@solongate/proxy 0.79.0 → 0.81.0

package/dist/tui/index.js

@@ -8,8 +8,8 @@ var __export = (target, all) => {
 import { render } from "ink";
 
 // src/tui/App.tsx
-import { Box as Box8, Text as Text8, useApp, useInput as useInput6 } from "ink";
-import { useState as useState7 } from "react";
+import { Box as Box9, Text as Text9, useApp, useInput as useInput7 } from "ink";
+import { useState as useState8 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -44,10 +44,33 @@ var BANNER_COLORS = [c.blue1, c.blue2, c.blue3, c.blue4, c.blue5, c.blue6];
 // src/tui/components.tsx
 import { Box, Text } from "ink";
 
+// src/tui/config.ts
+import { readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+var cached = null;
+function loadConfig() {
+  if (cached) return cached;
+  const defaults = { notifications: true };
+  try {
+    const raw = readFileSync(join(homedir(), ".solongate", "tui-config.json"), "utf-8");
+    const j = JSON.parse(raw);
+    cached = {
+      notifications: j.notifications !== false,
+      accent: typeof j.accent === "string" ? j.accent : void 0,
+      pollMs: typeof j.pollMs === "number" ? j.pollMs : void 0
+    };
+  } catch {
+    cached = defaults;
+  }
+  return cached;
+}
+
 // src/tui/theme.ts
+var accent = loadConfig().accent;
 var theme = {
-  accent: "cyan",
-  accentBright: "#5a8ce6",
+  accent: accent || "cyan",
+  accentBright: accent || "#5a8ce6",
   ok: "green",
   warn: "yellow",
   bad: "red",
@@ -128,15 +151,15 @@ function KeyHints({ hints }) {
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
 import { spawn } from "child_process";
-import { closeSync, openSync, readSync, statSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { closeSync, mkdirSync, openSync, readSync, statSync, writeFileSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
-import { readFileSync, existsSync } from "fs";
-import { resolve, join } from "path";
-import { homedir } from "os";
+import { readFileSync as readFileSync2, existsSync } from "fs";
+import { resolve, join as join2 } from "path";
+import { homedir as homedir2 } from "os";
 var DEFAULT_API_URL = "https://api.solongate.com";
 var ApiError = class extends Error {
   status;
@@ -156,9 +179,9 @@ var NotAuthenticatedError = class extends Error {
 };
 function loginCredentialFile() {
   try {
-    const p = join(homedir(), ".solongate", "cloud-guard.json");
+    const p = join2(homedir2(), ".solongate", "cloud-guard.json");
     if (!existsSync(p)) return {};
-    const c2 = JSON.parse(readFileSync(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync2(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -168,7 +191,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve(".env");
     if (!existsSync(envPath)) return void 0;
-    for (const line of readFileSync(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync2(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -181,7 +204,7 @@ function dotenvApiKey() {
   }
   return void 0;
 }
-var cached = null;
+var cached2 = null;
 function isAuthenticated() {
   try {
     resolveCredentials();
@@ -191,13 +214,13 @@ function isAuthenticated() {
   }
 }
 function resolveCredentials(apiUrlOverride) {
-  if (cached && !apiUrlOverride) return cached;
+  if (cached2 && !apiUrlOverride) return cached2;
   const file = loginCredentialFile();
   const apiKey = process.env["SOLONGATE_API_KEY"] || file.apiKey || dotenvApiKey();
   if (!apiKey) throw new NotAuthenticatedError();
   const apiUrl = apiUrlOverride || process.env["SOLONGATE_API_URL"] || file.apiUrl || DEFAULT_API_URL;
   const creds = { apiKey, apiUrl: apiUrl.replace(/\/$/, "") };
-  if (!apiUrlOverride) cached = creds;
+  if (!apiUrlOverride) cached2 = creds;
   return creds;
 }
 function buildUrl(base, path, query) {
@@ -333,8 +356,10 @@ __export(settings_exports, {
   getGuardStatus: () => getGuardStatus,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
+  getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
-  setSecurityLayers: () => setSecurityLayers
+  setSecurityLayers: () => setSecurityLayers,
+  setSelfProtection: () => setSelfProtection
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -351,6 +376,12 @@ function clearRateLimitHistory() {
 function getGuardStatus() {
   return request("GET", "/settings/guard-status");
 }
+function getSelfProtection() {
+  return request("GET", "/settings/self-protection");
+}
+function setSelfProtection(enabled) {
+  return request("PUT", "/settings/self-protection", { body: { enabled } });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }
@@ -500,11 +531,12 @@ function usePoll(reload, intervalMs, enabled = true) {
 
 // src/tui/panels/Live.tsx
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+var CONFIG = loadConfig();
 var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var BG = "#12234f";
 var DIM_FLOOR = "#233457";
-var LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
-var RING = join2(process.cwd(), ".solongate", ".eval-ring.jsonl");
+var LOCAL_LOG = join3(homedir3(), ".solongate", "local-logs", "solongate-audit.jsonl");
+var RING = join3(process.cwd(), ".solongate", ".eval-ring.jsonl");
 var hhmmss = (ts) => {
   const d = new Date(ts);
   return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -828,6 +860,7 @@ function LivePanel({ active: active2 }) {
     (id, title, msg, level = "warn") => {
       pushLog(`${level === "bad" ? "\u26D4" : "\u23F8"} ${msg}`, level);
       setAlerts((a) => [...a.filter((x) => x.id !== id), { id, msg, level, until: Date.now() + 15e3 }].slice(-4));
+      if (!CONFIG.notifications) return;
       try {
         process.stdout.write("\x07");
       } catch {
@@ -1055,7 +1088,16 @@ function LivePanel({ active: active2 }) {
       else if (input === "d") toggleSignal("deny");
       else if (input === "x") toggleSignal("dlp");
       else if (input === "r") toggleSignal("ratelimit");
-      else if (key.downArrow) setSel((n) => Math.min(visibleDesc.length - 1, n + 1));
+      else if (input === "e") {
+        const file = join3(homedir3(), ".solongate", "live-export.jsonl");
+        try {
+          mkdirSync(join3(homedir3(), ".solongate"), { recursive: true });
+          writeFileSync(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
+        } catch (err) {
+          setActionMsg({ text: "\u2717 export failed: " + (err instanceof Error ? err.message : String(err)), level: "bad", until: Date.now() + 6e3 });
+        }
+      } else if (key.downArrow) setSel((n) => Math.min(visibleDesc.length - 1, n + 1));
       else if (key.upArrow) setSel((n) => Math.max(0, n - 1));
       else if (key.pageDown) setSel((n) => Math.min(visibleDesc.length - 1, n + streamBodyRows));
       else if (key.pageUp) setSel((n) => Math.max(0, n - streamBodyRows));
@@ -1309,7 +1351,7 @@ function LivePanel({ active: active2 }) {
 import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
 import TextInput2 from "ink-text-input";
 import { useEffect as useEffect3, useState as useState3 } from "react";
-import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+import { Fragment as Fragment3, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 var constr = (r, g, side) => (r[g]?.[side] ?? []).join(", ");
 var setConstr = (r, g, side, val) => {
   const arr = val.split(",").map((s) => s.trim()).filter(Boolean);
@@ -1347,6 +1389,7 @@ function PoliciesPanel({ focused }) {
   const [pi, setPi] = useState3(0);
   const [ri, setRi] = useState3(0);
   const [fi, setFi] = useState3(0);
+  const [vi, setVi] = useState3(0);
   const [rules, setRules] = useState3([]);
   const [mode, setMode] = useState3("denylist");
   const [dirty, setDirty] = useState3(false);
@@ -1355,6 +1398,15 @@ function PoliciesPanel({ focused }) {
   const [status, setStatus] = useState3(null);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
+  const versionsQ = useLoader(
+    () => view === "versions" && selected ? api.policies.versions(selected.id, { limit: 50 }) : Promise.resolve(null),
+    [view, selected?.id]
+  );
+  const diffVer = versionsQ.data?.versions[vi]?.version;
+  const diffQ = useLoader(
+    () => view === "versions" && selected && diffVer !== void 0 ? api.policies.get(selected.id, diffVer) : Promise.resolve(null),
+    [view, selected?.id, diffVer]
+  );
   useEffect3(() => {
     if (detail.data) {
       setRules(detail.data.rules);
@@ -1429,10 +1481,41 @@ function PoliciesPanel({ focused }) {
           }
         } else if (input === "m") {
           mutate(rules, mode === "denylist" ? "whitelist" : "denylist");
+        } else if (input === "n") {
+          const nr = { id: `rule-${Date.now()}`, description: "", effect: "DENY", priority: 100, toolPattern: "*", minimumTrustLevel: "UNTRUSTED", enabled: true };
+          mutate([nr, ...rules]);
+          setRi(0);
+          setFi(0);
+          setView("rule");
+        } else if (input === "D") {
+          setStatus("Dry-running\u2026");
+          void api.policies.dryRun({ rules, mode }).then((res) => setStatus(`dry-run ${res.evaluated} calls \xB7 allow ${res.would_allow} / deny ${res.would_deny} \xB7 newly blocked ${res.newly_blocked} \xB7 newly allowed ${res.newly_allowed}`)).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+        } else if (input === "v") {
+          setVi(0);
+          setView("versions");
         } else if (input === "s") void save();
         else if (input === "x") discard();
         return;
       }
+      if (view === "versions") {
+        const vers = versionsQ.data?.versions ?? [];
+        if (key.leftArrow) return void setView("rules");
+        if (key.upArrow) setVi((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setVi((n) => Math.min(vers.length - 1, n + 1));
+        else if (key.return) {
+          const v = vers[vi];
+          if (v && selected) {
+            setStatus("Rolling back\u2026");
+            void api.policies.rollback(selected.id, v.version).then((r) => {
+              setStatus(`\u2713 rolled back to v${v.version} \u2192 new v${r.version}`);
+              detail.reload();
+              list5.reload();
+              setView("rules");
+            }).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+          }
+        }
+        return;
+      }
       const rule2 = rules[ri];
       if (!rule2) return setView("rules");
       const field = FIELDS[fi];
@@ -1477,7 +1560,7 @@ function PoliciesPanel({ focused }) {
         /* @__PURE__ */ jsx3(Text3, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 rule \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 d delete \xB7 m mode \xB7 s save \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 v versions \xB7 s save \xB7 \u2190 back" }),
       /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
         Table,
         {
@@ -1503,6 +1586,50 @@ function PoliciesPanel({ focused }) {
       status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
+  if (view === "versions") {
+    const vers = versionsQ.data?.versions ?? [];
+    return /* @__PURE__ */ jsx3(DataView, { loading: versionsQ.loading && !versionsQ.data, error: versionsQ.error, empty: !!versionsQ.data && vers.length === 0, emptyText: "No versions.", children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 select \xB7 enter roll back to that version \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
+        Table,
+        {
+          columns: [
+            { header: "", width: 2 },
+            { header: "VER", width: 5 },
+            { header: "RULES", width: 5 },
+            { header: "REASON", width: 34 },
+            { header: "WHEN", width: 16 }
+          ],
+          rows: vers.map((v, i) => [
+            { value: i === vi ? "\u25B8" : "", color: theme.accentBright },
+            { value: `v${v.version}`, bold: i === vi },
+            { value: String(v.rules_count), dim: true },
+            { value: truncate(v.reason || "\u2014", 34) },
+            { value: truncate(v.created_at, 16), dim: true }
+          ])
+        }
+      ) }),
+      /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: `Diff v${diffVer ?? "?"} vs current draft` }),
+        (() => {
+          const old = diffQ.data?.rules ?? [];
+          const cur = rules;
+          const oldIds = new Set(old.map((r) => r.id));
+          const curIds = new Set(cur.map((r) => r.id));
+          const added = cur.filter((r) => !oldIds.has(r.id));
+          const removed = old.filter((r) => !curIds.has(r.id));
+          if (diffQ.loading && !diffQ.data) return /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  loading\u2026" });
+          if (!added.length && !removed.length) return /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  identical rule set" });
+          return /* @__PURE__ */ jsxs3(Fragment3, { children: [
+            added.slice(0, 4).map((r) => /* @__PURE__ */ jsx3(Text3, { wrap: "truncate", color: theme.ok, children: `  + ${r.effect} ${truncate(r.toolPattern, 18)} ${truncate(r.description || r.id, 30)}` }, "a" + r.id)),
+            removed.slice(0, 4).map((r) => /* @__PURE__ */ jsx3(Text3, { wrap: "truncate", color: theme.bad, children: `  - ${r.effect} ${truncate(r.toolPattern, 18)} ${truncate(r.description || r.id, 30)}` }, "r" + r.id))
+          ] });
+        })()
+      ] }),
+      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    ] }) });
+  }
   const rule = rules[ri];
   return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs3(Box3, { children: [
@@ -1616,6 +1743,20 @@ function RateLimitPanel({ focused }) {
       /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
       /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
     ] }),
+    draft.perMinute > 0 ? (() => {
+      const now = minuteSeries.slice(-1)[0] ?? 0;
+      const pct = Math.min(100, Math.round(now / draft.perMinute * 100));
+      const width = 30;
+      const filled = Math.min(width, Math.round(now / draft.perMinute * width));
+      const col = pct >= 100 ? theme.bad : pct >= 80 ? theme.warn : theme.ok;
+      return /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: col, children: "\u2588".repeat(filled) }),
+        /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, width - filled)) }),
+        /* @__PURE__ */ jsx4(Text4, { color: col, children: `  ${now}/${draft.perMinute} ` }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `(${pct}% this min)` })
+      ] });
+    })() : null,
     dirty || status ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
       dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
       status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
@@ -1686,12 +1827,19 @@ function DlpPanel({ focused }) {
   const [adding, setAdding] = useState5(null);
   const [newName, setNewName] = useState5("");
   const [newRe, setNewRe] = useState5("");
+  const [ghostOn, setGhostOn] = useState5(false);
+  const spQ = useLoader(() => api.settings.getSelfProtection());
+  const [selfProt, setSelfProt] = useState5(null);
   useEffect5(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
+      setGhostOn(q.data.layers.ghost.mode === "on");
     }
   }, [q.data, dlp]);
+  useEffect5(() => {
+    if (spQ.data && selfProt === null) setSelfProt(spQ.data.enabled);
+  }, [spQ.data, selfProt]);
   const mutate = (next) => {
     setDlp(next);
     setDirty(true);
@@ -1701,14 +1849,27 @@ function DlpPanel({ focused }) {
     if (!dlp || !q.data) return;
     setStatus("Saving\u2026");
     try {
-      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp });
+      const ghost = { ...q.data.layers.ghost, mode: ghostOn ? "on" : "off" };
+      const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp, ghost });
       setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns], custom: [...res.layers.dlp.custom] });
+      setGhostOn(res.layers.ghost.mode === "on");
       setDirty(false);
       setStatus("\u2713 Saved");
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
   };
+  const toggleSelfProt = async () => {
+    const next = !(selfProt ?? false);
+    setSelfProt(next);
+    try {
+      await api.settings.setSelfProtection(next);
+      setStatus(`\u2713 self-protection ${next ? "on" : "off"}`);
+    } catch (e) {
+      setSelfProt(!next);
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
   const discard = () => {
     if (q.data) setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
     setDirty(false);
@@ -1738,7 +1899,12 @@ function DlpPanel({ focused }) {
         const ci = sel - available.length;
         mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== ci) });
         setSel((n) => Math.max(0, n - 1));
-      } else if (input === "s") void save();
+      } else if (input === "g") {
+        setGhostOn((v) => !v);
+        setDirty(true);
+        setStatus(null);
+      } else if (input === "P") void toggleSelfProt();
+      else if (input === "s") void save();
       else if (input === "x") discard();
     },
     { isActive: focused && !adding }
@@ -1750,7 +1916,13 @@ function DlpPanel({ focused }) {
       /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), children: dlp.mode }),
       dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 g ghost \xB7 P self-protect \xB7 s save" : "press \u2192 to edit" }),
+    /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "ghost: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.ok : theme.dim, children: ghostOn ? "on" : "off" }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   self-protection: " }),
+      /* @__PURE__ */ jsx5(Text5, { color: selfProt ? theme.ok : theme.dim, children: selfProt === null ? "\u2026" : selfProt ? "on" : "off" })
+    ] }),
     /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
       const on = enabled.has(p);
       const active2 = focused && sel === i;
@@ -1797,9 +1969,27 @@ function DlpPanel({ focused }) {
         }
       )
     ] }) : null,
+    adding === "re" ? /* @__PURE__ */ jsx5(RegexTest, { re: newRe }) : null,
     status ? /* @__PURE__ */ jsx5(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
   ] }) : null });
 }
+var SAMPLES = ["AKIA1234567890ABCD00", "sk-ant-api03-xxxxxxxx", "ghp_16chars0000000000000000000000000000", "password=hunter2", "Bearer eyJhbGciOi"];
+function RegexTest({ re }) {
+  if (!re.trim()) return /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  regex: type a pattern\u2026" });
+  let rx = null;
+  let err = "";
+  try {
+    rx = new RegExp(re);
+  } catch (e) {
+    err = e instanceof Error ? e.message : String(e);
+  }
+  if (!rx) return /* @__PURE__ */ jsx5(Text5, { color: theme.bad, children: `  \u2717 invalid: ${err.slice(0, 50)}` });
+  const hits = SAMPLES.filter((s) => rx.test(s));
+  return /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx5(Text5, { color: theme.ok, children: "  \u2713 valid" }),
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: hits.length ? `  matches ${hits.length}/${SAMPLES.length} samples: ${hits.map((h) => h.slice(0, 8)).join(", ")}` : "  (no sample match \u2014 will only catch your custom secrets)" })
+  ] });
+}
 
 // src/tui/panels/Stats.tsx
 import { Box as Box6, Text as Text6 } from "ink";
@@ -1807,12 +1997,15 @@ import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function StatsPanel({ active: active2 }) {
   const stats = useLoader(() => api.stats.get());
   const ts = useLoader(() => api.stats.timeseries({ period: "24h" }));
+  const drift2 = useLoader(() => api.stats.drift(7));
   usePoll(() => {
     stats.reload();
     ts.reload();
   }, 5e3, active2);
+  usePoll(drift2.reload, 3e4, active2);
   const s = stats.data;
   const points = ts.data?.timeseries ?? [];
+  const driftRules = (drift2.data?.rules ?? []).slice(0, 5);
   return /* @__PURE__ */ jsx6(DataView, { loading: stats.loading && !s, error: stats.error, children: s ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { bold: true, children: [
@@ -1865,7 +2058,7 @@ function StatsPanel({ active: active2 }) {
             { header: "MS", width: 5 },
             { header: "WHEN", width: 6 }
           ],
-          rows: (s.recent_activity ?? []).slice(0, 8).map((a) => [
+          rows: (s.recent_activity ?? []).slice(0, 6).map((a) => [
             { value: a.decision, color: decisionColor(a.decision) },
             { value: truncate(a.tool_name, 20), color: theme.accent },
             { value: String(a.evaluation_time_ms ?? "\u2014"), dim: true },
@@ -1873,6 +2066,31 @@ function StatsPanel({ active: active2 }) {
           ])
         }
       )
+    ] }),
+    /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+        "Denial drift ",
+        drift2.data ? `(7d: ${drift2.data.total_current} now vs ${drift2.data.total_previous} prev)` : ""
+      ] }),
+      driftRules.length ? /* @__PURE__ */ jsx6(
+        Table,
+        {
+          columns: [
+            { header: "NOW", width: 5 },
+            { header: "PREV", width: 5 },
+            { header: "\u0394", width: 6 },
+            { header: "RULE", width: 22 },
+            { header: "REASON", width: 26 }
+          ],
+          rows: driftRules.map((r) => [
+            { value: String(r.current), bold: true },
+            { value: String(r.previous), dim: true },
+            { value: r.is_new ? "NEW" : r.spike ? `+${r.delta}` : String(r.delta), color: r.is_new ? theme.ok : r.spike ? theme.bad : void 0 },
+            { value: truncate(r.rule_id ?? "\u2014", 22), color: theme.accent },
+            { value: truncate(r.reason ?? r.last_tool ?? "\u2014", 26), dim: true }
+          ])
+        }
+      ) : /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  no denials in window" })
     ] })
   ] }) : null });
 }
@@ -2046,22 +2264,109 @@ function Detail({ label, value, color }) {
   ] });
 }
 
+// src/tui/panels/Agents.tsx
+import { Box as Box8, Text as Text8, useInput as useInput6 } from "ink";
+import { useState as useState7 } from "react";
+import { Fragment as Fragment4, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+var statusColor = (s) => s === "active" ? theme.ok : s === "idle" ? theme.warn : theme.dim;
+var sevColor = (s) => s === "high" ? theme.bad : s === "medium" ? theme.warn : theme.dim;
+function Bar({ label, value, max = 100, width = 16, color = theme.accent }) {
+  const filled = max > 0 ? Math.round(Math.min(value, max) / max * width) : 0;
+  return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: label.padEnd(9) }),
+    /* @__PURE__ */ jsx8(Text8, { color, children: "\u2588".repeat(filled) }),
+    /* @__PURE__ */ jsx8(Text8, { color: "#233457", children: "\u2591".repeat(Math.max(0, width - filled)) }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " " + value })
+  ] });
+}
+function AgentsPanel({ focused }) {
+  const live2 = useLoader(() => api.agents.live({ limit: 30, includeDeactivated: true }));
+  usePoll(live2.reload, 6e3, focused ? false : true);
+  const [sel, setSel] = useState7(0);
+  const agents = (live2.data?.agents ?? []).filter((a) => a.agent_id);
+  const selected = agents[Math.min(sel, Math.max(0, agents.length - 1))];
+  const detail = useLoader(() => selected?.agent_id ? api.agents.get(selected.agent_id) : Promise.resolve(null), [selected?.agent_id]);
+  useInput6(
+    (_input, key) => {
+      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
+      else if (key.downArrow) setSel((n) => Math.min(agents.length - 1, n + 1));
+    },
+    { isActive: focused }
+  );
+  const d = detail.data;
+  const base = d?.baseline;
+  const radar = base?.radar;
+  const anomalies2 = d?.anomalies ?? [];
+  const tmap = d?.trust_map;
+  const tools = tmap?.tools ?? [];
+  const resources = tmap?.resources ?? [];
+  const listW = 30;
+  return /* @__PURE__ */ jsx8(DataView, { loading: live2.loading && !live2.data, error: live2.error, empty: !!live2.data && agents.length === 0, emptyText: "No identified agents yet.", children: /* @__PURE__ */ jsxs8(Box8, { children: [
+    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: listW, marginRight: 2, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: focused ? "\u2191\u2193 select agent" : "press \u2192 to browse" }),
+      agents.slice(0, 16).map((a, i) => /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: focused && i === sel ? "#1c2f63" : void 0, bold: i === sel, children: [
+        /* @__PURE__ */ jsxs8(Text8, { color: statusColor(a.status), children: [
+          a.status === "active" ? "\u25CF" : a.status === "idle" ? "\u25D0" : "\u25CB",
+          " "
+        ] }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.agent_name ?? a.agent_id ?? "?", 16).padEnd(17) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `t${a.trust_score}` })
+      ] }, a.session_id))
+    ] }),
+    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexGrow: 1, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "select an agent" }) : detail.loading && !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "loading profile\u2026" }) : !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "no profile (agent has no calls yet)" }) : /* @__PURE__ */ jsxs8(Fragment4, { children: [
+      /* @__PURE__ */ jsxs8(Box8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: truncate(selected.agent_name ?? selected.agent_id ?? "?", 22) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   trust ${base?.trustScore ?? "\u2014"}/100 \xB7 ${base?.character ?? ""}` })
+      ] }),
+      base?.characterBlurb ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: truncate(String(base.characterBlurb), 70) }) : null,
+      radar ? /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Behaviour radar (0\u2013100)" }),
+        /* @__PURE__ */ jsx8(Bar, { label: "read", value: Math.round((radar.read ?? 0) * 100) }),
+        /* @__PURE__ */ jsx8(Bar, { label: "write", value: Math.round((radar.write ?? 0) * 100), color: theme.warn }),
+        /* @__PURE__ */ jsx8(Bar, { label: "execute", value: Math.round((radar.execute ?? 0) * 100), color: theme.warn }),
+        /* @__PURE__ */ jsx8(Bar, { label: "network", value: Math.round((radar.network ?? 0) * 100) }),
+        /* @__PURE__ */ jsx8(Bar, { label: "complian.", value: Math.round((radar.compliance ?? 0) * 100), color: theme.ok })
+      ] }) : null,
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
+          "Anomalies ",
+          anomalies2.length ? `(${anomalies2.length})` : ""
+        ] }),
+        anomalies2.length === 0 ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  none" }) : anomalies2.slice(0, 4).map((an, i) => /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx8(Text8, { color: sevColor(String(an.severity)), children: `  ${String(an.severity).toUpperCase().slice(0, 4).padEnd(5)}` }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: String(an.kind).padEnd(12) }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: truncate(String(an.description ?? ""), 44) })
+        ] }, i))
+      ] }),
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Trust map \xB7 top tools" }),
+        tools.slice(0, 4).map((t, i) => /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx8(Text8, { color: t.anomalous ? theme.bad : theme.accent, children: `  ${truncate(String(t.name), 16).padEnd(17)}` }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `${t.count}\xD7 ${t.permission ?? ""}` })
+        ] }, i)),
+        resources.slice(0, 3).map((r, i) => /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: r.anomalous ? theme.bad : theme.dim, children: `  ${r.type === "domain" ? "\u{1F310}" : "\u{1F4C1}"} ${truncate(String(r.value), 40)} ${r.count}\xD7` }, "r" + i))
+      ] })
+    ] }) })
+  ] }) });
+}
+
 // src/tui/App.tsx
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
       "press ",
-      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
 }
 var SECTIONS = [
   { label: "Live", Panel: LiveHint },
+  { label: "Agents", Panel: AgentsPanel },
   { label: "Policies", Panel: PoliciesPanel },
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
@@ -2072,21 +2377,30 @@ var BANNER_HEX = ["#1432A0", "#2850BE", "#3C6ED7", "#5A8CE6", "#82AAF0", "#AAC8F
 function Banner() {
   const wide = (process.stdout.columns ?? 80) >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 function App() {
   const { exit } = useApp();
-  const [section, setSection] = useState7(0);
-  const [focus, setFocus] = useState7("nav");
-  useInput6((input, key) => {
+  const [section, setSection] = useState8(0);
+  const [focus, setFocus] = useState8("nav");
+  const [help, setHelp] = useState8(false);
+  useInput7((input, key) => {
+    if (help) {
+      setHelp(false);
+      return;
+    }
+    if (input === "?" && focus === "nav") {
+      setHelp(true);
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -2100,22 +2414,42 @@ function App() {
   const cols = process.stdout.columns ?? 100;
   const rows = process.stdout.rows ?? 30;
   const current = SECTIONS[section];
+  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }) });
+    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }) });
   }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx8(Banner, {}),
-    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx9(Banner, {}),
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx9(Text9, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx9(Box9, { children: focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+  ] });
+}
+var HELP = [
+  ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
+  ["Live", [["\u2191\u2193", "select a stream row"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+  ["Policies", [["\u2191\u2193", "browse / select"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["v", "versions / rollback"], ["s", "save"], ["x", "discard"]]],
+  ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]]
+];
+function HelpOverlay({ cols, rows }) {
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+      ] }, k))
+    ] }, group)) }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 
 // src/tui/index.tsx
-import { jsx as jsx9 } from "react/jsx-runtime";
+import { jsx as jsx10 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -2129,7 +2463,7 @@ async function launchTui() {
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}));
     await waitUntilExit();
   } finally {
     process.stdout.write("\x1B[?1049l");