@solongate/proxy 0.81.47 → 0.81.49

package/dist/api-client/client.d.ts

@@ -8,6 +8,8 @@ export interface SavedAccount {
     apiUrl: string;
     project?: string;
     user?: string;
+    /** Owner e-mail — the PRIMARY human-facing label for an account. */
+    email?: string;
     addedAt?: number;
 }
 export declare function listAccounts(): SavedAccount[];

package/dist/api-client/device-login.d.ts

@@ -9,6 +9,7 @@ export interface DevicePoll {
     apiKey?: string;
     project?: string;
     user?: string;
+    email?: string;
 }
 /** Best-effort browser open. No-op on failure (headless / missing opener). */
 export declare function openBrowser(url: string): void;

package/dist/index.js

@@ -6558,7 +6558,8 @@ var init_cli_utils = __esm({
 var self_update_exports = {};
 __export(self_update_exports, {
   currentVersion: () => currentVersion,
-  maybeSelfUpdate: () => maybeSelfUpdate
+  maybeSelfUpdate: () => maybeSelfUpdate,
+  tuiUpdateFlow: () => tuiUpdateFlow
 });
 import { execFile, spawn } from "child_process";
 import { mkdirSync as mkdirSync3, openSync, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync3 } from "fs";
@@ -6647,6 +6648,51 @@ function spawnGlobalInstall(version) {
     return false;
   }
 }
+function runGlobalInstall(version) {
+  return new Promise((resolve10) => {
+    try {
+      mkdirSync3(join4(homedir2(), ".solongate"), { recursive: true });
+      execFile(
+        "npm",
+        ["install", "-g", `${PKG}@${version}`],
+        { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
+        (err2, stdout, stderr) => {
+          try {
+            writeFileSync3(LOG_FILE, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err2 ? "FAILED" : "ok"}
+${stdout}
+${stderr}
+`, { flag: "a" });
+          } catch {
+          }
+          resolve10(!err2);
+        }
+      );
+    } catch {
+      resolve10(false);
+    }
+  });
+}
+async function tuiUpdateFlow(onStatus) {
+  try {
+    const current = currentVersion();
+    const latest = await fetchLatest();
+    const state = readState();
+    if (latest) writeState({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
+    if (!latest || !newerThan(latest, current)) return;
+    const attempts = readState().attempts ?? {};
+    const canRetry = Date.now() - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS;
+    if (await isGlobalInstall() && canRetry) {
+      writeState({ ...readState(), attempts: { [latest]: Date.now() } });
+      onStatus({ kind: "updating", version: latest });
+      if (await runGlobalInstall(latest)) {
+        onStatus({ kind: "updated", version: latest });
+        return;
+      }
+    }
+    onStatus({ kind: "manual", version: latest });
+  } catch {
+  }
+}
 function maybeSelfUpdate(notify = (l) => process.stderr.write(l + "\n")) {
   void (async () => {
     try {
@@ -7142,7 +7188,7 @@ async function pollDeviceLogin(apiUrl, deviceCode) {
     });
     const j = await res.json().catch(() => ({}));
     if (j.status === "approved" && j.api_key) {
-      return { status: "approved", apiKey: j.api_key, project: j.project?.name, user: j.user?.name || j.user?.email };
+      return { status: "approved", apiKey: j.api_key, project: j.project?.name, user: j.user?.name || j.user?.email, email: j.user?.email };
     }
     if (j.status === "expired" || j.status === "not_found") return { status: j.status };
     return { status: "pending" };
@@ -10162,11 +10208,11 @@ function AccountsPanel({
         if (abort.current) return;
         const res = await pollDeviceLogin(DEFAULT_API_URL2, start.deviceCode);
         if (res.status === "approved" && res.apiKey) {
-          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user });
-          setLogin({ phase: "done", msg: `\u2713 added ${res.project || res.user || "account"}` });
+          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
+          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
           refresh();
           setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2 });
-          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user });
+          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
           return;
         }
         if (res.status === "expired" || res.status === "not_found") {
@@ -10193,13 +10239,13 @@ function AccountsPanel({
         if (a) {
           setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
           onView?.(a);
-          setMsg({ text: `viewing ${a.project || a.user || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
+          setMsg({ text: `viewing ${a.email || a.user || a.project || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
         }
       } else if (input === "m") {
         const a = accounts[sel];
         if (a) {
           const ok = setActiveAccount({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          setMsg(ok ? { text: `\u2713 ${a.project || a.user || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
+          setMsg(ok ? { text: `\u2713 ${a.email || a.user || a.project || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
           refresh();
         }
       } else if (input === "n") beginLogin();
@@ -10242,10 +10288,10 @@ function AccountsPanel({
       const isActive = isActiveAccount(a.apiKey);
       return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
         /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(a.project || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(a.email || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
         isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
         isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.user && a.project ? truncate2(a.user, 24) : "" })
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate2(a.project, 24) : "" })
       ] }, a.apiKey);
     }) }),
     /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u25CF viewing = the account the dataroom is showing \xB7 ACTIVE = the key the guard hooks + logging use" }) })
@@ -10299,17 +10345,29 @@ function App() {
   const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
   const [focus, setFocus] = useState9("nav");
   const [help, setHelp] = useState9(false);
+  const [update2, setUpdate] = useState9({ kind: "idle" });
+  useEffect7(() => {
+    let alive = true;
+    const run12 = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
+    run12();
+    const t = setInterval(run12, 30 * 6e4);
+    return () => {
+      alive = false;
+      clearInterval(t);
+    };
+  }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  const acctLabel = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
   useEffect7(() => {
-    if (!cur || cur.project || cur.user) return;
+    if (!cur || cur.email) return;
     let alive = true;
     api.auth.me().then((r) => {
-      const project = r.project?.name || void 0;
-      const user = r.user?.name || r.user?.email || void 0;
-      if (!alive || !project && !user) return;
-      saveAccount({ ...cur, project, user });
+      const project = r.project?.name || cur.project;
+      const user = r.user?.name || cur.user;
+      const email = r.user?.email || void 0;
+      if (!alive || !project && !user && !email) return;
+      saveAccount({ ...cur, project, user, email });
       setAccounts(listAccounts());
     }).catch(() => {
     });
@@ -10368,7 +10426,8 @@ function App() {
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
       /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
@@ -10411,6 +10470,7 @@ var init_App = __esm({
     init_hooks();
     init_client();
     init_api_client();
+    init_self_update();
     SECTIONS = [
       { label: "Live", Panel: LiveHint },
       { label: "Policies", Panel: PoliciesPanel },
@@ -11806,7 +11866,7 @@ ${SHIM_END}`;
     }
   }
 }
-async function runGlobalInstall(opts = {}) {
+async function runGlobalInstall2(opts = {}) {
   const p = globalPaths();
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
@@ -11977,7 +12037,7 @@ async function main() {
         if (data?.project?.name) {
           console.log(`  ${c.dim}Project:${c.reset} ${c.cyan}${data.project.name}${c.reset}`);
         }
-        saveAccount({ apiKey, apiUrl, project: data?.project?.name, user: data?.user?.name || data?.user?.email });
+        saveAccount({ apiKey, apiUrl, project: data?.project?.name, user: data?.user?.name || data?.user?.email, email: data?.user?.email });
         break;
       }
       if (data?.status === "expired" || data?.status === "not_found") {
@@ -11997,7 +12057,7 @@ async function main() {
     return;
   }
   console.log("");
-  await runGlobalInstall({ apiKey, apiUrl });
+  await runGlobalInstall2({ apiKey, apiUrl });
   console.log("");
   console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   console.log("  \u2502  You are logged in and protected.               \u2502");
@@ -16540,9 +16600,10 @@ async function main5() {
   const subcommand = process.argv[2];
   if (IS_HUMAN_CLI) {
     const tuiBound = subcommand === "dataroom" || process.argv.length <= 2 && process.stdout.isTTY && process.stdin.isTTY;
-    const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
-    maybeSelfUpdate2(tuiBound ? () => {
-    } : void 0);
+    if (!tuiBound) {
+      const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
+      maybeSelfUpdate2();
+    }
   }
   if (process.argv.length <= 2) {
     if (process.stdout.isTTY && process.stdin.isTTY) {

package/dist/login.js

@@ -383,7 +383,7 @@ async function main() {
         if (data?.project?.name) {
           console.log(`  ${c.dim}Project:${c.reset} ${c.cyan}${data.project.name}${c.reset}`);
         }
-        saveAccount({ apiKey, apiUrl, project: data?.project?.name, user: data?.user?.name || data?.user?.email });
+        saveAccount({ apiKey, apiUrl, project: data?.project?.name, user: data?.user?.name || data?.user?.email, email: data?.user?.email });
         break;
       }
       if (data?.status === "expired" || data?.status === "not_found") {

package/dist/self-update.d.ts

@@ -1,4 +1,24 @@
 export declare function currentVersion(): string;
+/** What the dataroom shows about the updater. */
+export type UpdateStatus = {
+    kind: 'idle';
+} | {
+    kind: 'updating';
+    version: string;
+} | {
+    kind: 'updated';
+    version: string;
+} | {
+    kind: 'manual';
+    version: string;
+};
+/**
+ * The dataroom's updater (Claude Code-style): check the registry EVERY time the
+ * TUI opens (and periodically while it stays open), install the new version in
+ * the background, then tell the user to restart. `onStatus` drives the in-app
+ * status line; nothing is ever written to the terminal directly.
+ */
+export declare function tuiUpdateFlow(onStatus: (s: UpdateStatus) => void): Promise<void>;
 /**
  * Fire-and-forget startup hook. `notify` writes the human-facing one-liner —
  * callers pass a stderr writer so the notice never lands in piped stdout.

package/dist/tui/index.js

@@ -5,9 +5,9 @@ var __export = (target, all) => {
 };
 
 // src/tui/index.tsx
-import { appendFileSync, mkdirSync as mkdirSync4 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join6 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync5 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join7 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
@@ -462,7 +462,7 @@ async function pollDeviceLogin(apiUrl, deviceCode) {
     });
     const j = await res.json().catch(() => ({}));
     if (j.status === "approved" && j.api_key) {
-      return { status: "approved", apiKey: j.api_key, project: j.project?.name, user: j.user?.name || j.user?.email };
+      return { status: "approved", apiKey: j.api_key, project: j.project?.name, user: j.user?.name || j.user?.email, email: j.user?.email };
     }
     if (j.status === "expired" || j.status === "not_found") return { status: j.status };
     return { status: "pending" };
@@ -3333,11 +3333,11 @@ function AccountsPanel({
         if (abort.current) return;
         const res = await pollDeviceLogin(DEFAULT_API_URL, start.deviceCode);
         if (res.status === "approved" && res.apiKey) {
-          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user });
-          setLogin({ phase: "done", msg: `\u2713 added ${res.project || res.user || "account"}` });
+          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
+          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
           refresh();
           setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL });
-          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user });
+          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
           return;
         }
         if (res.status === "expired" || res.status === "not_found") {
@@ -3364,13 +3364,13 @@ function AccountsPanel({
         if (a) {
           setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
           onView?.(a);
-          setMsg({ text: `viewing ${a.project || a.user || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
+          setMsg({ text: `viewing ${a.email || a.user || a.project || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
         }
       } else if (input === "m") {
         const a = accounts[sel];
         if (a) {
           const ok = setActiveAccount({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          setMsg(ok ? { text: `\u2713 ${a.project || a.user || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
+          setMsg(ok ? { text: `\u2713 ${a.email || a.user || a.project || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
           refresh();
         }
       } else if (input === "n") beginLogin();
@@ -3413,16 +3413,137 @@ function AccountsPanel({
       const isActive = isActiveAccount(a.apiKey);
       return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
         /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.project || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.email || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
         isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
         isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.user && a.project ? truncate(a.user, 24) : "" })
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate(a.project, 24) : "" })
       ] }, a.apiKey);
     }) }),
     /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u25CF viewing = the account the dataroom is showing \xB7 ACTIVE = the key the guard hooks + logging use" }) })
   ] });
 }
 
+// src/self-update.ts
+import { execFile, spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir6 } from "os";
+import { dirname, join as join6 } from "path";
+import { fileURLToPath } from "url";
+var PKG = "@solongate/proxy";
+var CHECK_EVERY_MS = 30 * 60 * 1e3;
+var ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
+var STATE_FILE = join6(homedir6(), ".solongate", ".self-update.json");
+var LOG_FILE = join6(homedir6(), ".solongate", "self-update.log");
+function readState() {
+  try {
+    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(s) {
+  try {
+    mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+    writeFileSync5(STATE_FILE, JSON.stringify(s));
+  } catch {
+  }
+}
+function currentVersion() {
+  try {
+    const pkg = JSON.parse(readFileSync4(join6(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf-8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function newerThan(b, a) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) {
+    if ((pb[i] ?? 0) > (pa[i] ?? 0)) return true;
+    if ((pb[i] ?? 0) < (pa[i] ?? 0)) return false;
+  }
+  return false;
+}
+async function fetchLatest() {
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, { signal: AbortSignal.timeout(2e3) });
+    if (!res.ok) return null;
+    const j = await res.json();
+    return typeof j.version === "string" ? j.version : null;
+  } catch {
+    return null;
+  }
+}
+function npmGlobalRoot() {
+  return new Promise((resolve2) => {
+    try {
+      execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err, stdout) => {
+        resolve2(err ? null : stdout.trim() || null);
+      });
+    } catch {
+      resolve2(null);
+    }
+  });
+}
+async function isGlobalInstall() {
+  try {
+    const script = realpathSync(process.argv[1] ?? "");
+    if (!script) return false;
+    const root = await npmGlobalRoot();
+    if (!root) return false;
+    return script.startsWith(realpathSync(root));
+  } catch {
+    return false;
+  }
+}
+function runGlobalInstall(version) {
+  return new Promise((resolve2) => {
+    try {
+      mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+      execFile(
+        "npm",
+        ["install", "-g", `${PKG}@${version}`],
+        { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
+        (err, stdout, stderr) => {
+          try {
+            writeFileSync5(LOG_FILE, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
+${stdout}
+${stderr}
+`, { flag: "a" });
+          } catch {
+          }
+          resolve2(!err);
+        }
+      );
+    } catch {
+      resolve2(false);
+    }
+  });
+}
+async function tuiUpdateFlow(onStatus) {
+  try {
+    const current = currentVersion();
+    const latest = await fetchLatest();
+    const state = readState();
+    if (latest) writeState({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
+    if (!latest || !newerThan(latest, current)) return;
+    const attempts = readState().attempts ?? {};
+    const canRetry = Date.now() - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS;
+    if (await isGlobalInstall() && canRetry) {
+      writeState({ ...readState(), attempts: { [latest]: Date.now() } });
+      onStatus({ kind: "updating", version: latest });
+      if (await runGlobalInstall(latest)) {
+        onStatus({ kind: "updated", version: latest });
+        return;
+      }
+    }
+    onStatus({ kind: "manual", version: latest });
+  } catch {
+  }
+}
+
 // src/tui/App.tsx
 import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function LiveHint() {
@@ -3469,17 +3590,29 @@ function App() {
   const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
   const [focus, setFocus] = useState9("nav");
   const [help, setHelp] = useState9(false);
+  const [update2, setUpdate] = useState9({ kind: "idle" });
+  useEffect7(() => {
+    let alive = true;
+    const run = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
+    run();
+    const t = setInterval(run, 30 * 6e4);
+    return () => {
+      alive = false;
+      clearInterval(t);
+    };
+  }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.project || cur.user || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  const acctLabel = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
   useEffect7(() => {
-    if (!cur || cur.project || cur.user) return;
+    if (!cur || cur.email) return;
     let alive = true;
     api.auth.me().then((r) => {
-      const project = r.project?.name || void 0;
-      const user = r.user?.name || r.user?.email || void 0;
-      if (!alive || !project && !user) return;
-      saveAccount({ ...cur, project, user });
+      const project = r.project?.name || cur.project;
+      const user = r.user?.name || cur.user;
+      const email = r.user?.email || void 0;
+      if (!alive || !project && !user && !email) return;
+      saveAccount({ ...cur, project, user, email });
       setAccounts(listAccounts());
     }).catch(() => {
     });
@@ -3538,7 +3671,8 @@ function App() {
     /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
       /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" })
+      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
     /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
       /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
@@ -3584,11 +3718,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join6(homedir6(), ".solongate", "dataroom-debug.log");
+  const debugLog = join7(homedir7(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.47",
+  "version": "0.81.49",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {