@solongate/proxy 0.65.0 → 0.66.1

package/dist/index.js

@@ -7020,19 +7020,27 @@ var init_hooks = __esm({
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
-import { useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
+import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
-function ColumnChart({ series, height, width: width2, color, limit = 0 }) {
-  const tailVals = series.slice(-width2);
-  const data = [...new Array(Math.max(0, width2 - tailVals.length)).fill(0), ...tailVals];
-  const max = Math.max(1, ...data, limit);
+function ColumnChart({ series, hot, height, width: width2, color }) {
+  const pad = Math.max(0, width2 - series.length);
+  const data = [...new Array(pad).fill(0), ...series.slice(-width2)];
+  const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width2)] : void 0;
+  const max = Math.max(1, ...data);
   const lines = [];
   for (let r = height; r >= 1; r--) {
     const segs = [];
     for (let i = 0; i < data.length; i++) {
-      const frac = data[i] / max;
-      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
-      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const v = data[i];
+      const frac = v / max;
+      let ch;
+      let c2;
+      if (frac >= r / height) ch = "\u2588";
+      else if (frac >= (r - 0.5) / height) ch = "\u2584";
+      else if (r === 1) ch = "\u2581";
+      else ch = " ";
+      if (r === 1 && v === 0) c2 = "#233457";
+      else c2 = hotPad?.[i] ? theme.bad : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -7046,17 +7054,17 @@ function ColumnChart({ series, height, width: width2, color, limit = 0 }) {
 function HBar({ label, value, max, width: width2, color }) {
   const filled = max > 0 ? Math.round(value / max * width2) : 0;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(10) }),
     /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width2, filled)) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width2 - filled)) + " " + value })
+    /* @__PURE__ */ jsx2(Text2, { color: "#233457", children: "\u2591".repeat(Math.max(0, width2 - filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
 function PaneTitle({ label, extra, width: width2 }) {
-  const head = `\u2500 `;
   const tail = extra ? ` ${extra} ` : " ";
-  const used = head.length + 1 + label.length + tail.length;
+  const used = 2 + 1 + label.length + tail.length;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: head }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
     /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
       "\u258E",
       label
@@ -7065,18 +7073,104 @@ function PaneTitle({ label, extra, width: width2 }) {
   ] });
 }
 function LivePanel({ active: active2 }) {
-  const stats = useLoader(() => api.stats.get());
-  const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 50 }));
-  const insights = useLoader(() => api.stats.securityInsights(7));
+  const [s, setS] = useState2(null);
+  const [tsData, setTsData] = useState2(null);
+  const [lat, setLat] = useState2([]);
+  const [buffer, setBuffer] = useState2([]);
+  const [log6, setLog] = useState2([]);
+  const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const pausedUntil = useRef2(0);
+  const pushLog = useCallback2((msg, level = "ok") => {
+    setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
+  }, []);
+  const onApiError = useCallback2(
+    (e) => {
+      const is429 = e instanceof ApiError && e.status === 429;
+      if (is429 && Date.now() >= pausedUntil.current) {
+        pausedUntil.current = Date.now() + 3e4;
+        pushLog("rate limited by api \xB7 backing off 30s", "warn");
+      } else if (!is429) {
+        pushLog(`api error \xB7 ${truncate2(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      }
+    },
+    [pushLog]
+  );
+  const paused = () => Date.now() < pausedUntil.current;
+  const pollFeed = useCallback2(async () => {
+    if (paused()) return;
+    const t0 = Date.now();
+    try {
+      const fd = await api.audit.list({ limit: 50 });
+      const ms = Date.now() - t0;
+      setLat((l) => [...l, ms].slice(-240));
+      const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      const firstLoad = seenRef.current.size === 0 && fresh.length > 1;
+      for (const e of fresh) seenRef.current.add(e.id);
+      if (fresh.length) {
+        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+      }
+      const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
+      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
+      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
+      else
+        pushLog(
+          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
+          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
+        );
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [pushLog, onApiError]);
+  const pollMedium = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setS(await api.stats.get());
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  const pollSlow = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setTsData(await api.stats.timeseries({ period: "24h" }));
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  useEffect2(() => {
+    if (!active2) return;
+    void pollFeed();
+    void pollMedium();
+    void pollSlow();
+    const t1 = setInterval(() => void pollFeed(), 4e3);
+    const t2 = setInterval(() => void pollMedium(), 1e4);
+    const t3 = setInterval(() => void pollSlow(), 3e4);
+    return () => {
+      clearInterval(t1);
+      clearInterval(t2);
+      clearInterval(t3);
+    };
+  }, [active2, pollFeed, pollMedium, pollSlow]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
+  const insights = useLoader(() => api.stats.securityInsights(7));
   usePoll(() => {
-    stats.reload();
-    ts.reload();
-    feed.reload();
-  }, 2e3, active2);
-  usePoll(sessions.reload, 5e3, active2);
-  usePoll(insights.reload, 1e4, active2);
+    if (!paused()) sessions.reload();
+  }, 1e4, active2);
+  usePoll(() => {
+    if (!paused()) insights.reload();
+  }, 3e4, active2);
+  useEffect2(() => {
+    const c2 = sessions.data?.counts;
+    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
+  }, [sessions.data, pushLog]);
+  useEffect2(() => {
+    const ib = insights.data;
+    if (ib?.layers) {
+      const rl2 = ib.layers.rateLimit;
+      const dl2 = ib.layers.dlp;
+      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
+    }
+  }, [insights.data, pushLog]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -7084,61 +7178,43 @@ function LivePanel({ active: active2 }) {
     return () => clearInterval(t);
   }, [active2]);
   const startRef = useRef2(Date.now());
-  const [buffer, setBuffer] = useState2([]);
-  useEffect2(() => {
-    const incoming = feed.data?.entries;
-    if (!incoming?.length) return;
-    setBuffer((prev) => {
-      const seen = new Set(prev.map((e) => e.id));
-      const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
-    });
-  }, [feed.data]);
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
-  const s = stats.data;
   const ins = insights.data ?? {};
-  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
-  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
-  const minuteLive = minuteRaw.some((c2) => c2 > 0);
-  const rateSeries = minuteLive ? minuteRaw : hourRaw;
-  const rateLabel = minuteLive ? "calls/min \xB7 60m" : "calls/hour \xB7 24h";
-  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
-  const rlMode = ins.layers?.rateLimit?.mode ?? "?";
-  const dlpMode = ins.layers?.dlp?.mode ?? "?";
-  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
+  const points = tsData?.timeseries ?? [];
+  const traffic = points.map((p) => p.total);
+  const trafficHot = points.map((p) => p.denied > 0);
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
   const toolCounts = /* @__PURE__ */ new Map();
-  let dlpBufHits = 0;
-  for (const e of buffer) {
-    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
-    if (e.dlp_matches?.length) dlpBufHits++;
-  }
+  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 3);
-  const maxDlp = dlpBars[0]?.count ?? 1;
-  const dlpRecent = (ins.dlpHits ?? []).slice(0, 2);
   const denials = buffer.filter((e) => e.decision !== "ALLOW");
   const lastDeny = denials[denials.length - 1];
-  const bursts = limit > 0 ? rateSeries.filter((c2) => c2 > limit).length : 0;
+  const latNow = lat[lat.length - 1] ?? 0;
+  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const latHotAt = Math.max(1500, latAvg * 1.8);
+  const backingOff = Date.now() < pausedUntil.current;
   const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
   const sessCounts = sessions.data?.counts;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 6 : 5;
   const streamRows = Math.max(4, rows - 6 - chartH - colH);
   const tail = buffer.slice(-streamRows);
-  const colW = Math.max(20, Math.floor((cols - 6) / 3));
   const innerW = cols - 2;
-  if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-    "\u2717 ",
-    stats.error
-  ] });
+  const leftW = Math.floor(innerW * 0.55);
+  const rightW = innerW - leftW - 2;
+  const colW = Math.max(20, Math.floor((innerW - 4) / 3));
   const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} ` }),
-      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 no recent denials " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
+      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " \u23F8 RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
@@ -7147,40 +7223,48 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp(buf) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: dlpBufHits ? theme.bad : theme.dim, children: dlpBufHits }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 bursts " }),
-      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
+      /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+      /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC` : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "RATE LIMIT", extra: `${rateLabel} \xB7 peak ${Math.max(0, ...rateSeries)} \xB7 limit ${limit || "off"} \xB7 mode ${rlMode}${limit ? " \xB7 red = over" : ""}`, width: innerW }),
-    rateSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: rateSeries, height: chartH, width: innerW, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: chartH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? `${spin} loading activity\u2026` : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "DENIALS", extra: "24h", width: colW }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `24h \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = had denials`, width: leftW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
       ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms \xB7 red >${Math.round(latHotAt)}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > latHotAt), height: chartH, width: rightW, color: "#82AAF0" })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs2(Box2, { children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "DLP", extra: `7d \xB7 mode ${dlpMode}`, width: colW }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 9), value: d.count, max: maxDlp, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no dlp hits" }),
-        dlpRecent.map((h, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx2(Text2, { color: h.blocked ? theme.accent : theme.bad, children: h.blocked ? "\u2298" : "\u26A0" }),
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: rl?.perMinute ? `${minuteNow}/${rl.perMinute} per min` : "no limit set" })
+        ] }),
+        rl?.perMinute ? /* @__PURE__ */ jsx2(HBar, { label: "load", value: minuteNow, max: rl.perMinute, width: Math.max(6, colW - 16), color: minuteNow > rl.perMinute ? theme.bad : theme.accent }) : null,
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "DLP".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
           /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            " ",
-            truncate2(h.pattern, colW - 14),
-            " ",
-            ago(h.at),
-            " ago"
+            (dl?.patterns ?? []).length,
+            " patterns armed"
           ] })
-        ] }, i))
+        ] }),
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
       ] }),
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} active` : "", width: colW }),
-        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no sessions" }) : null,
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
+        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
         sess.slice(0, colH - 1).map((a) => {
           const dot = sessionDot(a.status);
           return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
@@ -7200,10 +7284,24 @@ function LivePanel({ active: active2 }) {
             /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(a.last_seen_at) })
           ] }, a.session_id);
         })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "streaming", width: colW }),
+        log6.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            hhmmss(l.ts),
+            " "
+          ] }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : l.level === "warn" ? theme.warn : "#4f8f6b", children: "\u25B8 " }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : theme.dim, children: l.msg })
+        ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `live tail \xB7 ${buffer.length} buffered`, width: innerW }),
-    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      spin,
+      " awaiting traffic\u2026"
+    ] }) : null,
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
@@ -7218,7 +7316,7 @@ function LivePanel({ active: active2 }) {
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });

package/dist/tui/index.js

@@ -126,7 +126,7 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
-import { useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
+import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
 import { readFileSync, existsSync } from "fs";
@@ -442,17 +442,25 @@ var fmtUp = (ms) => {
   const p = (n) => String(n).padStart(2, "0");
   return `${p(Math.floor(s / 3600))}:${p(Math.floor(s % 3600 / 60))}:${p(s % 60)}`;
 };
-function ColumnChart({ series, height, width, color, limit = 0 }) {
-  const tailVals = series.slice(-width);
-  const data = [...new Array(Math.max(0, width - tailVals.length)).fill(0), ...tailVals];
-  const max = Math.max(1, ...data, limit);
+function ColumnChart({ series, hot, height, width, color }) {
+  const pad = Math.max(0, width - series.length);
+  const data = [...new Array(pad).fill(0), ...series.slice(-width)];
+  const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width)] : void 0;
+  const max = Math.max(1, ...data);
   const lines = [];
   for (let r = height; r >= 1; r--) {
     const segs = [];
     for (let i = 0; i < data.length; i++) {
-      const frac = data[i] / max;
-      const ch = frac >= r / height ? "\u2588" : frac >= (r - 0.5) / height ? "\u2584" : r === 1 && data[i] > 0 ? "\u2581" : " ";
-      const c2 = limit > 0 && data[i] > limit ? theme.bad : color;
+      const v = data[i];
+      const frac = v / max;
+      let ch;
+      let c2;
+      if (frac >= r / height) ch = "\u2588";
+      else if (frac >= (r - 0.5) / height) ch = "\u2584";
+      else if (r === 1) ch = "\u2581";
+      else ch = " ";
+      if (r === 1 && v === 0) c2 = "#233457";
+      else c2 = hotPad?.[i] ? theme.bad : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -466,17 +474,17 @@ function ColumnChart({ series, height, width, color, limit = 0 }) {
 function HBar({ label, value, max, width, color }) {
   const filled = max > 0 ? Math.round(value / max * width) : 0;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(10) }),
     /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width, filled)) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2591".repeat(Math.max(0, width - filled)) + " " + value })
+    /* @__PURE__ */ jsx2(Text2, { color: "#233457", children: "\u2591".repeat(Math.max(0, width - filled)) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
 function PaneTitle({ label, extra, width }) {
-  const head = `\u2500 `;
   const tail = extra ? ` ${extra} ` : " ";
-  const used = head.length + 1 + label.length + tail.length;
+  const used = 2 + 1 + label.length + tail.length;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: head }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
     /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
       "\u258E",
       label
@@ -485,18 +493,104 @@ function PaneTitle({ label, extra, width }) {
   ] });
 }
 function LivePanel({ active: active2 }) {
-  const stats = useLoader(() => api.stats.get());
-  const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
-  const feed = useLoader(() => api.audit.list({ limit: 50 }));
-  const insights = useLoader(() => api.stats.securityInsights(7));
+  const [s, setS] = useState2(null);
+  const [tsData, setTsData] = useState2(null);
+  const [lat, setLat] = useState2([]);
+  const [buffer, setBuffer] = useState2([]);
+  const [log, setLog] = useState2([]);
+  const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const pausedUntil = useRef2(0);
+  const pushLog = useCallback2((msg, level = "ok") => {
+    setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
+  }, []);
+  const onApiError = useCallback2(
+    (e) => {
+      const is429 = e instanceof ApiError && e.status === 429;
+      if (is429 && Date.now() >= pausedUntil.current) {
+        pausedUntil.current = Date.now() + 3e4;
+        pushLog("rate limited by api \xB7 backing off 30s", "warn");
+      } else if (!is429) {
+        pushLog(`api error \xB7 ${truncate(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      }
+    },
+    [pushLog]
+  );
+  const paused = () => Date.now() < pausedUntil.current;
+  const pollFeed = useCallback2(async () => {
+    if (paused()) return;
+    const t0 = Date.now();
+    try {
+      const fd = await api.audit.list({ limit: 50 });
+      const ms = Date.now() - t0;
+      setLat((l) => [...l, ms].slice(-240));
+      const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      const firstLoad = seenRef.current.size === 0 && fresh.length > 1;
+      for (const e of fresh) seenRef.current.add(e.id);
+      if (fresh.length) {
+        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+      }
+      const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
+      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
+      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
+      else
+        pushLog(
+          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
+          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
+        );
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [pushLog, onApiError]);
+  const pollMedium = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setS(await api.stats.get());
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  const pollSlow = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setTsData(await api.stats.timeseries({ period: "24h" }));
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  useEffect2(() => {
+    if (!active2) return;
+    void pollFeed();
+    void pollMedium();
+    void pollSlow();
+    const t1 = setInterval(() => void pollFeed(), 4e3);
+    const t2 = setInterval(() => void pollMedium(), 1e4);
+    const t3 = setInterval(() => void pollSlow(), 3e4);
+    return () => {
+      clearInterval(t1);
+      clearInterval(t2);
+      clearInterval(t3);
+    };
+  }, [active2, pollFeed, pollMedium, pollSlow]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
+  const insights = useLoader(() => api.stats.securityInsights(7));
   usePoll(() => {
-    stats.reload();
-    ts.reload();
-    feed.reload();
-  }, 2e3, active2);
-  usePoll(sessions.reload, 5e3, active2);
-  usePoll(insights.reload, 1e4, active2);
+    if (!paused()) sessions.reload();
+  }, 1e4, active2);
+  usePoll(() => {
+    if (!paused()) insights.reload();
+  }, 3e4, active2);
+  useEffect2(() => {
+    const c2 = sessions.data?.counts;
+    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
+  }, [sessions.data, pushLog]);
+  useEffect2(() => {
+    const ib = insights.data;
+    if (ib?.layers) {
+      const rl2 = ib.layers.rateLimit;
+      const dl2 = ib.layers.dlp;
+      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
+    }
+  }, [insights.data, pushLog]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -504,61 +598,43 @@ function LivePanel({ active: active2 }) {
     return () => clearInterval(t);
   }, [active2]);
   const startRef = useRef2(Date.now());
-  const [buffer, setBuffer] = useState2([]);
-  useEffect2(() => {
-    const incoming = feed.data?.entries;
-    if (!incoming?.length) return;
-    setBuffer((prev) => {
-      const seen = new Set(prev.map((e) => e.id));
-      const fresh = incoming.filter((e) => !seen.has(e.id)).sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at));
-      return fresh.length ? [...prev, ...fresh].slice(-400) : prev;
-    });
-  }, [feed.data]);
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
-  const s = stats.data;
   const ins = insights.data ?? {};
-  const minuteRaw = (ins.activity?.minute ?? []).map((b) => b.count);
-  const hourRaw = (ins.activity?.hour ?? []).map((b) => b.count);
-  const minuteLive = minuteRaw.some((c2) => c2 > 0);
-  const rateSeries = minuteLive ? minuteRaw : hourRaw;
-  const rateLabel = minuteLive ? "calls/min \xB7 60m" : "calls/hour \xB7 24h";
-  const limit = minuteLive ? ins.layers?.rateLimit?.perMinute ?? 0 : 0;
-  const rlMode = ins.layers?.rateLimit?.mode ?? "?";
-  const dlpMode = ins.layers?.dlp?.mode ?? "?";
-  const denySeries = (ts.data?.timeseries ?? []).map((p) => p.denied);
   const spin = SPIN[tick % SPIN.length];
+  const points = tsData?.timeseries ?? [];
+  const traffic = points.map((p) => p.total);
+  const trafficHot = points.map((p) => p.denied > 0);
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
   const toolCounts = /* @__PURE__ */ new Map();
-  let dlpBufHits = 0;
-  for (const e of buffer) {
-    toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
-    if (e.dlp_matches?.length) dlpBufHits++;
-  }
+  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 3);
-  const maxDlp = dlpBars[0]?.count ?? 1;
-  const dlpRecent = (ins.dlpHits ?? []).slice(0, 2);
   const denials = buffer.filter((e) => e.decision !== "ALLOW");
   const lastDeny = denials[denials.length - 1];
-  const bursts = limit > 0 ? rateSeries.filter((c2) => c2 > limit).length : 0;
+  const latNow = lat[lat.length - 1] ?? 0;
+  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const latHotAt = Math.max(1500, latAvg * 1.8);
+  const backingOff = Date.now() < pausedUntil.current;
   const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
   const sessCounts = sessions.data?.counts;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 6 : 5;
   const streamRows = Math.max(4, rows - 6 - chartH - colH);
   const tail = buffer.slice(-streamRows);
-  const colW = Math.max(20, Math.floor((cols - 6) / 3));
   const innerW = cols - 2;
-  if (stats.error) return /* @__PURE__ */ jsxs2(Text2, { color: theme.bad, children: [
-    "\u2717 ",
-    stats.error
-  ] });
+  const leftW = Math.floor(innerW * 0.55);
+  const rightW = innerW - leftW - 2;
+  const colW = Math.max(20, Math.floor((innerW - 4) / 3));
   const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} ` }),
-      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 no recent denials " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
+      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " \u23F8 RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
@@ -567,40 +643,48 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp(buf) " }),
-      /* @__PURE__ */ jsx2(Text2, { color: dlpBufHits ? theme.bad : theme.dim, children: dlpBufHits }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 bursts " }),
-      /* @__PURE__ */ jsx2(Text2, { color: bursts ? theme.bad : theme.dim, children: bursts }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
+      /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+      /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC` : "\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "RATE LIMIT", extra: `${rateLabel} \xB7 peak ${Math.max(0, ...rateSeries)} \xB7 limit ${limit || "off"} \xB7 mode ${rlMode}${limit ? " \xB7 red = over" : ""}`, width: innerW }),
-    rateSeries.length ? /* @__PURE__ */ jsx2(ColumnChart, { series: rateSeries, height: chartH, width: innerW, color: theme.accent, limit }) : /* @__PURE__ */ jsx2(Box2, { height: chartH, children: /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: insights.loading ? `${spin} loading activity\u2026` : "no activity data" }) }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "DENIALS", extra: "24h", width: colW }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: denySeries, height: colH - 1, width: colW, color: theme.bad })
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `24h \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = had denials`, width: leftW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
       ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms \xB7 red >${Math.round(latHotAt)}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > latHotAt), height: chartH, width: rightW, color: "#82AAF0" })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs2(Box2, { children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "DLP", extra: `7d \xB7 mode ${dlpMode}`, width: colW }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 9), value: d.count, max: maxDlp, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no dlp hits" }),
-        dlpRecent.map((h, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx2(Text2, { color: h.blocked ? theme.accent : theme.bad, children: h.blocked ? "\u2298" : "\u26A0" }),
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: rl?.perMinute ? `${minuteNow}/${rl.perMinute} per min` : "no limit set" })
+        ] }),
+        rl?.perMinute ? /* @__PURE__ */ jsx2(HBar, { label: "load", value: minuteNow, max: rl.perMinute, width: Math.max(6, colW - 16), color: minuteNow > rl.perMinute ? theme.bad : theme.accent }) : null,
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "DLP".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
           /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            " ",
-            truncate(h.pattern, colW - 14),
-            " ",
-            ago(h.at),
-            " ago"
+            (dl?.patterns ?? []).length,
+            " patterns armed"
           ] })
-        ] }, i))
+        ] }),
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
       ] }),
-      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} active` : "", width: colW }),
-        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no sessions" }) : null,
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
+        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
         sess.slice(0, colH - 1).map((a) => {
           const dot = sessionDot(a.status);
           return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
@@ -620,10 +704,24 @@ function LivePanel({ active: active2 }) {
             /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(a.last_seen_at) })
           ] }, a.session_id);
         })
+      ] }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, children: [
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "EVENT LOG", extra: "streaming", width: colW }),
+        log.slice(-(colH - 1)).map((l, i) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+            hhmmss(l.ts),
+            " "
+          ] }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : l.level === "warn" ? theme.warn : "#4f8f6b", children: "\u25B8 " }),
+          /* @__PURE__ */ jsx2(Text2, { color: l.level === "bad" ? theme.bad : theme.dim, children: l.msg })
+        ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `live tail \xB7 ${buffer.length} buffered`, width: innerW }),
-    tail.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "awaiting traffic\u2026" }) : null,
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      spin,
+      " awaiting traffic\u2026"
+    ] }) : null,
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
@@ -638,7 +736,7 @@ function LivePanel({ active: active2 }) {
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.65.0",
+  "version": "0.66.1",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {