@solongate/proxy 0.66.0 → 0.67.0

package/dist/index.js

@@ -7020,9 +7020,39 @@ var init_hooks = __esm({
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
+import { closeSync, openSync, readSync, statSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
-function ColumnChart({ series, hot, height, width: width2, color }) {
+function tailLines(file, maxBytes = 65536) {
+  try {
+    const size = statSync(file).size;
+    const start = Math.max(0, size - maxBytes);
+    const fd = openSync(file, "r");
+    const buf = Buffer.alloc(size - start);
+    readSync(fd, buf, 0, buf.length, start);
+    closeSync(fd);
+    const lines = buf.toString("utf-8").split("\n").filter(Boolean);
+    if (start > 0) lines.shift();
+    return lines;
+  } catch {
+    return [];
+  }
+}
+function cloudItem(e) {
+  return {
+    id: "c:" + e.id,
+    at: Date.parse(e.created_at),
+    tool: e.tool_name,
+    decision: e.decision,
+    permission: (e.permission ?? "").slice(0, 4),
+    detail: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " "),
+    dlp: !!e.dlp_matches?.length,
+    source: "cloud"
+  };
+}
+function ColumnChart({ series, hot, height, width: width2, color, hotColor = theme.bad }) {
   const pad = Math.max(0, width2 - series.length);
   const data = [...new Array(pad).fill(0), ...series.slice(-width2)];
   const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width2)] : void 0;
@@ -7034,13 +7064,11 @@ function ColumnChart({ series, hot, height, width: width2, color }) {
       const v = data[i];
       const frac = v / max;
       let ch;
-      let c2;
       if (frac >= r / height) ch = "\u2588";
       else if (frac >= (r - 0.5) / height) ch = "\u2584";
       else if (r === 1) ch = "\u2581";
       else ch = " ";
-      if (r === 1 && v === 0) c2 = "#233457";
-      else c2 = hotPad?.[i] ? theme.bad : color;
+      const c2 = r === 1 && v === 0 ? "#233457" : hotPad?.[i] ? hotColor : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -7076,60 +7104,147 @@ function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
   const [tsData, setTsData] = useState2(null);
   const [lat, setLat] = useState2([]);
-  const [buffer, setBuffer] = useState2([]);
+  const [cloudBuf, setCloudBuf] = useState2([]);
+  const [localBuf, setLocalBuf] = useState2([]);
+  const [localOn, setLocalOn] = useState2(null);
+  const [ring, setRing] = useState2(null);
   const [log6, setLog] = useState2([]);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const lastLocalTs = useRef2(0);
+  const pausedUntil = useRef2(0);
   const pushLog = useCallback2((msg, level = "ok") => {
     setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
   }, []);
-  const doPoll = useCallback2(async () => {
+  const onApiError = useCallback2(
+    (e) => {
+      const is429 = e instanceof ApiError && e.status === 429;
+      if (is429 && Date.now() >= pausedUntil.current) {
+        pausedUntil.current = Date.now() + 3e4;
+        pushLog("rate limited by api \xB7 backing off 30s", "warn");
+      } else if (!is429) {
+        pushLog(`api error \xB7 ${truncate2(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      }
+    },
+    [pushLog]
+  );
+  const paused = () => Date.now() < pausedUntil.current;
+  const pollLocal = useCallback2(() => {
+    const lines = tailLines(LOCAL_LOG);
+    if (!lines.length) {
+      setLocalOn((prev) => prev === null ? false : prev);
+      return;
+    }
+    setLocalOn(true);
+    const fresh = [];
+    for (const line of lines) {
+      try {
+        const j = JSON.parse(line);
+        const at = Date.parse(j.ts ?? "");
+        if (!Number.isFinite(at) || at <= lastLocalTs.current) continue;
+        fresh.push({
+          id: "l:" + at + ":" + (j.tool ?? ""),
+          at,
+          tool: j.tool ?? "?",
+          decision: j.decision ?? "ALLOW",
+          permission: "",
+          detail: (j.arguments ? JSON.stringify(j.arguments) : j.reason ?? "").replace(/\s+/g, " "),
+          dlp: !!j.dlp,
+          source: "local"
+        });
+      } catch {
+      }
+    }
+    if (fresh.length) {
+      lastLocalTs.current = fresh[fresh.length - 1].at;
+      setLocalBuf((prev) => [...prev, ...fresh].slice(-400));
+      const denies = fresh.filter((f) => f.decision !== "ALLOW").length;
+      if (lastLocalTs.current !== fresh[0].at || fresh.length < 10) {
+        pushLog(`local +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : "warn");
+      }
+    }
+    const ringLines = tailLines(RING, 8192).slice(-30);
+    if (ringLines.length) {
+      let sum = 0;
+      let n = 0;
+      let session = "";
+      for (const rl2 of ringLines) {
+        try {
+          const j = JSON.parse(rl2);
+          if (typeof j.ms === "number") {
+            sum += j.ms;
+            n++;
+          }
+          if (j.session) session = j.session;
+        } catch {
+        }
+      }
+      if (n) setRing({ avgMs: Math.round(sum / n), session, count: n });
+    }
+  }, [pushLog]);
+  useEffect2(() => {
+    if (!active2) return;
+    pollLocal();
+    const t = setInterval(pollLocal, 2e3);
+    return () => clearInterval(t);
+  }, [active2, pollLocal]);
+  const pollFeed = useCallback2(async () => {
+    if (paused()) return;
     const t0 = Date.now();
     try {
-      const [sd, fd, td] = await Promise.all([api.stats.get(), api.audit.list({ limit: 50 }), api.stats.timeseries({ period: "24h" })]);
+      const fd = await api.audit.list({ limit: 50 });
       const ms = Date.now() - t0;
-      setS(sd);
-      setTsData(td);
-      setLat((l) => [...l.slice(-47), ms]);
+      setLat((l) => [...l, ms].slice(-240));
       const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      const firstLoad = seenRef.current.size === 0 && fresh.length > 1;
       for (const e of fresh) seenRef.current.add(e.id);
-      const firstLoad = seenRef.current.size === fresh.length && fresh.length > 1;
       if (fresh.length) {
-        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+        setCloudBuf((prev) => [...prev, ...fresh.map(cloudItem).sort((a, b) => a.at - b.at)].slice(-400));
       }
       const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
-      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
-      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
-      else
-        pushLog(
-          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
-          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
-        );
+      if (firstLoad) pushLog(`cloud link up \xB7 api ${ms}ms \xB7 ${fresh.length} calls`);
+      else pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : fresh.length ? "warn" : "ok");
     } catch (e) {
-      pushLog(`api error \xB7 ${truncate2(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      onApiError(e);
     }
-  }, [pushLog]);
+  }, [pushLog, onApiError]);
+  const pollMedium = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setS(await api.stats.get());
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  const pollSlow = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setTsData(await api.stats.timeseries({ period: "24h" }));
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
   useEffect2(() => {
     if (!active2) return;
-    void doPoll();
-    const t = setInterval(() => void doPoll(), 2e3);
-    return () => clearInterval(t);
-  }, [active2, doPoll]);
+    void pollFeed();
+    void pollMedium();
+    void pollSlow();
+    const t1 = setInterval(() => void pollFeed(), 4e3);
+    const t2 = setInterval(() => void pollMedium(), 1e4);
+    const t3 = setInterval(() => void pollSlow(), 3e4);
+    return () => {
+      clearInterval(t1);
+      clearInterval(t2);
+      clearInterval(t3);
+    };
+  }, [active2, pollFeed, pollMedium, pollSlow]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
-  usePoll(sessions.reload, 5e3, active2);
-  usePoll(insights.reload, 1e4, active2);
-  useEffect2(() => {
-    const c2 = sessions.data?.counts;
-    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
-  }, [sessions.data, pushLog]);
-  useEffect2(() => {
-    const ib = insights.data;
-    if (ib?.layers) {
-      const rl2 = ib.layers.rateLimit;
-      const dl2 = ib.layers.dlp;
-      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
-    }
-  }, [insights.data, pushLog]);
+  usePoll(() => {
+    if (!paused()) sessions.reload();
+  }, 1e4, active2);
+  usePoll(() => {
+    if (!paused()) insights.reload();
+  }, 3e4, active2);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -7149,29 +7264,33 @@ function LivePanel({ active: active2 }) {
   const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
   const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
   const maxDlpBar = dlpBars[0]?.count ?? 1;
+  const merged = [...cloudBuf, ...localBuf].sort((a, b) => a.at - b.at);
+  const denials = merged.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denials[denials.length - 1];
   const toolCounts = /* @__PURE__ */ new Map();
-  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+  for (const e of merged) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const denials = buffer.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denials[denials.length - 1];
   const latNow = lat[lat.length - 1] ?? 0;
-  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const sortedLat = [...lat].sort((a, b) => a - b);
+  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
+  const latHotAt = Math.max(2e3, latMed * 2.5);
+  const backingOff = Date.now() < pausedUntil.current;
   const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
   const sessCounts = sessions.data?.counts;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 6 : 5;
-  const streamRows = Math.max(4, rows - 6 - chartH - colH);
-  const tail = buffer.slice(-streamRows);
+  const streamRows = Math.max(4, rows - 6 - chartH - colH - (localOn === false ? 1 : 0));
+  const tail = merged.slice(-streamRows);
   const innerW = cols - 2;
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
-  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
-      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
+      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
@@ -7180,14 +7299,14 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 local " }),
+      localOn ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "\u2713 streaming" }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "off" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
       /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
       /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
@@ -7196,8 +7315,8 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms`, width: rightW }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > 800), height: chartH, width: rightW, color: "#82AAF0" })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `now ${latNow}ms \xB7 med ${latMed}ms \xB7 amber >${Math.round(latHotAt)}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > latHotAt), height: chartH, width: rightW, color: "#82AAF0", hotColor: "#ffb454" })
       ] })
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
@@ -7217,12 +7336,22 @@ function LivePanel({ active: active2 }) {
             " patterns armed"
           ] })
         ] }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" }),
+        ring ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "GUARD".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "local \u2713" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` eval avg ${ring.avgMs}ms \xB7 ${ring.count} recent` })
+        ] }) : null
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
-        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
-        sess.slice(0, colH - 1).map((a) => {
+        ring?.session ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "\u25CF " }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: true, children: "this machine" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  " + truncate2(ring.session, 12) + " \xB7 guarded" })
+        ] }) : null,
+        sess.length === 0 && !ring ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        sess.slice(0, colH - 1 - (ring ? 1 : 0)).map((a) => {
           const dot = sessionDot(a.status);
           return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
             /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
@@ -7254,7 +7383,11 @@ function LivePanel({ active: active2 }) {
         ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `local+cloud tail \xB7 ${merged.length} buffered`, width: innerW }),
+    localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable in dashboard \u2192 Settings \u2192 Local logs; hooks then write ~/.solongate/local-logs (view them there with `solongate logs-server`)" })
+    ] }) : null,
     tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
       " awaiting traffic\u2026"
@@ -7262,23 +7395,25 @@ function LivePanel({ active: active2 }) {
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
-        hhmmss(e.created_at),
-        "] "
+        hhmmss(e.at),
+        " "
       ] }),
+      /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
       /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool_name, 14).padEnd(15) }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
-      e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool, 14).padEnd(15) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
+      e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${merged.length} ` }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });
 }
-var SPIN, BG, hhmmss, fmtUp;
+var SPIN, BG, LOCAL_LOG, RING, hhmmss, fmtUp;
 var init_Live = __esm({
   "src/tui/panels/Live.tsx"() {
     "use strict";
@@ -7287,6 +7422,8 @@ var init_Live = __esm({
     init_theme();
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
+    LOCAL_LOG = join5(homedir3(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    RING = join5(process.cwd(), ".solongate", ".eval-ring.jsonl");
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -8958,8 +9095,8 @@ __export(global_install_exports, {
   unlockProtected: () => unlockProtected
 });
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync3, existsSync as existsSync4, mkdirSync as mkdirSync3 } from "fs";
-import { resolve as resolve4, join as join5, dirname } from "path";
-import { homedir as homedir3 } from "os";
+import { resolve as resolve4, join as join6, dirname } from "path";
+import { homedir as homedir4 } from "os";
 import { fileURLToPath } from "url";
 import { createInterface } from "readline";
 import { execFileSync as execFileSync2 } from "child_process";
@@ -9022,10 +9159,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join5(p.hooksDir, "guard.mjs"),
-    join5(p.hooksDir, "audit.mjs"),
-    join5(p.hooksDir, "stop.mjs"),
-    join5(p.hooksDir, "shield.mjs"),
+    join6(p.hooksDir, "guard.mjs"),
+    join6(p.hooksDir, "audit.mjs"),
+    join6(p.hooksDir, "stop.mjs"),
+    join6(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -9037,25 +9174,25 @@ function unlockProtected() {
   for (const f of protectedTargets()) unlockFile(f);
 }
 function globalPaths() {
-  const home = homedir3();
-  const sgDir = join5(home, ".solongate");
-  const hooksDir = join5(sgDir, "hooks");
-  const claudeDir = join5(home, ".claude");
+  const home = homedir4();
+  const sgDir = join6(home, ".solongate");
+  const hooksDir = join6(sgDir, "hooks");
+  const claudeDir = join6(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join5(claudeDir, "settings.json"),
-    backupPath: join5(claudeDir, "settings.solongate.bak"),
-    configPath: join5(sgDir, "cloud-guard.json")
+    settingsPath: join6(claudeDir, "settings.json"),
+    backupPath: join6(claudeDir, "settings.solongate.bak"),
+    configPath: join6(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync6(join5(HOOKS_DIR, filename), "utf-8");
+  return readFileSync6(join6(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join5(HOOKS_DIR, "guard.bundled.mjs");
+  const bundled = join6(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync4(bundled) ? readFileSync6(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
@@ -9110,7 +9247,7 @@ function shimTargets() {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join5(homedir3(), f)).filter((f) => existsSync4(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join6(homedir4(), f)).filter((f) => existsSync4(f));
 }
 function writeShimBlock(file, block) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
@@ -9181,10 +9318,10 @@ async function runGlobalInstall(opts = {}) {
   mkdirSync3(p.hooksDir, { recursive: true });
   mkdirSync3(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync3(join5(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync3(join5(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync3(join5(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync3(join5(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync3(join6(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync3(join6(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync3(join6(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync3(join6(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   removeClaudeShim();
   writeFileSync3(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
@@ -9202,9 +9339,9 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join5(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join5(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join5(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join6(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join6(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join6(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const merged = {
     ...existing,
@@ -9394,11 +9531,11 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn2 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync7, existsSync as existsSync5, readdirSync, statSync } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync5, readdirSync, statSync as statSync2 } from "fs";
 import { resolve as resolve5 } from "path";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 function findCacheFile() {
-  const dir = resolve5(homedir4(), ".solongate");
+  const dir = resolve5(homedir5(), ".solongate");
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
@@ -9409,7 +9546,7 @@ function findCacheFile() {
     for (const name of readdirSync(dir)) {
       if (name.startsWith(".policy-cache-") && name.endsWith(".json")) {
         const full = resolve5(dir, name);
-        const ts = statSync(full).mtimeMs;
+        const ts = statSync2(full).mtimeMs;
         if (ts > bestTs) {
           bestTs = ts;
           best = full;
@@ -9700,9 +9837,9 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync8, statSync as statSync2 } from "fs";
-import { resolve as resolve6, join as join6, isAbsolute } from "path";
-import { homedir as homedir5 } from "os";
+import { readFileSync as readFileSync8, statSync as statSync3 } from "fs";
+import { resolve as resolve6, join as join7, isAbsolute } from "path";
+import { homedir as homedir6 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
@@ -9719,15 +9856,15 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
-  return resolve6(homedir5(), ".solongate", "local-logs");
+  return resolve6(homedir6(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve6(homedir5(), ".solongate");
+  const base = resolve6(homedir6(), ".solongate");
   try {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync8(join6(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync8(join7(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -9736,7 +9873,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync8(join6(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync8(join7(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -9765,9 +9902,9 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join6(dir, LOG_FILENAME);
+  const file = join7(dir, LOG_FILENAME);
   try {
-    const st = statSync2(file);
+    const st = statSync3(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
   } catch {
     return { file, exists: false, size: 0, mtimeMs: 0 };
@@ -10216,7 +10353,7 @@ var init_inject = __esm({
 // src/create.ts
 var create_exports = {};
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5, existsSync as existsSync7 } from "fs";
-import { resolve as resolve8, join as join7 } from "path";
+import { resolve as resolve8, join as join8 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -10296,7 +10433,7 @@ EXAMPLES
 }
 function createProject(dir, name, _policy) {
   writeFileSync5(
-    join7(dir, "package.json"),
+    join8(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -10326,7 +10463,7 @@ function createProject(dir, name, _policy) {
     ) + "\n"
   );
   writeFileSync5(
-    join7(dir, "tsconfig.json"),
+    join8(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -10346,9 +10483,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync4(join7(dir, "src"), { recursive: true });
+  mkdirSync4(join8(dir, "src"), { recursive: true });
   writeFileSync5(
-    join7(dir, "src", "index.ts"),
+    join8(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -10390,7 +10527,7 @@ console.log('Press Ctrl+C to stop.');
 `
   );
   writeFileSync5(
-    join7(dir, ".mcp.json"),
+    join8(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -10408,12 +10545,12 @@ console.log('Press Ctrl+C to stop.');
     ) + "\n"
   );
   writeFileSync5(
-    join7(dir, ".env"),
+    join8(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
   writeFileSync5(
-    join7(dir, ".gitignore"),
+    join8(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup

package/dist/tui/index.js

@@ -126,6 +126,9 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2 } from "ink";
+import { closeSync, openSync, readSync, statSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
@@ -433,6 +436,8 @@ function usePoll(reload, intervalMs, enabled = true) {
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var BG = "#12234f";
+var LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
+var RING = join2(process.cwd(), ".solongate", ".eval-ring.jsonl");
 var hhmmss = (ts) => {
   const d = new Date(ts);
   return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -442,7 +447,34 @@ var fmtUp = (ms) => {
   const p = (n) => String(n).padStart(2, "0");
   return `${p(Math.floor(s / 3600))}:${p(Math.floor(s % 3600 / 60))}:${p(s % 60)}`;
 };
-function ColumnChart({ series, hot, height, width, color }) {
+function tailLines(file, maxBytes = 65536) {
+  try {
+    const size = statSync(file).size;
+    const start = Math.max(0, size - maxBytes);
+    const fd = openSync(file, "r");
+    const buf = Buffer.alloc(size - start);
+    readSync(fd, buf, 0, buf.length, start);
+    closeSync(fd);
+    const lines = buf.toString("utf-8").split("\n").filter(Boolean);
+    if (start > 0) lines.shift();
+    return lines;
+  } catch {
+    return [];
+  }
+}
+function cloudItem(e) {
+  return {
+    id: "c:" + e.id,
+    at: Date.parse(e.created_at),
+    tool: e.tool_name,
+    decision: e.decision,
+    permission: (e.permission ?? "").slice(0, 4),
+    detail: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " "),
+    dlp: !!e.dlp_matches?.length,
+    source: "cloud"
+  };
+}
+function ColumnChart({ series, hot, height, width, color, hotColor = theme.bad }) {
   const pad = Math.max(0, width - series.length);
   const data = [...new Array(pad).fill(0), ...series.slice(-width)];
   const hotPad = hot ? [...new Array(pad).fill(false), ...hot.slice(-width)] : void 0;
@@ -454,13 +486,11 @@ function ColumnChart({ series, hot, height, width, color }) {
       const v = data[i];
       const frac = v / max;
       let ch;
-      let c2;
       if (frac >= r / height) ch = "\u2588";
       else if (frac >= (r - 0.5) / height) ch = "\u2584";
       else if (r === 1) ch = "\u2581";
       else ch = " ";
-      if (r === 1 && v === 0) c2 = "#233457";
-      else c2 = hotPad?.[i] ? theme.bad : color;
+      const c2 = r === 1 && v === 0 ? "#233457" : hotPad?.[i] ? hotColor : color;
       const last = segs[segs.length - 1];
       if (last && last.color === c2) last.text += ch;
       else segs.push({ text: ch, color: c2 });
@@ -496,60 +526,147 @@ function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
   const [tsData, setTsData] = useState2(null);
   const [lat, setLat] = useState2([]);
-  const [buffer, setBuffer] = useState2([]);
+  const [cloudBuf, setCloudBuf] = useState2([]);
+  const [localBuf, setLocalBuf] = useState2([]);
+  const [localOn, setLocalOn] = useState2(null);
+  const [ring, setRing] = useState2(null);
   const [log, setLog] = useState2([]);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
+  const lastLocalTs = useRef2(0);
+  const pausedUntil = useRef2(0);
   const pushLog = useCallback2((msg, level = "ok") => {
     setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
   }, []);
-  const doPoll = useCallback2(async () => {
+  const onApiError = useCallback2(
+    (e) => {
+      const is429 = e instanceof ApiError && e.status === 429;
+      if (is429 && Date.now() >= pausedUntil.current) {
+        pausedUntil.current = Date.now() + 3e4;
+        pushLog("rate limited by api \xB7 backing off 30s", "warn");
+      } else if (!is429) {
+        pushLog(`api error \xB7 ${truncate(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      }
+    },
+    [pushLog]
+  );
+  const paused = () => Date.now() < pausedUntil.current;
+  const pollLocal = useCallback2(() => {
+    const lines = tailLines(LOCAL_LOG);
+    if (!lines.length) {
+      setLocalOn((prev) => prev === null ? false : prev);
+      return;
+    }
+    setLocalOn(true);
+    const fresh = [];
+    for (const line of lines) {
+      try {
+        const j = JSON.parse(line);
+        const at = Date.parse(j.ts ?? "");
+        if (!Number.isFinite(at) || at <= lastLocalTs.current) continue;
+        fresh.push({
+          id: "l:" + at + ":" + (j.tool ?? ""),
+          at,
+          tool: j.tool ?? "?",
+          decision: j.decision ?? "ALLOW",
+          permission: "",
+          detail: (j.arguments ? JSON.stringify(j.arguments) : j.reason ?? "").replace(/\s+/g, " "),
+          dlp: !!j.dlp,
+          source: "local"
+        });
+      } catch {
+      }
+    }
+    if (fresh.length) {
+      lastLocalTs.current = fresh[fresh.length - 1].at;
+      setLocalBuf((prev) => [...prev, ...fresh].slice(-400));
+      const denies = fresh.filter((f) => f.decision !== "ALLOW").length;
+      if (lastLocalTs.current !== fresh[0].at || fresh.length < 10) {
+        pushLog(`local +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : "warn");
+      }
+    }
+    const ringLines = tailLines(RING, 8192).slice(-30);
+    if (ringLines.length) {
+      let sum = 0;
+      let n = 0;
+      let session = "";
+      for (const rl2 of ringLines) {
+        try {
+          const j = JSON.parse(rl2);
+          if (typeof j.ms === "number") {
+            sum += j.ms;
+            n++;
+          }
+          if (j.session) session = j.session;
+        } catch {
+        }
+      }
+      if (n) setRing({ avgMs: Math.round(sum / n), session, count: n });
+    }
+  }, [pushLog]);
+  useEffect2(() => {
+    if (!active2) return;
+    pollLocal();
+    const t = setInterval(pollLocal, 2e3);
+    return () => clearInterval(t);
+  }, [active2, pollLocal]);
+  const pollFeed = useCallback2(async () => {
+    if (paused()) return;
     const t0 = Date.now();
     try {
-      const [sd, fd, td] = await Promise.all([api.stats.get(), api.audit.list({ limit: 50 }), api.stats.timeseries({ period: "24h" })]);
+      const fd = await api.audit.list({ limit: 50 });
       const ms = Date.now() - t0;
-      setS(sd);
-      setTsData(td);
-      setLat((l) => [...l.slice(-47), ms]);
+      setLat((l) => [...l, ms].slice(-240));
       const fresh = fd.entries.filter((e) => !seenRef.current.has(e.id));
+      const firstLoad = seenRef.current.size === 0 && fresh.length > 1;
       for (const e of fresh) seenRef.current.add(e.id);
-      const firstLoad = seenRef.current.size === fresh.length && fresh.length > 1;
       if (fresh.length) {
-        setBuffer((prev) => [...prev, ...fresh.sort((a, b) => Date.parse(a.created_at) - Date.parse(b.created_at))].slice(-400));
+        setCloudBuf((prev) => [...prev, ...fresh.map(cloudItem).sort((a, b) => a.at - b.at)].slice(-400));
       }
       const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
-      const dlp = fresh.filter((e) => e.dlp_matches?.length).length;
-      if (firstLoad) pushLog(`link up \xB7 api ${ms}ms \xB7 loaded ${fresh.length} calls`);
-      else
-        pushLog(
-          `api ${ms}ms \xB7 +${fresh.length} calls${denies ? ` \xB7 ${denies} DENIED` : ""}${dlp ? ` \xB7 ${dlp} DLP` : ""}`,
-          denies || dlp ? "bad" : fresh.length ? "warn" : "ok"
-        );
+      if (firstLoad) pushLog(`cloud link up \xB7 api ${ms}ms \xB7 ${fresh.length} calls`);
+      else pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : fresh.length ? "warn" : "ok");
     } catch (e) {
-      pushLog(`api error \xB7 ${truncate(e instanceof Error ? e.message : String(e), 40)}`, "bad");
+      onApiError(e);
     }
-  }, [pushLog]);
+  }, [pushLog, onApiError]);
+  const pollMedium = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setS(await api.stats.get());
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
+  const pollSlow = useCallback2(async () => {
+    if (paused()) return;
+    try {
+      setTsData(await api.stats.timeseries({ period: "24h" }));
+    } catch (e) {
+      onApiError(e);
+    }
+  }, [onApiError]);
   useEffect2(() => {
     if (!active2) return;
-    void doPoll();
-    const t = setInterval(() => void doPoll(), 2e3);
-    return () => clearInterval(t);
-  }, [active2, doPoll]);
+    void pollFeed();
+    void pollMedium();
+    void pollSlow();
+    const t1 = setInterval(() => void pollFeed(), 4e3);
+    const t2 = setInterval(() => void pollMedium(), 1e4);
+    const t3 = setInterval(() => void pollSlow(), 3e4);
+    return () => {
+      clearInterval(t1);
+      clearInterval(t2);
+      clearInterval(t3);
+    };
+  }, [active2, pollFeed, pollMedium, pollSlow]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
-  usePoll(sessions.reload, 5e3, active2);
-  usePoll(insights.reload, 1e4, active2);
-  useEffect2(() => {
-    const c2 = sessions.data?.counts;
-    if (c2) pushLog(`sessions ${c2.active}\u25B2 ${c2.idle}\u25CC ${c2.deactivated}\u25CB`);
-  }, [sessions.data, pushLog]);
-  useEffect2(() => {
-    const ib = insights.data;
-    if (ib?.layers) {
-      const rl2 = ib.layers.rateLimit;
-      const dl2 = ib.layers.dlp;
-      pushLog(`layers \xB7 ratelimit ${rl2?.mode ?? "?"} ${rl2?.perMinute || "\u2014"}/m \xB7 dlp ${dl2?.mode ?? "?"} ${(dl2?.patterns ?? []).length} armed`);
-    }
-  }, [insights.data, pushLog]);
+  usePoll(() => {
+    if (!paused()) sessions.reload();
+  }, 1e4, active2);
+  usePoll(() => {
+    if (!paused()) insights.reload();
+  }, 3e4, active2);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -569,29 +686,33 @@ function LivePanel({ active: active2 }) {
   const minuteNow = (ins.activity?.minute ?? []).slice(-1)[0]?.count ?? 0;
   const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
   const maxDlpBar = dlpBars[0]?.count ?? 1;
+  const merged = [...cloudBuf, ...localBuf].sort((a, b) => a.at - b.at);
+  const denials = merged.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denials[denials.length - 1];
   const toolCounts = /* @__PURE__ */ new Map();
-  for (const e of buffer) toolCounts.set(e.tool_name, (toolCounts.get(e.tool_name) ?? 0) + 1);
+  for (const e of merged) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const denials = buffer.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denials[denials.length - 1];
   const latNow = lat[lat.length - 1] ?? 0;
-  const latAvg = lat.length ? Math.round(lat.reduce((a, b) => a + b, 0) / lat.length) : 0;
+  const sortedLat = [...lat].sort((a, b) => a - b);
+  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
+  const latHotAt = Math.max(2e3, latMed * 2.5);
+  const backingOff = Date.now() < pausedUntil.current;
   const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
   const sessCounts = sessions.data?.counts;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 6 : 5;
-  const streamRows = Math.max(4, rows - 6 - chartH - colH);
-  const tail = buffer.slice(-streamRows);
+  const streamRows = Math.max(4, rows - 6 - chartH - colH - (localOn === false ? 1 : 0));
+  const tail = merged.slice(-streamRows);
   const innerW = cols - 2;
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
-  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25D0", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " \u26E8 SOLONGATE LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(Date.now() - startRef.current)} \xB7 ${hhmmss(Date.now())} \xB7 api ${latNow}ms ` }),
-      lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.created_at)} ${lastDeny.tool_name} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
+      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
@@ -600,14 +721,14 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: s ? s.allowed : "\xB7\xB7\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.bad, bold: true, children: s ? s.denied : "\xB7\xB7" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 local " }),
+      localOn ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "\u2713 streaming" }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "off" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ratelimit " }),
       /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: rl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
       /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: dl?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sessions " }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: sessCounts ? `${sessCounts.active}\u25B2 ${sessCounts.idle}\u25CC ${sessCounts.deactivated}\u25CB` : "\xB7" }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 policies " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: s ? s.active_policies : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
@@ -616,8 +737,8 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(ColumnChart, { series: traffic, hot: trafficHot, height: chartH, width: leftW, color: theme.accent })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: rightW, children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `live \xB7 now ${latNow}ms \xB7 avg ${latAvg}ms`, width: rightW }),
-        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > 800), height: chartH, width: rightW, color: "#82AAF0" })
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "API LATENCY", extra: `now ${latNow}ms \xB7 med ${latMed}ms \xB7 amber >${Math.round(latHotAt)}ms`, width: rightW }),
+        /* @__PURE__ */ jsx2(ColumnChart, { series: lat, hot: lat.map((v) => v > latHotAt), height: chartH, width: rightW, color: "#82AAF0", hotColor: "#ffb454" })
       ] })
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { children: [
@@ -637,12 +758,22 @@ function LivePanel({ active: active2 }) {
             " patterns armed"
           ] })
         ] }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" })
+        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "hits 7d   none \u2014 clean" }),
+        ring ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "GUARD".padEnd(10) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "local \u2713" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` eval avg ${ring.avgMs}ms \xB7 ${ring.count} recent` })
+        ] }) : null
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: sessCounts ? `${sessCounts.active} live` : "", width: colW }),
-        sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
-        sess.slice(0, colH - 1).map((a) => {
+        ring?.session ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "\u25CF " }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: true, children: "this machine" }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  " + truncate(ring.session, 12) + " \xB7 guarded" })
+        ] }) : null,
+        sess.length === 0 && !ring ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        sess.slice(0, colH - 1 - (ring ? 1 : 0)).map((a) => {
           const dot = sessionDot(a.status);
           return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
             /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
@@ -674,7 +805,11 @@ function LivePanel({ active: active2 }) {
         ] }, l.ts + ":" + i))
       ] })
     ] }),
-    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `tail -f \xB7 ${buffer.length} buffered`, width: innerW }),
+    /* @__PURE__ */ jsx2(PaneTitle, { label: "TOOL STREAM", extra: `local+cloud tail \xB7 ${merged.length} buffered`, width: innerW }),
+    localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable in dashboard \u2192 Settings \u2192 Local logs; hooks then write ~/.solongate/local-logs (view them there with `solongate logs-server`)" })
+    ] }) : null,
     tail.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
       " awaiting traffic\u2026"
@@ -682,18 +817,20 @@ function LivePanel({ active: active2 }) {
     tail.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         "[",
-        hhmmss(e.created_at),
-        "] "
+        hhmmss(e.at),
+        " "
       ] }),
+      /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
       /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool_name, 14).padEnd(15) }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.permission ?? "").slice(0, 4).padEnd(5) }),
-      e.dlp_matches?.length ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " ") })
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool, 14).padEnd(15) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
+      e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
     ] }, e.id)),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " \u25B2 LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${buffer.length} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} \xB7 buf ${merged.length} ` }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " esc menu \xB7 q quit " })
     ] })
   ] });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.66.0",
+  "version": "0.67.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {