@solongate/proxy 0.81.19 → 0.81.21

package/dist/index.js

@@ -6750,6 +6750,25 @@ function sparkline(values, width2) {
   if (max === 0) return BLOCKS[0].repeat(v.length);
   return v.map((n) => BLOCKS[Math.min(BLOCKS.length - 1, Math.round(n / max * (BLOCKS.length - 1)))]).join("");
 }
+function prettyJson(s) {
+  try {
+    return JSON.stringify(JSON.parse(s), null, 2);
+  } catch {
+    return s;
+  }
+}
+function wrapLines(s, width2) {
+  const w = Math.max(8, width2);
+  const out2 = [];
+  for (const raw of (s ?? "").split("\n")) {
+    if (raw.length <= w) {
+      out2.push(raw);
+      continue;
+    }
+    for (let i = 0; i < raw.length; i += w) out2.push(raw.slice(i, i + w));
+  }
+  return out2;
+}
 function truncate2(s, n) {
   if (!s) return "";
   return s.length <= n ? s : s.slice(0, Math.max(0, n - 1)) + "\u2026";
@@ -6903,12 +6922,16 @@ __export(settings_exports, {
   deleteWebhook: () => deleteWebhook,
   getAlerts: () => getAlerts,
   getGuardStatus: () => getGuardStatus,
+  getLocalLogs: () => getLocalLogs,
   getRateLimitHistory: () => getRateLimitHistory,
   getSecurityLayers: () => getSecurityLayers,
   getSelfProtection: () => getSelfProtection,
   getWebhooks: () => getWebhooks,
+  setAlertEnabled: () => setAlertEnabled,
+  setLocalLogs: () => setLocalLogs,
   setSecurityLayers: () => setSecurityLayers,
-  setSelfProtection: () => setSelfProtection
+  setSelfProtection: () => setSelfProtection,
+  updateWebhook: () => updateWebhook
 });
 function getSecurityLayers() {
   return request("GET", "/settings/security-layers");
@@ -6931,6 +6954,12 @@ function getSelfProtection() {
 function setSelfProtection(enabled) {
   return request("PUT", "/settings/self-protection", { body: { enabled } });
 }
+function getLocalLogs() {
+  return request("GET", "/settings/local-logs");
+}
+function setLocalLogs(cfg) {
+  return request("PUT", "/settings/local-logs", { body: cfg });
+}
 function getAlerts() {
   return request("GET", "/settings/denial-alerts");
 }
@@ -6940,6 +6969,9 @@ function createAlert(body) {
 function deleteAlert(id) {
   return request("DELETE", "/settings/denial-alerts", { query: { id } });
 }
+function setAlertEnabled(id, enabled) {
+  return request("PATCH", "/settings/denial-alerts", { query: { id }, body: { enabled } });
+}
 function getWebhooks() {
   return request("GET", "/settings/denial-webhook");
 }
@@ -6949,6 +6981,9 @@ function createWebhook(body) {
 function deleteWebhook(id) {
   return request("DELETE", "/settings/denial-webhook", { query: { id } });
 }
+function updateWebhook(id, patch) {
+  return request("PATCH", "/settings/denial-webhook", { body: { id, ...patch } });
+}
 var init_settings = __esm({
   "src/api-client/settings.ts"() {
     "use strict";
@@ -7160,6 +7195,24 @@ function usePoll(reload, intervalMs, enabled = true) {
     return () => clearInterval(t);
   }, [reload, intervalMs, enabled]);
 }
+function useTermSize() {
+  const read = () => ({ cols: process.stdout.columns ?? 100, rows: process.stdout.rows ?? 30 });
+  const [size, setSize] = useState(read);
+  useEffect(() => {
+    const onResize = () => setSize(read());
+    process.stdout.on("resize", onResize);
+    return () => {
+      process.stdout.off("resize", onResize);
+    };
+  }, []);
+  return size;
+}
+function usePanelSize() {
+  const { cols, rows } = useTermSize();
+  const wide = cols >= 82;
+  const shellRows = wide ? 12 : 7;
+  return { cols: Math.max(30, cols - 22), rows: Math.max(8, rows - shellRows) };
+}
 var init_hooks = __esm({
   "src/tui/hooks.ts"() {
     "use strict";
@@ -7309,6 +7362,9 @@ function LivePanel({ active: active2 }) {
   const [detail, setDetail] = useState2(null);
   const [detailCloud, setDetailCloud] = useState2([]);
   const [detailScroll, setDetailScroll] = useState2(0);
+  const [inspect, setInspect] = useState2(null);
+  const [inspectScroll, setInspectScroll] = useState2(0);
+  const inspectFromRef = useRef2("stream");
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
   const pausedUntil = useRef2(0);
@@ -7319,6 +7375,7 @@ function LivePanel({ active: active2 }) {
   const [frozen, setFrozen] = useState2(false);
   const frozenRef = useRef2(false);
   frozenRef.current = frozen;
+  const [showHelp, setShowHelp] = useState2(false);
   const pushLog = useCallback2((msg, level = "ok") => {
     setLog((prev) => [...prev.slice(-59), { ts: Date.now(), msg, level }]);
   }, []);
@@ -7514,8 +7571,7 @@ function LivePanel({ active: active2 }) {
       else if (e.burst) fireAlert("sec:" + e.id, "Rate-limit burst", `BURST ${e.tool}${who}`, "warn");
     }
   }, [tick, active2, fireAlert]);
-  const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 30;
+  const { cols, rows } = useTermSize();
   const ins = insights.data ?? {};
   const spin = SPIN[tick % SPIN.length];
   const nowMs = Date.now();
@@ -7657,12 +7713,30 @@ function LivePanel({ active: active2 }) {
         return;
       }
       if (frozen) return;
+      if (showHelp) {
+        setShowHelp(false);
+        return;
+      }
+      if (input === "?") {
+        setShowHelp(true);
+        return;
+      }
       if (input === "/" && mode !== "pick") {
         setEditingSearch(true);
         return;
       }
+      if (mode === "inspect") {
+        if (key.leftArrow) {
+          setMode(inspectFromRef.current);
+          setInspect(null);
+        } else if (key.upArrow) setInspectScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setInspectScroll((n) => n + 1);
+        else if (key.pageUp) setInspectScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setInspectScroll((n) => n + 10);
+        return;
+      }
       if (mode === "detail") {
-        const maxD = Math.max(0, detailEntries.length - (rows - 10));
+        const maxD = Math.max(0, detailEntries.length - 1);
         if (key.leftArrow) {
           setMode("stream");
           setDetail(null);
@@ -7670,6 +7744,15 @@ function LivePanel({ active: active2 }) {
         else if (key.downArrow) setDetailScroll((n) => Math.min(maxD, n + 1));
         else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
         else if (key.pageDown) setDetailScroll((n) => Math.min(maxD, n + 10));
+        else if (key.return) {
+          const e = detailEntries[Math.min(detailScroll, maxD)];
+          if (e) {
+            inspectFromRef.current = "detail";
+            setInspect(e);
+            setInspectScroll(0);
+            setMode("inspect");
+          }
+        }
         return;
       }
       if (mode === "pick") {
@@ -7691,6 +7774,13 @@ function LivePanel({ active: active2 }) {
       if (input === "f") {
         setFilter((f) => FILTERS[(FILTERS.indexOf(f) + 1) % FILTERS.length]);
         setSel(0);
+      } else if (key.return) {
+        if (selEntry) {
+          inspectFromRef.current = "stream";
+          setInspect(selEntry);
+          setInspectScroll(0);
+          setMode("inspect");
+        }
       } else if (input === "s") {
         setPickIdx(0);
         setMode("pick");
@@ -7753,6 +7843,66 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` ${spin} up ${fmtUp(nowMs - startRef.current)} \xB7 ${hhmmss(nowMs)} \xB7 api ${latNow}ms ` }),
     frozen ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : backingOff ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d2a12", color: "#ffb454", bold: true, children: " RATE LIMITED \xB7 backing off " }) : lastDeny ? /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#3d1220", color: "#ff6b6b", bold: true, children: ` \u26A0 ${hhmmss(lastDeny.at)} ${lastDeny.tool} DENIED ` }) : /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#4f6db8", children: " \u2713 clean " })
   ] });
+  if (showHelp) {
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accentBright, children: "LIVE \u2014 all keys" }),
+      /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", marginTop: 1, children: LIVE_HELP.map(([group, keys]) => /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", marginBottom: 1, children: [
+        /* @__PURE__ */ jsx2(Text2, { bold: true, color: theme.accent, children: group }),
+        keys.map(([k, desc]) => /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: ("  " + k).padEnd(20) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: desc })
+        ] }, k))
+      ] }, group)) }),
+      /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "press any key to close" })
+    ] });
+  }
+  if (mode === "inspect" && inspect) {
+    const e = inspect;
+    const bodyW = Math.max(20, cols - 4);
+    const lines = wrapLines(prettyJson(e.detail || "(no arguments / reason recorded)"), bodyW);
+    const bodyRows = Math.max(4, rows - 7);
+    const maxScroll2 = Math.max(0, lines.length - bodyRows);
+    const off = Math.min(inspectScroll, maxScroll2);
+    const win = lines.slice(off, off + bodyRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#AAC8FA", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx2(Text2, { color: isLoc(e) ? theme.ok : "#4f6db8", children: "  " + (isLoc(e) ? "LOC" : "CLD") }),
+        e.dlp ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx2(Text2, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx2(Text2, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx2(Text2, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx2(Text2, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "FULL CONTENT", extra: `${lines.length} lines${maxScroll2 ? ` \xB7 \u25BC${maxScroll2 - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
@@ -7772,9 +7922,10 @@ function LivePanel({ active: active2 }) {
     const last = d[0]?.at;
     const tlRows = Math.max(4, rows - 10);
     const tlBody = Math.max(3, tlRows - 1);
-    const maxD = Math.max(0, d.length - tlBody);
-    const dScroll = Math.min(detailScroll, maxD);
-    const tl = d.slice(dScroll, dScroll + tlBody);
+    const dSel = Math.min(detailScroll, Math.max(0, d.length - 1));
+    const maxStart = Math.max(0, d.length - tlBody);
+    const start = Math.min(Math.max(0, dSel - Math.floor((tlBody - 1) / 2)), maxStart);
+    const tl = d.slice(start, start + tlBody);
     return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
       titleBar,
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
@@ -7812,16 +7963,16 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: perms.map(([p, c2]) => `${p}\xD7${c2}`).join(" ") || "\u2014" }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${d.length} calls \xB7 newest first${dScroll ? ` \xB7 \u25BC${dScroll} older` : ""} \xB7 \u2191\u2193 scroll \xB7 / search \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "TIMELINE", extra: `${dSel + 1}/${d.length} \xB7 newest first \xB7 \u2191\u2193 select \xB7 enter full entry \xB7 / search \xB7 \u2190 back`, width: innerW }),
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", height: tlRows, overflow: "hidden", children: [
         searchRow,
         tl.length === 0 ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: detailCloud.length === 0 ? spin + " loading history\u2026" : "no entries" }) : null,
-        tl.map((e) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e) }, e.id))
+        tl.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: start + i === dSel }, e.id))
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " SESSION " }),
         /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` ${detail.id} ` }),
-        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 scroll \xB7 \u2190 back \xB7 esc menu " })
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 enter full entry \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
@@ -7934,7 +8085,7 @@ function LivePanel({ active: active2 }) {
       PaneTitle,
       {
         label: "TOOL STREAM",
-        extra: `${selClamped + 1}/${visibleDesc.length}${signal !== "none" ? ` \xB7 ${signal}` : ""}${q ? " \xB7 search" : ""} \xB7 \u2191\u2193 select \xB7 w allow \xB7 b block \xB7 d/x/r ${filter} \xB7 s`,
+        extra: `${selClamped + 1}/${visibleDesc.length}${signal !== "none" ? ` \xB7 ${signal}` : ""}${q ? " \xB7 search" : ""}${filter !== "all" ? ` \xB7 source:${filter}` : ""} \xB7 enter full entry \xB7 ? all keys`,
         width: innerW
       }
     ),
@@ -7942,7 +8093,7 @@ function LivePanel({ active: active2 }) {
       searchRow,
       localOn === false ? /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsx2(Text2, { color: theme.warn, children: "local logs off" }),
-        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dashboard \u2192 Settings \u2192 Local logs \xB7 hooks write ~/.solongate/local-logs \xB7 view: `solongate logs-server`" })
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2014 enable: dataroom \u2192 Settings (local logs) or dashboard \u2192 Settings \xB7 hooks write ~/.solongate/local-logs" })
       ] }) : null,
       windowed.length === 0 ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
         spin,
@@ -7953,11 +8104,11 @@ function LivePanel({ active: active2 }) {
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", bold: true, children: " LIVE " }),
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "#4f6db8", children: ` local ${localOn ? "on" : "off"} \xB7 ${localBuf.length} loc/${cloudBuf.length} cld \xB7 top ${topTools.map(([t, c2]) => `${t}\xD7${c2}`).join(" ") || "\u2014"} ` }),
-      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: " \u2191\u2193 select \xB7 w allow \xB7 b block \xB7 d/x/r \xB7 / search \xB7 f \xB7 s \xB7 space copy \xB7 esc \xB7 q " })
+      /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "#82AAF0", children: ` \u2191\u2193 select \xB7 enter full entry \xB7 / search \xB7 space copy \xB7 ? all keys \xB7 esc menu \xB7 q quit ` })
     ] })
   ] });
 }
-var CONFIG, SPIN, BG, DIM_FLOOR, LOCAL_LOG, RING, hhmmss, fmtUp, FILTERS, sessStatus, STATUS_STYLE;
+var CONFIG, SPIN, BG, DIM_FLOOR, LOCAL_LOG, RING, hhmmss, fmtUp, FILTERS, sessStatus, STATUS_STYLE, LIVE_HELP;
 var init_Live = __esm({
   "src/tui/panels/Live.tsx"() {
     "use strict";
@@ -7988,6 +8139,45 @@ var init_Live = __esm({
       idle: { dot: "\u25D0", label: "IDLE", color: theme.warn },
       ended: { dot: "\u25CB", label: "ENDED", color: theme.dim }
     };
+    LIVE_HELP = [
+      [
+        "Stream",
+        [
+          ["\u2191\u2193 / PgUp PgDn", "select a row (window follows)"],
+          ["enter", "open the FULL entry content"],
+          ["w", "whitelist the selected DENY (adds ALLOW rule)"],
+          ["b", "block the selected ALLOW (adds DENY rule)"],
+          ["d / x / r", "filter: denies / dlp hits / rate-limit bursts"],
+          ["f", "source filter: all \u2192 local \u2192 cloud"],
+          ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
+          ["s", "session picker"],
+          ["e", "export visible rows \u2192 ~/.solongate/live-export.jsonl"],
+          ["space", "copy mode: freeze screen for mouse selection"],
+          ["esc", "back to menu"],
+          ["q", "quit dataroom"]
+        ]
+      ],
+      [
+        "Entry (full content)",
+        [
+          ["\u2191\u2193 / PgUp PgDn", "scroll the content"],
+          ["space", "copy mode (freeze, then select with mouse)"],
+          ["\u2190", "back to where you came from"]
+        ]
+      ],
+      [
+        "Sessions",
+        [
+          ["\u2191\u2193 + enter", "pick & open a session (picker)"],
+          ["s or \u2190", "cancel the picker"],
+          ["\u2191\u2193", "select a timeline row (detail)"],
+          ["enter", "full entry content of the selected row"],
+          ["/", "search within the timeline"],
+          ["\u2190", "back to stream"]
+        ]
+      ],
+      ["Anywhere", [["?", "this help"], ["any key", "close this help"]]]
+    ];
   }
 });
 
@@ -8782,8 +8972,9 @@ var init_Stats = __esm({
 import { Box as Box7, Text as Text7, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
 import { useState as useState6 } from "react";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function AuditPanel({ active: active2, focused }) {
+  const { cols, rows } = usePanelSize();
   const [di, setDi] = useState6(0);
   const [gi, setGi] = useState6(0);
   const [tool, setTool] = useState6("");
@@ -8791,6 +8982,7 @@ function AuditPanel({ active: active2, focused }) {
   const [search, setSearch] = useState6("");
   const [sel, setSel] = useState6(0);
   const [view, setView] = useState6("list");
+  const [detailScroll, setDetailScroll] = useState6(0);
   const [editing, setEditing] = useState6(null);
   const query = {
     filter: DECISIONS[di],
@@ -8798,7 +8990,7 @@ function AuditPanel({ active: active2, focused }) {
     tool: tool || void 0,
     agent_name: agent || void 0,
     search: search || void 0,
-    limit: 100
+    limit: FETCH_LIMIT
   };
   const auditQ = useLoader(() => api.audit.list(query), [di, gi, tool, agent, search]);
   usePoll(auditQ.reload, 6e3, active2 && view === "list" && !editing);
@@ -8812,15 +9004,29 @@ function AuditPanel({ active: active2, focused }) {
     (input, key) => {
       if (view === "detail") {
         if (key.leftArrow || key.escape) setView("list");
+        else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setDetailScroll((n) => n + 1);
+        else if (key.pageUp) setDetailScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      const clearSel = () => setSel(0);
       if (key.upArrow) setSel((n) => Math.max(0, n - 1));
       else if (key.downArrow) setSel((n) => Math.min(entries.length - 1, n + 1));
+      else if (key.pageUp) setSel((n) => Math.max(0, n - 10));
+      else if (key.pageDown) setSel((n) => Math.min(entries.length - 1, n + 10));
       else if (key.return || key.rightArrow) {
-        if (current) setView("detail");
-      } else if (input === "f") setDi((n) => (n + 1) % DECISIONS.length);
-      else if (input === "g") setGi((n) => (n + 1) % SIGNALS.length);
-      else if (input === "t") setEditing("tool");
+        if (current) {
+          setDetailScroll(0);
+          setView("detail");
+        }
+      } else if (input === "f") {
+        setDi((n) => (n + 1) % DECISIONS.length);
+        clearSel();
+      } else if (input === "g") {
+        setGi((n) => (n + 1) % SIGNALS.length);
+        clearSel();
+      } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
       else if (input === "c") {
@@ -8829,49 +9035,64 @@ function AuditPanel({ active: active2, focused }) {
         setTool("");
         setAgent("");
         setSearch("");
+        clearSel();
       }
     },
     { isActive: focused && !editing }
   );
   if (view === "detail" && current) {
     const sessionCalls = sessionQ.data?.entries ?? [];
+    const bodyW = Math.max(20, cols - 2);
+    const reasonLines = wrapLines("reason: " + (current.reason ?? "\u2014"), bodyW);
+    const argLines = current.arguments_summary ? wrapLines(prettyJson(JSON.stringify(current.arguments_summary)), bodyW) : ["(no arguments recorded)"];
+    const sessionRows = current.session_id ? Math.min(4, sessionCalls.length) + 2 : 1;
+    const reasonShown = reasonLines.slice(0, 4);
+    const argBudget = Math.max(3, rows - 2 - 5 - reasonShown.length - 1 - sessionRows - 1);
+    const maxScroll = Math.max(0, argLines.length - argBudget);
+    const off = Math.min(detailScroll, maxScroll);
+    const argWin = argLines.slice(off, off + argBudget);
     return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs7(Box7, { children: [
         /* @__PURE__ */ jsx7(Text7, { color: decisionColor(current.decision), bold: true, children: current.decision }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: "  " + current.tool_name }),
         /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  " + current.permission + " \xB7 " + current.trust_level })
       ] }),
-      /* @__PURE__ */ jsx7(Detail, { label: "reason", value: current.reason ?? "\u2014" }),
+      reasonShown.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: i === 0 ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "reason   " }),
+        /* @__PURE__ */ jsx7(Text7, { children: l.slice("reason: ".length) })
+      ] }) : /* @__PURE__ */ jsx7(Text7, { children: "         " + l }) }, "r" + i)),
       /* @__PURE__ */ jsx7(Detail, { label: "rule", value: current.matched_rule_id ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "agent", value: current.agent_name ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "session", value: current.session_id ?? "\u2014" }),
       /* @__PURE__ */ jsx7(Detail, { label: "dlp", value: current.dlp_matches?.length ? current.dlp_matches.join(", ") : "none", color: current.dlp_matches?.length ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx7(Detail, { label: "when", value: new Date(current.created_at).toLocaleString() }),
-      current.arguments_summary ? /* @__PURE__ */ jsx7(Detail, { label: "args", value: truncate2(JSON.stringify(current.arguments_summary), 60) }) : null,
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx7(Detail, { label: "when", value: new Date(current.created_at).toLocaleString() + (current.evaluation_time_ms != null ? ` \xB7 eval ${current.evaluation_time_ms}ms` : "") }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `arguments \u2014 full \xB7 ${argLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""}` }),
+      /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: argBudget, overflow: "hidden", children: argWin.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: l || " " }, off + i)) }),
+      current.session_id ? /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
         /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "Session ",
-          current.session_id ? `\xB7 ${sessionCalls.length} calls` : "(no session id)"
+          "Session \xB7 ",
+          sessionCalls.length,
+          " calls"
         ] }),
-        current.session_id ? /* @__PURE__ */ jsx7(
+        /* @__PURE__ */ jsx7(
           Table,
           {
             columns: [
               { header: "DECISION", width: 9 },
               { header: "TOOL", width: 20 },
-              { header: "REASON", width: 26 },
+              { header: "REASON", width: Math.max(16, cols - 48) },
               { header: "WHEN", width: 6 }
             ],
-            rows: sessionCalls.slice(0, 12).map((e) => [
+            rows: sessionCalls.slice(0, Math.max(1, sessionRows - 2)).map((e) => [
               { value: e.decision, color: decisionColor(e.decision) },
               { value: truncate2(e.tool_name, 20), color: theme.accent },
-              { value: truncate2(e.reason ?? "\u2014", 26) },
+              { value: truncate2(e.reason ?? "\u2014", Math.max(16, cols - 48)) },
               { value: ago(e.created_at), dim: true }
             ])
           }
-        ) : null
-      ] }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2190 back to list" })
+        )
+      ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "(no session id)" }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2191\u2193 scroll arguments \xB7 \u2190/esc back to list" })
     ] });
   }
   const chip = (label, val, on) => /* @__PURE__ */ jsxs7(Text7, { children: [
@@ -8882,6 +9103,13 @@ function AuditPanel({ active: active2, focused }) {
     /* @__PURE__ */ jsx7(Text7, { color: on ? theme.accentBright : theme.dim, children: val }),
     /* @__PURE__ */ jsx7(Text7, { children: " " })
   ] });
+  const headerRows = 4 + (editing ? 1 : 0);
+  const listRows = Math.max(4, rows - headerRows);
+  const selClamped = Math.min(sel, Math.max(0, entries.length - 1));
+  const maxStart = Math.max(0, entries.length - listRows);
+  const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
+  const windowed = entries.slice(start, start + listRows);
+  const reasonW = Math.min(60, Math.max(12, cols - 67));
   return /* @__PURE__ */ jsx7(DataView, { loading: auditQ.loading && !auditQ.data, error: auditQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
     /* @__PURE__ */ jsxs7(Box7, { children: [
       chip("dec", DECISIONS[di] ?? "all", di !== 0),
@@ -8890,8 +9118,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("agent", agent || "\xB7", !!agent),
       chip("search", search || "\xB7", !!search)
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 enter detail \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 c clear" : "press \u2192 to browse" }),
-    editing ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 c clear" : "press \u2192 to browse" }),
+    editing ? /* @__PURE__ */ jsxs7(Box7, { children: [
       /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
         editing,
         ": "
@@ -8900,16 +9128,15 @@ function AuditPanel({ active: active2, focused }) {
         TextInput4,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
-          onChange: editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch,
+          onChange: (v) => {
+            (editing === "tool" ? setTool : editing === "agent" ? setAgent : setSearch)(v);
+            setSel(0);
+          },
           onSubmit: () => setEditing(null)
         }
       )
     ] }) : null,
-    /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-      auditQ.data?.total ?? 0,
-      " matched \xB7 showing ",
-      Math.min(entries.length, 12)
-    ] }) }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${auditQ.data?.total ?? 0} matched \xB7 ${entries.length} loaded \xB7 ${selClamped + 1}/${entries.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < entries.length ? ` \xB7 \u25BC${entries.length - start - listRows} older` : ""}` }),
     /* @__PURE__ */ jsx7(
       Table,
       {
@@ -8918,22 +9145,22 @@ function AuditPanel({ active: active2, focused }) {
           { header: "DECISION", width: 9 },
           { header: "TOOL", width: 18 },
           { header: "AGENT", width: 14 },
-          { header: "REASON", width: 24 },
+          { header: "REASON", width: reasonW },
           { header: "DLP", width: 4 },
           { header: "WHEN", width: 6 }
         ],
-        rows: entries.slice(0, 12).map((e, i) => rowFor(e, i === sel && focused))
+        rows: windowed.map((e, i) => rowFor(e, start + i === selClamped && focused, reasonW))
       }
     )
   ] }) });
 }
-function rowFor(e, active2) {
+function rowFor(e, active2, reasonW) {
   return [
     { value: active2 ? "\u25B8" : "", color: theme.accentBright },
     { value: e.decision, color: decisionColor(e.decision) },
     { value: truncate2(e.tool_name, 18), color: theme.accent },
     { value: truncate2(e.agent_name ?? "\u2014", 14), dim: true },
-    { value: truncate2(e.reason ?? "\u2014", 24) },
+    { value: truncate2(e.reason ?? "\u2014", reasonW) },
     { value: e.dlp_matches?.length ? String(e.dlp_matches.length) : "0", color: e.dlp_matches?.length ? theme.bad : void 0, dim: !e.dlp_matches?.length },
     { value: ago(e.created_at), dim: true }
   ];
@@ -8941,10 +9168,10 @@ function rowFor(e, active2) {
 function Detail({ label, value, color }) {
   return /* @__PURE__ */ jsxs7(Box7, { children: [
     /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: label.padEnd(9) }),
-    /* @__PURE__ */ jsx7(Text7, { color, children: value })
+    /* @__PURE__ */ jsx7(Text7, { color, wrap: "truncate", children: value })
   ] });
 }
-var DECISIONS, SIGNALS;
+var DECISIONS, SIGNALS, FETCH_LIMIT;
 var init_Audit = __esm({
   "src/tui/panels/Audit.tsx"() {
     "use strict";
@@ -8954,13 +9181,14 @@ var init_Audit = __esm({
     init_theme();
     DECISIONS = [void 0, "DENY", "ALLOW"];
     SIGNALS = [void 0, "dlp", "ratelimit"];
+    FETCH_LIMIT = 500;
   }
 });
 
 // src/tui/panels/Agents.tsx
 import { Box as Box8, Text as Text8, useInput as useInput6 } from "ink";
 import { useState as useState7 } from "react";
-import { Fragment as Fragment4, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function Bar({ label, value, max = 100, width: width2 = 16, color = theme.accent }) {
   const filled = max > 0 ? Math.round(Math.min(value, max) / max * width2) : 0;
   return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
@@ -9004,7 +9232,7 @@ function AgentsPanel({ focused }) {
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `t${a.trust_score}` })
       ] }, a.session_id))
     ] }),
-    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexGrow: 1, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "select an agent" }) : detail.loading && !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "loading profile\u2026" }) : !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "no profile (agent has no calls yet)" }) : /* @__PURE__ */ jsxs8(Fragment4, { children: [
+    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexGrow: 1, overflow: "hidden", children: !selected ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "select an agent" }) : detail.loading && !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "loading profile\u2026" }) : !d ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "no profile (agent has no calls yet)" }) : /* @__PURE__ */ jsxs8(Fragment5, { children: [
       /* @__PURE__ */ jsxs8(Box8, { children: [
         /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: truncate2(selected.agent_name ?? selected.agent_id ?? "?", 22) }),
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   trust ${base?.trustScore ?? "\u2014"}/100 \xB7 ${base?.character ?? ""}` })
@@ -9053,41 +9281,256 @@ var init_Agents = __esm({
   }
 });
 
-// src/tui/App.tsx
-import { Box as Box9, Text as Text9, useApp, useInput as useInput7 } from "ink";
+// src/tui/panels/Settings.tsx
+import { Box as Box9, Text as Text9, useInput as useInput7 } from "ink";
+import TextInput5 from "ink-text-input";
 import { useState as useState8 } from "react";
 import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+function alertBodyFor(channel) {
+  const c2 = channel.trim();
+  const base = { name: "dataroom alert", threshold: 5, windowSeconds: 60, signal: "any" };
+  if (/^https?:\/\//i.test(c2)) return { ...base, slackUrl: c2 };
+  if (c2.includes("@")) return { ...base, emails: [c2] };
+  return { ...base, telegram: [c2] };
+}
+function SettingsPanel({ active: active2, focused }) {
+  void active2;
+  const { cols, rows } = usePanelSize();
+  const [sel, setSel] = useState8(0);
+  const [editing, setEditing] = useState8(null);
+  const [input, setInput] = useState8("");
+  const [confirmDel, setConfirmDel] = useState8(null);
+  const [msg, setMsg] = useState8(null);
+  const [busy, setBusy] = useState8(false);
+  const localQ = useLoader(() => api.settings.getLocalLogs());
+  const whQ = useLoader(() => api.settings.getWebhooks());
+  const alertQ = useLoader(() => api.settings.getAlerts());
+  const local = localQ.data;
+  const webhooks = whQ.data?.webhooks ?? [];
+  const alerts = alertQ.data?.rules ?? [];
+  const rowsAll = [
+    { kind: "ll-enabled" },
+    { kind: "ll-path" },
+    ...webhooks.map((wh) => ({ kind: "wh", wh })),
+    { kind: "wh-add" },
+    ...alerts.map((rule) => ({ kind: "alert", rule })),
+    { kind: "alert-add" }
+  ];
+  const selClamped = Math.min(sel, rowsAll.length - 1);
+  const cur = rowsAll[selClamped];
+  const keyOf = (r) => r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
+  const reloadAll = () => {
+    localQ.reload();
+    whQ.reload();
+    alertQ.reload();
+  };
+  const run12 = (label, fn, reload) => {
+    if (busy) return;
+    setBusy(true);
+    setMsg({ text: label + "\u2026", level: "ok" });
+    fn().then(() => {
+      setMsg({ text: "\u2713 " + label, level: "ok" });
+      reload();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" })).finally(() => setBusy(false));
+  };
+  const activate = (r) => {
+    if (r.kind === "ll-enabled") {
+      if (!local) return;
+      if (!local.enabled && !local.path.trim()) {
+        setMsg({ text: "set a path first (\u2193 then enter)", level: "bad" });
+        return;
+      }
+      run12(local.enabled ? "local logs disabled" : "local logs enabled", () => api.settings.setLocalLogs({ enabled: !local.enabled, path: local.path }), localQ.reload);
+    } else if (r.kind === "ll-path") {
+      setInput(local?.path ?? "");
+      setEditing("path");
+    } else if (r.kind === "wh") {
+      run12(r.wh.enabled ? "webhook disabled" : "webhook enabled", () => api.settings.updateWebhook(r.wh.id, { enabled: !r.wh.enabled }), whQ.reload);
+    } else if (r.kind === "wh-add") {
+      setInput("");
+      setEditing("wh-url");
+    } else if (r.kind === "alert") {
+      run12(r.rule.enabled ? "alert disabled" : "alert enabled", () => api.settings.setAlertEnabled(r.rule.id, !r.rule.enabled), alertQ.reload);
+    } else {
+      setInput("");
+      setEditing("alert-channel");
+    }
+  };
+  const submitInput = () => {
+    const v = input.trim();
+    const which = editing;
+    setEditing(null);
+    if (which === "path") {
+      const enabled = (local?.enabled ?? false) && v.length > 0;
+      run12(v ? `path saved${enabled ? "" : " (press enter on enabled to turn on)"}` : "path cleared (local logs off)", () => api.settings.setLocalLogs({ enabled, path: v }), localQ.reload);
+    } else if (which === "wh-url") {
+      if (!v) return;
+      run12("webhook added", () => api.settings.createWebhook({ url: v, events: "denials" }), whQ.reload);
+    } else if (which === "alert-channel") {
+      if (!v) return;
+      run12("alert rule added", () => api.settings.createAlert(alertBodyFor(v)), alertQ.reload);
+    }
+  };
+  useInput7(
+    (inp, key) => {
+      setMsg(null);
+      if (key.upArrow) {
+        setSel((n) => Math.max(0, n - 1));
+        setConfirmDel(null);
+      } else if (key.downArrow) {
+        setSel((n) => Math.min(rowsAll.length - 1, n + 1));
+        setConfirmDel(null);
+      } else if (key.return || inp === " ") activate(cur);
+      else if (inp === "e" && cur.kind === "wh") {
+        const next = EVENTS[(EVENTS.indexOf(cur.wh.events) + 1) % EVENTS.length];
+        run12(`webhook events \u2192 ${next}`, () => api.settings.updateWebhook(cur.wh.id, { events: next }), whQ.reload);
+      } else if (inp === "e" && cur.kind === "ll-path") activate(cur);
+      else if (inp === "a") {
+        if (cur.kind === "wh" || cur.kind === "wh-add") {
+          setInput("");
+          setEditing("wh-url");
+        } else if (cur.kind === "alert" || cur.kind === "alert-add") {
+          setInput("");
+          setEditing("alert-channel");
+        }
+      } else if (inp === "d" && (cur.kind === "wh" || cur.kind === "alert")) {
+        const k = keyOf(cur);
+        if (confirmDel !== k) {
+          setConfirmDel(k);
+          setMsg({ text: "press d again to delete", level: "bad" });
+          return;
+        }
+        setConfirmDel(null);
+        if (cur.kind === "wh") run12("webhook deleted", () => api.settings.deleteWebhook(cur.wh.id), whQ.reload);
+        else run12("alert deleted", () => api.settings.deleteAlert(cur.rule.id), alertQ.reload);
+      } else if (inp === "r") reloadAll();
+    },
+    { isActive: focused && !editing }
+  );
+  const loading = localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data;
+  const error = localQ.error ?? whQ.error ?? alertQ.error;
+  const mark = (r) => keyOf(r) === keyOf(cur) && focused ? "\u25B8 " : "  ";
+  const onOff = (on) => on ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "off" });
+  const chanOf = (rule) => [...(rule.slackUrls ?? []).map((u) => "slack " + u), ...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
+  const listBudget = Math.max(4, rows - 8);
+  const start = Math.min(Math.max(0, selClamped - Math.floor(listBudget / 2)), Math.max(0, rowsAll.length - listBudget));
+  const inWindow = (r) => {
+    const i = rowsAll.findIndex((x) => keyOf(x) === keyOf(r));
+    return i >= start && i < start + listBudget;
+  };
+  return /* @__PURE__ */ jsx9(DataView, { loading, error, children: /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter/space toggle-edit-add \xB7 e events \xB7 d delete \xB7  r refresh" : "press \u2192 to configure" }),
+    editing ? /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: editing === "path" ? "local log path: " : editing === "wh-url" ? "webhook url: " : "channel (slack url / email / telegram id): " }),
+      /* @__PURE__ */ jsx9(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
+    ] }) : msg ? /* @__PURE__ */ jsx9(Text9, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : /* @__PURE__ */ jsx9(Text9, { children: " " }),
+    inWindow(rowsAll[0]) || inWindow(rowsAll[1]) ? /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "LOCAL LOGS ",
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[0]) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "enabled ".padEnd(10) }),
+        onOff(!!local?.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "   enter toggles" })
+      ] }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[1]) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "path ".padEnd(10) }),
+        local?.path ? /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(local.path, cols - 14) }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "not set \u2014 enter to edit" })
+      ] })
+    ] }) : null,
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "WEBHOOKS ",
+        /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
+          "\u2014 POST every matching event to your endpoint (",
+          webhooks.length,
+          ")"
+        ] })
+      ] }),
+      webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
+        onOff(wh.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(wh.url, cols - 16) })
+      ] }, wh.id)),
+      inWindow(rowsAll.find((r) => r.kind === "wh-add")) ? /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "+ add webhook (enter)" })
+      ] }) : null
+    ] }),
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
+        "ALERTS ",
+        /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
+          "\u2014 notify on a signal spike (",
+          alerts.length,
+          ")"
+        ] })
+      ] }),
+      alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
+        onOff(rule.enabled),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
+        /* @__PURE__ */ jsx9(Text9, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: truncate2(chanOf(rule), cols - 26) })
+      ] }, rule.id)),
+      inWindow(rowsAll[rowsAll.length - 1]) ? /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
+      ] }) : null
+    ] })
+  ] }) });
+}
+var EVENTS;
+var init_Settings = __esm({
+  "src/tui/panels/Settings.tsx"() {
+    "use strict";
+    init_api_client();
+    init_components();
+    init_hooks();
+    init_theme();
+    EVENTS = ["denials", "allowed", "all"];
+  }
+});
+
+// src/tui/App.tsx
+import { Box as Box10, Text as Text10, useApp, useInput as useInput8 } from "ink";
+import { useState as useState9 } from "react";
+import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx10(Box10, { marginTop: 1, children: /* @__PURE__ */ jsxs10(Text10, { children: [
       "press ",
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
 }
-function Banner() {
-  const wide = (process.stdout.columns ?? 80) >= 82;
+function Banner({ cols }) {
+  const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs10(Box10, { children: [
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx10(Text10, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 function App() {
   const { exit } = useApp();
-  const [section, setSection] = useState8(0);
-  const [focus, setFocus] = useState8("nav");
-  const [help, setHelp] = useState8(false);
-  useInput7((input, key) => {
+  const [section, setSection] = useState9(0);
+  const [focus, setFocus] = useState9("nav");
+  const [help, setHelp] = useState9(false);
+  useInput8((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -9106,34 +9549,33 @@ function App() {
       else if (input === "q" && SECTIONS[section].label === "Live") exit();
     }
   });
-  const cols = process.stdout.columns ?? 100;
-  const rows = process.stdout.rows ?? 30;
+  const { cols, rows } = useTermSize();
   const current = SECTIONS[section];
-  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
+  if (help) return /* @__PURE__ */ jsx10(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }) });
+    return /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx10(LivePanel, { active: true, focused: true }) });
   }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Banner, {}),
-    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx9(Text9, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx10(Banner, { cols }),
+    /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx10(Text10, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx10(Box10, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx10(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
     ] }),
-    /* @__PURE__ */ jsx9(Box9, { children: focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx10(Box10, { children: focus === "nav" ? /* @__PURE__ */ jsx10(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx10(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx10(Box10, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs10(Text10, { children: [
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 var SECTIONS, BANNER_HEX, HELP;
@@ -9150,6 +9592,8 @@ var init_App = __esm({
     init_Stats();
     init_Audit();
     init_Agents();
+    init_Settings();
+    init_hooks();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },
       { label: "Agents", Panel: AgentsPanel },
@@ -9157,14 +9601,17 @@ var init_App = __esm({
       { label: "Rate Limit", Panel: RateLimitPanel },
       { label: "DLP", Panel: DlpPanel },
       { label: "Stats", Panel: StatsPanel },
-      { label: "Audit", Panel: AuditPanel }
+      { label: "Audit", Panel: AuditPanel },
+      { label: "Settings", Panel: SettingsPanel }
     ];
     BANNER_HEX = ["#1432A0", "#2850BE", "#3C6ED7", "#5A8CE6", "#82AAF0", "#AAC8FA"];
     HELP = [
       ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
-      ["Live", [["\u2191\u2193", "select a stream row"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+      ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
       ["Policies", [["\u2191\u2193", "browse / select"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["v", "versions / rollback"], ["s", "save"], ["x", "discard"]]],
-      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]]
+      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
+      ["Audit", [["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry detail"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+      ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
     ];
   }
 });
@@ -9175,7 +9622,7 @@ __export(tui_exports, {
   launchTui: () => launchTui
 });
 import { render } from "ink";
-import { jsx as jsx10 } from "react/jsx-runtime";
+import { jsx as jsx11 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -9189,7 +9636,7 @@ async function launchTui() {
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}));
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx11(App, {}));
     await waitUntilExit();
   } finally {
     process.stdout.write("\x1B[?1049l");