: 5 },
+          { header: "DLP", width: 4 },
+          { header: "TRUST", width: 6 },
+          { header: "CHARACTER", width: 20 }
+        ],
+        rows: rows.map((a) => [
+          { value: a.status, color: modeColor(a.status) },
+          { value: truncate(a.agent_name ?? a.agent_id ?? a.session_id, 20), color: theme.accent },
+          { value: String(a.total_calls) },
+          { value: String(a.denied_calls), color: a.denied_calls ? theme.bad : void 0, dim: !a.denied_calls },
+          { value: String(a.dlp_events), color: a.dlp_events ? theme.bad : void 0, dim: !a.dlp_events },
+          { value: `${a.trust_score}` },
+          { value: truncate(a.character || "\u2014", 20), dim: true }
+        ])
+      }
+    ) })
+  ] }) });
+}
+
+// src/tui/App.tsx
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+var SECTIONS = [
+  { label: "Policies", Panel: PoliciesPanel },
+  { label: "Rate Limit", Panel: RateLimitPanel },
+  { label: "DLP", Panel: DlpPanel },
+  { label: "Stats", Panel: StatsPanel },
+  { label: "Audit", Panel: AuditPanel },
+  { label: "Agents", Panel: AgentsPanel }
+];
+var BANNER_HEX = ["#1432A0", "#2850BE", "#3C6ED7", "#5A8CE6", "#82AAF0", "#AAC8FA"];
+function Banner() {
+  const wide = (process.stdout.columns ?? 80) >= 82;
+  if (!wide) {
+    return /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  ] });
+}
+function App() {
+  const { exit } = useApp();
+  const [section, setSection] = useState6(0);
+  const [focus, setFocus] = useState6("nav");
+  useInput5((input, key) => {
+    if (focus === "nav") {
+      if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
+      else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
+      else if (key.rightArrow || key.return || key.tab) setFocus("panel");
+      else if (input === "q") exit();
+    } else {
+      if (key.escape || key.tab) setFocus("nav");
+    }
+  });
+  const current = SECTIONS[section];
+  const Panel = current.Panel;
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Banner, {}),
+    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+      /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minHeight: 16, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: true, focused: focus === "panel" }) })
+    ] }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "move"], ["\u2190\u2192/space/s", "edit"], ["esc", "back to menu"]] }) })
+  ] });
+}
+
+// src/tui/index.tsx
+import { jsx as jsx9 } from "react/jsx-runtime";
+async function launchTui() {
+  if (!process.stdout.isTTY || !process.stdin.isTTY) {
+    process.stderr.write(
+      "The SolonGate TUI needs an interactive terminal.\nUse the scriptable commands instead, e.g. `solongate stats`, `solongate policy list`.\n"
+    );
+    return;
+  }
+  if (!isAuthenticated()) {
+    process.stderr.write("Not logged in. Run `solongate login` first.\n");
+    return;
+  }
+  const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
+  await waitUntilExit();
+}
+export {
+  launchTui
+};