@solongate/proxy 0.81.38 → 0.81.40

package/README.md

@@ -2,8 +2,8 @@
 
 > **Don't `npm i` this.** There's nothing to import. Run the two commands below to pair your machine:
 > ```bash
-> npx -y @solongate/proxy@latest
-> npx -y @solongate/proxy@latest login
+> npm i -g @solongate/proxy
+> solongate
 > ```
 
 **Security for AI agents.** SolonGate checks every action an AI agent takes. Each tool call (shell command, file read or write, network request) is allowed, blocked, or logged before it runs, based on a policy you control. No code changes.
@@ -24,8 +24,8 @@ SolonGate is fully managed. There is nothing to host: pair your machine with one
 Pair the machine and turn on the guard. There are no API keys to copy. First fetch SolonGate, then log in:
 
 ```bash
-npx -y @solongate/proxy@latest
-npx -y @solongate/proxy@latest login
+npm i -g @solongate/proxy
+solongate
 ```
 
 This opens your browser to authorize the device. Approve it from your signed-in dashboard and SolonGate installs a global guard hook that intercepts every tool call from every AI session on the machine and checks it against your active policy.
@@ -60,12 +60,6 @@ Prefer to keep everything local? In **Settings**, turn on **Local log storage**
 
 Set a threshold in **Settings** and SolonGate notifies you by Telegram, email, or webhook when blocks spike.
 
-## Uninstall
-
-```bash
-npx @solongate/proxy logout
-```
-
 ## Why SolonGate?
 
 AI agents get direct access to your system: shell, file system, databases, network. SolonGate sits between the agent and the action, enforcing your policy on every tool call before it runs, and recording every decision for audit.

package/dist/index.js

@@ -271,7 +271,7 @@ function parseArgs(argv) {
   }
   if (!apiKey) {
     throw new Error(
-      "Not logged in. Run this once to get started:\n\n  npx -y @solongate/proxy@latest login\n"
+      "Not logged in. Run this once to get started:\n\n  solongate login\n"
     );
   }
   if (!apiKey.startsWith("sg_live_") && !apiKey.startsWith("sg_test_")) {
@@ -327,7 +327,7 @@ function parseArgs(argv) {
   }
   if (upstreamArgs.length === 0) {
     throw new Error(
-      "No upstream server command provided.\n\nIf you just want to get started, run:\n  npx -y @solongate/proxy@latest login\n"
+      "No upstream server command provided.\n\nIf you just want to get started, run:\n  solongate login\n"
     );
   }
   const [command, ...commandArgs] = upstreamArgs;
@@ -7815,9 +7815,12 @@ function LivePanel({ active: active2 }) {
   const signalOk = (e) => signal === "none" ? true : signal === "deny" ? e.decision !== "ALLOW" : signal === "dlp" ? e.dlp : e.burst;
   const filtered = (filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e))).filter(matches).filter(signalOk);
   const visibleDesc = filtered.slice().reverse();
+  const activeAlert = alerts.filter((a) => nowMs < a.until).slice(-1)[0];
+  const activeAction = actionMsg && nowMs < actionMsg.until ? actionMsg : null;
+  const bannerRows = (activeAlert ? 1 : 0) + (activeAction ? 1 : 0);
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
-  const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
+  const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH - bannerRows);
   const innerW = cols - 2;
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
@@ -8165,18 +8168,17 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
-    alerts.filter((a) => nowMs < a.until).slice(-1).map((a) => /* @__PURE__ */ jsx2(
+    activeAlert ? /* @__PURE__ */ jsx2(
       Text2,
       {
         wrap: "truncate",
-        backgroundColor: a.level === "bad" ? "#3d1220" : "#3d2a12",
-        color: a.level === "bad" ? "#ff6b6b" : "#ffb454",
+        backgroundColor: activeAlert.level === "bad" ? "#3d1220" : "#3d2a12",
+        color: activeAlert.level === "bad" ? "#ff6b6b" : "#ffb454",
         bold: true,
-        children: ` ${a.level === "bad" ? "\u26D4 ALERT" : "\u23F8 IDLE"} \xB7 ${truncate2(a.msg, innerW - 14)} `
-      },
-      a.id
-    )),
-    actionMsg && nowMs < actionMsg.until ? /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", backgroundColor: actionMsg.level === "bad" ? "#3d1220" : "#123d1f", color: actionMsg.level === "bad" ? "#ff6b6b" : "#7bd88f", bold: true, children: ` ${truncate2(actionMsg.text, innerW - 4)} ` }) : null,
+        children: ` ${activeAlert.level === "bad" ? "\u26D4 ALERT" : "\u23F8 IDLE"} \xB7 ${truncate2(activeAlert.msg, innerW - 14)} `
+      }
+    ) : null,
+    activeAction ? /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", backgroundColor: activeAction.level === "bad" ? "#3d1220" : "#123d1f", color: activeAction.level === "bad" ? "#ff6b6b" : "#7bd88f", bold: true, children: ` ${truncate2(activeAction.text, innerW - 4)} ` }) : null,
     /* @__PURE__ */ jsxs2(Box2, { height: 1 + chartH, children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `${trafficLabel} \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = denials`, width: leftW }),
@@ -10034,6 +10036,8 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const locked = accounts.length === 0;
+  const effectiveSection = locked ? ACCOUNTS_SECTION : section;
   useInput8((input, key) => {
     if (help) {
       setHelp(false);
@@ -10043,6 +10047,12 @@ function App() {
       setHelp(true);
       return;
     }
+    if (locked) {
+      if (key.rightArrow || key.return || key.tab) setFocus("panel");
+      else if (key.escape) setFocus("nav");
+      else if (input === "q" && focus === "nav") exit();
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -10055,7 +10065,7 @@ function App() {
     }
   });
   const { cols, rows } = useTermSize();
-  const current = SECTIONS[section];
+  const current = SECTIONS[effectiveSection];
   if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
     return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
@@ -10066,14 +10076,18 @@ function App() {
     /* @__PURE__ */ jsx9(Banner, { cols }),
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: acctLabel }),
-      accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : accounts.length === 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }) : null
+      /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx9(Text9, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+        const isCur = i === effectiveSection;
+        const disabled = locked && s.label !== "Accounts";
+        return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+      }) }),
       /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
     ] }, viewNonce),
-    /* @__PURE__ */ jsx9(Box9, { children: focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Accounts"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 function HelpOverlay({ cols, rows }) {
@@ -11312,17 +11326,6 @@ var init_commands = __esm({
 });
 
 // src/global-install.ts
-var global_install_exports = {};
-__export(global_install_exports, {
-  globalPaths: () => globalPaths,
-  installClaudeShim: () => installClaudeShim,
-  installGlobalWithKey: () => installGlobalWithKey,
-  lockProtected: () => lockProtected,
-  removeClaudeShim: () => removeClaudeShim,
-  runGlobalInstall: () => runGlobalInstall,
-  runGlobalRestore: () => runGlobalRestore,
-  unlockProtected: () => unlockProtected
-});
 import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, existsSync as existsSync6, mkdirSync as mkdirSync6 } from "fs";
 import { resolve as resolve4, join as join11, dirname } from "path";
 import { homedir as homedir9 } from "os";
@@ -11431,26 +11434,6 @@ function ask(question) {
     res(a.trim());
   }));
 }
-function runGlobalRestore() {
-  const p = globalPaths();
-  unlockProtected();
-  removeClaudeShim();
-  if (existsSync6(p.backupPath)) {
-    writeFileSync7(p.settingsPath, readFileSync8(p.backupPath, "utf-8"));
-    console.log(`  Restored ${p.settingsPath} from backup.`);
-  } else if (existsSync6(p.settingsPath)) {
-    try {
-      const s = JSON.parse(readFileSync8(p.settingsPath, "utf-8"));
-      delete s.hooks;
-      writeFileSync7(p.settingsPath, JSON.stringify(s, null, 2) + "\n");
-      console.log(`  Removed SolonGate hooks from ${p.settingsPath}.`);
-    } catch {
-    }
-  } else {
-    console.log("  Nothing to restore \u2014 no global Claude Code settings found.");
-  }
-  console.log("  Global SolonGate enforcement uninstalled. Restart Claude Code.");
-}
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -11512,14 +11495,6 @@ ${SHIM_END}`;
     }
   }
 }
-function removeClaudeShim() {
-  for (const file of shimTargets()) {
-    try {
-      writeShimBlock(file, null);
-    } catch {
-    }
-  }
-}
 async function runGlobalInstall(opts = {}) {
   const p = globalPaths();
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
@@ -11583,9 +11558,6 @@ async function runGlobalInstall(opts = {}) {
     console.log("  Locked protection files (OS-level read-only/immutable).");
   }
 }
-async function installGlobalWithKey(apiKey, apiUrl) {
-  await runGlobalInstall({ apiKey, apiUrl });
-}
 var __dirname, HOOKS_DIR, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
@@ -11721,7 +11693,6 @@ async function main() {
   console.log("  \u2502  Every Claude Code session on this machine is   \u2502");
   console.log("  \u2502  now guarded by your cloud policy (OPA WASM).   \u2502");
   console.log("  \u2502                                                 \u2502");
-  console.log("  \u2502  Undo:  npx @solongate/proxy logout             \u2502");
   console.log("  \u2502  Manage policy: https://dashboard.solongate.com \u2502");
   console.log("  \u2502  Restart Claude Code to apply.                  \u2502");
   console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
@@ -16222,7 +16193,7 @@ ${msg.content.text}`;
 
 // src/index.ts
 init_cli_utils();
-var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "logout", "shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "dataroom"]);
+var CLI_SUBCOMMANDS = /* @__PURE__ */ new Set(["login", "shield", "create", "inject", "pull", "push", "list", "ls", "logs-server", "local-logs", "policy", "ratelimit", "dlp", "stats", "audit", "agents", "agent", "doctor", "watch", "keys", "mcp", "alerts", "webhooks", "dataroom"]);
 var IS_HUMAN_CLI = process.argv.length <= 2 || CLI_SUBCOMMANDS.has(process.argv[2] ?? "");
 if (!IS_HUMAN_CLI) {
   console.log = (...args) => {
@@ -16244,14 +16215,14 @@ function printWelcome() {
   console.log("");
   console.log("  Get started with one command:");
   console.log("");
-  console.log(`    ${c.cyan}npx -y @solongate/proxy@latest login${c.reset}`);
+  console.log(`    ${c.cyan}solongate login${c.reset}`);
   console.log("");
   console.log(`  ${c.dim}This pairs your device and protects every Claude Code session${c.reset}`);
   console.log(`  ${c.dim}on this machine with your cloud policy. Manage it at${c.reset}`);
   console.log(`  ${c.cyan}https://dashboard.solongate.com${c.reset}`);
   console.log("");
   console.log(`  ${c.dim}Using local log storage? Show it live in the dashboard with${c.reset}`);
-  console.log(`    ${c.cyan}npx -y @solongate/proxy@latest logs-server${c.reset}`);
+  console.log(`    ${c.cyan}solongate logs-server${c.reset}`);
   console.log("");
 }
 async function main5() {
@@ -16280,11 +16251,6 @@ async function main5() {
     await Promise.resolve().then(() => (init_login(), login_exports));
     return;
   }
-  if (subcommand === "logout") {
-    const { runGlobalRestore: runGlobalRestore2 } = await Promise.resolve().then(() => (init_global_install(), global_install_exports));
-    runGlobalRestore2();
-    return;
-  }
   if (subcommand === "shield") {
     const { runShield: runShield2 } = await Promise.resolve().then(() => (init_shield(), shield_exports));
     await runShield2();

package/dist/login.js

@@ -410,7 +410,6 @@ async function main() {
   console.log("  \u2502  Every Claude Code session on this machine is   \u2502");
   console.log("  \u2502  now guarded by your cloud policy (OPA WASM).   \u2502");
   console.log("  \u2502                                                 \u2502");
-  console.log("  \u2502  Undo:  npx @solongate/proxy logout             \u2502");
   console.log("  \u2502  Manage policy: https://dashboard.solongate.com \u2502");
   console.log("  \u2502  Restart Claude Code to apply.                  \u2502");
   console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");

package/dist/tui/index.js

@@ -1248,9 +1248,12 @@ function LivePanel({ active: active2 }) {
   const signalOk = (e) => signal === "none" ? true : signal === "deny" ? e.decision !== "ALLOW" : signal === "dlp" ? e.dlp : e.burst;
   const filtered = (filter === "all" ? mergedAll : mergedAll.filter((e) => filter === "local" ? isLoc(e) : !isLoc(e))).filter(matches).filter(signalOk);
   const visibleDesc = filtered.slice().reverse();
+  const activeAlert = alerts.filter((a) => nowMs < a.until).slice(-1)[0];
+  const activeAction = actionMsg && nowMs < actionMsg.until ? actionMsg : null;
+  const bannerRows = (activeAlert ? 1 : 0) + (activeAction ? 1 : 0);
   const chartH = rows >= 36 ? 6 : 4;
   const colH = rows >= 32 ? 7 : 5;
-  const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH);
+  const streamRows = Math.max(4, rows - 5 - (1 + chartH) - colH - bannerRows);
   const innerW = cols - 2;
   const leftW = Math.floor(innerW * 0.55);
   const rightW = innerW - leftW - 2;
@@ -1598,18 +1601,17 @@ function LivePanel({ active: active2 }) {
       /* @__PURE__ */ jsx2(Text2, { color: guard.data?.up_to_date ? theme.ok : theme.warn, children: guard.data ? `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? "" : "\u2192v" + guard.data.latest} ${guard.data.device_count}dev` : "\xB7" }),
       /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " \u2502" })
     ] }),
-    alerts.filter((a) => nowMs < a.until).slice(-1).map((a) => /* @__PURE__ */ jsx2(
+    activeAlert ? /* @__PURE__ */ jsx2(
       Text2,
       {
         wrap: "truncate",
-        backgroundColor: a.level === "bad" ? "#3d1220" : "#3d2a12",
-        color: a.level === "bad" ? "#ff6b6b" : "#ffb454",
+        backgroundColor: activeAlert.level === "bad" ? "#3d1220" : "#3d2a12",
+        color: activeAlert.level === "bad" ? "#ff6b6b" : "#ffb454",
         bold: true,
-        children: ` ${a.level === "bad" ? "\u26D4 ALERT" : "\u23F8 IDLE"} \xB7 ${truncate(a.msg, innerW - 14)} `
-      },
-      a.id
-    )),
-    actionMsg && nowMs < actionMsg.until ? /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", backgroundColor: actionMsg.level === "bad" ? "#3d1220" : "#123d1f", color: actionMsg.level === "bad" ? "#ff6b6b" : "#7bd88f", bold: true, children: ` ${truncate(actionMsg.text, innerW - 4)} ` }) : null,
+        children: ` ${activeAlert.level === "bad" ? "\u26D4 ALERT" : "\u23F8 IDLE"} \xB7 ${truncate(activeAlert.msg, innerW - 14)} `
+      }
+    ) : null,
+    activeAction ? /* @__PURE__ */ jsx2(Text2, { wrap: "truncate", backgroundColor: activeAction.level === "bad" ? "#3d1220" : "#123d1f", color: activeAction.level === "bad" ? "#ff6b6b" : "#7bd88f", bold: true, children: ` ${truncate(activeAction.text, innerW - 4)} ` }) : null,
     /* @__PURE__ */ jsxs2(Box2, { height: 1 + chartH, children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: leftW, marginRight: 2, children: [
         /* @__PURE__ */ jsx2(PaneTitle, { label: "TRAFFIC", extra: `${trafficLabel} \xB7 peak ${Math.max(0, ...traffic)} \xB7 red = denials`, width: leftW }),
@@ -3344,6 +3346,8 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const locked = accounts.length === 0;
+  const effectiveSection = locked ? ACCOUNTS_SECTION : section;
   useInput8((input, key) => {
     if (help) {
       setHelp(false);
@@ -3353,6 +3357,12 @@ function App() {
       setHelp(true);
       return;
     }
+    if (locked) {
+      if (key.rightArrow || key.return || key.tab) setFocus("panel");
+      else if (key.escape) setFocus("nav");
+      else if (input === "q" && focus === "nav") exit();
+      return;
+    }
     if (focus === "nav") {
       if (key.upArrow) setSection((n) => (n - 1 + SECTIONS.length) % SECTIONS.length);
       else if (key.downArrow) setSection((n) => (n + 1) % SECTIONS.length);
@@ -3365,7 +3375,7 @@ function App() {
     }
   });
   const { cols, rows } = useTermSize();
-  const current = SECTIONS[section];
+  const current = SECTIONS[effectiveSection];
   if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
     return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows, children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
@@ -3376,14 +3386,18 @@ function App() {
     /* @__PURE__ */ jsx9(Banner, { cols }),
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: acctLabel }),
-      accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : accounts.length === 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }) : null
+      /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => /* @__PURE__ */ jsx9(Text9, { color: i === section ? theme.accentBright : void 0, bold: i === section, children: (i === section ? "\u25B8 " : "  ") + s.label }, s.label)) }),
+      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+        const isCur = i === effectiveSection;
+        const disabled = locked && s.label !== "Accounts";
+        return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+      }) }),
       /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
     ] }, viewNonce),
-    /* @__PURE__ */ jsx9(Box9, { children: focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Accounts"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 var HELP = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.38",
+  "version": "0.81.40",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {