@solongate/proxy 0.81.25 → 0.81.27

package/dist/api-client/audit.d.ts

@@ -12,6 +12,19 @@ export interface AuditQuery {
     signal?: 'dlp' | 'ratelimit';
 }
 export declare function list(query?: AuditQuery): Promise<AuditList>;
+export declare function remove(ids: string[]): Promise<{
+    deleted: {
+        logs: number;
+        agents: number;
+    };
+}>;
+/** Deletes EVERY audit log of the project (agents/sessions are kept). */
+export declare function removeAll(): Promise<{
+    deleted: {
+        logs: number;
+        agents: number;
+    };
+}>;
 export declare function whitelist(id: string, scope?: 'exact' | 'tool'): Promise<{
     ok: true;
     deduped: boolean;

package/dist/commands/index.js

@@ -291,11 +291,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }

package/dist/index.js

@@ -6845,7 +6845,7 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readSync, statSync } from "fs";
+import { closeSync, openSync, readFileSync as readFileSync6, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join6 } from "path";
 function tailLines(file, maxBytes = 131072) {
@@ -6863,6 +6863,39 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
+function deleteLocalEntry(at, tool, session) {
+  try {
+    const lines = readFileSync6(LOCAL_LOG, "utf-8").split("\n");
+    let removed = 0;
+    const kept = lines.filter((line) => {
+      if (!line.trim()) return false;
+      if (removed) return true;
+      try {
+        const j = JSON.parse(line);
+        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
+        if (hit) {
+          removed++;
+          return false;
+        }
+      } catch {
+      }
+      return true;
+    });
+    if (removed) writeFileSync3(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    return removed;
+  } catch {
+    return 0;
+  }
+}
+function clearLocalLog() {
+  try {
+    const n = readFileSync6(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync3(LOCAL_LOG, "");
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function parseLocalLines(lines) {
   const out2 = [];
   for (const line of lines) {
@@ -7062,11 +7095,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -7267,7 +7308,7 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "fs";
+import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join7 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
@@ -7818,7 +7859,7 @@ function LivePanel({ active: active2 }) {
         const file = join7(homedir5(), ".solongate", "live-export.jsonl");
         try {
           mkdirSync3(join7(homedir5(), ".solongate"), { recursive: true });
-          writeFileSync3(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          writeFileSync4(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -8873,6 +8914,9 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState6(0);
   const [sessSearch, setSessSearch] = useState6("");
   const [sessSel, setSessSel] = useState6(0);
+  const [confirm, setConfirm] = useState6(null);
+  const [msg, setMsg] = useState6(null);
+  const [showHelp, setShowHelp] = useState6(false);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   const tsQ = useLoader(() => source === "cloud" ? api.stats.timeseries({ period: "24h" }) : Promise.resolve(null), [source]);
@@ -8958,8 +9002,41 @@ function AuditPanel({ active: active2, focused }) {
     () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
     [view, current?.session, source]
   );
+  const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
+  const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
+  const doDelete = (kind) => {
+    setMsg({ text: "deleting\u2026", level: "ok" });
+    const run12 = async () => {
+      if (source === "cloud") {
+        if (kind === "one") {
+          if (!current) throw new Error("nothing selected");
+          await api.audit.remove([current.id]);
+        } else {
+          await api.audit.removeAll();
+        }
+        cloudQ.reload();
+        statsQ.reloadQuiet();
+      } else {
+        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
+        if (!n) throw new Error("entry not found in the local file");
+        localQ.reload();
+      }
+    };
+    run12().then(() => {
+      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
+      toTop();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
+      if (showHelp) {
+        setShowHelp(false);
+        return;
+      }
+      if (input === "?") {
+        setShowHelp(true);
+        return;
+      }
       if (view === "detail") {
         if (key.leftArrow || key.escape) setView("logs");
         else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
@@ -8968,6 +9045,11 @@ function AuditPanel({ active: active2, focused }) {
         else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      if (view === "logs" ? logsLoading : sessLoading) return;
+      if (confirm && input !== "x" && input !== "X") {
+        setConfirm(null);
+        setMsg(null);
+      }
       if (input === "s") {
         setSource((s) => s === "cloud" ? "local" : "cloud");
         setPage(0);
@@ -9029,6 +9111,23 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
+      } else if (input === "x") {
+        if (!current) return;
+        if (confirm?.kind !== "one" || confirm.key !== current.id) {
+          setConfirm({ kind: "one", key: current.id });
+          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("one");
+      } else if (input === "X") {
+        if (confirm?.kind !== "all") {
+          setConfirm({ kind: "all", key: "all" });
+          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("all");
       } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
@@ -9085,6 +9184,19 @@ function AuditPanel({ active: active2, focused }) {
     /* @__PURE__ */ jsx6(Text6, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " (s) " })
   ] });
+  if (showHelp) {
+    return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accentBright, children: "AUDIT \u2014 all keys" }),
+      AUDIT_HELP.map(([group, keys]) => /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accent, children: group }),
+        keys.map(([k, desc]) => /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, children: ("  " + k).padEnd(20) }),
+          /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: desc })
+        ] }, k))
+      ] }, group)),
+      /* @__PURE__ */ jsx6(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "press any key to close" }) })
+    ] });
+  }
   if (view === "detail" && current) {
     const sessionCalls = source === "cloud" ? (sessionQ.data?.entries ?? []).map(cloudRow) : localAll.filter((r) => r.session && r.session === current.session).slice(0, 40);
     const bodyW = Math.max(20, cols - 2);
@@ -9155,8 +9267,7 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    const loading2 = source === "cloud" ? agentsQ.loading : localQ.loading;
-    return /* @__PURE__ */ jsx6(DataView, { loading: loading2, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx6(DataView, { loading: sessLoading, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       strip,
       /* @__PURE__ */ jsxs6(Box6, { children: [
         srcChip,
@@ -9165,7 +9276,7 @@ function AuditPanel({ active: active2, focused }) {
         chip("status", SESS_STATUS[si] ?? "all", si !== 0),
         chip("search", sessSearch || "\xB7", !!sessSearch)
       ] }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 f status \xB7 / search \xB7 s source \xB7 v logs \xB7 c clear" : "press \u2192 to browse" }),
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ? all keys" : "press \u2192 to browse" }),
       editing === "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
         /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "search: " }),
         /* @__PURE__ */ jsx6(
@@ -9219,15 +9330,14 @@ function AuditPanel({ active: active2, focused }) {
       ] }) : null
     ] }) });
   }
-  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0);
+  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0) + (msg ? 1 : 0);
   const listRows = Math.max(4, rows - headerRows);
   const selClamped = Math.min(sel, Math.max(0, pageRows.length - 1));
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
   const reasonW = Math.min(60, Math.max(12, cols - 67));
-  const loading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
-  return /* @__PURE__ */ jsx6(DataView, { loading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+  return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     /* @__PURE__ */ jsxs6(Box6, { children: [
       srcChip,
@@ -9240,7 +9350,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ? all keys" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx6(Text6, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : null,
     editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { color: theme.warn, children: [
         editing,
@@ -9299,7 +9410,7 @@ function Detail({ label, value, color }) {
     /* @__PURE__ */ jsx6(Text6, { color, wrap: "truncate", children: value })
   ] });
 }
-var DECISIONS, SIGNALS, SESS_STATUS, PAGE, LOCAL_MAX_BYTES, cloudRow, sessStatus2, STATUS_DOT;
+var DECISIONS, SIGNALS, SESS_STATUS, PAGE, LOCAL_MAX_BYTES, cloudRow, AUDIT_HELP, sessStatus2, STATUS_DOT;
 var init_Audit = __esm({
   "src/tui/panels/Audit.tsx"() {
     "use strict";
@@ -9329,6 +9440,43 @@ var init_Audit = __esm({
       burst: !!e.rate_limit_burst,
       args: e.arguments_summary ? JSON.stringify(e.arguments_summary) : null
     });
+    AUDIT_HELP = [
+      [
+        "Logs",
+        [
+          ["\u2191\u2193 / PgUp PgDn", "select a row (window follows)"],
+          ["enter", "open the FULL entry (reason + arguments)"],
+          ["\u2190 \u2192", "previous / next page (500 per page, jumps to top)"],
+          ["f", "decision filter: all \u2192 DENY \u2192 ALLOW"],
+          ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
+          ["t / n", "tool / agent filter (type, enter done)"],
+          ["/", "free-text search"],
+          ["x", "delete the selected entry (press x twice)"],
+          ["X", "delete ALL logs of the current source (press X twice)"],
+          ["c", "clear every filter (incl. session)"]
+        ]
+      ],
+      [
+        "Sessions",
+        [
+          ["\u2191\u2193", "select a session"],
+          ["enter", "open that session's logs"],
+          ["f", "status filter: all \u2192 active \u2192 idle \u2192 ended"],
+          ["/", "search agent / session id"],
+          ["c", "clear session filters"]
+        ]
+      ],
+      [
+        "Anywhere in Audit",
+        [
+          ["v", "switch logs \u2194 sessions"],
+          ["s", "switch source cloud \u2194 local file"],
+          ["?", "this help \xB7 any key closes"],
+          ["esc", "back to the menu"]
+        ]
+      ],
+      ["Entry detail", [["\u2191\u2193 / PgUp PgDn", "scroll the arguments"], ["\u2190 / esc", "back to the list"]]]
+    ];
     sessStatus2 = (lastAt) => Date.now() - lastAt < 6e4 ? "active" : Date.now() - lastAt < 3e5 ? "idle" : "ended";
     STATUS_DOT = {
       active: { ch: "\u25CF", color: theme.ok },
@@ -9663,7 +9811,7 @@ var init_App = __esm({
       ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
       ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
       ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
-      ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+      ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
       ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
     ];
   }
@@ -9801,7 +9949,7 @@ var init_args = __esm({
 });
 
 // src/commands/policy.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -9976,7 +10124,7 @@ function printRules(rules) {
 }
 async function resolveRules(target) {
   if (target.endsWith(".json")) {
-    const parsed = JSON.parse(readFileSync6(target, "utf-8"));
+    const parsed = JSON.parse(readFileSync7(target, "utf-8"));
     return parsed.rules ?? [];
   }
   const p = await api.policies.get(target);
@@ -10869,7 +11017,7 @@ __export(global_install_exports, {
   runGlobalRestore: () => runGlobalRestore,
   unlockProtected: () => unlockProtected
 });
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
 import { resolve as resolve4, join as join10, dirname } from "path";
 import { homedir as homedir8 } from "os";
 import { fileURLToPath } from "url";
@@ -10964,11 +11112,11 @@ function globalPaths() {
   };
 }
 function readHook(filename) {
-  return readFileSync7(join10(HOOKS_DIR, filename), "utf-8");
+  return readFileSync8(join10(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
   const bundled = join10(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync6(bundled) ? readFileSync7(bundled, "utf-8") : readHook("guard.mjs");
+  return existsSync6(bundled) ? readFileSync8(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -10982,13 +11130,13 @@ function runGlobalRestore() {
   unlockProtected();
   removeClaudeShim();
   if (existsSync6(p.backupPath)) {
-    writeFileSync4(p.settingsPath, readFileSync7(p.backupPath, "utf-8"));
+    writeFileSync5(p.settingsPath, readFileSync8(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
   } else if (existsSync6(p.settingsPath)) {
     try {
-      const s = JSON.parse(readFileSync7(p.settingsPath, "utf-8"));
+      const s = JSON.parse(readFileSync8(p.settingsPath, "utf-8"));
       delete s.hooks;
-      writeFileSync4(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
       console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
     } catch {
     }
@@ -11026,14 +11174,14 @@ function shimTargets() {
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync6(file) ? readFileSync7(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync8(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
   mkdirSync4(dirname(file), { recursive: true });
-  writeFileSync4(file, content);
+  writeFileSync5(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11071,7 +11219,7 @@ async function runGlobalInstall(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync7(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync8(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -11087,19 +11235,19 @@ async function runGlobalInstall(opts = {}) {
   mkdirSync4(p.hooksDir, { recursive: true });
   mkdirSync4(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync4(join10(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync4(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync4(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync4(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync5(join10(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync5(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync5(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync5(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
   installClaudeShim(join10(p.hooksDir, "shield.mjs"));
-  writeFileSync4(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  writeFileSync5(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
-    const raw = readFileSync7(p.settingsPath, "utf-8");
+    const raw = readFileSync8(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync4(p.backupPath, raw);
+      writeFileSync5(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11122,7 +11270,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync4(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11302,7 +11450,7 @@ import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { spawn as spawn3 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync8, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync9, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
 import { homedir as homedir9 } from "os";
 function findCacheFile() {
@@ -11332,7 +11480,7 @@ function loadCfg() {
   try {
     const f = findCacheFile();
     if (f && existsSync7(f)) {
-      const c2 = JSON.parse(readFileSync8(f, "utf-8"));
+      const c2 = JSON.parse(readFileSync9(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
       const ghost = g && Array.isArray(g.patterns) ? g.patterns : [];
@@ -11620,7 +11768,7 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync9, statSync as statSync5 } from "fs";
+import { readFileSync as readFileSync10, statSync as statSync5 } from "fs";
 import { resolve as resolve6, join as join11, isAbsolute } from "path";
 import { homedir as homedir10 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
@@ -11647,7 +11795,7 @@ async function findLogDir() {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync9(join11(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync10(join11(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -11656,7 +11804,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync9(join11(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync10(join11(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -11746,7 +11894,7 @@ async function runLogsServer() {
         return;
       }
       try {
-        const text = readFileSync9(info.file, "utf-8");
+        const text = readFileSync10(info.file, "utf-8");
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8", "Last-Modified": lastMod, "X-Solongate-Exists": "1" });
         res.end(text);
       } catch {
@@ -11798,7 +11946,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync5, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -11858,7 +12006,7 @@ WHAT IT DOES
 function detectProject() {
   if (!existsSync8(resolve7("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -11867,7 +12015,7 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
@@ -11894,7 +12042,7 @@ function findTsEntryFile() {
     const full = resolve7(c2);
     if (existsSync8(full)) {
       try {
-        const content = readFileSync10(full, "utf-8");
+        const content = readFileSync11(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -11914,7 +12062,7 @@ function detectPackageManager() {
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync10(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -11935,7 +12083,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync10(filePath, "utf-8");
+  const original = readFileSync11(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -12106,7 +12254,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync5(entryFile, result.modified);
+  writeFileSync6(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12135,7 +12283,7 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6, existsSync as existsSync9 } from "fs";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync7, existsSync as existsSync9 } from "fs";
 import { resolve as resolve8, join as join12 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
@@ -12215,7 +12363,7 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "package.json"),
     JSON.stringify(
       {
@@ -12245,7 +12393,7 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "tsconfig.json"),
     JSON.stringify(
       {
@@ -12267,7 +12415,7 @@ function createProject(dir, name, _policy) {
     ) + "\n"
   );
   mkdirSync5(join12(dir, "src"), { recursive: true });
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
@@ -12309,7 +12457,7 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".mcp.json"),
     JSON.stringify(
       {
@@ -12327,12 +12475,12 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync6(
+  writeFileSync7(
     join12(dir, ".gitignore"),
     `node_modules/
 dist/
@@ -12426,14 +12574,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
   if (!existsSync10(envPath)) return;
   try {
-    const content = readFileSync11(envPath, "utf-8");
+    const content = readFileSync12(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -12621,7 +12769,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync7(file, json, "utf-8");
+  writeFileSync8(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -12650,7 +12798,7 @@ async function push(apiKey, file, policyId) {
     log5("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync11(file, "utf-8");
+  const content = readFileSync12(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);

package/dist/tui/index.js

@@ -169,12 +169,12 @@ function KeyHints({ hints }) {
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync, writeFileSync } from "fs";
+import { mkdirSync, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join4 } from "path";
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readSync, statSync } from "fs";
+import { closeSync, openSync, readFileSync as readFileSync2, readSync, statSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
 var LOCAL_LOG = join2(homedir2(), ".solongate", "local-logs", "solongate-audit.jsonl");
@@ -193,6 +193,39 @@ function tailLines(file, maxBytes = 131072) {
     return [];
   }
 }
+function deleteLocalEntry(at, tool, session) {
+  try {
+    const lines = readFileSync2(LOCAL_LOG, "utf-8").split("\n");
+    let removed = 0;
+    const kept = lines.filter((line) => {
+      if (!line.trim()) return false;
+      if (removed) return true;
+      try {
+        const j = JSON.parse(line);
+        const hit = Date.parse(j.ts ?? "") === at && (j.tool ?? "?") === tool && (!session || j.session_id === session);
+        if (hit) {
+          removed++;
+          return false;
+        }
+      } catch {
+      }
+      return true;
+    });
+    if (removed) writeFileSync(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    return removed;
+  } catch {
+    return 0;
+  }
+}
+function clearLocalLog() {
+  try {
+    const n = readFileSync2(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync(LOCAL_LOG, "");
+    return n;
+  } catch {
+    return 0;
+  }
+}
 function parseLocalLines(lines) {
   const out = [];
   for (const line of lines) {
@@ -210,7 +243,7 @@ function parseLocalLines(lines) {
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 
 // src/api-client/client.ts
-import { readFileSync as readFileSync2, existsSync } from "fs";
+import { readFileSync as readFileSync3, existsSync } from "fs";
 import { resolve, join as join3 } from "path";
 import { homedir as homedir3 } from "os";
 var DEFAULT_API_URL = "https://api.solongate.com";
@@ -234,7 +267,7 @@ function loginCredentialFile() {
   try {
     const p = join3(homedir3(), ".solongate", "cloud-guard.json");
     if (!existsSync(p)) return {};
-    const c2 = JSON.parse(readFileSync2(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync3(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -244,7 +277,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve(".env");
     if (!existsSync(envPath)) return void 0;
-    for (const line of readFileSync2(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync3(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -496,11 +529,19 @@ var audit_exports = {};
 __export(audit_exports, {
   block: () => block,
   list: () => list2,
+  remove: () => remove2,
+  removeAll: () => removeAll,
   whitelist: () => whitelist
 });
 function list2(query = {}) {
   return request("GET", "/audit-logs", { query });
 }
+function remove2(ids) {
+  return request("DELETE", "/audit-logs", { body: { ids } });
+}
+function removeAll() {
+  return request("DELETE", "/audit-logs", { body: { scope: "logs" } });
+}
 function whitelist(id, scope = "exact") {
   return request("POST", `/audit-logs/${encodeURIComponent(id)}/whitelist`, { body: { scope } });
 }
@@ -1257,7 +1298,7 @@ function LivePanel({ active: active2 }) {
         const file = join4(homedir4(), ".solongate", "live-export.jsonl");
         try {
           mkdirSync(join4(homedir4(), ".solongate"), { recursive: true });
-          writeFileSync(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          writeFileSync2(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err) {
           setActionMsg({ text: "\u2717 export failed: " + (err instanceof Error ? err.message : String(err)), level: "bad", until: Date.now() + 6e3 });
@@ -2214,6 +2255,43 @@ function loadLocalRows() {
     args: j.arguments ? JSON.stringify(j.arguments) : null
   })).sort((a, b) => b.at - a.at);
 }
+var AUDIT_HELP = [
+  [
+    "Logs",
+    [
+      ["\u2191\u2193 / PgUp PgDn", "select a row (window follows)"],
+      ["enter", "open the FULL entry (reason + arguments)"],
+      ["\u2190 \u2192", "previous / next page (500 per page, jumps to top)"],
+      ["f", "decision filter: all \u2192 DENY \u2192 ALLOW"],
+      ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
+      ["t / n", "tool / agent filter (type, enter done)"],
+      ["/", "free-text search"],
+      ["x", "delete the selected entry (press x twice)"],
+      ["X", "delete ALL logs of the current source (press X twice)"],
+      ["c", "clear every filter (incl. session)"]
+    ]
+  ],
+  [
+    "Sessions",
+    [
+      ["\u2191\u2193", "select a session"],
+      ["enter", "open that session's logs"],
+      ["f", "status filter: all \u2192 active \u2192 idle \u2192 ended"],
+      ["/", "search agent / session id"],
+      ["c", "clear session filters"]
+    ]
+  ],
+  [
+    "Anywhere in Audit",
+    [
+      ["v", "switch logs \u2194 sessions"],
+      ["s", "switch source cloud \u2194 local file"],
+      ["?", "this help \xB7 any key closes"],
+      ["esc", "back to the menu"]
+    ]
+  ],
+  ["Entry detail", [["\u2191\u2193 / PgUp PgDn", "scroll the arguments"], ["\u2190 / esc", "back to the list"]]]
+];
 var sessStatus2 = (lastAt) => Date.now() - lastAt < 6e4 ? "active" : Date.now() - lastAt < 3e5 ? "idle" : "ended";
 var STATUS_DOT = {
   active: { ch: "\u25CF", color: theme.ok },
@@ -2237,6 +2315,9 @@ function AuditPanel({ active: active2, focused }) {
   const [si, setSi] = useState6(0);
   const [sessSearch, setSessSearch] = useState6("");
   const [sessSel, setSessSel] = useState6(0);
+  const [confirm, setConfirm] = useState6(null);
+  const [msg, setMsg] = useState6(null);
+  const [showHelp, setShowHelp] = useState6(false);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   const tsQ = useLoader(() => source === "cloud" ? api.stats.timeseries({ period: "24h" }) : Promise.resolve(null), [source]);
@@ -2322,8 +2403,41 @@ function AuditPanel({ active: active2, focused }) {
     () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
     [view, current?.session, source]
   );
+  const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
+  const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
+  const doDelete = (kind) => {
+    setMsg({ text: "deleting\u2026", level: "ok" });
+    const run = async () => {
+      if (source === "cloud") {
+        if (kind === "one") {
+          if (!current) throw new Error("nothing selected");
+          await api.audit.remove([current.id]);
+        } else {
+          await api.audit.removeAll();
+        }
+        cloudQ.reload();
+        statsQ.reloadQuiet();
+      } else {
+        const n = kind === "one" && current ? deleteLocalEntry(current.at, current.tool, current.session) : kind === "all" ? clearLocalLog() : 0;
+        if (!n) throw new Error("entry not found in the local file");
+        localQ.reload();
+      }
+    };
+    run().then(() => {
+      setMsg({ text: kind === "one" ? "\u2713 entry deleted" : `\u2713 ALL ${source} logs deleted`, level: "ok" });
+      toTop();
+    }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
+      if (showHelp) {
+        setShowHelp(false);
+        return;
+      }
+      if (input === "?") {
+        setShowHelp(true);
+        return;
+      }
       if (view === "detail") {
         if (key.leftArrow || key.escape) setView("logs");
         else if (key.upArrow) setDetailScroll((n) => Math.max(0, n - 1));
@@ -2332,6 +2446,11 @@ function AuditPanel({ active: active2, focused }) {
         else if (key.pageDown) setDetailScroll((n) => n + 10);
         return;
       }
+      if (view === "logs" ? logsLoading : sessLoading) return;
+      if (confirm && input !== "x" && input !== "X") {
+        setConfirm(null);
+        setMsg(null);
+      }
       if (input === "s") {
         setSource((s) => s === "cloud" ? "local" : "cloud");
         setPage(0);
@@ -2393,6 +2512,23 @@ function AuditPanel({ active: active2, focused }) {
         setGi((n) => (n + 1) % SIGNALS.length);
         setPage(0);
         toTop();
+      } else if (input === "x") {
+        if (!current) return;
+        if (confirm?.kind !== "one" || confirm.key !== current.id) {
+          setConfirm({ kind: "one", key: current.id });
+          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("one");
+      } else if (input === "X") {
+        if (confirm?.kind !== "all") {
+          setConfirm({ kind: "all", key: "all" });
+          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          return;
+        }
+        setConfirm(null);
+        doDelete("all");
       } else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
@@ -2449,6 +2585,19 @@ function AuditPanel({ active: active2, focused }) {
     /* @__PURE__ */ jsx6(Text6, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " (s) " })
   ] });
+  if (showHelp) {
+    return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accentBright, children: "AUDIT \u2014 all keys" }),
+      AUDIT_HELP.map(([group, keys]) => /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accent, children: group }),
+        keys.map(([k, desc]) => /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, children: ("  " + k).padEnd(20) }),
+          /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: desc })
+        ] }, k))
+      ] }, group)),
+      /* @__PURE__ */ jsx6(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "press any key to close" }) })
+    ] });
+  }
   if (view === "detail" && current) {
     const sessionCalls = source === "cloud" ? (sessionQ.data?.entries ?? []).map(cloudRow) : localAll.filter((r) => r.session && r.session === current.session).slice(0, 40);
     const bodyW = Math.max(20, cols - 2);
@@ -2519,8 +2668,7 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    const loading2 = source === "cloud" ? agentsQ.loading : localQ.loading;
-    return /* @__PURE__ */ jsx6(DataView, { loading: loading2, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx6(DataView, { loading: sessLoading, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       strip,
       /* @__PURE__ */ jsxs6(Box6, { children: [
         srcChip,
@@ -2529,7 +2677,7 @@ function AuditPanel({ active: active2, focused }) {
         chip("status", SESS_STATUS[si] ?? "all", si !== 0),
         chip("search", sessSearch || "\xB7", !!sessSearch)
       ] }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 f status \xB7 / search \xB7 s source \xB7 v logs \xB7 c clear" : "press \u2192 to browse" }),
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ? all keys" : "press \u2192 to browse" }),
       editing === "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
         /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "search: " }),
         /* @__PURE__ */ jsx6(
@@ -2583,15 +2731,14 @@ function AuditPanel({ active: active2, focused }) {
       ] }) : null
     ] }) });
   }
-  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0);
+  const headerRows = 6 + (editing && editing !== "sess-search" ? 1 : 0) + (msg ? 1 : 0);
   const listRows = Math.max(4, rows - headerRows);
   const selClamped = Math.min(sel, Math.max(0, pageRows.length - 1));
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
   const reasonW = Math.min(60, Math.max(12, cols - 67));
-  const loading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
-  return /* @__PURE__ */ jsx6(DataView, { loading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+  return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     /* @__PURE__ */ jsxs6(Box6, { children: [
       srcChip,
@@ -2604,7 +2751,8 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 f dec \xB7 g sig \xB7 t tool \xB7 n agent \xB7 / search \xB7 s source \xB7 v sessions \xB7 c clear" : "press \u2192 to browse" }),
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ? all keys" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx6(Text6, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
     editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
       /* @__PURE__ */ jsxs6(Text6, { color: theme.warn, children: [
         editing,
@@ -2950,7 +3098,7 @@ var HELP = [
   ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
   ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
   ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
-  ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["c", "clear filters"]]],
+  ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
   ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]]
 ];
 function HelpOverlay({ cols, rows }) {

package/dist/tui/local-log.d.ts

@@ -17,6 +17,10 @@ export interface LocalLogLine {
     matched_rule_id?: string;
     rate_limit_burst?: boolean;
 }
+/** Delete ONE matching line (ts + tool [+ session]) from the local log file. */
+export declare function deleteLocalEntry(at: number, tool: string, session?: string | null): number;
+/** Empty the local log file. Returns how many lines were removed. */
+export declare function clearLocalLog(): number;
 export declare function parseLocalLines(lines: string[]): Array<LocalLogLine & {
     at: number;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.25",
+  "version": "0.81.27",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {