@solongate/proxy 0.81.49 → 0.81.51

package/dist/tui/index.js

@@ -5,14 +5,14 @@ var __export = (target, all) => {
 };
 
 // src/tui/index.tsx
-import { appendFileSync, mkdirSync as mkdirSync5 } from "fs";
-import { homedir as homedir7 } from "os";
-import { join as join7 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync6 } from "fs";
+import { homedir as homedir8 } from "os";
+import { join as join8 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
-import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
-import { useEffect as useEffect7, useState as useState9 } from "react";
+import { Box as Box8, Text as Text8, useApp, useInput as useInput7 } from "ink";
+import { useEffect as useEffect7, useState as useState8 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -3090,9 +3090,87 @@ function Detail({ label, value, color }) {
 // src/tui/panels/Settings.tsx
 import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
 import TextInput5 from "ink-text-input";
-import { useState as useState7 } from "react";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
+
+// src/logs-server-daemon.ts
+import { spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir6 } from "os";
+import { dirname, join as join6 } from "path";
+import { fileURLToPath } from "url";
+var DIR = join6(homedir6(), ".solongate");
+var STATE_FILE = join6(DIR, ".logs-server.json");
+var LOG_FILE = join6(DIR, "logs-server.log");
+var LOGS_SERVER_PORT = 8788;
+function readState() {
+  try {
+    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    return s && typeof s === "object" ? s : {};
+  } catch {
+    return {};
+  }
+}
+function writeState(s) {
+  try {
+    mkdirSync4(DIR, { recursive: true });
+    writeFileSync5(STATE_FILE, JSON.stringify(s));
+  } catch {
+  }
+}
+function pidAlive(pid) {
+  if (!pid || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (e) {
+    return e.code === "EPERM";
+  }
+}
+function logsServerStatus() {
+  const s = readState();
+  const running = pidAlive(s.pid);
+  return { desired: s.desired === "on" ? "on" : "off", running, pid: running ? s.pid : void 0, port: s.port || LOGS_SERVER_PORT };
+}
+function startLogsServerDaemon() {
+  const cur = logsServerStatus();
+  if (cur.running) {
+    writeState({ ...readState(), desired: "on" });
+    return { ...cur, desired: "on" };
+  }
+  try {
+    mkdirSync4(DIR, { recursive: true });
+    const log = openSync2(LOG_FILE, "a");
+    const cli = join6(dirname(fileURLToPath(import.meta.url)), "index.js");
+    const p = spawn3(process.execPath, [cli, "logs-server"], {
+      detached: true,
+      stdio: ["ignore", log, log],
+      windowsHide: true
+    });
+    p.on("error", () => {
+    });
+    p.unref();
+    writeState({ desired: "on", pid: p.pid, port: LOGS_SERVER_PORT, startedAt: Date.now() });
+    return { desired: "on", running: true, pid: p.pid, port: LOGS_SERVER_PORT };
+  } catch {
+    return { ...cur, desired: "on", running: false };
+  }
+}
+function stopLogsServerDaemon() {
+  const s = readState();
+  if (pidAlive(s.pid)) {
+    try {
+      process.kill(s.pid);
+    } catch {
+    }
+  }
+  writeState({ desired: "off", port: s.port });
+  return { desired: "off", running: false, port: s.port || LOGS_SERVER_PORT };
+}
+
+// src/tui/panels/Settings.tsx
+import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var EVENTS = ["denials", "allowed", "all"];
+var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 function alertBodyFor(channel) {
   const c2 = channel.trim();
   const base = { name: "dataroom alert", threshold: 5, windowSeconds: 60, signal: "any" };
@@ -3100,7 +3178,13 @@ function alertBodyFor(channel) {
   if (c2.includes("@")) return { ...base, emails: [c2] };
   return { ...base, telegram: [c2] };
 }
-function SettingsPanel({ active: active2, focused }) {
+var acctLabel = (a) => a.email || a.user || "account \u2026" + a.apiKey.slice(-4);
+function SettingsPanel({
+  active: active2,
+  focused,
+  viewApiKey,
+  onView
+}) {
   void active2;
   const { cols, rows } = usePanelSize();
   const [sel, setSel] = useState7(0);
@@ -3109,24 +3193,46 @@ function SettingsPanel({ active: active2, focused }) {
   const [confirmDel, setConfirmDel] = useState7(null);
   const [msg, setMsg] = useState7(null);
   const [busy, setBusy] = useState7(false);
-  const localQ = useLoader(() => api.settings.getLocalLogs());
-  const whQ = useLoader(() => api.settings.getWebhooks());
-  const alertQ = useLoader(() => api.settings.getAlerts());
+  const [accounts, setAccounts] = useState7(() => listAccounts());
+  const [login, setLogin] = useState7(null);
+  const [tick, setTick] = useState7(0);
+  const abort = useRef3(false);
+  const refreshAccounts = () => setAccounts(listAccounts());
+  const locked = accounts.length === 0;
+  const [srv, setSrv] = useState7(() => logsServerStatus());
+  useEffect6(() => {
+    const t = setInterval(() => setSrv(logsServerStatus()), 3e3);
+    return () => clearInterval(t);
+  }, []);
+  useEffect6(() => {
+    if (!login || login.phase === "done" || login.phase === "error") return;
+    const t = setInterval(() => setTick((n) => n + 1), 120);
+    return () => clearInterval(t);
+  }, [login]);
+  const localQ = useLoader(() => listAccounts().length ? api.settings.getLocalLogs() : Promise.resolve(null));
+  const whQ = useLoader(() => listAccounts().length ? api.settings.getWebhooks() : Promise.resolve(null));
+  const alertQ = useLoader(() => listAccounts().length ? api.settings.getAlerts() : Promise.resolve(null));
   const local = localQ.data;
   const webhooks = whQ.data?.webhooks ?? [];
   const alerts = alertQ.data?.rules ?? [];
   const rowsAll = [
-    { kind: "ll-enabled" },
-    { kind: "ll-path" },
-    ...webhooks.map((wh) => ({ kind: "wh", wh })),
-    { kind: "wh-add" },
-    ...alerts.map((rule) => ({ kind: "alert", rule })),
-    { kind: "alert-add" }
+    ...accounts.map((acc) => ({ kind: "acct", acc })),
+    { kind: "acct-add" },
+    ...locked ? [] : [
+      { kind: "ll-enabled" },
+      { kind: "ll-path" },
+      { kind: "ll-server" },
+      ...webhooks.map((wh) => ({ kind: "wh", wh })),
+      { kind: "wh-add" },
+      ...alerts.map((rule) => ({ kind: "alert", rule })),
+      { kind: "alert-add" }
+    ]
   ];
   const selClamped = Math.min(sel, rowsAll.length - 1);
   const cur = rowsAll[selClamped];
-  const keyOf = (r) => r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
+  const keyOf = (r) => r.kind === "acct" ? "acct:" + r.acc.apiKey : r.kind === "wh" ? "wh:" + r.wh.id : r.kind === "alert" ? "alert:" + r.rule.id : r.kind;
   const reloadAll = () => {
+    refreshAccounts();
     localQ.reload();
     whQ.reload();
     alertQ.reload();
@@ -3140,8 +3246,48 @@ function SettingsPanel({ active: active2, focused }) {
       reload();
     }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" })).finally(() => setBusy(false));
   };
+  const beginLogin = () => {
+    if (login && (login.phase === "starting" || login.phase === "waiting")) return;
+    abort.current = false;
+    setLogin({ phase: "starting" });
+    void (async () => {
+      let start2;
+      try {
+        start2 = await startDeviceLogin(DEFAULT_API_URL);
+      } catch (e) {
+        setLogin({ phase: "error", msg: "could not reach SolonGate: " + (e instanceof Error ? e.message : String(e)) });
+        return;
+      }
+      setLogin({ phase: "waiting", url: start2.verifyUrl });
+      openBrowser(start2.verifyUrl);
+      while (Date.now() < start2.expiresAt && !abort.current) {
+        await new Promise((r) => setTimeout(r, start2.intervalMs));
+        if (abort.current) return;
+        const res = await pollDeviceLogin(DEFAULT_API_URL, start2.deviceCode);
+        if (res.status === "approved" && res.apiKey) {
+          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
+          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
+          setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL });
+          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
+          reloadAll();
+          return;
+        }
+        if (res.status === "expired" || res.status === "not_found") {
+          setLogin({ phase: "error", msg: "code expired \u2014 press n to retry" });
+          return;
+        }
+      }
+      if (!abort.current) setLogin({ phase: "error", msg: "timed out \u2014 press n to retry" });
+    })();
+  };
   const activate = (r) => {
-    if (r.kind === "ll-enabled") {
+    if (r.kind === "acct") {
+      setViewCredentials({ apiKey: r.acc.apiKey, apiUrl: r.acc.apiUrl });
+      onView?.(r.acc);
+      setMsg({ text: `viewing ${acctLabel(r.acc)}`, level: "ok" });
+    } else if (r.kind === "acct-add") {
+      beginLogin();
+    } else if (r.kind === "ll-enabled") {
       if (!local) return;
       if (!local.enabled && !local.path.trim()) {
         setMsg({ text: "set a path first (\u2193 then enter)", level: "bad" });
@@ -3151,6 +3297,12 @@ function SettingsPanel({ active: active2, focused }) {
     } else if (r.kind === "ll-path") {
       setInput(local?.path ?? "");
       setEditing("path");
+    } else if (r.kind === "ll-server") {
+      const next = srv.running ? stopLogsServerDaemon() : startLogsServerDaemon();
+      setSrv(next);
+      setMsg(
+        next.running ? { text: `\u2713 dashboard link running on 127.0.0.1:${next.port} \u2014 keeps running after you close the dataroom`, level: "ok" } : { text: "\u2713 dashboard link stopped (disabled until you start it again)", level: "ok" }
+      );
     } else if (r.kind === "wh") {
       run(r.wh.enabled ? "webhook disabled" : "webhook enabled", () => api.settings.updateWebhook(r.wh.id, { enabled: !r.wh.enabled }), whQ.reload);
     } else if (r.kind === "wh-add") {
@@ -3180,6 +3332,13 @@ function SettingsPanel({ active: active2, focused }) {
   };
   useInput6(
     (inp, key) => {
+      if (login && (login.phase === "starting" || login.phase === "waiting")) {
+        if (key.escape) {
+          abort.current = true;
+          setLogin(null);
+        }
+        return;
+      }
       setMsg(null);
       if (key.upArrow) {
         setSel((n) => Math.max(0, n - 1));
@@ -3188,6 +3347,11 @@ function SettingsPanel({ active: active2, focused }) {
         setSel((n) => Math.min(rowsAll.length - 1, n + 1));
         setConfirmDel(null);
       } else if (key.return || inp === " ") activate(cur);
+      else if (inp === "m" && cur.kind === "acct") {
+        const ok = setActiveAccount({ apiKey: cur.acc.apiKey, apiUrl: cur.acc.apiUrl });
+        setMsg(ok ? { text: `\u2713 ${acctLabel(cur.acc)} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
+        refreshAccounts();
+      } else if (inp === "n") beginLogin();
       else if (inp === "e" && cur.kind === "wh") {
         const next = EVENTS[(EVENTS.indexOf(cur.wh.events) + 1) % EVENTS.length];
         run(`webhook events \u2192 ${next}`, () => api.settings.updateWebhook(cur.wh.id, { events: next }), whQ.reload);
@@ -3214,244 +3378,171 @@ function SettingsPanel({ active: active2, focused }) {
     },
     { isActive: focused && !editing }
   );
-  const loading = localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data;
-  const error = localQ.error ?? whQ.error ?? alertQ.error;
+  const spin = SPIN2[tick % SPIN2.length];
+  if (login && (login.phase === "starting" || login.phase === "waiting")) {
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accentBright, children: "Add an account" }),
+      login.phase === "starting" ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+        spin,
+        " starting device pairing\u2026"
+      ] }) : /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
+        /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
+            spin,
+            " waiting for authorization\u2026 "
+          ] }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "esc to cancel" })
+        ] })
+      ] })
+    ] });
+  }
+  const loading = !locked && (localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data);
+  const error = locked ? null : localQ.error ?? whQ.error ?? alertQ.error;
   const mark = (r) => keyOf(r) === keyOf(cur) && focused ? "\u25B8 " : "  ";
   const onOff = (on) => on ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "off" });
   const chanOf = (rule) => [...(rule.slackUrls ?? []).map((u) => "slack " + u), ...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
-  const listBudget = Math.max(4, rows - 8);
+  const listBudget = Math.max(4, rows - 10);
   const start = Math.min(Math.max(0, selClamped - Math.floor(listBudget / 2)), Math.max(0, rowsAll.length - listBudget));
   const inWindow = (r) => {
     const i = rowsAll.findIndex((x) => keyOf(x) === keyOf(r));
     return i >= start && i < start + listBudget;
   };
   return /* @__PURE__ */ jsx7(DataView, { loading, error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter/space toggle-edit-add \xB7 e events \xB7 d delete \xB7  r refresh" : "press \u2192 to configure" }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: focused ? "\u2191\u2193 move \xB7 enter view-toggle-edit \xB7 m make active \xB7 n add account \xB7 e events \xB7 d delete \xB7 r refresh" : "press \u2192 to configure" }),
     editing ? /* @__PURE__ */ jsxs7(Box7, { children: [
       /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: editing === "path" ? "local log path: " : editing === "wh-url" ? "webhook url: " : "channel (slack url / email / telegram id): " }),
       /* @__PURE__ */ jsx7(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
-    ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
-    inWindow(rowsAll[0]) || inWindow(rowsAll[1]) ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "LOCAL LOGS ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
-      ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[0]) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "enabled ".padEnd(10) }),
-        onOff(!!local?.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   enter toggles" })
-      ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark(rowsAll[1]) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "path ".padEnd(10) }),
-        local?.path ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(local.path, cols - 14) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "not set \u2014 enter to edit" })
-      ] })
-    ] }) : null,
+    ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx7(Text7, { color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
     /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
       /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "WEBHOOKS ",
+        "ACCOUNTS ",
         /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "\u2014 POST every matching event to your endpoint (",
-          webhooks.length,
-          ")"
+          "\u2014 logged in on this device (",
+          accounts.length,
+          ") \xB7 \u25CF viewing = shown here \xB7 ACTIVE = key the guard uses"
         ] })
       ] }),
-      webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
-        onOff(wh.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(wh.url, cols - 16) })
-      ] }, wh.id)),
-      inWindow(rowsAll.find((r) => r.kind === "wh-add")) ? /* @__PURE__ */ jsxs7(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add webhook (enter)" })
+      accounts.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  no accounts yet \u2014 " }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: "n" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " (or enter) logs in, pairs this device and unlocks the dataroom" })
+      ] }) : null,
+      accounts.filter((acc) => inWindow({ kind: "acct", acc })).map((a) => {
+        const isView = viewApiKey ? a.apiKey === viewApiKey : accounts[0]?.apiKey === a.apiKey;
+        const isActive = isActiveAccount(a.apiKey);
+        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "acct:" + a.apiKey && focused ? theme.accentBright : theme.dim, children: mark({ kind: "acct", acc: a }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(acctLabel(a), 30).padEnd(31) }),
+          isView ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "          " }),
+          isActive ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "       " }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: a.project ? truncate(a.project, 24) : "" })
+        ] }, a.apiKey);
+      }),
+      inWindow({ kind: "acct-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "acct-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "acct-add" }) }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
       ] }) : null
     ] }),
-    /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
-        "ALERTS ",
-        /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-          "\u2014 notify on a signal spike (",
-          alerts.length,
-          ")"
+    locked ? null : /* @__PURE__ */ jsxs7(Fragment5, { children: [
+      inWindow({ kind: "ll-enabled" }) || inWindow({ kind: "ll-path" }) || inWindow({ kind: "ll-server" }) ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "LOCAL LOGS ",
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2014 hooks mirror every decision to a file on the agent machine" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-enabled" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-enabled" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "enabled ".padEnd(10) }),
+          onOff(!!local?.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   enter toggles" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-path" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-path" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "path ".padEnd(10) }),
+          local?.path ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(local.path, cols - 14) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "not set \u2014 enter to edit" })
+        ] }),
+        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "ll-server" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "ll-server" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "dashboard".padEnd(10) }),
+          srv.running ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "stopped" }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: srv.running ? "   serves local logs to the dashboard \xB7 survives closing the dataroom \xB7 enter stops" : "   enter starts the local-logs link for the dashboard" })
         ] })
+      ] }) : null,
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "WEBHOOKS ",
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+            "\u2014 POST every matching event to your endpoint (",
+            webhooks.length,
+            ")"
+          ] })
+        ] }),
+        webhooks.filter((wh) => inWindow({ kind: "wh", wh })).map((wh) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "wh:" + wh.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh", wh }) }),
+          onOff(wh.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + wh.events).padEnd(9) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(wh.url, cols - 16) })
+        ] }, wh.id)),
+        inWindow({ kind: "wh-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+          /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "wh-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "wh-add" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add webhook (enter)" })
+        ] }) : null
       ] }),
-      alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
-        onOff(rule.enabled),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
-        /* @__PURE__ */ jsx7(Text7, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(chanOf(rule), cols - 26) })
-      ] }, rule.id)),
-      inWindow(rowsAll[rowsAll.length - 1]) ? /* @__PURE__ */ jsxs7(Text7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
-      ] }) : null
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+          "ALERTS ",
+          /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+            "\u2014 notify on a signal spike (",
+            alerts.length,
+            ")"
+          ] })
+        ] }),
+        alerts.filter((rule) => inWindow({ kind: "alert", rule })).map((rule) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: keyOf(cur) === "alert:" + rule.id && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert", rule }) }),
+          onOff(rule.enabled),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + rule.signal).padEnd(11) }),
+          /* @__PURE__ */ jsx7(Text7, { children: `\u2265${rule.threshold}/${rule.windowSeconds}s ` }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(chanOf(rule), cols - 26) })
+        ] }, rule.id)),
+        inWindow({ kind: "alert-add" }) ? /* @__PURE__ */ jsxs7(Text7, { children: [
+          /* @__PURE__ */ jsx7(Text7, { color: cur.kind === "alert-add" && focused ? theme.accentBright : theme.dim, children: mark({ kind: "alert-add" }) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add alert (enter \u2014 one channel: slack url, email or telegram chat id)" })
+        ] }) : null
+      ] })
     ] })
   ] }) });
 }
 
-// src/tui/panels/Accounts.tsx
-import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
-import { useEffect as useEffect6, useRef as useRef3, useState as useState8 } from "react";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
-function AccountsPanel({
-  focused,
-  viewApiKey,
-  onView
-}) {
-  const [accounts, setAccounts] = useState8(() => listAccounts());
-  const [sel, setSel] = useState8(0);
-  const [msg, setMsg] = useState8(null);
-  const [login, setLogin] = useState8(null);
-  const [tick, setTick] = useState8(0);
-  const abort = useRef3(false);
-  const refresh = () => setAccounts(listAccounts());
-  useEffect6(() => {
-    if (!login || login.phase === "done" || login.phase === "error") return;
-    const t = setInterval(() => setTick((n) => n + 1), 120);
-    return () => clearInterval(t);
-  }, [login]);
-  const beginLogin = () => {
-    if (login && (login.phase === "starting" || login.phase === "waiting")) return;
-    abort.current = false;
-    setLogin({ phase: "starting" });
-    void (async () => {
-      let start;
-      try {
-        start = await startDeviceLogin(DEFAULT_API_URL);
-      } catch (e) {
-        setLogin({ phase: "error", msg: "could not reach SolonGate: " + (e instanceof Error ? e.message : String(e)) });
-        return;
-      }
-      setLogin({ phase: "waiting", url: start.verifyUrl });
-      openBrowser(start.verifyUrl);
-      while (Date.now() < start.expiresAt && !abort.current) {
-        await new Promise((r) => setTimeout(r, start.intervalMs));
-        if (abort.current) return;
-        const res = await pollDeviceLogin(DEFAULT_API_URL, start.deviceCode);
-        if (res.status === "approved" && res.apiKey) {
-          saveAccount({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
-          setLogin({ phase: "done", msg: `\u2713 added ${res.email || res.user || res.project || "account"}` });
-          refresh();
-          setViewCredentials({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL });
-          onView?.({ apiKey: res.apiKey, apiUrl: DEFAULT_API_URL, project: res.project, user: res.user, email: res.email });
-          return;
-        }
-        if (res.status === "expired" || res.status === "not_found") {
-          setLogin({ phase: "error", msg: "code expired \u2014 press n to retry" });
-          return;
-        }
-      }
-      if (!abort.current) setLogin({ phase: "error", msg: "timed out \u2014 press n to retry" });
-    })();
-  };
-  useInput7(
-    (input, key) => {
-      if (login && (login.phase === "starting" || login.phase === "waiting")) {
-        if (key.escape) {
-          abort.current = true;
-          setLogin(null);
-        }
-        return;
-      }
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      else if (key.downArrow) setSel((n) => Math.min(accounts.length - 1, n + 1));
-      else if (key.return) {
-        const a = accounts[sel];
-        if (a) {
-          setViewCredentials({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          onView?.(a);
-          setMsg({ text: `viewing ${a.email || a.user || a.project || "account \u2026" + a.apiKey.slice(-4)}`, level: "ok" });
-        }
-      } else if (input === "m") {
-        const a = accounts[sel];
-        if (a) {
-          const ok = setActiveAccount({ apiKey: a.apiKey, apiUrl: a.apiUrl });
-          setMsg(ok ? { text: `\u2713 ${a.email || a.user || a.project || "account"} is now the ACTIVE key (guard + logging)`, level: "ok" } : { text: "\u2717 could not set active", level: "bad" });
-          refresh();
-        }
-      } else if (input === "n") beginLogin();
-      else if (input === "r") refresh();
-    },
-    { isActive: focused }
-  );
-  const spin = SPIN2[tick % SPIN2.length];
-  if (login && (login.phase === "starting" || login.phase === "waiting")) {
-    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "Add an account" }),
-      login.phase === "starting" ? /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
-        spin,
-        " starting device pairing\u2026"
-      ] }) : /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
-        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
-          /* @__PURE__ */ jsxs8(Text8, { color: theme.warn, children: [
-            spin,
-            " waiting for authorization\u2026 "
-          ] }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "esc to cancel" })
-        ] })
-      ] })
-    ] });
-  }
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: focused ? "\u2191\u2193 select \xB7 enter view \xB7 m make active \xB7 n add account \xB7 r refresh" : "press \u2192 to manage accounts" }),
-    msg ? /* @__PURE__ */ jsx8(Text8, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, 70) }) : login?.msg ? /* @__PURE__ */ jsx8(Text8, { color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: accounts.length === 0 ? /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "No accounts on this device yet." }),
-      /* @__PURE__ */ jsxs8(Text8, { children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "n" }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " to log in \u2014 pairs this device and starts protecting your Claude Code sessions." })
-      ] })
-    ] }) : accounts.map((a, i) => {
-      const isSel = i === sel && focused;
-      const isView = viewApiKey ? a.apiKey === viewApiKey : i === 0;
-      const isActive = isActiveAccount(a.apiKey);
-      return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isSel ? "#333333" : void 0, bold: isSel, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: isSel ? theme.accentBright : theme.dim, children: isSel ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(a.email || a.user || "account \u2026" + a.apiKey.slice(-4), 30).padEnd(31) }),
-        isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
-        isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate(a.project, 24) : "" })
-      ] }, a.apiKey);
-    }) }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u25CF viewing = the account the dataroom is showing \xB7 ACTIVE = the key the guard hooks + logging use" }) })
-  ] });
-}
-
 // src/self-update.ts
-import { execFile, spawn as spawn3 } from "child_process";
-import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, realpathSync, writeFileSync as writeFileSync5 } from "fs";
-import { homedir as homedir6 } from "os";
-import { dirname, join as join6 } from "path";
-import { fileURLToPath } from "url";
+import { execFile, spawn as spawn4 } from "child_process";
+import { mkdirSync as mkdirSync5, openSync as openSync3, readFileSync as readFileSync5, realpathSync, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname2, join as join7 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 var PKG = "@solongate/proxy";
 var CHECK_EVERY_MS = 30 * 60 * 1e3;
 var ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
-var STATE_FILE = join6(homedir6(), ".solongate", ".self-update.json");
-var LOG_FILE = join6(homedir6(), ".solongate", "self-update.log");
-function readState() {
+var STATE_FILE2 = join7(homedir7(), ".solongate", ".self-update.json");
+var LOG_FILE2 = join7(homedir7(), ".solongate", "self-update.log");
+function readState2() {
   try {
-    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    const s = JSON.parse(readFileSync5(STATE_FILE2, "utf-8"));
     return s && typeof s === "object" ? s : {};
   } catch {
     return {};
   }
 }
-function writeState(s) {
+function writeState2(s) {
   try {
-    mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
-    writeFileSync5(STATE_FILE, JSON.stringify(s));
+    mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
+    writeFileSync6(STATE_FILE2, JSON.stringify(s));
   } catch {
   }
 }
 function currentVersion() {
   try {
-    const pkg = JSON.parse(readFileSync4(join6(dirname(fileURLToPath(import.meta.url)), "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync5(join7(dirname2(fileURLToPath2(import.meta.url)), "..", "package.json"), "utf-8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -3501,14 +3592,14 @@ async function isGlobalInstall() {
 function runGlobalInstall(version) {
   return new Promise((resolve2) => {
     try {
-      mkdirSync4(join6(homedir6(), ".solongate"), { recursive: true });
+      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
       execFile(
         "npm",
         ["install", "-g", `${PKG}@${version}`],
         { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
         (err, stdout, stderr) => {
           try {
-            writeFileSync5(LOG_FILE, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
+            writeFileSync6(LOG_FILE2, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
 ${stdout}
 ${stderr}
 `, { flag: "a" });
@@ -3526,13 +3617,13 @@ async function tuiUpdateFlow(onStatus) {
   try {
     const current = currentVersion();
     const latest = await fetchLatest();
-    const state = readState();
-    if (latest) writeState({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
+    const state = readState2();
+    if (latest) writeState2({ ...state, lastCheckAt: Date.now(), latestSeen: latest });
     if (!latest || !newerThan(latest, current)) return;
-    const attempts = readState().attempts ?? {};
+    const attempts = readState2().attempts ?? {};
     const canRetry = Date.now() - (attempts[latest] ?? 0) >= ATTEMPT_EVERY_MS;
     if (await isGlobalInstall() && canRetry) {
-      writeState({ ...readState(), attempts: { [latest]: Date.now() } });
+      writeState2({ ...readState2(), attempts: { [latest]: Date.now() } });
       onStatus({ kind: "updating", version: latest });
       if (await runGlobalInstall(latest)) {
         onStatus({ kind: "updated", version: latest });
@@ -3545,15 +3636,15 @@ async function tuiUpdateFlow(onStatus) {
 }
 
 // src/tui/App.tsx
-import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
       "press ",
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
@@ -3564,33 +3655,32 @@ var SECTIONS = [
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
   { label: "Audit", Panel: AuditPanel },
-  { label: "Settings", Panel: SettingsPanel },
-  { label: "Accounts", Panel: AccountsPanel }
+  { label: "Settings", Panel: SettingsPanel }
 ];
 var BANNER_HEX = ["white", "white", "white", "white", "white", "white"];
 function Banner({ cols }) {
   const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
-var ACCOUNTS_SECTION = SECTIONS.findIndex((s) => s.label === "Accounts");
+var SETTINGS_SECTION = SECTIONS.findIndex((s) => s.label === "Settings");
 function App() {
   const { exit } = useApp();
-  const [accounts, setAccounts] = useState9(() => listAccounts());
-  const [viewKey, setViewKey] = useState9(() => accounts[0]?.apiKey);
-  const [viewNonce, setViewNonce] = useState9(0);
-  const [section, setSection] = useState9(accounts.length === 0 ? ACCOUNTS_SECTION : 0);
-  const [focus, setFocus] = useState9("nav");
-  const [help, setHelp] = useState9(false);
-  const [update2, setUpdate] = useState9({ kind: "idle" });
+  const [accounts, setAccounts] = useState8(() => listAccounts());
+  const [viewKey, setViewKey] = useState8(() => accounts[0]?.apiKey);
+  const [viewNonce, setViewNonce] = useState8(0);
+  const [section, setSection] = useState8(accounts.length === 0 ? SETTINGS_SECTION : 0);
+  const [focus, setFocus] = useState8("nav");
+  const [help, setHelp] = useState8(false);
+  const [update2, setUpdate] = useState8({ kind: "idle" });
   useEffect7(() => {
     let alive = true;
     const run = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
@@ -3603,7 +3693,7 @@ function App() {
   }, []);
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
-  const acctLabel = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
+  const acctLabel2 = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
   useEffect7(() => {
     if (!cur || cur.email) return;
     let alive = true;
@@ -3631,8 +3721,8 @@ function App() {
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
   const locked = accounts.length === 0;
-  const effectiveSection = locked ? ACCOUNTS_SECTION : section;
-  useInput8((input, key) => {
+  const effectiveSection = locked ? SETTINGS_SECTION : section;
+  useInput7((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -3660,29 +3750,29 @@ function App() {
   });
   const { cols, rows } = useTermSize();
   const current = SECTIONS[effectiveSection];
-  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
+  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
+    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Accounts" ? /* @__PURE__ */ jsx9(AccountsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Banner, { cols }),
-    /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
-      /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel }),
-      locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Accounts to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Accounts to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Accounts to add another" }),
-      update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 1, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Banner, { cols }),
+    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "account: " }),
+      /* @__PURE__ */ jsx8(Text8, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
+      locked ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+      update2.kind === "updating" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
     ] }),
-    /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+    /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
+      /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
         const isCur = i === effectiveSection;
-        const disabled = locked && s.label !== "Accounts";
-        return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+        const disabled = locked && s.label !== "Settings";
+        return /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
       }) }),
-      /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
+      /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, children: panelBody })
     ] }, viewNonce),
-    /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Accounts"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+    /* @__PURE__ */ jsx8(Box8, { children: locked ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
   ] });
 }
 var HELP = [
@@ -3695,21 +3785,21 @@ var HELP = [
   ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]
 ];
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 
 // src/tui/index.tsx
-import { jsx as jsx10 } from "react/jsx-runtime";
+import { jsx as jsx9 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -3718,11 +3808,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join7(homedir7(), ".solongate", "dataroom-debug.log");
+  const debugLog = join8(homedir8(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
+      mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {
@@ -3734,7 +3824,7 @@ async function launchTui() {
   console.info = toFile("info");
   console.debug = toFile("debug");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}), { patchConsole: false });
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}), { patchConsole: false });
     await waitUntilExit();
   } finally {
     Object.assign(console, saved);