@solongate/proxy 0.81.18 → 0.81.20

package/dist/index.js

@@ -6750,6 +6750,25 @@ function sparkline(values, width2) {
   if (max === 0) return BLOCKS[0].repeat(v.length);
   return v.map((n) => BLOCKS[Math.min(BLOCKS.length - 1, Math.round(n / max * (BLOCKS.length - 1)))]).join("");
 }
+function prettyJson(s) {
+  try {
+    return JSON.stringify(JSON.parse(s), null, 2);
+  } catch {
+    return s;
+  }
+}
+function wrapLines(s, width2) {
+  const w = Math.max(8, width2);
+  const out2 = [];
+  for (const raw of (s ?? "").split("\n")) {
+    if (raw.length <= w) {
+      out2.push(raw);
+      continue;
+    }
+    for (let i = 0; i < raw.length; i += w) out2.push(raw.slice(i, i + w));
+  }
+  return out2;
+}
 function truncate2(s, n) {
   if (!s) return "";
   return s.length <= n ? s : s.slice(0, Math.max(0, n - 1)) + "\u2026";
@@ -6903,12 +6922,16 @@ __export(settings_exports, {
   deleteWebhook: () => deleteWebhook,
   getAlerts: () => getAlerts,
   getGuardStatus: () => getGuardStatus,
+  getLocalLogs: () => getLocalLogs,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
   getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
+  setAlertEnabled: () => setAlertEnabled,
+  setLocalLogs: () => setLocalLogs,
   setSecurityLayers: () => setSecurityLayers,
-  setSelfProtection: () => setSelfProtection
+  setSelfProtection: () => setSelfProtection,
+  updateWebhook: () => updateWebhook
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -6931,6 +6954,12 @@ function getSelfProtection() {
 function setSelfProtection(enabled) {
   return request("PUT", "/settings/self-protection", { body: { enabled } });
 }
+function getLocalLogs() {
+  return request("GET", "/settings/local-logs");
+}
+function setLocalLogs(cfg) {
+  return request("PUT", "/settings/local-logs", { body: cfg });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }
@@ -6940,6 +6969,9 @@ function createAlert(body) {
 function deleteAlert(id) {
   return request("DELETE", "/settings/denial-alerts", { query: { id } });
 }
+function setAlertEnabled(id, enabled) {
+  return request("PATCH", "/settings/denial-alerts", { query: { id }, body: { enabled } });
+}
 function getWebhooks() {
   return request("GET", "/settings/denial-webhook");
 }
@@ -6949,6 +6981,9 @@ function createWebhook(body) {
 function deleteWebhook(id) {
   return request("DELETE", "/settings/denial-webhook", { query: { id } });
 }
+function updateWebhook(id, patch) {
+  return request("PATCH", "/settings/denial-webhook", { body: { id, ...patch } });
+}
 var init_settings = __esm({
   "src/api-client/settings.ts"() {
     "use strict";
@@ -7090,145 +7125,34 @@ var init_api_client = __esm({
 });
 
 // src/tui/notify.ts
-import { spawn, execFileSync as execFileSync2 } from "child_process";
-import { writeFileSync as writeFileSync3, existsSync as existsSync4 } from "fs";
-import { join as join6 } from "path";
-import { tmpdir as tmpdir2 } from "os";
-function captureFocusTarget() {
+import { spawn } from "child_process";
+function desktopNotify(title, msg) {
   try {
     if (process.platform === "linux") {
-      focusToken = (process.env.WINDOWID || "").trim() || null;
-      if (!focusToken) {
-        try {
-          focusToken = execFileSync2("xdotool", ["getactivewindow"], { encoding: "utf-8", timeout: 1500, stdio: ["ignore", "pipe", "ignore"] }).trim() || null;
-        } catch {
-          focusToken = null;
-        }
-      }
+      const p = spawn("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
+      p.on("error", () => {
+      });
+      p.unref();
     } else if (process.platform === "win32") {
-      const ps = `Add-Type -Name W -Namespace N -MemberDefinition '[DllImport("user32.dll")]public static extern System.IntPtr GetForegroundWindow();' | Out-Null; [N.W]::GetForegroundWindow().ToInt64()`;
-      try {
-        focusToken = execFileSync2("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { encoding: "utf-8", timeout: 4e3, stdio: ["ignore", "pipe", "ignore"] }).trim() || null;
-      } catch {
-        focusToken = null;
-      }
+      const q = (s) => s.replace(/'/g, "''");
+      const ps = `Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.Visible=$true;$n.ShowBalloonTip(6000,'${q(title)}','${q(msg)}',[System.Windows.Forms.ToolTipIcon]::Warning);Start-Sleep -Milliseconds 6500;$n.Dispose()`;
+      const p = spawn("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
+      p.on("error", () => {
+      });
+      p.unref();
+    } else if (process.platform === "darwin") {
+      const esc = (s) => s.replace(/"/g, '\\"');
+      const p = spawn("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
+      p.on("error", () => {
+      });
+      p.unref();
     }
-  } catch {
-    focusToken = null;
-  }
-}
-function desktopNotify(title, msg) {
-  try {
-    if (process.platform === "linux") linuxNotify(title, msg);
-    else if (process.platform === "win32") winNotify(title, msg);
-    else if (process.platform === "darwin") macNotify(title, msg);
-  } catch {
-  }
-}
-function linuxNotify(title, msg) {
-  let p;
-  try {
-    p = spawn("notify-send", ["--wait", "--action=default=Open", "-a", "SolonGate", title, msg], { stdio: ["ignore", "pipe", "ignore"] });
-  } catch {
-    return;
-  }
-  p.on("error", () => {
-  });
-  p.stdout?.on("data", (d) => {
-    if (String(d).trim() === "default") raiseLinuxWindow();
-  });
-  p.unref();
-}
-function raiseLinuxWindow() {
-  try {
-    process.stdout.write("\x1B[5t");
-  } catch {
-  }
-  if (!focusToken) return;
-  try {
-    const x = spawn("xdotool", ["windowactivate", focusToken], { stdio: "ignore" });
-    x.on("error", () => {
-      try {
-        const hex = "0x" + Number(focusToken).toString(16);
-        const w = spawn("wmctrl", ["-ia", hex], { stdio: "ignore" });
-        w.on("error", () => {
-        });
-        w.unref();
-      } catch {
-      }
-    });
-    x.unref();
-  } catch {
-  }
-}
-function ensureWinScript() {
-  if (winScriptPath && existsSync4(winScriptPath)) return winScriptPath;
-  const p = join6(tmpdir2(), "solongate-toast.ps1");
-  const script = [
-    "param([string]$Title,[string]$Msg,[string]$Hwnd)",
-    "Add-Type -AssemblyName System.Windows.Forms",
-    "Add-Type -AssemblyName System.Drawing",
-    `Add-Type -Name Win -Namespace Sg -MemberDefinition '[DllImport("user32.dll")]public static extern bool SetForegroundWindow(System.IntPtr h);[DllImport("user32.dll")]public static extern bool ShowWindow(System.IntPtr h,int c);'`,
-    "$ni=New-Object System.Windows.Forms.NotifyIcon",
-    "$ni.Icon=[System.Drawing.SystemIcons]::Information",
-    "$ni.Visible=$true",
-    "$script:clicked=$false",
-    "$ni.add_BalloonTipClicked({$script:clicked=$true})",
-    "$ni.ShowBalloonTip(8000,$Title,$Msg,[System.Windows.Forms.ToolTipIcon]::Warning)",
-    "$sw=[System.Diagnostics.Stopwatch]::StartNew()",
-    "while($sw.Elapsed.TotalSeconds -lt 9 -and -not $script:clicked){[System.Windows.Forms.Application]::DoEvents();Start-Sleep -Milliseconds 100}",
-    "if($script:clicked -and $Hwnd){try{$h=[System.IntPtr][int64]$Hwnd;[Sg.Win]::ShowWindow($h,9)|Out-Null;[Sg.Win]::SetForegroundWindow($h)|Out-Null}catch{}}",
-    "$ni.Visible=$false;$ni.Dispose()"
-  ].join("\n");
-  try {
-    writeFileSync3(p, script);
-    winScriptPath = p;
-    return p;
-  } catch {
-    return null;
-  }
-}
-function winNotify(title, msg) {
-  const script = ensureWinScript();
-  if (!script) return;
-  try {
-    const p = spawn("powershell", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", script, "-Title", title, "-Msg", msg, "-Hwnd", focusToken || ""], { stdio: "ignore", detached: true, windowsHide: true });
-    p.on("error", () => {
-    });
-    p.unref();
   } catch {
   }
 }
-function macBundleId() {
-  const prog = (process.env.TERM_PROGRAM || "").toLowerCase();
-  if (prog.includes("iterm")) return "com.googlecode.iterm2";
-  if (prog.includes("apple_terminal")) return "com.apple.Terminal";
-  if (prog.includes("vscode")) return "com.microsoft.VSCode";
-  return "com.apple.Terminal";
-}
-function macNotify(title, msg) {
-  try {
-    const p = spawn("terminal-notifier", ["-title", title, "-message", msg, "-activate", macBundleId(), "-sender", macBundleId()], { stdio: "ignore", detached: true });
-    p.on("error", () => {
-      try {
-        const esc = (s) => s.replace(/"/g, '\\"');
-        const a = spawn("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
-        a.on("error", () => {
-        });
-        a.unref();
-      } catch {
-      }
-    });
-    p.unref();
-  } catch {
-  }
-}
-var focusToken, winScriptPath;
 var init_notify = __esm({
   "src/tui/notify.ts"() {
     "use strict";
-    focusToken = null;
-    winScriptPath = null;
   }
 });
 
@@ -7271,6 +7195,24 @@ function usePoll(reload, intervalMs, enabled = true) {
     return () => clearInterval(t);
   }, [reload, intervalMs, enabled]);
 }
+function useTermSize() {
+  const read = () => ({ cols: process.stdout.columns ?? 100, rows: process.stdout.rows ?? 30 });
+  const [size, setSize] = useState(read);
+  useEffect(() => {
+    const onResize = () => setSize(read());
+    process.stdout.on("resize", onResize);
+    return () => {
+      process.stdout.off("resize", onResize);
+    };
+  }, []);
+  return size;
+}
+function usePanelSize() {
+  const { cols, rows } = useTermSize();
+  const wide = cols >= 82;
+  const shellRows = wide ? 12 : 7;
+  return { cols: Math.max(30, cols - 22), rows: Math.max(8, rows - shellRows) };
+}
 var init_hooks = __esm({
   "src/tui/hooks.ts"() {
     "use strict";
@@ -7280,9 +7222,9 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { closeSync, mkdirSync as mkdirSync3, openSync, readSync, statSync, writeFileSync as writeFileSync4 } from "fs";
+import { closeSync, mkdirSync as mkdirSync3, openSync, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join7 } from "path";
+import { join as join6 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function tailLines(file, maxBytes = 131072) {
@@ -7420,6 +7362,9 @@ function LivePanel({ active: active2 }) {
   const [detail, setDetail] = useState2(null);
   const [detailCloud, setDetailCloud] = useState2([]);
   const [detailScroll, setDetailScroll] = useState2(0);
+  const [inspect, setInspect] = useState2(null);
+  const [inspectScroll, setInspectScroll] = useState2(0);
+  const inspectFromRef = useRef2("stream");
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -7625,8 +7570,7 @@ function LivePanel({ active: active2 }) {
       else if (e.burst) fireAlert("sec:" + e.id, "Rate-limit burst", `BURST ${e.tool}${who}`, "warn");
     }
   }, [tick, active2, fireAlert]);
-  const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 30;
+  const { cols, rows } = useTermSize();
   const ins = insights.data ?? {};
   const spin = SPIN[tick % SPIN.length];
   const nowMs = Date.now();
@@ -7772,8 +7716,18 @@ function LivePanel({ active: active2 }) {
         setEditingSearch(true);
         return;
       }
+      if (mode === "inspect") {
+        if (key.leftArrow) {
+          setMode(inspectFromRef.current);
+          setInspect(null);
+        } else if (key.upArrow) setInspectScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setInspectScroll((n) => n + 1);
+        else if (key.pageUp) setInspectScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setInspectScroll((n) => n + 10);
+        return;
+      }
       if (mode === "detail") {
-        const maxD = Math.max(0, detailEntries.length - (rows - 10));
+        const maxD = Math.max(0, detailEntries.length - 1);
         if (key.leftArrow) {
           setMode("stream");
           setDetail(null);
@@ -7781,6 +7735,15 @@ function LivePanel({ active: active2 }) {
         else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
         else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
         else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        else if (key.return) {
+          const e = detailEntries[Math.min(detailScroll, maxD)];
+          if (e) {
+            inspectFromRef.current = "detail";
+            setInspect(e);
+            setInspectScroll(0);
+            setMode("inspect");
+          }
+        }
         return;
       }
       if (mode === "pick") {
@@ -7802,6 +7765,13 @@ function LivePanel({ active: active2 }) {
       if (input === "f") {
         setFilter((f) => FILTERS[(FILTERS.indexOf(f) + 1) % FILTERS.length]);
         setSel(0);
+      } else if (key.return) {
+        if (selEntry) {
+          inspectFromRef.current = "stream";
+          setInspect(selEntry);
+          setInspectScroll(0);
+          setMode("inspect");
+        }
       } else if (input === "s") {
         setPickIdx(0);
         setMode("pick");
@@ -7811,10 +7781,10 @@ function LivePanel({ active: active2 }) {
       else if (input === "x") toggleSignal("dlp");
       else if (input === "r") toggleSignal("ratelimit");
       else if (input === "e") {
-        const file = join7(homedir4(), ".solongate", "live-export.jsonl");
+        const file = join6(homedir4(), ".solongate", "live-export.jsonl");
         try {
-          mkdirSync3(join7(homedir4(), ".solongate"), { recursive: true });
-          writeFileSync4(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          mkdirSync3(join6(homedir4(), ".solongate"), { recursive: true });
+          writeFileSync3(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -7864,6 +7834,52 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
     frozen ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
   ] });
+  if (mode === "inspect" && inspect) {
+    const e = inspect;
+    const bodyW = Math.max(20, cols - 4);
+    const lines = wrapLines(prettyJson(e.detail || "(no arguments / reason recorded)"), bodyW);
+    const bodyRows = Math.max(4, rows - 7);
+    const maxScroll2 = Math.max(0, lines.length - bodyRows);
+    const off = Math.min(inspectScroll, maxScroll2);
+    const win = lines.slice(off, off + bodyRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "#4f6db8", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx2(Text2, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx2(Text2, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx2(Text2, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx2(Text2, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "FULL CONTENT", extra: `${lines.length} lines${maxScroll2 ? ` \xB7 \u25BC${maxScroll2 - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 space copy mode \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
@@ -7883,9 +7899,10 @@ function LivePanel({ active: active2 }) {
     const last = d[0]?.at;
     const tlRows = Math.max(4, rows - 10);
     const tlBody = Math.max(3, tlRows - 1);
-    const maxD = Math.max(0, d.length - tlBody);
-    const dScroll = Math.min(detailScroll, maxD);
-    const tl = d.slice(dScroll, dScroll + tlBody);
+    const dSel = Math.min(detailScroll, Math.max(0, d.length - 1));
+    const maxStart = Math.max(0, d.length - tlBody);
+    const start = Math.min(Math.max(0, dSel - Math.floor((tlBody - 1) / 2)), maxStart);
+    const tl = d.slice(start, start + tlBody);
     return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
       titleBar,
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
@@ -7923,16 +7940,16 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 / search \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${dSel + 1}/${d.length} \xB7 newest first \xB7 \u2191\u2193 select \xB7 enter full entry \xB7 / search \xB7 \u2190 back`, width: innerW }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
         searchRow,
         tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
-        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
+        tl.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: start + i === dSel }, e.id))
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 enter full entry \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
@@ -8045,7 +8062,7 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `${selClamped + 1}/${visibleDesc.length}${signal !== "none" ? ` \xB7 ${signal}` : ""}${q ? " \xB7 search" : ""} \xB7 \u2191\u2193 select \xB7 w allow \xB7 b block \xB7 d/x/r ${filter} \xB7 s`,
+        extra: `${selClamped + 1}/${visibleDesc.length}${signal !== "none" ? ` \xB7 ${signal}` : ""}${q ? " \xB7 search" : ""} \xB7 \u2191\u2193 select \xB7 enter full \xB7 w allow \xB7 b block \xB7 d/x/r ${filter} \xB7 s`,
         width: innerW
       }
     ),
@@ -8053,7 +8070,7 @@ function LivePanel({ active: active2 }) {
       searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dashboard \u2192 Settings \u2192 Local logs \xB7 hooks write ~/.solongate/local-logs \xB7 view: `solongate logs-server`" })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings \xB7 hooks write ~/.solongate/local-logs" })
       ] }) : null,
       windowed.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         spin,
@@ -8064,7 +8081,7 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 w allow \xB7 b block \xB7 d/x/r \xB7 / search \xB7 f \xB7 s \xB7 space copy \xB7 esc \xB7 q " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 enter full \xB7 w allow \xB7 b block \xB7 d/x/r \xB7 / search \xB7 f \xB7 s \xB7 space copy \xB7 esc \xB7 q " })
     ] })
   ] });
 }
@@ -8081,8 +8098,8 @@ var init_Live = __esm({
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
     DIM_FLOOR = "#233457";
-    LOCAL_LOG = join7(homedir4(), ".solongate", "local-logs", "solongate-audit.jsonl");
-    RING = join7(process.cwd(), ".solongate", ".eval-ring.jsonl");
+    LOCAL_LOG = join6(homedir4(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    RING = join6(process.cwd(), ".solongate", ".eval-ring.jsonl");
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -8893,8 +8910,9 @@ var init_Stats = __esm({
 import { Box as Box7, Text as Text7, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
 import { useState as useState6 } from "react";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function AuditPanel({ active: active2, focused }) {
+  const { cols, rows } = usePanelSize();
   const [di, setDi] = useState6(0);
   const [gi, setGi] = useState6(0);
   const [tool, setTool] = useState6("");
@@ -8902,6 +8920,7 @@ function AuditPanel({ active: active2, focused }) {
   const [search, setSearch] = useState6("");
   const [sel, setSel] = useState6(0);
   const [view, setView] = useState6("list");
+  const [detailScroll, setDetailScroll] = useState6(0);
   const [editing, setEditing] = useState6(null);
   const query = {
     filter: DECISIONS[di],
@@ -8909,7 +8928,7 @@ function AuditPanel({ active: active2, focused }) {
     tool: tool || void 0,
     agent_name: agent || void 0,
     search: search || void 0,
-    limit: 100
+    limit: FETCH_LIMIT
   };
   const auditQ = useLoader(() => api.audit.list(query), [di, gi, tool, agent, search]);
   usePoll(auditQ.reload, 6e3, active2 && view === "list" && !editing);
@@ -8923,15 +8942,29 @@ function AuditPanel({ active: active2, focused }) {
     (input, key) => {
       if (view === "detail") {
         if (key.leftArrow || key.escape) setView("list");
+        else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => n + 1);
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      const clearSel = () => setSel(0);
       if (key.upArrow) setSel((n) => Math.max(0, n - 1));
       else if (key.downArrow) setSel((n) => Math.min(entries.length - 1, n + 1));
+      else if (key.pageUp) setSel((n) => Math.max(0, n - 10));
+      else if (key.pageDown) setSel((n) => Math.min(entries.length - 1, n + 10));
       else if (key.return || key.rightArrow) {
-        if (current) setView("detail");
-      } else if (input === "f") setDi((n) => (n + 1) % DECISIONS.length);
-      else if (input === "g") setGi((n) => (n + 1) % SIGNALS.length);
-      else if (input === "t") setEditing("tool");
+        if (current) {
+          setDetailScroll(0);
+          setView("detail");
+        }
+      } else if (input === "f") {
+        setDi((n) => (n + 1) % DECISIONS.length);
+        clearSel();
+      } else if (input === "g") {
+        setGi((n) => (n + 1) % SIGNALS.length);
+        clearSel();
+      } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
       else if (input === "c") {
@@ -8940,49 +8973,64 @@ function AuditPanel({ active: active2, focused }) {
         setTool("");
         setAgent("");
         setSearch("");
+        clearSel();
       }
     },
     { isActive: focused && !editing }
   );
   if (view === "detail" && current) {
     const sessionCalls = sessionQ.data?.entries ?? [];
+    const bodyW = Math.max(20, cols - 2);
+    const reasonLines = wrapLines("reason: " + (current.reason ?? "\u2014"), bodyW);
+    const argLines = current.arguments_summary ? wrapLines(prettyJson(JSON.stringify(current.arguments_summary)), bodyW) : ["(no arguments recorded)"];
+    const sessionRows = current.session_id ? Math.min(4, sessionCalls.length) + 2 : 1;
+    const reasonShown = reasonLines.slice(0, 4);
+    const argBudget = Math.max(3, rows - 2 - 5 - reasonShown.length - 1 - sessionRows - 1);
+    const maxScroll = Math.max(0, argLines.length - argBudget);
+    const off = Math.min(detailScroll, maxScroll);
+    const argWin = argLines.slice(off, off + argBudget);
     return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs7(Box7, { children: [
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(current.decision), bold: true, children: current.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: "  " + current.tool_name }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  " + current.permission + " \xB7 " + current.trust_level })
       ] }),
-      /* @__PURE__ */ jsx7(Detail, { label: "reason", value: current.reason ?? "\u2014" }),
+      reasonShown.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: i === 0 ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "reason   " }),
+        /* @__PURE__ */ jsx7(Text7, { children: l.slice("reason: ".length) })
+      ] }) : /* @__PURE__ */ jsx7(Text7, { children: "         " + l }) }, "r" + i)),
       /* @__PURE__ */ jsx7(Detail, { label: "rule", value: current.matched_rule_id ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "agent", value: current.agent_name ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "session", value: current.session_id ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "dlp", value: current.dlp_matches?.length ? current.dlp_matches.join(", ") : "none", color: current.dlp_matches?.length ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx7(Detail, { label: "when", value: new Date(current.created_at).toLocaleString() }),
-      current.arguments_summary ? /* @__PURE__ */ jsx7(Detail, { label: "args", value: truncate2(JSON.stringify(current.arguments_summary), 60) }) : null,
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx7(Detail, { label: "when", value: new Date(current.created_at).toLocaleString() + (current.evaluation_time_ms != null ? ` \xB7 eval ${current.evaluation_time_ms}ms` : "") }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `arguments \u2014 full \xB7 ${argLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""}` }),
+      /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: argBudget, overflow: "hidden", children: argWin.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: l || " " }, off + i)) }),
+      current.session_id ? /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
         /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "Session ",
-          current.session_id ? `\xB7 ${sessionCalls.length} calls` : "(no session id)"
+          "Session \xB7 ",
+          sessionCalls.length,
+          " calls"
         ] }),
-        current.session_id ? /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx7(
           Table,
           {
             columns: [
               { header: "DECISION", width: 9 },
               { header: "TOOL", width: 20 },
-              { header: "REASON", width: 26 },
+              { header: "REASON", width: Math.max(16, cols - 48) },
               { header: "WHEN", width: 6 }
             ],
-            rows: sessionCalls.slice(0, 12).map((e) => [
+            rows: sessionCalls.slice(0, Math.max(1, sessionRows - 2)).map((e) => [
               { value: e.decision, color: decisionColor(e.decision) },
               { value: truncate2(e.tool_name, 20), color: theme.accent },
-              { value: truncate2(e.reason ?? "\u2014", 26) },
+              { value: truncate2(e.reason ?? "\u2014", Math.max(16, cols - 48)) },
               { value: ago(e.created_at), dim: true }
             ])
           }
-        ) : null
-      ] }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2190 back to list" })
+        )
+      ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "(no session id)" }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2191\u2193 scroll arguments \xB7 \u2190/esc back to list" })
     ] });
   }
   const chip = (label, val, on) => /* @__PURE__ */ jsxs7(Text7, { children: [
@@ -8993,6 +9041,13 @@ function AuditPanel({ active: active2, focused }) {
     /* @__PURE__ */ jsx7(Text7, { color: on ? theme.accentBright : theme.dim, children: val }),
     /* @__PURE__ */ jsx7(Text7, { children: " " })
   ] });
+  const headerRows = 4 + (editing ? 1 : 0);
+  const listRows = Math.max(4, rows - headerRows);
+  const selClamped = Math.min(sel, Math.max(0, entries.length - 1));
+  const maxStart = Math.max(0, entries.length - listRows);
+  const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
+  const windowed = entries.slice(start, start + listRows);
+  const reasonW = Math.min(60, Math.max(12, cols - 67));
   return /* @__PURE__ */ jsx7(DataView, { loading: auditQ.loading && !auditQ.data, error: auditQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs7(Box7, { children: [
       chip("dec", DECISIONS[di] ?? "all", di !== 0),
@@ -9001,8 +9056,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("agent", agent || "\xB7", !!agent),
       chip("search", search || "\xB7", !!search)
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 enter detail \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 c clear" : "press \u2192 to browse" }),
-    editing ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 c clear" : "press \u2192 to browse" }),
+    editing ? /* @__PURE__ */ jsxs7(Box7, { children: [
       /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
         editing,
         ": "
@@ -9011,16 +9066,15 @@ function AuditPanel({ active: active2, focused }) {
         TextInput4,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
-          onChange: editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch,
+          onChange: (v) => {
+            (editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch)(v);
+            setSel(0);
+          },
           onSubmit: () => setEditing(null)
         }
       )
     ] }) : null,
-    /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-      auditQ.data?.total ?? 0,
-      " matched \xB7 showing ",
-      Math.min(entries.length, 12)
-    ] }) }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${auditQ.data?.total ?? 0} matched \xB7 ${entries.length} loaded \xB7 ${selClamped + 1}/${entries.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < entries.length ? ` \xB7 \u25BC${entries.length - start - listRows} older` : ""}` }),
     /* @__PURE__ */ jsx7(
       Table,
       {
@@ -9029,22 +9083,22 @@ function AuditPanel({ active: active2, focused }) {
           { header: "DECISION", width: 9 },
           { header: "TOOL", width: 18 },
           { header: "AGENT", width: 14 },
-          { header: "REASON", width: 24 },
+          { header: "REASON", width: reasonW },
           { header: "DLP", width: 4 },
           { header: "WHEN", width: 6 }
         ],
-        rows: entries.slice(0, 12).map((e, i) => rowFor(e, i === sel && focused))
+        rows: windowed.map((e, i) => rowFor(e, start + i === selClamped && focused, reasonW))
       }
     )
   ] }) });
 }
-function rowFor(e, active2) {
+function rowFor(e, active2, reasonW) {
   return [
     { value: active2 ? "\u25B8" : "", color: theme.accentBright },
     { value: e.decision, color: decisionColor(e.decision) },
     { value: truncate2(e.tool_name, 18), color: theme.accent },
     { value: truncate2(e.agent_name ?? "\u2014", 14), dim: true },
-    { value: truncate2(e.reason ?? "\u2014", 24) },
+    { value: truncate2(e.reason ?? "\u2014", reasonW) },
     { value: e.dlp_matches?.length ? String(e.dlp_matches.length) : "0", color: e.dlp_matches?.length ? theme.bad : void 0, dim: !e.dlp_matches?.length },
     { value: ago(e.created_at), dim: true }
   ];
@@ -9052,10 +9106,10 @@ function rowFor(e, active2) {
 function Detail({ label, value, color }) {
   return /* @__PURE__ */ jsxs7(Box7, { children: [
     /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: label.padEnd(9) }),
-    /* @__PURE__ */ jsx7(Text7, { color, children: value })
+    /* @__PURE__ */ jsx7(Text7, { color, wrap: "truncate", children: value })
   ] });
 }
-var DECISIONS, SIGNALS;
+var DECISIONS, SIGNALS, FETCH_LIMIT;
 var init_Audit = __esm({
   "src/tui/panels/Audit.tsx"() {
     "use strict";
@@ -9065,13 +9119,14 @@ var init_Audit = __esm({
     init_theme();
     DECISIONS = [void 0, "DENY", "ALLOW"];
     SIGNALS = [void 0, "dlp", "ratelimit"];
+    FETCH_LIMIT = 500;
   }
 });
 
 // src/tui/panels/Agents.tsx
 import { Box as Box8, Text as Text8, useInput as useInput6 } from "ink";
 import { useState as useState7 } from "react";
-import { Fragment as Fragment4, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function Bar({ label, value, max = 100, width: width2 = 16, color = theme.accent }) {
   const filled = max > 0 ? Math.round(Math.min(value, max) / max * width2) : 0;
   return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
@@ -9115,7 +9170,7 @@ function AgentsPanel({ focused }) {
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `t${a.trust_score}` })
       ] }, a.session_id))
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexGrow: 1, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "select an agent" }) : detail.loading && !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "loading profile\u2026" }) : !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "no profile (agent has no calls yet)" }) : /* @__PURE__ */ jsxs8(Fragment4, { children: [
+    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexGrow: 1, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "select an agent" }) : detail.loading && !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "loading profile\u2026" }) : !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "no profile (agent has no calls yet)" }) : /* @__PURE__ */ jsxs8(Fragment5, { children: [
       /* @__PURE__ */ jsxs8(Box8, { children: [
         /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: truncate2(selected.agent_name ?? selected.agent_id ?? "?", 22) }),
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   trust ${base?.trustScore ?? "\u2014"}/100 \xB7 ${base?.character ?? ""}` })
@@ -9164,41 +9219,256 @@ var init_Agents = __esm({
   }
 });
 
-// src/tui/App.tsx
-import { Box as Box9, Text as Text9, useApp, useInput as useInput7 } from "ink";
+// src/tui/panels/Settings.tsx
+import { Box as Box9, Text as Text9, useInput as useInput7 } from "ink";
+import TextInput5 from "ink-text-input";
 import { useState as useState8 } from "react";
 import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+function alertBodyFor(channel) {
+  const c2 = channel.trim();
+  const base = { name: "dataroom alert", threshold: 5, windowSeconds: 60, signal: "any" };
+  if (/^https?:\/\//i.test(c2)) return { ...base, slackUrl: c2 };
+  if (c2.includes("@")) return { ...base, emails: [c2] };
+  return { ...base, telegram: [c2] };
+}
+function SettingsPanel({ active: active2, focused }) {
+  void active2;
+  const { cols, rows } = usePanelSize();
+  const [sel, setSel] = useState8(0);
+  const [editing, setEditing] = useState8(null);
+  const [input, setInput] = useState8("");
+  const [confirmDel, setConfirmDel] = useState8(null);
+  const [msg, setMsg] = useState8(null);
+  const [busy, setBusy] = useState8(false);
+  const localQ = useLoader(() => api.settings.getLocalLogs());
+  const whQ = useLoader(() => api.settings.getWebhooks());
+  const alertQ = useLoader(() => api.settings.getAlerts());
+  const local = localQ.data;
+  const webhooks = whQ.data?.webhooks ?? [];
+  const alerts = alertQ.data?.rules ?? [];
+  const rowsAll = [
+    { kind: "ll-enabled" },
+    { kind: "ll-path" },
+    ...webhooks.map((wh) => ({ kind: "wh", wh })),
+    { kind: "wh-add" },
+    ...alerts.map((rule) => ({ kind: "alert", rule })),
+    { kind: "alert-add" }
+  ];
+  const selClamped = Math.min(sel, rowsAll.length - 1);
+  const cur = rowsAll[selClamped];
+  const keyOf = (r) => r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
+  const reloadAll = () => {
+    localQ.reload();
+    whQ.reload();
+    alertQ.reload();
+  };
+  const run12 = (label, fn, reload) => {
+    if (busy) return;
+    setBusy(true);
+    setMsg({ text: label + "\u2026", level: "ok" });
+    fn().then(() => {
+      setMsg({ text: "\u2713 " + label, level: "ok" });
+      reload();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" })).finally(() => setBusy(false));
+  };
+  const activate = (r) => {
+    if (r.kind === "ll-enabled") {
+      if (!local) return;
+      if (!local.enabled && !local.path.trim()) {
+        setMsg({ text: "set a path first (\u2193 then enter)", level: "bad" });
+        return;
+      }
+      run12(local.enabled ? "local logs disabled" : "local logs enabled", () => api.settings.setLocalLogs({ enabled: !local.enabled, path: local.path }), localQ.reload);
+    } else if (r.kind === "ll-path") {
+      setInput(local?.path ?? "");
+      setEditing("path");
+    } else if (r.kind === "wh") {
+      run12(r.wh.enabled ? "webhook disabled" : "webhook enabled", () => api.settings.updateWebhook(r.wh.id, { enabled: !r.wh.enabled }), whQ.reload);
+    } else if (r.kind === "wh-add") {
+      setInput("");
+      setEditing("wh-url");
+    } else if (r.kind === "alert") {
+      run12(r.rule.enabled ? "alert disabled" : "alert enabled", () => api.settings.setAlertEnabled(r.rule.id, !r.rule.enabled), alertQ.reload);
+    } else {
+      setInput("");
+      setEditing("alert-channel");
+    }
+  };
+  const submitInput = () => {
+    const v = input.trim();
+    const which = editing;
+    setEditing(null);
+    if (which === "path") {
+      const enabled = (local?.enabled ?? false) && v.length > 0;
+      run12(v ? `path saved${enabled ? "" : " (press enter on enabled to turn on)"}` : "path cleared (local logs off)", () => api.settings.setLocalLogs({ enabled, path: v }), localQ.reload);
+    } else if (which === "wh-url") {
+      if (!v) return;
+      run12("webhook added", () => api.settings.createWebhook({ url: v, events: "denials" }), whQ.reload);
+    } else if (which === "alert-channel") {
+      if (!v) return;
+      run12("alert rule added", () => api.settings.createAlert(alertBodyFor(v)), alertQ.reload);
+    }
+  };
+  useInput7(
+    (inp, key) => {
+      setMsg(null);
+      if (key.upArrow) {
+        setSel((n) => Math.max(0, n - 1));
+        setConfirmDel(null);
+      } else if (key.downArrow) {
+        setSel((n) => Math.min(rowsAll.length - 1, n + 1));
+        setConfirmDel(null);
+      } else if (key.return || inp === " ") activate(cur);
+      else if (inp === "e" && cur.kind === "wh") {
+        const next = EVENTS[(EVENTS.indexOf(cur.wh.events) + 1) % EVENTS.length];
+        run12(`webhook events \u2192 ${next}`, () => api.settings.updateWebhook(cur.wh.id, { events: next }), whQ.reload);
+      } else if (inp === "e" && cur.kind === "ll-path") activate(cur);
+      else if (inp === "a") {
+        if (cur.kind === "wh" || cur.kind === "wh-add") {
+          setInput("");
+          setEditing("wh-url");
+        } else if (cur.kind === "alert" || cur.kind === "alert-add") {
+          setInput("");
+          setEditing("alert-channel");
+        }
+      } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
+        const k = keyOf(cur);
+        if (confirmDel !== k) {
+          setConfirmDel(k);
+          setMsg({ text: "press d again to delete", level: "bad" });
+          return;
+        }
+        setConfirmDel(null);
+        if (cur.kind === "wh") run12("webhook deleted", () => api.settings.deleteWebhook(cur.wh.id), whQ.reload);
+        else run12("alert deleted", () => api.settings.deleteAlert(cur.rule.id), alertQ.reload);
+      } else if (inp === "r") reloadAll();
+    },
+    { isActive: focused && !editing }
+  );
+  const loading = localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data;
+  const error = localQ.error ?? whQ.error ?? alertQ.error;
+  const mark = (r) => keyOf(r) === keyOf(cur) && focused ? "\u25B8 " : "  ";
+  const onOff = (on) => on ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "off" });
+  const chanOf = (rule) => [...(rule.slackUrls ?? []).map((u) => "slack " + u), ...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
+  const listBudget = Math.max(4, rows - 8);
+  const start = Math.min(Math.max(0, selClamped - Math.floor(listBudget / 2)), Math.max(0, rowsAll.length - listBudget));
+  const inWindow = (r) => {
+    const i = rowsAll.findIndex((x) => keyOf(x) === keyOf(r));
+    return i >= start && i < start + listBudget;
+  };
+  return /* @__PURE__ */ jsx9(DataView, { loading, error, children: /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter/space toggle-edit-add \xB7 e events \xB7 d delete \xB7  r refresh" : "press \u2192 to configure" }),
+    editing ? /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: editing === "path" ? "local log path: " : editing === "wh-url" ? "webhook url: " : "channel (slack url / email / telegram id): " }),
+      /* @__PURE__ */ jsx9(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
+    ] }) : msg ? /* @__PURE__ */ jsx9(Text9, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : /* @__PURE__ */ jsx9(Text9, { children: " " }),
+    inWindow(rowsAll[0]) || inWindow(rowsAll[1]) ? /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "LOCAL LOGS ",
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[0]) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "enabled ".padEnd(10) }),
+        onOff(!!local?.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "   enter toggles" })
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[1]) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "path ".padEnd(10) }),
+        local?.path ? /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(local.path, cols - 14) }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "not set \u2014 enter to edit" })
+      ] })
+    ] }) : null,
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "WEBHOOKS ",
+        /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
+          "\u2014 POST every matching event to your endpoint (",
+          webhooks.length,
+          ")"
+        ] })
+      ] }),
+      webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
+        onOff(wh.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(wh.url, cols - 16) })
+      ] }, wh.id)),
+      inWindow(rowsAll.find((r) => r.kind === "wh-add")) ? /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "+ add webhook (enter)" })
+      ] }) : null
+    ] }),
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "ALERTS ",
+        /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
+          "\u2014 notify on a signal spike (",
+          alerts.length,
+          ")"
+        ] })
+      ] }),
+      alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
+        onOff(rule.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
+        /* @__PURE__ */ jsx9(Text9, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(chanOf(rule), cols - 26) })
+      ] }, rule.id)),
+      inWindow(rowsAll[rowsAll.length - 1]) ? /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
+      ] }) : null
+    ] })
+  ] }) });
+}
+var EVENTS;
+var init_Settings = __esm({
+  "src/tui/panels/Settings.tsx"() {
+    "use strict";
+    init_api_client();
+    init_components();
+    init_hooks();
+    init_theme();
+    EVENTS = ["denials", "allowed", "all"];
+  }
+});
+
+// src/tui/App.tsx
+import { Box as Box10, Text as Text10, useApp, useInput as useInput8 } from "ink";
+import { useState as useState9 } from "react";
+import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx10(Box10, { marginTop: 1, children: /* @__PURE__ */ jsxs10(Text10, { children: [
       "press ",
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
 }
-function Banner() {
-  const wide = (process.stdout.columns ?? 80) >= 82;
+function Banner({ cols }) {
+  const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs10(Box10, { children: [
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx10(Text10, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 function App() {
   const { exit } = useApp();
-  const [section, setSection] = useState8(0);
-  const [focus, setFocus] = useState8("nav");
-  const [help, setHelp] = useState8(false);
-  useInput7((input, key) => {
+  const [section, setSection] = useState9(0);
+  const [focus, setFocus] = useState9("nav");
+  const [help, setHelp] = useState9(false);
+  useInput8((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -9217,34 +9487,33 @@ function App() {
       else if (input === "q" && SECTIONS[section].label === "Live") exit();
     }
   });
-  const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 30;
+  const { cols, rows } = useTermSize();
   const current = SECTIONS[section];
-  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
+  if (help) return /* @__PURE__ */ jsx10(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }) });
+    return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx10(LivePanel, { active: true, focused: true }) });
   }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Banner, {}),
-    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx9(Text9, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx10(Banner, { cols }),
+    /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx10(Text10, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx10(Box10, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx10(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx9(Box9, { children: focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx10(Box10, { children: focus === "nav" ? /* @__PURE__ */ jsx10(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx10(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx10(Box10, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs10(Text10, { children: [
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 var SECTIONS, BANNER_HEX, HELP;
@@ -9261,6 +9530,8 @@ var init_App = __esm({
     init_Stats();
     init_Audit();
     init_Agents();
+    init_Settings();
+    init_hooks();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },
       { label: "Agents", Panel: AgentsPanel },
@@ -9268,14 +9539,17 @@ var init_App = __esm({
       { label: "Rate Limit", Panel: RateLimitPanel },
       { label: "DLP", Panel: DlpPanel },
       { label: "Stats", Panel: StatsPanel },
-      { label: "Audit", Panel: AuditPanel }
+      { label: "Audit", Panel: AuditPanel },
+      { label: "Settings", Panel: SettingsPanel }
     ];
     BANNER_HEX = ["#1432A0", "#2850BE", "#3C6ED7", "#5A8CE6", "#82AAF0", "#AAC8FA"];
     HELP = [
       ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
-      ["Live", [["\u2191\u2193", "select a stream row"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+      ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
       ["Policies", [["\u2191\u2193", "browse / select"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["v", "versions / rollback"], ["s", "save"], ["x", "discard"]]],
-      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]]
+      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
+      ["Audit", [["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry detail"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+      ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
     ];
   }
 });
@@ -9286,7 +9560,7 @@ __export(tui_exports, {
   launchTui: () => launchTui
 });
 import { render } from "ink";
-import { jsx as jsx10 } from "react/jsx-runtime";
+import { jsx as jsx11 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -9298,10 +9572,9 @@ async function launchTui() {
     process.stderr.write("Not logged in. Run `solongate login` first.\n");
     return;
   }
-  captureFocusTarget();
   process.stdout.write("\x1B[?1049h\x1B[H");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}));
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx11(App, {}));
     await waitUntilExit();
   } finally {
     process.stdout.write("\x1B[?1049l");
@@ -9312,7 +9585,6 @@ var init_tui = __esm({
     "use strict";
     init_App();
     init_client();
-    init_notify();
   }
 });
 
@@ -10004,9 +10276,9 @@ var init_agents2 = __esm({
 });
 
 // src/commands/doctor.ts
-import { existsSync as existsSync5, statSync as statSync2 } from "fs";
+import { existsSync as existsSync4, statSync as statSync2 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 async function run6(argv) {
   const { flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -10036,7 +10308,7 @@ async function run6(argv) {
     } catch {
     }
   }
-  if (existsSync5(LOCAL_LOG2)) {
+  if (existsSync4(LOCAL_LOG2)) {
     const st = statSync2(LOCAL_LOG2);
     const ageMin = (Date.now() - st.mtimeMs) / 6e4;
     checks.push({ name: "local logs", ok: true, detail: `on \xB7 ${(st.size / 1024).toFixed(0)}KB \xB7 last write ${ageMin < 1 ? "just now" : Math.round(ageMin) + "m ago"}` });
@@ -10066,14 +10338,14 @@ var init_doctor = __esm({
     init_api_client();
     init_format();
     init_args();
-    LOCAL_LOG2 = join8(homedir5(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG2 = join7(homedir5(), ".solongate", "local-logs", "solongate-audit.jsonl");
   }
 });
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync6, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
+import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join9 } from "path";
+import { join as join8 } from "path";
 function tailLocal(file, maxBytes = 131072) {
   try {
     const size = statSync3(file).size;
@@ -10117,7 +10389,7 @@ async function run7(argv) {
     for (const r of rows) if (keep(r)) print(r, json);
   };
   const pollLocal = () => {
-    if (cloudOnly || !existsSync6(LOCAL_LOG3)) return;
+    if (cloudOnly || !existsSync5(LOCAL_LOG3)) return;
     const rows = [];
     for (const line of tailLocal(LOCAL_LOG3)) {
       try {
@@ -10180,7 +10452,7 @@ var init_watch = __esm({
     init_cli_utils();
     init_args();
     init_format();
-    LOCAL_LOG3 = join9(homedir6(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG3 = join8(homedir6(), ".solongate", "local-logs", "solongate-audit.jsonl");
     trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
     time = (ms) => new Date(ms).toTimeString().slice(0, 8);
   }
@@ -10482,32 +10754,32 @@ __export(global_install_exports, {
   runGlobalRestore: () => runGlobalRestore,
   unlockProtected: () => unlockProtected
 });
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, existsSync as existsSync7, mkdirSync as mkdirSync4 } from "fs";
-import { resolve as resolve4, join as join10, dirname } from "path";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
+import { resolve as resolve4, join as join9, dirname } from "path";
 import { homedir as homedir7 } from "os";
 import { fileURLToPath } from "url";
 import { createInterface } from "readline";
-import { execFileSync as execFileSync3 } from "child_process";
+import { execFileSync as execFileSync2 } from "child_process";
 function lockFile(file) {
-  if (!existsSync7(file)) return;
+  if (!existsSync6(file)) return;
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync3("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/deny", "*S-1-1-0:(WD,AD,DC,DE)"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync3("attrib", ["+R", file], { stdio: "ignore" });
+        execFileSync2("attrib", ["+R", file], { stdio: "ignore" });
       } catch {
       }
     } else if (process.platform === "darwin") {
       try {
-        execFileSync3("chflags", ["uchg", file], { stdio: "ignore" });
+        execFileSync2("chflags", ["uchg", file], { stdio: "ignore" });
       } catch {
       }
     } else {
       try {
-        execFileSync3("chattr", ["+i", file], { stdio: "ignore" });
+        execFileSync2("chattr", ["+i", file], { stdio: "ignore" });
       } catch {
       }
     }
@@ -10515,29 +10787,29 @@ function lockFile(file) {
   }
 }
 function unlockFile(file) {
-  if (!existsSync7(file)) return;
+  if (!existsSync6(file)) return;
   try {
     if (process.platform === "win32") {
       try {
-        execFileSync3("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/remove:d", "*S-1-1-0"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync3("icacls", [file, "/reset"], { stdio: "ignore" });
+        execFileSync2("icacls", [file, "/reset"], { stdio: "ignore" });
       } catch {
       }
       try {
-        execFileSync3("attrib", ["-R", file], { stdio: "ignore" });
+        execFileSync2("attrib", ["-R", file], { stdio: "ignore" });
       } catch {
       }
     } else if (process.platform === "darwin") {
       try {
-        execFileSync3("chflags", ["nouchg", file], { stdio: "ignore" });
+        execFileSync2("chflags", ["nouchg", file], { stdio: "ignore" });
       } catch {
       }
     } else {
       try {
-        execFileSync3("chattr", ["-i", file], { stdio: "ignore" });
+        execFileSync2("chattr", ["-i", file], { stdio: "ignore" });
       } catch {
       }
     }
@@ -10547,10 +10819,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join10(p.hooksDir, "guard.mjs"),
-    join10(p.hooksDir, "audit.mjs"),
-    join10(p.hooksDir, "stop.mjs"),
-    join10(p.hooksDir, "shield.mjs"),
+    join9(p.hooksDir, "guard.mjs"),
+    join9(p.hooksDir, "audit.mjs"),
+    join9(p.hooksDir, "stop.mjs"),
+    join9(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -10563,25 +10835,25 @@ function unlockProtected() {
 }
 function globalPaths() {
   const home = homedir7();
-  const sgDir = join10(home, ".solongate");
-  const hooksDir = join10(sgDir, "hooks");
-  const claudeDir = join10(home, ".claude");
+  const sgDir = join9(home, ".solongate");
+  const hooksDir = join9(sgDir, "hooks");
+  const claudeDir = join9(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join10(claudeDir, "settings.json"),
-    backupPath: join10(claudeDir, "settings.solongate.bak"),
-    configPath: join10(sgDir, "cloud-guard.json")
+    settingsPath: join9(claudeDir, "settings.json"),
+    backupPath: join9(claudeDir, "settings.solongate.bak"),
+    configPath: join9(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync7(join10(HOOKS_DIR, filename), "utf-8");
+  return readFileSync7(join9(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join10(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync7(bundled) ? readFileSync7(bundled, "utf-8") : readHook("guard.mjs");
+  const bundled = join9(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync6(bundled) ? readFileSync7(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -10594,14 +10866,14 @@ function runGlobalRestore() {
   const p = globalPaths();
   unlockProtected();
   removeClaudeShim();
-  if (existsSync7(p.backupPath)) {
-    writeFileSync5(p.settingsPath, readFileSync7(p.backupPath, "utf-8"));
+  if (existsSync6(p.backupPath)) {
+    writeFileSync4(p.settingsPath, readFileSync7(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
-  } else if (existsSync7(p.settingsPath)) {
+  } else if (existsSync6(p.settingsPath)) {
     try {
       const s = JSON.parse(readFileSync7(p.settingsPath, "utf-8"));
       delete s.hooks;
-      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+      writeFileSync4(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
       console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
     } catch {
     }
@@ -10616,7 +10888,7 @@ function escapeRe(s) {
 function resolveRealClaude() {
   try {
     const finder = process.platform === "win32" ? "where" : "which";
-    const out2 = execFileSync3(finder, ["claude"], { encoding: "utf-8" }).split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+    const out2 = execFileSync2(finder, ["claude"], { encoding: "utf-8" }).split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
     if (process.platform === "win32") {
       const low = (s) => s.toLowerCase();
       return out2.find((l) => low(l).endsWith(".cmd")) || out2.find((l) => low(l).endsWith(".exe")) || out2.find((l) => low(l).endsWith(".bat")) || out2[0] || null;
@@ -10629,24 +10901,24 @@ function resolveRealClaude() {
 function shimTargets() {
   if (process.platform === "win32") {
     try {
-      const prof = execFileSync3("powershell", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf-8" }).trim();
+      const prof = execFileSync2("powershell", ["-NoProfile", "-Command", "$PROFILE.CurrentUserAllHosts"], { encoding: "utf-8" }).trim();
       return prof ? [prof] : [];
     } catch {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join10(homedir7(), f)).filter((f) => existsSync7(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join9(homedir7(), f)).filter((f) => existsSync6(f));
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync7(file) ? readFileSync7(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync7(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
   mkdirSync4(dirname(file), { recursive: true });
-  writeFileSync5(file, content);
+  writeFileSync4(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -10700,19 +10972,19 @@ async function runGlobalInstall(opts = {}) {
   mkdirSync4(p.hooksDir, { recursive: true });
   mkdirSync4(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync5(join10(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync5(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync5(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync5(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync4(join9(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync4(join9(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync4(join9(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync4(join9(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join10(p.hooksDir, "shield.mjs"));
-  writeFileSync5(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  installClaudeShim(join9(p.hooksDir, "shield.mjs"));
+  writeFileSync4(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
-  if (existsSync7(p.settingsPath)) {
+  if (existsSync6(p.settingsPath)) {
     const raw = readFileSync7(p.settingsPath, "utf-8");
-    if (!existsSync7(p.backupPath)) {
-      writeFileSync5(p.backupPath, raw);
+    if (!existsSync6(p.backupPath)) {
+      writeFileSync4(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -10721,9 +10993,9 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join10(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join10(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join10(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join9(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join9(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join9(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -10735,7 +11007,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync4(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -10915,7 +11187,7 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn3 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync8, existsSync as existsSync8, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync8, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
 import { homedir as homedir8 } from "os";
 function findCacheFile() {
@@ -10923,7 +11195,7 @@ function findCacheFile() {
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
-    if (existsSync8(f)) return f;
+    if (existsSync7(f)) return f;
   }
   let best = null, bestTs = -1;
   try {
@@ -10944,7 +11216,7 @@ function findCacheFile() {
 function loadCfg() {
   try {
     const f = findCacheFile();
-    if (f && existsSync8(f)) {
+    if (f && existsSync7(f)) {
       const c2 = JSON.parse(readFileSync8(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
@@ -11234,7 +11506,7 @@ __export(logs_server_exports, {
 });
 import { createServer as createServer2 } from "http";
 import { readFileSync as readFileSync9, statSync as statSync5 } from "fs";
-import { resolve as resolve6, join as join11, isAbsolute } from "path";
+import { resolve as resolve6, join as join10, isAbsolute } from "path";
 import { homedir as homedir9 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
@@ -11260,7 +11532,7 @@ async function findLogDir() {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync9(join11(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync9(join10(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -11269,7 +11541,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync9(join11(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync9(join10(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -11298,7 +11570,7 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join11(dir, LOG_FILENAME);
+  const file = join10(dir, LOG_FILENAME);
   try {
     const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
@@ -11411,7 +11683,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, existsSync as existsSync9, copyFileSync } from "fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -11469,7 +11741,7 @@ WHAT IT DOES
 `);
 }
 function detectProject() {
-  if (!existsSync9(resolve7("package.json"))) return false;
+  if (!existsSync8(resolve7("package.json"))) return false;
   try {
     const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
@@ -11485,13 +11757,13 @@ function findTsEntryFile() {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
         const srcPath = binPath.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-        if (existsSync9(resolve7(srcPath))) return resolve7(srcPath);
-        if (existsSync9(resolve7(binPath))) return resolve7(binPath);
+        if (existsSync8(resolve7(srcPath))) return resolve7(srcPath);
+        if (existsSync8(resolve7(binPath))) return resolve7(binPath);
       }
     }
     if (pkg.main) {
       const srcPath = pkg.main.replace(/^\.\/dist\//, "./src/").replace(/\.js$/, ".ts");
-      if (existsSync9(resolve7(srcPath))) return resolve7(srcPath);
+      if (existsSync8(resolve7(srcPath))) return resolve7(srcPath);
     }
   } catch {
   }
@@ -11505,7 +11777,7 @@ function findTsEntryFile() {
   ];
   for (const c2 of candidates) {
     const full = resolve7(c2);
-    if (existsSync9(full)) {
+    if (existsSync8(full)) {
       try {
         const content = readFileSync10(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
@@ -11516,13 +11788,13 @@ function findTsEntryFile() {
     }
   }
   for (const c2 of candidates) {
-    if (existsSync9(resolve7(c2))) return resolve7(c2);
+    if (existsSync8(resolve7(c2))) return resolve7(c2);
   }
   return null;
 }
 function detectPackageManager() {
-  if (existsSync9(resolve7("pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync9(resolve7("yarn.lock"))) return "yarn";
+  if (existsSync8(resolve7("pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync8(resolve7("yarn.lock"))) return "yarn";
   return "npm";
 }
 function installSdk() {
@@ -11665,7 +11937,7 @@ async function main2() {
   }
   log3("  Language: TypeScript");
   const entryFile = opts.file ? resolve7(opts.file) : findTsEntryFile();
-  if (!entryFile || !existsSync9(entryFile)) {
+  if (!entryFile || !existsSync8(entryFile)) {
     log3(`  Could not find entry file.${opts.file ? ` File not found: ${opts.file}` : ""}`);
     log3("");
     log3("  Specify it manually: --file <path>");
@@ -11678,7 +11950,7 @@ async function main2() {
   log3("");
   const backupPath = entryFile + ".solongate-backup";
   if (opts.restore) {
-    if (!existsSync9(backupPath)) {
+    if (!existsSync8(backupPath)) {
       log3("  No backup found. Nothing to restore.");
       process.exit(1);
     }
@@ -11714,12 +11986,12 @@ async function main2() {
     log3("  To apply: npx @solongate/proxy inject");
     process.exit(0);
   }
-  if (!existsSync9(backupPath)) {
+  if (!existsSync8(backupPath)) {
     copyFileSync(entryFile, backupPath);
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync6(entryFile, result.modified);
+  writeFileSync5(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -11748,8 +12020,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync7, existsSync as existsSync10 } from "fs";
-import { resolve as resolve8, join as join12 } from "path";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6, existsSync as existsSync9 } from "fs";
+import { resolve as resolve8, join as join11 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -11828,8 +12100,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync7(
-    join12(dir, "package.json"),
+  writeFileSync6(
+    join11(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -11858,8 +12130,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync7(
-    join12(dir, "tsconfig.json"),
+  writeFileSync6(
+    join11(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -11879,9 +12151,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync5(join12(dir, "src"), { recursive: true });
-  writeFileSync7(
-    join12(dir, "src", "index.ts"),
+  mkdirSync5(join11(dir, "src"), { recursive: true });
+  writeFileSync6(
+    join11(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -11922,8 +12194,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync7(
-    join12(dir, ".mcp.json"),
+  writeFileSync6(
+    join11(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -11940,13 +12212,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync7(
-    join12(dir, ".env"),
+  writeFileSync6(
+    join11(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync7(
-    join12(dir, ".gitignore"),
+  writeFileSync6(
+    join11(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -11960,7 +12232,7 @@ async function main3() {
   const opts = parseCreateArgs(process.argv);
   const dir = resolve8(opts.name);
   printBanner("Create MCP Server");
-  if (existsSync10(dir)) {
+  if (existsSync9(dir)) {
     log3(`  ${c.red}Error:${c.reset} Directory "${opts.name}" already exists.`);
     process.exit(1);
   }
@@ -12039,12 +12311,12 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, existsSync as existsSync11 } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
-  if (!existsSync11(envPath)) return;
+  if (!existsSync10(envPath)) return;
   try {
     const content = readFileSync11(envPath, "utf-8");
     for (const line of content.split("\n")) {
@@ -12234,7 +12506,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync8(file, json, "utf-8");
+  writeFileSync7(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -12246,7 +12518,7 @@ async function pull(apiKey, file, policyId) {
   log5("");
 }
 async function push(apiKey, file, policyId) {
-  if (!existsSync11(file)) {
+  if (!existsSync10(file)) {
     log5(red2(`ERROR: File not found: ${file}`));
     process.exit(1);
   }