@solongate/proxy 0.81.37 → 0.81.39

package/dist/tui/index.js

@@ -8,8 +8,8 @@ var __export = (target, all) => {
 import { render } from "ink";
 
 // src/tui/App.tsx
-import { Box as Box8, Text as Text8, useApp, useInput as useInput7 } from "ink";
-import { useState as useState8 } from "react";
+import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
+import { useState as useState9 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -263,11 +263,48 @@ function listAccounts() {
   }
   return list5;
 }
+function saveAccount(acc) {
+  try {
+    const list5 = (() => {
+      try {
+        const raw = JSON.parse(readFileSync3(accountsFile(), "utf-8"));
+        return Array.isArray(raw) ? raw.filter((a) => a && a.apiKey) : [];
+      } catch {
+        return [];
+      }
+    })();
+    const next = list5.filter((a) => a.apiKey !== acc.apiKey);
+    next.unshift({ ...acc, addedAt: acc.addedAt ?? Date.now() });
+    mkdirSync(join3(homedir3(), ".solongate"), { recursive: true });
+    writeFileSync2(accountsFile(), JSON.stringify(next, null, 2));
+  } catch {
+  }
+}
 var viewOverride = null;
 function setViewCredentials(creds) {
   viewOverride = creds;
   cached2 = null;
 }
+function isActiveAccount(apiKey) {
+  return loginCredentialFile().apiKey === apiKey;
+}
+function setActiveAccount(creds) {
+  try {
+    const dir = join3(homedir3(), ".solongate");
+    mkdirSync(dir, { recursive: true });
+    const p = join3(dir, ["cloud", "guard.json"].join("-"));
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync3(p, "utf-8"));
+    } catch {
+    }
+    writeFileSync2(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
+    cached2 = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 var ApiError = class extends Error {
   status;
   code;
@@ -312,14 +349,6 @@ function dotenvApiKey() {
   return void 0;
 }
 var cached2 = null;
-function isAuthenticated() {
-  try {
-    resolveCredentials();
-    return true;
-  } catch {
-    return false;
-  }
-}
 function resolveCredentials(apiUrlOverride) {
   if (viewOverride && !apiUrlOverride) return viewOverride;
   if (cached2 && !apiUrlOverride) return cached2;
@@ -397,6 +426,48 @@ async function request(method, path, opts = {}) {
   return json;
 }
 
+// src/api-client/device-login.ts
+import { spawn } from "child_process";
+function openBrowser(url) {
+  try {
+    const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
+    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function startDeviceLogin(apiUrl = DEFAULT_API_URL) {
+  const res = await fetch(`${apiUrl}/api/v1/auth/device/start`, { method: "POST" });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  const j = await res.json();
+  return {
+    deviceCode: j.device_code,
+    verifyUrl: j.verification_uri_complete || j.verification_uri || "",
+    intervalMs: Math.max(2, Number(j.interval) || 3) * 1e3,
+    expiresAt: Date.now() + (Number(j.expires_in) || 600) * 1e3
+  };
+}
+async function pollDeviceLogin(apiUrl, deviceCode) {
+  try {
+    const res = await fetch(`${apiUrl}/api/v1/auth/device/poll`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ device_code: deviceCode })
+    });
+    const j = await res.json().catch(() => ({}));
+    if (j.status === "approved" && j.api_key) {
+      return { status: "approved", apiKey: j.api_key, project: j.project?.name, user: j.user?.name || j.user?.email };
+    }
+    if (j.status === "expired" || j.status === "not_found") return { status: j.status };
+    return { status: "pending" };
+  } catch {
+    return { status: "pending" };
+  }
+}
+
 // src/api-client/policies.ts
 var policies_exports = {};
 __export(policies_exports, {
@@ -622,24 +693,24 @@ function list4() {
 var api = { policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
 
 // src/tui/notify.ts
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 function desktopNotify(title, msg) {
   try {
     if (process.platform === "linux") {
-      const p = spawn("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
+      const p = spawn2("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "win32") {
       const q = (s) => s.replace(/'/g, "''");
       const ps = `Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.Visible=$true;$n.ShowBalloonTip(6000,'${q(title)}','${q(msg)}',[System.Windows.Forms.ToolTipIcon]::Warning);Start-Sleep -Milliseconds 6500;$n.Dispose()`;
-      const p = spawn("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
+      const p = spawn2("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "darwin") {
       const esc = (s) => s.replace(/"/g, '\\"');
-      const p = spawn("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
+      const p = spawn2("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
@@ -3083,16 +3154,147 @@ function SettingsPanel({ active: active2, focused }) {
   ] }) });
 }
 
-// src/tui/App.tsx
+// src/tui/panels/Accounts.tsx
+import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
+import { useEffect as useEffect6, useRef as useRef3, useState as useState8 } from "react";
 import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-function LiveHint() {
+var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+function AccountsPanel({
+  focused,
+  viewApiKey,
+  onView
+}) {
+  const [accounts, setAccounts] = useState8(() => listAccounts());
+  const [sel, setSel] = useState8(0);
+  const [msg, setMsg] = useState8(null);
+  const [login, setLogin] = useState8(null);
+  const [tick, setTick] = useState8(0);
+  const abort = useRef3(false);
+  const refresh = () => setAccounts(listAccounts());
+  useEffect6(() => {
+    if (!login || login.phase === "done" || login.phase === "error") return;
+    const t = setInterval(() => setTick((n) => n + 1), 120);
+    return () => clearInterval(t);
+  }, [login]);
+  const beginLogin = () => {
+    if (login && (login.phase === "starting" || login.phase === "waiting")) return;
+    abort.current = false;
+    setLogin({ phase: "starting" });
+    void (async () => {
+      let start;
+      try {
+        start = await startDeviceLogin(DEFAULT_API_URL);
+      } catch (e) {
+        setLogin({ phase: "error", msg: "could not reach SolonGate: " + (e instanceof Error ? e.message : String(e)) });
+        return;
+      }
+      setLogin({ phase: "waiting", url: start.verifyUrl });
+      openBrowser(start.verifyUrl);
+      while (Date.now() < start.expiresAt && !abort.current) {
+        await new Promise((r) => setTimeout(r, start.intervalMs));
+        if (abort.current) return;
+        const res = await pollDeviceLogin(DEFAULT_API_URL, start.deviceCode);
+        if (res.status === "approved" && res.apiKey) {
+          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user });
+          setLogin({ phase: "done", msg: `\u2713 added ${res.project || res.user || "account"}` });
+          refresh();
+          setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL });
+          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user });
+          return;
+        }
+        if (res.status === "expired" || res.status === "not_found") {
+          setLogin({ phase: "error", msg: "code expired \u2014 press n to retry" });
+          return;
+        }
+      }
+      if (!abort.current) setLogin({ phase: "error", msg: "timed out \u2014 press n to retry" });
+    })();
+  };
+  useInput7(
+    (input, key) => {
+      if (login && (login.phase === "starting" || login.phase === "waiting")) {
+        if (key.escape) {
+          abort.current = true;
+          setLogin(null);
+        }
+        return;
+      }
+      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
+      else if (key.downArrow) setSel((n) => Math.min(accounts.length - 1, n + 1));
+      else if (key.return) {
+        const a = accounts[sel];
+        if (a) {
+          setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
+          onView?.(a);
+          setMsg({ text: `viewing ${a.project || a.user || a.apiKey.slice(0, 8)}`, level: "ok" });
+        }
+      } else if (input === "m") {
+        const a = accounts[sel];
+        if (a) {
+          const ok = setActiveAccount({ apiKey: a.apiKey, apiUrl: a.apiUrl });
+          setMsg(ok ? { text: `\u2713 ${a.project || a.user || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
+          refresh();
+        }
+      } else if (input === "n") beginLogin();
+      else if (input === "r") refresh();
+    },
+    { isActive: focused }
+  );
+  const spin = SPIN2[tick % SPIN2.length];
+  if (login && (login.phase === "starting" || login.phase === "waiting")) {
+    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "Add an account" }),
+      login.phase === "starting" ? /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
+        spin,
+        " starting device pairing\u2026"
+      ] }) : /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
+        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+          /* @__PURE__ */ jsxs8(Text8, { color: theme.warn, children: [
+            spin,
+            " waiting for authorization\u2026 "
+          ] }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "esc to cancel" })
+        ] })
+      ] })
+    ] });
+  }
   return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: focused ? "\u2191\u2193 select \xB7 enter view \xB7 m make active \xB7 n add account \xB7 r refresh" : "press \u2192 to manage accounts" }),
+    msg ? /* @__PURE__ */ jsx8(Text8, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, 70) }) : login?.msg ? /* @__PURE__ */ jsx8(Text8, { color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: accounts.length === 0 ? /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "No accounts on this device yet." }),
+      /* @__PURE__ */ jsxs8(Text8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "n" }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " to log in \u2014 pairs this device and starts protecting your Claude Code sessions." })
+      ] })
+    ] }) : accounts.map((a, i) => {
+      const isSel = i === sel && focused;
+      const isView = viewApiKey ? a.apiKey === viewApiKey : i === 0;
+      const isActive = isActiveAccount(a.apiKey);
+      return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.project || a.user || a.apiKey.slice(0, 12), 30).padEnd(31) }),
+        isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
+        isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.user && a.project ? truncate(a.user, 24) : "" })
+      ] }, a.apiKey);
+    }) }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u25CF viewing = the account the dataroom is showing \xB7 ACTIVE = the key the guard hooks + logging use" }) })
+  ] });
+}
+
+// src/tui/App.tsx
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+function LiveHint() {
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
       "press ",
-      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
@@ -3103,39 +3305,48 @@ var SECTIONS = [
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
   { label: "Audit", Panel: AuditPanel },
-  { label: "Settings", Panel: SettingsPanel }
+  { label: "Settings", Panel: SettingsPanel },
+  { label: "Accounts", Panel: AccountsPanel }
 ];
 var BANNER_HEX = ["white", "white", "white", "white", "white", "white"];
 function Banner({ cols }) {
   const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
+var ACCOUNTS_SECTION = SECTIONS.findIndex((s) => s.label === "Accounts");
 function App() {
   const { exit } = useApp();
-  const [section, setSection] = useState8(0);
-  const [focus, setFocus] = useState8("nav");
-  const [help, setHelp] = useState8(false);
-  const [accounts] = useState8(() => listAccounts());
-  const [acctIdx, setAcctIdx] = useState8(0);
+  const [accounts, setAccounts] = useState9(() => listAccounts());
+  const [viewKey, setViewKey] = useState9(() => accounts[0]?.apiKey);
+  const [viewNonce, setViewNonce] = useState9(0);
+  const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
+  const [focus, setFocus] = useState9("nav");
+  const [help, setHelp] = useState9(false);
+  const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.project || cur.user || cur.apiKey.slice(0, 8) : "\u2014";
+  const acctLabel = cur ? cur.project || cur.user || cur.apiKey.slice(0, 8) : "not logged in";
+  const viewAccount = (a) => {
+    setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
+    setAccounts(listAccounts());
+    setViewKey(a.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const switchAccount = () => {
     if (accounts.length < 2) return;
-    const next = (acctIdx + 1) % accounts.length;
-    const a = accounts[next];
-    setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-    setAcctIdx(next);
+    viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
-  useInput7((input, key) => {
+  const locked = accounts.length === 0;
+  const effectiveSection = locked ? ACCOUNTS_SECTION : section;
+  useInput8((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -3144,6 +3355,12 @@ function App() {
       setHelp(true);
       return;
     }
+    if (locked) {
+      if (key.rightArrow || key.return || key.tab) setFocus("panel");
+      else if (key.escape) setFocus("nav");
+      else if (input === "q" && focus === "nav") exit();
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -3156,24 +3373,29 @@ function App() {
     }
   });
   const { cols, rows } = useTermSize();
-  const current = SECTIONS[section];
-  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
+  const current = SECTIONS[effectiveSection];
+  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, acctIdx) });
+    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx8(Banner, { cols }),
-    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "account: " }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: acctLabel }),
-      accounts.length > 1 ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch)` }) : null
+  const panelBody = current.label === "Accounts" ? /* @__PURE__ */ jsx9(AccountsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx9(Banner, { cols }),
+    /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
+      /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
     ] }),
-    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx8(Text8, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
-      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" }) })
-    ] }, acctIdx),
-    /* @__PURE__ */ jsx8(Box8, { children: focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+        const isCur = i === effectiveSection;
+        const disabled = locked && s.label !== "Accounts";
+        return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+      }) }),
+      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
+    ] }, viewNonce),
+    /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Accounts"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 var HELP = [
@@ -3186,21 +3408,21 @@ var HELP = [
   ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]
 ];
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 
 // src/tui/index.tsx
-import { jsx as jsx9 } from "react/jsx-runtime";
+import { jsx as jsx10 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -3208,13 +3430,9 @@ async function launchTui() {
     );
     return;
   }
-  if (!isAuthenticated()) {
-    process.stderr.write("Not logged in. Run `solongate login` first.\n");
-    return;
-  }
   process.stdout.write("\x1B[?1049h\x1B[H");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}));
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}));
     await waitUntilExit();
   } finally {
     process.stdout.write("\x1B[?1049l");

package/dist/tui/panels/Accounts.d.ts

@@ -0,0 +1,7 @@
+import { type SavedAccount } from '../../api-client/client.js';
+export declare function AccountsPanel({ focused, viewApiKey, onView, }: {
+    active: boolean;
+    focused: boolean;
+    viewApiKey?: string;
+    onView?: (acc: SavedAccount) => void;
+}): JSX.Element;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.37",
+  "version": "0.81.39",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {