@solongate/proxy 0.60.0 → 0.61.0

package/dist/index.js

@@ -7020,56 +7020,128 @@ var init_hooks = __esm({
 
 // src/tui/panels/Policies.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
-import { useState as useState2 } from "react";
+import { useEffect as useEffect2, useState as useState2 } from "react";
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function PoliciesPanel({ focused }) {
-  const [sel, setSel] = useState2(0);
   const list4 = useLoader(() => api.policies.list());
   const policies = list4.data?.policies ?? [];
-  const selected = policies[Math.min(sel, Math.max(0, policies.length - 1))];
+  const [view, setView] = useState2("list");
+  const [pi, setPi] = useState2(0);
+  const [ri, setRi] = useState2(0);
+  const [rules, setRules] = useState2(null);
+  const [mode, setMode] = useState2("denylist");
+  const [status, setStatus] = useState2(null);
+  const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  useEffect2(() => {
+    if (detail.data) {
+      setRules(detail.data.rules);
+      setMode(detail.data.mode ?? "denylist");
+      setRi(0);
+    }
+  }, [detail.data]);
+  const persist = async (nextRules, nextMode) => {
+    if (!detail.data || !selected) return;
+    setStatus("Saving\u2026");
+    try {
+      const res = await api.policies.update(selected.id, {
+        id: selected.id,
+        name: detail.data.name,
+        description: detail.data.description,
+        mode: nextMode,
+        agents: detail.data.agents,
+        rules: nextRules
+      });
+      setRules(res.rules);
+      setStatus("\u2713 Saved v" + res._version);
+      list4.reload();
+    } catch (e) {
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
   useInput(
-    (_input, key) => {
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      if (key.downArrow) setSel((n) => Math.min(policies.length - 1, n + 1));
+    (input, key) => {
+      if (view === "list") {
+        if (key.upArrow) setPi((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPi((n) => Math.min(policies.length - 1, n + 1));
+        else if (key.return || key.rightArrow) {
+          setStatus(null);
+          setView("detail");
+        }
+        return;
+      }
+      const rs2 = rules ?? [];
+      if (key.leftArrow) {
+        setView("list");
+        setStatus(null);
+      } else if (key.upArrow) setRi((n) => Math.max(0, n - 1));
+      else if (key.downArrow) setRi((n) => Math.min(rs2.length - 1, n + 1));
+      else if (input === " " || input === "e") {
+        if (!rs2[ri]) return;
+        const next = rs2.map((r, i) => i === ri ? { ...r, enabled: !r.enabled } : r);
+        setRules(next);
+        void persist(next, mode);
+      } else if (input === "d") {
+        const target = rs2[ri];
+        if (!target || !selected) return;
+        setStatus("Deleting\u2026");
+        void api.policies.revokeRule(selected.id, target.id).then(() => {
+          setStatus("\u2713 Deleted");
+          detail.reload();
+          list4.reload();
+        }).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+      } else if (input === "m") {
+        const nm = mode === "denylist" ? "whitelist" : "denylist";
+        setMode(nm);
+        void persist(rs2, nm);
+      }
     },
     { isActive: focused }
   );
-  return /* @__PURE__ */ jsx2(DataView, { loading: list4.loading && !list4.data, error: list4.error, empty: !!list4.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: focused ? "\u2191\u2193 select policy" : "press \u2192 to browse" }),
-    /* @__PURE__ */ jsx2(Box2, { marginTop: 1, flexDirection: "column", children: policies.map((p, i) => /* @__PURE__ */ jsxs2(Text2, { color: i === sel ? theme.accentBright : void 0, bold: i === sel, children: [
-      (i === sel ? "\u25B8 " : "  ") + truncate2(p.name, 26).padEnd(27),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        p.mode.padEnd(10),
-        " ",
-        p.rules.length,
-        " rules \xB7 v",
-        p.version
-      ] })
-    ] }, p.id)) }),
-    selected ? /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "Rules of ",
-        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: selected.id })
-      ] }),
-      /* @__PURE__ */ jsx2(
-        Table,
-        {
-          columns: [
-            { header: "EFFECT", width: 7 },
-            { header: "PRIO", width: 4 },
-            { header: "TOOL", width: 22 },
-            { header: "DESCRIPTION", width: 34 }
-          ],
-          rows: (detail.data?.rules ?? []).slice(0, 10).map((r) => [
-            { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad },
-            { value: String(r.priority), dim: true },
-            { value: truncate2(r.toolPattern, 22), color: theme.accent },
-            { value: truncate2(r.description || "\u2014", 34) }
-          ])
-        }
-      )
-    ] }) : null
+  if (view === "list") {
+    return /* @__PURE__ */ jsx2(DataView, { loading: list4.loading && !list4.data, error: list4.error, empty: !!list4.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: focused ? "\u2191\u2193 select \xB7 enter open" : "press \u2192 to browse" }),
+      /* @__PURE__ */ jsx2(Box2, { marginTop: 1, flexDirection: "column", children: policies.map((p, i) => /* @__PURE__ */ jsxs2(Text2, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
+        (i === pi ? "\u25B8 " : "  ") + truncate2(p.name, 26).padEnd(27),
+        /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+          p.mode.padEnd(10),
+          " ",
+          p.rules.length,
+          " rules \xB7 v",
+          p.version
+        ] })
+      ] }, p.id)) })
+    ] }) });
+  }
+  const rs = rules ?? [];
+  return /* @__PURE__ */ jsx2(DataView, { loading: detail.loading && !rules, error: detail.error, children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs2(Box2, { children: [
+      /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accentBright, children: truncate2(selected?.name ?? "", 30) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  mode: " }),
+      /* @__PURE__ */ jsx2(Text2, { color: mode === "whitelist" ? theme.ok : void 0, children: mode })
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2191\u2193 rule \xB7 space toggle \xB7 d delete \xB7 m mode \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(
+      Table,
+      {
+        columns: [
+          { header: "", width: 2 },
+          { header: "EFFECT", width: 7 },
+          { header: "PRIO", width: 4 },
+          { header: "TOOL", width: 20 },
+          { header: "DESCRIPTION", width: 34 }
+        ],
+        rows: rs.map((r, i) => [
+          { value: i === ri ? "\u25B8" : "", color: theme.accentBright },
+          { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad, dim: !r.enabled },
+          { value: String(r.priority), dim: true },
+          { value: (r.enabled ? "" : "\u2298 ") + truncate2(r.toolPattern, 18), color: theme.accent, dim: !r.enabled },
+          { value: truncate2(r.description || "\u2014", 34), dim: !r.enabled }
+        ])
+      }
+    ) }),
+    rs.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "(no rules)" }) : null,
+    status ? /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(Text2, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
   ] }) });
 }
 var init_Policies = __esm({
@@ -7084,26 +7156,26 @@ var init_Policies = __esm({
 
 // src/tui/panels/RateLimit.tsx
 import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
-import { useEffect as useEffect2, useState as useState3 } from "react";
+import { useEffect as useEffect3, useState as useState3 } from "react";
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 function RateLimitPanel({ focused }) {
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
+  const insightsQ = useLoader(() => api.stats.securityInsights(7));
   const [draft, setDraft] = useState3(null);
   const [dirty, setDirty] = useState3(false);
   const [fi, setFi] = useState3(0);
   const [status, setStatus] = useState3(null);
-  useEffect2(() => {
+  useEffect3(() => {
     if (layersQ.data && !draft) setDraft({ ...layersQ.data.layers.rateLimit });
   }, [layersQ.data, draft]);
-  const adjust = (dir) => {
+  const adjust = (dir, step) => {
     if (!draft) return;
     const field = FIELDS[fi];
     if (field === "mode") {
       const idx = (MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length;
       setDraft({ ...draft, mode: MODES[idx] });
     } else {
-      const step = 10;
       setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
     }
     setDirty(true);
@@ -7125,35 +7197,81 @@ function RateLimitPanel({ focused }) {
   };
   useInput2(
     (input, key) => {
+      const step = key.shift ? 10 : 1;
       if (key.upArrow) setFi((n) => (n - 1 + FIELDS.length) % FIELDS.length);
       else if (key.downArrow) setFi((n) => (n + 1) % FIELDS.length);
-      else if (key.leftArrow) adjust(-1);
-      else if (key.rightArrow) adjust(1);
+      else if (key.leftArrow) adjust(-1, step);
+      else if (key.rightArrow) adjust(1, step);
       else if (input === "s") void save();
     },
     { isActive: focused }
   );
-  const history = historyQ.data?.history ?? [];
+  const history = (historyQ.data?.history ?? []).slice().sort((a, b) => b.ts - a.ts);
+  const bursts = (insightsQ.data?.["anomalies"] ?? []).slice(0, 6);
   return /* @__PURE__ */ jsx3(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: focused ? "\u2191\u2193 field   \u2190\u2192 change   s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
     /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx3(Row, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx3(Text3, { color: modeColor(draft.mode), children: draft.mode }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perMinute }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx3(Text3, { color: modeColor(draft.mode), children: draft.mode }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perMinute }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
     ] }),
-    history.length ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "history " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: sparkline(history.map((h) => h.minute), 40) }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  " + history.length + " changes" })
-    ] }) : null,
-    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
+    dirty || status ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
       dirty ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
       status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] }) : null,
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "Change history ",
+        history.length ? `(${history.length})` : ""
+      ] }),
+      history.length ? /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "WHEN", width: 8 },
+            { header: "/MIN", width: 6 },
+            { header: "/HOUR", width: 7 },
+            { header: "/DAY", width: 6 }
+          ],
+          rows: history.slice(0, 5).map((h, i) => [
+            { value: ago(h.ts) + " ago", dim: true, bold: i === 0 },
+            { value: String(h.minute), bold: i === 0 },
+            { value: h.hour === 0 ? "off" : String(h.hour), dim: h.hour === 0 },
+            { value: h.day === 0 ? "off" : String(h.day), dim: h.day === 0 }
+          ])
+        }
+      ) : /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  no changes" })
+    ] }),
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "Recent bursts ",
+        insightsQ.loading && !insightsQ.data ? "\u2026" : `(${bursts.length})`
+      ] }),
+      bursts.length ? /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "RESULT", width: 9 },
+            { header: "AGENT", width: 16 },
+            { header: "CALLS/LIMIT", width: 12 },
+            { header: "WHEN", width: 8 }
+          ],
+          rows: bursts.map((b) => [
+            { value: b.blocked ? "blocked" : "BYPASSED", color: b.blocked ? theme.accent : theme.bad, bold: !b.blocked },
+            { value: (b.agent || "\u2014").slice(0, 16), dim: true },
+            { value: `${b.count}/${b.limit}` },
+            { value: ago(b.minute) + " ago", dim: true }
+          ])
+        }
+      ) : /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "  ",
+        insightsQ.error ? insightsQ.error : "none in 7d"
+      ] })
     ] })
   ] }) : null });
 }
-function Row({ label, active: active2, children }) {
+function FieldRow({ label, active: active2, children }) {
   return /* @__PURE__ */ jsxs3(Box3, { children: [
     /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(12) }),
     children
@@ -7174,7 +7292,7 @@ var init_RateLimit = __esm({
 
 // src/tui/panels/Dlp.tsx
 import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
-import { useEffect as useEffect3, useState as useState4 } from "react";
+import { useEffect as useEffect4, useState as useState4 } from "react";
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 function DlpPanel({ focused }) {
   const q = useLoader(() => api.settings.getSecurityLayers());
@@ -7182,7 +7300,7 @@ function DlpPanel({ focused }) {
   const [available, setAvailable] = useState4([]);
   const [sel, setSel] = useState4(0);
   const [status, setStatus] = useState4(null);
-  useEffect3(() => {
+  useEffect4(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns] });
       setAvailable(q.data.availablePatterns);

package/dist/tui/index.js

@@ -126,7 +126,7 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Policies.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
-import { useState as useState2 } from "react";
+import { useEffect as useEffect2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
 import { readFileSync, existsSync } from "fs";
@@ -432,80 +432,152 @@ function usePoll(reload, intervalMs, enabled = true) {
 // src/tui/panels/Policies.tsx
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function PoliciesPanel({ focused }) {
-  const [sel, setSel] = useState2(0);
   const list3 = useLoader(() => api.policies.list());
   const policies = list3.data?.policies ?? [];
-  const selected = policies[Math.min(sel, Math.max(0, policies.length - 1))];
+  const [view, setView] = useState2("list");
+  const [pi, setPi] = useState2(0);
+  const [ri, setRi] = useState2(0);
+  const [rules, setRules] = useState2(null);
+  const [mode, setMode] = useState2("denylist");
+  const [status, setStatus] = useState2(null);
+  const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  useEffect2(() => {
+    if (detail.data) {
+      setRules(detail.data.rules);
+      setMode(detail.data.mode ?? "denylist");
+      setRi(0);
+    }
+  }, [detail.data]);
+  const persist = async (nextRules, nextMode) => {
+    if (!detail.data || !selected) return;
+    setStatus("Saving\u2026");
+    try {
+      const res = await api.policies.update(selected.id, {
+        id: selected.id,
+        name: detail.data.name,
+        description: detail.data.description,
+        mode: nextMode,
+        agents: detail.data.agents,
+        rules: nextRules
+      });
+      setRules(res.rules);
+      setStatus("\u2713 Saved v" + res._version);
+      list3.reload();
+    } catch (e) {
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
   useInput(
-    (_input, key) => {
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      if (key.downArrow) setSel((n) => Math.min(policies.length - 1, n + 1));
+    (input, key) => {
+      if (view === "list") {
+        if (key.upArrow) setPi((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPi((n) => Math.min(policies.length - 1, n + 1));
+        else if (key.return || key.rightArrow) {
+          setStatus(null);
+          setView("detail");
+        }
+        return;
+      }
+      const rs2 = rules ?? [];
+      if (key.leftArrow) {
+        setView("list");
+        setStatus(null);
+      } else if (key.upArrow) setRi((n) => Math.max(0, n - 1));
+      else if (key.downArrow) setRi((n) => Math.min(rs2.length - 1, n + 1));
+      else if (input === " " || input === "e") {
+        if (!rs2[ri]) return;
+        const next = rs2.map((r, i) => i === ri ? { ...r, enabled: !r.enabled } : r);
+        setRules(next);
+        void persist(next, mode);
+      } else if (input === "d") {
+        const target = rs2[ri];
+        if (!target || !selected) return;
+        setStatus("Deleting\u2026");
+        void api.policies.revokeRule(selected.id, target.id).then(() => {
+          setStatus("\u2713 Deleted");
+          detail.reload();
+          list3.reload();
+        }).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+      } else if (input === "m") {
+        const nm = mode === "denylist" ? "whitelist" : "denylist";
+        setMode(nm);
+        void persist(rs2, nm);
+      }
     },
     { isActive: focused }
   );
-  return /* @__PURE__ */ jsx2(DataView, { loading: list3.loading && !list3.data, error: list3.error, empty: !!list3.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: focused ? "\u2191\u2193 select policy" : "press \u2192 to browse" }),
-    /* @__PURE__ */ jsx2(Box2, { marginTop: 1, flexDirection: "column", children: policies.map((p, i) => /* @__PURE__ */ jsxs2(Text2, { color: i === sel ? theme.accentBright : void 0, bold: i === sel, children: [
-      (i === sel ? "\u25B8 " : "  ") + truncate(p.name, 26).padEnd(27),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        p.mode.padEnd(10),
-        " ",
-        p.rules.length,
-        " rules \xB7 v",
-        p.version
-      ] })
-    ] }, p.id)) }),
-    selected ? /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "Rules of ",
-        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: selected.id })
-      ] }),
-      /* @__PURE__ */ jsx2(
-        Table,
-        {
-          columns: [
-            { header: "EFFECT", width: 7 },
-            { header: "PRIO", width: 4 },
-            { header: "TOOL", width: 22 },
-            { header: "DESCRIPTION", width: 34 }
-          ],
-          rows: (detail.data?.rules ?? []).slice(0, 10).map((r) => [
-            { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad },
-            { value: String(r.priority), dim: true },
-            { value: truncate(r.toolPattern, 22), color: theme.accent },
-            { value: truncate(r.description || "\u2014", 34) }
-          ])
-        }
-      )
-    ] }) : null
+  if (view === "list") {
+    return /* @__PURE__ */ jsx2(DataView, { loading: list3.loading && !list3.data, error: list3.error, empty: !!list3.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: focused ? "\u2191\u2193 select \xB7 enter open" : "press \u2192 to browse" }),
+      /* @__PURE__ */ jsx2(Box2, { marginTop: 1, flexDirection: "column", children: policies.map((p, i) => /* @__PURE__ */ jsxs2(Text2, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
+        (i === pi ? "\u25B8 " : "  ") + truncate(p.name, 26).padEnd(27),
+        /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+          p.mode.padEnd(10),
+          " ",
+          p.rules.length,
+          " rules \xB7 v",
+          p.version
+        ] })
+      ] }, p.id)) })
+    ] }) });
+  }
+  const rs = rules ?? [];
+  return /* @__PURE__ */ jsx2(DataView, { loading: detail.loading && !rules, error: detail.error, children: /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs2(Box2, { children: [
+      /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 30) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  mode: " }),
+      /* @__PURE__ */ jsx2(Text2, { color: mode === "whitelist" ? theme.ok : void 0, children: mode })
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2191\u2193 rule \xB7 space toggle \xB7 d delete \xB7 m mode \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(
+      Table,
+      {
+        columns: [
+          { header: "", width: 2 },
+          { header: "EFFECT", width: 7 },
+          { header: "PRIO", width: 4 },
+          { header: "TOOL", width: 20 },
+          { header: "DESCRIPTION", width: 34 }
+        ],
+        rows: rs.map((r, i) => [
+          { value: i === ri ? "\u25B8" : "", color: theme.accentBright },
+          { value: r.effect, color: r.effect === "ALLOW" ? theme.ok : theme.bad, dim: !r.enabled },
+          { value: String(r.priority), dim: true },
+          { value: (r.enabled ? "" : "\u2298 ") + truncate(r.toolPattern, 18), color: theme.accent, dim: !r.enabled },
+          { value: truncate(r.description || "\u2014", 34), dim: !r.enabled }
+        ])
+      }
+    ) }),
+    rs.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "(no rules)" }) : null,
+    status ? /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(Text2, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
   ] }) });
 }
 
 // src/tui/panels/RateLimit.tsx
 import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
-import { useEffect as useEffect2, useState as useState3 } from "react";
+import { useEffect as useEffect3, useState as useState3 } from "react";
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 var MODES = ["off", "detect", "block"];
 var FIELDS = ["mode", "perMinute", "perHour", "perDay"];
 function RateLimitPanel({ focused }) {
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
+  const insightsQ = useLoader(() => api.stats.securityInsights(7));
   const [draft, setDraft] = useState3(null);
   const [dirty, setDirty] = useState3(false);
   const [fi, setFi] = useState3(0);
   const [status, setStatus] = useState3(null);
-  useEffect2(() => {
+  useEffect3(() => {
     if (layersQ.data && !draft) setDraft({ ...layersQ.data.layers.rateLimit });
   }, [layersQ.data, draft]);
-  const adjust = (dir) => {
+  const adjust = (dir, step) => {
     if (!draft) return;
     const field = FIELDS[fi];
     if (field === "mode") {
       const idx = (MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length;
       setDraft({ ...draft, mode: MODES[idx] });
     } else {
-      const step = 10;
       setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
     }
     setDirty(true);
@@ -527,35 +599,81 @@ function RateLimitPanel({ focused }) {
   };
   useInput2(
     (input, key) => {
+      const step = key.shift ? 10 : 1;
       if (key.upArrow) setFi((n) => (n - 1 + FIELDS.length) % FIELDS.length);
       else if (key.downArrow) setFi((n) => (n + 1) % FIELDS.length);
-      else if (key.leftArrow) adjust(-1);
-      else if (key.rightArrow) adjust(1);
+      else if (key.leftArrow) adjust(-1, step);
+      else if (key.rightArrow) adjust(1, step);
       else if (input === "s") void save();
     },
     { isActive: focused }
   );
-  const history = historyQ.data?.history ?? [];
+  const history = (historyQ.data?.history ?? []).slice().sort((a, b) => b.ts - a.ts);
+  const bursts = (insightsQ.data?.["anomalies"] ?? []).slice(0, 6);
   return /* @__PURE__ */ jsx3(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: focused ? "\u2191\u2193 field   \u2190\u2192 change   s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
     /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx3(Row, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx3(Text3, { color: modeColor(draft.mode), children: draft.mode }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perMinute }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
-      /* @__PURE__ */ jsx3(Row, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx3(Text3, { color: modeColor(draft.mode), children: draft.mode }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perMinute }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
+      /* @__PURE__ */ jsx3(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx3(Text3, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
     ] }),
-    history.length ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "history " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: sparkline(history.map((h) => h.minute), 40) }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  " + history.length + " changes" })
-    ] }) : null,
-    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
+    dirty || status ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, children: [
       dirty ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
       status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] }) : null,
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "Change history ",
+        history.length ? `(${history.length})` : ""
+      ] }),
+      history.length ? /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "WHEN", width: 8 },
+            { header: "/MIN", width: 6 },
+            { header: "/HOUR", width: 7 },
+            { header: "/DAY", width: 6 }
+          ],
+          rows: history.slice(0, 5).map((h, i) => [
+            { value: ago(h.ts) + " ago", dim: true, bold: i === 0 },
+            { value: String(h.minute), bold: i === 0 },
+            { value: h.hour === 0 ? "off" : String(h.hour), dim: h.hour === 0 },
+            { value: h.day === 0 ? "off" : String(h.day), dim: h.day === 0 }
+          ])
+        }
+      ) : /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  no changes" })
+    ] }),
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "Recent bursts ",
+        insightsQ.loading && !insightsQ.data ? "\u2026" : `(${bursts.length})`
+      ] }),
+      bursts.length ? /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "RESULT", width: 9 },
+            { header: "AGENT", width: 16 },
+            { header: "CALLS/LIMIT", width: 12 },
+            { header: "WHEN", width: 8 }
+          ],
+          rows: bursts.map((b) => [
+            { value: b.blocked ? "blocked" : "BYPASSED", color: b.blocked ? theme.accent : theme.bad, bold: !b.blocked },
+            { value: (b.agent || "\u2014").slice(0, 16), dim: true },
+            { value: `${b.count}/${b.limit}` },
+            { value: ago(b.minute) + " ago", dim: true }
+          ])
+        }
+      ) : /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "  ",
+        insightsQ.error ? insightsQ.error : "none in 7d"
+      ] })
     ] })
   ] }) : null });
 }
-function Row({ label, active: active2, children }) {
+function FieldRow({ label, active: active2, children }) {
   return /* @__PURE__ */ jsxs3(Box3, { children: [
     /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(12) }),
     children
@@ -564,7 +682,7 @@ function Row({ label, active: active2, children }) {
 
 // src/tui/panels/Dlp.tsx
 import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
-import { useEffect as useEffect3, useState as useState4 } from "react";
+import { useEffect as useEffect4, useState as useState4 } from "react";
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 var MODES2 = ["off", "detect", "block"];
 function DlpPanel({ focused }) {
@@ -573,7 +691,7 @@ function DlpPanel({ focused }) {
   const [available, setAvailable] = useState4([]);
   const [sel, setSel] = useState4(0);
   const [status, setStatus] = useState4(null);
-  useEffect3(() => {
+  useEffect4(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns] });
       setAvailable(q.data.availablePatterns);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.60.0",
+  "version": "0.61.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {