@solongate/proxy 0.81.44 → 0.81.46

package/dist/index.js

@@ -6554,15 +6554,151 @@ var init_cli_utils = __esm({
   }
 });
 
-// src/tui/config.ts
-import { readFileSync as readFileSync4 } from "fs";
+// src/self-update.ts
+var self_update_exports = {};
+__export(self_update_exports, {
+  currentVersion: () => currentVersion,
+  maybeSelfUpdate: () => maybeSelfUpdate
+});
+import { execFile, spawn } from "child_process";
+import { mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { dirname, join as join4 } from "path";
+import { fileURLToPath } from "url";
+function readState() {
+  try {
+    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(s) {
+  try {
+    mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+    writeFileSync3(STATE_FILE, JSON.stringify(s));
+  } catch {
+  }
+}
+function currentVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync4(join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf-8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function newerThan(b, a) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((pb[i] ?? 0) > (pa[i] ?? 0)) return true;
+    if ((pb[i] ?? 0) < (pa[i] ?? 0)) return false;
+  }
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, { signal: AbortSignal.timeout(2e3) });
+    if (!res.ok) return null;
+    const j = await res.json();
+    return typeof j.version === "string" ? j.version : null;
+  } catch {
+    return null;
+  }
+}
+function npmGlobalRoot() {
+  return new Promise((resolve10) => {
+    try {
+      execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err2, stdout) => {
+        resolve10(err2 ? null : stdout.trim() || null);
+      });
+    } catch {
+      resolve10(null);
+    }
+  });
+}
+async function isGlobalInstall() {
+  try {
+    const script = realpathSync(process.argv[1] ?? "");
+    if (!script) return false;
+    const root = await npmGlobalRoot();
+    if (!root) return false;
+    return script.startsWith(realpathSync(root));
+  } catch {
+    return false;
+  }
+}
+function spawnGlobalInstall(version) {
+  try {
+    mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+    const log6 = openSync(LOG_FILE, "a");
+    const p = spawn("npm", ["install", "-g", `${PKG}@${version}`], {
+      stdio: ["ignore", log6, log6],
+      detached: true,
+      windowsHide: true,
+      shell: process.platform === "win32"
+    });
+    p.on("error", () => {
+    });
+    p.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function maybeSelfUpdate(notify = (l) => process.stderr.write(l + "\n")) {
+  void (async () => {
+    try {
+      const state = readState();
+      const now = Date.now();
+      const current = currentVersion();
+      let latest = state.latestSeen ?? null;
+      if (now - (state.lastCheckAt ?? 0) >= CHECK_EVERY_MS) {
+        latest = await fetchLatest();
+        if (latest) writeState({ ...state, lastCheckAt: now, latestSeen: latest });
+        else writeState({ ...state, lastCheckAt: now });
+      }
+      if (!latest || !newerThan(latest, current)) return;
+      const attempts = readState().attempts ?? {};
+      if (await isGlobalInstall()) {
+        if (now - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS) {
+          writeState({ ...readState(), attempts: { [latest]: now } });
+          if (spawnGlobalInstall(latest)) {
+            notify(`${c.dim}\u2191 solongate v${latest} available (running v${current}) \u2014 updating in the background, next run uses it${c.reset}`);
+            return;
+          }
+        } else {
+          return;
+        }
+      }
+      notify(`${c.dim}\u2191 solongate v${latest} available (running v${current}) \u2014 update: ${c.reset}${c.cyan}npm i -g ${PKG}@latest${c.reset}`);
+    } catch {
+    }
+  })();
+}
+var PKG, CHECK_EVERY_MS, ATTEMPT_EVERY_MS, STATE_FILE, LOG_FILE;
+var init_self_update = __esm({
+  "src/self-update.ts"() {
+    "use strict";
+    init_cli_utils();
+    PKG = "@solongate/proxy";
+    CHECK_EVERY_MS = 30 * 60 * 1e3;
+    ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
+    STATE_FILE = join4(homedir2(), ".solongate", ".self-update.json");
+    LOG_FILE = join4(homedir2(), ".solongate", "self-update.log");
+  }
+});
+
+// src/tui/config.ts
+import { readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
 function loadConfig() {
   if (cached) return cached;
   const defaults = { notifications: true };
   try {
-    const raw = readFileSync4(join4(homedir2(), ".solongate", "tui-config.json"), "utf-8");
+    const raw = readFileSync5(join5(homedir3(), ".solongate", "tui-config.json"), "utf-8");
     const j = JSON.parse(raw);
     cached = {
       notifications: j.notifications !== false,
@@ -6688,14 +6824,14 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readFileSync as readFileSync5, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { closeSync, openSync as openSync2, readFileSync as readFileSync6, readSync, statSync, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync(file, "r");
+    const fd = openSync2(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync(fd, buf, 0, buf.length, start);
     closeSync(fd);
@@ -6708,7 +6844,7 @@ function tailLines(file, maxBytes = 131072) {
 }
 function deleteLocalEntry(at, tool, session) {
   try {
-    const lines = readFileSync5(LOCAL_LOG, "utf-8").split("\n");
+    const lines = readFileSync6(LOCAL_LOG, "utf-8").split("\n");
     let removed = 0;
     const kept = lines.filter((line) => {
       if (!line.trim()) return false;
@@ -6724,7 +6860,7 @@ function deleteLocalEntry(at, tool, session) {
       }
       return true;
     });
-    if (removed) writeFileSync3(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    if (removed) writeFileSync4(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
     return removed;
   } catch {
     return 0;
@@ -6732,8 +6868,8 @@ function deleteLocalEntry(at, tool, session) {
 }
 function clearLocalLog() {
   try {
-    const n = readFileSync5(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
-    writeFileSync3(LOCAL_LOG, "");
+    const n = readFileSync6(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync4(LOCAL_LOG, "");
     return n;
   } catch {
     return 0;
@@ -6764,20 +6900,20 @@ var LOCAL_LOG, DLP_REASON, RL_REASON;
 var init_local_log = __esm({
   "src/tui/local-log.ts"() {
     "use strict";
-    LOCAL_LOG = join5(homedir3(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG = join6(homedir4(), ".solongate", "local-logs", "solongate-audit.jsonl");
     DLP_REASON = /security layer \(dlp\)/i;
     RL_REASON = /security layer \(rate limit\)|rate[- ]?limit(?:ed)?\b.*exceed|exceeded \d+ calls/i;
   }
 });
 
 // src/api-client/client.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync3 } from "fs";
-import { resolve as resolve3, join as join6 } from "path";
-import { homedir as homedir4 } from "os";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync3 } from "fs";
+import { resolve as resolve3, join as join7 } from "path";
+import { homedir as homedir5 } from "os";
 function listAccounts() {
   let list6 = [];
   try {
-    const raw = JSON.parse(readFileSync6(accountsFile(), "utf-8"));
+    const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
     if (Array.isArray(raw)) list6 = raw.filter((a) => a && typeof a.apiKey === "string");
   } catch {
   }
@@ -6791,7 +6927,7 @@ function saveAccount(acc) {
   try {
     const list6 = (() => {
       try {
-        const raw = JSON.parse(readFileSync6(accountsFile(), "utf-8"));
+        const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
         return Array.isArray(raw) ? raw.filter((a) => a && a.apiKey) : [];
       } catch {
         return [];
@@ -6799,8 +6935,8 @@ function saveAccount(acc) {
     })();
     const next = list6.filter((a) => a.apiKey !== acc.apiKey);
     next.unshift({ ...acc, addedAt: acc.addedAt ?? Date.now() });
-    mkdirSync3(join6(homedir4(), ".solongate"), { recursive: true });
-    writeFileSync4(accountsFile(), JSON.stringify(next, null, 2));
+    mkdirSync4(join7(homedir5(), ".solongate"), { recursive: true });
+    writeFileSync5(accountsFile(), JSON.stringify(next, null, 2));
   } catch {
   }
 }
@@ -6813,15 +6949,15 @@ function isActiveAccount(apiKey) {
 }
 function setActiveAccount(creds) {
   try {
-    const dir = join6(homedir4(), ".solongate");
-    mkdirSync3(dir, { recursive: true });
-    const p = join6(dir, ["cloud", "guard.json"].join("-"));
+    const dir = join7(homedir5(), ".solongate");
+    mkdirSync4(dir, { recursive: true });
+    const p = join7(dir, ["cloud", "guard.json"].join("-"));
     let existing = {};
     try {
-      existing = JSON.parse(readFileSync6(p, "utf-8"));
+      existing = JSON.parse(readFileSync7(p, "utf-8"));
     } catch {
     }
-    writeFileSync4(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
+    writeFileSync5(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
     cached2 = null;
     return true;
   } catch {
@@ -6830,9 +6966,9 @@ function setActiveAccount(creds) {
 }
 function loginCredentialFile() {
   try {
-    const p = join6(homedir4(), ".solongate", "cloud-guard.json");
+    const p = join7(homedir5(), ".solongate", "cloud-guard.json");
     if (!existsSync3(p)) return {};
-    const c2 = JSON.parse(readFileSync6(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync7(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -6842,7 +6978,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve3(".env");
     if (!existsSync3(envPath)) return void 0;
-    for (const line of readFileSync6(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync7(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -6944,7 +7080,7 @@ var init_client = __esm({
   "src/api-client/client.ts"() {
     "use strict";
     DEFAULT_API_URL2 = "https://api.solongate.com";
-    accountsFile = () => join6(homedir4(), ".solongate", "accounts.json");
+    accountsFile = () => join7(homedir5(), ".solongate", "accounts.json");
     viewOverride = null;
     ApiError = class extends Error {
       status;
@@ -6974,12 +7110,12 @@ var init_types = __esm({
 });
 
 // src/api-client/device-login.ts
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 function openBrowser(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -7304,24 +7440,24 @@ var init_api_client = __esm({
 });
 
 // src/tui/notify.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 function desktopNotify(title, msg) {
   try {
     if (process.platform === "linux") {
-      const p = spawn2("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
+      const p = spawn3("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "win32") {
       const q = (s) => s.replace(/'/g, "''");
       const ps = `Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.Visible=$true;$n.ShowBalloonTip(6000,'${q(title)}','${q(msg)}',[System.Windows.Forms.ToolTipIcon]::Warning);Start-Sleep -Milliseconds 6500;$n.Dispose()`;
-      const p = spawn2("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
+      const p = spawn3("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "darwin") {
       const esc = (s) => s.replace(/"/g, '\\"');
-      const p = spawn2("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
+      const p = spawn3("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
@@ -7407,9 +7543,9 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir6 } from "os";
+import { join as join8 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function extractTarget(detail) {
@@ -7534,6 +7670,7 @@ function LivePanel({ active: active2 }) {
   const [detailScroll, setDetailScroll] = useState2(0);
   const [inspect, setInspect] = useState2(null);
   const [inspectScroll, setInspectScroll] = useState2(0);
+  const [layersScroll, setLayersScroll] = useState2(0);
   const inspectFromRef = useRef2("stream");
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
@@ -7933,6 +8070,14 @@ function LivePanel({ active: active2 }) {
         else if (key.pageDown) setInspectScroll((n) => n + 10);
         return;
       }
+      if (mode === "layers") {
+        if (key.leftArrow || input === "l") setMode("stream");
+        else if (key.upArrow) setLayersScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setLayersScroll((n) => n + 1);
+        else if (key.pageUp) setLayersScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setLayersScroll((n) => n + 10);
+        return;
+      }
       if (mode === "detail") {
         const maxD = Math.max(0, detailEntries.length - 1);
         if (key.leftArrow) {
@@ -7982,16 +8127,19 @@ function LivePanel({ active: active2 }) {
       } else if (input === "s") {
         setPickIdx(0);
         setMode("pick");
+      } else if (input === "l") {
+        setLayersScroll(0);
+        setMode("layers");
       } else if (input === "w") void doAction("whitelist");
       else if (input === "b") void doAction("block");
       else if (input === "d") toggleSignal("deny");
       else if (input === "x") toggleSignal("dlp");
       else if (input === "r") toggleSignal("ratelimit");
       else if (input === "e") {
-        const file = join7(homedir5(), ".solongate", "live-export.jsonl");
+        const file = join8(homedir6(), ".solongate", "live-export.jsonl");
         try {
-          mkdirSync4(join7(homedir5(), ".solongate"), { recursive: true });
-          writeFileSync5(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          mkdirSync5(join8(homedir6(), ".solongate"), { recursive: true });
+          writeFileSync6(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -8101,6 +8249,87 @@ function LivePanel({ active: active2 }) {
       ] })
     ] });
   }
+  if (mode === "layers") {
+    const modeColor4 = (m) => m === "block" || m === "on" ? theme.ok : m === "detect" ? theme.warn : theme.dim;
+    const barW = Math.max(10, Math.min(40, innerW - 30));
+    const burstsInBuf = mergedAll.filter((e) => e.burst).length;
+    const dlpInBuf = mergedAll.filter((e) => e.dlp).length;
+    const allHits = ins.dlpByPattern ?? [];
+    const maxHit = allHits[0]?.count ?? 1;
+    const L = [];
+    const push2 = (el) => L.push(/* @__PURE__ */ jsx2(Box2, { children: el }, L.length));
+    const blank = () => push2(/* @__PURE__ */ jsx2(Text2, { children: " " }));
+    const section = (label, m, note) => push2(
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsxs2(Text2, { bold: true, color: theme.accentBright, children: [
+          "\u258E",
+          label.padEnd(10)
+        ] }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, color: modeColor4(m), children: (m ?? "?").padEnd(8) }),
+        note ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: note }) : null
+      ] })
+    );
+    const kv = (k, v) => push2(
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ("  " + k).padEnd(16) }),
+        v
+      ] })
+    );
+    section("RATELIMIT", rl?.mode, rl?.mode === "block" ? "over-limit calls are DENIED" : rl?.mode === "detect" ? "over-limit calls are observed & flagged rl:yes" : "no limit enforcement");
+    kv("limits", /* @__PURE__ */ jsx2(Text2, { children: rl?.perMinute || rl?.perHour || rl?.perDay ? `${rl?.perMinute || "\u2014"}/min \xB7 ${rl?.perHour || "\u2014"}/hour \xB7 ${rl?.perDay || "\u2014"}/day` : "none configured" }));
+    kv("load now", /* @__PURE__ */ jsx2(Text2, { children: `${minuteNow} calls in the last 60s` }));
+    if (rl?.perMinute) push2(/* @__PURE__ */ jsx2(HBar, { label: "  load/min", value: minuteNow, max: rl.perMinute, width: barW, color: minuteNow > rl.perMinute ? theme.bad : theme.accent }));
+    kv("bursts", /* @__PURE__ */ jsx2(Text2, { color: burstsInBuf ? theme.warn : theme.dim, children: `${burstsInBuf} flagged in the live buffer` }));
+    blank();
+    section("DLP", dl?.mode, dl?.mode === "block" ? "secrets in arguments are DENIED + redacted" : dl?.mode === "detect" ? "secrets observed & flagged dlp:yes, output redacted" : "no secret scanning");
+    kv("hits", /* @__PURE__ */ jsx2(Text2, { color: dlpInBuf ? theme.bad : theme.dim, children: `${dlpInBuf} flagged in the live buffer` }));
+    const builtin = dl?.patterns ?? [];
+    kv("builtin", /* @__PURE__ */ jsx2(Text2, { children: builtin.length ? `${builtin.length} patterns enabled` : "none enabled" }));
+    for (const line of wrapLines(builtin.join(" \xB7 "), Math.max(20, innerW - 18))) push2(/* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "                " + line }));
+    const custom = dl?.custom ?? [];
+    kv("custom", /* @__PURE__ */ jsx2(Text2, { children: custom.length ? `${custom.length} patterns` : "none" }));
+    for (const c2 of custom)
+      push2(
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "                " }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate2(c2.name ?? "custom", 24).padEnd(25) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate2(c2.re ?? "", Math.max(10, innerW - 44)) })
+        ] })
+      );
+    kv("pattern hits", /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: allHits.length ? "last 7 days" : "none in the last 7 days" }));
+    for (const h of allHits) push2(/* @__PURE__ */ jsx2(HBar, { label: "  " + truncate2(h.pattern, 10), value: h.count, max: maxHit, width: barW, color: theme.bad }));
+    blank();
+    section("GHOST", gh?.mode, gh?.mode === "on" ? "matching paths are hidden from agents" : "no hidden paths");
+    const ghostPats = gh?.patterns ?? [];
+    kv("patterns", /* @__PURE__ */ jsx2(Text2, { children: ghostPats.length ? `${ghostPats.length}` : "none" }));
+    for (const line of wrapLines(ghostPats.join(" \xB7 "), Math.max(20, innerW - 18))) push2(/* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "                " + line }));
+    blank();
+    section("GUARD", guard.data ? guard.data.up_to_date ? "ok" : "stale" : "?", "the PreToolUse hook enforcing all of the above");
+    kv(
+      "hooks",
+      guard.data ? /* @__PURE__ */ jsx2(Text2, { color: guard.data.up_to_date ? theme.ok : theme.warn, children: `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? " (latest)" : ` \u2192 v${guard.data.latest} available`} \xB7 ${guard.data.device_count} device${guard.data.device_count === 1 ? "" : "s"}` }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "loading\u2026" })
+    );
+    kv("local eval", ring ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: `avg ${ring.avgMs}ms over ${ring.count} recent calls` }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no local ring in cwd" }));
+    const bodyRows = Math.max(4, rows - 5);
+    const maxLScroll = Math.max(0, L.length - bodyRows);
+    const lOff = Math.min(layersScroll, maxLScroll);
+    const win = L.slice(lOff, lOff + bodyRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LAYERS " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  security layers, limits and patterns \xB7 insights window: last 7 days" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", extra: `${insights.data ? "" : spin + " loading \xB7 "}${maxLScroll ? `\u25BC${maxLScroll - lOff} more \xB7 \u2191\u2193 scroll \xB7 ` : ""}l or \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LAYERS " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: " rate limit \xB7 dlp \xB7 ghost \xB7 guard " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: " \u2191\u2193 scroll \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
@@ -8220,7 +8449,7 @@ function LivePanel({ active: active2 }) {
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { height: colH, children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", extra: "l = inspect", width: colW }),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
           /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
@@ -8253,7 +8482,8 @@ function LivePanel({ active: active2 }) {
               " "
             ] }),
             /* @__PURE__ */ jsx2(Text2, { color: st.color, children: st.label.padEnd(7) }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate2(r.isMe ? "this machine" : r.agent, 12).padEnd(13) }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate2(r.agent, r.isMe ? 9 : 12).padEnd(r.isMe ? 10 : 13) }),
+            r.isMe ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "me " }) : null,
             /* @__PURE__ */ jsxs2(Text2, { children: [
               String(r.calls).padStart(4),
               "c "
@@ -8319,7 +8549,7 @@ var init_Live = __esm({
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
     DIM_FLOOR = "#233457";
-    RING = join7(process.cwd(), ".solongate", ".eval-ring.jsonl");
+    RING = join8(process.cwd(), ".solongate", ".eval-ring.jsonl");
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -8348,6 +8578,7 @@ var init_Live = __esm({
           ["f", "source filter: all \u2192 local \u2192 cloud"],
           ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
           ["s", "session picker"],
+          ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
           ["e", "export visible rows \u2192 ~/.solongate/live-export.jsonl"],
           ["space", "copy mode: freeze screen for mouse selection"],
           ["esc", "back to menu"],
@@ -9008,9 +9239,9 @@ var init_Dlp = __esm({
 // src/tui/panels/Audit.tsx
 import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 import { useState as useState6 } from "react";
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function loadLocalRows() {
@@ -9164,16 +9395,16 @@ function AuditPanel({ active: active2, focused }) {
   const doExport = (kind) => {
     setMsg({ text: "exporting\u2026", level: "ok" });
     const run12 = async () => {
-      const dir = join8(homedir6(), ".solongate");
-      const file = join8(dir, `audit-export-${source}.jsonl`);
+      const dir = join9(homedir7(), ".solongate");
+      const file = join9(dir, `audit-export-${source}.jsonl`);
       let rows2;
       if (kind === "page") rows2 = pageRows;
       else if (source === "cloud") {
         const r = await api.audit.list({ ...query, limit: 1e4, offset: 0 });
         rows2 = r.entries.map(cloudRow).sort((a, b) => b.at - a.at);
       } else rows2 = localFiltered;
-      mkdirSync5(dir, { recursive: true });
-      writeFileSync6(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
+      mkdirSync6(dir, { recursive: true });
+      writeFileSync7(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
       return { n: rows2.length, file };
     };
     run12().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
@@ -10176,9 +10407,9 @@ var tui_exports = {};
 __export(tui_exports, {
   launchTui: () => launchTui
 });
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync7 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 import { render } from "ink";
 import { jsx as jsx10 } from "react/jsx-runtime";
 async function launchTui() {
@@ -10189,11 +10420,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join9(homedir7(), ".solongate", "dataroom-debug.log");
+  const debugLog = join10(homedir8(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync6(join9(homedir7(), ".solongate"), { recursive: true });
+      mkdirSync7(join10(homedir8(), ".solongate"), { recursive: true });
       appendFileSync2(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {
@@ -10317,7 +10548,7 @@ var init_args = __esm({
 });
 
 // src/commands/policy.ts
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync8 } from "fs";
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -10492,7 +10723,7 @@ function printRules(rules) {
 }
 async function resolveRules(target) {
   if (target.endsWith(".json")) {
-    const parsed = JSON.parse(readFileSync7(target, "utf-8"));
+    const parsed = JSON.parse(readFileSync8(target, "utf-8"));
     return parsed.rules ?? [];
   }
   const p = await api.policies.get(target);
@@ -10908,8 +11139,8 @@ var init_agents2 = __esm({
 
 // src/commands/doctor.ts
 import { existsSync as existsSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir9 } from "os";
+import { join as join11 } from "path";
 async function run6(argv) {
   const { flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -10969,19 +11200,19 @@ var init_doctor = __esm({
     init_api_client();
     init_format();
     init_args();
-    LOCAL_LOG2 = join10(homedir8(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG2 = join11(homedir9(), ".solongate", "local-logs", "solongate-audit.jsonl");
   }
 });
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join11 } from "path";
+import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync3, readSync as readSync2, statSync as statSync3 } from "fs";
+import { homedir as homedir10 } from "os";
+import { join as join12 } from "path";
 function tailLocal(file, maxBytes = 131072) {
   try {
     const size = statSync3(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync2(file, "r");
+    const fd = openSync3(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync2(fd, buf, 0, buf.length, start);
     closeSync2(fd);
@@ -11083,7 +11314,7 @@ var init_watch = __esm({
     init_cli_utils();
     init_args();
     init_format();
-    LOCAL_LOG3 = join11(homedir9(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG3 = join12(homedir10(), ".solongate", "local-logs", "solongate-audit.jsonl");
     trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
     time = (ms) => new Date(ms).toTimeString().slice(0, 8);
   }
@@ -11374,10 +11605,10 @@ var init_commands = __esm({
 });
 
 // src/global-install.ts
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, existsSync as existsSync6, mkdirSync as mkdirSync7 } from "fs";
-import { resolve as resolve4, join as join12, dirname } from "path";
-import { homedir as homedir10 } from "os";
-import { fileURLToPath } from "url";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, existsSync as existsSync6, mkdirSync as mkdirSync8 } from "fs";
+import { resolve as resolve4, join as join13, dirname as dirname2 } from "path";
+import { homedir as homedir11 } from "os";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { createInterface } from "readline";
 import { execFileSync as execFileSync2 } from "child_process";
 function lockFile(file) {
@@ -11439,10 +11670,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join12(p.hooksDir, "guard.mjs"),
-    join12(p.hooksDir, "audit.mjs"),
-    join12(p.hooksDir, "stop.mjs"),
-    join12(p.hooksDir, "shield.mjs"),
+    join13(p.hooksDir, "guard.mjs"),
+    join13(p.hooksDir, "audit.mjs"),
+    join13(p.hooksDir, "stop.mjs"),
+    join13(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -11454,26 +11685,26 @@ function unlockProtected() {
   for (const f of protectedTargets()) unlockFile(f);
 }
 function globalPaths() {
-  const home = homedir10();
-  const sgDir = join12(home, ".solongate");
-  const hooksDir = join12(sgDir, "hooks");
-  const claudeDir = join12(home, ".claude");
+  const home = homedir11();
+  const sgDir = join13(home, ".solongate");
+  const hooksDir = join13(sgDir, "hooks");
+  const claudeDir = join13(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join12(claudeDir, "settings.json"),
-    backupPath: join12(claudeDir, "settings.solongate.bak"),
-    configPath: join12(sgDir, "cloud-guard.json")
+    settingsPath: join13(claudeDir, "settings.json"),
+    backupPath: join13(claudeDir, "settings.solongate.bak"),
+    configPath: join13(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync8(join12(HOOKS_DIR, filename), "utf-8");
+  return readFileSync9(join13(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join12(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync6(bundled) ? readFileSync8(bundled, "utf-8") : readHook("guard.mjs");
+  const bundled = join13(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync6(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -11507,18 +11738,18 @@ function shimTargets() {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join12(homedir10(), f)).filter((f) => existsSync6(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join13(homedir11(), f)).filter((f) => existsSync6(f));
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync6(file) ? readFileSync8(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync9(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
-  mkdirSync7(dirname(file), { recursive: true });
-  writeFileSync7(file, content);
+  mkdirSync8(dirname2(file), { recursive: true });
+  writeFileSync8(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11548,7 +11779,7 @@ async function runGlobalInstall(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync8(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync9(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -11561,22 +11792,22 @@ async function runGlobalInstall(opts = {}) {
     process.exit(1);
   }
   const apiUrl = opts.apiUrl || process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
-  mkdirSync7(p.hooksDir, { recursive: true });
-  mkdirSync7(p.claudeDir, { recursive: true });
+  mkdirSync8(p.hooksDir, { recursive: true });
+  mkdirSync8(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync7(join12(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync7(join12(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync7(join12(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync7(join12(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync8(join13(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync8(join13(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync8(join13(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync8(join13(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join12(p.hooksDir, "shield.mjs"));
-  writeFileSync7(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  installClaudeShim(join13(p.hooksDir, "shield.mjs"));
+  writeFileSync8(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
-    const raw = readFileSync8(p.settingsPath, "utf-8");
+    const raw = readFileSync9(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync7(p.backupPath, raw);
+      writeFileSync8(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11585,9 +11816,9 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join12(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join12(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join12(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join13(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join13(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join13(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -11599,7 +11830,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync7(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync8(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11610,7 +11841,7 @@ var __dirname, HOOKS_DIR, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
     "use strict";
-    __dirname = dirname(fileURLToPath(import.meta.url));
+    __dirname = dirname2(fileURLToPath2(import.meta.url));
     HOOKS_DIR = resolve4(__dirname, "..", "hooks");
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
     SHIM_END = "# <<< SolonGate shield <<<";
@@ -11619,7 +11850,7 @@ var init_global_install = __esm({
 
 // src/login.ts
 var login_exports = {};
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 function startSpinner(text) {
   if (!process.stderr.isTTY) {
     process.stderr.write(`  ${text}
@@ -11655,7 +11886,7 @@ function openBrowser2(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn3(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn4(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -11775,13 +12006,13 @@ __export(shield_exports, {
 });
 import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync9, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync10, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
-import { homedir as homedir11 } from "os";
+import { homedir as homedir12 } from "os";
 function findCacheFile() {
-  const dir = resolve5(homedir11(), ".solongate");
+  const dir = resolve5(homedir12(), ".solongate");
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
@@ -11807,7 +12038,7 @@ function loadCfg() {
   try {
     const f = findCacheFile();
     if (f && existsSync7(f)) {
-      const c2 = JSON.parse(readFileSync9(f, "utf-8"));
+      const c2 = JSON.parse(readFileSync10(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
       const ghost = g && Array.isArray(g.patterns) ? g.patterns : [];
@@ -12035,7 +12266,7 @@ async function runShield() {
   const upstream = pickUpstream();
   const { port, close } = await startProxy(upstream);
   log4(`redacting secrets on the LLM path \u2192 masking before ${upstream.host} (127.0.0.1:${port})`);
-  const child = spawn4(cmd[0], cmd.slice(1), {
+  const child = spawn5(cmd[0], cmd.slice(1), {
     stdio: "inherit",
     env: { ...process.env, ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}` },
     shell: process.platform === "win32"
@@ -12095,9 +12326,9 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync10, statSync as statSync5 } from "fs";
-import { resolve as resolve6, join as join13, isAbsolute } from "path";
-import { homedir as homedir12 } from "os";
+import { readFileSync as readFileSync11, statSync as statSync5 } from "fs";
+import { resolve as resolve6, join as join14, isAbsolute } from "path";
+import { homedir as homedir13 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
@@ -12114,15 +12345,15 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
-  return resolve6(homedir12(), ".solongate", "local-logs");
+  return resolve6(homedir13(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve6(homedir12(), ".solongate");
+  const base = resolve6(homedir13(), ".solongate");
   try {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync10(join13(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync11(join14(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -12131,7 +12362,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync10(join13(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync11(join14(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -12160,7 +12391,7 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join13(dir, LOG_FILENAME);
+  const file = join14(dir, LOG_FILENAME);
   try {
     const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
@@ -12221,7 +12452,7 @@ async function runLogsServer() {
         return;
       }
       try {
-        const text = readFileSync10(info.file, "utf-8");
+        const text = readFileSync11(info.file, "utf-8");
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8", "Last-Modified": lastMod, "X-Solongate-Exists": "1" });
         res.end(text);
       } catch {
@@ -12273,7 +12504,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync9, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -12333,7 +12564,7 @@ WHAT IT DOES
 function detectProject() {
   if (!existsSync8(resolve7("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -12342,7 +12573,7 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
@@ -12369,7 +12600,7 @@ function findTsEntryFile() {
     const full = resolve7(c2);
     if (existsSync8(full)) {
       try {
-        const content = readFileSync11(full, "utf-8");
+        const content = readFileSync12(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -12389,7 +12620,7 @@ function detectPackageManager() {
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -12410,7 +12641,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync11(filePath, "utf-8");
+  const original = readFileSync12(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -12581,7 +12812,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync8(entryFile, result.modified);
+  writeFileSync9(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12610,8 +12841,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync9, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join14 } from "path";
+import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync10, existsSync as existsSync9 } from "fs";
+import { resolve as resolve8, join as join15 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -12690,8 +12921,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync9(
-    join14(dir, "package.json"),
+  writeFileSync10(
+    join15(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -12720,8 +12951,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync9(
-    join14(dir, "tsconfig.json"),
+  writeFileSync10(
+    join15(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -12741,9 +12972,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync8(join14(dir, "src"), { recursive: true });
-  writeFileSync9(
-    join14(dir, "src", "index.ts"),
+  mkdirSync9(join15(dir, "src"), { recursive: true });
+  writeFileSync10(
+    join15(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -12784,8 +13015,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync9(
-    join14(dir, ".mcp.json"),
+  writeFileSync10(
+    join15(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -12802,13 +13033,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync9(
-    join14(dir, ".env"),
+  writeFileSync10(
+    join15(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync9(
-    join14(dir, ".gitignore"),
+  writeFileSync10(
+    join15(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -12827,7 +13058,7 @@ async function main3() {
     process.exit(1);
   }
   withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync8(dir, { recursive: true });
+    mkdirSync9(dir, { recursive: true });
     createProject(dir, opts.name, opts.policy);
   });
   if (!opts.noInstall) {
@@ -12901,14 +13132,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync10, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync11, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
   if (!existsSync10(envPath)) return;
   try {
-    const content = readFileSync12(envPath, "utf-8");
+    const content = readFileSync13(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -13096,7 +13327,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync10(file, json, "utf-8");
+  writeFileSync11(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -13125,7 +13356,7 @@ async function push(apiKey, file, policyId) {
     log5("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync12(file, "utf-8");
+  const content = readFileSync13(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);
@@ -15285,7 +15516,7 @@ var SolonGate = class {
    */
   startPolicyPolling() {
     const apiUrl = this.config.apiUrl ?? "https://api.solongate.com";
-    let currentVersion = 0;
+    let currentVersion2 = 0;
     const timer = setInterval(async () => {
       try {
         const res = await fetch(`${apiUrl}/api/v1/policies/default`, {
@@ -15295,7 +15526,7 @@ var SolonGate = class {
         if (!res.ok) return;
         const data = await res.json();
         const version = Number(data._version ?? 0);
-        if (version !== currentVersion && version > 0) {
+        if (version !== currentVersion2 && version > 0) {
           const policySet = {
             id: String(data.id ?? "cloud"),
             name: String(data.name ?? "Cloud Policy"),
@@ -15307,7 +15538,7 @@ var SolonGate = class {
           };
           this.policyEngine.loadPolicySet(policySet);
           await this.loadCloudWasm(apiUrl, policySet.id);
-          currentVersion = version;
+          currentVersion2 = version;
         }
       } catch {
       }
@@ -16275,6 +16506,12 @@ function printWelcome() {
 }
 async function main5() {
   const subcommand = process.argv[2];
+  if (IS_HUMAN_CLI) {
+    const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
+    const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
+    maybeSelfUpdate2(tuiBound ? () => {
+    } : void 0);
+  }
   if (process.argv.length <= 2) {
     if (process.stdout.isTTY && process.stdin.isTTY) {
       const { launchTui: launchTui2 } = await Promise.resolve().then(() => (init_tui(), tui_exports));

package/dist/self-update.d.ts

@@ -0,0 +1,6 @@
+export declare function currentVersion(): string;
+/**
+ * Fire-and-forget startup hook. `notify` writes the human-facing one-liner —
+ * callers pass a stderr writer so the notice never lands in piped stdout.
+ */
+export declare function maybeSelfUpdate(notify?: (line: string) => void): void;

package/dist/tui/index.js

@@ -920,6 +920,7 @@ var LIVE_HELP = [
       ["f", "source filter: all \u2192 local \u2192 cloud"],
       ["/", "live search (tool, agent, command\u2026) \xB7 enter done"],
       ["s", "session picker"],
+      ["l", "layers detail (rate limit \xB7 dlp \xB7 ghost \xB7 guard)"],
       ["e", "export visible rows \u2192 ~/.solongate/live-export.jsonl"],
       ["space", "copy mode: freeze screen for mouse selection"],
       ["esc", "back to menu"],
@@ -970,6 +971,7 @@ function LivePanel({ active: active2 }) {
   const [detailScroll, setDetailScroll] = useState2(0);
   const [inspect, setInspect] = useState2(null);
   const [inspectScroll, setInspectScroll] = useState2(0);
+  const [layersScroll, setLayersScroll] = useState2(0);
   const inspectFromRef = useRef2("stream");
   const seenRef = useRef2(/* @__PURE__ */ new Set());
   const lastLocalTs = useRef2(0);
@@ -1369,6 +1371,14 @@ function LivePanel({ active: active2 }) {
         else if (key.pageDown) setInspectScroll((n) => n + 10);
         return;
       }
+      if (mode === "layers") {
+        if (key.leftArrow || input === "l") setMode("stream");
+        else if (key.upArrow) setLayersScroll((n) => Math.max(0, n - 1));
+        else if (key.downArrow) setLayersScroll((n) => n + 1);
+        else if (key.pageUp) setLayersScroll((n) => Math.max(0, n - 10));
+        else if (key.pageDown) setLayersScroll((n) => n + 10);
+        return;
+      }
       if (mode === "detail") {
         const maxD = Math.max(0, detailEntries.length - 1);
         if (key.leftArrow) {
@@ -1418,6 +1428,9 @@ function LivePanel({ active: active2 }) {
       } else if (input === "s") {
         setPickIdx(0);
         setMode("pick");
+      } else if (input === "l") {
+        setLayersScroll(0);
+        setMode("layers");
       } else if (input === "w") void doAction("whitelist");
       else if (input === "b") void doAction("block");
       else if (input === "d") toggleSignal("deny");
@@ -1537,6 +1550,87 @@ function LivePanel({ active: active2 }) {
       ] })
     ] });
   }
+  if (mode === "layers") {
+    const modeColor2 = (m) => m === "block" || m === "on" ? theme.ok : m === "detect" ? theme.warn : theme.dim;
+    const barW = Math.max(10, Math.min(40, innerW - 30));
+    const burstsInBuf = mergedAll.filter((e) => e.burst).length;
+    const dlpInBuf = mergedAll.filter((e) => e.dlp).length;
+    const allHits = ins.dlpByPattern ?? [];
+    const maxHit = allHits[0]?.count ?? 1;
+    const L = [];
+    const push = (el) => L.push(/* @__PURE__ */ jsx2(Box2, { children: el }, L.length));
+    const blank = () => push(/* @__PURE__ */ jsx2(Text2, { children: " " }));
+    const section = (label, m, note) => push(
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsxs2(Text2, { bold: true, color: theme.accentBright, children: [
+          "\u258E",
+          label.padEnd(10)
+        ] }),
+        /* @__PURE__ */ jsx2(Text2, { bold: true, color: modeColor2(m), children: (m ?? "?").padEnd(8) }),
+        note ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: note }) : null
+      ] })
+    );
+    const kv = (k, v) => push(
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ("  " + k).padEnd(16) }),
+        v
+      ] })
+    );
+    section("RATELIMIT", rl?.mode, rl?.mode === "block" ? "over-limit calls are DENIED" : rl?.mode === "detect" ? "over-limit calls are observed & flagged rl:yes" : "no limit enforcement");
+    kv("limits", /* @__PURE__ */ jsx2(Text2, { children: rl?.perMinute || rl?.perHour || rl?.perDay ? `${rl?.perMinute || "\u2014"}/min \xB7 ${rl?.perHour || "\u2014"}/hour \xB7 ${rl?.perDay || "\u2014"}/day` : "none configured" }));
+    kv("load now", /* @__PURE__ */ jsx2(Text2, { children: `${minuteNow} calls in the last 60s` }));
+    if (rl?.perMinute) push(/* @__PURE__ */ jsx2(HBar, { label: "  load/min", value: minuteNow, max: rl.perMinute, width: barW, color: minuteNow > rl.perMinute ? theme.bad : theme.accent }));
+    kv("bursts", /* @__PURE__ */ jsx2(Text2, { color: burstsInBuf ? theme.warn : theme.dim, children: `${burstsInBuf} flagged in the live buffer` }));
+    blank();
+    section("DLP", dl?.mode, dl?.mode === "block" ? "secrets in arguments are DENIED + redacted" : dl?.mode === "detect" ? "secrets observed & flagged dlp:yes, output redacted" : "no secret scanning");
+    kv("hits", /* @__PURE__ */ jsx2(Text2, { color: dlpInBuf ? theme.bad : theme.dim, children: `${dlpInBuf} flagged in the live buffer` }));
+    const builtin = dl?.patterns ?? [];
+    kv("builtin", /* @__PURE__ */ jsx2(Text2, { children: builtin.length ? `${builtin.length} patterns enabled` : "none enabled" }));
+    for (const line of wrapLines(builtin.join(" \xB7 "), Math.max(20, innerW - 18))) push(/* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "                " + line }));
+    const custom = dl?.custom ?? [];
+    kv("custom", /* @__PURE__ */ jsx2(Text2, { children: custom.length ? `${custom.length} patterns` : "none" }));
+    for (const c2 of custom)
+      push(
+        /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "                " }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(c2.name ?? "custom", 24).padEnd(25) }),
+          /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(c2.re ?? "", Math.max(10, innerW - 44)) })
+        ] })
+      );
+    kv("pattern hits", /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: allHits.length ? "last 7 days" : "none in the last 7 days" }));
+    for (const h of allHits) push(/* @__PURE__ */ jsx2(HBar, { label: "  " + truncate(h.pattern, 10), value: h.count, max: maxHit, width: barW, color: theme.bad }));
+    blank();
+    section("GHOST", gh?.mode, gh?.mode === "on" ? "matching paths are hidden from agents" : "no hidden paths");
+    const ghostPats = gh?.patterns ?? [];
+    kv("patterns", /* @__PURE__ */ jsx2(Text2, { children: ghostPats.length ? `${ghostPats.length}` : "none" }));
+    for (const line of wrapLines(ghostPats.join(" \xB7 "), Math.max(20, innerW - 18))) push(/* @__PURE__ */ jsx2(Text2, { wrap: "truncate", color: theme.dim, children: "                " + line }));
+    blank();
+    section("GUARD", guard.data ? guard.data.up_to_date ? "ok" : "stale" : "?", "the PreToolUse hook enforcing all of the above");
+    kv(
+      "hooks",
+      guard.data ? /* @__PURE__ */ jsx2(Text2, { color: guard.data.up_to_date ? theme.ok : theme.warn, children: `v${guard.data.installed ?? "?"}${guard.data.up_to_date ? " (latest)" : ` \u2192 v${guard.data.latest} available`} \xB7 ${guard.data.device_count} device${guard.data.device_count === 1 ? "" : "s"}` }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "loading\u2026" })
+    );
+    kv("local eval", ring ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: `avg ${ring.avgMs}ms over ${ring.count} recent calls` }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "no local ring in cwd" }));
+    const bodyRows = Math.max(4, rows - 5);
+    const maxLScroll = Math.max(0, L.length - bodyRows);
+    const lOff = Math.min(layersScroll, maxLScroll);
+    const win = L.slice(lOff, lOff + bodyRows);
+    return /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", paddingX: 1, children: [
+      titleBar,
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LAYERS " }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  security layers, limits and patterns \xB7 insights window: last 7 days" }),
+        /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "  \u2190 back" })
+      ] }),
+      /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", extra: `${insights.data ? "" : spin + " loading \xB7 "}${maxLScroll ? `\u25BC${maxLScroll - lOff} more \xB7 \u2191\u2193 scroll \xB7 ` : ""}l or \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win }),
+      /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LAYERS " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: "#0b1530", color: "white", children: " rate limit \xB7 dlp \xB7 ghost \xB7 guard " }),
+        /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", children: " \u2191\u2193 scroll \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      ] })
+    ] });
+  }
   if (mode === "detail" && detail) {
     const d = detailEntries;
     const allow = d.filter((e) => e.decision === "ALLOW").length;
@@ -1656,7 +1750,7 @@ function LivePanel({ active: active2 }) {
     ] }),
     /* @__PURE__ */ jsxs2(Box2, { height: colH, children: [
       /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", width: colW, marginRight: 2, overflow: "hidden", children: [
-        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", width: colW }),
+        /* @__PURE__ */ jsx2(PaneTitle, { label: "LAYERS", extra: "l = inspect", width: colW }),
         /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
           /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "RATELIMIT ".padEnd(10) }),
           /* @__PURE__ */ jsx2(Text2, { color: rl?.mode === "block" ? theme.ok : rl?.mode === "detect" ? theme.warn : theme.dim, children: (rl?.mode ?? "?").padEnd(7) }),
@@ -1689,7 +1783,8 @@ function LivePanel({ active: active2 }) {
               " "
             ] }),
             /* @__PURE__ */ jsx2(Text2, { color: st.color, children: st.label.padEnd(7) }),
-            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate(r.isMe ? "this machine" : r.agent, 12).padEnd(13) }),
+            /* @__PURE__ */ jsx2(Text2, { color: theme.accentBright, children: truncate(r.agent, r.isMe ? 9 : 12).padEnd(r.isMe ? 10 : 13) }),
+            r.isMe ? /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "me " }) : null,
             /* @__PURE__ */ jsxs2(Text2, { children: [
               String(r.calls).padStart(4),
               "c "

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.44",
+  "version": "0.81.46",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {