@solongate/proxy 0.81.69 → 0.81.71

package/dist/tui/index.js

@@ -5,9 +5,9 @@ var __export = (target, all) => {
 };
 
 // src/tui/index.tsx
-import { appendFileSync, mkdirSync as mkdirSync6 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join8 } from "path";
+import { appendFileSync, mkdirSync as mkdirSync7 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join9 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
@@ -125,6 +125,43 @@ function ago(ts) {
 
 // src/tui/components.tsx
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+var hhmmss = (ts) => {
+  const d = new Date(ts);
+  return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
+};
+function PaneTitle({ label, extra, width }) {
+  const tail = extra ? ` ${extra} ` : " ";
+  const used = 2 + 1 + label.length + tail.length;
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "\u2500 " }),
+    /* @__PURE__ */ jsxs(Text, { color: theme.accentBright, bold: true, children: [
+      "\u258E",
+      label
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
+  ] });
+}
+function StreamLine({ e, loc, selected }) {
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
+    /* @__PURE__ */ jsx(Text, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
+    /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
+      "[",
+      hhmmss(e.at),
+      " "
+    ] }),
+    /* @__PURE__ */ jsx(Text, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "] " }),
+    /* @__PURE__ */ jsx(Text, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: (e.permission ?? "").padEnd(5) }),
+    /* @__PURE__ */ jsx(Text, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
+    /* @__PURE__ */ jsx(Text, { color: e.dlp ? theme.bad : theme.dim, bold: e.dlp, children: ("dlp:" + (e.dlp ? "yes" : "no")).padEnd(8) }),
+    /* @__PURE__ */ jsx(Text, { color: e.burst ? theme.warn : theme.dim, bold: e.burst, children: ("rl:" + (e.burst ? "yes" : "no")).padEnd(7) }),
+    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx(Text, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
+    /* @__PURE__ */ jsx(Text, { color: theme.dim, children: e.detail })
+  ] });
+}
 function DataView({
   loading,
   error,
@@ -322,6 +359,28 @@ function setActiveAccount(creds) {
     return false;
   }
 }
+function clearActiveCredential() {
+  try {
+    const p = join3(homedir3(), ".solongate", ["cloud", "guard.json"].join("-"));
+    if (!existsSync(p)) {
+      cached2 = null;
+      return true;
+    }
+    let existing = {};
+    try {
+      existing = JSON.parse(readFileSync3(p, "utf-8"));
+    } catch {
+    }
+    delete existing.apiKey;
+    delete existing.apiUrl;
+    writeFileSync2(p, JSON.stringify(existing, null, 2));
+    cached2 = null;
+    viewOverride = null;
+    return true;
+  } catch {
+    return false;
+  }
+}
 var ApiError = class extends Error {
   status;
   code;
@@ -824,10 +883,6 @@ var SPIN = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826"
 var BG = "#12234f";
 var DIM_FLOOR = "#233457";
 var RING = join4(process.cwd(), ".solongate", ".eval-ring.jsonl");
-var hhmmss = (ts) => {
-  const d = new Date(ts);
-  return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
-};
 var fmtUp = (ms) => {
   const s = Math.floor(ms / 1e3);
   const p = (n) => String(n).padStart(2, "0");
@@ -899,39 +954,6 @@ function HBar({ label, value, max, width, color }) {
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
   ] });
 }
-function PaneTitle({ label, extra, width }) {
-  const tail = extra ? ` ${extra} ` : " ";
-  const used = 2 + 1 + label.length + tail.length;
-  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "\u2500 " }),
-    /* @__PURE__ */ jsxs2(Text2, { color: theme.accentBright, bold: true, children: [
-      "\u258E",
-      label
-    ] }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
-  ] });
-}
-function StreamLine({ e, loc, selected }) {
-  return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", backgroundColor: selected ? "#1c2f63" : void 0, children: [
-    /* @__PURE__ */ jsx2(Text2, { color: selected ? theme.accentBright : theme.dim, children: selected ? "\u25B8" : " " }),
-    /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
-      "[",
-      hhmmss(e.at),
-      " "
-    ] }),
-    /* @__PURE__ */ jsx2(Text2, { color: loc ? theme.ok : "white", children: loc ? "LOC" : "CLD" }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: "] " }),
-    /* @__PURE__ */ jsx2(Text2, { color: decisionColor(e.decision), bold: e.decision !== "ALLOW", children: e.decision.padEnd(6) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.accent, children: truncate(e.tool, 12).padEnd(13) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.permission.padEnd(5) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : theme.dim, children: (e.evalMs != null ? `${e.evalMs}ms` : "\u2014").padEnd(7) }),
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: truncate(e.agent ?? "-", 11).padEnd(12) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.dlp ? theme.bad : theme.dim, bold: e.dlp, children: ("dlp:" + (e.dlp ? "yes" : "no")).padEnd(8) }),
-    /* @__PURE__ */ jsx2(Text2, { color: e.burst ? theme.warn : theme.dim, bold: e.burst, children: ("rl:" + (e.burst ? "yes" : "no")).padEnd(7) }),
-    e.rule && e.decision !== "ALLOW" ? /* @__PURE__ */ jsx2(Text2, { color: theme.bad, children: truncate(e.rule, 14) + " " }) : null,
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: e.detail })
-  ] });
-}
 var FILTERS = ["all", "local", "cloud"];
 var sessStatus = (lastAt, now) => now - lastAt < 6e4 ? "active" : now - lastAt < 3e5 ? "idle" : "ended";
 var STATUS_STYLE = {
@@ -2472,12 +2494,25 @@ import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join5 } from "path";
 import { useState as useState6 } from "react";
-import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
 var SIGNALS = [void 0, "dlp", "ratelimit"];
 var SESS_STATUS = [void 0, "active", "idle", "ended"];
 var PAGE = 500;
 var LOCAL_MAX_BYTES = 16 * 1024 * 1024;
+var BG2 = "#12234f";
+var toStream = (e) => ({
+  at: e.at,
+  tool: e.tool,
+  decision: e.decision,
+  permission: (e.permission ?? "").slice(0, 4),
+  detail: (e.args ?? e.reason ?? "").replace(/\s+/g, " "),
+  dlp: e.dlp.length > 0,
+  burst: e.burst,
+  agent: e.agent,
+  evalMs: e.evalMs,
+  rule: e.rule
+});
 var cloudRow = (e) => {
   const rs = reasonSignals(e.reason);
   return {
@@ -2557,7 +2592,7 @@ var AUDIT_HELP = [
       ["esc", "back to the menu"]
     ]
   ],
-  ["Entry detail", [["\u2191\u2193 / PgUp PgDn", "scroll the arguments"], ["\u2190 / esc", "back to the list"]]]
+  ["Entry (full content)", [["\u2191\u2193 / PgUp PgDn", "scroll the reason + arguments"], ["space", "copy mode (freeze, then select)"], ["\u2190 / esc", "back to the list"]]]
 ];
 var sessStatus2 = (lastAt) => Date.now() - lastAt < 6e4 ? "active" : Date.now() - lastAt < 3e5 ? "idle" : "ended";
 var STATUS_DOT = {
@@ -2662,10 +2697,6 @@ function AuditPanel({ active: active2, focused }) {
   const sq = sessSearch.trim().toLowerCase();
   const sessionsFiltered = sessions.map((s) => ({ ...s, status: source === "cloud" ? s.status : sessStatus2(s.lastAt) })).filter((s) => SESS_STATUS[si] ? s.status === SESS_STATUS[si] : true).filter((s) => !sq || `${s.agent} ${s.id}`.toLowerCase().includes(sq)).sort((a, b) => b.lastAt - a.lastAt);
   const currentSess = sessionsFiltered[Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1))];
-  const sessionQ = useLoader(
-    () => view === "detail" && current?.session && source === "cloud" ? api.audit.list({ session_id: current.session, limit: 40 }) : Promise.resolve(null),
-    [view, current?.session, source]
-  );
   const logsLoading = (source === "cloud" ? cloudQ.loading : localQ.loading) && !editing;
   const sessLoading = source === "cloud" ? agentsQ.loading : localQ.loading;
   const doDelete = (kind) => {
@@ -2891,61 +2922,56 @@ function AuditPanel({ active: active2, focused }) {
     ] });
   }
   if (view === "detail" && current) {
-    const sessionCalls = source === "cloud" ? (sessionQ.data?.entries ?? []).map(cloudRow) : localAll.filter((r) => r.session && r.session === current.session).slice(0, 40);
-    const bodyW = Math.max(20, cols - 2);
-    const reasonLines = wrapLines("reason: " + (current.reason ?? "\u2014"), bodyW);
-    const argLines = current.args ? wrapLines(prettyJson(current.args), bodyW) : ["(no arguments recorded)"];
-    const sessionRows = current.session ? Math.min(4, sessionCalls.length) + 2 : 1;
-    const reasonShown = reasonLines.slice(0, 4);
-    const argBudget = Math.max(3, rows - 2 - 5 - reasonShown.length - 1 - sessionRows - 1 - (frozen ? 1 : 0));
-    const maxScroll = Math.max(0, argLines.length - argBudget);
+    const e = current;
+    const loc = source === "local";
+    const bodyW = Math.max(20, cols - 4);
+    const innerW = cols - 2;
+    const contentLines = [];
+    if (e.reason && e.decision !== "ALLOW") contentLines.push(...wrapLines("reason: " + e.reason, bodyW), "");
+    const argsText = e.args ? prettyJson(e.args) : e.reason && e.decision === "ALLOW" ? e.reason : "(no arguments recorded)";
+    contentLines.push(...wrapLines(argsText, bodyW));
+    const bodyRows = Math.max(4, rows - 7 - (frozen ? 1 : 0));
+    const maxScroll = Math.max(0, contentLines.length - bodyRows);
     const off = Math.min(detailScroll, maxScroll);
-    const argWin = argLines.slice(off, off + argBudget);
+    const win = contentLines.slice(off, off + bodyRows);
     return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs6(Box6, { children: [
-        /* @__PURE__ */ jsx6(Text6, { color: decisionColor(current.decision), bold: true, children: current.decision }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, children: "  " + current.tool }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " + current.permission + " \xB7 " + current.trust + "  " }),
-        srcChip
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx6(Text6, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx6(Text6, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        e.dlp.length ? /* @__PURE__ */ jsx6(Text6, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  \u2190 back" })
       ] }),
-      reasonShown.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: i === 0 ? /* @__PURE__ */ jsxs6(Fragment4, { children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "reason   " }),
-        /* @__PURE__ */ jsx6(Text6, { children: l.slice("reason: ".length) })
-      ] }) : /* @__PURE__ */ jsx6(Text6, { children: "         " + l }) }, "r" + i)),
-      /* @__PURE__ */ jsx6(Detail, { label: "rule", value: current.rule ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "agent", value: current.agent ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "session", value: current.session ?? "\u2014" }),
-      /* @__PURE__ */ jsx6(Detail, { label: "dlp", value: current.dlp.length ? current.dlp.join(", ") : "none", color: current.dlp.length ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx6(Detail, { label: "ratelimit", value: current.burst ? "BURST \u2014 over the limit for this agent" : "no", color: current.burst ? theme.bad : void 0 }),
-      /* @__PURE__ */ jsx6(Detail, { label: "when", value: new Date(current.at).toLocaleString() + (current.evalMs != null ? ` \xB7 eval ${current.evalMs}ms` : "") }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: `arguments \u2014 full \xB7 ${argLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""}` }),
-      /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", height: argBudget, overflow: "hidden", children: argWin.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: l || " " }, off + i)) }),
-      current.session ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
-          "Session \xB7 ",
-          sessionCalls.length,
-          " calls"
-        ] }),
-        /* @__PURE__ */ jsx6(
-          Table,
-          {
-            columns: [
-              { header: "DECISION", width: 9 },
-              { header: "TOOL", width: 20 },
-              { header: "REASON", width: Math.max(16, cols - 48) },
-              { header: "WHEN", width: 6 }
-            ],
-            rows: sessionCalls.slice(0, Math.max(1, sessionRows - 2)).map((e) => [
-              { value: e.decision, color: decisionColor(e.decision) },
-              { value: truncate(e.tool, 20), color: theme.accent },
-              { value: truncate(e.reason ?? "\u2014", Math.max(16, cols - 48)) },
-              { value: ago(e.at), dim: true }
-            ])
-          }
-        )
-      ] }) : /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "(no session id)" }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2191\u2193 scroll arguments \xB7 \u2190/esc back to logs" })
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx6(Text6, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 trust " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.trust || "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx6(Text6, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx6(Text6, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx6(Text6, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      ] }),
+      /* @__PURE__ */ jsx6(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      ] })
     ] });
   }
   const chip = (label, val, on) => /* @__PURE__ */ jsxs6(Text6, { children: [
@@ -3032,7 +3058,6 @@ function AuditPanel({ active: active2, focused }) {
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
-  const reasonW = Math.min(58, Math.max(12, cols - 71));
   return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
     strip,
     copyBanner,
@@ -3068,21 +3093,7 @@ function AuditPanel({ active: active2, focused }) {
       )
     ] }) : null,
     /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx6(
-      Table,
-      {
-        columns: [
-          { header: "", width: 2 },
-          { header: "DECISION", width: 9 },
-          { header: "TOOL", width: 18 },
-          { header: "AGENT", width: 14 },
-          { header: "REASON", width: reasonW },
-          { header: "SIGNAL", width: 8 },
-          { header: "WHEN", width: 6 }
-        ],
-        rows: windowed.map((e, i) => rowFor(e, start + i === selClamped && focused, reasonW))
-      }
-    ),
+    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused }, e.id)) }),
     pageRows.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
@@ -3090,43 +3101,58 @@ function AuditPanel({ active: active2, focused }) {
     ] }) : null
   ] }) });
 }
-function rowFor(e, active2, reasonW) {
-  const sig = [e.dlp.length ? `DLP${e.dlp.length > 1 ? e.dlp.length : ""}` : "", e.burst ? "RL" : ""].filter(Boolean).join(" ");
-  return [
-    { value: active2 ? "\u25B8" : "", color: theme.accentBright },
-    { value: e.decision, color: decisionColor(e.decision) },
-    { value: truncate(e.tool, 18), color: theme.accent },
-    { value: truncate(e.agent ?? "\u2014", 14), dim: true },
-    { value: truncate(e.reason ?? e.args ?? "\u2014", reasonW) },
-    { value: sig || "\xB7", color: sig ? theme.bad : void 0, dim: !sig },
-    { value: ago(e.at), dim: true }
-  ];
-}
-function Detail({ label, value, color }) {
-  return /* @__PURE__ */ jsxs6(Box6, { children: [
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: label.padEnd(9) }),
-    /* @__PURE__ */ jsx6(Text6, { color, wrap: "truncate", children: value })
-  ] });
-}
 
 // src/tui/panels/Settings.tsx
 import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
 import TextInput5 from "ink-text-input";
 import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
 
-// src/logs-server-daemon.ts
-import { spawn as spawn3 } from "child_process";
-import { mkdirSync as mkdirSync4, openSync as openSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "fs";
+// src/global-install.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
+import { resolve as resolve2, join as join6, dirname } from "path";
 import { homedir as homedir6 } from "os";
-import { dirname, join as join6 } from "path";
 import { fileURLToPath } from "url";
-var DIR = join6(homedir6(), ".solongate");
-var STATE_FILE = join6(DIR, ".logs-server.json");
-var LOG_FILE = join6(DIR, "logs-server.log");
+import { createInterface } from "readline";
+import { execFileSync } from "child_process";
+var __dirname = dirname(fileURLToPath(import.meta.url));
+var HOOKS_DIR = resolve2(__dirname, "..", "hooks");
+function globalPaths() {
+  const home = homedir6();
+  const sgDir = join6(home, ".solongate");
+  const hooksDir = join6(sgDir, "hooks");
+  const claudeDir = join6(home, ".claude");
+  return {
+    home,
+    sgDir,
+    hooksDir,
+    claudeDir,
+    settingsPath: join6(claudeDir, "settings.json"),
+    backupPath: join6(claudeDir, "settings.solongate.bak"),
+    configPath: join6(sgDir, "cloud-guard.json")
+  };
+}
+function clearGuardUpdateCheck() {
+  try {
+    rmSync(join6(globalPaths().sgDir, ".hook-update-check"), { force: true });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/logs-server-daemon.ts
+import { spawn as spawn3 } from "child_process";
+import { mkdirSync as mkdirSync5, openSync as openSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir7 } from "os";
+import { dirname as dirname2, join as join7 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+var DIR = join7(homedir7(), ".solongate");
+var STATE_FILE = join7(DIR, ".logs-server.json");
+var LOG_FILE = join7(DIR, "logs-server.log");
 var LOGS_SERVER_PORT = 8788;
 function readState() {
   try {
-    const s = JSON.parse(readFileSync4(STATE_FILE, "utf-8"));
+    const s = JSON.parse(readFileSync5(STATE_FILE, "utf-8"));
     return s && typeof s === "object" ? s : {};
   } catch {
     return {};
@@ -3134,8 +3160,8 @@ function readState() {
 }
 function writeState(s) {
   try {
-    mkdirSync4(DIR, { recursive: true });
-    writeFileSync5(STATE_FILE, JSON.stringify(s));
+    mkdirSync5(DIR, { recursive: true });
+    writeFileSync6(STATE_FILE, JSON.stringify(s));
   } catch {
   }
 }
@@ -3160,9 +3186,9 @@ function startLogsServerDaemon() {
     return { ...cur, desired: "on" };
   }
   try {
-    mkdirSync4(DIR, { recursive: true });
+    mkdirSync5(DIR, { recursive: true });
     const log = openSync2(LOG_FILE, "a");
-    const cli = join6(dirname(fileURLToPath(import.meta.url)), "index.js");
+    const cli = join7(dirname2(fileURLToPath2(import.meta.url)), "index.js");
     const p = spawn3(process.execPath, [cli, "logs-server"], {
       detached: true,
       stdio: ["ignore", log, log],
@@ -3190,7 +3216,7 @@ function stopLogsServerDaemon() {
 }
 
 // src/tui/panels/Settings.tsx
-import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var EVENTS = ["denials", "allowed", "all"];
 var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SIGNALS2 = ["any", "deny", "dlp", "ratelimit"];
@@ -3211,7 +3237,8 @@ function SettingsPanel({
   active: active2,
   focused,
   viewApiKey,
-  onView
+  onView,
+  onAccountsChanged
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
@@ -3370,6 +3397,16 @@ function SettingsPanel({
       setMsg({ text: `viewing ${acctLabel(r.acc)}`, level: "ok" });
     } else if (r.kind === "acct-add") {
       beginLogin();
+    } else if (r.kind === "guard") {
+      if (!guard) return;
+      if (guard.up_to_date) {
+        setMsg({ text: `guard already on the latest hook (v${guard.latest})`, level: "ok" });
+        return;
+      }
+      const armed = clearGuardUpdateCheck();
+      setMsg(
+        armed ? { text: `\u2713 update armed. now make your agent RUN any command (e.g. "echo ok"), not just chat; the guard installs v${guard.latest} on the next executed command`, level: "ok" } : { text: "\u2717 could not arm the update (check ~/.solongate permissions)", level: "bad" }
+      );
     } else if (r.kind === "self") {
       if (!selfProt) return;
       run(selfProt.enabled ? "self-protection disabled" : "self-protection enabled", () => api.settings.setSelfProtection(!selfProt.enabled), selfQ.reload);
@@ -3475,16 +3512,31 @@ function SettingsPanel({
           else activate(cur);
         }
       } else if (inp === "x" && cur.kind === "acct") {
-        const k = "acct:" + cur.acc.apiKey;
+        const target = cur.acc;
+        const k = "acct:" + target.apiKey;
+        const wasActive = isActiveAccount(target.apiKey);
+        const others = accounts.filter((a) => a.apiKey !== target.apiKey);
         if (confirmDel !== k) {
           setConfirmDel(k);
-          setMsg({ text: `press x again to remove ${acctLabel(cur.acc)} from this device (the cloud account is untouched)`, level: "bad" });
+          const note = wasActive ? others.length ? ` \u2014 the ACTIVE guard key; ${acctLabel(others[0])} takes over` : " \u2014 your ONLY account & the active guard key; this signs the device out (guard has no key until you log in again)" : " (the cloud account is untouched)";
+          setMsg({ text: `press x again to remove ${acctLabel(target)} from this device${note}`, level: "bad" });
           return;
         }
         setConfirmDel(null);
-        removeAccount(cur.acc.apiKey);
-        setMsg({ text: `\u2713 removed ${acctLabel(cur.acc)} from this device`, level: "ok" });
+        removeAccount(target.apiKey);
+        let extra = " from this device";
+        if (wasActive) {
+          if (others.length) {
+            setActiveAccount({ apiKey: others[0].apiKey, apiUrl: others[0].apiUrl });
+            extra = ` \xB7 ${acctLabel(others[0])} is now the active key`;
+          } else {
+            clearActiveCredential();
+            extra = " \xB7 signed out of this device";
+          }
+        }
+        setMsg({ text: `\u2713 removed ${acctLabel(target)}${extra}`, level: "ok" });
         refreshAccounts();
+        onAccountsChanged?.();
       } else if (inp === "t" && cur.kind === "wh") {
         run("webhook test sent \u2014 check your endpoint", () => api.settings.sendTestWebhook(cur.wh.id).then((r) => {
           if (!r.delivered) throw new Error("endpoint rejected the test (non-2xx)");
@@ -3608,9 +3660,9 @@ function SettingsPanel({
         return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
           cursor(r),
           /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
-          guard ? /* @__PURE__ */ jsxs7(Fragment5, { children: [
+          guard ? /* @__PURE__ */ jsxs7(Fragment4, { children: [
             /* @__PURE__ */ jsx7(Text7, { color: guard.up_to_date ? theme.ok : theme.warn, children: `v${guard.installed ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest)" : ` \u2192 v${guard.latest} available` }),
+            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guard.up_to_date ? " (latest)" : ` \u2192 v${guard.latest} available \xB7 enter to update` }),
             /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7  ${guard.device_count} device${guard.device_count === 1 ? "" : "s"}${guard.outdated_count ? ` \xB7 ${guard.outdated_count} outdated` : ""}` })
           ] }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "loading\u2026" })
         ] });
@@ -3676,7 +3728,7 @@ function SettingsPanel({
   const sectionOf = (r) => r.kind === "acct" || r.kind === "acct-add" ? "ACCOUNTS" : r.kind === "guard" || r.kind === "self" ? "PROTECTION" : r.kind === "ll-enabled" || r.kind === "ll-path" || r.kind === "ll-server" ? "LOCAL LOGS" : r.kind === "wh" || r.kind === "wh-add" ? "WEBHOOKS" : "ALERTS";
   const SECTION_DESC = {
     ACCOUNTS: `on this device (${accounts.length}) \xB7 \u25CF viewing \xB7 ACTIVE = guard key \xB7 x removes`,
-    PROTECTION: "guard hook version + self-protection toggle",
+    PROTECTION: "guard hook version (enter to update) + self-protection toggle",
     "LOCAL LOGS": "mirror every decision to a file + dashboard link",
     WEBHOOKS: `POST events to a URL (${webhooks.length}) \xB7 t tests`,
     ALERTS: `one email + one telegram (${alerts.length}) \xB7 enter edits \xB7 m on/off`
@@ -3734,18 +3786,18 @@ function SettingsPanel({
 
 // src/self-update.ts
 import { execFile, spawn as spawn4 } from "child_process";
-import { mkdirSync as mkdirSync5, openSync as openSync3, readFileSync as readFileSync5, realpathSync, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir7 } from "os";
-import { dirname as dirname2, join as join7 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { mkdirSync as mkdirSync6, openSync as openSync3, readFileSync as readFileSync6, realpathSync, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname3, join as join8 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 var PKG = "@solongate/proxy";
 var CHECK_EVERY_MS = 30 * 60 * 1e3;
 var ATTEMPT_EVERY_MS = 6 * 60 * 60 * 1e3;
-var STATE_FILE2 = join7(homedir7(), ".solongate", ".self-update.json");
-var LOG_FILE2 = join7(homedir7(), ".solongate", "self-update.log");
+var STATE_FILE2 = join8(homedir8(), ".solongate", ".self-update.json");
+var LOG_FILE2 = join8(homedir8(), ".solongate", "self-update.log");
 function readState2() {
   try {
-    const s = JSON.parse(readFileSync5(STATE_FILE2, "utf-8"));
+    const s = JSON.parse(readFileSync6(STATE_FILE2, "utf-8"));
     return s && typeof s === "object" ? s : {};
   } catch {
     return {};
@@ -3753,14 +3805,14 @@ function readState2() {
 }
 function writeState2(s) {
   try {
-    mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
-    writeFileSync6(STATE_FILE2, JSON.stringify(s));
+    mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
+    writeFileSync7(STATE_FILE2, JSON.stringify(s));
   } catch {
   }
 }
 function currentVersion() {
   try {
-    const pkg = JSON.parse(readFileSync5(join7(dirname2(fileURLToPath2(import.meta.url)), "..", "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync6(join8(dirname3(fileURLToPath3(import.meta.url)), "..", "package.json"), "utf-8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -3792,13 +3844,13 @@ async function fetchLatest() {
   }
 }
 function npmGlobalRoot() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     try {
       execFile("npm", ["root", "-g"], { timeout: 5e3, windowsHide: true, shell: process.platform === "win32" }, (err, stdout) => {
-        resolve2(err ? null : stdout.trim() || null);
+        resolve3(err ? null : stdout.trim() || null);
       });
     } catch {
-      resolve2(null);
+      resolve3(null);
     }
   });
 }
@@ -3814,26 +3866,26 @@ async function isGlobalInstall() {
   }
 }
 function runGlobalInstall(version) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     try {
-      mkdirSync5(join7(homedir7(), ".solongate"), { recursive: true });
+      mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
       execFile(
         "npm",
         ["install", "-g", `${PKG}@${version}`],
         { timeout: 3e5, windowsHide: true, shell: process.platform === "win32" },
         (err, stdout, stderr) => {
           try {
-            writeFileSync6(LOG_FILE2, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
+            writeFileSync7(LOG_FILE2, `${(/* @__PURE__ */ new Date()).toISOString()} install ${version}: ${err ? "FAILED" : "ok"}
 ${stdout}
 ${stderr}
 `, { flag: "a" });
           } catch {
           }
-          resolve2(!err);
+          resolve3(!err);
         }
       );
     } catch {
-      resolve2(false);
+      resolve3(false);
     }
   });
 }
@@ -3944,6 +3996,14 @@ function App() {
     if (accounts.length < 2) return;
     viewAccount(accounts[(acctIdx + 1) % accounts.length]);
   };
+  const syncAccounts = () => {
+    const list5 = listAccounts();
+    setAccounts(list5);
+    const next = list5.find((a) => a.apiKey === viewKey) ?? list5[0];
+    setViewCredentials(next ? { apiKey: next.apiKey, apiUrl: next.apiUrl } : null);
+    setViewKey(next?.apiKey);
+    setViewNonce((n) => n + 1);
+  };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
   useInput7((input, key) => {
@@ -3979,7 +4039,7 @@ function App() {
     return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.
@@ -4037,11 +4097,11 @@ async function launchTui() {
     return;
   }
   process.stdout.write("\x1B[?1049h\x1B[H");
-  const debugLog = join8(homedir8(), ".solongate", "dataroom-debug.log");
+  const debugLog = join9(homedir9(), ".solongate", "dataroom-debug.log");
   const saved = { log: console.log, warn: console.warn, error: console.error, info: console.info, debug: console.debug };
   const toFile = (level) => (...args) => {
     try {
-      mkdirSync6(join8(homedir8(), ".solongate"), { recursive: true });
+      mkdirSync7(join9(homedir9(), ".solongate"), { recursive: true });
       appendFileSync(debugLog, `${(/* @__PURE__ */ new Date()).toISOString()} [${level}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
 `);
     } catch {