@solongate/proxy 0.81.72 → 0.81.74

package/dist/index.js

@@ -9273,28 +9273,26 @@ import TextInput3 from "ink-text-input";
 import { useEffect as useEffect5, useState as useState5 } from "react";
 import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 function DlpPanel({ focused }) {
+  const { cols, rows } = usePanelSize();
   const q = useLoader(() => api.settings.getSecurityLayers());
   const [dlp, setDlp] = useState5(null);
   const [available, setAvailable] = useState5([]);
+  const [ghostOn, setGhostOn] = useState5(false);
+  const [ghostPats, setGhostPats] = useState5([]);
   const [sel, setSel] = useState5(0);
   const [dirty, setDirty] = useState5(false);
   const [status, setStatus] = useState5(null);
   const [adding, setAdding] = useState5(null);
   const [newName, setNewName] = useState5("");
-  const [newRe, setNewRe] = useState5("");
-  const [ghostOn, setGhostOn] = useState5(false);
-  const spQ = useLoader(() => api.settings.getSelfProtection());
-  const [selfProt, setSelfProt] = useState5(null);
+  const [input, setInput] = useState5("");
   useEffect5(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
       setGhostOn(q.data.layers.ghost.mode === "on");
+      setGhostPats([...q.data.layers.ghost.patterns]);
     }
   }, [q.data, dlp]);
-  useEffect5(() => {
-    if (spQ.data && selfProt === null) setSelfProt(spQ.data.enabled);
-  }, [spQ.data, selfProt]);
   const mutate = (next) => {
     setDlp(next);
     setDirty(true);
@@ -9304,128 +9302,175 @@ function DlpPanel({ focused }) {
     if (!dlp || !q.data) return;
     setStatus("Saving\u2026");
     try {
-      const ghost = { ...q.data.layers.ghost, mode: ghostOn ? "on" : "off" };
+      const ghost = { mode: ghostOn ? "on" : "off", patterns: ghostPats };
       const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp, ghost });
       setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns], custom: [...res.layers.dlp.custom] });
       setGhostOn(res.layers.ghost.mode === "on");
+      setGhostPats([...res.layers.ghost.patterns]);
       setDirty(false);
       setStatus("\u2713 Saved");
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
   };
-  const toggleSelfProt = async () => {
-    const next = !(selfProt ?? false);
-    setSelfProt(next);
-    try {
-      await api.settings.setSelfProtection(next);
-      setStatus(`\u2713 self-protection ${next ? "on" : "off"}`);
-    } catch (e) {
-      setSelfProt(!next);
-      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
-    }
-  };
   const discard = () => {
-    if (q.data) setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
+    if (!q.data) return;
+    setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
+    setGhostOn(q.data.layers.ghost.mode === "on");
+    setGhostPats([...q.data.layers.ghost.patterns]);
     setDirty(false);
     setStatus("discarded");
   };
-  const customCount = dlp?.custom.length ?? 0;
-  const total = available.length + customCount;
+  const entries = [
+    ...available.map((name) => ({ kind: "builtin", name })),
+    ...(dlp?.custom ?? []).map((_, i) => ({ kind: "custom", i })),
+    ...ghostPats.map((_, i) => ({ kind: "ghost", i }))
+  ];
+  const selC = Math.min(sel, Math.max(0, entries.length - 1));
+  const cur = entries[selC];
   useInput4(
-    (input, key) => {
+    (input2, key) => {
       if (!dlp) return;
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      else if (key.downArrow) setSel((n) => Math.min(total - 1, n + 1));
-      else if (input === "m") {
-        const idx = (MODES2.indexOf(dlp.mode) + 1) % MODES2.length;
-        mutate({ ...dlp, mode: MODES2[idx] });
-      } else if (input === "a") {
-        setNewName("");
-        setNewRe("");
-        setAdding("name");
-      } else if (input === " " && sel < available.length) {
-        const p = available[sel];
+      if (key.upArrow) setSel(() => Math.max(0, selC - 1));
+      else if (key.downArrow) setSel(() => Math.min(entries.length - 1, selC + 1));
+      else if (input2 === "m") mutate({ ...dlp, mode: MODES2[(MODES2.indexOf(dlp.mode) + 1) % MODES2.length] });
+      else if (input2 === " " && cur?.kind === "builtin") {
         const set = new Set(dlp.patterns);
-        if (set.has(p)) set.delete(p);
-        else set.add(p);
+        if (set.has(cur.name)) set.delete(cur.name);
+        else set.add(cur.name);
         mutate({ ...dlp, patterns: [...set] });
-      } else if (input === "d" && sel >= available.length) {
-        const ci = sel - available.length;
-        mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== ci) });
-        setSel((n) => Math.max(0, n - 1));
-      } else if (input === "g") {
+      } else if (input2 === "a") {
+        setNewName("");
+        setInput("");
+        setAdding("name");
+      } else if (input2 === "r") {
+        setInput("");
+        setAdding("route");
+      } else if (input2 === "d") {
+        if (cur?.kind === "custom") {
+          mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== cur.i) });
+          setSel(() => Math.max(0, selC - 1));
+        } else if (cur?.kind === "ghost") {
+          setGhostPats((ps) => ps.filter((_, i) => i !== cur.i));
+          setDirty(true);
+          setStatus(null);
+          setSel(() => Math.max(0, selC - 1));
+        }
+      } else if (input2 === "g") {
         setGhostOn((v) => !v);
         setDirty(true);
         setStatus(null);
-      } else if (input === "P") void toggleSelfProt();
-      else if (input === "s") void save();
-      else if (input === "x") discard();
+      } else if (input2 === "s") void save();
+      else if (input2 === "x") discard();
     },
     { isActive: focused && !adding }
   );
   const enabled = new Set(dlp?.patterns ?? []);
+  const lines = [];
+  const header = (key, label, extra) => lines.push({
+    node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.accentBright, bold: true, children: label }),
+      extra ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + extra }) : null
+    ] }, key),
+    entry: -1
+  });
+  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
+  let ei = 0;
+  header("h:builtin", "built-in secret patterns", "space toggles on/off");
+  available.forEach((p) => {
+    const on = enabled.has(p);
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
+        /* @__PURE__ */ jsx5(Text5, { color: on ? void 0 : theme.dim, children: p })
+      ] }, "b:" + p),
+      entry: idx
+    });
+  });
+  header("h:custom", "custom patterns", "regex over tool args \xB7 a add \xB7 d remove");
+  note("n:custom-help", "  a JS regex, e.g.  sk-[a-z0-9]{20}   AKIA[0-9A-Z]{16}   password=\\S+");
+  if ((dlp?.custom.length ?? 0) === 0) note("n:custom", "  (none \u2014 press a to add a name + regex)");
+  (dlp?.custom ?? []).forEach((c2, i) => {
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: c2.name }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + truncate2(c2.re, Math.max(10, cols - c2.name.length - 8)) })
+      ] }, "c:" + c2.name + i),
+      entry: idx
+    });
+  });
+  header("h:ghost", "ghost \u2014 hidden paths", `${ghostOn ? "ON" : "off"} (g) \xB7 r add route \xB7 d remove`);
+  note("n:ghost-help", "  glob path, * = any chars, e.g.  */.env   *.pem   */secrets/*   *secret*");
+  if (ghostPats.length === 0) note("n:ghost", "  (none \u2014 g turns ghost on, r adds a path to hide)");
+  ghostPats.forEach((p, i) => {
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.accent : theme.dim, children: truncate2(p, Math.max(10, cols - 6)) }),
+        !ghostOn ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  (ghost off)" }) : null
+      ] }, "g:" + p + i),
+      entry: idx
+    });
+  });
+  const editRows = adding === "re" ? 2 : adding ? 1 : 0;
+  const headerRows = 2 + editRows + (status ? 1 : 0);
+  const budget = Math.max(3, rows - headerRows - 1);
+  const selLine = Math.max(0, lines.findIndex((l) => l.entry === selC));
+  const maxStart = Math.max(0, lines.length - budget);
+  const start = Math.min(Math.max(0, selLine - Math.floor(budget / 2)), maxStart);
+  const win = lines.slice(start, start + budget);
+  const moreAbove = start;
+  const moreBelow = Math.max(0, lines.length - (start + budget));
   return /* @__PURE__ */ jsx5(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs5(Box5, { children: [
+    /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx5(Text5, { children: "mode: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), children: dlp.mode }),
+      /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
       dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 g ghost \xB7 P self-protect \xB7 s save" : "press \u2192 to edit" }),
-    /* @__PURE__ */ jsxs5(Box5, { children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "ghost: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.ok : theme.dim, children: ghostOn ? "on" : "off" }),
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   self-protection: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: selfProt ? theme.ok : theme.dim, children: selfProt === null ? "\u2026" : selfProt ? "on" : "off" })
-    ] }),
-    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
-      const on = enabled.has(p);
-      const active2 = focused && sel === i;
-      return /* @__PURE__ */ jsxs5(Text5, { color: active2 ? theme.accentBright : void 0, bold: active2, children: [
-        (active2 ? "\u25B8 " : "  ") + (on ? "\u25CF " : "\u25CB "),
-        /* @__PURE__ */ jsx5(Text5, { color: on ? theme.ok : theme.dim, children: p })
-      ] }, p);
-    }) }),
-    /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "Custom patterns" }),
-      dlp.custom.length === 0 ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  (none \u2014 press a to add)" }) : null,
-      dlp.custom.map((c2, i) => {
-        const active2 = focused && sel === available.length + i;
-        return /* @__PURE__ */ jsxs5(Text5, { color: active2 ? theme.accentBright : void 0, bold: active2, children: [
-          active2 ? "\u25B8 " : "  ",
-          /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: c2.name }),
-          " ",
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: c2.re })
-        ] }, c2.name + i);
-      })
-    ] }),
-    adding ? /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "New pattern name: " : `Regex for "${newName}": ` }),
-      adding === "name" ? /* @__PURE__ */ jsx5(
-        TextInput3,
-        {
-          value: newName,
-          onChange: setNewName,
-          onSubmit: (v) => {
-            if (!v.trim()) return setAdding(null);
-            setNewName(v.trim());
-            setAdding("re");
-          }
-        }
-      ) : /* @__PURE__ */ jsx5(
-        TextInput3,
-        {
-          value: newRe,
-          onChange: setNewRe,
-          onSubmit: (v) => {
-            if (v.trim() && dlp) mutate({ ...dlp, custom: [...dlp.custom, { name: newName, re: v.trim() }] });
-            setAdding(null);
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add pattern \xB7 r add route \xB7 d remove \xB7 g ghost \xB7 s save${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
+    adding ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs5(Box5, { children: [
+        /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `regex for "${newName}" (e.g. sk-[a-z0-9]{20}): ` : "ghost path to hide (glob, * = any chars, e.g. */.env  *.pem): " }),
+        /* @__PURE__ */ jsx5(
+          TextInput3,
+          {
+            value: input,
+            onChange: setInput,
+            onSubmit: (v) => {
+              const t = v.trim();
+              if (adding === "name") {
+                if (!t) return setAdding(null);
+                setNewName(t);
+                setInput("");
+                setAdding("re");
+              } else if (adding === "re") {
+                if (t && dlp) mutate({ ...dlp, custom: [...dlp.custom, { name: newName, re: t }] });
+                setAdding(null);
+              } else {
+                if (t && !ghostPats.includes(t)) {
+                  setGhostPats((ps) => [...ps, t]);
+                  setDirty(true);
+                  setStatus(null);
+                }
+                setAdding(null);
+              }
+            }
           }
-        }
-      )
+        )
+      ] }),
+      adding === "re" ? /* @__PURE__ */ jsx5(RegexTest, { re: input }) : null
     ] }) : null,
-    adding === "re" ? /* @__PURE__ */ jsx5(RegexTest, { re: newRe }) : null,
-    status ? /* @__PURE__ */ jsx5(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
+    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
+    status ? /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
   ] }) : null });
 }
 function RegexTest({ re }) {
@@ -11055,12 +11100,12 @@ function App() {
         update2.kind === "updating" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
       ] }),
       /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
-        /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+        /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
           const isCur = i === effectiveSection;
           const disabled = locked && s.label !== "Settings";
           return /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
         }) }),
-        /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
+        /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
       ] }, viewNonce),
       /* @__PURE__ */ jsx8(Box8, { children: locked ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
     ] })
@@ -11110,7 +11155,8 @@ var init_App = __esm({
       ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
       ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
       ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
-      ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
+      ["Rate limit", [["\u2191\u2193", "field"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["s", "save"]]],
+      ["DLP", [["\u2191\u2193", "move"], ["space", "toggle a built-in pattern on/off"], ["m", "cycle mode"], ["a", "add custom pattern (name \u2192 regex)"], ["r", "add a ghost route (path to hide)"], ["d", "remove custom / route"], ["g", "ghost on/off"], ["s", "save \xB7 x discard"]]],
       ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
       ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]],
       ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]

package/dist/tui/index.js

@@ -2321,28 +2321,26 @@ import { useEffect as useEffect5, useState as useState5 } from "react";
 import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 var MODES2 = ["off", "detect", "block"];
 function DlpPanel({ focused }) {
+  const { cols, rows } = usePanelSize();
   const q = useLoader(() => api.settings.getSecurityLayers());
   const [dlp, setDlp] = useState5(null);
   const [available, setAvailable] = useState5([]);
+  const [ghostOn, setGhostOn] = useState5(false);
+  const [ghostPats, setGhostPats] = useState5([]);
   const [sel, setSel] = useState5(0);
   const [dirty, setDirty] = useState5(false);
   const [status, setStatus] = useState5(null);
   const [adding, setAdding] = useState5(null);
   const [newName, setNewName] = useState5("");
-  const [newRe, setNewRe] = useState5("");
-  const [ghostOn, setGhostOn] = useState5(false);
-  const spQ = useLoader(() => api.settings.getSelfProtection());
-  const [selfProt, setSelfProt] = useState5(null);
+  const [input, setInput] = useState5("");
   useEffect5(() => {
     if (q.data && !dlp) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
       setGhostOn(q.data.layers.ghost.mode === "on");
+      setGhostPats([...q.data.layers.ghost.patterns]);
     }
   }, [q.data, dlp]);
-  useEffect5(() => {
-    if (spQ.data && selfProt === null) setSelfProt(spQ.data.enabled);
-  }, [spQ.data, selfProt]);
   const mutate = (next) => {
     setDlp(next);
     setDirty(true);
@@ -2352,128 +2350,175 @@ function DlpPanel({ focused }) {
     if (!dlp || !q.data) return;
     setStatus("Saving\u2026");
     try {
-      const ghost = { ...q.data.layers.ghost, mode: ghostOn ? "on" : "off" };
+      const ghost = { mode: ghostOn ? "on" : "off", patterns: ghostPats };
       const res = await api.settings.setSecurityLayers({ ...q.data.layers, dlp, ghost });
       setDlp({ ...res.layers.dlp, patterns: [...res.layers.dlp.patterns], custom: [...res.layers.dlp.custom] });
       setGhostOn(res.layers.ghost.mode === "on");
+      setGhostPats([...res.layers.ghost.patterns]);
       setDirty(false);
       setStatus("\u2713 Saved");
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
   };
-  const toggleSelfProt = async () => {
-    const next = !(selfProt ?? false);
-    setSelfProt(next);
-    try {
-      await api.settings.setSelfProtection(next);
-      setStatus(`\u2713 self-protection ${next ? "on" : "off"}`);
-    } catch (e) {
-      setSelfProt(!next);
-      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
-    }
-  };
   const discard = () => {
-    if (q.data) setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
+    if (!q.data) return;
+    setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
+    setGhostOn(q.data.layers.ghost.mode === "on");
+    setGhostPats([...q.data.layers.ghost.patterns]);
     setDirty(false);
     setStatus("discarded");
   };
-  const customCount = dlp?.custom.length ?? 0;
-  const total = available.length + customCount;
+  const entries = [
+    ...available.map((name) => ({ kind: "builtin", name })),
+    ...(dlp?.custom ?? []).map((_, i) => ({ kind: "custom", i })),
+    ...ghostPats.map((_, i) => ({ kind: "ghost", i }))
+  ];
+  const selC = Math.min(sel, Math.max(0, entries.length - 1));
+  const cur = entries[selC];
   useInput4(
-    (input, key) => {
+    (input2, key) => {
       if (!dlp) return;
-      if (key.upArrow) setSel((n) => Math.max(0, n - 1));
-      else if (key.downArrow) setSel((n) => Math.min(total - 1, n + 1));
-      else if (input === "m") {
-        const idx = (MODES2.indexOf(dlp.mode) + 1) % MODES2.length;
-        mutate({ ...dlp, mode: MODES2[idx] });
-      } else if (input === "a") {
-        setNewName("");
-        setNewRe("");
-        setAdding("name");
-      } else if (input === " " && sel < available.length) {
-        const p = available[sel];
+      if (key.upArrow) setSel(() => Math.max(0, selC - 1));
+      else if (key.downArrow) setSel(() => Math.min(entries.length - 1, selC + 1));
+      else if (input2 === "m") mutate({ ...dlp, mode: MODES2[(MODES2.indexOf(dlp.mode) + 1) % MODES2.length] });
+      else if (input2 === " " && cur?.kind === "builtin") {
         const set = new Set(dlp.patterns);
-        if (set.has(p)) set.delete(p);
-        else set.add(p);
+        if (set.has(cur.name)) set.delete(cur.name);
+        else set.add(cur.name);
         mutate({ ...dlp, patterns: [...set] });
-      } else if (input === "d" && sel >= available.length) {
-        const ci = sel - available.length;
-        mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== ci) });
-        setSel((n) => Math.max(0, n - 1));
-      } else if (input === "g") {
+      } else if (input2 === "a") {
+        setNewName("");
+        setInput("");
+        setAdding("name");
+      } else if (input2 === "r") {
+        setInput("");
+        setAdding("route");
+      } else if (input2 === "d") {
+        if (cur?.kind === "custom") {
+          mutate({ ...dlp, custom: dlp.custom.filter((_, i) => i !== cur.i) });
+          setSel(() => Math.max(0, selC - 1));
+        } else if (cur?.kind === "ghost") {
+          setGhostPats((ps) => ps.filter((_, i) => i !== cur.i));
+          setDirty(true);
+          setStatus(null);
+          setSel(() => Math.max(0, selC - 1));
+        }
+      } else if (input2 === "g") {
         setGhostOn((v) => !v);
         setDirty(true);
         setStatus(null);
-      } else if (input === "P") void toggleSelfProt();
-      else if (input === "s") void save();
-      else if (input === "x") discard();
+      } else if (input2 === "s") void save();
+      else if (input2 === "x") discard();
     },
     { isActive: focused && !adding }
   );
   const enabled = new Set(dlp?.patterns ?? []);
+  const lines = [];
+  const header = (key, label, extra) => lines.push({
+    node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.accentBright, bold: true, children: label }),
+      extra ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + extra }) : null
+    ] }, key),
+    entry: -1
+  });
+  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
+  let ei = 0;
+  header("h:builtin", "built-in secret patterns", "space toggles on/off");
+  available.forEach((p) => {
+    const on = enabled.has(p);
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
+        /* @__PURE__ */ jsx5(Text5, { color: on ? void 0 : theme.dim, children: p })
+      ] }, "b:" + p),
+      entry: idx
+    });
+  });
+  header("h:custom", "custom patterns", "regex over tool args \xB7 a add \xB7 d remove");
+  note("n:custom-help", "  a JS regex, e.g.  sk-[a-z0-9]{20}   AKIA[0-9A-Z]{16}   password=\\S+");
+  if ((dlp?.custom.length ?? 0) === 0) note("n:custom", "  (none \u2014 press a to add a name + regex)");
+  (dlp?.custom ?? []).forEach((c2, i) => {
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: c2.name }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + truncate(c2.re, Math.max(10, cols - c2.name.length - 8)) })
+      ] }, "c:" + c2.name + i),
+      entry: idx
+    });
+  });
+  header("h:ghost", "ghost \u2014 hidden paths", `${ghostOn ? "ON" : "off"} (g) \xB7 r add route \xB7 d remove`);
+  note("n:ghost-help", "  glob path, * = any chars, e.g.  */.env   *.pem   */secrets/*   *secret*");
+  if (ghostPats.length === 0) note("n:ghost", "  (none \u2014 g turns ghost on, r adds a path to hide)");
+  ghostPats.forEach((p, i) => {
+    const isCur = focused && ei === selC;
+    const idx = ei++;
+    lines.push({
+      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.accent : theme.dim, children: truncate(p, Math.max(10, cols - 6)) }),
+        !ghostOn ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  (ghost off)" }) : null
+      ] }, "g:" + p + i),
+      entry: idx
+    });
+  });
+  const editRows = adding === "re" ? 2 : adding ? 1 : 0;
+  const headerRows = 2 + editRows + (status ? 1 : 0);
+  const budget = Math.max(3, rows - headerRows - 1);
+  const selLine = Math.max(0, lines.findIndex((l) => l.entry === selC));
+  const maxStart = Math.max(0, lines.length - budget);
+  const start = Math.min(Math.max(0, selLine - Math.floor(budget / 2)), maxStart);
+  const win = lines.slice(start, start + budget);
+  const moreAbove = start;
+  const moreBelow = Math.max(0, lines.length - (start + budget));
   return /* @__PURE__ */ jsx5(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs5(Box5, { children: [
+    /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx5(Text5, { children: "mode: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), children: dlp.mode }),
+      /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
       dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: focused ? "\u2191\u2193 \xB7 space toggle \xB7 m mode \xB7 a add \xB7 d remove \xB7 g ghost \xB7 P self-protect \xB7 s save" : "press \u2192 to edit" }),
-    /* @__PURE__ */ jsxs5(Box5, { children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "ghost: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.ok : theme.dim, children: ghostOn ? "on" : "off" }),
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   self-protection: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: selfProt ? theme.ok : theme.dim, children: selfProt === null ? "\u2026" : selfProt ? "on" : "off" })
-    ] }),
-    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: available.map((p, i) => {
-      const on = enabled.has(p);
-      const active2 = focused && sel === i;
-      return /* @__PURE__ */ jsxs5(Text5, { color: active2 ? theme.accentBright : void 0, bold: active2, children: [
-        (active2 ? "\u25B8 " : "  ") + (on ? "\u25CF " : "\u25CB "),
-        /* @__PURE__ */ jsx5(Text5, { color: on ? theme.ok : theme.dim, children: p })
-      ] }, p);
-    }) }),
-    /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "Custom patterns" }),
-      dlp.custom.length === 0 ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  (none \u2014 press a to add)" }) : null,
-      dlp.custom.map((c2, i) => {
-        const active2 = focused && sel === available.length + i;
-        return /* @__PURE__ */ jsxs5(Text5, { color: active2 ? theme.accentBright : void 0, bold: active2, children: [
-          active2 ? "\u25B8 " : "  ",
-          /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: c2.name }),
-          " ",
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: c2.re })
-        ] }, c2.name + i);
-      })
-    ] }),
-    adding ? /* @__PURE__ */ jsxs5(Box5, { marginTop: 1, children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "New pattern name: " : `Regex for "${newName}": ` }),
-      adding === "name" ? /* @__PURE__ */ jsx5(
-        TextInput3,
-        {
-          value: newName,
-          onChange: setNewName,
-          onSubmit: (v) => {
-            if (!v.trim()) return setAdding(null);
-            setNewName(v.trim());
-            setAdding("re");
-          }
-        }
-      ) : /* @__PURE__ */ jsx5(
-        TextInput3,
-        {
-          value: newRe,
-          onChange: setNewRe,
-          onSubmit: (v) => {
-            if (v.trim() && dlp) mutate({ ...dlp, custom: [...dlp.custom, { name: newName, re: v.trim() }] });
-            setAdding(null);
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add pattern \xB7 r add route \xB7 d remove \xB7 g ghost \xB7 s save${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
+    adding ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs5(Box5, { children: [
+        /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `regex for "${newName}" (e.g. sk-[a-z0-9]{20}): ` : "ghost path to hide (glob, * = any chars, e.g. */.env  *.pem): " }),
+        /* @__PURE__ */ jsx5(
+          TextInput3,
+          {
+            value: input,
+            onChange: setInput,
+            onSubmit: (v) => {
+              const t = v.trim();
+              if (adding === "name") {
+                if (!t) return setAdding(null);
+                setNewName(t);
+                setInput("");
+                setAdding("re");
+              } else if (adding === "re") {
+                if (t && dlp) mutate({ ...dlp, custom: [...dlp.custom, { name: newName, re: t }] });
+                setAdding(null);
+              } else {
+                if (t && !ghostPats.includes(t)) {
+                  setGhostPats((ps) => [...ps, t]);
+                  setDirty(true);
+                  setStatus(null);
+                }
+                setAdding(null);
+              }
+            }
           }
-        }
-      )
+        )
+      ] }),
+      adding === "re" ? /* @__PURE__ */ jsx5(RegexTest, { re: input }) : null
     ] }) : null,
-    adding === "re" ? /* @__PURE__ */ jsx5(RegexTest, { re: newRe }) : null,
-    status ? /* @__PURE__ */ jsx5(Box5, { marginTop: 1, children: /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
+    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
+    status ? /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
   ] }) : null });
 }
 var SAMPLES = ["AKIA1234567890ABCD00", "sk-ant-api03-xxxxxxxx", "ghp_16chars0000000000000000000000000000", "password=hunter2", "Bearer eyJhbGciOi"];
@@ -4060,12 +4105,12 @@ function App() {
         update2.kind === "updating" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : update2.kind === "manual" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 v${update2.version} available \u2014 npm i -g @solongate/proxy@latest` }) : null
       ] }),
       /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
-        /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+        /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
           const isCur = i === effectiveSection;
           const disabled = locked && s.label !== "Settings";
           return /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
         }) }),
-        /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
+        /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
       ] }, viewNonce),
       /* @__PURE__ */ jsx8(Box8, { children: locked ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
     ] })
@@ -4075,7 +4120,8 @@ var HELP = [
   ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
   ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
   ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
-  ["Rate limit / DLP", [["\u2191\u2193", "field / pattern"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["space", "toggle pattern"], ["m", "mode"], ["a / d", "add / remove custom"], ["g", "ghost mode"], ["P", "self-protection"], ["s", "save"]]],
+  ["Rate limit", [["\u2191\u2193", "field"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["s", "save"]]],
+  ["DLP", [["\u2191\u2193", "move"], ["space", "toggle a built-in pattern on/off"], ["m", "cycle mode"], ["a", "add custom pattern (name \u2192 regex)"], ["r", "add a ghost route (path to hide)"], ["d", "remove custom / route"], ["g", "ghost on/off"], ["s", "save \xB7 x discard"]]],
   ["Audit", [["v", "logs \u2194 sessions"], ["s", "source: cloud \u2194 local"], ["\u2190 \u2192", "prev / next page (500 each)"], ["\u2191\u2193", "select (list scrolls)"], ["enter", "full entry / session logs"], ["f / g", "decision / signal filter"], ["t / n / /", "tool / agent / search"], ["x / X", "delete entry / ALL (press twice)"], ["c", "clear filters"]]],
   ["Settings", [["\u2191\u2193", "move"], ["enter / space", "toggle \xB7 edit \xB7 add"], ["e", "webhook events"], ["d d", "delete"], ["r", "refresh"]]],
   ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.72",
+  "version": "0.81.74",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {