@solongate/proxy 0.81.27 → 0.81.28

package/dist/index.js

@@ -8877,6 +8877,9 @@ var init_Dlp = __esm({
 // src/tui/panels/Audit.tsx
 import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir6 } from "os";
+import { join as join8 } from "path";
 import { useState as useState6 } from "react";
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function loadLocalRows() {
@@ -8941,26 +8944,25 @@ function AuditPanel({ active: active2, focused }) {
   usePoll(cloudQ.reloadQuiet, 6e3, active2 && source === "cloud" && view === "logs" && !editing && page === 0);
   const localQ = useLoader(() => source === "local" ? Promise.resolve(loadLocalRows()) : Promise.resolve(null), [source]);
   usePoll(localQ.reloadQuiet, 6e3, active2 && source === "local" && view === "logs" && !editing && page === 0);
+  const q = search.trim().toLowerCase();
+  const localFiltered = (localQ.data ?? []).filter((r) => {
+    if (DECISIONS[di] && r.decision !== DECISIONS[di]) return false;
+    if (SIGNALS[gi] === "dlp" && r.dlp.length === 0) return false;
+    if (SIGNALS[gi] === "ratelimit" && !r.burst) return false;
+    if (tool && !r.tool.toLowerCase().includes(tool.toLowerCase())) return false;
+    if (agent && (r.agent ?? "").toLowerCase() !== agent.toLowerCase()) return false;
+    if (sessFilter && r.session !== sessFilter) return false;
+    if (q && !`${r.tool} ${r.agent ?? ""} ${r.reason ?? ""} ${r.args ?? ""}`.toLowerCase().includes(q)) return false;
+    return true;
+  });
   let pageRows = [];
   let total = 0;
   if (source === "cloud") {
     pageRows = (cloudQ.data?.entries ?? []).map(cloudRow).sort((a, b) => b.at - a.at);
     total = cloudQ.data?.total ?? 0;
   } else {
-    const all = localQ.data ?? [];
-    const q = search.trim().toLowerCase();
-    const filtered = all.filter((r) => {
-      if (DECISIONS[di] && r.decision !== DECISIONS[di]) return false;
-      if (SIGNALS[gi] === "dlp" && r.dlp.length === 0) return false;
-      if (SIGNALS[gi] === "ratelimit" && !r.burst) return false;
-      if (tool && !r.tool.toLowerCase().includes(tool.toLowerCase())) return false;
-      if (agent && (r.agent ?? "").toLowerCase() !== agent.toLowerCase()) return false;
-      if (sessFilter && r.session !== sessFilter) return false;
-      if (q && !`${r.tool} ${r.agent ?? ""} ${r.reason ?? ""} ${r.args ?? ""}`.toLowerCase().includes(q)) return false;
-      return true;
-    });
-    total = filtered.length;
-    pageRows = filtered.slice(page * PAGE, page * PAGE + PAGE);
+    total = localFiltered.length;
+    pageRows = localFiltered.slice(page * PAGE, page * PAGE + PAGE);
   }
   const pages = Math.max(1, Math.ceil(total / PAGE));
   const current = pageRows[Math.min(sel, Math.max(0, pageRows.length - 1))];
@@ -9027,6 +9029,23 @@ function AuditPanel({ active: active2, focused }) {
       toTop();
     }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
   };
+  const doExport = (kind) => {
+    setMsg({ text: "exporting\u2026", level: "ok" });
+    const run12 = async () => {
+      const dir = join8(homedir6(), ".solongate");
+      const file = join8(dir, `audit-export-${source}.jsonl`);
+      let rows2;
+      if (kind === "page") rows2 = pageRows;
+      else if (source === "cloud") {
+        const r = await api.audit.list({ ...query, limit: 1e4, offset: 0 });
+        rows2 = r.entries.map(cloudRow).sort((a, b) => b.at - a.at);
+      } else rows2 = localFiltered;
+      mkdirSync4(dir, { recursive: true });
+      writeFileSync5(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
+      return { n: rows2.length, file };
+    };
+    run12().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
       if (showHelp) {
@@ -9115,7 +9134,7 @@ function AuditPanel({ active: active2, focused }) {
         if (!current) return;
         if (confirm?.kind !== "one" || confirm.key !== current.id) {
           setConfirm({ kind: "one", key: current.id });
-          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          setMsg({ text: `x = delete ONLY the selected entry: ${current.decision} ${current.tool} (${ago(current.at)} ago) \u2014 press x again`, level: "bad" });
           return;
         }
         setConfirm(null);
@@ -9123,12 +9142,14 @@ function AuditPanel({ active: active2, focused }) {
       } else if (input === "X") {
         if (confirm?.kind !== "all") {
           setConfirm({ kind: "all", key: "all" });
-          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          setMsg({ text: `\u26A0 X = delete ALL ${source} logs \u2014 every one of the ${total} matched entries! press X again`, level: "bad" });
           return;
         }
         setConfirm(null);
         doDelete("all");
-      } else if (input === "t") setEditing("tool");
+      } else if (input === "e") doExport("page");
+      else if (input === "E") doExport("all");
+      else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
       else if (input === "c") {
@@ -9451,8 +9472,10 @@ var init_Audit = __esm({
           ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
           ["t / n", "tool / agent filter (type, enter done)"],
           ["/", "free-text search"],
-          ["x", "delete the selected entry (press x twice)"],
-          ["X", "delete ALL logs of the current source (press X twice)"],
+          ["x", "delete ONLY the selected entry (press x twice)"],
+          ["X", "delete ALL matched logs of the source (press X twice)"],
+          ["e", "export this page \u2192 ~/.solongate/audit-export-<src>.jsonl"],
+          ["E", "export ALL matched rows (cloud: up to 10k)"],
           ["c", "clear every filter (incl. session)"]
         ]
       ],
@@ -10540,8 +10563,8 @@ var init_agents2 = __esm({
 
 // src/commands/doctor.ts
 import { existsSync as existsSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 async function run6(argv) {
   const { flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -10601,14 +10624,14 @@ var init_doctor = __esm({
     init_api_client();
     init_format();
     init_args();
-    LOCAL_LOG2 = join8(homedir6(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG2 = join9(homedir7(), ".solongate", "local-logs", "solongate-audit.jsonl");
   }
 });
 
 // src/commands/watch.ts
 import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 function tailLocal(file, maxBytes = 131072) {
   try {
     const size = statSync3(file).size;
@@ -10715,7 +10738,7 @@ var init_watch = __esm({
     init_cli_utils();
     init_args();
     init_format();
-    LOCAL_LOG3 = join9(homedir7(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG3 = join10(homedir8(), ".solongate", "local-logs", "solongate-audit.jsonl");
     trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
     time = (ms) => new Date(ms).toTimeString().slice(0, 8);
   }
@@ -11017,9 +11040,9 @@ __export(global_install_exports, {
   runGlobalRestore: () => runGlobalRestore,
   unlockProtected: () => unlockProtected
 });
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, existsSync as existsSync6, mkdirSync as mkdirSync4 } from "fs";
-import { resolve as resolve4, join as join10, dirname } from "path";
-import { homedir as homedir8 } from "os";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, existsSync as existsSync6, mkdirSync as mkdirSync5 } from "fs";
+import { resolve as resolve4, join as join11, dirname } from "path";
+import { homedir as homedir9 } from "os";
 import { fileURLToPath } from "url";
 import { createInterface } from "readline";
 import { execFileSync as execFileSync2 } from "child_process";
@@ -11082,10 +11105,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join10(p.hooksDir, "guard.mjs"),
-    join10(p.hooksDir, "audit.mjs"),
-    join10(p.hooksDir, "stop.mjs"),
-    join10(p.hooksDir, "shield.mjs"),
+    join11(p.hooksDir, "guard.mjs"),
+    join11(p.hooksDir, "audit.mjs"),
+    join11(p.hooksDir, "stop.mjs"),
+    join11(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -11097,25 +11120,25 @@ function unlockProtected() {
   for (const f of protectedTargets()) unlockFile(f);
 }
 function globalPaths() {
-  const home = homedir8();
-  const sgDir = join10(home, ".solongate");
-  const hooksDir = join10(sgDir, "hooks");
-  const claudeDir = join10(home, ".claude");
+  const home = homedir9();
+  const sgDir = join11(home, ".solongate");
+  const hooksDir = join11(sgDir, "hooks");
+  const claudeDir = join11(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join10(claudeDir, "settings.json"),
-    backupPath: join10(claudeDir, "settings.solongate.bak"),
-    configPath: join10(sgDir, "cloud-guard.json")
+    settingsPath: join11(claudeDir, "settings.json"),
+    backupPath: join11(claudeDir, "settings.solongate.bak"),
+    configPath: join11(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync8(join10(HOOKS_DIR, filename), "utf-8");
+  return readFileSync8(join11(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join10(HOOKS_DIR, "guard.bundled.mjs");
+  const bundled = join11(HOOKS_DIR, "guard.bundled.mjs");
   return existsSync6(bundled) ? readFileSync8(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
@@ -11130,13 +11153,13 @@ function runGlobalRestore() {
   unlockProtected();
   removeClaudeShim();
   if (existsSync6(p.backupPath)) {
-    writeFileSync5(p.settingsPath, readFileSync8(p.backupPath, "utf-8"));
+    writeFileSync6(p.settingsPath, readFileSync8(p.backupPath, "utf-8"));
     console.log(`  Restored ${p.settingsPath} from backup.`);
   } else if (existsSync6(p.settingsPath)) {
     try {
       const s = JSON.parse(readFileSync8(p.settingsPath, "utf-8"));
       delete s.hooks;
-      writeFileSync5(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
+      writeFileSync6(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
       console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
     } catch {
     }
@@ -11170,7 +11193,7 @@ function shimTargets() {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join10(homedir8(), f)).filter((f) => existsSync6(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join11(homedir9(), f)).filter((f) => existsSync6(f));
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
@@ -11180,8 +11203,8 @@ function writeShimBlock(file, block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
-  mkdirSync4(dirname(file), { recursive: true });
-  writeFileSync5(file, content);
+  mkdirSync5(dirname(file), { recursive: true });
+  writeFileSync6(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11232,22 +11255,22 @@ async function runGlobalInstall(opts = {}) {
     process.exit(1);
   }
   const apiUrl = opts.apiUrl || process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
-  mkdirSync4(p.hooksDir, { recursive: true });
-  mkdirSync4(p.claudeDir, { recursive: true });
+  mkdirSync5(p.hooksDir, { recursive: true });
+  mkdirSync5(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync5(join10(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync5(join10(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync5(join10(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync5(join10(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync6(join11(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync6(join11(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync6(join11(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync6(join11(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join10(p.hooksDir, "shield.mjs"));
-  writeFileSync5(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  installClaudeShim(join11(p.hooksDir, "shield.mjs"));
+  writeFileSync6(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
     const raw = readFileSync8(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync5(p.backupPath, raw);
+      writeFileSync6(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11256,9 +11279,9 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join10(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join10(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join10(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join11(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join11(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join11(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -11270,7 +11293,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync5(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync6(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11452,9 +11475,9 @@ import { spawn as spawn3 } from "child_process";
 import { URL as URL2 } from "url";
 import { readFileSync as readFileSync9, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 function findCacheFile() {
-  const dir = resolve5(homedir9(), ".solongate");
+  const dir = resolve5(homedir10(), ".solongate");
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
@@ -11769,8 +11792,8 @@ __export(logs_server_exports, {
 });
 import { createServer as createServer2 } from "http";
 import { readFileSync as readFileSync10, statSync as statSync5 } from "fs";
-import { resolve as resolve6, join as join11, isAbsolute } from "path";
-import { homedir as homedir10 } from "os";
+import { resolve as resolve6, join as join12, isAbsolute } from "path";
+import { homedir as homedir11 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
@@ -11787,15 +11810,15 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
-  return resolve6(homedir10(), ".solongate", "local-logs");
+  return resolve6(homedir11(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve6(homedir10(), ".solongate");
+  const base = resolve6(homedir11(), ".solongate");
   try {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync10(join11(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync10(join12(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -11804,7 +11827,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync10(join11(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync10(join12(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -11833,7 +11856,7 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join11(dir, LOG_FILENAME);
+  const file = join12(dir, LOG_FILENAME);
   try {
     const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
@@ -11946,7 +11969,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -12254,7 +12277,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync6(entryFile, result.modified);
+  writeFileSync7(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12283,8 +12306,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync7, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join12 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync8, existsSync as existsSync9 } from "fs";
+import { resolve as resolve8, join as join13 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -12363,8 +12386,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync7(
-    join12(dir, "package.json"),
+  writeFileSync8(
+    join13(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -12393,8 +12416,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync7(
-    join12(dir, "tsconfig.json"),
+  writeFileSync8(
+    join13(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -12414,9 +12437,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync5(join12(dir, "src"), { recursive: true });
-  writeFileSync7(
-    join12(dir, "src", "index.ts"),
+  mkdirSync6(join13(dir, "src"), { recursive: true });
+  writeFileSync8(
+    join13(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -12457,8 +12480,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync7(
-    join12(dir, ".mcp.json"),
+  writeFileSync8(
+    join13(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -12475,13 +12498,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync7(
-    join12(dir, ".env"),
+  writeFileSync8(
+    join13(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync7(
-    join12(dir, ".gitignore"),
+  writeFileSync8(
+    join13(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -12500,7 +12523,7 @@ async function main3() {
     process.exit(1);
   }
   withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync5(dir, { recursive: true });
+    mkdirSync6(dir, { recursive: true });
     createProject(dir, opts.name, opts.policy);
   });
   if (!opts.noInstall) {
@@ -12574,7 +12597,7 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync9, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
@@ -12769,7 +12792,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync8(file, json, "utf-8");
+  writeFileSync9(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);

package/dist/tui/index.js

@@ -2214,6 +2214,9 @@ function RegexTest({ re }) {
 // src/tui/panels/Audit.tsx
 import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join5 } from "path";
 import { useState as useState6 } from "react";
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
@@ -2266,8 +2269,10 @@ var AUDIT_HELP = [
       ["g", "signal filter: all \u2192 dlp \u2192 ratelimit"],
       ["t / n", "tool / agent filter (type, enter done)"],
       ["/", "free-text search"],
-      ["x", "delete the selected entry (press x twice)"],
-      ["X", "delete ALL logs of the current source (press X twice)"],
+      ["x", "delete ONLY the selected entry (press x twice)"],
+      ["X", "delete ALL matched logs of the source (press X twice)"],
+      ["e", "export this page \u2192 ~/.solongate/audit-export-<src>.jsonl"],
+      ["E", "export ALL matched rows (cloud: up to 10k)"],
       ["c", "clear every filter (incl. session)"]
     ]
   ],
@@ -2342,26 +2347,25 @@ function AuditPanel({ active: active2, focused }) {
   usePoll(cloudQ.reloadQuiet, 6e3, active2 && source === "cloud" && view === "logs" && !editing && page === 0);
   const localQ = useLoader(() => source === "local" ? Promise.resolve(loadLocalRows()) : Promise.resolve(null), [source]);
   usePoll(localQ.reloadQuiet, 6e3, active2 && source === "local" && view === "logs" && !editing && page === 0);
+  const q = search.trim().toLowerCase();
+  const localFiltered = (localQ.data ?? []).filter((r) => {
+    if (DECISIONS[di] && r.decision !== DECISIONS[di]) return false;
+    if (SIGNALS[gi] === "dlp" && r.dlp.length === 0) return false;
+    if (SIGNALS[gi] === "ratelimit" && !r.burst) return false;
+    if (tool && !r.tool.toLowerCase().includes(tool.toLowerCase())) return false;
+    if (agent && (r.agent ?? "").toLowerCase() !== agent.toLowerCase()) return false;
+    if (sessFilter && r.session !== sessFilter) return false;
+    if (q && !`${r.tool} ${r.agent ?? ""} ${r.reason ?? ""} ${r.args ?? ""}`.toLowerCase().includes(q)) return false;
+    return true;
+  });
   let pageRows = [];
   let total = 0;
   if (source === "cloud") {
     pageRows = (cloudQ.data?.entries ?? []).map(cloudRow).sort((a, b) => b.at - a.at);
     total = cloudQ.data?.total ?? 0;
   } else {
-    const all = localQ.data ?? [];
-    const q = search.trim().toLowerCase();
-    const filtered = all.filter((r) => {
-      if (DECISIONS[di] && r.decision !== DECISIONS[di]) return false;
-      if (SIGNALS[gi] === "dlp" && r.dlp.length === 0) return false;
-      if (SIGNALS[gi] === "ratelimit" && !r.burst) return false;
-      if (tool && !r.tool.toLowerCase().includes(tool.toLowerCase())) return false;
-      if (agent && (r.agent ?? "").toLowerCase() !== agent.toLowerCase()) return false;
-      if (sessFilter && r.session !== sessFilter) return false;
-      if (q && !`${r.tool} ${r.agent ?? ""} ${r.reason ?? ""} ${r.args ?? ""}`.toLowerCase().includes(q)) return false;
-      return true;
-    });
-    total = filtered.length;
-    pageRows = filtered.slice(page * PAGE, page * PAGE + PAGE);
+    total = localFiltered.length;
+    pageRows = localFiltered.slice(page * PAGE, page * PAGE + PAGE);
   }
   const pages = Math.max(1, Math.ceil(total / PAGE));
   const current = pageRows[Math.min(sel, Math.max(0, pageRows.length - 1))];
@@ -2428,6 +2432,23 @@ function AuditPanel({ active: active2, focused }) {
       toTop();
     }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
   };
+  const doExport = (kind) => {
+    setMsg({ text: "exporting\u2026", level: "ok" });
+    const run = async () => {
+      const dir = join5(homedir5(), ".solongate");
+      const file = join5(dir, `audit-export-${source}.jsonl`);
+      let rows2;
+      if (kind === "page") rows2 = pageRows;
+      else if (source === "cloud") {
+        const r = await api.audit.list({ ...query, limit: 1e4, offset: 0 });
+        rows2 = r.entries.map(cloudRow).sort((a, b) => b.at - a.at);
+      } else rows2 = localFiltered;
+      mkdirSync2(dir, { recursive: true });
+      writeFileSync3(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
+      return { n: rows2.length, file };
+    };
+    run().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
+  };
   useInput5(
     (input, key) => {
       if (showHelp) {
@@ -2516,7 +2537,7 @@ function AuditPanel({ active: active2, focused }) {
         if (!current) return;
         if (confirm?.kind !== "one" || confirm.key !== current.id) {
           setConfirm({ kind: "one", key: current.id });
-          setMsg({ text: `delete ${current.decision} ${current.tool} (${ago(current.at)} ago)? press x again`, level: "bad" });
+          setMsg({ text: `x = delete ONLY the selected entry: ${current.decision} ${current.tool} (${ago(current.at)} ago) \u2014 press x again`, level: "bad" });
           return;
         }
         setConfirm(null);
@@ -2524,12 +2545,14 @@ function AuditPanel({ active: active2, focused }) {
       } else if (input === "X") {
         if (confirm?.kind !== "all") {
           setConfirm({ kind: "all", key: "all" });
-          setMsg({ text: `DELETE ALL ${source} logs (${total} entries)? press X again`, level: "bad" });
+          setMsg({ text: `\u26A0 X = delete ALL ${source} logs \u2014 every one of the ${total} matched entries! press X again`, level: "bad" });
           return;
         }
         setConfirm(null);
         doDelete("all");
-      } else if (input === "t") setEditing("tool");
+      } else if (input === "e") doExport("page");
+      else if (input === "E") doExport("all");
+      else if (input === "t") setEditing("tool");
       else if (input === "n") setEditing("agent");
       else if (input === "/") setEditing("search");
       else if (input === "c") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.27",
+  "version": "0.81.28",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {