@solongate/proxy 0.73.0 → 0.75.0

package/dist/index.js

@@ -7030,11 +7030,12 @@ var init_hooks = __esm({
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
+import TextInput from "ink-text-input";
 import { closeSync, openSync, readSync, statSync } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join5 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
-import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
@@ -7059,7 +7060,6 @@ function cloudItem(e) {
     permission: (e.permission ?? "").slice(0, 4),
     detail: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " "),
     dlp: !!e.dlp_matches?.length,
-    burst: !!e.rate_limit_burst,
     source: "cloud",
     session: e.session_id ?? void 0,
     agent: e.agent_name ?? void 0,
@@ -7115,12 +7115,6 @@ function PaneTitle({ label, extra, width: width2 }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width2 - used)) })
   ] });
 }
-function Stat({ label, value, color }) {
-  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", marginRight: 3, children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label }),
-    /* @__PURE__ */ jsx2(Text2, { bold: true, color, children: String(value) })
-  ] });
-}
 function StreamLine({ e, loc }) {
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
     /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
@@ -7136,14 +7130,12 @@ function StreamLine({ e, loc }) {
     /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate2(e.agent ?? "-", 11).padEnd(12) }),
     e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-    e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "BURST " }) : null,
     e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate2(e.rule, 14) + " " }) : null,
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
   ] });
 }
 function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
-  const [tsData, setTsData] = useState2(null);
   const [lat, setLat] = useState2([]);
   const [cloudBuf, setCloudBuf] = useState2([]);
   const [localBuf, setLocalBuf] = useState2([]);
@@ -7151,12 +7143,14 @@ function LivePanel({ active: active2 }) {
   const [ring, setRing] = useState2(null);
   const [log6, setLog] = useState2([]);
   const [filter, setFilter] = useState2("all");
+  const [search, setSearch] = useState2("");
+  const [editingSearch, setEditingSearch] = useState2(false);
   const [scroll, setScroll] = useState2(0);
   const [mode, setMode] = useState2("stream");
-  const [sessFilter, setSessFilter] = useState2("all");
   const [pickIdx, setPickIdx] = useState2(0);
+  const [detail, setDetail] = useState2(null);
   const [detailCloud, setDetailCloud] = useState2([]);
-  const [tlScroll, setTlScroll] = useState2(0);
+  const [detailScroll, setDetailScroll] = useState2(0);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -7201,7 +7195,6 @@ function LivePanel({ active: active2 }) {
           permission: (j.permission ?? "").slice(0, 4),
           detail: (j.arguments ? JSON.stringify(j.arguments) : j.reason ?? "").replace(/\s+/g, " "),
           dlp: !!j.dlp,
-          burst: !!j.rate_limit_burst,
           source: "local",
           session: j.session_id,
           agent: j.agent_name,
@@ -7271,41 +7264,42 @@ function LivePanel({ active: active2 }) {
       onApiError(e);
     }
   }, [onApiError]);
-  const pollSlow = useCallback2(async () => {
-    if (paused()) return;
-    try {
-      const td = await api.stats.timeseries({ period: "24h" });
-      if (!frozenRef.current) setTsData(td);
-    } catch (e) {
-      onApiError(e);
-    }
-  }, [onApiError]);
   useEffect2(() => {
     if (!active2) return;
     void pollFeed();
     void pollMedium();
-    void pollSlow();
-    const t1 = setInterval(() => void pollFeed(), 4e3);
-    const t2 = setInterval(() => void pollMedium(), 1e4);
-    const t3 = setInterval(() => void pollSlow(), 3e4);
+    const t1 = setInterval(() => void pollFeed(), 3e3);
+    const t2 = setInterval(() => void pollMedium(), 8e3);
     return () => {
       clearInterval(t1);
       clearInterval(t2);
-      clearInterval(t3);
     };
-  }, [active2, pollFeed, pollMedium, pollSlow]);
+  }, [active2, pollFeed, pollMedium]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
   const guard = useLoader(() => api.settings.getGuardStatus());
   usePoll(() => {
     if (!paused()) sessions.reload();
-  }, 1e4, active2);
+  }, 8e3, active2);
   usePoll(() => {
     if (!paused()) insights.reload();
-  }, 3e4, active2);
+  }, 2e4, active2);
   usePoll(() => {
     if (!paused()) guard.reload();
   }, 6e4, active2);
+  useEffect2(() => {
+    if (!detail) return;
+    setDetailCloud([]);
+    setDetailScroll(0);
+    let alive = true;
+    api.audit.list({ session_id: detail.id, limit: 100 }).then((r) => {
+      if (alive) setDetailCloud(r.entries.map(cloudItem));
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [detail]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2 || frozen) return;
@@ -7325,68 +7319,65 @@ function LivePanel({ active: active2 }) {
   }
   const cloudDeduped = cloudBuf.filter((e) => !localKeys.has(`${e.tool}|${e.decision}|${Math.round(e.at / 6e4)}`));
   const mergedAll = [...cloudDeduped, ...localBuf].sort((a, b) => a.at - b.at);
+  const nowSlot = Math.floor(nowMs / 1e4);
+  const traffic = new Array(60).fill(0);
+  const trafficHot = new Array(60).fill(false);
+  for (const e of mergedAll) {
+    const idx = 59 - (nowSlot - Math.floor(e.at / 1e4));
+    if (idx >= 0 && idx < 60) {
+      traffic[idx]++;
+      if (e.decision !== "ALLOW") trafficHot[idx] = true;
+    }
+  }
+  const trafficLabel = "calls/10s \xB7 last 10m \xB7 live";
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const gh = ins.layers?.ghost;
+  const minuteNow = mergedAll.filter((e) => nowMs - e.at < 6e4).length;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
+  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denialsAll[denialsAll.length - 1];
+  const toolCounts = /* @__PURE__ */ new Map();
+  for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
+  const latNow = lat[lat.length - 1] ?? 0;
+  const sortedLat = [...lat].sort((a, b) => a - b);
+  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
+  const latHotAt = Math.max(2e3, latMed * 2.5);
+  const backingOff = Date.now() < pausedUntil.current;
+  const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
+  const sessCounts = sessions.data?.counts;
   const localSess = /* @__PURE__ */ new Map();
   for (const e of localBuf) {
     if (!e.session) continue;
-    const cur = localSess.get(e.session) ?? { agent: e.agent ?? "local agent", calls: 0, denies: 0, dlp: 0, lastAt: 0 };
+    const cur = localSess.get(e.session) ?? { agent: e.agent ?? "local agent", calls: 0, denies: 0, lastAt: 0 };
     cur.calls++;
     if (e.decision !== "ALLOW") cur.denies++;
-    if (e.dlp) cur.dlp++;
     cur.lastAt = Math.max(cur.lastAt, e.at);
     if (e.agent) cur.agent = e.agent;
     localSess.set(e.session, cur);
   }
-  const combinedSessAll = [
-    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, dlp: v.dlp, lastAt: v.lastAt, isMe: ring?.session === id })),
-    ...(sessions.data?.agents ?? []).filter((a) => !localSess.has(a.session_id)).sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at)).map((a) => ({
+  const combinedSess = [
+    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, lastAt: v.lastAt, isMe: ring?.session === id })),
+    ...sess.filter((a) => !localSess.has(a.session_id)).map((a) => ({
       source: "cloud",
       id: a.session_id,
       agent: a.agent_name ?? a.session_id,
       calls: a.total_calls,
       denies: a.denied_calls,
-      dlp: a.dlp_events,
       lastAt: Date.parse(a.last_seen_at),
       trust: a.trust_score,
       isMe: false
     }))
   ];
-  const combinedSess = sessFilter === "all" ? combinedSessAll : combinedSessAll.filter((r) => sessStatus(r.lastAt, nowMs) === sessFilter);
   const localSessIds = new Set(localSess.keys());
   if (ring?.session) localSessIds.add(ring.session);
   const isLoc = (e) => e.source === "local" || !!e.session && localSessIds.has(e.session);
-  const filtered = filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e));
+  const q = search.trim().toLowerCase();
+  const matches = (e) => !q || `${e.tool} ${e.agent ?? ""} ${e.decision} ${e.permission} ${e.rule ?? ""} ${e.detail}`.toLowerCase().includes(q);
+  const filtered = (filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e))).filter(matches);
   const visibleDesc = filtered.slice(-STREAM_KEEP).reverse();
-  const points = tsData?.timeseries ?? [];
-  const nowSlot = Math.floor(nowMs / 1e4);
-  const slotCounts = new Array(60).fill(0);
-  const slotHot = new Array(60).fill(false);
-  for (const e of mergedAll) {
-    const idx = 59 - (nowSlot - Math.floor(e.at / 1e4));
-    if (idx >= 0 && idx < 60) {
-      slotCounts[idx]++;
-      if (e.decision !== "ALLOW") slotHot[idx] = true;
-    }
-  }
-  const localTraffic = localOn === true && slotCounts.some((c2) => c2 > 0);
-  const traffic = localTraffic ? slotCounts : points.map((p) => p.total);
-  const trafficHot = localTraffic ? slotHot : points.map((p) => p.denied > 0);
-  const trafficLabel = localTraffic ? "calls/10s \xB7 last 10m" : "24h \xB7 cloud";
-  const rl = ins.layers?.rateLimit;
-  const dl = ins.layers?.dlp;
-  const gh = ins.layers?.ghost;
-  const minuteNow = mergedAll.filter((e) => nowMs - e.at < 6e4).length;
-  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
-  const maxDlpBar = dlpBars[0]?.count ?? 1;
-  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denialsAll[denialsAll.length - 1];
-  const toolCounts = /* @__PURE__ */ new Map();
-  for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
-  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const latNow = lat[lat.length - 1] ?? 0;
-  const sortedLat = [...lat].sort((a, b) => a - b);
-  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
-  const latHotAt = Math.max(2e3, latMed * 2.5);
-  const backingOff = Date.now() < pausedUntil.current;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
   const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
@@ -7394,29 +7385,18 @@ function LivePanel({ active: active2 }) {
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
+  const pickable = combinedSess.slice(0, colH - 1);
   const maxScroll = Math.max(0, visibleDesc.length - streamRows);
   const clampedScroll = Math.min(scroll, maxScroll);
   const windowed = visibleDesc.slice(clampedScroll, clampedScroll + streamRows);
-  const selIdx = Math.min(pickIdx, Math.max(0, combinedSess.length - 1));
-  const selected = combinedSess[selIdx];
-  useEffect2(() => {
-    if (mode !== "sessions" || !selected?.id) return;
-    setTlScroll(0);
-    const t = setTimeout(() => {
-      api.audit.list({ session_id: selected.id, limit: 100 }).then((r) => {
-        if (!frozenRef.current) setDetailCloud(r.entries.map(cloudItem));
-      }).catch(() => setDetailCloud([]));
-    }, 400);
-    return () => clearTimeout(t);
-  }, [mode, selected?.id]);
-  const detailEntries = selected ? (() => {
+  const detailEntries = detail ? (() => {
     const seen = /* @__PURE__ */ new Set();
     const all = [];
-    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === selected.id)]) {
+    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === detail.id)]) {
       const key = `${e.at}:${e.tool}:${e.decision}`;
       if (seen.has(key)) continue;
       seen.add(key);
-      all.push(e);
+      if (matches(e)) all.push(e);
     }
     return all.sort((a, b) => b.at - a.at);
   })() : [];
@@ -7427,17 +7407,31 @@ function LivePanel({ active: active2 }) {
         return;
       }
       if (frozen) return;
-      if (mode === "sessions") {
+      if (input === "/" && mode !== "pick") {
+        setEditingSearch(true);
+        return;
+      }
+      if (mode === "detail") {
+        const maxD = Math.max(0, detailEntries.length - (rows - 10));
         if (key.leftArrow) {
           setMode("stream");
-          setDetailCloud([]);
-        } else if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
-        else if (key.downArrow) setPickIdx((n) => Math.min(combinedSess.length - 1, n + 1));
-        else if (input === "f") {
-          setSessFilter((f) => SESS_FILTERS[(SESS_FILTERS.indexOf(f) + 1) % SESS_FILTERS.length]);
-          setPickIdx(0);
-        } else if (key.pageUp) setTlScroll((n) => Math.max(0, n - 10));
-        else if (key.pageDown) setTlScroll((n) => n + 10);
+          setDetail(null);
+        } else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        return;
+      }
+      if (mode === "pick") {
+        if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPickIdx((n) => Math.min(pickable.length - 1, n + 1));
+        else if (key.return) {
+          const row = pickable[pickIdx];
+          if (row) {
+            setDetail(row);
+            setMode("detail");
+          }
+        } else if (input === "s" || key.leftArrow) setMode("stream");
         return;
       }
       if (input === "f") {
@@ -7445,14 +7439,36 @@ function LivePanel({ active: active2 }) {
         setScroll(0);
       } else if (input === "s") {
         setPickIdx(0);
-        setMode("sessions");
+        setMode("pick");
       } else if (key.downArrow) setScroll((n) => Math.min(maxScroll, n + 1));
       else if (key.upArrow) setScroll((n) => Math.max(0, n - 1));
       else if (key.pageDown) setScroll((n) => Math.min(maxScroll, n + streamRows));
       else if (key.pageUp) setScroll((n) => Math.max(0, n - streamRows));
     },
-    { isActive: active2 }
+    { isActive: active2 && !editingSearch }
   );
+  const searchRow = editingSearch ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "search: " }),
+    /* @__PURE__ */ jsx2(
+      TextInput,
+      {
+        value: search,
+        onChange: (v) => {
+          setSearch(v);
+          setScroll(0);
+          setDetailScroll(0);
+        },
+        onSubmit: () => setEditingSearch(false)
+      }
+    ),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  (enter done \xB7 empty = clear)" })
+  ] }) : search ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "search: " }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: true, children: search }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  ${filtered.length} match \xB7 / edit` })
+  ] }) : null;
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  void sessionDot;
   if (s === null && localOn === null) {
     return /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
@@ -7464,89 +7480,70 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
     frozen ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
   ] });
-  if (mode === "sessions") {
-    const listW = Math.min(44, Math.floor(innerW * 0.38));
-    const detailW = innerW - listW - 2;
-    const bodyH = rows - 4;
-    const listRows = bodyH - 1;
+  if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
     const deny = d.length - allow;
     const dlpN = d.filter((e) => e.dlp).length;
-    const burstN = d.filter((e) => e.burst).length;
     const evals = d.filter((e) => e.evalMs != null).map((e) => e.evalMs);
     const evalAvg = evals.length ? Math.round(evals.reduce((a, b) => a + b, 0) / evals.length) : null;
     const tCounts = /* @__PURE__ */ new Map();
-    for (const e of d) tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
-    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+    const pCounts = /* @__PURE__ */ new Map();
+    for (const e of d) {
+      tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
+      if (e.permission) pCounts.set(e.permission, (pCounts.get(e.permission) ?? 0) + 1);
+    }
+    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
+    const perms = [...pCounts.entries()].sort((a, b) => b[1] - a[1]);
     const first = d[d.length - 1]?.at;
     const last = d[0]?.at;
-    const tlRows = Math.max(3, bodyH - 8);
-    const maxTl = Math.max(0, d.length - tlRows);
-    const tScroll = Math.min(tlScroll, maxTl);
-    const tl = d.slice(tScroll, tScroll + tlRows);
+    const tlRows = Math.max(4, rows - 10);
+    const maxD = Math.max(0, d.length - tlRows);
+    const dScroll = Math.min(detailScroll, maxD);
+    const tl = d.slice(dScroll, dScroll + tlRows);
     return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
       titleBar,
-      /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: `${combinedSess.length} shown \xB7 filter ${sessFilter} (f) \xB7 \u2191\u2193 select \xB7 PgUp/Dn timeline \xB7 \u2190 back`, width: innerW }),
-      /* @__PURE__ */ jsxs2(Box2, { height: bodyH, children: [
-        /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: listW, marginRight: 2, overflow: "hidden", children: [
-          combinedSess.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            "no sessions",
-            sessFilter !== "all" ? ` (${sessFilter})` : ""
-          ] }) : null,
-          combinedSess.slice(0, listRows).map((r, i) => {
-            const st = sessStatus(r.lastAt, nowMs);
-            const dot = st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
-            const sel = i === selIdx;
-            return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel, children: [
-              /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : dot.color, children: [
-                sel ? "\u25B8" : dot.ch,
-                " "
-              ] }),
-              /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
-              /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate2(r.isMe ? "this machine" : r.agent, 13).padEnd(14) }),
-              /* @__PURE__ */ jsxs2(Text2, { children: [
-                String(r.calls).padStart(4),
-                "c "
-              ] }),
-              /* @__PURE__ */ jsxs2(Text2, { color: r.denies ? theme.bad : theme.dim, children: [
-                String(r.denies).padStart(3),
-                "d "
-              ] }),
-              /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(r.lastAt) })
-            ] }, r.id);
-          })
-        ] }),
-        /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", width: detailW, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "select a session to see its run timeline" }) : /* @__PURE__ */ jsxs2(Fragment2, { children: [
-          /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsx2(Text2, { color: sessStatus(selected.lastAt, nowMs) === "active" ? theme.ok : theme.dim, children: sessStatus(selected.lastAt, nowMs) === "active" ? "\u25CF " : "\u25CB " }),
-            /* @__PURE__ */ jsx2(Text2, { bold: true, children: truncate2(selected.isMe ? selected.agent + " (this machine)" : selected.agent, 30) }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  " + selected.id })
-          ] }),
-          /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
-            /* @__PURE__ */ jsx2(Stat, { label: "Total", value: d.length }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Allowed", value: allow, color: theme.ok }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Denied", value: deny, color: deny ? theme.bad : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "DLP", value: dlpN, color: dlpN ? theme.bad : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Rate limit", value: burstN, color: burstN ? theme.warn : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Avg eval", value: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
-            selected.trust != null ? /* @__PURE__ */ jsx2(Stat, { label: "Trust", value: `${selected.trust}/100`, color: theme.accent }) : null
-          ] }),
-          /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: `first ${first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014"} \xB7 last ${last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014"} \xB7 tools ${top.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"}` }),
-          /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} events \xB7 newest first${tScroll ? ` \xB7 \u25BC${tScroll}` : ""}`, width: detailW }),
-          /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", overflow: "hidden", flexGrow: 1, children: [
-            tl.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-              spin,
-              " loading history\u2026"
-            ] }) : null,
-            tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
-          ] })
-        ] }) })
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: ` SESSION ${detail.id.slice(0, 8)} ` }),
+        /* @__PURE__ */ jsx2(Text2, { color: detail.source === "local" ? theme.ok : "#4f6db8", children: " " + detail.source.toUpperCase() }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: "  " + truncate2(detail.isMe ? detail.agent + " (this machine)" : detail.agent, 34) }),
+        detail.trust != null ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  trust ${detail.trust}/100` }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSIONS " }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${combinedSess.length} sessions \xB7 space copy-mode ` }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 f status \xB7 \u2190 back \xB7 esc menu " })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: d.length }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: allow }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
+        /* @__PURE__ */ jsx2(Text2, { color: deny ? theme.bad : theme.dim, bold: deny > 0, children: deny }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+        /* @__PURE__ */ jsx2(Text2, { color: dlpN ? theme.bad : theme.dim, children: dlpN }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 avg eval " }),
+        /* @__PURE__ */ jsx2(Text2, { children: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 first " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 last " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 tools " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: top.map(([t, c2]) => `${t}\xD7${c2}`).join("  ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perms " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 / search \xB7 \u2190 back`, width: innerW }),
+      searchRow,
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
+        tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
+        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
@@ -7568,7 +7565,7 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ghost " }),
       /* @__PURE__ */ jsx2(Text2, { color: gh?.mode === "on" ? theme.ok : theme.dim, children: gh?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sess " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: String(combinedSessAll.length) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${combinedSess.length} (${sessCounts?.active ?? 0} live)` }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 hooks " }),
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
@@ -7607,13 +7604,14 @@ function LivePanel({ active: active2 }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: "press s to inspect", width: colW }),
-        combinedSessAll.slice(0, colH - 1).map((r) => {
-          const st = sessStatus(r.lastAt, nowMs);
-          const dot = st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", bold: r.isMe, children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
-              dot.ch,
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: mode === "pick" ? "\u2191\u2193 pick \xB7 enter open" : `${combinedSess.length} \xB7 s = inspect`, width: colW }),
+        pickable.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        pickable.map((r, i) => {
+          const freshDot = nowMs - r.lastAt < 9e4;
+          const sel = mode === "pick" && i === pickIdx;
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel || r.isMe, children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : freshDot ? theme.ok : theme.dim, children: [
+              sel ? "\u25B8" : freshDot ? "\u25CF" : "\u25CB",
               " "
             ] }),
             /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
@@ -7626,7 +7624,7 @@ function LivePanel({ active: active2 }) {
               String(r.denies).padStart(3),
               "d "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(r.lastAt) })
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (r.trust != null ? `t${r.trust} ` : "") + ago(r.lastAt) })
           ] }, r.id);
         })
       ] }),
@@ -7646,11 +7644,12 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 s sessions`,
+        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 / search \xB7 \u2191\u2193 scroll \xB7 s sessions`,
         width: innerW
       }
     ),
     /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: streamRows, overflow: "hidden", children: [
+      searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dashboard \u2192 Settings \u2192 Local logs \xB7 hooks write ~/.solongate/local-logs \xB7 view: `solongate logs-server`" })
@@ -7663,12 +7662,12 @@ function LivePanel({ active: active2 }) {
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudDeduped.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " space copy-mode \xB7 f filter \xB7 s sessions \xB7 esc menu \xB7 q quit " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " space copy-mode \xB7 / search \xB7 f filter \xB7 s sessions \xB7 esc menu \xB7 q quit " })
     ] })
   ] });
 }
-var SPIN, BG, DIM_FLOOR, LOCAL_LOG, RING, STREAM_KEEP, hhmmss, fmtUp, FILTERS, SESS_FILTERS, sessStatus;
+var SPIN, BG, DIM_FLOOR, LOCAL_LOG, RING, STREAM_KEEP, hhmmss, fmtUp, FILTERS;
 var init_Live = __esm({
   "src/tui/panels/Live.tsx"() {
     "use strict";
@@ -7691,14 +7690,12 @@ var init_Live = __esm({
       return `${p(Math.floor(s / 3600))}:${p(Math.floor(s % 3600 / 60))}:${p(s % 60)}`;
     };
     FILTERS = ["all", "local", "cloud"];
-    SESS_FILTERS = ["all", "active", "idle", "ended"];
-    sessStatus = (lastAt, now) => now - lastAt < 9e4 ? "active" : now - lastAt < 3e5 ? "idle" : "ended";
   }
 });
 
 // src/tui/panels/Policies.tsx
 import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
-import TextInput from "ink-text-input";
+import TextInput2 from "ink-text-input";
 import { useEffect as useEffect3, useState as useState3 } from "react";
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 function ruleSummary(r) {
@@ -7887,7 +7884,7 @@ function PoliciesPanel({ focused }) {
       return /* @__PURE__ */ jsxs3(Box3, { children: [
         /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
         active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx3(
-          TextInput,
+          TextInput2,
           {
             value: editVal,
             onChange: setEditVal,
@@ -8083,7 +8080,7 @@ var init_RateLimit = __esm({
 
 // src/tui/panels/Dlp.tsx
 import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
-import TextInput2 from "ink-text-input";
+import TextInput3 from "ink-text-input";
 import { useEffect as useEffect5, useState as useState5 } from "react";
 import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 function DlpPanel({ focused }) {
@@ -8185,7 +8182,7 @@ function DlpPanel({ focused }) {
     adding ? /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, children: [
       /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "New pattern name: " : `Regex for "${newName}": ` }),
       adding === "name" ? /* @__PURE__ */ jsx5(
-        TextInput2,
+        TextInput3,
         {
           value: newName,
           onChange: setNewName,
@@ -8196,7 +8193,7 @@ function DlpPanel({ focused }) {
           }
         }
       ) : /* @__PURE__ */ jsx5(
-        TextInput2,
+        TextInput3,
         {
           value: newRe,
           onChange: setNewRe,
@@ -8309,7 +8306,7 @@ var init_Stats = __esm({
 
 // src/tui/panels/Audit.tsx
 import { Box as Box7, Text as Text7, useInput as useInput5 } from "ink";
-import TextInput3 from "ink-text-input";
+import TextInput4 from "ink-text-input";
 import { useState as useState6 } from "react";
 import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function AuditPanel({ active: active2, focused }) {
@@ -8426,7 +8423,7 @@ function AuditPanel({ active: active2, focused }) {
         ": "
       ] }),
       /* @__PURE__ */ jsx7(
-        TextInput3,
+        TextInput4,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
           onChange: editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch,

package/dist/tui/index.js

@@ -126,6 +126,7 @@ function KeyHints({ hints }) {
 
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
+import TextInput from "ink-text-input";
 import { closeSync, openSync, readSync, statSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
@@ -443,7 +444,7 @@ function usePoll(reload, intervalMs, enabled = true) {
 }
 
 // src/tui/panels/Live.tsx
-import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var BG = "#12234f";
 var DIM_FLOOR = "#233457";
@@ -483,7 +484,6 @@ function cloudItem(e) {
     permission: (e.permission ?? "").slice(0, 4),
     detail: (e.arguments_summary ? JSON.stringify(e.arguments_summary) : e.reason ?? "").replace(/\s+/g, " "),
     dlp: !!e.dlp_matches?.length,
-    burst: !!e.rate_limit_burst,
     source: "cloud",
     session: e.session_id ?? void 0,
     agent: e.agent_name ?? void 0,
@@ -539,12 +539,6 @@ function PaneTitle({ label, extra, width }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
   ] });
 }
-function Stat({ label, value, color }) {
-  return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", marginRight: 3, children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label }),
-    /* @__PURE__ */ jsx2(Text2, { bold: true, color, children: String(value) })
-  ] });
-}
 function StreamLine({ e, loc }) {
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
     /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
@@ -560,17 +554,13 @@ function StreamLine({ e, loc }) {
     /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
     e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "DLP! " }) : null,
-    e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "BURST " }) : null,
     e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
   ] });
 }
 var FILTERS = ["all", "local", "cloud"];
-var SESS_FILTERS = ["all", "active", "idle", "ended"];
-var sessStatus = (lastAt, now) => now - lastAt < 9e4 ? "active" : now - lastAt < 3e5 ? "idle" : "ended";
 function LivePanel({ active: active2 }) {
   const [s, setS] = useState2(null);
-  const [tsData, setTsData] = useState2(null);
   const [lat, setLat] = useState2([]);
   const [cloudBuf, setCloudBuf] = useState2([]);
   const [localBuf, setLocalBuf] = useState2([]);
@@ -578,12 +568,14 @@ function LivePanel({ active: active2 }) {
   const [ring, setRing] = useState2(null);
   const [log, setLog] = useState2([]);
   const [filter, setFilter] = useState2("all");
+  const [search, setSearch] = useState2("");
+  const [editingSearch, setEditingSearch] = useState2(false);
   const [scroll, setScroll] = useState2(0);
   const [mode, setMode] = useState2("stream");
-  const [sessFilter, setSessFilter] = useState2("all");
   const [pickIdx, setPickIdx] = useState2(0);
+  const [detail, setDetail] = useState2(null);
   const [detailCloud, setDetailCloud] = useState2([]);
-  const [tlScroll, setTlScroll] = useState2(0);
+  const [detailScroll, setDetailScroll] = useState2(0);
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -628,7 +620,6 @@ function LivePanel({ active: active2 }) {
           permission: (j.permission ?? "").slice(0, 4),
           detail: (j.arguments ? JSON.stringify(j.arguments) : j.reason ?? "").replace(/\s+/g, " "),
           dlp: !!j.dlp,
-          burst: !!j.rate_limit_burst,
           source: "local",
           session: j.session_id,
           agent: j.agent_name,
@@ -698,41 +689,42 @@ function LivePanel({ active: active2 }) {
       onApiError(e);
     }
   }, [onApiError]);
-  const pollSlow = useCallback2(async () => {
-    if (paused()) return;
-    try {
-      const td = await api.stats.timeseries({ period: "24h" });
-      if (!frozenRef.current) setTsData(td);
-    } catch (e) {
-      onApiError(e);
-    }
-  }, [onApiError]);
   useEffect2(() => {
     if (!active2) return;
     void pollFeed();
     void pollMedium();
-    void pollSlow();
-    const t1 = setInterval(() => void pollFeed(), 4e3);
-    const t2 = setInterval(() => void pollMedium(), 1e4);
-    const t3 = setInterval(() => void pollSlow(), 3e4);
+    const t1 = setInterval(() => void pollFeed(), 3e3);
+    const t2 = setInterval(() => void pollMedium(), 8e3);
     return () => {
       clearInterval(t1);
       clearInterval(t2);
-      clearInterval(t3);
     };
-  }, [active2, pollFeed, pollMedium, pollSlow]);
+  }, [active2, pollFeed, pollMedium]);
   const sessions = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
   const insights = useLoader(() => api.stats.securityInsights(7));
   const guard = useLoader(() => api.settings.getGuardStatus());
   usePoll(() => {
     if (!paused()) sessions.reload();
-  }, 1e4, active2);
+  }, 8e3, active2);
   usePoll(() => {
     if (!paused()) insights.reload();
-  }, 3e4, active2);
+  }, 2e4, active2);
   usePoll(() => {
     if (!paused()) guard.reload();
   }, 6e4, active2);
+  useEffect2(() => {
+    if (!detail) return;
+    setDetailCloud([]);
+    setDetailScroll(0);
+    let alive = true;
+    api.audit.list({ session_id: detail.id, limit: 100 }).then((r) => {
+      if (alive) setDetailCloud(r.entries.map(cloudItem));
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [detail]);
   const [tick, setTick] = useState2(0);
   useEffect2(() => {
     if (!active2 || frozen) return;
@@ -752,68 +744,65 @@ function LivePanel({ active: active2 }) {
   }
   const cloudDeduped = cloudBuf.filter((e) => !localKeys.has(`${e.tool}|${e.decision}|${Math.round(e.at / 6e4)}`));
   const mergedAll = [...cloudDeduped, ...localBuf].sort((a, b) => a.at - b.at);
+  const nowSlot = Math.floor(nowMs / 1e4);
+  const traffic = new Array(60).fill(0);
+  const trafficHot = new Array(60).fill(false);
+  for (const e of mergedAll) {
+    const idx = 59 - (nowSlot - Math.floor(e.at / 1e4));
+    if (idx >= 0 && idx < 60) {
+      traffic[idx]++;
+      if (e.decision !== "ALLOW") trafficHot[idx] = true;
+    }
+  }
+  const trafficLabel = "calls/10s \xB7 last 10m \xB7 live";
+  const rl = ins.layers?.rateLimit;
+  const dl = ins.layers?.dlp;
+  const gh = ins.layers?.ghost;
+  const minuteNow = mergedAll.filter((e) => nowMs - e.at < 6e4).length;
+  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
+  const maxDlpBar = dlpBars[0]?.count ?? 1;
+  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
+  const lastDeny = denialsAll[denialsAll.length - 1];
+  const toolCounts = /* @__PURE__ */ new Map();
+  for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
+  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
+  const latNow = lat[lat.length - 1] ?? 0;
+  const sortedLat = [...lat].sort((a, b) => a - b);
+  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
+  const latHotAt = Math.max(2e3, latMed * 2.5);
+  const backingOff = Date.now() < pausedUntil.current;
+  const sess = (sessions.data?.agents ?? []).slice().sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at));
+  const sessCounts = sessions.data?.counts;
   const localSess = /* @__PURE__ */ new Map();
   for (const e of localBuf) {
     if (!e.session) continue;
-    const cur = localSess.get(e.session) ?? { agent: e.agent ?? "local agent", calls: 0, denies: 0, dlp: 0, lastAt: 0 };
+    const cur = localSess.get(e.session) ?? { agent: e.agent ?? "local agent", calls: 0, denies: 0, lastAt: 0 };
     cur.calls++;
     if (e.decision !== "ALLOW") cur.denies++;
-    if (e.dlp) cur.dlp++;
     cur.lastAt = Math.max(cur.lastAt, e.at);
     if (e.agent) cur.agent = e.agent;
     localSess.set(e.session, cur);
   }
-  const combinedSessAll = [
-    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, dlp: v.dlp, lastAt: v.lastAt, isMe: ring?.session === id })),
-    ...(sessions.data?.agents ?? []).filter((a) => !localSess.has(a.session_id)).sort((a, b) => Date.parse(b.last_seen_at) - Date.parse(a.last_seen_at)).map((a) => ({
+  const combinedSess = [
+    ...[...localSess.entries()].sort((a, b) => b[1].lastAt - a[1].lastAt).map(([id, v]) => ({ source: "local", id, agent: v.agent, calls: v.calls, denies: v.denies, lastAt: v.lastAt, isMe: ring?.session === id })),
+    ...sess.filter((a) => !localSess.has(a.session_id)).map((a) => ({
       source: "cloud",
       id: a.session_id,
       agent: a.agent_name ?? a.session_id,
       calls: a.total_calls,
       denies: a.denied_calls,
-      dlp: a.dlp_events,
       lastAt: Date.parse(a.last_seen_at),
       trust: a.trust_score,
       isMe: false
     }))
   ];
-  const combinedSess = sessFilter === "all" ? combinedSessAll : combinedSessAll.filter((r) => sessStatus(r.lastAt, nowMs) === sessFilter);
   const localSessIds = new Set(localSess.keys());
   if (ring?.session) localSessIds.add(ring.session);
   const isLoc = (e) => e.source === "local" || !!e.session && localSessIds.has(e.session);
-  const filtered = filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e));
+  const q = search.trim().toLowerCase();
+  const matches = (e) => !q || `${e.tool} ${e.agent ?? ""} ${e.decision} ${e.permission} ${e.rule ?? ""} ${e.detail}`.toLowerCase().includes(q);
+  const filtered = (filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e))).filter(matches);
   const visibleDesc = filtered.slice(-STREAM_KEEP).reverse();
-  const points = tsData?.timeseries ?? [];
-  const nowSlot = Math.floor(nowMs / 1e4);
-  const slotCounts = new Array(60).fill(0);
-  const slotHot = new Array(60).fill(false);
-  for (const e of mergedAll) {
-    const idx = 59 - (nowSlot - Math.floor(e.at / 1e4));
-    if (idx >= 0 && idx < 60) {
-      slotCounts[idx]++;
-      if (e.decision !== "ALLOW") slotHot[idx] = true;
-    }
-  }
-  const localTraffic = localOn === true && slotCounts.some((c2) => c2 > 0);
-  const traffic = localTraffic ? slotCounts : points.map((p) => p.total);
-  const trafficHot = localTraffic ? slotHot : points.map((p) => p.denied > 0);
-  const trafficLabel = localTraffic ? "calls/10s \xB7 last 10m" : "24h \xB7 cloud";
-  const rl = ins.layers?.rateLimit;
-  const dl = ins.layers?.dlp;
-  const gh = ins.layers?.ghost;
-  const minuteNow = mergedAll.filter((e) => nowMs - e.at < 6e4).length;
-  const dlpBars = (ins.dlpByPattern ?? []).slice(0, 2);
-  const maxDlpBar = dlpBars[0]?.count ?? 1;
-  const denialsAll = mergedAll.filter((e) => e.decision !== "ALLOW");
-  const lastDeny = denialsAll[denialsAll.length - 1];
-  const toolCounts = /* @__PURE__ */ new Map();
-  for (const e of mergedAll) toolCounts.set(e.tool, (toolCounts.get(e.tool) ?? 0) + 1);
-  const topTools = [...toolCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
-  const latNow = lat[lat.length - 1] ?? 0;
-  const sortedLat = [...lat].sort((a, b) => a - b);
-  const latMed = sortedLat.length ? sortedLat[Math.floor(sortedLat.length / 2)] : 0;
-  const latHotAt = Math.max(2e3, latMed * 2.5);
-  const backingOff = Date.now() < pausedUntil.current;
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
   const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
@@ -821,29 +810,18 @@ function LivePanel({ active: active2 }) {
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
   const colW = Math.max(20, Math.floor((innerW - 4) / 3));
+  const pickable = combinedSess.slice(0, colH - 1);
   const maxScroll = Math.max(0, visibleDesc.length - streamRows);
   const clampedScroll = Math.min(scroll, maxScroll);
   const windowed = visibleDesc.slice(clampedScroll, clampedScroll + streamRows);
-  const selIdx = Math.min(pickIdx, Math.max(0, combinedSess.length - 1));
-  const selected = combinedSess[selIdx];
-  useEffect2(() => {
-    if (mode !== "sessions" || !selected?.id) return;
-    setTlScroll(0);
-    const t = setTimeout(() => {
-      api.audit.list({ session_id: selected.id, limit: 100 }).then((r) => {
-        if (!frozenRef.current) setDetailCloud(r.entries.map(cloudItem));
-      }).catch(() => setDetailCloud([]));
-    }, 400);
-    return () => clearTimeout(t);
-  }, [mode, selected?.id]);
-  const detailEntries = selected ? (() => {
+  const detailEntries = detail ? (() => {
     const seen = /* @__PURE__ */ new Set();
     const all = [];
-    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === selected.id)]) {
+    for (const e of [...detailCloud, ...mergedAll.filter((x) => x.session === detail.id)]) {
       const key = `${e.at}:${e.tool}:${e.decision}`;
       if (seen.has(key)) continue;
       seen.add(key);
-      all.push(e);
+      if (matches(e)) all.push(e);
     }
     return all.sort((a, b) => b.at - a.at);
   })() : [];
@@ -854,17 +832,31 @@ function LivePanel({ active: active2 }) {
         return;
       }
       if (frozen) return;
-      if (mode === "sessions") {
+      if (input === "/" && mode !== "pick") {
+        setEditingSearch(true);
+        return;
+      }
+      if (mode === "detail") {
+        const maxD = Math.max(0, detailEntries.length - (rows - 10));
         if (key.leftArrow) {
           setMode("stream");
-          setDetailCloud([]);
-        } else if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
-        else if (key.downArrow) setPickIdx((n) => Math.min(combinedSess.length - 1, n + 1));
-        else if (input === "f") {
-          setSessFilter((f) => SESS_FILTERS[(SESS_FILTERS.indexOf(f) + 1) % SESS_FILTERS.length]);
-          setPickIdx(0);
-        } else if (key.pageUp) setTlScroll((n) => Math.max(0, n - 10));
-        else if (key.pageDown) setTlScroll((n) => n + 10);
+          setDetail(null);
+        } else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        return;
+      }
+      if (mode === "pick") {
+        if (key.upArrow) setPickIdx((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setPickIdx((n) => Math.min(pickable.length - 1, n + 1));
+        else if (key.return) {
+          const row = pickable[pickIdx];
+          if (row) {
+            setDetail(row);
+            setMode("detail");
+          }
+        } else if (input === "s" || key.leftArrow) setMode("stream");
         return;
       }
       if (input === "f") {
@@ -872,14 +864,36 @@ function LivePanel({ active: active2 }) {
         setScroll(0);
       } else if (input === "s") {
         setPickIdx(0);
-        setMode("sessions");
+        setMode("pick");
       } else if (key.downArrow) setScroll((n) => Math.min(maxScroll, n + 1));
       else if (key.upArrow) setScroll((n) => Math.max(0, n - 1));
       else if (key.pageDown) setScroll((n) => Math.min(maxScroll, n + streamRows));
       else if (key.pageUp) setScroll((n) => Math.max(0, n - streamRows));
     },
-    { isActive: active2 }
+    { isActive: active2 && !editingSearch }
   );
+  const searchRow = editingSearch ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "search: " }),
+    /* @__PURE__ */ jsx2(
+      TextInput,
+      {
+        value: search,
+        onChange: (v) => {
+          setSearch(v);
+          setScroll(0);
+          setDetailScroll(0);
+        },
+        onSubmit: () => setEditingSearch(false)
+      }
+    ),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  (enter done \xB7 empty = clear)" })
+  ] }) : search ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "search: " }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, bold: true, children: search }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  ${filtered.length} match \xB7 / edit` })
+  ] }) : null;
+  const sessionDot = (st) => st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
+  void sessionDot;
   if (s === null && localOn === null) {
     return /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
       spin,
@@ -891,89 +905,70 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
     frozen ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
   ] });
-  if (mode === "sessions") {
-    const listW = Math.min(44, Math.floor(innerW * 0.38));
-    const detailW = innerW - listW - 2;
-    const bodyH = rows - 4;
-    const listRows = bodyH - 1;
+  if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
     const deny = d.length - allow;
     const dlpN = d.filter((e) => e.dlp).length;
-    const burstN = d.filter((e) => e.burst).length;
     const evals = d.filter((e) => e.evalMs != null).map((e) => e.evalMs);
     const evalAvg = evals.length ? Math.round(evals.reduce((a, b) => a + b, 0) / evals.length) : null;
     const tCounts = /* @__PURE__ */ new Map();
-    for (const e of d) tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
-    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+    const pCounts = /* @__PURE__ */ new Map();
+    for (const e of d) {
+      tCounts.set(e.tool, (tCounts.get(e.tool) ?? 0) + 1);
+      if (e.permission) pCounts.set(e.permission, (pCounts.get(e.permission) ?? 0) + 1);
+    }
+    const top = [...tCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
+    const perms = [...pCounts.entries()].sort((a, b) => b[1] - a[1]);
     const first = d[d.length - 1]?.at;
     const last = d[0]?.at;
-    const tlRows = Math.max(3, bodyH - 8);
-    const maxTl = Math.max(0, d.length - tlRows);
-    const tScroll = Math.min(tlScroll, maxTl);
-    const tl = d.slice(tScroll, tScroll + tlRows);
+    const tlRows = Math.max(4, rows - 10);
+    const maxD = Math.max(0, d.length - tlRows);
+    const dScroll = Math.min(detailScroll, maxD);
+    const tl = d.slice(dScroll, dScroll + tlRows);
     return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
       titleBar,
-      /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: `${combinedSess.length} shown \xB7 filter ${sessFilter} (f) \xB7 \u2191\u2193 select \xB7 PgUp/Dn timeline \xB7 \u2190 back`, width: innerW }),
-      /* @__PURE__ */ jsxs2(Box2, { height: bodyH, children: [
-        /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: listW, marginRight: 2, overflow: "hidden", children: [
-          combinedSess.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-            "no sessions",
-            sessFilter !== "all" ? ` (${sessFilter})` : ""
-          ] }) : null,
-          combinedSess.slice(0, listRows).map((r, i) => {
-            const st = sessStatus(r.lastAt, nowMs);
-            const dot = st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
-            const sel = i === selIdx;
-            return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel, children: [
-              /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : dot.color, children: [
-                sel ? "\u25B8" : dot.ch,
-                " "
-              ] }),
-              /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
-              /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate(r.isMe ? "this machine" : r.agent, 13).padEnd(14) }),
-              /* @__PURE__ */ jsxs2(Text2, { children: [
-                String(r.calls).padStart(4),
-                "c "
-              ] }),
-              /* @__PURE__ */ jsxs2(Text2, { color: r.denies ? theme.bad : theme.dim, children: [
-                String(r.denies).padStart(3),
-                "d "
-              ] }),
-              /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(r.lastAt) })
-            ] }, r.id);
-          })
-        ] }),
-        /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", width: detailW, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "select a session to see its run timeline" }) : /* @__PURE__ */ jsxs2(Fragment2, { children: [
-          /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-            /* @__PURE__ */ jsx2(Text2, { color: sessStatus(selected.lastAt, nowMs) === "active" ? theme.ok : theme.dim, children: sessStatus(selected.lastAt, nowMs) === "active" ? "\u25CF " : "\u25CB " }),
-            /* @__PURE__ */ jsx2(Text2, { bold: true, children: truncate(selected.isMe ? selected.agent + " (this machine)" : selected.agent, 30) }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  " + selected.id })
-          ] }),
-          /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
-            /* @__PURE__ */ jsx2(Stat, { label: "Total", value: d.length }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Allowed", value: allow, color: theme.ok }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Denied", value: deny, color: deny ? theme.bad : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "DLP", value: dlpN, color: dlpN ? theme.bad : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Rate limit", value: burstN, color: burstN ? theme.warn : void 0 }),
-            /* @__PURE__ */ jsx2(Stat, { label: "Avg eval", value: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
-            selected.trust != null ? /* @__PURE__ */ jsx2(Stat, { label: "Trust", value: `${selected.trust}/100`, color: theme.accent }) : null
-          ] }),
-          /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: `first ${first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014"} \xB7 last ${last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014"} \xB7 tools ${top.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"}` }),
-          /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} events \xB7 newest first${tScroll ? ` \xB7 \u25BC${tScroll}` : ""}`, width: detailW }),
-          /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", overflow: "hidden", flexGrow: 1, children: [
-            tl.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-              spin,
-              " loading history\u2026"
-            ] }) : null,
-            tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
-          ] })
-        ] }) })
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: ` SESSION ${detail.id.slice(0, 8)} ` }),
+        /* @__PURE__ */ jsx2(Text2, { color: detail.source === "local" ? theme.ok : "#4f6db8", children: " " + detail.source.toUpperCase() }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: "  " + truncate(detail.isMe ? detail.agent + " (this machine)" : detail.agent, 34) }),
+        detail.trust != null ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `  trust ${detail.trust}/100` }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSIONS " }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${combinedSess.length} sessions \xB7 space copy-mode ` }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 f status \xB7 \u2190 back \xB7 esc menu " })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 calls " }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, children: d.length }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 allow " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: allow }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 deny " }),
+        /* @__PURE__ */ jsx2(Text2, { color: deny ? theme.bad : theme.dim, bold: deny > 0, children: deny }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 dlp " }),
+        /* @__PURE__ */ jsx2(Text2, { color: dlpN ? theme.bad : theme.dim, children: dlpN }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 avg eval " }),
+        /* @__PURE__ */ jsx2(Text2, { children: evalAvg != null ? `${evalAvg}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 first " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: first ? `${hhmmss(first)} (${ago(first)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 last " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: last ? `${hhmmss(last)} (${ago(last)} ago)` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 tools " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: top.map(([t, c2]) => `${t}\xD7${c2}`).join("  ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perms " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 / search \xB7 \u2190 back`, width: innerW }),
+      searchRow,
+      /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
+        tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
+        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
@@ -995,7 +990,7 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 ghost " }),
       /* @__PURE__ */ jsx2(Text2, { color: gh?.mode === "on" ? theme.ok : theme.dim, children: gh?.mode ?? "?" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 sess " }),
-      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: String(combinedSessAll.length) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: `${combinedSess.length} (${sessCounts?.active ?? 0} live)` }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 hooks " }),
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
@@ -1034,13 +1029,14 @@ function LivePanel({ active: active2 }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: "press s to inspect", width: colW }),
-        combinedSessAll.slice(0, colH - 1).map((r) => {
-          const st = sessStatus(r.lastAt, nowMs);
-          const dot = st === "active" ? { ch: "\u25CF", color: theme.ok } : st === "idle" ? { ch: "\u25CC", color: theme.warn } : { ch: "\u25CB", color: theme.dim };
-          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", bold: r.isMe, children: [
-            /* @__PURE__ */ jsxs2(Text2, { color: dot.color, children: [
-              dot.ch,
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "SESSIONS", extra: mode === "pick" ? "\u2191\u2193 pick \xB7 enter open" : `${combinedSess.length} \xB7 s = inspect`, width: colW }),
+        pickable.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "scanning\u2026" }) : null,
+        pickable.map((r, i) => {
+          const freshDot = nowMs - r.lastAt < 9e4;
+          const sel = mode === "pick" && i === pickIdx;
+          return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: sel ? "#1c2f63" : void 0, bold: sel || r.isMe, children: [
+            /* @__PURE__ */ jsxs2(Text2, { color: sel ? theme.accentBright : freshDot ? theme.ok : theme.dim, children: [
+              sel ? "\u25B8" : freshDot ? "\u25CF" : "\u25CB",
               " "
             ] }),
             /* @__PURE__ */ jsx2(Text2, { color: r.source === "local" ? theme.ok : "#4f6db8", children: r.source === "local" ? "LOC " : "CLD " }),
@@ -1053,7 +1049,7 @@ function LivePanel({ active: active2 }) {
               String(r.denies).padStart(3),
               "d "
             ] }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ago(r.lastAt) })
+            /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: (r.trust != null ? `t${r.trust} ` : "") + ago(r.lastAt) })
           ] }, r.id);
         })
       ] }),
@@ -1073,11 +1069,12 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 \u2191\u2193 scroll \xB7 s sessions`,
+        extra: `newest first \xB7 last ${STREAM_KEEP} \xB7 filter ${filter}${clampedScroll > 0 ? ` \xB7 \u25BC${clampedScroll} older` : ""} \xB7 f filter \xB7 / search \xB7 \u2191\u2193 scroll \xB7 s sessions`,
         width: innerW
       }
     ),
     /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: streamRows, overflow: "hidden", children: [
+      searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dashboard \u2192 Settings \u2192 Local logs \xB7 hooks write ~/.solongate/local-logs \xB7 view: `solongate logs-server`" })
@@ -1090,15 +1087,15 @@ function LivePanel({ active: active2 }) {
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudDeduped.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " space copy-mode \xB7 f filter \xB7 s sessions \xB7 esc menu \xB7 q quit " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " space copy-mode \xB7 / search \xB7 f filter \xB7 s sessions \xB7 esc menu \xB7 q quit " })
     ] })
   ] });
 }
 
 // src/tui/panels/Policies.tsx
 import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
-import TextInput from "ink-text-input";
+import TextInput2 from "ink-text-input";
 import { useEffect as useEffect3, useState as useState3 } from "react";
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 var constr = (r, g, side) => (r[g]?.[side] ?? []).join(", ");
@@ -1308,7 +1305,7 @@ function PoliciesPanel({ focused }) {
       return /* @__PURE__ */ jsxs3(Box3, { children: [
         /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
         active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx3(
-          TextInput,
+          TextInput2,
           {
             value: editVal,
             onChange: setEditVal,
@@ -1463,7 +1460,7 @@ function FieldRow({ label, active: active2, children }) {
 
 // src/tui/panels/Dlp.tsx
 import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
-import TextInput2 from "ink-text-input";
+import TextInput3 from "ink-text-input";
 import { useEffect as useEffect5, useState as useState5 } from "react";
 import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 var MODES2 = ["off", "detect", "block"];
@@ -1566,7 +1563,7 @@ function DlpPanel({ focused }) {
     adding ? /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, children: [
       /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "New pattern name: " : `Regex for "${newName}": ` }),
       adding === "name" ? /* @__PURE__ */ jsx5(
-        TextInput2,
+        TextInput3,
         {
           value: newName,
           onChange: setNewName,
@@ -1577,7 +1574,7 @@ function DlpPanel({ focused }) {
           }
         }
       ) : /* @__PURE__ */ jsx5(
-        TextInput2,
+        TextInput3,
         {
           value: newRe,
           onChange: setNewRe,
@@ -1670,7 +1667,7 @@ function StatsPanel({ active: active2 }) {
 
 // src/tui/panels/Audit.tsx
 import { Box as Box7, Text as Text7, useInput as useInput5 } from "ink";
-import TextInput3 from "ink-text-input";
+import TextInput4 from "ink-text-input";
 import { useState as useState6 } from "react";
 import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
@@ -1789,7 +1786,7 @@ function AuditPanel({ active: active2, focused }) {
         ": "
       ] }),
       /* @__PURE__ */ jsx7(
-        TextInput3,
+        TextInput4,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
           onChange: editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.73.0",
+  "version": "0.75.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {