@solongate/proxy 0.81.68 → 0.81.70

package/dist/login.js

@@ -26,7 +26,7 @@ var c = {
 var BANNER_COLORS = [c.blue1, c.blue2, c.blue3, c.blue4, c.blue5, c.blue6];
 
 // src/global-install.ts
-import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync } from "fs";
 import { resolve, join, dirname } from "path";
 import { homedir } from "os";
 import { fileURLToPath } from "url";

package/dist/tui/components.d.ts

@@ -1,4 +1,35 @@
 import type { ReactNode } from 'react';
+/** HH:MM:SS for a timestamp (ms or ISO); `--:--:--` when unparseable. */
+export declare const hhmmss: (ts: string | number) => string;
+/** Section divider title used across the Live/Audit consoles. */
+export declare function PaneTitle({ label, extra, width }: {
+    label: string;
+    extra?: string;
+    width: number;
+}): JSX.Element;
+/**
+ * One tool-stream row, shared verbatim by Live (rolling buffer) and Audit (full
+ * history). `loc` tags LOC vs CLD; `selected` highlights + shows the ▸ cursor.
+ * Columns are fixed-width and NEVER conditional so scrolling can't reshuffle the
+ * line and glitch the frame.
+ */
+export interface StreamRow {
+    at: number;
+    tool: string;
+    decision: string;
+    permission: string;
+    detail: string;
+    dlp: boolean;
+    burst: boolean;
+    agent?: string | null;
+    evalMs?: number | null;
+    rule?: string | null;
+}
+export declare function StreamLine({ e, loc, selected }: {
+    e: StreamRow;
+    loc: boolean;
+    selected?: boolean;
+}): JSX.Element;
 export declare function Panel({ title, subtitle, children }: {
     title: string;
     subtitle?: string;

package/dist/tui/index.js

@@ -5,9 +5,9 @@ var __export = (target, all) => {
 };
 
 // src/tui/index.tsx
-import { appendFileSync, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join8 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync7 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join9 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
@@ -125,6 +125,43 @@ function ago(ts) {
 
 // src/tui/components.tsx
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+var hhmmss = (ts) => {
+  const d = new Date(ts);
+  return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
+};
+function PaneTitle({ label, extra, width }) {
+  const tail = extra ? ` ${extra} ` : " ";
+  const used = 2 + 1 + label.length + tail.length;
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "\u2500 " }),
+    /* @__PURE__ */ jsxs(Text, { color: theme.accentBright, bold: true, children: [
+      "\u258E",
+      label
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
+  ] });
+}
+function StreamLine({ e, loc, selected }) {
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
+    /* @__PURE__ */ jsx(Text, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
+    /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
+      "[",
+      hhmmss(e.at),
+      " "
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
+    /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: (e.permission ?? "").padEnd(5) }),
+    /* @__PURE__ */ jsx(Text, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
+    /* @__PURE__ */ jsx(Text, { color: e.dlp ? theme.bad : theme.dim, bold: e.dlp, children: ("dlp:" + (e.dlp ? "yes" : "no")).padEnd(8) }),
+    /* @__PURE__ */ jsx(Text, { color: e.burst ? theme.warn : theme.dim, bold: e.burst, children: ("rl:" + (e.burst ? "yes" : "no")).padEnd(7) }),
+    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx(Text, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: e.detail })
+  ] });
+}
 function DataView({
   loading,
   error,
@@ -824,10 +861,6 @@ var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826"
 var BG = "#12234f";
 var DIM_FLOOR = "#233457";
 var RING = join4(process.cwd(), ".solongate", ".eval-ring.jsonl");
-var hhmmss = (ts) => {
-  const d = new Date(ts);
-  return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
-};
 var fmtUp = (ms) => {
   const s = Math.floor(ms / 1e3);
   const p = (n) => String(n).padStart(2, "0");
@@ -899,39 +932,6 @@ function HBar({ label, value, max, width, color }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
-function PaneTitle({ label, extra, width }) {
-  const tail = extra ? ` ${extra} ` : " ";
-  const used = 2 + 1 + label.length + tail.length;
-  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
-    /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
-      "\u258E",
-      label
-    ] }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
-  ] });
-}
-function StreamLine({ e, loc, selected }) {
-  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
-    /* @__PURE__ */ jsx2(Text2, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
-    /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-      "[",
-      hhmmss(e.at),
-      " "
-    ] }),
-    /* @__PURE__ */ jsx2(Text2, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
-    /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.dlp ? theme.bad : theme.dim, bold: e.dlp, children: ("dlp:" + (e.dlp ? "yes" : "no")).padEnd(8) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.burst ? theme.warn : theme.dim, bold: e.burst, children: ("rl:" + (e.burst ? "yes" : "no")).padEnd(7) }),
-    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
-  ] });
-}
 var FILTERS = ["all", "local", "cloud"];
 var sessStatus = (lastAt, now) => now - lastAt < 6e4 ? "active" : now - lastAt < 3e5 ? "idle" : "ended";
 var STATUS_STYLE = {
@@ -2472,12 +2472,25 @@ import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join5 } from "path";
 import { useState as useState6 } from "react";
-import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
 var SIGNALS = [void 0, "dlp", "ratelimit"];
 var SESS_STATUS = [void 0, "active", "idle", "ended"];
 var PAGE = 500;
 var LOCAL_MAX_BYTES = 16 * 1024 * 1024;
+var BG2 = "#12234f";
+var toStream = (e) => ({
+  at: e.at,
+  tool: e.tool,
+  decision: e.decision,
+  permission: (e.permission ?? "").slice(0, 4),
+  detail: (e.args ?? e.reason ?? "").replace(/\s+/g, " "),
+  dlp: e.dlp.length > 0,
+  burst: e.burst,
+  agent: e.agent,
+  evalMs: e.evalMs,
+  rule: e.rule
+});
 var cloudRow = (e) => {
   const rs = reasonSignals(e.reason);
   return {
@@ -2557,7 +2570,7 @@ var AUDIT_HELP = [
       ["esc", "back to the menu"]
     ]
   ],
-  ["Entry detail", [["\u2191\u2193 / PgUp PgDn", "scroll the arguments"], ["\u2190 / esc", "back to the list"]]]
+  ["Entry (full content)", [["\u2191\u2193 / PgUp PgDn", "scroll the reason + arguments"], ["space", "copy mode (freeze, then select)"], ["\u2190 / esc", "back to the list"]]]
 ];
 var sessStatus2 = (lastAt) => Date.now() - lastAt < 6e4 ? "active" : Date.now() - lastAt < 3e5 ? "idle" : "ended";
 var STATUS_DOT = {
@@ -2662,10 +2675,6 @@ function AuditPanel({ active: active2, focused }) {
   const sq = sessSearch.trim().toLowerCase();
   const sessionsFiltered = sessions.map((s) => ({ ...s, status: source === "cloud" ? s.status : sessStatus2(s.lastAt) })).filter((s) => SESS_STATUS[si] ? s.status === SESS_STATUS[si] : true).filter((s) => !sq || `${s.agent} ${s.id}`.toLowerCase().includes(sq)).sort((a, b) => b.lastAt - a.lastAt);
   const currentSess = sessionsFiltered[Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1))];
-  const sessionQ = useLoader(
-    () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
-    [view, current?.session, source]
-  );
   const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
   const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
   const doDelete = (kind) => {
@@ -2891,61 +2900,56 @@ function AuditPanel({ active: active2, focused }) {
     ] });
   }
   if (view === "detail" && current) {
-    const sessionCalls = source === "cloud" ? (sessionQ.data?.entries ?? []).map(cloudRow) : localAll.filter((r) => r.session && r.session === current.session).slice(0, 40);
-    const bodyW = Math.max(20, cols - 2);
-    const reasonLines = wrapLines("reason: " + (current.reason ?? "\u2014"), bodyW);
-    const argLines = current.args ? wrapLines(prettyJson(current.args), bodyW) : ["(no arguments recorded)"];
-    const sessionRows = current.session ? Math.min(4, sessionCalls.length) + 2 : 1;
-    const reasonShown = reasonLines.slice(0, 4);
-    const argBudget = Math.max(3, rows - 2 - 5 - reasonShown.length - 1 - sessionRows - 1 - (frozen ? 1 : 0));
-    const maxScroll = Math.max(0, argLines.length - argBudget);
+    const e = current;
+    const loc = source === "local";
+    const bodyW = Math.max(20, cols - 4);
+    const innerW = cols - 2;
+    const contentLines = [];
+    if (e.reason && e.decision !== "ALLOW") contentLines.push(...wrapLines("reason: " + e.reason, bodyW), "");
+    const argsText = e.args ? prettyJson(e.args) : e.reason && e.decision === "ALLOW" ? e.reason : "(no arguments recorded)";
+    contentLines.push(...wrapLines(argsText, bodyW));
+    const bodyRows = Math.max(4, rows - 7 - (frozen ? 1 : 0));
+    const maxScroll = Math.max(0, contentLines.length - bodyRows);
     const off = Math.min(detailScroll, maxScroll);
-    const argWin = argLines.slice(off, off + argBudget);
+    const win = contentLines.slice(off, off + bodyRows);
     return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs6(Box6, { children: [
-        /* @__PURE__ */ jsx6(Text6, { color: decisionColor(current.decision), bold: true, children: current.decision }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, children: "  " + current.tool }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " + current.permission + " \xB7 " + current.trust + "  " }),
-        srcChip
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx6(Text6, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx6(Text6, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        e.dlp.length ? /* @__PURE__ */ jsx6(Text6, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  \u2190 back" })
       ] }),
-      reasonShown.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: i === 0 ? /* @__PURE__ */ jsxs6(Fragment4, { children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "reason   " }),
-        /* @__PURE__ */ jsx6(Text6, { children: l.slice("reason: ".length) })
-      ] }) : /* @__PURE__ */ jsx6(Text6, { children: "         " + l }) }, "r" + i)),
-      /* @__PURE__ */ jsx6(Detail, { label: "rule", value: current.rule ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "agent", value: current.agent ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "session", value: current.session ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "dlp", value: current.dlp.length ? current.dlp.join(", ") : "none", color: current.dlp.length ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx6(Detail, { label: "ratelimit", value: current.burst ? "BURST \u2014 over the limit for this agent" : "no", color: current.burst ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx6(Detail, { label: "when", value: new Date(current.at).toLocaleString() + (current.evalMs != null ? ` \xB7 eval ${current.evalMs}ms` : "") }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: `arguments \u2014 full \xB7 ${argLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""}` }),
-      /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", height: argBudget, overflow: "hidden", children: argWin.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: l || " " }, off + i)) }),
-      current.session ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
-          "Session \xB7 ",
-          sessionCalls.length,
-          " calls"
-        ] }),
-        /* @__PURE__ */ jsx6(
-          Table,
-          {
-            columns: [
-              { header: "DECISION", width: 9 },
-              { header: "TOOL", width: 20 },
-              { header: "REASON", width: Math.max(16, cols - 48) },
-              { header: "WHEN", width: 6 }
-            ],
-            rows: sessionCalls.slice(0, Math.max(1, sessionRows - 2)).map((e) => [
-              { value: e.decision, color: decisionColor(e.decision) },
-              { value: truncate(e.tool, 20), color: theme.accent },
-              { value: truncate(e.reason ?? "\u2014", Math.max(16, cols - 48)) },
-              { value: ago(e.at), dim: true }
-            ])
-          }
-        )
-      ] }) : /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "(no session id)" }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2191\u2193 scroll arguments \xB7 \u2190/esc back to logs" })
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx6(Text6, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 trust " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.trust || "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx6(Text6, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx6(Text6, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx6(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      ] })
     ] });
   }
   const chip = (label, val, on) => /* @__PURE__ */ jsxs6(Text6, { children: [
@@ -3032,7 +3036,6 @@ function AuditPanel({ active: active2, focused }) {
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
-  const reasonW = Math.min(58, Math.max(12, cols - 71));
   return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     copyBanner,
@@ -3068,21 +3071,7 @@ function AuditPanel({ active: active2, focused }) {
       )
     ] }) : null,
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx6(
-      Table,
-      {
-        columns: [
-          { header: "", width: 2 },
-          { header: "DECISION", width: 9 },
-          { header: "TOOL", width: 18 },
-          { header: "AGENT", width: 14 },
-          { header: "REASON", width: reasonW },
-          { header: "SIGNAL", width: 8 },
-          { header: "WHEN", width: 6 }
-        ],
-        rows: windowed.map((e, i) => rowFor(e, start + i === selClamped && focused, reasonW))
-      }
-    ),
+    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused }, e.id)) }),
     pageRows.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
@@ -3090,43 +3079,58 @@ function AuditPanel({ active: active2, focused }) {
     ] }) : null
   ] }) });
 }
-function rowFor(e, active2, reasonW) {
-  const sig = [e.dlp.length ? `DLP${e.dlp.length > 1 ? e.dlp.length : ""}` : "", e.burst ? "RL" : ""].filter(Boolean).join(" ");
-  return [
-    { value: active2 ? "\u25B8" : "", color: theme.accentBright },
-    { value: e.decision, color: decisionColor(e.decision) },
-    { value: truncate(e.tool, 18), color: theme.accent },
-    { value: truncate(e.agent ?? "\u2014", 14), dim: true },
-    { value: truncate(e.reason ?? e.args ?? "\u2014", reasonW) },
-    { value: sig || "\xB7", color: sig ? theme.bad : void 0, dim: !sig },
-    { value: ago(e.at), dim: true }
-  ];
-}
-function Detail({ label, value, color }) {
-  return /* @__PURE__ */ jsxs6(Box6, { children: [
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: label.padEnd(9) }),
-    /* @__PURE__ */ jsx6(Text6, { color, wrap: "truncate", children: value })
-  ] });
-}
 
 // src/tui/panels/Settings.tsx
 import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
 import TextInput5 from "ink-text-input";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
 
-// src/logs-server-daemon.ts
-import { spawn as spawn3 } from "child_process";
-import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
+// src/global-install.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
+import { resolve as resolve2, join as join6, dirname } from "path";
 import { homedir as homedir6 } from "os";
-import { dirname, join as join6 } from "path";
 import { fileURLToPath } from "url";
-var DIR = join6(homedir6(), ".solongate");
-var STATE_FILE = join6(DIR, ".logs-server.json");
-var LOG_FILE = join6(DIR, "logs-server.log");
+import { createInterface } from "readline";
+import { execFileSync } from "child_process";
+var __dirname = dirname(fileURLToPath(import.meta.url));
+var HOOKS_DIR = resolve2(__dirname, "..", "hooks");
+function globalPaths() {
+  const home = homedir6();
+  const sgDir = join6(home, ".solongate");
+  const hooksDir = join6(sgDir, "hooks");
+  const claudeDir = join6(home, ".claude");
+  return {
+    home,
+    sgDir,
+    hooksDir,
+    claudeDir,
+    settingsPath: join6(claudeDir, "settings.json"),
+    backupPath: join6(claudeDir, "settings.solongate.bak"),
+    configPath: join6(sgDir, "cloud-guard.json")
+  };
+}
+function clearGuardUpdateCheck() {
+  try {
+    rmSync(join6(globalPaths().sgDir, ".hook-update-check"), { force: true });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/logs-server-daemon.ts
+import { spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync5, openSync as openSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname2, join as join7 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+var DIR = join7(homedir7(), ".solongate");
+var STATE_FILE = join7(DIR, ".logs-server.json");
+var LOG_FILE = join7(DIR, "logs-server.log");
 var LOGS_SERVER_PORT = 8788;
 function readState() {
   try {
-    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    const s = JSON.parse(readFileSync5(STATE_FILE, "utf-8"));
     return s && typeof s === "object" ? s : {};
   } catch {
     return {};
@@ -3134,8 +3138,8 @@ function readState() {
 }
 function writeState(s) {
   try {
-    mkdirSync4(DIR, { recursive: true });
-    writeFileSync5(STATE_FILE, JSON.stringify(s));
+    mkdirSync5(DIR, { recursive: true });
+    writeFileSync6(STATE_FILE, JSON.stringify(s));
   } catch {
   }
 }
@@ -3160,9 +3164,9 @@ function startLogsServerDaemon() {
     return { ...cur, desired: "on" };
   }
   try {
-    mkdirSync4(DIR, { recursive: true });
+    mkdirSync5(DIR, { recursive: true });
     const log = openSync2(LOG_FILE, "a");
-    const cli = join6(dirname(fileURLToPath(import.meta.url)), "index.js");
+    const cli = join7(dirname2(fileURLToPath2(import.meta.url)), "index.js");
     const p = spawn3(process.execPath, [cli, "logs-server"], {
       detached: true,
       stdio: ["ignore", log, log],
@@ -3190,7 +3194,7 @@ function stopLogsServerDaemon() {
 }
 
 // src/tui/panels/Settings.tsx
-import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var EVENTS = ["denials", "allowed", "all"];
 var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SIGNALS2 = ["any", "deny", "dlp", "ratelimit"];
@@ -3370,6 +3374,16 @@ function SettingsPanel({
       setMsg({ text: `viewing ${acctLabel(r.acc)}`, level: "ok" });
     } else if (r.kind === "acct-add") {
       beginLogin();
+    } else if (r.kind === "guard") {
+      if (!guard) return;
+      if (guard.up_to_date) {
+        setMsg({ text: `guard already on the latest hook (v${guard.latest})`, level: "ok" });
+        return;
+      }
+      const armed = clearGuardUpdateCheck();
+      setMsg(
+        armed ? { text: `\u2713 update armed. now make your agent RUN any command (e.g. "echo ok"), not just chat; the guard installs v${guard.latest} on the next executed command`, level: "ok" } : { text: "\u2717 could not arm the update (check ~/.solongate permissions)", level: "bad" }
+      );
     } else if (r.kind === "self") {
       if (!selfProt) return;
       run(selfProt.enabled ? "self-protection disabled" : "self-protection enabled", () => api.settings.setSelfProtection(!selfProt.enabled), selfQ.reload);
@@ -3608,9 +3622,9 @@ function SettingsPanel({
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
           cursor(r),
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
-          guard ? /* @__PURE__ */ jsxs7(Fragment5, { children: [
+          guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest)" : ` \u2192 v${guard.latest} available` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest)" : ` \u2192 v${guard.latest} available \xB7 enter to update` }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""}` })
           ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "loading\u2026" })
         ] });
@@ -3676,7 +3690,7 @@ function SettingsPanel({
   const sectionOf = (r) => r.kind === "acct" || r.kind === "acct-add" ? "ACCOUNTS" : r.kind === "guard" || r.kind === "self" ? "PROTECTION" : r.kind === "ll-enabled" || r.kind === "ll-path" || r.kind === "ll-server" ? "LOCAL LOGS" : r.kind === "wh" || r.kind === "wh-add" ? "WEBHOOKS" : "ALERTS";
   const SECTION_DESC = {
     ACCOUNTS: `on this device (${accounts.length}) \xB7 \u25CF viewing \xB7 ACTIVE = guard key \xB7 x removes`,
-    PROTECTION: "guard hook version + self-protection toggle",
+    PROTECTION: "guard hook version (enter to update) + self-protection toggle",
     "LOCAL LOGS": "mirror every decision to a file + dashboard link",
     WEBHOOKS: `POST events to a URL (${webhooks.length}) \xB7 t tests`,
     ALERTS: `one email + one telegram (${alerts.length}) \xB7 enter edits \xB7 m on/off`
@@ -3734,18 +3748,18 @@ function SettingsPanel({
 
 // src/self-update.ts
 import { execFile, spawn as spawn4 } from "child_process";
-import { mkdirSync as mkdirSync5, openSync as openSync3, readFileSync as readFileSync5, realpathSync, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir7 } from "os";
-import { dirname as dirname2, join as join7 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync6, realpathSync, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname3, join as join8 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 var PKG = "@solongate/proxy";
 var CHECK_EVERY_MS = 30 * 60 * 1e3;
 var ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
-var STATE_FILE2 = join7(homedir7(), ".solongate", ".self-update.json");
-var LOG_FILE2 = join7(homedir7(), ".solongate", "self-update.log");
+var STATE_FILE2 = join8(homedir8(), ".solongate", ".self-update.json");
+var LOG_FILE2 = join8(homedir8(), ".solongate", "self-update.log");
 function readState2() {
   try {
-    const s = JSON.parse(readFileSync5(STATE_FILE2, "utf-8"));
+    const s = JSON.parse(readFileSync6(STATE_FILE2, "utf-8"));
     return s && typeof s === "object" ? s : {};
   } catch {
     return {};
@@ -3753,14 +3767,14 @@ function readState2() {
 }
 function writeState2(s) {
   try {
-    mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
-    writeFileSync6(STATE_FILE2, JSON.stringify(s));
+    mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
+    writeFileSync7(STATE_FILE2, JSON.stringify(s));
   } catch {
   }
 }
 function currentVersion() {
   try {
-    const pkg = JSON.parse(readFileSync5(join7(dirname2(fileURLToPath2(import.meta.url)), "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync6(join8(dirname3(fileURLToPath3(import.meta.url)), "..", "package.json"), "utf-8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -3777,22 +3791,28 @@ function newerThan(b, a) {
 }
 async function fetchLatest() {
   try {
-    const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, { signal: AbortSignal.timeout(2e3) });
+    const res = await fetch(`https://registry.npmjs.org/${PKG}`, {
+      headers: { accept: "application/vnd.npm.install-v1+json" },
+      signal: AbortSignal.timeout(3e3)
+    });
     if (!res.ok) return null;
     const j = await res.json();
-    return typeof j.version === "string" ? j.version : null;
+    const latest = j["dist-tags"]?.latest;
+    if (typeof latest !== "string") return null;
+    if (!j.versions || !(latest in j.versions)) return null;
+    return latest;
   } catch {
     return null;
   }
 }
 function npmGlobalRoot() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     try {
       execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err, stdout) => {
-        resolve2(err ? null : stdout.trim() || null);
+        resolve3(err ? null : stdout.trim() || null);
       });
     } catch {
-      resolve2(null);
+      resolve3(null);
     }
   });
 }
@@ -3808,26 +3828,26 @@ async function isGlobalInstall() {
   }
 }
 function runGlobalInstall(version) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     try {
-      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
+      mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
       execFile(
         "npm",
         ["install", "-g", `${PKG}@${version}`],
         { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
         (err, stdout, stderr) => {
           try {
-            writeFileSync6(LOG_FILE2, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
+            writeFileSync7(LOG_FILE2, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
 ${stdout}
 ${stderr}
 `, { flag: "a" });
           } catch {
           }
-          resolve2(!err);
+          resolve3(!err);
         }
       );
     } catch {
-      resolve2(false);
+      resolve3(false);
     }
   });
 }
@@ -4031,11 +4051,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join8(homedir8(), ".solongate", "dataroom-debug.log");
+  const debugLog = join9(homedir9(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
+      mkdirSync7(join9(homedir9(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.68",
+  "version": "0.81.70",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {