@solongate/proxy 0.63.0 → 0.64.0

package/dist/index.js

@@ -7022,15 +7022,50 @@ var init_hooks = __esm({
 import { Box as Box2, Text as Text2 } from "ink";
 import { useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+function ColumnChart({ series, height, width: width2, color, limit = 0 }) {
+  const tailVals = series.slice(-width2);
+  const data = [...new Array(Math.max(0, width2 - tailVals.length)).fill(0), ...tailVals];
+  const max = Math.max(1, ...data, limit);
+  const lines = [];
+  for (let r = height; r >= 1; r--) {
+    const segs = [];
+    for (let i = 0; i < data.length; i++) {
+      const frac = data[i] / max;
+      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
+      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const last = segs[segs.length - 1];
+      if (last && last.color === c2) last.text += ch;
+      else segs.push({ text: ch, color: c2 });
+    }
+    lines.push(
+      /* @__PURE__ */ jsx2(Text2, { children: segs.map((s, i) => /* @__PURE__ */ jsx2(Text2, { color: s.color, children: s.text }, i)) }, r)
+    );
+  }
+  return /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", children: lines });
+}
+function HBar({ label, value, max, width: width2, color }) {
+  const filled = max > 0 ? Math.round(value / max * width2) : 0;
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width2, filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width2 - filled)) + " " + value })
+  ] });
+}
+function SectionTitle({ children, width: width2 }) {
+  const label = `\u2500\u2500 ${children} `;
+  return /* @__PURE__ */ jsx2(Text2, { color: theme.dim, wrap: "truncate", children: label + "\u2500".repeat(Math.max(0, width2 - label.length)) });
+}
 function LivePanel({ active: active2 }) {
   const stats = useLoader(() => api.stats.get());
   const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 40 }));
+  const feed = useLoader(() => api.audit.list({ limit: 50 }));
+  const insights = useLoader(() => api.stats.securityInsights(7));
   usePoll(() => {
     stats.reload();
     ts.reload();
     feed.reload();
   }, 2e3, active2);
+  usePoll(insights.reload, 1e4, active2);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -7045,108 +7080,113 @@ function LivePanel({ active: active2 }) {
     setBuffer((prev) => {
       const seen = new Set(prev.map((e) => e.id));
       const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-300) : prev;
+      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
     });
   }, [feed.data]);
-  const s = stats.data;
-  const points = ts.data?.timeseries ?? [];
   const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 32;
-  const feedRows = Math.max(8, Math.min(20, rows - 18));
-  const wide = cols >= 112;
-  const tail = buffer.slice(-feedRows);
-  const denies = buffer.filter((e) => e.decision !== "ALLOW");
-  const dlpHits = buffer.filter((e) => e.dlp_matches?.length);
-  const lastDeny = denies[denies.length - 1];
+  const rows = process.stdout.rows ?? 30;
+  const s = stats.data;
+  const ins = insights.data ?? {};
+  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
+  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
+  const minuteLive = minuteRaw.some((c2) => c2 > 0);
+  const minuteSeries = minuteLive ? minuteRaw : hourRaw;
+  const activityLabel = minuteLive ? "calls/min \xB7 last 60m" : "calls/hour \xB7 last 24h";
+  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
+  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
   const cursor = tick % 4 < 2 ? "\u258C" : " ";
+  const toolCounts = /* @__PURE__ */ new Map();
+  const permCounts = /* @__PURE__ */ new Map();
+  for (const e of buffer) {
+    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+    const perm = (e.permission || "?").toUpperCase();
+    permCounts.set(perm, (permCounts.get(perm) ?? 0) + 1);
+  }
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+  const maxTool = topTools[0]?.[1] ?? 1;
+  const perms = ["READ", "WRITE", "EXECUTE", "NETWORK"].map((p) => [p, permCounts.get(p) ?? 0]);
+  const maxPerm = Math.max(1, ...perms.map(([, c2]) => c2));
+  const dlpTop = (ins.dlpByPattern ?? []).slice(0, 2);
+  const denials = buffer.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denials[denials.length - 1];
+  const bursts = limit > 0 ? minuteSeries.filter((c2) => c2 > limit).length : 0;
+  const bigH = rows >= 34 ? 6 : 4;
+  const colH = rows >= 34 ? 6 : 5;
+  const streamRows = Math.max(4, rows - (2 + 1 + bigH + 1 + colH + 1 + 1));
+  const tail = buffer.slice(-streamRows);
+  const colW = Math.max(18, Math.floor((cols - 6) / 3));
   if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
     "\u2717 ",
     stats.error
   ] });
-  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "\u25CF " }),
-      /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accentBright, children: "LIVE" }),
+  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE::LIVE " }),
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  ",
+        " ",
         spin,
-        " scanning"
-      ] }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  up ",
-        fmtUp(Date.now() - startRef.current)
-      ] }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  ",
-        hhmmss(Date.now())
+        " up ",
+        fmtUp(Date.now() - startRef.current),
+        " \xB7 ",
+        hhmmss(Date.now()),
+        " \xB7 poll 2s"
       ] }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  poll 2s" })
+      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
+        "  \u26A0 ",
+        hhmmss(lastDeny.created_at),
+        " ",
+        lastDeny.tool_name,
+        " denied"
+      ] }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  esc menu \xB7 q quit" })
     ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  allow " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  dlp(buf) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: dlpHits.length ? theme.bad : theme.dim, children: dlpHits.length }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  bursts(60m) " }),
+      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  limit/min " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: limit || "off" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  policies " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" })
     ] }),
+    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `ACTIVITY ${activityLabel} \xB7 peak ${Math.max(0, ...minuteSeries)}${limit ? ` \xB7 limit ${limit} (red = over)` : ""}` }),
+    minuteSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: minuteSeries, height: bigH, width: cols - 2, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: bigH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? "loading activity\u2026" : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "act " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sparkline(points.map((p) => p.total), Math.min(64, cols - 30)) })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "dny " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: sparkline(points.map((p) => p.denied), Math.min(64, cols - 30)) })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ">> " }),
-      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-        "last deny ",
-        hhmmss(lastDeny.created_at),
-        " ",
-        lastDeny.tool_name,
-        " \xB7 ",
-        truncate2(lastDeny.reason ?? "policy", Math.max(20, cols - 50))
-      ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no denials in buffer" })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", flexGrow: 3, borderStyle: "single", borderColor: "gray", paddingX: 1, children: [
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, bold: true, children: "\u2500\u2500 tool stream \u2500\u2500" }),
-        tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
-        tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            "[",
-            hhmmss(e.created_at),
-            "] "
-          ] }),
-          /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-          /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool_name, 14).padEnd(15) }),
-          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
-          e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
-        ] }, e.id))
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "DENIALS 24h" }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
       ] }),
-      wide ? /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: 34, borderStyle: "single", borderColor: "gray", paddingX: 1, children: [
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, bold: true, children: "\u2500\u2500 raw \u2500\u2500" }),
-        tail.slice(-Math.floor(feedRows / 2)).flatMap((e) => {
-          const raw = e.arguments_summary ? JSON.stringify(e.arguments_summary) : `hash:${e.id.slice(0, 12)}`;
-          return [
-            /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", color: e.decision === "ALLOW" ? theme.dim : theme.bad, children: [
-              e.id.slice(0, 8),
-              " ",
-              e.tool_name.slice(0, 12)
-            ] }, e.id + ":h"),
-            /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "  " + raw.replace(/\s+/g, " ") }, e.id + ":b")
-          ];
-        })
-      ] }) : null
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "TOP TOOLS (buffer)" }),
+        topTools.length ? topTools.slice(0, colH - 1).map(([tool, count]) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(tool, 9), value: count, max: maxTool, width: Math.max(6, colW - 16), color: theme.accent }, tool)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no traffic yet" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "PERMISSIONS \xB7 DLP" }),
+        perms.map(([p, c2]) => /* @__PURE__ */ jsx2(HBar, { label: p, value: c2, max: maxPerm, width: Math.max(6, colW - 16), color: p === "EXECUTE" ? theme.warn : theme.accent }, p)),
+        dlpTop.map((d) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.bad, children: "DLP " + truncate2(d.pattern, colW - 10) + " \xD7" + d.count }, d.pattern))
+      ] })
     ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
+    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `TOOL STREAM \xB7 live tail \xB7 ${buffer.length} buffered` }),
+    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+        "[",
+        hhmmss(e.created_at),
+        "] "
+      ] }),
+      /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool_name, 14).padEnd(15) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
+      e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
+    ] }, e.id)),
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "root@solongate" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ":" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: "~/live" }),
@@ -7969,6 +8009,18 @@ var init_Audit = __esm({
 import { Box as Box8, Text as Text8, useApp, useInput as useInput5 } from "ink";
 import { useState as useState7 } from "react";
 import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+function LiveHint() {
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
+      "press ",
+      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
+      " to go live"
+    ] }) })
+  ] });
+}
 function Banner() {
   const wide = (process.stdout.columns ?? 80) >= 82;
   if (!wide) {
@@ -7994,17 +8046,23 @@ function App() {
       else if (input === "q") exit();
     } else {
       if (key.escape || key.tab) setFocus("nav");
+      else if (input === "q" && SECTIONS[section].label === "Live") exit();
     }
   });
+  const cols = process.stdout.columns ?? 100;
+  const rows = process.stdout.rows ?? 30;
   const current = SECTIONS[section];
+  if (current.label === "Live" && focus === "panel") {
+    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }) });
+  }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", paddingX: 1, paddingTop: 1, children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
     /* @__PURE__ */ jsx8(Banner, {}),
-    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minHeight: 16, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: true, focused: focus === "panel" }) })
+      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "move"], ["\u2190\u2192/space/s", "edit"], ["esc", "back to menu"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 var SECTIONS, BANNER_HEX;
@@ -8021,7 +8079,7 @@ var init_App = __esm({
     init_Stats();
     init_Audit();
     SECTIONS = [
-      { label: "Live", Panel: LivePanel },
+      { label: "Live", Panel: LiveHint },
       { label: "Policies", Panel: PoliciesPanel },
       { label: "Rate Limit", Panel: RateLimitPanel },
       { label: "DLP", Panel: DlpPanel },
@@ -8050,8 +8108,13 @@ async function launchTui() {
     process.stderr.write("Not logged in. Run `solongate login` first.\n");
     return;
   }
-  const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
-  await waitUntilExit();
+  process.stdout.write("\x1B[?1049h\x1B[H");
+  try {
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
+    await waitUntilExit();
+  } finally {
+    process.stdout.write("\x1B[?1049l");
+  }
 }
 var init_tui = __esm({
   "src/tui/index.tsx"() {

package/dist/tui/index.js

@@ -441,15 +441,50 @@ var fmtUp = (ms) => {
   const p = (n) => String(n).padStart(2, "0");
   return `${p(Math.floor(s / 3600))}:${p(Math.floor(s % 3600 / 60))}:${p(s % 60)}`;
 };
+function ColumnChart({ series, height, width, color, limit = 0 }) {
+  const tailVals = series.slice(-width);
+  const data = [...new Array(Math.max(0, width - tailVals.length)).fill(0), ...tailVals];
+  const max = Math.max(1, ...data, limit);
+  const lines = [];
+  for (let r = height; r >= 1; r--) {
+    const segs = [];
+    for (let i = 0; i < data.length; i++) {
+      const frac = data[i] / max;
+      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
+      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const last = segs[segs.length - 1];
+      if (last && last.color === c2) last.text += ch;
+      else segs.push({ text: ch, color: c2 });
+    }
+    lines.push(
+      /* @__PURE__ */ jsx2(Text2, { children: segs.map((s, i) => /* @__PURE__ */ jsx2(Text2, { color: s.color, children: s.text }, i)) }, r)
+    );
+  }
+  return /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", children: lines });
+}
+function HBar({ label, value, max, width, color }) {
+  const filled = max > 0 ? Math.round(value / max * width) : 0;
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width, filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width - filled)) + " " + value })
+  ] });
+}
+function SectionTitle({ children, width }) {
+  const label = `\u2500\u2500 ${children} `;
+  return /* @__PURE__ */ jsx2(Text2, { color: theme.dim, wrap: "truncate", children: label + "\u2500".repeat(Math.max(0, width - label.length)) });
+}
 function LivePanel({ active: active2 }) {
   const stats = useLoader(() => api.stats.get());
   const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 40 }));
+  const feed = useLoader(() => api.audit.list({ limit: 50 }));
+  const insights = useLoader(() => api.stats.securityInsights(7));
   usePoll(() => {
     stats.reload();
     ts.reload();
     feed.reload();
   }, 2e3, active2);
+  usePoll(insights.reload, 1e4, active2);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -464,108 +499,113 @@ function LivePanel({ active: active2 }) {
     setBuffer((prev) => {
       const seen = new Set(prev.map((e) => e.id));
       const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-300) : prev;
+      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
     });
   }, [feed.data]);
-  const s = stats.data;
-  const points = ts.data?.timeseries ?? [];
   const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 32;
-  const feedRows = Math.max(8, Math.min(20, rows - 18));
-  const wide = cols >= 112;
-  const tail = buffer.slice(-feedRows);
-  const denies = buffer.filter((e) => e.decision !== "ALLOW");
-  const dlpHits = buffer.filter((e) => e.dlp_matches?.length);
-  const lastDeny = denies[denies.length - 1];
+  const rows = process.stdout.rows ?? 30;
+  const s = stats.data;
+  const ins = insights.data ?? {};
+  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
+  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
+  const minuteLive = minuteRaw.some((c2) => c2 > 0);
+  const minuteSeries = minuteLive ? minuteRaw : hourRaw;
+  const activityLabel = minuteLive ? "calls/min \xB7 last 60m" : "calls/hour \xB7 last 24h";
+  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
+  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
   const cursor = tick % 4 < 2 ? "\u258C" : " ";
+  const toolCounts = /* @__PURE__ */ new Map();
+  const permCounts = /* @__PURE__ */ new Map();
+  for (const e of buffer) {
+    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+    const perm = (e.permission || "?").toUpperCase();
+    permCounts.set(perm, (permCounts.get(perm) ?? 0) + 1);
+  }
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+  const maxTool = topTools[0]?.[1] ?? 1;
+  const perms = ["READ", "WRITE", "EXECUTE", "NETWORK"].map((p) => [p, permCounts.get(p) ?? 0]);
+  const maxPerm = Math.max(1, ...perms.map(([, c2]) => c2));
+  const dlpTop = (ins.dlpByPattern ?? []).slice(0, 2);
+  const denials = buffer.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denials[denials.length - 1];
+  const bursts = limit > 0 ? minuteSeries.filter((c2) => c2 > limit).length : 0;
+  const bigH = rows >= 34 ? 6 : 4;
+  const colH = rows >= 34 ? 6 : 5;
+  const streamRows = Math.max(4, rows - (2 + 1 + bigH + 1 + colH + 1 + 1));
+  const tail = buffer.slice(-streamRows);
+  const colW = Math.max(18, Math.floor((cols - 6) / 3));
   if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
     "\u2717 ",
     stats.error
   ] });
-  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "\u25CF " }),
-      /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accentBright, children: "LIVE" }),
+  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE::LIVE " }),
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  ",
+        " ",
         spin,
-        " scanning"
-      ] }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  up ",
-        fmtUp(Date.now() - startRef.current)
-      ] }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        "  ",
-        hhmmss(Date.now())
+        " up ",
+        fmtUp(Date.now() - startRef.current),
+        " \xB7 ",
+        hhmmss(Date.now()),
+        " \xB7 poll 2s"
       ] }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  poll 2s" })
+      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
+        "  \u26A0 ",
+        hhmmss(lastDeny.created_at),
+        " ",
+        lastDeny.tool_name,
+        " denied"
+      ] }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  esc menu \xB7 q quit" })
     ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  allow " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  dlp(buf) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: dlpHits.length ? theme.bad : theme.dim, children: dlpHits.length }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  bursts(60m) " }),
+      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  limit/min " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: limit || "off" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  policies " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" })
     ] }),
+    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `ACTIVITY ${activityLabel} \xB7 peak ${Math.max(0, ...minuteSeries)}${limit ? ` \xB7 limit ${limit} (red = over)` : ""}` }),
+    minuteSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: minuteSeries, height: bigH, width: cols - 2, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: bigH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? "loading activity\u2026" : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "act " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sparkline(points.map((p) => p.total), Math.min(64, cols - 30)) })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "dny " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: sparkline(points.map((p) => p.denied), Math.min(64, cols - 30)) })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ">> " }),
-      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-        "last deny ",
-        hhmmss(lastDeny.created_at),
-        " ",
-        lastDeny.tool_name,
-        " \xB7 ",
-        truncate(lastDeny.reason ?? "policy", Math.max(20, cols - 50))
-      ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no denials in buffer" })
-    ] }),
-    /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", flexGrow: 3, borderStyle: "single", borderColor: "gray", paddingX: 1, children: [
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, bold: true, children: "\u2500\u2500 tool stream \u2500\u2500" }),
-        tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
-        tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            "[",
-            hhmmss(e.created_at),
-            "] "
-          ] }),
-          /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-          /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool_name, 14).padEnd(15) }),
-          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
-          e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
-        ] }, e.id))
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "DENIALS 24h" }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "TOP TOOLS (buffer)" }),
+        topTools.length ? topTools.slice(0, colH - 1).map(([tool, count]) => /* @__PURE__ */ jsx2(HBar, { label: truncate(tool, 9), value: count, max: maxTool, width: Math.max(6, colW - 16), color: theme.accent }, tool)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no traffic yet" })
       ] }),
-      wide ? /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: 34, borderStyle: "single", borderColor: "gray", paddingX: 1, children: [
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, bold: true, children: "\u2500\u2500 raw \u2500\u2500" }),
-        tail.slice(-Math.floor(feedRows / 2)).flatMap((e) => {
-          const raw = e.arguments_summary ? JSON.stringify(e.arguments_summary) : `hash:${e.id.slice(0, 12)}`;
-          return [
-            /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", color: e.decision === "ALLOW" ? theme.dim : theme.bad, children: [
-              e.id.slice(0, 8),
-              " ",
-              e.tool_name.slice(0, 12)
-            ] }, e.id + ":h"),
-            /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "  " + raw.replace(/\s+/g, " ") }, e.id + ":b")
-          ];
-        })
-      ] }) : null
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
+        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "PERMISSIONS \xB7 DLP" }),
+        perms.map(([p, c2]) => /* @__PURE__ */ jsx2(HBar, { label: p, value: c2, max: maxPerm, width: Math.max(6, colW - 16), color: p === "EXECUTE" ? theme.warn : theme.accent }, p)),
+        dlpTop.map((d) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.bad, children: "DLP " + truncate(d.pattern, colW - 10) + " \xD7" + d.count }, d.pattern))
+      ] })
     ] }),
-    /* @__PURE__ */ jsxs2(Box2, { children: [
+    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `TOOL STREAM \xB7 live tail \xB7 ${buffer.length} buffered` }),
+    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+        "[",
+        hhmmss(e.created_at),
+        "] "
+      ] }),
+      /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool_name, 14).padEnd(15) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
+      e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
+    ] }, e.id)),
+    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "root@solongate" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ":" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: "~/live" }),
@@ -1318,8 +1358,20 @@ function Detail({ label, value, color }) {
 
 // src/tui/App.tsx
 import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+function LiveHint() {
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
+      "press ",
+      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
+      " to go live"
+    ] }) })
+  ] });
+}
 var SECTIONS = [
-  { label: "Live", Panel: LivePanel },
+  { label: "Live", Panel: LiveHint },
   { label: "Policies", Panel: PoliciesPanel },
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
@@ -1352,17 +1404,23 @@ function App() {
       else if (input === "q") exit();
     } else {
       if (key.escape || key.tab) setFocus("nav");
+      else if (input === "q" && SECTIONS[section].label === "Live") exit();
     }
   });
+  const cols = process.stdout.columns ?? 100;
+  const rows = process.stdout.rows ?? 30;
   const current = SECTIONS[section];
+  if (current.label === "Live" && focus === "panel") {
+    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }) });
+  }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", paddingX: 1, paddingTop: 1, children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
     /* @__PURE__ */ jsx8(Banner, {}),
-    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minHeight: 16, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: true, focused: focus === "panel" }) })
+      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "move"], ["\u2190\u2192/space/s", "edit"], ["esc", "back to menu"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 
@@ -1379,8 +1437,13 @@ async function launchTui() {
     process.stderr.write("Not logged in. Run `solongate login` first.\n");
     return;
   }
-  const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
-  await waitUntilExit();
+  process.stdout.write("\x1B[?1049h\x1B[H");
+  try {
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
+    await waitUntilExit();
+  } finally {
+    process.stdout.write("\x1B[?1049l");
+  }
 }
 export {
   launchTui

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {