@solongate/proxy 0.79.0 → 0.80.0

package/dist/api-client/settings.d.ts

@@ -20,6 +20,12 @@ export interface GuardStatus {
     outdated_count: number;
 }
 export declare function getGuardStatus(): Promise<GuardStatus>;
+export declare function getSelfProtection(): Promise<{
+    enabled: boolean;
+}>;
+export declare function setSelfProtection(enabled: boolean): Promise<{
+    enabled: boolean;
+}>;
 export interface AlertRule {
     id: string;
     name: string;

package/dist/commands/index.js

@@ -204,8 +204,10 @@ __export(settings_exports, {
   getGuardStatus: () => getGuardStatus,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
+  getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
-  setSecurityLayers: () => setSecurityLayers
+  setSecurityLayers: () => setSecurityLayers,
+  setSelfProtection: () => setSelfProtection
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -222,6 +224,12 @@ function clearRateLimitHistory() {
 function getGuardStatus() {
   return request("GET", "/settings/guard-status");
 }
+function getSelfProtection() {
+  return request("GET", "/settings/self-protection");
+}
+function setSelfProtection(enabled) {
+  return request("PUT", "/settings/self-protection", { body: { enabled } });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }

package/dist/index.js

@@ -6875,8 +6875,10 @@ __export(settings_exports, {
   getGuardStatus: () => getGuardStatus,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
+  getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
-  setSecurityLayers: () => setSecurityLayers
+  setSecurityLayers: () => setSecurityLayers,
+  setSelfProtection: () => setSelfProtection
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -6893,6 +6895,12 @@ function clearRateLimitHistory() {
 function getGuardStatus() {
   return request("GET", "/settings/guard-status");
 }
+function getSelfProtection() {
+  return request("GET", "/settings/self-protection");
+}
+function setSelfProtection(enabled) {
+  return request("PUT", "/settings/self-protection", { body: { enabled } });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }
@@ -7940,6 +7948,7 @@ function PoliciesPanel({ focused }) {
   const [pi, setPi] = useState3(0);
   const [ri, setRi] = useState3(0);
   const [fi, setFi] = useState3(0);
+  const [vi, setVi] = useState3(0);
   const [rules, setRules] = useState3([]);
   const [mode, setMode] = useState3("denylist");
   const [dirty, setDirty] = useState3(false);
@@ -7948,6 +7957,10 @@ function PoliciesPanel({ focused }) {
   const [status, setStatus] = useState3(null);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  const versionsQ = useLoader(
+    () => view === "versions" && selected ? api.policies.versions(selected.id, { limit: 50 }) : Promise.resolve(null),
+    [view, selected?.id]
+  );
   useEffect3(() => {
     if (detail.data) {
       setRules(detail.data.rules);
@@ -8022,10 +8035,41 @@ function PoliciesPanel({ focused }) {
           }
         } else if (input === "m") {
           mutate(rules, mode === "denylist" ? "whitelist" : "denylist");
+        } else if (input === "n") {
+          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true };
+          mutate([nr, ...rules]);
+          setRi(0);
+          setFi(0);
+          setView("rule");
+        } else if (input === "D") {
+          setStatus("Dry-running\u2026");
+          void api.policies.dryRun({ rules, mode }).then((res) => setStatus(`dry-run ${res.evaluated} calls \xB7 allow ${res.would_allow} / deny ${res.would_deny} \xB7 newly blocked ${res.newly_blocked} \xB7 newly allowed ${res.newly_allowed}`)).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+        } else if (input === "v") {
+          setVi(0);
+          setView("versions");
         } else if (input === "s") void save();
         else if (input === "x") discard();
         return;
       }
+      if (view === "versions") {
+        const vers = versionsQ.data?.versions ?? [];
+        if (key.leftArrow) return void setView("rules");
+        if (key.upArrow) setVi((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setVi((n) => Math.min(vers.length - 1, n + 1));
+        else if (key.return) {
+          const v = vers[vi];
+          if (v && selected) {
+            setStatus("Rolling back\u2026");
+            void api.policies.rollback(selected.id, v.version).then((r) => {
+              setStatus(`\u2713 rolled back to v${v.version} \u2192 new v${r.version}`);
+              detail.reload();
+              list6.reload();
+              setView("rules");
+            }).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+          }
+        }
+        return;
+      }
       const rule2 = rules[ri];
       if (!rule2) return setView("rules");
       const field = FIELDS[fi];
@@ -8070,7 +8114,7 @@ function PoliciesPanel({ focused }) {
         /* @__PURE__ */ jsx3(Text3, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 rule \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 d delete \xB7 m mode \xB7 s save \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 v versions \xB7 s save \xB7 \u2190 back" }),
       /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
         Table,
         {
@@ -8096,6 +8140,33 @@ function PoliciesPanel({ focused }) {
       status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
+  if (view === "versions") {
+    const vers = versionsQ.data?.versions ?? [];
+    return /* @__PURE__ */ jsx3(DataView, { loading: versionsQ.loading && !versionsQ.data, error: versionsQ.error, empty: !!versionsQ.data && vers.length === 0, emptyText: "No versions.", children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: truncate2(selected?.name ?? "", 28) }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 select \xB7 enter roll back to that version \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "", width: 2 },
+            { header: "VER", width: 5 },
+            { header: "RULES", width: 5 },
+            { header: "REASON", width: 34 },
+            { header: "WHEN", width: 16 }
+          ],
+          rows: vers.map((v, i) => [
+            { value: i === vi ? "\u25B8" : "", color: theme.accentBright },
+            { value: `v${v.version}`, bold: i === vi },
+            { value: String(v.rules_count), dim: true },
+            { value: truncate2(v.reason || "\u2014", 34) },
+            { value: truncate2(v.created_at, 16), dim: true }
+          ])
+        }
+      ) }),
+      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] }) });
+  }
   const rule = rules[ri];
   return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs3(Box3, { children: [
@@ -8319,12 +8390,19 @@ function DlpPanel({ focused }) {
   const [adding, setAdding] = useState5(null);
   const [newName, setNewName] = useState5("");
   const [newRe, setNewRe] = useState5("");
+  const [ghostOn, setGhostOn] = useState5(false);
+  const spQ = useLoader(() => api.settings.getSelfProtection());
+  const [selfProt, setSelfProt] = useState5(null);
   useEffect5(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
+      setGhostOn(q.data.layers.ghost.mode === "on");
     }
   }, [q.data, dlp]);
+  useEffect5(() => {
+    if (spQ.data && selfProt === null) setSelfProt(spQ.data.enabled);
+  }, [spQ.data, selfProt]);
   const mutate = (next) => {
     setDlp(next);
     setDirty(true);
@@ -8334,14 +8412,27 @@ function DlpPanel({ focused }) {
     if (!dlp || !q.data) return;
     setStatus("Saving\u2026");
     try {
-      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp });
+      const ghost = { ...q.data.layers.ghost, mode: ghostOn ? "on" : "off" };
+      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp, ghost });
       setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns], custom: [...res.layers.dlp.custom] });
+      setGhostOn(res.layers.ghost.mode === "on");
       setDirty(false);
       setStatus("\u2713 Saved");
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
   };
+  const toggleSelfProt = async () => {
+    const next = !(selfProt ?? false);
+    setSelfProt(next);
+    try {
+      await api.settings.setSelfProtection(next);
+      setStatus(`\u2713 self-protection ${next ? "on" : "off"}`);
+    } catch (e) {
+      setSelfProt(!next);
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
   const discard = () => {
     if (q.data) setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
     setDirty(false);
@@ -8371,7 +8462,12 @@ function DlpPanel({ focused }) {
         const ci = sel - available.length;
         mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== ci) });
         setSel((n) => Math.max(0, n - 1));
-      } else if (input === "s") void save();
+      } else if (input === "g") {
+        setGhostOn((v) => !v);
+        setDirty(true);
+        setStatus(null);
+      } else if (input === "P") void toggleSelfProt();
+      else if (input === "s") void save();
       else if (input === "x") discard();
     },
     { isActive: focused && !adding }
@@ -8383,7 +8479,13 @@ function DlpPanel({ focused }) {
       /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), children: dlp.mode }),
       dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 g ghost \xB7 P self-protect \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "ghost: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.ok : theme.dim, children: ghostOn ? "on" : "off" }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   self-protection: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: selfProt ? theme.ok : theme.dim, children: selfProt === null ? "\u2026" : selfProt ? "on" : "off" })
+    ] }),
     /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
       const on = enabled.has(p);
       const active2 = focused && sel === i;
@@ -8451,12 +8553,15 @@ import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function StatsPanel({ active: active2 }) {
   const stats = useLoader(() => api.stats.get());
   const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
+  const drift2 = useLoader(() => api.stats.drift(7));
   usePoll(() => {
     stats.reload();
     ts.reload();
   }, 5e3, active2);
+  usePoll(drift2.reload, 3e4, active2);
   const s = stats.data;
   const points = ts.data?.timeseries ?? [];
+  const driftRules = (drift2.data?.rules ?? []).slice(0, 5);
   return /* @__PURE__ */ jsx6(DataView, { loading: stats.loading && !s, error: stats.error, children: s ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { bold: true, children: [
@@ -8509,7 +8614,7 @@ function StatsPanel({ active: active2 }) {
             { header: "MS", width: 5 },
             { header: "WHEN", width: 6 }
           ],
-          rows: (s.recent_activity ?? []).slice(0, 8).map((a) => [
+          rows: (s.recent_activity ?? []).slice(0, 6).map((a) => [
             { value: a.decision, color: decisionColor(a.decision) },
             { value: truncate2(a.tool_name, 20), color: theme.accent },
             { value: String(a.evaluation_time_ms ?? "\u2014"), dim: true },
@@ -8517,6 +8622,31 @@ function StatsPanel({ active: active2 }) {
           ])
         }
       )
+    ] }),
+    /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+        "Denial drift ",
+        drift2.data ? `(7d: ${drift2.data.total_current} now vs ${drift2.data.total_previous} prev)` : ""
+      ] }),
+      driftRules.length ? /* @__PURE__ */ jsx6(
+        Table,
+        {
+          columns: [
+            { header: "NOW", width: 5 },
+            { header: "PREV", width: 5 },
+            { header: "\u0394", width: 6 },
+            { header: "RULE", width: 22 },
+            { header: "REASON", width: 26 }
+          ],
+          rows: driftRules.map((r) => [
+            { value: String(r.current), bold: true },
+            { value: String(r.previous), dim: true },
+            { value: r.is_new ? "NEW" : r.spike ? `+${r.delta}` : String(r.delta), color: r.is_new ? theme.ok : r.spike ? theme.bad : void 0 },
+            { value: truncate2(r.rule_id ?? "\u2014", 22), color: theme.accent },
+            { value: truncate2(r.reason ?? r.last_tool ?? "\u2014", 26), dim: true }
+          ])
+        }
+      ) : /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  no denials in window" })
     ] })
   ] }) : null });
 }
@@ -8742,7 +8872,16 @@ function App() {
   const { exit } = useApp();
   const [section, setSection] = useState7(0);
   const [focus, setFocus] = useState7("nav");
+  const [help, setHelp] = useState7(false);
   useInput6((input, key) => {
+    if (help) {
+      setHelp(false);
+      return;
+    }
+    if (input === "?" && focus === "nav") {
+      setHelp(true);
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -8756,6 +8895,7 @@ function App() {
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
   const current = SECTIONS[section];
+  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }) });
   }
@@ -8766,10 +8906,23 @@ function App() {
       /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
       /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
-var SECTIONS, BANNER_HEX;
+function HelpOverlay({ cols, rows }) {
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
+      ] }, k))
+    ] }, group)) }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
+  ] });
+}
+var SECTIONS, BANNER_HEX, HELP;
 var init_App = __esm({
   "src/tui/App.tsx"() {
     "use strict";
@@ -8791,6 +8944,12 @@ var init_App = __esm({
       { label: "Audit", Panel: AuditPanel }
     ];
     BANNER_HEX = ["#1432A0", "#2850BE", "#3C6ED7", "#5A8CE6", "#82AAF0", "#AAC8FA"];
+    HELP = [
+      ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
+      ["Live", [["\u2191\u2193", "select a stream row"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+      ["Policies", [["\u2191\u2193", "browse / select"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["v", "versions / rollback"], ["s", "save"], ["x", "discard"]]],
+      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]]
+    ];
   }
 });
 

package/dist/tui/index.js

@@ -333,8 +333,10 @@ __export(settings_exports, {
   getGuardStatus: () => getGuardStatus,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
+  getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
-  setSecurityLayers: () => setSecurityLayers
+  setSecurityLayers: () => setSecurityLayers,
+  setSelfProtection: () => setSelfProtection
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -351,6 +353,12 @@ function clearRateLimitHistory() {
 function getGuardStatus() {
   return request("GET", "/settings/guard-status");
 }
+function getSelfProtection() {
+  return request("GET", "/settings/self-protection");
+}
+function setSelfProtection(enabled) {
+  return request("PUT", "/settings/self-protection", { body: { enabled } });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }
@@ -1347,6 +1355,7 @@ function PoliciesPanel({ focused }) {
   const [pi, setPi] = useState3(0);
   const [ri, setRi] = useState3(0);
   const [fi, setFi] = useState3(0);
+  const [vi, setVi] = useState3(0);
   const [rules, setRules] = useState3([]);
   const [mode, setMode] = useState3("denylist");
   const [dirty, setDirty] = useState3(false);
@@ -1355,6 +1364,10 @@ function PoliciesPanel({ focused }) {
   const [status, setStatus] = useState3(null);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  const versionsQ = useLoader(
+    () => view === "versions" && selected ? api.policies.versions(selected.id, { limit: 50 }) : Promise.resolve(null),
+    [view, selected?.id]
+  );
   useEffect3(() => {
     if (detail.data) {
       setRules(detail.data.rules);
@@ -1429,10 +1442,41 @@ function PoliciesPanel({ focused }) {
           }
         } else if (input === "m") {
           mutate(rules, mode === "denylist" ? "whitelist" : "denylist");
+        } else if (input === "n") {
+          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true };
+          mutate([nr, ...rules]);
+          setRi(0);
+          setFi(0);
+          setView("rule");
+        } else if (input === "D") {
+          setStatus("Dry-running\u2026");
+          void api.policies.dryRun({ rules, mode }).then((res) => setStatus(`dry-run ${res.evaluated} calls \xB7 allow ${res.would_allow} / deny ${res.would_deny} \xB7 newly blocked ${res.newly_blocked} \xB7 newly allowed ${res.newly_allowed}`)).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+        } else if (input === "v") {
+          setVi(0);
+          setView("versions");
         } else if (input === "s") void save();
         else if (input === "x") discard();
         return;
       }
+      if (view === "versions") {
+        const vers = versionsQ.data?.versions ?? [];
+        if (key.leftArrow) return void setView("rules");
+        if (key.upArrow) setVi((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setVi((n) => Math.min(vers.length - 1, n + 1));
+        else if (key.return) {
+          const v = vers[vi];
+          if (v && selected) {
+            setStatus("Rolling back\u2026");
+            void api.policies.rollback(selected.id, v.version).then((r) => {
+              setStatus(`\u2713 rolled back to v${v.version} \u2192 new v${r.version}`);
+              detail.reload();
+              list5.reload();
+              setView("rules");
+            }).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+          }
+        }
+        return;
+      }
       const rule2 = rules[ri];
       if (!rule2) return setView("rules");
       const field = FIELDS[fi];
@@ -1477,7 +1521,7 @@ function PoliciesPanel({ focused }) {
         /* @__PURE__ */ jsx3(Text3, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 rule \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 d delete \xB7 m mode \xB7 s save \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 v versions \xB7 s save \xB7 \u2190 back" }),
       /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
         Table,
         {
@@ -1503,6 +1547,33 @@ function PoliciesPanel({ focused }) {
       status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
+  if (view === "versions") {
+    const vers = versionsQ.data?.versions ?? [];
+    return /* @__PURE__ */ jsx3(DataView, { loading: versionsQ.loading && !versionsQ.data, error: versionsQ.error, empty: !!versionsQ.data && vers.length === 0, emptyText: "No versions.", children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 select \xB7 enter roll back to that version \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "", width: 2 },
+            { header: "VER", width: 5 },
+            { header: "RULES", width: 5 },
+            { header: "REASON", width: 34 },
+            { header: "WHEN", width: 16 }
+          ],
+          rows: vers.map((v, i) => [
+            { value: i === vi ? "\u25B8" : "", color: theme.accentBright },
+            { value: `v${v.version}`, bold: i === vi },
+            { value: String(v.rules_count), dim: true },
+            { value: truncate(v.reason || "\u2014", 34) },
+            { value: truncate(v.created_at, 16), dim: true }
+          ])
+        }
+      ) }),
+      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] }) });
+  }
   const rule = rules[ri];
   return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs3(Box3, { children: [
@@ -1686,12 +1757,19 @@ function DlpPanel({ focused }) {
   const [adding, setAdding] = useState5(null);
   const [newName, setNewName] = useState5("");
   const [newRe, setNewRe] = useState5("");
+  const [ghostOn, setGhostOn] = useState5(false);
+  const spQ = useLoader(() => api.settings.getSelfProtection());
+  const [selfProt, setSelfProt] = useState5(null);
   useEffect5(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
+      setGhostOn(q.data.layers.ghost.mode === "on");
     }
   }, [q.data, dlp]);
+  useEffect5(() => {
+    if (spQ.data && selfProt === null) setSelfProt(spQ.data.enabled);
+  }, [spQ.data, selfProt]);
   const mutate = (next) => {
     setDlp(next);
     setDirty(true);
@@ -1701,14 +1779,27 @@ function DlpPanel({ focused }) {
     if (!dlp || !q.data) return;
     setStatus("Saving\u2026");
     try {
-      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp });
+      const ghost = { ...q.data.layers.ghost, mode: ghostOn ? "on" : "off" };
+      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp, ghost });
       setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns], custom: [...res.layers.dlp.custom] });
+      setGhostOn(res.layers.ghost.mode === "on");
       setDirty(false);
       setStatus("\u2713 Saved");
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
   };
+  const toggleSelfProt = async () => {
+    const next = !(selfProt ?? false);
+    setSelfProt(next);
+    try {
+      await api.settings.setSelfProtection(next);
+      setStatus(`\u2713 self-protection ${next ? "on" : "off"}`);
+    } catch (e) {
+      setSelfProt(!next);
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
   const discard = () => {
     if (q.data) setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
     setDirty(false);
@@ -1738,7 +1829,12 @@ function DlpPanel({ focused }) {
         const ci = sel - available.length;
         mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== ci) });
         setSel((n) => Math.max(0, n - 1));
-      } else if (input === "s") void save();
+      } else if (input === "g") {
+        setGhostOn((v) => !v);
+        setDirty(true);
+        setStatus(null);
+      } else if (input === "P") void toggleSelfProt();
+      else if (input === "s") void save();
       else if (input === "x") discard();
     },
     { isActive: focused && !adding }
@@ -1750,7 +1846,13 @@ function DlpPanel({ focused }) {
       /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), children: dlp.mode }),
       dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 g ghost \xB7 P self-protect \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "ghost: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.ok : theme.dim, children: ghostOn ? "on" : "off" }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   self-protection: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: selfProt ? theme.ok : theme.dim, children: selfProt === null ? "\u2026" : selfProt ? "on" : "off" })
+    ] }),
     /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
       const on = enabled.has(p);
       const active2 = focused && sel === i;
@@ -1807,12 +1909,15 @@ import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function StatsPanel({ active: active2 }) {
   const stats = useLoader(() => api.stats.get());
   const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
+  const drift2 = useLoader(() => api.stats.drift(7));
   usePoll(() => {
     stats.reload();
     ts.reload();
   }, 5e3, active2);
+  usePoll(drift2.reload, 3e4, active2);
   const s = stats.data;
   const points = ts.data?.timeseries ?? [];
+  const driftRules = (drift2.data?.rules ?? []).slice(0, 5);
   return /* @__PURE__ */ jsx6(DataView, { loading: stats.loading && !s, error: stats.error, children: s ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { bold: true, children: [
@@ -1865,7 +1970,7 @@ function StatsPanel({ active: active2 }) {
             { header: "MS", width: 5 },
             { header: "WHEN", width: 6 }
           ],
-          rows: (s.recent_activity ?? []).slice(0, 8).map((a) => [
+          rows: (s.recent_activity ?? []).slice(0, 6).map((a) => [
             { value: a.decision, color: decisionColor(a.decision) },
             { value: truncate(a.tool_name, 20), color: theme.accent },
             { value: String(a.evaluation_time_ms ?? "\u2014"), dim: true },
@@ -1873,6 +1978,31 @@ function StatsPanel({ active: active2 }) {
           ])
         }
       )
+    ] }),
+    /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+        "Denial drift ",
+        drift2.data ? `(7d: ${drift2.data.total_current} now vs ${drift2.data.total_previous} prev)` : ""
+      ] }),
+      driftRules.length ? /* @__PURE__ */ jsx6(
+        Table,
+        {
+          columns: [
+            { header: "NOW", width: 5 },
+            { header: "PREV", width: 5 },
+            { header: "\u0394", width: 6 },
+            { header: "RULE", width: 22 },
+            { header: "REASON", width: 26 }
+          ],
+          rows: driftRules.map((r) => [
+            { value: String(r.current), bold: true },
+            { value: String(r.previous), dim: true },
+            { value: r.is_new ? "NEW" : r.spike ? `+${r.delta}` : String(r.delta), color: r.is_new ? theme.ok : r.spike ? theme.bad : void 0 },
+            { value: truncate(r.rule_id ?? "\u2014", 22), color: theme.accent },
+            { value: truncate(r.reason ?? r.last_tool ?? "\u2014", 26), dim: true }
+          ])
+        }
+      ) : /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  no denials in window" })
     ] })
   ] }) : null });
 }
@@ -2086,7 +2216,16 @@ function App() {
   const { exit } = useApp();
   const [section, setSection] = useState7(0);
   const [focus, setFocus] = useState7("nav");
+  const [help, setHelp] = useState7(false);
   useInput6((input, key) => {
+    if (help) {
+      setHelp(false);
+      return;
+    }
+    if (input === "?" && focus === "nav") {
+      setHelp(true);
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -2100,6 +2239,7 @@ function App() {
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
   const current = SECTIONS[section];
+  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }) });
   }
@@ -2110,7 +2250,26 @@ function App() {
       /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
       /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+  ] });
+}
+var HELP = [
+  ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
+  ["Live", [["\u2191\u2193", "select a stream row"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+  ["Policies", [["\u2191\u2193", "browse / select"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["v", "versions / rollback"], ["s", "save"], ["x", "discard"]]],
+  ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]]
+];
+function HelpOverlay({ cols, rows }) {
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
+      ] }, k))
+    ] }, group)) }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.79.0",
+  "version": "0.80.0",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {