@solongate/proxy 0.69.0 → 0.70.0

package/dist/index.js

@@ -7020,6 +7020,7 @@ var init_hooks = __esm({
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
+import { spawnSync } from "child_process";
 import { closeSync, mkdirSync as mkdirSync3, openSync, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { dirname, join as join5 } from "path";
@@ -7040,8 +7041,21 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
-function oscCopy(text) {
+function copyToClipboard(text) {
+  const tools = [
+    ["wl-copy", []],
+    ["xclip", ["-selection", "clipboard"]],
+    ["xsel", ["--clipboard", "--input"]]
+  ];
+  for (const [cmd, args] of tools) {
+    try {
+      const r = spawnSync(cmd, args, { input: text, timeout: 2e3 });
+      if (r.status === 0) return cmd;
+    } catch {
+    }
+  }
   process.stdout.write(`\x1B]52;c;${Buffer.from(text, "utf-8").toString("base64")}\x07`);
+  return "osc52";
 }
 function cloudItem(e) {
   return {
@@ -7107,6 +7121,25 @@ function PaneTitle({ label, extra, width: width2 }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width2 - used)) })
   ] });
 }
+function StreamLine({ e }) {
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      "[",
+      hhmmss(e.at),
+      " "
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
+    /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool, 12).padEnd(13) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
+    /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate2(e.agent ?? "-", 11).padEnd(12) }),
+    e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate2(e.rule, 14) + " " }) : null,
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
+  ] });
+}
 function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
   const [tsData, setTsData] = useState2(null);
@@ -7119,6 +7152,11 @@ function LivePanel({ active: active2 }) {
   const [filter, setFilter] = useState2("all");
   const [scroll, setScroll] = useState2(0);
   const [toast, setToast] = useState2(null);
+  const [mode, setMode] = useState2("stream");
+  const [pickIdx, setPickIdx] = useState2(0);
+  const [detail, setDetail] = useState2(null);
+  const [detailCloud, setDetailCloud] = useState2([]);
+  const [detailScroll, setDetailScroll] = useState2(0);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -7212,7 +7250,8 @@ function LivePanel({ active: active2 }) {
       if (fresh.length) setCloudBuf((prev) => [...prev, ...fresh.map(cloudItem).sort((a, b) => a.at - b.at)].slice(-400));
       const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
       if (firstLoad) pushLog(`cloud link up \xB7 api ${ms}ms \xB7 ${fresh.length} calls`);
-      else pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : fresh.length ? "warn" : "ok");
+      else if (fresh.length) pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : "warn");
+      else pushLog(`api ${ms}ms \xB7 idle`, "ok");
     } catch (e) {
       onApiError(e);
     }
@@ -7259,6 +7298,19 @@ function LivePanel({ active: active2 }) {
   usePoll(() => {
     if (!paused()) guard.reload();
   }, 6e4, active2);
+  useEffect2(() => {
+    if (!detail) return;
+    setDetailCloud([]);
+    setDetailScroll(0);
+    let alive = true;
+    api.audit.list({ session_id: detail.id, limit: 100 }).then((r) => {
+      if (alive) setDetailCloud(r.entries.map(cloudItem));
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [detail]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -7273,12 +7325,13 @@ function LivePanel({ active: active2 }) {
   const nowMs = Date.now();
   const mergedAll = [...cloudBuf, ...localBuf].sort((a, b) => a.at - b.at);
   const filtered = filter === "all" ? mergedAll : mergedAll.filter((e) => e.source === filter);
-  const visible = filtered.slice(-STREAM_KEEP);
+  const visibleDesc = filtered.slice(-STREAM_KEEP).reverse();
   const points = tsData?.timeseries ?? [];
+  const nowMin = Math.floor(nowMs / 6e4);
   const minuteCounts = new Array(60).fill(0);
   const minuteHot = new Array(60).fill(false);
   for (const e of mergedAll) {
-    const idx = 59 - Math.floor((nowMs - e.at) / 6e4);
+    const idx = 59 - (nowMin - Math.floor(e.at / 6e4));
     if (idx >= 0 && idx < 60) {
       minuteCounts[idx]++;
       if (e.decision !== "ALLOW") minuteHot[idx] = true;
@@ -7294,8 +7347,8 @@ function LivePanel({ active: active2 }) {
   const minuteNow = minuteCounts[59] ?? 0;
   const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
   const maxDlpBar = dlpBars[0]?.count ?? 1;
-  const denials = mergedAll.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denials[denials.length - 1];
+  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denialsAll[denialsAll.length - 1];
   const toolCounts = /* @__PURE__ */ new Map();
   for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
@@ -7316,7 +7369,19 @@ function LivePanel({ active: active2 }) {
     if (e.agent) cur.agent = e.agent;
     localSess.set(e.session, cur);
   }
-  const localSessList = [...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt);
+  const combinedSess = [
+    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, lastAt: v.lastAt, isMe: ring?.session === id })),
+    ...sess.filter((a) => !localSess.has(a.session_id)).map((a) => ({
+      source: "cloud",
+      id: a.session_id,
+      agent: a.agent_name ?? a.session_id,
+      calls: a.total_calls,
+      denies: a.denied_calls,
+      lastAt: Date.parse(a.last_seen_at),
+      trust: a.trust_score,
+      isMe: false
+    }))
+  ];
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
   const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
@@ -7324,48 +7389,154 @@ function LivePanel({ active: active2 }) {
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
-  const maxScroll = Math.max(0, visible.length - streamRows);
+  const pickable = combinedSess.slice(0, colH - 1);
+  const maxScroll = Math.max(0, visibleDesc.length - streamRows);
   const clampedScroll = Math.min(scroll, maxScroll);
-  const start = Math.max(0, visible.length - streamRows - clampedScroll);
-  const windowed = visible.slice(start, start + streamRows);
+  const windowed = visibleDesc.slice(clampedScroll, clampedScroll + streamRows);
+  const detailEntries = detail ? (() => {
+    const seen = /* @__PURE__ */ new Set();
+    const all = [];
+    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === detail.id)]) {
+      const key = `${e.at}:${e.tool}:${e.decision}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      all.push(e);
+    }
+    return all.sort((a, b) => b.at - a.at);
+  })() : [];
   useInput(
     (input, key) => {
+      if (mode === "detail") {
+        const maxD = Math.max(0, detailEntries.length - (rows - 10));
+        if (key.leftArrow) {
+          setMode("stream");
+          setDetail(null);
+        } else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        return;
+      }
+      if (mode === "pick") {
+        if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPickIdx((n) => Math.min(pickable.length - 1, n + 1));
+        else if (key.return) {
+          const row = pickable[pickIdx];
+          if (row) {
+            setDetail(row);
+            setMode("detail");
+          }
+        } else if (input === "s" || key.leftArrow) setMode("stream");
+        return;
+      }
       if (input === "f") {
         setFilter((f) => FILTERS[(FILTERS.indexOf(f) + 1) % FILTERS.length]);
         setScroll(0);
-      } else if (key.upArrow) setScroll((n) => Math.min(maxScroll, n + 1));
-      else if (key.downArrow) setScroll((n) => Math.max(0, n - 1));
-      else if (key.pageUp) setScroll((n) => Math.min(maxScroll, n + streamRows));
-      else if (key.pageDown) setScroll((n) => Math.max(0, n - streamRows));
+      } else if (input === "s") {
+        setPickIdx(0);
+        setMode("pick");
+      } else if (key.downArrow) setScroll((n) => Math.min(maxScroll, n + 1));
+      else if (key.upArrow) setScroll((n) => Math.max(0, n - 1));
+      else if (key.pageDown) setScroll((n) => Math.min(maxScroll, n + streamRows));
+      else if (key.pageUp) setScroll((n) => Math.max(0, n - streamRows));
       else if (input === "c") {
-        const dump = visible.map(
+        const dump = visibleDesc.map(
           (e) => `[${new Date(e.at).toISOString()}] ${e.source.toUpperCase().padEnd(5)} ${e.decision.padEnd(6)} ${e.tool.padEnd(16)} ${e.permission.padEnd(5)} ${e.evalMs != null ? String(e.evalMs).padStart(5) + "ms " : "        "}${(e.agent ?? "-").padEnd(14)} ${e.session ? e.session.slice(0, 8) : "-       "} ${e.detail}`
         ).join("\n");
+        let via = "file";
         try {
           mkdirSync3(dirname(DUMP), { recursive: true });
           writeFileSync3(DUMP, dump + "\n");
         } catch {
         }
-        oscCopy(dump);
-        setToast({ msg: `copied ${visible.length} lines \u2192 clipboard + ${DUMP}`, until: Date.now() + 4e3 });
+        via = copyToClipboard(dump);
+        setToast({ msg: `copied ${visibleDesc.length} lines via ${via} + ${DUMP}`, until: Date.now() + 5e3 });
       }
     },
     { isActive: active2 }
   );
   const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  void sessionDot;
   if (s === null && localOn === null) {
     return /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
       " connecting\u2026"
     ] });
   }
+  const titleBar = /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
+    /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
+    backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " }),
+    toast && nowMs < toast.until ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: ` ${toast.msg} ` }) : null
+  ] });
+  if (mode === "detail" && detail) {
+    const d = detailEntries;
+    const allow = d.filter((e) => e.decision === "ALLOW").length;
+    const deny = d.length - allow;
+    const dlpN = d.filter((e) => e.dlp).length;
+    const evals = d.filter((e) => e.evalMs != null).map((e) => e.evalMs);
+    const evalAvg = evals.length ? Math.round(evals.reduce((a, b) => a + b, 0) / evals.length) : null;
+    const tCounts = /* @__PURE__ */ new Map();
+    const pCounts = /* @__PURE__ */ new Map();
+    for (const e of d) {
+      tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
+      if (e.permission) pCounts.set(e.permission, (pCounts.get(e.permission) ?? 0) + 1);
+    }
+    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
+    const perms = [...pCounts.entries()].sort((a, b) => b[1] - a[1]);
+    const first = d[d.length - 1]?.at;
+    const last = d[0]?.at;
+    const tlRows = Math.max(4, rows - 10);
+    const maxD = Math.max(0, d.length - tlRows);
+    const dScroll = Math.min(detailScroll, maxD);
+    const tl = d.slice(dScroll, dScroll + tlRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: ` SESSION ${detail.id.slice(0, 8)} ` }),
+        /* @__PURE__ */ jsx2(Text2, { color: detail.source === "local" ? theme.ok : "#4f6db8", children: " " + detail.source.toUpperCase() }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: "  " + truncate2(detail.isMe ? detail.agent + " (this machine)" : detail.agent, 34) }),
+        detail.trust != null ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  trust ${detail.trust}/100` }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: d.length }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: allow }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
+        /* @__PURE__ */ jsx2(Text2, { color: deny ? theme.bad : theme.dim, bold: deny > 0, children: deny }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+        /* @__PURE__ */ jsx2(Text2, { color: dlpN ? theme.bad : theme.dim, children: dlpN }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 avg eval " }),
+        /* @__PURE__ */ jsx2(Text2, { children: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 first " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 last " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 tools " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: top.map(([t, c2]) => `${t}\xD7${c2}`).join("  ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perms " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
+        tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
+        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e }, e.id))
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
-    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
-      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " }),
-      toast && nowMs < toast.until ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: ` ${toast.msg} ` }) : null
-    ] }),
+    titleBar,
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
@@ -7382,7 +7553,7 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ghost " }),
       /* @__PURE__ */ jsx2(Text2, { color: gh?.mode === "on" ? theme.ok : theme.dim, children: gh?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sess " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${localSessList.length}loc ${sessCounts?.active ?? 0}\u25B2${sessCounts?.idle ?? 0}\u25CC` }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${combinedSess.length} (${sessCounts?.active ?? 0} live)` }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 hooks " }),
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
@@ -7411,7 +7582,7 @@ function LivePanel({ active: active2 }) {
           /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${(dl?.patterns ?? []).length} builtin \xB7 ${(dl?.custom ?? []).length} custom` })
         ] }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "          no dlp hits in last 7 days" }),
+        dlpBars.length ? dlpBars.map((d2) => /* @__PURE__ */ jsx2(HBar, { label: truncate2(d2.pattern, 10), value: d2.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d2.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "          no dlp hits in last 7 days" }),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "GUARD".padEnd(10) }),
           ring ? /* @__PURE__ */ jsxs2(Text2, { color: theme.ok, children: [
@@ -7421,48 +7592,28 @@ function LivePanel({ active: active2 }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: `${localSessList.length} local \xB7 ${sessCounts?.active ?? 0} cloud`, width: colW }),
-        localSessList.length === 0 && sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
-        localSessList.slice(0, Math.max(1, colH - 2)).map(([id, v]) => {
-          const freshDot = nowMs - v.lastAt < 9e4;
-          const isMe = ring?.session === id;
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: freshDot ? theme.ok : theme.dim, children: [
-              freshDot ? "\u25CF" : "\u25CB",
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: mode === "pick" ? "\u2191\u2193 pick \xB7 enter open" : `${combinedSess.length} \xB7 s = inspect`, width: colW }),
+        pickable.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        pickable.map((r, i) => {
+          const freshDot = nowMs - r.lastAt < 9e4;
+          const sel = mode === "pick" && i === pickIdx;
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel || r.isMe, children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : freshDot ? theme.ok : theme.dim, children: [
+              sel ? "\u25B8" : freshDot ? "\u25CF" : "\u25CB",
               " "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "LOC " }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: isMe, children: truncate2(isMe ? "this machine" : v.agent, 12).padEnd(13) }),
+            /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate2(r.isMe ? "this machine" : r.agent, 12).padEnd(13) }),
             /* @__PURE__ */ jsxs2(Text2, { children: [
-              String(v.calls).padStart(4),
+              String(r.calls).padStart(4),
               "c "
             ] }),
-            /* @__PURE__ */ jsxs2(Text2, { color: v.denies ? theme.bad : theme.dim, children: [
-              String(v.denies).padStart(3),
+            /* @__PURE__ */ jsxs2(Text2, { color: r.denies ? theme.bad : theme.dim, children: [
+              String(r.denies).padStart(3),
               "d "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(v.lastAt) })
-          ] }, id);
-        }),
-        sess.slice(0, Math.max(0, colH - 1 - Math.min(localSessList.length, Math.max(1, colH - 2)))).map((a) => {
-          const dot = sessionDot(a.status);
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
-              dot.ch,
-              " "
-            ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: "#4f6db8", children: "CLD " }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(a.agent_name ?? a.session_id, 12).padEnd(13) }),
-            /* @__PURE__ */ jsxs2(Text2, { children: [
-              String(a.total_calls).padStart(4),
-              "c "
-            ] }),
-            /* @__PURE__ */ jsxs2(Text2, { color: a.denied_calls ? theme.bad : theme.dim, children: [
-              String(a.denied_calls).padStart(3),
-              "d "
-            ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `t${a.trust_score} ` + ago(a.last_seen_at) })
-          ] }, a.session_id);
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (r.trust != null ? `t${r.trust} ` : "") + ago(r.lastAt) })
+          ] }, r.id);
         })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, overflow: "hidden", children: [
@@ -7481,7 +7632,7 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25B2${clampedScroll} scrolled` : " \xB7 following"} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 c copy`,
+        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 c copy \xB7 s sessions`,
         width: innerW
       }
     ),
@@ -7494,28 +7645,12 @@ function LivePanel({ active: active2 }) {
         spin,
         " awaiting traffic\u2026"
       ] }) : null,
-      windowed.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-          "[",
-          hhmmss(e.at),
-          " "
-        ] }),
-        /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
-        /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(e.tool, 12).padEnd(13) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
-        /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate2(e.agent ?? "-", 11).padEnd(12) }),
-        e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-        e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate2(e.rule, 14) + " " }) : null,
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
-      ] }, e.id))
+      windowed.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld buffered \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " f filter \xB7 \u2191\u2193 scroll \xB7 c copy \xB7 esc menu \xB7 q quit " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " f filter \xB7 s sessions \xB7 c copy \xB7 esc menu \xB7 q quit " })
     ] })
   ] });
 }

package/dist/tui/index.js

@@ -126,6 +126,7 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
+import { spawnSync } from "child_process";
 import { closeSync, mkdirSync, openSync, readSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname, join as join2 } from "path";
@@ -465,8 +466,21 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
-function oscCopy(text) {
+function copyToClipboard(text) {
+  const tools = [
+    ["wl-copy", []],
+    ["xclip", ["-selection", "clipboard"]],
+    ["xsel", ["--clipboard", "--input"]]
+  ];
+  for (const [cmd, args] of tools) {
+    try {
+      const r = spawnSync(cmd, args, { input: text, timeout: 2e3 });
+      if (r.status === 0) return cmd;
+    } catch {
+    }
+  }
   process.stdout.write(`\x1B]52;c;${Buffer.from(text, "utf-8").toString("base64")}\x07`);
+  return "osc52";
 }
 function cloudItem(e) {
   return {
@@ -532,6 +546,25 @@ function PaneTitle({ label, extra, width }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
   ] });
 }
+function StreamLine({ e }) {
+  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
+      "[",
+      hhmmss(e.at),
+      " "
+    ] }),
+    /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
+    /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
+    /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
+    e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
+    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
+  ] });
+}
 var FILTERS = ["all", "local", "cloud"];
 function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
@@ -545,6 +578,11 @@ function LivePanel({ active: active2 }) {
   const [filter, setFilter] = useState2("all");
   const [scroll, setScroll] = useState2(0);
   const [toast, setToast] = useState2(null);
+  const [mode, setMode] = useState2("stream");
+  const [pickIdx, setPickIdx] = useState2(0);
+  const [detail, setDetail] = useState2(null);
+  const [detailCloud, setDetailCloud] = useState2([]);
+  const [detailScroll, setDetailScroll] = useState2(0);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -638,7 +676,8 @@ function LivePanel({ active: active2 }) {
       if (fresh.length) setCloudBuf((prev) => [...prev, ...fresh.map(cloudItem).sort((a, b) => a.at - b.at)].slice(-400));
       const denies = fresh.filter((e) => e.decision !== "ALLOW").length;
       if (firstLoad) pushLog(`cloud link up \xB7 api ${ms}ms \xB7 ${fresh.length} calls`);
-      else pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : fresh.length ? "warn" : "ok");
+      else if (fresh.length) pushLog(`api ${ms}ms \xB7 +${fresh.length} cloud${denies ? ` \xB7 ${denies} DENIED` : ""}`, denies ? "bad" : "warn");
+      else pushLog(`api ${ms}ms \xB7 idle`, "ok");
     } catch (e) {
       onApiError(e);
     }
@@ -685,6 +724,19 @@ function LivePanel({ active: active2 }) {
   usePoll(() => {
     if (!paused()) guard.reload();
   }, 6e4, active2);
+  useEffect2(() => {
+    if (!detail) return;
+    setDetailCloud([]);
+    setDetailScroll(0);
+    let alive = true;
+    api.audit.list({ session_id: detail.id, limit: 100 }).then((r) => {
+      if (alive) setDetailCloud(r.entries.map(cloudItem));
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [detail]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2) return;
@@ -699,12 +751,13 @@ function LivePanel({ active: active2 }) {
   const nowMs = Date.now();
   const mergedAll = [...cloudBuf, ...localBuf].sort((a, b) => a.at - b.at);
   const filtered = filter === "all" ? mergedAll : mergedAll.filter((e) => e.source === filter);
-  const visible = filtered.slice(-STREAM_KEEP);
+  const visibleDesc = filtered.slice(-STREAM_KEEP).reverse();
   const points = tsData?.timeseries ?? [];
+  const nowMin = Math.floor(nowMs / 6e4);
   const minuteCounts = new Array(60).fill(0);
   const minuteHot = new Array(60).fill(false);
   for (const e of mergedAll) {
-    const idx = 59 - Math.floor((nowMs - e.at) / 6e4);
+    const idx = 59 - (nowMin - Math.floor(e.at / 6e4));
     if (idx >= 0 && idx < 60) {
       minuteCounts[idx]++;
       if (e.decision !== "ALLOW") minuteHot[idx] = true;
@@ -720,8 +773,8 @@ function LivePanel({ active: active2 }) {
   const minuteNow = minuteCounts[59] ?? 0;
   const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
   const maxDlpBar = dlpBars[0]?.count ?? 1;
-  const denials = mergedAll.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denials[denials.length - 1];
+  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denialsAll[denialsAll.length - 1];
   const toolCounts = /* @__PURE__ */ new Map();
   for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
   const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
@@ -742,7 +795,19 @@ function LivePanel({ active: active2 }) {
     if (e.agent) cur.agent = e.agent;
     localSess.set(e.session, cur);
   }
-  const localSessList = [...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt);
+  const combinedSess = [
+    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, lastAt: v.lastAt, isMe: ring?.session === id })),
+    ...sess.filter((a) => !localSess.has(a.session_id)).map((a) => ({
+      source: "cloud",
+      id: a.session_id,
+      agent: a.agent_name ?? a.session_id,
+      calls: a.total_calls,
+      denies: a.denied_calls,
+      lastAt: Date.parse(a.last_seen_at),
+      trust: a.trust_score,
+      isMe: false
+    }))
+  ];
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
   const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
@@ -750,48 +815,154 @@ function LivePanel({ active: active2 }) {
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
-  const maxScroll = Math.max(0, visible.length - streamRows);
+  const pickable = combinedSess.slice(0, colH - 1);
+  const maxScroll = Math.max(0, visibleDesc.length - streamRows);
   const clampedScroll = Math.min(scroll, maxScroll);
-  const start = Math.max(0, visible.length - streamRows - clampedScroll);
-  const windowed = visible.slice(start, start + streamRows);
+  const windowed = visibleDesc.slice(clampedScroll, clampedScroll + streamRows);
+  const detailEntries = detail ? (() => {
+    const seen = /* @__PURE__ */ new Set();
+    const all = [];
+    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === detail.id)]) {
+      const key = `${e.at}:${e.tool}:${e.decision}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      all.push(e);
+    }
+    return all.sort((a, b) => b.at - a.at);
+  })() : [];
   useInput(
     (input, key) => {
+      if (mode === "detail") {
+        const maxD = Math.max(0, detailEntries.length - (rows - 10));
+        if (key.leftArrow) {
+          setMode("stream");
+          setDetail(null);
+        } else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        return;
+      }
+      if (mode === "pick") {
+        if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPickIdx((n) => Math.min(pickable.length - 1, n + 1));
+        else if (key.return) {
+          const row = pickable[pickIdx];
+          if (row) {
+            setDetail(row);
+            setMode("detail");
+          }
+        } else if (input === "s" || key.leftArrow) setMode("stream");
+        return;
+      }
       if (input === "f") {
         setFilter((f) => FILTERS[(FILTERS.indexOf(f) + 1) % FILTERS.length]);
         setScroll(0);
-      } else if (key.upArrow) setScroll((n) => Math.min(maxScroll, n + 1));
-      else if (key.downArrow) setScroll((n) => Math.max(0, n - 1));
-      else if (key.pageUp) setScroll((n) => Math.min(maxScroll, n + streamRows));
-      else if (key.pageDown) setScroll((n) => Math.max(0, n - streamRows));
+      } else if (input === "s") {
+        setPickIdx(0);
+        setMode("pick");
+      } else if (key.downArrow) setScroll((n) => Math.min(maxScroll, n + 1));
+      else if (key.upArrow) setScroll((n) => Math.max(0, n - 1));
+      else if (key.pageDown) setScroll((n) => Math.min(maxScroll, n + streamRows));
+      else if (key.pageUp) setScroll((n) => Math.max(0, n - streamRows));
       else if (input === "c") {
-        const dump = visible.map(
+        const dump = visibleDesc.map(
           (e) => `[${new Date(e.at).toISOString()}] ${e.source.toUpperCase().padEnd(5)} ${e.decision.padEnd(6)} ${e.tool.padEnd(16)} ${e.permission.padEnd(5)} ${e.evalMs != null ? String(e.evalMs).padStart(5) + "ms " : "        "}${(e.agent ?? "-").padEnd(14)} ${e.session ? e.session.slice(0, 8) : "-       "} ${e.detail}`
         ).join("\n");
+        let via = "file";
         try {
           mkdirSync(dirname(DUMP), { recursive: true });
           writeFileSync(DUMP, dump + "\n");
         } catch {
         }
-        oscCopy(dump);
-        setToast({ msg: `copied ${visible.length} lines \u2192 clipboard + ${DUMP}`, until: Date.now() + 4e3 });
+        via = copyToClipboard(dump);
+        setToast({ msg: `copied ${visibleDesc.length} lines via ${via} + ${DUMP}`, until: Date.now() + 5e3 });
       }
     },
     { isActive: active2 }
   );
   const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  void sessionDot;
   if (s === null && localOn === null) {
     return /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
       " connecting\u2026"
     ] });
   }
+  const titleBar = /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
+    /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
+    backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " }),
+    toast && nowMs < toast.until ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: ` ${toast.msg} ` }) : null
+  ] });
+  if (mode === "detail" && detail) {
+    const d = detailEntries;
+    const allow = d.filter((e) => e.decision === "ALLOW").length;
+    const deny = d.length - allow;
+    const dlpN = d.filter((e) => e.dlp).length;
+    const evals = d.filter((e) => e.evalMs != null).map((e) => e.evalMs);
+    const evalAvg = evals.length ? Math.round(evals.reduce((a, b) => a + b, 0) / evals.length) : null;
+    const tCounts = /* @__PURE__ */ new Map();
+    const pCounts = /* @__PURE__ */ new Map();
+    for (const e of d) {
+      tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
+      if (e.permission) pCounts.set(e.permission, (pCounts.get(e.permission) ?? 0) + 1);
+    }
+    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
+    const perms = [...pCounts.entries()].sort((a, b) => b[1] - a[1]);
+    const first = d[d.length - 1]?.at;
+    const last = d[0]?.at;
+    const tlRows = Math.max(4, rows - 10);
+    const maxD = Math.max(0, d.length - tlRows);
+    const dScroll = Math.min(detailScroll, maxD);
+    const tl = d.slice(dScroll, dScroll + tlRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: ` SESSION ${detail.id.slice(0, 8)} ` }),
+        /* @__PURE__ */ jsx2(Text2, { color: detail.source === "local" ? theme.ok : "#4f6db8", children: " " + detail.source.toUpperCase() }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: "  " + truncate(detail.isMe ? detail.agent + " (this machine)" : detail.agent, 34) }),
+        detail.trust != null ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  trust ${detail.trust}/100` }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: d.length }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: allow }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
+        /* @__PURE__ */ jsx2(Text2, { color: deny ? theme.bad : theme.dim, bold: deny > 0, children: deny }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+        /* @__PURE__ */ jsx2(Text2, { color: dlpN ? theme.bad : theme.dim, children: dlpN }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 avg eval " }),
+        /* @__PURE__ */ jsx2(Text2, { children: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 first " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 last " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 tools " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: top.map(([t, c2]) => `${t}\xD7${c2}`).join("  ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perms " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
+        tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
+        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e }, e.id))
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
-    /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#1432A0", color: "#AAC8FA", bold: true, children: " SOLONGATE LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
-      backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " }),
-      toast && nowMs < toast.until ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: ` ${toast.msg} ` }) : null
-    ] }),
+    titleBar,
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
       /* @__PURE__ */ jsx2(Text2, { bold: true, children: s ? s.total_calls : "\xB7\xB7\xB7\xB7" }),
@@ -808,7 +979,7 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ghost " }),
       /* @__PURE__ */ jsx2(Text2, { color: gh?.mode === "on" ? theme.ok : theme.dim, children: gh?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sess " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${localSessList.length}loc ${sessCounts?.active ?? 0}\u25B2${sessCounts?.idle ?? 0}\u25CC` }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${combinedSess.length} (${sessCounts?.active ?? 0} live)` }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 hooks " }),
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
@@ -837,7 +1008,7 @@ function LivePanel({ active: active2 }) {
           /* @__PURE__ */ jsx2(Text2, { color: dl?.mode === "block" ? theme.ok : dl?.mode === "detect" ? theme.warn : theme.dim, children: (dl?.mode ?? "?").padEnd(7) }),
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${(dl?.patterns ?? []).length} builtin \xB7 ${(dl?.custom ?? []).length} custom` })
         ] }),
-        dlpBars.length ? dlpBars.map((d) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d.pattern, 10), value: d.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "          no dlp hits in last 7 days" }),
+        dlpBars.length ? dlpBars.map((d2) => /* @__PURE__ */ jsx2(HBar, { label: truncate(d2.pattern, 10), value: d2.count, max: maxDlpBar, width: Math.max(6, colW - 16), color: theme.bad }, d2.pattern)) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "          no dlp hits in last 7 days" }),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "GUARD".padEnd(10) }),
           ring ? /* @__PURE__ */ jsxs2(Text2, { color: theme.ok, children: [
@@ -847,48 +1018,28 @@ function LivePanel({ active: active2 }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: `${localSessList.length} local \xB7 ${sessCounts?.active ?? 0} cloud`, width: colW }),
-        localSessList.length === 0 && sess.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
-        localSessList.slice(0, Math.max(1, colH - 2)).map(([id, v]) => {
-          const freshDot = nowMs - v.lastAt < 9e4;
-          const isMe = ring?.session === id;
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: freshDot ? theme.ok : theme.dim, children: [
-              freshDot ? "\u25CF" : "\u25CB",
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: mode === "pick" ? "\u2191\u2193 pick \xB7 enter open" : `${combinedSess.length} \xB7 s = inspect`, width: colW }),
+        pickable.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        pickable.map((r, i) => {
+          const freshDot = nowMs - r.lastAt < 9e4;
+          const sel = mode === "pick" && i === pickIdx;
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel || r.isMe, children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : freshDot ? theme.ok : theme.dim, children: [
+              sel ? "\u25B8" : freshDot ? "\u25CF" : "\u25CB",
               " "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "LOC " }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: isMe, children: truncate(isMe ? "this machine" : v.agent, 12).padEnd(13) }),
+            /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate(r.isMe ? "this machine" : r.agent, 12).padEnd(13) }),
             /* @__PURE__ */ jsxs2(Text2, { children: [
-              String(v.calls).padStart(4),
+              String(r.calls).padStart(4),
               "c "
             ] }),
-            /* @__PURE__ */ jsxs2(Text2, { color: v.denies ? theme.bad : theme.dim, children: [
-              String(v.denies).padStart(3),
+            /* @__PURE__ */ jsxs2(Text2, { color: r.denies ? theme.bad : theme.dim, children: [
+              String(r.denies).padStart(3),
               "d "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(v.lastAt) })
-          ] }, id);
-        }),
-        sess.slice(0, Math.max(0, colH - 1 - Math.min(localSessList.length, Math.max(1, colH - 2)))).map((a) => {
-          const dot = sessionDot(a.status);
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
-              dot.ch,
-              " "
-            ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: "#4f6db8", children: "CLD " }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(a.agent_name ?? a.session_id, 12).padEnd(13) }),
-            /* @__PURE__ */ jsxs2(Text2, { children: [
-              String(a.total_calls).padStart(4),
-              "c "
-            ] }),
-            /* @__PURE__ */ jsxs2(Text2, { color: a.denied_calls ? theme.bad : theme.dim, children: [
-              String(a.denied_calls).padStart(3),
-              "d "
-            ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `t${a.trust_score} ` + ago(a.last_seen_at) })
-          ] }, a.session_id);
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (r.trust != null ? `t${r.trust} ` : "") + ago(r.lastAt) })
+          ] }, r.id);
         })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, overflow: "hidden", children: [
@@ -907,7 +1058,7 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25B2${clampedScroll} scrolled` : " \xB7 following"} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 c copy`,
+        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 c copy \xB7 s sessions`,
         width: innerW
       }
     ),
@@ -920,28 +1071,12 @@ function LivePanel({ active: active2 }) {
         spin,
         " awaiting traffic\u2026"
       ] }) : null,
-      windowed.map((e) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-          "[",
-          hhmmss(e.at),
-          " "
-        ] }),
-        /* @__PURE__ */ jsx2(Text2, { color: e.source === "local" ? theme.ok : "#4f6db8", children: e.source === "local" ? "LOC" : "CLD" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
-        /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
-        /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
-        e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-        e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
-      ] }, e.id))
+      windowed.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld buffered \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " f filter \xB7 \u2191\u2193 scroll \xB7 c copy \xB7 esc menu \xB7 q quit " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " f filter \xB7 s sessions \xB7 c copy \xB7 esc menu \xB7 q quit " })
     ] })
   ] });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {