@solongate/proxy 0.81.49 → 0.81.51

package/dist/index.js

@@ -6736,15 +6736,115 @@ var init_self_update = __esm({
   }
 });
 
-// src/tui/config.ts
-import { readFileSync as readFileSync5 } from "fs";
+// src/logs-server-daemon.ts
+var logs_server_daemon_exports = {};
+__export(logs_server_daemon_exports, {
+  LOGS_SERVER_PORT: () => LOGS_SERVER_PORT,
+  ensureLogsServerDaemon: () => ensureLogsServerDaemon,
+  logsServerStatus: () => logsServerStatus,
+  recordLogsServerStarted: () => recordLogsServerStarted,
+  startLogsServerDaemon: () => startLogsServerDaemon,
+  stopLogsServerDaemon: () => stopLogsServerDaemon
+});
+import { spawn as spawn2 } from "child_process";
+import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { dirname as dirname2, join as join5 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function readState2() {
+  try {
+    const s = JSON.parse(readFileSync5(STATE_FILE2, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState2(s) {
+  try {
+    mkdirSync4(DIR, { recursive: true });
+    writeFileSync4(STATE_FILE2, JSON.stringify(s));
+  } catch {
+  }
+}
+function pidAlive(pid) {
+  if (!pid || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e.code === "EPERM";
+  }
+}
+function logsServerStatus() {
+  const s = readState2();
+  const running = pidAlive(s.pid);
+  return { desired: s.desired === "on" ? "on" : "off", running, pid: running ? s.pid : void 0, port: s.port || LOGS_SERVER_PORT };
+}
+function recordLogsServerStarted(port) {
+  writeState2({ desired: "on", pid: process.pid, port, startedAt: Date.now() });
+}
+function startLogsServerDaemon() {
+  const cur = logsServerStatus();
+  if (cur.running) {
+    writeState2({ ...readState2(), desired: "on" });
+    return { ...cur, desired: "on" };
+  }
+  try {
+    mkdirSync4(DIR, { recursive: true });
+    const log6 = openSync2(LOG_FILE2, "a");
+    const cli = join5(dirname2(fileURLToPath2(import.meta.url)), "index.js");
+    const p = spawn2(process.execPath, [cli, "logs-server"], {
+      detached: true,
+      stdio: ["ignore", log6, log6],
+      windowsHide: true
+    });
+    p.on("error", () => {
+    });
+    p.unref();
+    writeState2({ desired: "on", pid: p.pid, port: LOGS_SERVER_PORT, startedAt: Date.now() });
+    return { desired: "on", running: true, pid: p.pid, port: LOGS_SERVER_PORT };
+  } catch {
+    return { ...cur, desired: "on", running: false };
+  }
+}
+function stopLogsServerDaemon() {
+  const s = readState2();
+  if (pidAlive(s.pid)) {
+    try {
+      process.kill(s.pid);
+    } catch {
+    }
+  }
+  writeState2({ desired: "off", port: s.port });
+  return { desired: "off", running: false, port: s.port || LOGS_SERVER_PORT };
+}
+function ensureLogsServerDaemon() {
+  try {
+    const s = logsServerStatus();
+    if (s.desired === "on" && !s.running) startLogsServerDaemon();
+  } catch {
+  }
+}
+var DIR, STATE_FILE2, LOG_FILE2, LOGS_SERVER_PORT;
+var init_logs_server_daemon = __esm({
+  "src/logs-server-daemon.ts"() {
+    "use strict";
+    DIR = join5(homedir3(), ".solongate");
+    STATE_FILE2 = join5(DIR, ".logs-server.json");
+    LOG_FILE2 = join5(DIR, "logs-server.log");
+    LOGS_SERVER_PORT = 8788;
+  }
+});
+
+// src/tui/config.ts
+import { readFileSync as readFileSync6 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 function loadConfig() {
   if (cached) return cached;
   const defaults = { notifications: true };
   try {
-    const raw = readFileSync5(join5(homedir3(), ".solongate", "tui-config.json"), "utf-8");
+    const raw = readFileSync6(join6(homedir4(), ".solongate", "tui-config.json"), "utf-8");
     const j = JSON.parse(raw);
     cached = {
       notifications: j.notifications !== false,
@@ -6870,14 +6970,14 @@ var init_components = __esm({
 });
 
 // src/tui/local-log.ts
-import { closeSync, openSync as openSync2, readFileSync as readFileSync6, readSync, statSync, writeFileSync as writeFileSync4 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join6 } from "path";
+import { closeSync, openSync as openSync3, readFileSync as readFileSync7, readSync, statSync, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join7 } from "path";
 function tailLines(file, maxBytes = 131072) {
   try {
     const size = statSync(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync2(file, "r");
+    const fd = openSync3(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync(fd, buf, 0, buf.length, start);
     closeSync(fd);
@@ -6890,7 +6990,7 @@ function tailLines(file, maxBytes = 131072) {
 }
 function deleteLocalEntry(at, tool, session) {
   try {
-    const lines = readFileSync6(LOCAL_LOG, "utf-8").split("\n");
+    const lines = readFileSync7(LOCAL_LOG, "utf-8").split("\n");
     let removed = 0;
     const kept = lines.filter((line) => {
       if (!line.trim()) return false;
@@ -6906,7 +7006,7 @@ function deleteLocalEntry(at, tool, session) {
       }
       return true;
     });
-    if (removed) writeFileSync4(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
+    if (removed) writeFileSync5(LOCAL_LOG, kept.length ? kept.join("\n") + "\n" : "");
     return removed;
   } catch {
     return 0;
@@ -6914,8 +7014,8 @@ function deleteLocalEntry(at, tool, session) {
 }
 function clearLocalLog() {
   try {
-    const n = readFileSync6(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
-    writeFileSync4(LOCAL_LOG, "");
+    const n = readFileSync7(LOCAL_LOG, "utf-8").split("\n").filter(Boolean).length;
+    writeFileSync5(LOCAL_LOG, "");
     return n;
   } catch {
     return 0;
@@ -6946,20 +7046,20 @@ var LOCAL_LOG, DLP_REASON, RL_REASON;
 var init_local_log = __esm({
   "src/tui/local-log.ts"() {
     "use strict";
-    LOCAL_LOG = join6(homedir4(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG = join7(homedir5(), ".solongate", "local-logs", "solongate-audit.jsonl");
     DLP_REASON = /security layer \(dlp\)/i;
     RL_REASON = /security layer \(rate limit\)|rate[- ]?limit(?:ed)?\b.*exceed|exceeded \d+ calls/i;
   }
 });
 
 // src/api-client/client.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4, existsSync as existsSync3 } from "fs";
-import { resolve as resolve3, join as join7 } from "path";
-import { homedir as homedir5 } from "os";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync3 } from "fs";
+import { resolve as resolve3, join as join8 } from "path";
+import { homedir as homedir6 } from "os";
 function listAccounts() {
   let list6 = [];
   try {
-    const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
+    const raw = JSON.parse(readFileSync8(accountsFile(), "utf-8"));
     if (Array.isArray(raw)) list6 = raw.filter((a) => a && typeof a.apiKey === "string");
   } catch {
   }
@@ -6973,7 +7073,7 @@ function saveAccount(acc) {
   try {
     const list6 = (() => {
       try {
-        const raw = JSON.parse(readFileSync7(accountsFile(), "utf-8"));
+        const raw = JSON.parse(readFileSync8(accountsFile(), "utf-8"));
         return Array.isArray(raw) ? raw.filter((a) => a && a.apiKey) : [];
       } catch {
         return [];
@@ -6981,8 +7081,8 @@ function saveAccount(acc) {
     })();
     const next = list6.filter((a) => a.apiKey !== acc.apiKey);
     next.unshift({ ...acc, addedAt: acc.addedAt ?? Date.now() });
-    mkdirSync4(join7(homedir5(), ".solongate"), { recursive: true });
-    writeFileSync5(accountsFile(), JSON.stringify(next, null, 2));
+    mkdirSync5(join8(homedir6(), ".solongate"), { recursive: true });
+    writeFileSync6(accountsFile(), JSON.stringify(next, null, 2));
   } catch {
   }
 }
@@ -6995,15 +7095,15 @@ function isActiveAccount(apiKey) {
 }
 function setActiveAccount(creds) {
   try {
-    const dir = join7(homedir5(), ".solongate");
-    mkdirSync4(dir, { recursive: true });
-    const p = join7(dir, ["cloud", "guard.json"].join("-"));
+    const dir = join8(homedir6(), ".solongate");
+    mkdirSync5(dir, { recursive: true });
+    const p = join8(dir, ["cloud", "guard.json"].join("-"));
     let existing = {};
     try {
-      existing = JSON.parse(readFileSync7(p, "utf-8"));
+      existing = JSON.parse(readFileSync8(p, "utf-8"));
     } catch {
     }
-    writeFileSync5(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
+    writeFileSync6(p, JSON.stringify({ ...existing, apiKey: creds.apiKey, apiUrl: creds.apiUrl }, null, 2));
     cached2 = null;
     return true;
   } catch {
@@ -7012,9 +7112,9 @@ function setActiveAccount(creds) {
 }
 function loginCredentialFile() {
   try {
-    const p = join7(homedir5(), ".solongate", "cloud-guard.json");
+    const p = join8(homedir6(), ".solongate", "cloud-guard.json");
     if (!existsSync3(p)) return {};
-    const c2 = JSON.parse(readFileSync7(p, "utf-8"));
+    const c2 = JSON.parse(readFileSync8(p, "utf-8"));
     return c2 && typeof c2 === "object" ? c2 : {};
   } catch {
     return {};
@@ -7024,7 +7124,7 @@ function dotenvApiKey() {
   try {
     const envPath = resolve3(".env");
     if (!existsSync3(envPath)) return void 0;
-    for (const line of readFileSync7(envPath, "utf-8").split("\n")) {
+    for (const line of readFileSync8(envPath, "utf-8").split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
       const eq = trimmed.indexOf("=");
@@ -7126,7 +7226,7 @@ var init_client = __esm({
   "src/api-client/client.ts"() {
     "use strict";
     DEFAULT_API_URL2 = "https://api.solongate.com";
-    accountsFile = () => join7(homedir5(), ".solongate", "accounts.json");
+    accountsFile = () => join8(homedir6(), ".solongate", "accounts.json");
     viewOverride = null;
     ApiError = class extends Error {
       status;
@@ -7156,12 +7256,12 @@ var init_types = __esm({
 });
 
 // src/api-client/device-login.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 function openBrowser(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn3(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -7502,24 +7602,24 @@ var init_api_client = __esm({
 });
 
 // src/tui/notify.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 function desktopNotify(title, msg) {
   try {
     if (process.platform === "linux") {
-      const p = spawn3("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
+      const p = spawn4("notify-send", ["-a", "SolonGate", title, msg], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "win32") {
       const q = (s) => s.replace(/'/g, "''");
       const ps = `Add-Type -AssemblyName System.Windows.Forms;Add-Type -AssemblyName System.Drawing;$n=New-Object System.Windows.Forms.NotifyIcon;$n.Icon=[System.Drawing.SystemIcons]::Information;$n.Visible=$true;$n.ShowBalloonTip(6000,'${q(title)}','${q(msg)}',[System.Windows.Forms.ToolTipIcon]::Warning);Start-Sleep -Milliseconds 6500;$n.Dispose()`;
-      const p = spawn3("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
+      const p = spawn4("powershell", ["-NoProfile", "-NonInteractive", "-Command", ps], { stdio: "ignore", detached: true, windowsHide: true });
       p.on("error", () => {
       });
       p.unref();
     } else if (process.platform === "darwin") {
       const esc = (s) => s.replace(/"/g, '\\"');
-      const p = spawn3("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
+      const p = spawn4("osascript", ["-e", `display notification "${esc(msg)}" with title "${esc(title)}"`], { stdio: "ignore", detached: true });
       p.on("error", () => {
       });
       p.unref();
@@ -7605,9 +7705,9 @@ var init_hooks = __esm({
 // src/tui/panels/Live.tsx
 import { Box as Box2, Text as Text2, useInput } from "ink";
 import TextInput from "ink-text-input";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join9 } from "path";
 import { useCallback as useCallback2, useEffect as useEffect2, useRef as useRef2, useState as useState2 } from "react";
 import { Fragment as Fragment2, jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function extractTarget(detail) {
@@ -8198,10 +8298,10 @@ function LivePanel({ active: active2 }) {
       else if (input === "x") toggleSignal("dlp");
       else if (input === "r") toggleSignal("ratelimit");
       else if (input === "e") {
-        const file = join8(homedir6(), ".solongate", "live-export.jsonl");
+        const file = join9(homedir7(), ".solongate", "live-export.jsonl");
         try {
-          mkdirSync5(join8(homedir6(), ".solongate"), { recursive: true });
-          writeFileSync6(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
+          mkdirSync6(join9(homedir7(), ".solongate"), { recursive: true });
+          writeFileSync7(file, visibleDesc.map((x) => JSON.stringify(x)).join("\n") + "\n");
           setActionMsg({ text: `\u2713 exported ${visibleDesc.length} lines \u2192 ${file}`, level: "ok", until: Date.now() + 6e3 });
         } catch (err2) {
           setActionMsg({ text: "\u2717 export failed: " + (err2 instanceof Error ? err2.message : String(err2)), level: "bad", until: Date.now() + 6e3 });
@@ -8611,7 +8711,7 @@ var init_Live = __esm({
     SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
     BG = "#12234f";
     DIM_FLOOR = "#233457";
-    RING = join8(process.cwd(), ".solongate", ".eval-ring.jsonl");
+    RING = join9(process.cwd(), ".solongate", ".eval-ring.jsonl");
     hhmmss = (ts) => {
       const d = new Date(ts);
       return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
@@ -9301,9 +9401,9 @@ var init_Dlp = __esm({
 // src/tui/panels/Audit.tsx
 import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput4 from "ink-text-input";
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join9 } from "path";
+import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join10 } from "path";
 import { useState as useState6 } from "react";
 import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 function loadLocalRows() {
@@ -9457,16 +9557,16 @@ function AuditPanel({ active: active2, focused }) {
   const doExport = (kind) => {
     setMsg({ text: "exporting\u2026", level: "ok" });
     const run12 = async () => {
-      const dir = join9(homedir7(), ".solongate");
-      const file = join9(dir, `audit-export-${source}.jsonl`);
+      const dir = join10(homedir8(), ".solongate");
+      const file = join10(dir, `audit-export-${source}.jsonl`);
       let rows2;
       if (kind === "page") rows2 = pageRows;
       else if (source === "cloud") {
         const r = await api.audit.list({ ...query, limit: 1e4, offset: 0 });
         rows2 = r.entries.map(cloudRow).sort((a, b) => b.at - a.at);
       } else rows2 = localFiltered;
-      mkdirSync6(dir, { recursive: true });
-      writeFileSync7(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
+      mkdirSync7(dir, { recursive: true });
+      writeFileSync8(file, rows2.map((x) => JSON.stringify(x)).join("\n") + (rows2.length ? "\n" : ""));
       return { n: rows2.length, file };
     };
     run12().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
@@ -9956,8 +10056,8 @@ var init_Audit = __esm({
 // src/tui/panels/Settings.tsx
 import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
 import TextInput5 from "ink-text-input";
-import { useState as useState7 } from "react";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
+import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 function alertBodyFor(channel) {
   const c2 = channel.trim();
   const base = { name: "dataroom alert", threshold: 5, windowSeconds: 60, signal: "any" };
@@ -9965,7 +10065,12 @@ function alertBodyFor(channel) {
   if (c2.includes("@")) return { ...base, emails: [c2] };
   return { ...base, telegram: [c2] };
 }
-function SettingsPanel({ active: active2, focused }) {
+function SettingsPanel({
+  active: active2,
+  focused,
+  viewApiKey,
+  onView
+}) {
   void active2;
   const { cols, rows } = usePanelSize();
   const [sel, setSel] = useState7(0);
@@ -9974,24 +10079,46 @@ function SettingsPanel({ active: active2, focused }) {
   const [confirmDel, setConfirmDel] = useState7(null);
   const [msg, setMsg] = useState7(null);
   const [busy, setBusy] = useState7(false);
-  const localQ = useLoader(() => api.settings.getLocalLogs());
-  const whQ = useLoader(() => api.settings.getWebhooks());
-  const alertQ = useLoader(() => api.settings.getAlerts());
+  const [accounts, setAccounts] = useState7(() => listAccounts());
+  const [login, setLogin] = useState7(null);
+  const [tick, setTick] = useState7(0);
+  const abort = useRef3(false);
+  const refreshAccounts = () => setAccounts(listAccounts());
+  const locked = accounts.length === 0;
+  const [srv, setSrv] = useState7(() => logsServerStatus());
+  useEffect6(() => {
+    const t = setInterval(() => setSrv(logsServerStatus()), 3e3);
+    return () => clearInterval(t);
+  }, []);
+  useEffect6(() => {
+    if (!login || login.phase === "done" || login.phase === "error") return;
+    const t = setInterval(() => setTick((n) => n + 1), 120);
+    return () => clearInterval(t);
+  }, [login]);
+  const localQ = useLoader(() => listAccounts().length ? api.settings.getLocalLogs() : Promise.resolve(null));
+  const whQ = useLoader(() => listAccounts().length ? api.settings.getWebhooks() : Promise.resolve(null));
+  const alertQ = useLoader(() => listAccounts().length ? api.settings.getAlerts() : Promise.resolve(null));
   const local = localQ.data;
   const webhooks = whQ.data?.webhooks ?? [];
   const alerts = alertQ.data?.rules ?? [];
   const rowsAll = [
-    { kind: "ll-enabled" },
-    { kind: "ll-path" },
-    ...webhooks.map((wh) => ({ kind: "wh", wh })),
-    { kind: "wh-add" },
-    ...alerts.map((rule) => ({ kind: "alert", rule })),
-    { kind: "alert-add" }
+    ...accounts.map((acc) => ({ kind: "acct", acc })),
+    { kind: "acct-add" },
+    ...locked ? [] : [
+      { kind: "ll-enabled" },
+      { kind: "ll-path" },
+      { kind: "ll-server" },
+      ...webhooks.map((wh) => ({ kind: "wh", wh })),
+      { kind: "wh-add" },
+      ...alerts.map((rule) => ({ kind: "alert", rule })),
+      { kind: "alert-add" }
+    ]
   ];
   const selClamped = Math.min(sel, rowsAll.length - 1);
   const cur = rowsAll[selClamped];
-  const keyOf = (r) => r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
+  const keyOf = (r) => r.kind === "acct" ? "acct:" + r.acc.apiKey : r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
   const reloadAll = () => {
+    refreshAccounts();
     localQ.reload();
     whQ.reload();
     alertQ.reload();
@@ -10005,8 +10132,48 @@ function SettingsPanel({ active: active2, focused }) {
       reload();
     }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" })).finally(() => setBusy(false));
   };
+  const beginLogin = () => {
+    if (login && (login.phase === "starting" || login.phase === "waiting")) return;
+    abort.current = false;
+    setLogin({ phase: "starting" });
+    void (async () => {
+      let start2;
+      try {
+        start2 = await startDeviceLogin(DEFAULT_API_URL2);
+      } catch (e) {
+        setLogin({ phase: "error", msg: "could not reach SolonGate: " + (e instanceof Error ? e.message : String(e)) });
+        return;
+      }
+      setLogin({ phase: "waiting", url: start2.verifyUrl });
+      openBrowser(start2.verifyUrl);
+      while (Date.now() < start2.expiresAt && !abort.current) {
+        await new Promise((r) => setTimeout(r, start2.intervalMs));
+        if (abort.current) return;
+        const res = await pollDeviceLogin(DEFAULT_API_URL2, start2.deviceCode);
+        if (res.status === "approved" && res.apiKey) {
+          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
+          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
+          setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2 });
+          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
+          reloadAll();
+          return;
+        }
+        if (res.status === "expired" || res.status === "not_found") {
+          setLogin({ phase: "error", msg: "code expired \u2014 press n to retry" });
+          return;
+        }
+      }
+      if (!abort.current) setLogin({ phase: "error", msg: "timed out \u2014 press n to retry" });
+    })();
+  };
   const activate = (r) => {
-    if (r.kind === "ll-enabled") {
+    if (r.kind === "acct") {
+      setViewCredentials({ apiKey: r.acc.apiKey, apiUrl: r.acc.apiUrl });
+      onView?.(r.acc);
+      setMsg({ text: `viewing ${acctLabel(r.acc)}`, level: "ok" });
+    } else if (r.kind === "acct-add") {
+      beginLogin();
+    } else if (r.kind === "ll-enabled") {
       if (!local) return;
       if (!local.enabled && !local.path.trim()) {
         setMsg({ text: "set a path first (\u2193 then enter)", level: "bad" });
@@ -10016,6 +10183,12 @@ function SettingsPanel({ active: active2, focused }) {
     } else if (r.kind === "ll-path") {
       setInput(local?.path ?? "");
       setEditing("path");
+    } else if (r.kind === "ll-server") {
+      const next = srv.running ? stopLogsServerDaemon() : startLogsServerDaemon();
+      setSrv(next);
+      setMsg(
+        next.running ? { text: `\u2713 dashboard link running on 127.0.0.1:${next.port} \u2014 keeps running after you close the dataroom`, level: "ok" } : { text: "\u2713 dashboard link stopped (disabled until you start it again)", level: "ok" }
+      );
     } else if (r.kind === "wh") {
       run12(r.wh.enabled ? "webhook disabled" : "webhook enabled", () => api.settings.updateWebhook(r.wh.id, { enabled: !r.wh.enabled }), whQ.reload);
     } else if (r.kind === "wh-add") {
@@ -10045,6 +10218,13 @@ function SettingsPanel({ active: active2, focused }) {
   };
   useInput6(
     (inp, key) => {
+      if (login && (login.phase === "starting" || login.phase === "waiting")) {
+        if (key.escape) {
+          abort.current = true;
+          setLogin(null);
+        }
+        return;
+      }
       setMsg(null);
       if (key.upArrow) {
         setSel((n) => Math.max(0, n - 1));
@@ -10053,6 +10233,11 @@ function SettingsPanel({ active: active2, focused }) {
         setSel((n) => Math.min(rowsAll.length - 1, n + 1));
         setConfirmDel(null);
       } else if (key.return || inp === " ") activate(cur);
+      else if (inp === "m" && cur.kind === "acct") {
+        const ok = setActiveAccount({ apiKey: cur.acc.apiKey, apiUrl: cur.acc.apiUrl });
+        setMsg(ok ? { text: `\u2713 ${acctLabel(cur.acc)} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
+        refreshAccounts();
+      } else if (inp === "n") beginLogin();
       else if (inp === "e" && cur.kind === "wh") {
         const next = EVENTS[(EVENTS.indexOf(cur.wh.events) + 1) % EVENTS.length];
         run12(`webhook events \u2192 ${next}`, () => api.settings.updateWebhook(cur.wh.id, { events: next }), whQ.reload);
@@ -10079,247 +10264,170 @@ function SettingsPanel({ active: active2, focused }) {
     },
     { isActive: focused && !editing }
   );
-  const loading = localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data;
-  const error = localQ.error ?? whQ.error ?? alertQ.error;
+  const spin = SPIN2[tick % SPIN2.length];
+  if (login && (login.phase === "starting" || login.phase === "waiting")) {
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accentBright, children: "Add an account" }),
+      login.phase === "starting" ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+        spin,
+        " starting device pairing\u2026"
+      ] }) : /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
+        /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
+            spin,
+            " waiting for authorization\u2026 "
+          ] }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "esc to cancel" })
+        ] })
+      ] })
+    ] });
+  }
+  const loading = !locked && (localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data);
+  const error = locked ? null : localQ.error ?? whQ.error ?? alertQ.error;
   const mark = (r) => keyOf(r) === keyOf(cur) && focused ? "\u25B8 " : "  ";
   const onOff = (on) => on ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "off" });
   const chanOf = (rule) => [...(rule.slackUrls ?? []).map((u) => "slack " + u), ...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
-  const listBudget = Math.max(4, rows - 8);
+  const listBudget = Math.max(4, rows - 10);
   const start = Math.min(Math.max(0, selClamped - Math.floor(listBudget / 2)), Math.max(0, rowsAll.length - listBudget));
   const inWindow = (r) => {
     const i = rowsAll.findIndex((x) => keyOf(x) === keyOf(r));
     return i >= start && i < start + listBudget;
   };
   return /* @__PURE__ */ jsx7(DataView, { loading, error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter/space toggle-edit-add \xB7 e events \xB7 d delete \xB7  r refresh" : "press \u2192 to configure" }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter view-toggle-edit \xB7 m make active \xB7 n add account \xB7 e events \xB7 d delete \xB7 r refresh" : "press \u2192 to configure" }),
     editing ? /* @__PURE__ */ jsxs7(Box7, { children: [
       /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: editing === "path" ? "local log path: " : editing === "wh-url" ? "webhook url: " : "channel (slack url / email / telegram id): " }),
       /* @__PURE__ */ jsx7(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
-    ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
-    inWindow(rowsAll[0]) || inWindow(rowsAll[1]) ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "LOCAL LOGS ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
-      ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[0]) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "enabled ".padEnd(10) }),
-        onOff(!!local?.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   enter toggles" })
-      ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[1]) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "path ".padEnd(10) }),
-        local?.path ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(local.path, cols - 14) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "not set \u2014 enter to edit" })
-      ] })
-    ] }) : null,
+    ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx7(Text7, { color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
     /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
       /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "WEBHOOKS ",
+        "ACCOUNTS ",
         /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "\u2014 POST every matching event to your endpoint (",
-          webhooks.length,
-          ")"
+          "\u2014 logged in on this device (",
+          accounts.length,
+          ") \xB7 \u25CF viewing = shown here \xB7 ACTIVE = key the guard uses"
         ] })
       ] }),
-      webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
-        onOff(wh.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(wh.url, cols - 16) })
-      ] }, wh.id)),
-      inWindow(rowsAll.find((r) => r.kind === "wh-add")) ? /* @__PURE__ */ jsxs7(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add webhook (enter)" })
+      accounts.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  no accounts yet \u2014 " }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: "n" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " (or enter) logs in, pairs this device and unlocks the dataroom" })
+      ] }) : null,
+      accounts.filter((acc) => inWindow({ kind: "acct", acc })).map((a) => {
+        const isView = viewApiKey ? a.apiKey === viewApiKey : accounts[0]?.apiKey === a.apiKey;
+        const isActive = isActiveAccount(a.apiKey);
+        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "acct:" + a.apiKey && focused ? theme.accentBright : theme.dim, children: mark({ kind: "acct", acc: a }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(acctLabel(a), 30).padEnd(31) }),
+          isView ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "          " }),
+          isActive ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "       " }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: a.project ? truncate2(a.project, 24) : "" })
+        ] }, a.apiKey);
+      }),
+      inWindow({ kind: "acct-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "acct-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "acct-add" }) }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
       ] }) : null
     ] }),
-    /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "ALERTS ",
-        /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "\u2014 notify on a signal spike (",
-          alerts.length,
-          ")"
+    locked ? null : /* @__PURE__ */ jsxs7(Fragment5, { children: [
+      inWindow({ kind: "ll-enabled" }) || inWindow({ kind: "ll-path" }) || inWindow({ kind: "ll-server" }) ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "LOCAL LOGS ",
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-enabled" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "enabled ".padEnd(10) }),
+          onOff(!!local?.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   enter toggles" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-path" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "path ".padEnd(10) }),
+          local?.path ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(local.path, cols - 14) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "not set \u2014 enter to edit" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-server" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-server" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "dashboard".padEnd(10) }),
+          srv.running ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "stopped" }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: srv.running ? "   serves local logs to the dashboard \xB7 survives closing the dataroom \xB7 enter stops" : "   enter starts the local-logs link for the dashboard" })
         ] })
+      ] }) : null,
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "WEBHOOKS ",
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+            "\u2014 POST every matching event to your endpoint (",
+            webhooks.length,
+            ")"
+          ] })
+        ] }),
+        webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
+          onOff(wh.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(wh.url, cols - 16) })
+        ] }, wh.id)),
+        inWindow({ kind: "wh-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+          /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add webhook (enter)" })
+        ] }) : null
       ] }),
-      alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
-        onOff(rule.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
-        /* @__PURE__ */ jsx7(Text7, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(chanOf(rule), cols - 26) })
-      ] }, rule.id)),
-      inWindow(rowsAll[rowsAll.length - 1]) ? /* @__PURE__ */ jsxs7(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
-      ] }) : null
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "ALERTS ",
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+            "\u2014 notify on a signal spike (",
+            alerts.length,
+            ")"
+          ] })
+        ] }),
+        alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
+          onOff(rule.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
+          /* @__PURE__ */ jsx7(Text7, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate2(chanOf(rule), cols - 26) })
+        ] }, rule.id)),
+        inWindow({ kind: "alert-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+          /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
+        ] }) : null
+      ] })
     ] })
   ] }) });
 }
-var EVENTS;
+var EVENTS, SPIN2, acctLabel;
 var init_Settings = __esm({
   "src/tui/panels/Settings.tsx"() {
     "use strict";
     init_api_client();
+    init_client();
+    init_device_login();
+    init_logs_server_daemon();
     init_components();
     init_hooks();
     init_theme();
     EVENTS = ["denials", "allowed", "all"];
-  }
-});
-
-// src/tui/panels/Accounts.tsx
-import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
-import { useEffect as useEffect6, useRef as useRef3, useState as useState8 } from "react";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-function AccountsPanel({
-  focused,
-  viewApiKey,
-  onView
-}) {
-  const [accounts, setAccounts] = useState8(() => listAccounts());
-  const [sel, setSel] = useState8(0);
-  const [msg, setMsg] = useState8(null);
-  const [login, setLogin] = useState8(null);
-  const [tick, setTick] = useState8(0);
-  const abort = useRef3(false);
-  const refresh = () => setAccounts(listAccounts());
-  useEffect6(() => {
-    if (!login || login.phase === "done" || login.phase === "error") return;
-    const t = setInterval(() => setTick((n) => n + 1), 120);
-    return () => clearInterval(t);
-  }, [login]);
-  const beginLogin = () => {
-    if (login && (login.phase === "starting" || login.phase === "waiting")) return;
-    abort.current = false;
-    setLogin({ phase: "starting" });
-    void (async () => {
-      let start;
-      try {
-        start = await startDeviceLogin(DEFAULT_API_URL2);
-      } catch (e) {
-        setLogin({ phase: "error", msg: "could not reach SolonGate: " + (e instanceof Error ? e.message : String(e)) });
-        return;
-      }
-      setLogin({ phase: "waiting", url: start.verifyUrl });
-      openBrowser(start.verifyUrl);
-      while (Date.now() < start.expiresAt && !abort.current) {
-        await new Promise((r) => setTimeout(r, start.intervalMs));
-        if (abort.current) return;
-        const res = await pollDeviceLogin(DEFAULT_API_URL2, start.deviceCode);
-        if (res.status === "approved" && res.apiKey) {
-          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
-          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
-          refresh();
-          setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2 });
-          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL2, project: res.project, user: res.user, email: res.email });
-          return;
-        }
-        if (res.status === "expired" || res.status === "not_found") {
-          setLogin({ phase: "error", msg: "code expired \u2014 press n to retry" });
-          return;
-        }
-      }
-      if (!abort.current) setLogin({ phase: "error", msg: "timed out \u2014 press n to retry" });
-    })();
-  };
-  useInput7(
-    (input, key) => {
-      if (login && (login.phase === "starting" || login.phase === "waiting")) {
-        if (key.escape) {
-          abort.current = true;
-          setLogin(null);
-        }
-        return;
-      }
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      else if (key.downArrow) setSel((n) => Math.min(accounts.length - 1, n + 1));
-      else if (key.return) {
-        const a = accounts[sel];
-        if (a) {
-          setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          onView?.(a);
-          setMsg({ text: `viewing ${a.email || a.user || a.project || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
-        }
-      } else if (input === "m") {
-        const a = accounts[sel];
-        if (a) {
-          const ok = setActiveAccount({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          setMsg(ok ? { text: `\u2713 ${a.email || a.user || a.project || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
-          refresh();
-        }
-      } else if (input === "n") beginLogin();
-      else if (input === "r") refresh();
-    },
-    { isActive: focused }
-  );
-  const spin = SPIN2[tick % SPIN2.length];
-  if (login && (login.phase === "starting" || login.phase === "waiting")) {
-    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "Add an account" }),
-      login.phase === "starting" ? /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
-        spin,
-        " starting device pairing\u2026"
-      ] }) : /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
-        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
-          /* @__PURE__ */ jsxs8(Text8, { color: theme.warn, children: [
-            spin,
-            " waiting for authorization\u2026 "
-          ] }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "esc to cancel" })
-        ] })
-      ] })
-    ] });
-  }
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: focused ? "\u2191\u2193 select \xB7 enter view \xB7 m make active \xB7 n add account \xB7 r refresh" : "press \u2192 to manage accounts" }),
-    msg ? /* @__PURE__ */ jsx8(Text8, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate2(msg.text, 70) }) : login?.msg ? /* @__PURE__ */ jsx8(Text8, { color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: accounts.length === 0 ? /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "No accounts on this device yet." }),
-      /* @__PURE__ */ jsxs8(Text8, { children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "n" }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " to log in \u2014 pairs this device and starts protecting your Claude Code sessions." })
-      ] })
-    ] }) : accounts.map((a, i) => {
-      const isSel = i === sel && focused;
-      const isView = viewApiKey ? a.apiKey === viewApiKey : i === 0;
-      const isActive = isActiveAccount(a.apiKey);
-      return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate2(a.email || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
-        isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
-        isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate2(a.project, 24) : "" })
-      ] }, a.apiKey);
-    }) }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u25CF viewing = the account the dataroom is showing \xB7 ACTIVE = the key the guard hooks + logging use" }) })
-  ] });
-}
-var SPIN2;
-var init_Accounts = __esm({
-  "src/tui/panels/Accounts.tsx"() {
-    "use strict";
-    init_client();
-    init_device_login();
-    init_theme();
     SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+    acctLabel = (a) => a.email || a.user || "account \u2026" + a.apiKey.slice(-4);
   }
 });
 
 // src/tui/App.tsx
-import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
-import { useEffect as useEffect7, useState as useState9 } from "react";
-import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { Box as Box8, Text as Text8, useApp, useInput as useInput7 } from "ink";
+import { useEffect as useEffect7, useState as useState8 } from "react";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
       "press ",
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
@@ -10327,25 +10435,25 @@ function LiveHint() {
 function Banner({ cols }) {
   const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 function App() {
   const { exit } = useApp();
-  const [accounts, setAccounts] = useState9(() => listAccounts());
-  const [viewKey, setViewKey] = useState9(() => accounts[0]?.apiKey);
-  const [viewNonce, setViewNonce] = useState9(0);
-  const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
-  const [focus, setFocus] = useState9("nav");
-  const [help, setHelp] = useState9(false);
-  const [update2, setUpdate] = useState9({ kind: "idle" });
+  const [accounts, setAccounts] = useState8(() => listAccounts());
+  const [viewKey, setViewKey] = useState8(() => accounts[0]?.apiKey);
+  const [viewNonce, setViewNonce] = useState8(0);
+  const [section, setSection] = useState8(accounts.length === 0 ? SETTINGS_SECTION : 0);
+  const [focus, setFocus] = useState8("nav");
+  const [help, setHelp] = useState8(false);
+  const [update2, setUpdate] = useState8({ kind: "idle" });
   useEffect7(() => {
     let alive = true;
     const run12 = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
@@ -10358,7 +10466,7 @@ function App() {
   }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  const acctLabel2 = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
   useEffect7(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -10386,8 +10494,8 @@ function App() {
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
   const locked = accounts.length === 0;
-  const effectiveSection = locked ? ACCOUNTS_SECTION : section;
-  useInput8((input, key) => {
+  const effectiveSection = locked ? SETTINGS_SECTION : section;
+  useInput7((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -10415,45 +10523,45 @@ function App() {
   });
   const { cols, rows } = useTermSize();
   const current = SECTIONS[effectiveSection];
-  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
+  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
+    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Accounts" ? /* @__PURE__ */ jsx9(AccountsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Banner, { cols }),
-    /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
-      /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
-      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Banner, { cols }),
+    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "account: " }),
+      /* @__PURE__ */ jsx8(Text8, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
+      locked ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
-    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
         const isCur = i === effectiveSection;
-        const disabled = locked && s.label !== "Accounts";
-        return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+        const disabled = locked && s.label !== "Settings";
+        return /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
       }) }),
-      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
+      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
     ] }, viewNonce),
-    /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Accounts"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: locked ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
   ] });
 }
-var SECTIONS, BANNER_HEX, ACCOUNTS_SECTION, HELP;
+var SECTIONS, BANNER_HEX, SETTINGS_SECTION, HELP;
 var init_App = __esm({
   "src/tui/App.tsx"() {
     "use strict";
@@ -10466,7 +10574,6 @@ var init_App = __esm({
     init_Dlp();
     init_Audit();
     init_Settings();
-    init_Accounts();
     init_hooks();
     init_client();
     init_api_client();
@@ -10477,11 +10584,10 @@ var init_App = __esm({
       { label: "Rate Limit", Panel: RateLimitPanel },
       { label: "DLP", Panel: DlpPanel },
       { label: "Audit", Panel: AuditPanel },
-      { label: "Settings", Panel: SettingsPanel },
-      { label: "Accounts", Panel: AccountsPanel }
+      { label: "Settings", Panel: SettingsPanel }
     ];
     BANNER_HEX = ["white", "white", "white", "white", "white", "white"];
-    ACCOUNTS_SECTION = SECTIONS.findIndex((s) => s.label === "Accounts");
+    SETTINGS_SECTION = SECTIONS.findIndex((s) => s.label === "Settings");
     HELP = [
       ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
       ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
@@ -10499,11 +10605,11 @@ var tui_exports = {};
 __export(tui_exports, {
   launchTui: () => launchTui
 });
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync7 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join10 } from "path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync8 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join11 } from "path";
 import { render } from "ink";
-import { jsx as jsx10 } from "react/jsx-runtime";
+import { jsx as jsx9 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -10512,11 +10618,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join10(homedir8(), ".solongate", "dataroom-debug.log");
+  const debugLog = join11(homedir9(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync7(join10(homedir8(), ".solongate"), { recursive: true });
+      mkdirSync8(join11(homedir9(), ".solongate"), { recursive: true });
       appendFileSync2(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {
@@ -10528,7 +10634,7 @@ async function launchTui() {
   console.info = toFile("info");
   console.debug = toFile("debug");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}), { patchConsole: false });
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}), { patchConsole: false });
     await waitUntilExit();
   } finally {
     Object.assign(console, saved);
@@ -10640,7 +10746,7 @@ var init_args = __esm({
 });
 
 // src/commands/policy.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 async function run(argv) {
   const { positionals, flags } = parse(argv);
   const sub = positionals[0];
@@ -10815,7 +10921,7 @@ function printRules(rules) {
 }
 async function resolveRules(target) {
   if (target.endsWith(".json")) {
-    const parsed = JSON.parse(readFileSync8(target, "utf-8"));
+    const parsed = JSON.parse(readFileSync9(target, "utf-8"));
     return parsed.rules ?? [];
   }
   const p = await api.policies.get(target);
@@ -11231,8 +11337,8 @@ var init_agents2 = __esm({
 
 // src/commands/doctor.ts
 import { existsSync as existsSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir9 } from "os";
-import { join as join11 } from "path";
+import { homedir as homedir10 } from "os";
+import { join as join12 } from "path";
 async function run6(argv) {
   const { flags } = parse(argv);
   const json = flagBool(flags, "json");
@@ -11292,19 +11398,19 @@ var init_doctor = __esm({
     init_api_client();
     init_format();
     init_args();
-    LOCAL_LOG2 = join11(homedir9(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG2 = join12(homedir10(), ".solongate", "local-logs", "solongate-audit.jsonl");
   }
 });
 
 // src/commands/watch.ts
-import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync3, readSync as readSync2, statSync as statSync3 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join12 } from "path";
+import { closeSync as closeSync2, existsSync as existsSync5, openSync as openSync4, readSync as readSync2, statSync as statSync3 } from "fs";
+import { homedir as homedir11 } from "os";
+import { join as join13 } from "path";
 function tailLocal(file, maxBytes = 131072) {
   try {
     const size = statSync3(file).size;
     const start = Math.max(0, size - maxBytes);
-    const fd = openSync3(file, "r");
+    const fd = openSync4(file, "r");
     const buf = Buffer.alloc(size - start);
     readSync2(fd, buf, 0, buf.length, start);
     closeSync2(fd);
@@ -11406,7 +11512,7 @@ var init_watch = __esm({
     init_cli_utils();
     init_args();
     init_format();
-    LOCAL_LOG3 = join12(homedir10(), ".solongate", "local-logs", "solongate-audit.jsonl");
+    LOCAL_LOG3 = join13(homedir11(), ".solongate", "local-logs", "solongate-audit.jsonl");
     trunc = (s, n) => s.length <= n ? s : s.slice(0, n - 1) + "\u2026";
     time = (ms) => new Date(ms).toTimeString().slice(0, 8);
   }
@@ -11697,10 +11803,10 @@ var init_commands = __esm({
 });
 
 // src/global-install.ts
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, existsSync as existsSync6, mkdirSync as mkdirSync8 } from "fs";
-import { resolve as resolve4, join as join13, dirname as dirname2 } from "path";
-import { homedir as homedir11 } from "os";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync9, existsSync as existsSync6, mkdirSync as mkdirSync9 } from "fs";
+import { resolve as resolve4, join as join14, dirname as dirname3 } from "path";
+import { homedir as homedir12 } from "os";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { createInterface } from "readline";
 import { execFileSync as execFileSync2 } from "child_process";
 function lockFile(file) {
@@ -11762,10 +11868,10 @@ function unlockFile(file) {
 function protectedTargets() {
   const p = globalPaths();
   return [
-    join13(p.hooksDir, "guard.mjs"),
-    join13(p.hooksDir, "audit.mjs"),
-    join13(p.hooksDir, "stop.mjs"),
-    join13(p.hooksDir, "shield.mjs"),
+    join14(p.hooksDir, "guard.mjs"),
+    join14(p.hooksDir, "audit.mjs"),
+    join14(p.hooksDir, "stop.mjs"),
+    join14(p.hooksDir, "shield.mjs"),
     p.configPath,
     p.settingsPath
   ];
@@ -11777,26 +11883,26 @@ function unlockProtected() {
   for (const f of protectedTargets()) unlockFile(f);
 }
 function globalPaths() {
-  const home = homedir11();
-  const sgDir = join13(home, ".solongate");
-  const hooksDir = join13(sgDir, "hooks");
-  const claudeDir = join13(home, ".claude");
+  const home = homedir12();
+  const sgDir = join14(home, ".solongate");
+  const hooksDir = join14(sgDir, "hooks");
+  const claudeDir = join14(home, ".claude");
   return {
     home,
     sgDir,
     hooksDir,
     claudeDir,
-    settingsPath: join13(claudeDir, "settings.json"),
-    backupPath: join13(claudeDir, "settings.solongate.bak"),
-    configPath: join13(sgDir, "cloud-guard.json")
+    settingsPath: join14(claudeDir, "settings.json"),
+    backupPath: join14(claudeDir, "settings.solongate.bak"),
+    configPath: join14(sgDir, "cloud-guard.json")
   };
 }
 function readHook(filename) {
-  return readFileSync9(join13(HOOKS_DIR, filename), "utf-8");
+  return readFileSync10(join14(HOOKS_DIR, filename), "utf-8");
 }
 function readGuard() {
-  const bundled = join13(HOOKS_DIR, "guard.bundled.mjs");
-  return existsSync6(bundled) ? readFileSync9(bundled, "utf-8") : readHook("guard.mjs");
+  const bundled = join14(HOOKS_DIR, "guard.bundled.mjs");
+  return existsSync6(bundled) ? readFileSync10(bundled, "utf-8") : readHook("guard.mjs");
 }
 function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stderr });
@@ -11830,18 +11936,18 @@ function shimTargets() {
       return [];
     }
   }
-  return [".bashrc", ".zshrc", ".profile"].map((f) => join13(homedir11(), f)).filter((f) => existsSync6(f));
+  return [".bashrc", ".zshrc", ".profile"].map((f) => join14(homedir12(), f)).filter((f) => existsSync6(f));
 }
 function writeShimBlock(file, block2) {
   const re = new RegExp(escapeRe(SHIM_BEGIN) + "[\\s\\S]*?" + escapeRe(SHIM_END) + "\\r?\\n?", "g");
-  let content = existsSync6(file) ? readFileSync9(file, "utf-8") : "";
+  let content = existsSync6(file) ? readFileSync10(file, "utf-8") : "";
   content = content.replace(re, "");
   if (block2) {
     if (content.length && !content.endsWith("\n")) content += "\n";
     content += block2 + "\n";
   }
-  mkdirSync8(dirname2(file), { recursive: true });
-  writeFileSync8(file, content);
+  mkdirSync9(dirname3(file), { recursive: true });
+  writeFileSync9(file, content);
 }
 function installClaudeShim(shieldPath) {
   const real = resolveRealClaude();
@@ -11871,7 +11977,7 @@ async function runGlobalInstall2(opts = {}) {
   let apiKey = opts.apiKey || process.env["SOLONGATE_API_KEY"] || "";
   if (!apiKey || apiKey === "sg_live_your_key_here") {
     try {
-      const cfg = JSON.parse(readFileSync9(p.configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync10(p.configPath, "utf-8"));
       if (cfg && typeof cfg.apiKey === "string") apiKey = cfg.apiKey;
     } catch {
     }
@@ -11884,22 +11990,22 @@ async function runGlobalInstall2(opts = {}) {
     process.exit(1);
   }
   const apiUrl = opts.apiUrl || process.env["SOLONGATE_API_URL"] || "https://api.solongate.com";
-  mkdirSync8(p.hooksDir, { recursive: true });
-  mkdirSync8(p.claudeDir, { recursive: true });
+  mkdirSync9(p.hooksDir, { recursive: true });
+  mkdirSync9(p.claudeDir, { recursive: true });
   unlockProtected();
-  writeFileSync8(join13(p.hooksDir, "guard.mjs"), readGuard());
-  writeFileSync8(join13(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
-  writeFileSync8(join13(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
-  writeFileSync8(join13(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
+  writeFileSync9(join14(p.hooksDir, "guard.mjs"), readGuard());
+  writeFileSync9(join14(p.hooksDir, "audit.mjs"), readHook("audit.mjs"));
+  writeFileSync9(join14(p.hooksDir, "stop.mjs"), readHook("stop.mjs"));
+  writeFileSync9(join14(p.hooksDir, "shield.mjs"), readHook("shield.mjs"));
   console.log(`  Installed hooks \u2192 ${p.hooksDir}`);
-  installClaudeShim(join13(p.hooksDir, "shield.mjs"));
-  writeFileSync8(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
+  installClaudeShim(join14(p.hooksDir, "shield.mjs"));
+  writeFileSync9(p.configPath, JSON.stringify({ apiKey, apiUrl }, null, 2) + "\n");
   console.log(`  Wrote ${p.configPath}`);
   let existing = {};
   if (existsSync6(p.settingsPath)) {
-    const raw = readFileSync9(p.settingsPath, "utf-8");
+    const raw = readFileSync10(p.settingsPath, "utf-8");
     if (!existsSync6(p.backupPath)) {
-      writeFileSync8(p.backupPath, raw);
+      writeFileSync9(p.backupPath, raw);
       console.log(`  Backed up existing settings \u2192 ${p.backupPath}`);
     }
     try {
@@ -11908,9 +12014,9 @@ async function runGlobalInstall2(opts = {}) {
       existing = {};
     }
   }
-  const guardAbs = join13(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
-  const auditAbs = join13(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
-  const stopAbs = join13(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
+  const guardAbs = join14(p.hooksDir, "guard.mjs").replace(/\\/g, "/");
+  const auditAbs = join14(p.hooksDir, "audit.mjs").replace(/\\/g, "/");
+  const stopAbs = join14(p.hooksDir, "stop.mjs").replace(/\\/g, "/");
   const nodeBin = process.execPath.replace(/\\/g, "/");
   const call = process.platform === "win32" ? "& " : "";
   const hookCmd = (script) => `${call}"${nodeBin}" "${script}" claude-code "Claude Code"`;
@@ -11922,7 +12028,7 @@ async function runGlobalInstall2(opts = {}) {
       Stop: [{ matcher: "", hooks: [{ type: "command", command: hookCmd(stopAbs) }] }]
     }
   };
-  writeFileSync8(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
+  writeFileSync9(p.settingsPath, JSON.stringify(merged, null, 2) + "\n");
   console.log(`  Registered global hooks \u2192 ${p.settingsPath}`);
   if (process.env["SOLONGATE_OS_LOCK"] === "1") {
     lockProtected();
@@ -11933,7 +12039,7 @@ var __dirname, HOOKS_DIR, SHIM_BEGIN, SHIM_END;
 var init_global_install = __esm({
   "src/global-install.ts"() {
     "use strict";
-    __dirname = dirname2(fileURLToPath2(import.meta.url));
+    __dirname = dirname3(fileURLToPath3(import.meta.url));
     HOOKS_DIR = resolve4(__dirname, "..", "hooks");
     SHIM_BEGIN = "# >>> SolonGate shield (auto secret redaction) >>>";
     SHIM_END = "# <<< SolonGate shield <<<";
@@ -11942,7 +12048,7 @@ var init_global_install = __esm({
 
 // src/login.ts
 var login_exports = {};
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 function startSpinner(text) {
   if (!process.stderr.isTTY) {
     process.stderr.write(`  ${text}
@@ -11978,7 +12084,7 @@ function openBrowser2(url) {
   try {
     const cmd = process.platform === "win32" ? "cmd" : process.platform === "darwin" ? "open" : "xdg-open";
     const args = process.platform === "win32" ? ["/c", "start", '""', url] : [url];
-    const child = spawn4(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn5(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {
     });
     child.unref();
@@ -12098,13 +12204,13 @@ __export(shield_exports, {
 });
 import { createServer, request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 import { URL as URL2 } from "url";
-import { readFileSync as readFileSync10, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
+import { readFileSync as readFileSync11, existsSync as existsSync7, readdirSync, statSync as statSync4 } from "fs";
 import { resolve as resolve5 } from "path";
-import { homedir as homedir12 } from "os";
+import { homedir as homedir13 } from "os";
 function findCacheFile() {
-  const dir = resolve5(homedir12(), ".solongate");
+  const dir = resolve5(homedir13(), ".solongate");
   const envSel = process.env.SOLONGATE_AGENT_ID;
   if (envSel) {
     const f = resolve5(dir, ".policy-cache-" + envSel.replace(/[^a-zA-Z0-9_-]/g, "_") + ".json");
@@ -12130,7 +12236,7 @@ function loadCfg() {
   try {
     const f = findCacheFile();
     if (f && existsSync7(f)) {
-      const c2 = JSON.parse(readFileSync10(f, "utf-8"));
+      const c2 = JSON.parse(readFileSync11(f, "utf-8"));
       const d = c2?.security?.dlpRedact;
       const g = c2?.security?.ghost;
       const ghost = g && Array.isArray(g.patterns) ? g.patterns : [];
@@ -12358,7 +12464,7 @@ async function runShield() {
   const upstream = pickUpstream();
   const { port, close } = await startProxy(upstream);
   log4(`redacting secrets on the LLM path \u2192 masking before ${upstream.host} (127.0.0.1:${port})`);
-  const child = spawn5(cmd[0], cmd.slice(1), {
+  const child = spawn6(cmd[0], cmd.slice(1), {
     stdio: "inherit",
     env: { ...process.env, ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}` },
     shell: process.platform === "win32"
@@ -12418,9 +12524,9 @@ __export(logs_server_exports, {
   runLogsServer: () => runLogsServer
 });
 import { createServer as createServer2 } from "http";
-import { readFileSync as readFileSync11, statSync as statSync5 } from "fs";
-import { resolve as resolve6, join as join14, isAbsolute } from "path";
-import { homedir as homedir13 } from "os";
+import { readFileSync as readFileSync12, statSync as statSync5 } from "fs";
+import { resolve as resolve6, join as join15, isAbsolute } from "path";
+import { homedir as homedir14 } from "os";
 import { readdirSync as readdirSync2 } from "fs";
 function allowedOrigins() {
   const base = [
@@ -12437,15 +12543,15 @@ function resolveLocalLogDir(rawPath) {
   const dir = String(rawPath || "").trim().replace(/[\\/]+$/, "");
   if (!dir) return null;
   if (isAbsolute(dir)) return dir;
-  return resolve6(homedir13(), ".solongate", "local-logs");
+  return resolve6(homedir14(), ".solongate", "local-logs");
 }
 async function findLogDir() {
-  const base = resolve6(homedir13(), ".solongate");
+  const base = resolve6(homedir14(), ".solongate");
   try {
     const files = readdirSync2(base).filter((f) => f.startsWith(".policy-cache-") && f.endsWith(".json"));
     for (const f of files) {
       try {
-        const c2 = JSON.parse(readFileSync11(join14(base, f), "utf-8"));
+        const c2 = JSON.parse(readFileSync12(join15(base, f), "utf-8"));
         const p = c2?.security?.localLogs?.path;
         if (typeof p === "string" && p.trim()) return { dir: resolveLocalLogDir(p), configured: p };
       } catch {
@@ -12454,7 +12560,7 @@ async function findLogDir() {
   } catch {
   }
   try {
-    const cfgRaw = readFileSync11(join14(base, "cloud-guard.json"), "utf-8");
+    const cfgRaw = readFileSync12(join15(base, "cloud-guard.json"), "utf-8");
     const { apiKey, apiUrl } = JSON.parse(cfgRaw);
     if (apiKey) {
       const url = `${apiUrl || "https://api.solongate.com"}/api/v1/policies/active`;
@@ -12483,7 +12589,7 @@ function setCors(req, res) {
 }
 function fileInfo(dir) {
   if (!dir) return { file: null, exists: false, size: 0, mtimeMs: 0 };
-  const file = join14(dir, LOG_FILENAME);
+  const file = join15(dir, LOG_FILENAME);
   try {
     const st = statSync5(file);
     return { file, exists: true, size: st.size, mtimeMs: st.mtimeMs };
@@ -12544,7 +12650,7 @@ async function runLogsServer() {
         return;
       }
       try {
-        const text = readFileSync11(info.file, "utf-8");
+        const text = readFileSync12(info.file, "utf-8");
         res.writeHead(200, { "Content-Type": "text/plain; charset=utf-8", "Last-Modified": lastMod, "X-Solongate-Exists": "1" });
         res.end(text);
       } catch {
@@ -12557,6 +12663,8 @@ async function runLogsServer() {
     res.end("not found");
   });
   server.listen(port, "127.0.0.1", async () => {
+    const { recordLogsServerStarted: recordLogsServerStarted2 } = await Promise.resolve().then(() => (init_logs_server_daemon(), logs_server_daemon_exports));
+    recordLogsServerStarted2(port);
     const { dir, configured } = await findLogDir();
     process.stdout.write(`[SolonGate] Local logs agent listening on http://127.0.0.1:${port}
 `);
@@ -12596,7 +12704,7 @@ var init_logs_server = __esm({
 
 // src/inject.ts
 var inject_exports = {};
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync9, existsSync as existsSync8, copyFileSync } from "fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync10, existsSync as existsSync8, copyFileSync } from "fs";
 import { resolve as resolve7 } from "path";
 import { execSync } from "child_process";
 function parseInjectArgs(argv) {
@@ -12656,7 +12764,7 @@ WHAT IT DOES
 function detectProject() {
   if (!existsSync8(resolve7("package.json"))) return false;
   try {
-    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync13(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     return !!(allDeps["@modelcontextprotocol/sdk"] || allDeps["@modelcontextprotocol/server"]);
   } catch {
@@ -12665,7 +12773,7 @@ function detectProject() {
 }
 function findTsEntryFile() {
   try {
-    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync13(resolve7("package.json"), "utf-8"));
     if (pkg.bin) {
       const binPath = typeof pkg.bin === "string" ? pkg.bin : Object.values(pkg.bin)[0];
       if (typeof binPath === "string") {
@@ -12692,7 +12800,7 @@ function findTsEntryFile() {
     const full = resolve7(c2);
     if (existsSync8(full)) {
       try {
-        const content = readFileSync12(full, "utf-8");
+        const content = readFileSync13(full, "utf-8");
         if (content.includes("McpServer") || content.includes("McpServer")) {
           return full;
         }
@@ -12712,7 +12820,7 @@ function detectPackageManager() {
 }
 function installSdk() {
   try {
-    const pkg = JSON.parse(readFileSync12(resolve7("package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync13(resolve7("package.json"), "utf-8"));
     const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     if (allDeps["@solongate/proxy"]) {
       log3("  @solongate/proxy already installed");
@@ -12733,7 +12841,7 @@ function installSdk() {
   }
 }
 function injectTypeScript(filePath) {
-  const original = readFileSync12(filePath, "utf-8");
+  const original = readFileSync13(filePath, "utf-8");
   const changes = [];
   let modified = original;
   if (modified.includes("SecureMcpServer")) {
@@ -12904,7 +13012,7 @@ async function main2() {
     log3("");
     log3(`  Backup: ${backupPath}`);
   }
-  writeFileSync9(entryFile, result.modified);
+  writeFileSync10(entryFile, result.modified);
   log3("");
   log3("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
   log3("  \u2502  SolonGate SDK injected successfully!         \u2502");
@@ -12933,8 +13041,8 @@ var init_inject = __esm({
 
 // src/create.ts
 var create_exports = {};
-import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync10, existsSync as existsSync9 } from "fs";
-import { resolve as resolve8, join as join15 } from "path";
+import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync11, existsSync as existsSync9 } from "fs";
+import { resolve as resolve8, join as join16 } from "path";
 import { execSync as execSync2 } from "child_process";
 function withSpinner(message, fn) {
   const frames = ["\u28FE", "\u28FD", "\u28FB", "\u28BF", "\u287F", "\u28DF", "\u28EF", "\u28F7"];
@@ -13013,8 +13121,8 @@ EXAMPLES
 `);
 }
 function createProject(dir, name, _policy) {
-  writeFileSync10(
-    join15(dir, "package.json"),
+  writeFileSync11(
+    join16(dir, "package.json"),
     JSON.stringify(
       {
         name,
@@ -13043,8 +13151,8 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  writeFileSync10(
-    join15(dir, "tsconfig.json"),
+  writeFileSync11(
+    join16(dir, "tsconfig.json"),
     JSON.stringify(
       {
         compilerOptions: {
@@ -13064,9 +13172,9 @@ function createProject(dir, name, _policy) {
       2
     ) + "\n"
   );
-  mkdirSync9(join15(dir, "src"), { recursive: true });
-  writeFileSync10(
-    join15(dir, "src", "index.ts"),
+  mkdirSync10(join16(dir, "src"), { recursive: true });
+  writeFileSync11(
+    join16(dir, "src", "index.ts"),
     `#!/usr/bin/env node
 
 console.log = (...args: unknown[]) => {
@@ -13107,8 +13215,8 @@ console.log('');
 console.log('Press Ctrl+C to stop.');
 `
   );
-  writeFileSync10(
-    join15(dir, ".mcp.json"),
+  writeFileSync11(
+    join16(dir, ".mcp.json"),
     JSON.stringify(
       {
         mcpServers: {
@@ -13125,13 +13233,13 @@ console.log('Press Ctrl+C to stop.');
       2
     ) + "\n"
   );
-  writeFileSync10(
-    join15(dir, ".env"),
+  writeFileSync11(
+    join16(dir, ".env"),
     `SOLONGATE_API_KEY=sg_live_YOUR_KEY_HERE
 `
   );
-  writeFileSync10(
-    join15(dir, ".gitignore"),
+  writeFileSync11(
+    join16(dir, ".gitignore"),
     `node_modules/
 dist/
 *.solongate-backup
@@ -13150,7 +13258,7 @@ async function main3() {
     process.exit(1);
   }
   withSpinner(`Setting up ${opts.name}...`, () => {
-    mkdirSync9(dir, { recursive: true });
+    mkdirSync10(dir, { recursive: true });
     createProject(dir, opts.name, opts.policy);
   });
   if (!opts.noInstall) {
@@ -13224,14 +13332,14 @@ var init_create = __esm({
 
 // src/pull-push.ts
 var pull_push_exports = {};
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync11, existsSync as existsSync10 } from "fs";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync12, existsSync as existsSync10 } from "fs";
 import { resolve as resolve9 } from "path";
 function loadEnv() {
   if (process.env.SOLONGATE_API_KEY) return;
   const envPath = resolve9(".env");
   if (!existsSync10(envPath)) return;
   try {
-    const content = readFileSync13(envPath, "utf-8");
+    const content = readFileSync14(envPath, "utf-8");
     for (const line of content.split("\n")) {
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith("#")) continue;
@@ -13419,7 +13527,7 @@ async function pull(apiKey, file, policyId) {
   const policy = await fetchCloudPolicy(apiKey, API_URL, policyId);
   const { id: _id, ...policyWithoutId } = policy;
   const json = JSON.stringify(policyWithoutId, null, 2) + "\n";
-  writeFileSync11(file, json, "utf-8");
+  writeFileSync12(file, json, "utf-8");
   log5("");
   log5(green2("  Saved to: ") + file);
   log5(`  ${dim2("Name:")}    ${policy.name}`);
@@ -13448,7 +13556,7 @@ async function push(apiKey, file, policyId) {
     log5("  solongate-proxy list");
     process.exit(1);
   }
-  const content = readFileSync13(file, "utf-8");
+  const content = readFileSync14(file, "utf-8");
   let policy;
   try {
     policy = JSON.parse(content);
@@ -16604,6 +16712,10 @@ async function main5() {
       const { maybeSelfUpdate: maybeSelfUpdate2 } = await Promise.resolve().then(() => (init_self_update(), self_update_exports));
       maybeSelfUpdate2();
     }
+    if (subcommand !== "logs-server" && subcommand !== "local-logs") {
+      const { ensureLogsServerDaemon: ensureLogsServerDaemon2 } = await Promise.resolve().then(() => (init_logs_server_daemon(), logs_server_daemon_exports));
+      ensureLogsServerDaemon2();
+    }
   }
   if (process.argv.length <= 2) {
     if (process.stdout.isTTY && process.stdin.isTTY) {