@solongate/proxy 0.81.45 → 0.81.47

package/dist/api-client/auth.d.ts

@@ -0,0 +1,12 @@
+export interface Me {
+    user?: {
+        email?: string;
+        name?: string;
+    } | null;
+    project?: {
+        id?: string;
+        name?: string;
+        slug?: string;
+    } | null;
+}
+export declare function me(): Promise<Me>;

package/dist/api-client/index.d.ts

@@ -5,6 +5,7 @@
 export * from './client.js';
 export * from './types.js';
 export * from './device-login.js';
+import * as auth from './auth.js';
 import * as policies from './policies.js';
 import * as settings from './settings.js';
 import * as stats from './stats.js';
@@ -13,6 +14,7 @@ import * as agents from './agents.js';
 import * as keys from './keys.js';
 import * as mcp from './mcp.js';
 export declare const api: {
+    auth: typeof auth;
     policies: typeof policies;
     settings: typeof settings;
     stats: typeof stats;

package/dist/commands/index.js

@@ -142,6 +142,15 @@ async function request(method, path, opts = {}) {
 // src/api-client/device-login.ts
 import { spawn } from "child_process";
 
+// src/api-client/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  me: () => me
+});
+function me() {
+  return request("GET", "/auth/me");
+}
+
 // src/api-client/policies.ts
 var policies_exports = {};
 __export(policies_exports, {
@@ -364,7 +373,7 @@ function list4() {
 }
 
 // src/api-client/index.ts
-var api = { policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
+var api = { auth: auth_exports, policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
 
 // src/cli-utils.ts
 var c = {

package/dist/index.js

@@ -6554,15 +6554,151 @@ var init_cli_utils = __esm({
   }
 });
 
-// src/tui/config.ts
-import { readFileSync as readFileSync4 } from "fs";
+// src/self-update.ts
+var self_update_exports = {};
+__export(self_update_exports, {
+  currentVersion: () => currentVersion,
+  maybeSelfUpdate: () => maybeSelfUpdate
+});
+import { execFile, spawn } from "child_process";
+import { mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+import { dirname, join as join4 } from "path";
+import { fileURLToPath } from "url";
+function readState() {
+  try {
+    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(s) {
+  try {
+    mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+    writeFileSync3(STATE_FILE, JSON.stringify(s));
+  } catch {
+  }
+}
+function currentVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync4(join4(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf-8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function newerThan(b, a) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((pb[i] ?? 0) > (pa[i] ?? 0)) return true;
+    if ((pb[i] ?? 0) < (pa[i] ?? 0)) return false;
+  }
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, { signal: AbortSignal.timeout(2e3) });
+    if (!res.ok) return null;
+    const j = await res.json();
+    return typeof j.version === "string" ? j.version : null;
+  } catch {
+    return null;
+  }
+}
+function npmGlobalRoot() {
+  return new Promise((resolve10) => {
+    try {
+      execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err2, stdout) => {
+        resolve10(err2 ? null : stdout.trim() || null);
+      });
+    } catch {
+      resolve10(null);
+    }
+  });
+}
+async function isGlobalInstall() {
+  try {
+    const script = realpathSync(process.argv[1] ?? "");
+    if (!script) return false;
+    const root = await npmGlobalRoot();
+    if (!root) return false;
+    return script.startsWith(realpathSync(root));
+  } catch {
+    return false;
+  }
+}
+function spawnGlobalInstall(version) {
+  try {
+    mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+    const log6 = openSync(LOG_FILE, "a");
+    const p = spawn("npm", ["install", "-g", `${PKG}@${version}`], {
+      stdio: ["ignore", log6, log6],
+      detached: true,
+      windowsHide: true,
+      shell: process.platform === "win32"
+    });
+    p.on("error", () => {
+    });
+    p.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function maybeSelfUpdate(notify = (l) => process.stderr.write(l + "\n")) {
+  void (async () => {
+    try {
+      const state = readState();
+      const now = Date.now();
+      const current = currentVersion();
+      let latest = state.latestSeen ?? null;
+      if (now - (state.lastCheckAt ?? 0) >= CHECK_EVERY_MS) {
+        latest = await fetchLatest();
+        if (latest) writeState({ ...state, lastCheckAt: now, latestSeen: latest });
+        else writeState({ ...state, lastCheckAt: now });
+      }
+      if (!latest || !newerThan(latest, current)) return;
+      const attempts = readState().attempts ?? {};
+      if (await isGlobalInstall()) {
+        if (now - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS) {
+          writeState({ ...readState(), attempts: { [latest]: now } });
+          if (spawnGlobalInstall(latest)) {
+            notify(`${c.dim}\u2191 solongate v${latest} available (running v${current}) \u2014 updating in the background, next run uses it${c.reset}`);
+            return;
+          }
+        } else {
+          return;
+        }
+      }
+      notify(`${c.dim}\u2191 solongate v${latest} available (running v${current}) \u2014 update: ${c.reset}${c.cyan}npm i -g ${PKG}@latest${c.reset}`);
+    } catch {
+    }
+  })();
+}
+var PKG, CHECK_EVERY_MS, ATTEMPT_EVERY_MS, STATE_FILE, LOG_FILE;
+var init_self_update = __esm({
+  "src/self-update.ts"() {
+    "use strict";
+    init_cli_utils();
+    PKG = "@solongate/proxy";
+    CHECK_EVERY_MS = 30 * 60 * 1e3;
+    ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
+    STATE_FILE = join4(homedir2(), ".solongate", ".self-update.json");
+    LOG_FILE = join4(homedir2(), ".solongate", "self-update.log");
+  }
+});
+
+// src/tui/config.ts
+import { readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join5 } from "path";
 function loadConfig() {
   if (cached) return cached;
   const defaults = { notifications: true };
   try {
-    const raw = readFileSync4(join4(homedir2(), ".solongate", "tui-config.json"), "utf-8");
+    const raw = readFileSync5(join5(homedir3(), ".solongate", "tui-config.json"), "utf-8");
     const j = JSON.parse(raw);
     cached = {
       notifications: j.notifications !== false,
@@ -6688,14 +6824,14 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, openSync, readFileSync as readFileSync5, readSync, statSync, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { closeSync, openSync as openSync2, readFileSync as readFileSync6, readSync, statSync, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync(file, "r");
+    const fd = openSync2(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync(fd, buf, 0, buf.length, start);
     closeSync(fd);
@@ -6708,7 +6844,7 @@ function tailLines(file, maxBytes = 131072) {
 }
 function deleteLocalEntry(at, tool, session) {
   try {
-    const lines = readFileSync5(LOCAL_LOG, "utf-8").split("\n");
+    const lines = readFileSync6(LOCAL_LOG, "utf-8").split("\n");
     let removed = 0;
     const kept = lines.filter((line) => {
       if (!line.trim()) return false;
@@ -6724,7 +6860,7 @@ function deleteLocalEntry(at, tool, session) {
       }
       return true;
     });
-    if (removed) writeFileSync3(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    if (removed) writeFileSync4(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
     return removed;
   } catch {
     return 0;
@@ -6732,8 +6868,8 @@ function deleteLocalEntry(at, tool, session) {
 }
 function clearLocalLog() {
   try {
-    const n = readFileSync5(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
-    writeFileSync3(LOCAL_LOG, "");
+    const n = readFileSync6(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync4(LOCAL_LOG, "");
     return n;
   } catch {
     return 0;
@@ -6764,20 +6900,20 @@ var LOCAL_LOG, DLP_REASON, RL_REASON;
 var init_local_log = __esm({
   "src/tui/local-log.ts"() {
     "use strict";
-    LOCAL_LOG = join5(homedir3(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG = join6(homedir4(), ".solongate", "local-logs", "solongate-audit.jsonl");
     DLP_REASON = /security layer \(dlp\)/i;
     RL_REASON = /security layer \(rate limit\)|rate[- ]?limit(?:ed)?\b.*exceed|exceeded \d+ calls/i;
   }
 });
 
 // src/api-client/client.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, existsSync as existsSync3 } from "fs";
-import { resolve as resolve3, join as join6 } from "path";
-import { homedir as homedir4 } from "os";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync3 } from "fs";
+import { resolve as resolve3, join as join7 } from "path";
+import { homedir as homedir5 } from "os";
 function listAccounts() {
   let list6 = [];
   try {
-    const raw = JSON.parse(readFileSync6(accountsFile(), "utf-8"));
+    const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
     if (Array.isArray(raw)) list6 = raw.filter((a) => a && typeof a.apiKey === "string");
   } catch {
   }
@@ -6791,7 +6927,7 @@ function saveAccount(acc) {
   try {
     const list6 = (() => {
       try {
-        const raw = JSON.parse(readFileSync6(accountsFile(), "utf-8"));
+        const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
         return Array.isArray(raw) ? raw.filter((a) => a && a.apiKey) : [];
       } catch {
         return [];
@@ -6799,8 +6935,8 @@ function saveAccount(acc) {
     })();
     const next = list6.filter((a) => a.apiKey !== acc.apiKey);
     next.unshift({ ...acc, addedAt: acc.addedAt ?? Date.now() });
-    mkdirSync3(join6(homedir4(), ".solongate"), { recursive: true });
-    writeFileSync4(accountsFile(), JSON.stringify(next, null, 2));
+    mkdirSync4(join7(homedir5(), ".solongate"), { recursive: true });
+    writeFileSync5(accountsFile(), JSON.stringify(next, null, 2));
   } catch {
   }
 }
@@ -6813,15 +6949,15 @@ function isActiveAccount(apiKey) {
 }
 function setActiveAccount(creds) {
   try {
-    const dir = join6(homedir4(), ".solongate");
-    mkdirSync3(dir, { recursive: true });
-    const p = join6(dir, ["cloud", "guard.json"].join("-"));
+    const dir = join7(homedir5(), ".solongate");
+    mkdirSync4(dir, { recursive: true });
+    const p = join7(dir, ["cloud", "guard.json"].join("-"));
     let existing = {};
     try {
-      existing = JSON.parse(readFileSync6(p, "utf-8"));
+      existing = JSON.parse(readFileSync7(p, "utf-8"));
     } catch {
     }
-    writeFileSync4(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
+    writeFileSync5(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
     cached2 = null;
     return true;
   } catch {
@@ -6830,9 +6966,9 @@ function setActiveAccount(creds) {
 }
 function loginCredentialFile() {
   try {
-    const p = join6(homedir4(), ".solongate", "cloud-guard.json");
+    const p = join7(homedir5(), ".solongate", "cloud-guard.json");
     if (!existsSync3(p)) return {};
-    const c2 = JSON.parse(readFileSync6(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync7(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -6842,7 +6978,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve3(".env");
     if (!existsSync3(envPath)) return void 0;
-    for (const line of readFileSync6(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync7(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -6944,7 +7080,7 @@ var init_client = __esm({
   "src/api-client/client.ts"() {
     "use strict";
     DEFAULT_API_URL2 = "https://api.solongate.com";
-    accountsFile = () => join6(homedir4(), ".solongate", "accounts.json");
+    accountsFile = () => join7(homedir5(), ".solongate", "accounts.json");
     viewOverride = null;
     ApiError = class extends Error {
       status;
@@ -6974,12 +7110,12 @@ var init_types = __esm({
 });
 
 // src/api-client/device-login.ts
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 function openBrowser(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -7021,6 +7157,21 @@ var init_device_login = __esm({
   }
 });
 
+// src/api-client/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  me: () => me
+});
+function me() {
+  return request("GET", "/auth/me");
+}
+var init_auth = __esm({
+  "src/api-client/auth.ts"() {
+    "use strict";
+    init_client();
+  }
+});
+
 // src/api-client/policies.ts
 var policies_exports = {};
 __export(policies_exports, {
@@ -7292,6 +7443,7 @@ var init_api_client = __esm({
     init_client();
     init_types();
     init_device_login();
+    init_auth();
     init_policies();
     init_settings();
     init_stats();
@@ -7299,29 +7451,29 @@ var init_api_client = __esm({
     init_agents();
     init_keys();
     init_mcp();
-    api = { policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
+    api = { auth: auth_exports, policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
   }
 });
 
 // src/tui/notify.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 function desktopNotify(title, msg) {
   try {
     if (process.platform === "linux") {
-      const p = spawn2("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
+      const p = spawn3("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "win32") {
       const q = (s) => s.replace(/'/g, "''");
       const ps = `Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.Visible=$true;$n.ShowBalloonTip(6000,'${q(title)}','${q(msg)}',[System.Windows.Forms.ToolTipIcon]::Warning);Start-Sleep -Milliseconds 6500;$n.Dispose()`;
-      const p = spawn2("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
+      const p = spawn3("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "darwin") {
       const esc = (s) => s.replace(/"/g, '\\"');
-      const p = spawn2("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
+      const p = spawn3("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
@@ -7407,9 +7559,9 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
-import { homedir as homedir5 } from "os";
-import { join as join7 } from "path";
+import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir6 } from "os";
+import { join as join8 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function extractTarget(detail) {
@@ -8000,10 +8152,10 @@ function LivePanel({ active: active2 }) {
       else if (input === "x") toggleSignal("dlp");
       else if (input === "r") toggleSignal("ratelimit");
       else if (input === "e") {
-        const file = join7(homedir5(), ".solongate", "live-export.jsonl");
+        const file = join8(homedir6(), ".solongate", "live-export.jsonl");
         try {
-          mkdirSync4(join7(homedir5(), ".solongate"), { recursive: true });
-          writeFileSync5(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          mkdirSync5(join8(homedir6(), ".solongate"), { recursive: true });
+          writeFileSync6(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -8413,7 +8565,7 @@ var init_Live = __esm({
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
     DIM_FLOOR = "#233457";
-    RING = join7(process.cwd(), ".solongate", ".eval-ring.jsonl");
+    RING = join8(process.cwd(), ".solongate", ".eval-ring.jsonl");
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -9103,9 +9255,9 @@ var init_Dlp = __esm({
 // src/tui/panels/Audit.tsx
 import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 import { useState as useState6 } from "react";
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function loadLocalRows() {
@@ -9259,16 +9411,16 @@ function AuditPanel({ active: active2, focused }) {
   const doExport = (kind) => {
     setMsg({ text: "exporting\u2026", level: "ok" });
     const run12 = async () => {
-      const dir = join8(homedir6(), ".solongate");
-      const file = join8(dir, `audit-export-${source}.jsonl`);
+      const dir = join9(homedir7(), ".solongate");
+      const file = join9(dir, `audit-export-${source}.jsonl`);
       let rows2;
       if (kind === "page") rows2 = pageRows;
       else if (source === "cloud") {
         const r = await api.audit.list({ ...query, limit: 1e4, offset: 0 });
         rows2 = r.entries.map(cloudRow).sort((a, b) => b.at - a.at);
       } else rows2 = localFiltered;
-      mkdirSync5(dir, { recursive: true });
-      writeFileSync6(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
+      mkdirSync6(dir, { recursive: true });
+      writeFileSync7(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
       return { n: rows2.length, file };
     };
     run12().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
@@ -10041,7 +10193,7 @@ function AccountsPanel({
         if (a) {
           setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
           onView?.(a);
-          setMsg({ text: `viewing ${a.project || a.user || a.apiKey.slice(0, 8)}`, level: "ok" });
+          setMsg({ text: `viewing ${a.project || a.user || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
         }
       } else if (input === "m") {
         const a = accounts[sel];
@@ -10090,7 +10242,7 @@ function AccountsPanel({
       const isActive = isActiveAccount(a.apiKey);
       return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
         /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(a.project || a.user || a.apiKey.slice(0, 12), 30).padEnd(31) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(a.project || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
         isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
         isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.user && a.project ? truncate2(a.user, 24) : "" })
@@ -10112,7 +10264,7 @@ var init_Accounts = __esm({
 
 // src/tui/App.tsx
 import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
-import { useState as useState9 } from "react";
+import { useEffect as useEffect7, useState as useState9 } from "react";
 import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function LiveHint() {
   return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
@@ -10149,7 +10301,22 @@ function App() {
   const [help, setHelp] = useState9(false);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.project || cur.user || cur.apiKey.slice(0, 8) : "not logged in";
+  const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  useEffect7(() => {
+    if (!cur || cur.project || cur.user) return;
+    let alive = true;
+    api.auth.me().then((r) => {
+      const project = r.project?.name || void 0;
+      const user = r.user?.name || r.user?.email || void 0;
+      if (!alive || !project && !user) return;
+      saveAccount({ ...cur, project, user });
+      setAccounts(listAccounts());
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [cur]);
   const viewAccount = (a) => {
     setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
     setAccounts(listAccounts());
@@ -10243,6 +10410,7 @@ var init_App = __esm({
     init_Accounts();
     init_hooks();
     init_client();
+    init_api_client();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },
       { label: "Policies", Panel: PoliciesPanel },
@@ -10271,9 +10439,9 @@ var tui_exports = {};
 __export(tui_exports, {
   launchTui: () => launchTui
 });
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync7 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 import { render } from "ink";
 import { jsx as jsx10 } from "react/jsx-runtime";
 async function launchTui() {
@@ -10284,11 +10452,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join9(homedir7(), ".solongate", "dataroom-debug.log");
+  const debugLog = join10(homedir8(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync6(join9(homedir7(), ".solongate"), { recursive: true });
+      mkdirSync7(join10(homedir8(), ".solongate"), { recursive: true });
       appendFileSync2(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {
@@ -10412,7 +10580,7 @@ var init_args = __esm({
 });
 
 // src/commands/policy.ts
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync8 } from "fs";
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -10587,7 +10755,7 @@ function printRules(rules) {
 }
 async function resolveRules(target) {
   if (target.endsWith(".json")) {
-    const parsed = JSON.parse(readFileSync7(target, "utf-8"));
+    const parsed = JSON.parse(readFileSync8(target, "utf-8"));
     return parsed.rules ?? [];
   }
   const p = await api.policies.get(target);
@@ -11003,8 +11171,8 @@ var init_agents2 = __esm({
 
 // src/commands/doctor.ts
 import { existsSync as existsSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
+import { homedir as homedir9 } from "os";
+import { join as join11 } from "path";
 async function run6(argv) {
   const { flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -11064,19 +11232,19 @@ var init_doctor = __esm({
     init_api_client();
     init_format();
     init_args();
-    LOCAL_LOG2 = join10(homedir8(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG2 = join11(homedir9(), ".solongate", "local-logs", "solongate-audit.jsonl");
   }
 });
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync2, readSync as readSync2, statSync as statSync3 } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join11 } from "path";
+import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync3, readSync as readSync2, statSync as statSync3 } from "fs";
+import { homedir as homedir10 } from "os";
+import { join as join12 } from "path";
 function tailLocal(file, maxBytes = 131072) {
   try {
     const size = statSync3(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync2(file, "r");
+    const fd = openSync3(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync2(fd, buf, 0, buf.length, start);
     closeSync2(fd);
@@ -11178,7 +11346,7 @@ var init_watch = __esm({
     init_cli_utils();
     init_args();
     init_format();
-    LOCAL_LOG3 = join11(homedir9(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG3 = join12(homedir10(), ".solongate", "local-logs", "solongate-audit.jsonl");
     trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
     time = (ms) => new Date(ms).toTimeString().slice(0, 8);
   }
@@ -11469,10 +11637,10 @@ var init_commands = __esm({
 });
 
 // src/global-install.ts
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, existsSync as existsSync6, mkdirSync as mkdirSync7 } from "fs";
-import { resolve as resolve4, join as join12, dirname } from "path";
-import { homedir as homedir10 } from "os";
-import { fileURLToPath } from "url";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, existsSync as existsSync6, mkdirSync as mkdirSync8 } from "fs";
+import { resolve as resolve4, join as join13, dirname as dirname2 } from "path";
+import { homedir as homedir11 } from "os";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { createInterface } from "readline";
 import { execFileSync as execFileSync2 } from "child_process";
 function lockFile(file) {
@@ -11534,10 +11702,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join12(p.hooksDir, "guard.mjs"),
-    join12(p.hooksDir, "audit.mjs"),
-    join12(p.hooksDir, "stop.mjs"),
-    join12(p.hooksDir, "shield.mjs"),
+    join13(p.hooksDir, "guard.mjs"),
+    join13(p.hooksDir, "audit.mjs"),
+    join13(p.hooksDir, "stop.mjs"),
+    join13(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -11549,26 +11717,26 @@ function unlockProtected() {
   for (const f of protectedTargets()) unlockFile(f);
 }
 function globalPaths() {
-  const home = homedir10();
-  const sgDir = join12(home, ".solongate");
-  const hooksDir = join12(sgDir, "hooks");
-  const claudeDir = join12(home, ".claude");
+  const home = homedir11();
+  const sgDir = join13(home, ".solongate");
+  const hooksDir = join13(sgDir, "hooks");
+  const claudeDir = join13(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join12(claudeDir, "settings.json"),
-    backupPath: join12(claudeDir, "settings.solongate.bak"),
-    configPath: join12(sgDir, "cloud-guard.json")
+    settingsPath: join13(claudeDir, "settings.json"),
+    backupPath: join13(claudeDir, "settings.solongate.bak"),
+    configPath: join13(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync8(join12(HOOKS_DIR, filename), "utf-8");
+  return readFileSync9(join13(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join12(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync6(bundled) ? readFileSync8(bundled, "utf-8") : readHook("guard.mjs");
+  const bundled = join13(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync6(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -11602,18 +11770,18 @@ function shimTargets() {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join12(homedir10(), f)).filter((f) => existsSync6(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join13(homedir11(), f)).filter((f) => existsSync6(f));
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync6(file) ? readFileSync8(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync9(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
-  mkdirSync7(dirname(file), { recursive: true });
-  writeFileSync7(file, content);
+  mkdirSync8(dirname2(file), { recursive: true });
+  writeFileSync8(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11643,7 +11811,7 @@ async function runGlobalInstall(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync8(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync9(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -11656,22 +11824,22 @@ async function runGlobalInstall(opts = {}) {
     process.exit(1);
   }
   const apiUrl = opts.apiUrl || process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
-  mkdirSync7(p.hooksDir, { recursive: true });
-  mkdirSync7(p.claudeDir, { recursive: true });
+  mkdirSync8(p.hooksDir, { recursive: true });
+  mkdirSync8(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync7(join12(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync7(join12(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync7(join12(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync7(join12(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync8(join13(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync8(join13(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync8(join13(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync8(join13(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join12(p.hooksDir, "shield.mjs"));
-  writeFileSync7(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  installClaudeShim(join13(p.hooksDir, "shield.mjs"));
+  writeFileSync8(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
-    const raw = readFileSync8(p.settingsPath, "utf-8");
+    const raw = readFileSync9(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync7(p.backupPath, raw);
+      writeFileSync8(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11680,9 +11848,9 @@ async function runGlobalInstall(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join12(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join12(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join12(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join13(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join13(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join13(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -11694,7 +11862,7 @@ async function runGlobalInstall(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync7(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync8(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11705,7 +11873,7 @@ var __dirname, HOOKS_DIR, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
     "use strict";
-    __dirname = dirname(fileURLToPath(import.meta.url));
+    __dirname = dirname2(fileURLToPath2(import.meta.url));
     HOOKS_DIR = resolve4(__dirname, "..", "hooks");
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
     SHIM_END = "# <<< SolonGate shield <<<";
@@ -11714,7 +11882,7 @@ var init_global_install = __esm({
 
 // src/login.ts
 var login_exports = {};
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 function startSpinner(text) {
   if (!process.stderr.isTTY) {
     process.stderr.write(`  ${text}
@@ -11750,7 +11918,7 @@ function openBrowser2(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn3(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn4(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -11870,13 +12038,13 @@ __export(shield_exports, {
 });
 import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync9, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync10, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
-import { homedir as homedir11 } from "os";
+import { homedir as homedir12 } from "os";
 function findCacheFile() {
-  const dir = resolve5(homedir11(), ".solongate");
+  const dir = resolve5(homedir12(), ".solongate");
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
@@ -11902,7 +12070,7 @@ function loadCfg() {
   try {
     const f = findCacheFile();
     if (f && existsSync7(f)) {
-      const c2 = JSON.parse(readFileSync9(f, "utf-8"));
+      const c2 = JSON.parse(readFileSync10(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
       const ghost = g && Array.isArray(g.patterns) ? g.patterns : [];
@@ -12130,7 +12298,7 @@ async function runShield() {
   const upstream = pickUpstream();
   const { port, close } = await startProxy(upstream);
   log4(`redacting secrets on the LLM path \u2192 masking before ${upstream.host} (127.0.0.1:${port})`);
-  const child = spawn4(cmd[0], cmd.slice(1), {
+  const child = spawn5(cmd[0], cmd.slice(1), {
     stdio: "inherit",
     env: { ...process.env, ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}` },
     shell: process.platform === "win32"
@@ -12190,9 +12358,9 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync10, statSync as statSync5 } from "fs";
-import { resolve as resolve6, join as join13, isAbsolute } from "path";
-import { homedir as homedir12 } from "os";
+import { readFileSync as readFileSync11, statSync as statSync5 } from "fs";
+import { resolve as resolve6, join as join14, isAbsolute } from "path";
+import { homedir as homedir13 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
@@ -12209,15 +12377,15 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
-  return resolve6(homedir12(), ".solongate", "local-logs");
+  return resolve6(homedir13(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve6(homedir12(), ".solongate");
+  const base = resolve6(homedir13(), ".solongate");
   try {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync10(join13(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync11(join14(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -12226,7 +12394,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync10(join13(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync11(join14(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -12255,7 +12423,7 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join13(dir, LOG_FILENAME);
+  const file = join14(dir, LOG_FILENAME);
   try {
     const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
@@ -12316,7 +12484,7 @@ async function runLogsServer() {
         return;
       }
       try {
-        const text = readFileSync10(info.file, "utf-8");
+        const text = readFileSync11(info.file, "utf-8");
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8", "Last-Modified": lastMod, "X-Solongate-Exists": "1" });
         res.end(text);
       } catch {
@@ -12368,7 +12536,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync9, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -12428,7 +12596,7 @@ WHAT IT DOES
 function detectProject() {
   if (!existsSync8(resolve7("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -12437,7 +12605,7 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
@@ -12464,7 +12632,7 @@ function findTsEntryFile() {
     const full = resolve7(c2);
     if (existsSync8(full)) {
       try {
-        const content = readFileSync11(full, "utf-8");
+        const content = readFileSync12(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -12484,7 +12652,7 @@ function detectPackageManager() {
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync11(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -12505,7 +12673,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync11(filePath, "utf-8");
+  const original = readFileSync12(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -12676,7 +12844,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync8(entryFile, result.modified);
+  writeFileSync9(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12705,8 +12873,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync9, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join14 } from "path";
+import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync10, existsSync as existsSync9 } from "fs";
+import { resolve as resolve8, join as join15 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -12785,8 +12953,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync9(
-    join14(dir, "package.json"),
+  writeFileSync10(
+    join15(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -12815,8 +12983,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync9(
-    join14(dir, "tsconfig.json"),
+  writeFileSync10(
+    join15(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -12836,9 +13004,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync8(join14(dir, "src"), { recursive: true });
-  writeFileSync9(
-    join14(dir, "src", "index.ts"),
+  mkdirSync9(join15(dir, "src"), { recursive: true });
+  writeFileSync10(
+    join15(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -12879,8 +13047,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync9(
-    join14(dir, ".mcp.json"),
+  writeFileSync10(
+    join15(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -12897,13 +13065,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync9(
-    join14(dir, ".env"),
+  writeFileSync10(
+    join15(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync9(
-    join14(dir, ".gitignore"),
+  writeFileSync10(
+    join15(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -12922,7 +13090,7 @@ async function main3() {
     process.exit(1);
   }
   withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync8(dir, { recursive: true });
+    mkdirSync9(dir, { recursive: true });
     createProject(dir, opts.name, opts.policy);
   });
   if (!opts.noInstall) {
@@ -12996,14 +13164,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync10, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync11, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
   if (!existsSync10(envPath)) return;
   try {
-    const content = readFileSync12(envPath, "utf-8");
+    const content = readFileSync13(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -13191,7 +13359,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync10(file, json, "utf-8");
+  writeFileSync11(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -13220,7 +13388,7 @@ async function push(apiKey, file, policyId) {
     log5("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync12(file, "utf-8");
+  const content = readFileSync13(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);
@@ -15380,7 +15548,7 @@ var SolonGate = class {
    */
   startPolicyPolling() {
     const apiUrl = this.config.apiUrl ?? "https://api.solongate.com";
-    let currentVersion = 0;
+    let currentVersion2 = 0;
     const timer = setInterval(async () => {
       try {
         const res = await fetch(`${apiUrl}/api/v1/policies/default`, {
@@ -15390,7 +15558,7 @@ var SolonGate = class {
         if (!res.ok) return;
         const data = await res.json();
         const version = Number(data._version ?? 0);
-        if (version !== currentVersion && version > 0) {
+        if (version !== currentVersion2 && version > 0) {
           const policySet = {
             id: String(data.id ?? "cloud"),
             name: String(data.name ?? "Cloud Policy"),
@@ -15402,7 +15570,7 @@ var SolonGate = class {
           };
           this.policyEngine.loadPolicySet(policySet);
           await this.loadCloudWasm(apiUrl, policySet.id);
-          currentVersion = version;
+          currentVersion2 = version;
         }
       } catch {
       }
@@ -16370,6 +16538,12 @@ function printWelcome() {
 }
 async function main5() {
   const subcommand = process.argv[2];
+  if (IS_HUMAN_CLI) {
+    const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
+    const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
+    maybeSelfUpdate2(tuiBound ? () => {
+    } : void 0);
+  }
   if (process.argv.length <= 2) {
     if (process.stdout.isTTY && process.stdin.isTTY) {
       const { launchTui: launchTui2 } = await Promise.resolve().then(() => (init_tui(), tui_exports));

package/dist/self-update.d.ts

@@ -0,0 +1,6 @@
+export declare function currentVersion(): string;
+/**
+ * Fire-and-forget startup hook. `notify` writes the human-facing one-liner —
+ * callers pass a stderr writer so the notice never lands in piped stdout.
+ */
+export declare function maybeSelfUpdate(notify?: (line: string) => void): void;

package/dist/tui/index.js

@@ -12,7 +12,7 @@ import { render } from "ink";
 
 // src/tui/App.tsx
 import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
-import { useState as useState9 } from "react";
+import { useEffect as useEffect7, useState as useState9 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -471,6 +471,15 @@ async function pollDeviceLogin(apiUrl, deviceCode) {
   }
 }
 
+// src/api-client/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  me: () => me
+});
+function me() {
+  return request("GET", "/auth/me");
+}
+
 // src/api-client/policies.ts
 var policies_exports = {};
 __export(policies_exports, {
@@ -693,7 +702,7 @@ function list4() {
 }
 
 // src/api-client/index.ts
-var api = { policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
+var api = { auth: auth_exports, policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
 
 // src/tui/notify.ts
 import { spawn as spawn2 } from "child_process";
@@ -3355,7 +3364,7 @@ function AccountsPanel({
         if (a) {
           setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
           onView?.(a);
-          setMsg({ text: `viewing ${a.project || a.user || a.apiKey.slice(0, 8)}`, level: "ok" });
+          setMsg({ text: `viewing ${a.project || a.user || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
         }
       } else if (input === "m") {
         const a = accounts[sel];
@@ -3404,7 +3413,7 @@ function AccountsPanel({
       const isActive = isActiveAccount(a.apiKey);
       return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
         /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.project || a.user || a.apiKey.slice(0, 12), 30).padEnd(31) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.project || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
         isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
         isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
         /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.user && a.project ? truncate(a.user, 24) : "" })
@@ -3462,7 +3471,22 @@ function App() {
   const [help, setHelp] = useState9(false);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.project || cur.user || cur.apiKey.slice(0, 8) : "not logged in";
+  const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  useEffect7(() => {
+    if (!cur || cur.project || cur.user) return;
+    let alive = true;
+    api.auth.me().then((r) => {
+      const project = r.project?.name || void 0;
+      const user = r.user?.name || r.user?.email || void 0;
+      if (!alive || !project && !user) return;
+      saveAccount({ ...cur, project, user });
+      setAccounts(listAccounts());
+    }).catch(() => {
+    });
+    return () => {
+      alive = false;
+    };
+  }, [cur]);
   const viewAccount = (a) => {
     setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
     setAccounts(listAccounts());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.45",
+  "version": "0.81.47",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {