@solongate/proxy 0.64.0 → 0.66.0

package/dist/index.js

@@ -7020,19 +7020,27 @@ var init_hooks = __esm({
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
-import { useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
+import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
-function ColumnChart({ series, height, width: width2, color, limit = 0 }) {
-  const tailVals = series.slice(-width2);
-  const data = [...new Array(Math.max(0, width2 - tailVals.length)).fill(0), ...tailVals];
-  const max = Math.max(1, ...data, limit);
+function ColumnChart({ series, hot, height, width: width2, color }) {
+  const pad = Math.max(0, width2 - series.length);
+  const data = [...new Array(pad).fill(0), ...series.slice(-width2)];
+  const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width2)] : void 0;
+  const max = Math.max(1, ...data);
   const lines = [];
   for (let r = height; r >= 1; r--) {
     const segs = [];
     for (let i = 0; i < data.length; i++) {
-      const frac = data[i] / max;
-      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
-      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const v = data[i];
+      const frac = v / max;
+      let ch;
+      let c2;
+      if (frac >= r / height) ch = "\u2588";
+      else if (frac >= (r - 0.5) / height) ch = "\u2584";
+      else if (r === 1) ch = "\u2581";
+      else ch = " ";
+      if (r === 1 && v === 0) c2 = "#233457";
+      else c2 = hotPad?.[i] ? theme.bad : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -7046,26 +7054,82 @@ function ColumnChart({ series, height, width: width2, color, limit = 0 }) {
 function HBar({ label, value, max, width: width2, color }) {
   const filled = max > 0 ? Math.round(value / max * width2) : 0;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(10) }),
     /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width2, filled)) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width2 - filled)) + " " + value })
+    /* @__PURE__ */ jsx2(Text2, { color: "#233457", children: "\u2591".repeat(Math.max(0, width2 - filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
-function SectionTitle({ children, width: width2 }) {
-  const label = `\u2500\u2500 ${children} `;
-  return /* @__PURE__ */ jsx2(Text2, { color: theme.dim, wrap: "truncate", children: label + "\u2500".repeat(Math.max(0, width2 - label.length)) });
+function PaneTitle({ label, extra, width: width2 }) {
+  const tail = extra ? ` ${extra} ` : " ";
+  const used = 2 + 1 + label.length + tail.length;
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
+    /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
+      "\u258E",
+      label
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width2 - used)) })
+  ] });
 }
 function LivePanel({ active: active2 }) {
-  const stats = useLoader(() => api.stats.get());
-  const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 50 }));
+  const [s, setS] = useState2(null);
+  const [tsData, setTsData] = useState2(null);
+  const [lat, setLat] = useState2([]);
+  const [buffer, setBuffer] = useState2([]);
+  const [log6, setLog] = useState2([]);
+  const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const pushLog = useCallback2((msg, level = "ok") => {
+    setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
+  }, []);
+  const doPoll = useCallback2(async () => {
+    const t0 = Date.now();
+    try {
+      const [sd, fd, td] = await Promise.all([api.stats.get(), api.audit.list({ limit: 50 }), api.stats.timeseries({ period: "24h" })]);
+      const ms = Date.now() - t0;
+      setS(sd);
+      setTsData(td);
+      setLat((l) => [...l.slice(-47), ms]);
+      const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      for (const e of fresh) seenRef.current.add(e.id);
+      const firstLoad = seenRef.current.size === fresh.length && fresh.length > 1;
+      if (fresh.length) {
+        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+      }
+      const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
+      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
+      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
+      else
+        pushLog(
+          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
+          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
+        );
+    } catch (e) {
+      pushLog(`api error \xB7 ${truncate2(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+    }
+  }, [pushLog]);
+  useEffect2(() => {
+    if (!active2) return;
+    void doPoll();
+    const t = setInterval(() => void doPoll(), 2e3);
+    return () => clearInterval(t);
+  }, [active2, doPoll]);
+  const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
-  usePoll(() => {
-    stats.reload();
-    ts.reload();
-    feed.reload();
-  }, 2e3, active2);
+  usePoll(sessions.reload, 5e3, active2);
   usePoll(insights.reload, 1e4, active2);
+  useEffect2(() => {
+    const c2 = sessions.data?.counts;
+    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
+  }, [sessions.data, pushLog]);
+  useEffect2(() => {
+    const ib = insights.data;
+    if (ib?.layers) {
+      const rl2 = ib.layers.rateLimit;
+      const dl2 = ib.layers.dlp;
+      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
+    }
+  }, [insights.data, pushLog]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -7073,107 +7137,128 @@ function LivePanel({ active: active2 }) {
     return () => clearInterval(t);
   }, [active2]);
   const startRef = useRef2(Date.now());
-  const [buffer, setBuffer] = useState2([]);
-  useEffect2(() => {
-    const incoming = feed.data?.entries;
-    if (!incoming?.length) return;
-    setBuffer((prev) => {
-      const seen = new Set(prev.map((e) => e.id));
-      const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
-    });
-  }, [feed.data]);
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
-  const s = stats.data;
   const ins = insights.data ?? {};
-  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
-  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
-  const minuteLive = minuteRaw.some((c2) => c2 > 0);
-  const minuteSeries = minuteLive ? minuteRaw : hourRaw;
-  const activityLabel = minuteLive ? "calls/min \xB7 last 60m" : "calls/hour \xB7 last 24h";
-  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
-  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
-  const cursor = tick % 4 < 2 ? "\u258C" : " ";
+  const points = tsData?.timeseries ?? [];
+  const traffic = points.map((p) => p.total);
+  const trafficHot = points.map((p) => p.denied > 0);
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
   const toolCounts = /* @__PURE__ */ new Map();
-  const permCounts = /* @__PURE__ */ new Map();
-  for (const e of buffer) {
-    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
-    const perm = (e.permission || "?").toUpperCase();
-    permCounts.set(perm, (permCounts.get(perm) ?? 0) + 1);
-  }
-  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
-  const maxTool = topTools[0]?.[1] ?? 1;
-  const perms = ["READ", "WRITE", "EXECUTE", "NETWORK"].map((p) => [p, permCounts.get(p) ?? 0]);
-  const maxPerm = Math.max(1, ...perms.map(([, c2]) => c2));
-  const dlpTop = (ins.dlpByPattern ?? []).slice(0, 2);
+  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
   const denials = buffer.filter((e) => e.decision !== "ALLOW");
   const lastDeny = denials[denials.length - 1];
-  const bursts = limit > 0 ? minuteSeries.filter((c2) => c2 > limit).length : 0;
-  const bigH = rows >= 34 ? 6 : 4;
-  const colH = rows >= 34 ? 6 : 5;
-  const streamRows = Math.max(4, rows - (2 + 1 + bigH + 1 + colH + 1 + 1));
+  const latNow = lat[lat.length - 1] ?? 0;
+  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
+  const sessCounts = sessions.data?.counts;
+  const chartH = rows >= 36 ? 6 : 4;
+  const colH = rows >= 32 ? 6 : 5;
+  const streamRows = Math.max(4, rows - 6 - chartH - colH);
   const tail = buffer.slice(-streamRows);
-  const colW = Math.max(18, Math.floor((cols - 6) / 3));
-  if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-    "\u2717 ",
-    stats.error
-  ] });
+  const innerW = cols - 2;
+  const leftW = Math.floor(innerW * 0.55);
+  const rightW = innerW - leftW - 2;
+  const colW = Math.max(20, Math.floor((innerW - 4) / 3));
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE::LIVE " }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        " ",
-        spin,
-        " up ",
-        fmtUp(Date.now() - startRef.current),
-        " \xB7 ",
-        hhmmss(Date.now()),
-        " \xB7 poll 2s"
-      ] }),
-      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-        "  \u26A0 ",
-        hhmmss(lastDeny.created_at),
-        " ",
-        lastDeny.tool_name,
-        " denied"
-      ] }) : null,
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  esc menu \xB7 q quit" })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
+      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "calls " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  allow " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  deny " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  bursts(60m) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  limit/min " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: limit || "off" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  policies " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" })
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
+      /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+      /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+    ] }),
+    /* @__PURE__ */ jsxs2(Box2, { children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `24h \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = had denials`, width: leftW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > 800), height: chartH, width: rightW, color: "#82AAF0" })
+      ] })
     ] }),
-    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `ACTIVITY ${activityLabel} \xB7 peak ${Math.max(0, ...minuteSeries)}${limit ? ` \xB7 limit ${limit} (red = over)` : ""}` }),
-    minuteSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: minuteSeries, height: bigH, width: cols - 2, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: bigH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? "loading activity\u2026" : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "DENIALS 24h" }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: rl?.perMinute ? `${minuteNow}/${rl.perMinute} per min` : "no limit set" })
+        ] }),
+        rl?.perMinute ? /* @__PURE__ */ jsx2(HBar, { label: "load", value: minuteNow, max: rl.perMinute, width: Math.max(6, colW - 16), color: minuteNow > rl.perMinute ? theme.bad : theme.accent }) : null,
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "DLP".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            (dl?.patterns ?? []).length,
+            " patterns armed"
+          ] })
+        ] }),
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "TOP TOOLS (buffer)" }),
-        topTools.length ? topTools.slice(0, colH - 1).map(([tool, count]) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(tool, 9), value: count, max: maxTool, width: Math.max(6, colW - 16), color: theme.accent }, tool)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no traffic yet" })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
+        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        sess.slice(0, colH - 1).map((a) => {
+          const dot = sessionDot(a.status);
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
+              dot.ch,
+              " "
+            ] }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(a.agent_name ?? a.session_id, 12).padEnd(13) }),
+            /* @__PURE__ */ jsxs2(Text2, { children: [
+              String(a.total_calls).padStart(4),
+              "c "
+            ] }),
+            /* @__PURE__ */ jsxs2(Text2, { color: a.denied_calls ? theme.bad : theme.dim, children: [
+              String(a.denied_calls).padStart(3),
+              "d "
+            ] }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(a.last_seen_at) })
+          ] }, a.session_id);
+        })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "PERMISSIONS \xB7 DLP" }),
-        perms.map(([p, c2]) => /* @__PURE__ */ jsx2(HBar, { label: p, value: c2, max: maxPerm, width: Math.max(6, colW - 16), color: p === "EXECUTE" ? theme.warn : theme.accent }, p)),
-        dlpTop.map((d) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.bad, children: "DLP " + truncate2(d.pattern, colW - 10) + " \xD7" + d.count }, d.pattern))
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "streaming", width: colW }),
+        log6.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            hhmmss(l.ts),
+            " "
+          ] }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : l.level === "warn" ? theme.warn : "#4f8f6b", children: "\u25B8 " }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : theme.dim, children: l.msg })
+        ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `TOOL STREAM \xB7 live tail \xB7 ${buffer.length} buffered` }),
-    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      spin,
+      " awaiting traffic\u2026"
+    ] }) : null,
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
@@ -7187,15 +7272,13 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "root@solongate" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ":" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: "~/live" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "$ " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: cursor })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });
 }
-var SPIN, hhmmss, fmtUp;
+var SPIN, BG, hhmmss, fmtUp;
 var init_Live = __esm({
   "src/tui/panels/Live.tsx"() {
     "use strict";
@@ -7203,6 +7286,7 @@ var init_Live = __esm({
     init_hooks();
     init_theme();
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    BG = "#12234f";
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);

package/dist/tui/index.js

@@ -126,7 +126,7 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
-import { useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
+import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
 import { readFileSync, existsSync } from "fs";
@@ -432,6 +432,7 @@ function usePoll(reload, intervalMs, enabled = true) {
 // src/tui/panels/Live.tsx
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+var BG = "#12234f";
 var hhmmss = (ts) => {
   const d = new Date(ts);
   return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -441,17 +442,25 @@ var fmtUp = (ms) => {
   const p = (n) => String(n).padStart(2, "0");
   return `${p(Math.floor(s / 3600))}:${p(Math.floor(s % 3600 / 60))}:${p(s % 60)}`;
 };
-function ColumnChart({ series, height, width, color, limit = 0 }) {
-  const tailVals = series.slice(-width);
-  const data = [...new Array(Math.max(0, width - tailVals.length)).fill(0), ...tailVals];
-  const max = Math.max(1, ...data, limit);
+function ColumnChart({ series, hot, height, width, color }) {
+  const pad = Math.max(0, width - series.length);
+  const data = [...new Array(pad).fill(0), ...series.slice(-width)];
+  const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width)] : void 0;
+  const max = Math.max(1, ...data);
   const lines = [];
   for (let r = height; r >= 1; r--) {
     const segs = [];
     for (let i = 0; i < data.length; i++) {
-      const frac = data[i] / max;
-      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
-      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const v = data[i];
+      const frac = v / max;
+      let ch;
+      let c2;
+      if (frac >= r / height) ch = "\u2588";
+      else if (frac >= (r - 0.5) / height) ch = "\u2584";
+      else if (r === 1) ch = "\u2581";
+      else ch = " ";
+      if (r === 1 && v === 0) c2 = "#233457";
+      else c2 = hotPad?.[i] ? theme.bad : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -465,26 +474,82 @@ function ColumnChart({ series, height, width, color, limit = 0 }) {
 function HBar({ label, value, max, width, color }) {
   const filled = max > 0 ? Math.round(value / max * width) : 0;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(10) }),
     /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width, filled)) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width - filled)) + " " + value })
+    /* @__PURE__ */ jsx2(Text2, { color: "#233457", children: "\u2591".repeat(Math.max(0, width - filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
-function SectionTitle({ children, width }) {
-  const label = `\u2500\u2500 ${children} `;
-  return /* @__PURE__ */ jsx2(Text2, { color: theme.dim, wrap: "truncate", children: label + "\u2500".repeat(Math.max(0, width - label.length)) });
+function PaneTitle({ label, extra, width }) {
+  const tail = extra ? ` ${extra} ` : " ";
+  const used = 2 + 1 + label.length + tail.length;
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
+    /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
+      "\u258E",
+      label
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
+  ] });
 }
 function LivePanel({ active: active2 }) {
-  const stats = useLoader(() => api.stats.get());
-  const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 50 }));
+  const [s, setS] = useState2(null);
+  const [tsData, setTsData] = useState2(null);
+  const [lat, setLat] = useState2([]);
+  const [buffer, setBuffer] = useState2([]);
+  const [log, setLog] = useState2([]);
+  const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const pushLog = useCallback2((msg, level = "ok") => {
+    setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
+  }, []);
+  const doPoll = useCallback2(async () => {
+    const t0 = Date.now();
+    try {
+      const [sd, fd, td] = await Promise.all([api.stats.get(), api.audit.list({ limit: 50 }), api.stats.timeseries({ period: "24h" })]);
+      const ms = Date.now() - t0;
+      setS(sd);
+      setTsData(td);
+      setLat((l) => [...l.slice(-47), ms]);
+      const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      for (const e of fresh) seenRef.current.add(e.id);
+      const firstLoad = seenRef.current.size === fresh.length && fresh.length > 1;
+      if (fresh.length) {
+        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+      }
+      const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
+      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
+      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
+      else
+        pushLog(
+          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
+          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
+        );
+    } catch (e) {
+      pushLog(`api error \xB7 ${truncate(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+    }
+  }, [pushLog]);
+  useEffect2(() => {
+    if (!active2) return;
+    void doPoll();
+    const t = setInterval(() => void doPoll(), 2e3);
+    return () => clearInterval(t);
+  }, [active2, doPoll]);
+  const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
-  usePoll(() => {
-    stats.reload();
-    ts.reload();
-    feed.reload();
-  }, 2e3, active2);
+  usePoll(sessions.reload, 5e3, active2);
   usePoll(insights.reload, 1e4, active2);
+  useEffect2(() => {
+    const c2 = sessions.data?.counts;
+    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
+  }, [sessions.data, pushLog]);
+  useEffect2(() => {
+    const ib = insights.data;
+    if (ib?.layers) {
+      const rl2 = ib.layers.rateLimit;
+      const dl2 = ib.layers.dlp;
+      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
+    }
+  }, [insights.data, pushLog]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -492,107 +557,128 @@ function LivePanel({ active: active2 }) {
     return () => clearInterval(t);
   }, [active2]);
   const startRef = useRef2(Date.now());
-  const [buffer, setBuffer] = useState2([]);
-  useEffect2(() => {
-    const incoming = feed.data?.entries;
-    if (!incoming?.length) return;
-    setBuffer((prev) => {
-      const seen = new Set(prev.map((e) => e.id));
-      const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
-    });
-  }, [feed.data]);
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
-  const s = stats.data;
   const ins = insights.data ?? {};
-  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
-  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
-  const minuteLive = minuteRaw.some((c2) => c2 > 0);
-  const minuteSeries = minuteLive ? minuteRaw : hourRaw;
-  const activityLabel = minuteLive ? "calls/min \xB7 last 60m" : "calls/hour \xB7 last 24h";
-  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
-  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
-  const cursor = tick % 4 < 2 ? "\u258C" : " ";
+  const points = tsData?.timeseries ?? [];
+  const traffic = points.map((p) => p.total);
+  const trafficHot = points.map((p) => p.denied > 0);
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
   const toolCounts = /* @__PURE__ */ new Map();
-  const permCounts = /* @__PURE__ */ new Map();
-  for (const e of buffer) {
-    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
-    const perm = (e.permission || "?").toUpperCase();
-    permCounts.set(perm, (permCounts.get(perm) ?? 0) + 1);
-  }
-  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
-  const maxTool = topTools[0]?.[1] ?? 1;
-  const perms = ["READ", "WRITE", "EXECUTE", "NETWORK"].map((p) => [p, permCounts.get(p) ?? 0]);
-  const maxPerm = Math.max(1, ...perms.map(([, c2]) => c2));
-  const dlpTop = (ins.dlpByPattern ?? []).slice(0, 2);
+  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
   const denials = buffer.filter((e) => e.decision !== "ALLOW");
   const lastDeny = denials[denials.length - 1];
-  const bursts = limit > 0 ? minuteSeries.filter((c2) => c2 > limit).length : 0;
-  const bigH = rows >= 34 ? 6 : 4;
-  const colH = rows >= 34 ? 6 : 5;
-  const streamRows = Math.max(4, rows - (2 + 1 + bigH + 1 + colH + 1 + 1));
+  const latNow = lat[lat.length - 1] ?? 0;
+  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
+  const sessCounts = sessions.data?.counts;
+  const chartH = rows >= 36 ? 6 : 4;
+  const colH = rows >= 32 ? 6 : 5;
+  const streamRows = Math.max(4, rows - 6 - chartH - colH);
   const tail = buffer.slice(-streamRows);
-  const colW = Math.max(18, Math.floor((cols - 6) / 3));
-  if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-    "\u2717 ",
-    stats.error
-  ] });
+  const innerW = cols - 2;
+  const leftW = Math.floor(innerW * 0.55);
+  const rightW = innerW - leftW - 2;
+  const colW = Math.max(20, Math.floor((innerW - 4) / 3));
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE::LIVE " }),
-      /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-        " ",
-        spin,
-        " up ",
-        fmtUp(Date.now() - startRef.current),
-        " \xB7 ",
-        hhmmss(Date.now()),
-        " \xB7 poll 2s"
-      ] }),
-      lastDeny ? /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-        "  \u26A0 ",
-        hhmmss(lastDeny.created_at),
-        " ",
-        lastDeny.tool_name,
-        " denied"
-      ] }) : null,
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  esc menu \xB7 q quit" })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
+      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "calls " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  allow " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  deny " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  bursts(60m) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  limit/min " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: limit || "off" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  policies " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" })
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
+      /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+      /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+    ] }),
+    /* @__PURE__ */ jsxs2(Box2, { children: [
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `24h \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = had denials`, width: leftW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > 800), height: chartH, width: rightW, color: "#82AAF0" })
+      ] })
     ] }),
-    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `ACTIVITY ${activityLabel} \xB7 peak ${Math.max(0, ...minuteSeries)}${limit ? ` \xB7 limit ${limit} (red = over)` : ""}` }),
-    minuteSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: minuteSeries, height: bigH, width: cols - 2, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: bigH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? "loading activity\u2026" : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "DENIALS 24h" }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: rl?.perMinute ? `${minuteNow}/${rl.perMinute} per min` : "no limit set" })
+        ] }),
+        rl?.perMinute ? /* @__PURE__ */ jsx2(HBar, { label: "load", value: minuteNow, max: rl.perMinute, width: Math.max(6, colW - 16), color: minuteNow > rl.perMinute ? theme.bad : theme.accent }) : null,
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "DLP".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            (dl?.patterns ?? []).length,
+            " patterns armed"
+          ] })
+        ] }),
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "TOP TOOLS (buffer)" }),
-        topTools.length ? topTools.slice(0, colH - 1).map(([tool, count]) => /* @__PURE__ */ jsx2(HBar, { label: truncate(tool, 9), value: count, max: maxTool, width: Math.max(6, colW - 16), color: theme.accent }, tool)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no traffic yet" })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
+        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        sess.slice(0, colH - 1).map((a) => {
+          const dot = sessionDot(a.status);
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
+              dot.ch,
+              " "
+            ] }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(a.agent_name ?? a.session_id, 12).padEnd(13) }),
+            /* @__PURE__ */ jsxs2(Text2, { children: [
+              String(a.total_calls).padStart(4),
+              "c "
+            ] }),
+            /* @__PURE__ */ jsxs2(Text2, { color: a.denied_calls ? theme.bad : theme.dim, children: [
+              String(a.denied_calls).padStart(3),
+              "d "
+            ] }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(a.last_seen_at) })
+          ] }, a.session_id);
+        })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
-        /* @__PURE__ */ jsx2(SectionTitle, { width: colW, children: "PERMISSIONS \xB7 DLP" }),
-        perms.map(([p, c2]) => /* @__PURE__ */ jsx2(HBar, { label: p, value: c2, max: maxPerm, width: Math.max(6, colW - 16), color: p === "EXECUTE" ? theme.warn : theme.accent }, p)),
-        dlpTop.map((d) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.bad, children: "DLP " + truncate(d.pattern, colW - 10) + " \xD7" + d.count }, d.pattern))
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "streaming", width: colW }),
+        log.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            hhmmss(l.ts),
+            " "
+          ] }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : l.level === "warn" ? theme.warn : "#4f8f6b", children: "\u25B8 " }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : theme.dim, children: l.msg })
+        ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(SectionTitle, { width: cols - 2, children: `TOOL STREAM \xB7 live tail \xB7 ${buffer.length} buffered` }),
-    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      spin,
+      " awaiting traffic\u2026"
+    ] }) : null,
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
@@ -606,11 +692,9 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "root@solongate" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ":" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: "~/live" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "$ " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: cursor })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.64.0",
+  "version": "0.66.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {