@solongate/proxy 0.81.86 → 0.81.88

package/dist/index.js

@@ -9087,16 +9087,8 @@ var init_Policies = __esm({
 import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
 import { useEffect as useEffect4, useState as useState4 } from "react";
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
-function ColoredSpark({ values, limit, width: width2 = 60 }) {
-  const v = values.length > width2 ? values.slice(values.length - width2) : values;
-  const max = Math.max(1, ...v);
-  return /* @__PURE__ */ jsx4(Text4, { children: v.map((n, i) => {
-    const ch = BLOCKS[Math.min(BLOCKS.length - 1, Math.round(n / max * (BLOCKS.length - 1)))];
-    const over = limit > 0 && n > limit;
-    return /* @__PURE__ */ jsx4(Text4, { color: over ? theme.bad : theme.accent, children: ch }, i);
-  }) });
-}
 function RateLimitPanel({ focused }) {
+  const { cols, rows } = usePanelSize();
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
   const insightsQ = useLoader(() => api.stats.securityInsights(7));
@@ -9110,12 +9102,8 @@ function RateLimitPanel({ focused }) {
   const adjust = (dir, step) => {
     if (!draft) return;
     const field = FIELDS2[fi];
-    if (field === "mode") {
-      const idx = (MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length;
-      setDraft({ ...draft, mode: MODES[idx] });
-    } else {
-      setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
-    }
+    if (field === "mode") setDraft({ ...draft, mode: MODES[(MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length] });
+    else setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
     setDirty(true);
     setStatus(null);
   };
@@ -9128,6 +9116,7 @@ function RateLimitPanel({ focused }) {
       setDirty(false);
       setStatus("\u2713 Saved");
       historyQ.reload();
+      insightsQ.reload();
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
@@ -9144,86 +9133,75 @@ function RateLimitPanel({ focused }) {
     { isActive: focused }
   );
   const history = (historyQ.data?.history ?? []).slice().sort((a, b) => b.ts - a.ts);
-  const activity = insightsQ.data?.["activity"] ?? {};
-  const minuteSeries = (activity.minute ?? []).map((b) => b.count);
-  const hourSeries = (activity.hour ?? []).map((b) => b.count);
-  const bursts = minuteSeries.filter((c2) => draft && draft.perMinute > 0 && c2 > draft.perMinute).length;
-  return /* @__PURE__ */ jsx4(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx4(Text4, { color: modeColor(draft.mode), children: draft.mode }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perMinute }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
-    ] }),
-    draft.perMinute > 0 ? (() => {
-      const now = minuteSeries.slice(-1)[0] ?? 0;
-      const pct = Math.min(100, Math.round(now / draft.perMinute * 100));
-      const width2 = 30;
-      const filled = Math.min(width2, Math.round(now / draft.perMinute * width2));
-      const col = pct >= 100 ? theme.bad : pct >= 80 ? theme.warn : theme.ok;
-      return /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load  " }),
-        /* @__PURE__ */ jsx4(Text4, { color: col, children: "\u2588".repeat(filled) }),
-        /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, width2 - filled)) }),
-        /* @__PURE__ */ jsx4(Text4, { color: col, children: `  ${now}/${draft.perMinute} ` }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `(${pct}% this min)` })
-      ] });
-    })() : null,
-    dirty || status ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
-      dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
-      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
-    ] }) : null,
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Activity " }),
-        bursts > 0 ? /* @__PURE__ */ jsxs4(Text4, { color: theme.bad, children: [
-          bursts,
-          " burst min"
-        ] }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no bursts" }),
-        insightsQ.loading && !insightsQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: " \u2026" }) : null
+  const lastChange = history[0];
+  const peaks = insightsQ.data?.["peaks"] ?? { minute: 0, hour: 0, day: 0 };
+  const anomalies2 = (insightsQ.data?.["anomalies"] ?? []).slice().sort((a, b) => new Date(b.minute).getTime() - new Date(a.minute).getTime());
+  return /* @__PURE__ */ jsx4(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
+    const lim = draft.perMinute;
+    const now = insightsQ.data ? insightsQ.data["activity"]?.minute?.slice(-1)[0]?.count ?? 0 : 0;
+    const loadPct = lim > 0 ? Math.min(100, Math.round(now / lim * 100)) : 0;
+    const peakFlag = (peak) => lim > 0 ? peak > lim ? ` OVER ${lim}` : peak === lim ? ` at ${lim}` : ` / ${lim}` : "";
+    const hasLoad = lim > 0;
+    const fixed = 1 + 4 + (hasLoad ? 1 : 0) + 1 + 1 + 1 + 1 + (dirty || status ? 1 : 0) + 1;
+    const burstBudget = Math.max(1, rows - fixed);
+    const shown = anomalies2.slice(0, burstBudget);
+    const bw = Math.max(10, cols - 30);
+    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", height: rows, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
+      /* @__PURE__ */ jsxs4(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
+        /* @__PURE__ */ jsx4(Text4, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
       ] }),
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { children: "/min  " }),
-        minuteSeries.length ? /* @__PURE__ */ jsx4(ColoredSpark, { values: minuteSeries, limit: draft.perMinute }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no data" })
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perMinute || "off" }) }),
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour || "off" }) }),
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay || "off" }) }),
+      hasLoad ? /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load".padEnd(13) }),
+        /* @__PURE__ */ jsx4(Text4, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(20, Math.round(now / lim * 20))) }),
+        /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, 20 - Math.round(now / lim * 20))) }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
+      ] }) : null,
+      /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.accentBright, bold: true, children: "Busiest 7d  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: peaks.minute > lim && lim > 0 ? theme.bad : theme.dim, children: `min ${peaks.minute}${peakFlag(peaks.minute)}` }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  \xB7  hr ${peaks.hour}  \xB7  day ${peaks.day}` })
       ] }),
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { children: "/hour " }),
-        hourSeries.length ? /* @__PURE__ */ jsx4(ColoredSpark, { values: hourSeries, limit: draft.perHour, width: 24 }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no data" })
-      ] })
-    ] }),
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
-        "Change history ",
-        history.length ? `(${history.length})` : ""
+      /* @__PURE__ */ jsxs4(Text4, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+        `Recent bursts 7d${anomalies2.length ? ` (${anomalies2.length})` : ""}`,
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
       ] }),
-      history.length ? /* @__PURE__ */ jsx4(
+      anomalies2.length === 0 ? /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
+        "  ",
+        insightsQ.loading ? "loading\u2026" : "no bursts in the last 7 days"
+      ] }) : /* @__PURE__ */ jsx4(
         Table,
         {
-          columns: [
-            { header: "WHEN", width: 10 },
-            { header: "/MIN", width: 6 },
-            { header: "/HOUR", width: 7 },
-            { header: "/DAY", width: 6 }
-          ],
-          rows: history.slice(0, 4).map((h, i) => [
-            { value: ago(h.ts) + " ago", dim: true, bold: i === 0 },
-            { value: String(h.minute), bold: i === 0 },
-            { value: h.hour === 0 ? "off" : String(h.hour), dim: h.hour === 0 },
-            { value: h.day === 0 ? "off" : String(h.day), dim: h.day === 0 }
+          columns: [{ header: "WHEN", width: 13 }, { header: "RESULT", width: 9 }, { header: "CALLS", width: 7 }, { header: "AGENT", width: Math.max(8, bw - 29) }],
+          rows: shown.map((a) => [
+            { value: when(new Date(a.minute).getTime()), dim: true },
+            { value: a.blocked ? "Blocked" : "Bypassed", color: a.blocked ? theme.bad : theme.warn },
+            { value: `${a.count}/${a.limit}`, color: theme.warn },
+            { value: truncate2(a.agent, Math.max(8, bw - 29)), dim: true }
           ])
         }
-      ) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  no changes" })
-    ] })
-  ] }) : null });
+      ),
+      /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "limit now  " }),
+        /* @__PURE__ */ jsx4(Text4, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
+        lastChange ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
+        dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
+        status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
+      ] })
+    ] });
+  })() : null });
 }
 function FieldRow({ label, active: active2, children }) {
-  return /* @__PURE__ */ jsxs4(Box4, { children: [
-    /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(12) }),
+  return /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(11) }),
     children
   ] });
 }
-var MODES, FIELDS2, BLOCKS;
+var MODES, FIELDS2, when;
 var init_RateLimit = __esm({
   "src/tui/panels/RateLimit.tsx"() {
     "use strict";
@@ -9233,7 +9211,10 @@ var init_RateLimit = __esm({
     init_theme();
     MODES = ["off", "detect", "block"];
     FIELDS2 = ["mode", "perMinute", "perHour", "perDay"];
-    BLOCKS = ["\u2581", "\u2582", "\u2583", "\u2584", "\u2585", "\u2586", "\u2587", "\u2588"];
+    when = (ms) => {
+      const d = new Date(ms);
+      return Number.isNaN(d.getTime()) ? "\u2014" : d.toLocaleDateString([], { month: "short", day: "numeric" }) + " " + d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+    };
   }
 });
 
@@ -11211,10 +11192,10 @@ function truncate3(s, n) {
 function sparkline(values) {
   if (values.length === 0) return "";
   const max = Math.max(...values, 0);
-  if (max === 0) return BLOCKS2[0].repeat(values.length);
-  return values.map((v) => BLOCKS2[Math.min(BLOCKS2.length - 1, Math.round(v / max * (BLOCKS2.length - 1)))]).join("");
+  if (max === 0) return BLOCKS[0].repeat(values.length);
+  return values.map((v) => BLOCKS[Math.min(BLOCKS.length - 1, Math.round(v / max * (BLOCKS.length - 1)))]).join("");
 }
-var out, err, dim, bold, green, red, yellow, cyan, ANSI, width, BLOCKS2;
+var out, err, dim, bold, green, red, yellow, cyan, ANSI, width, BLOCKS;
 var init_format = __esm({
   "src/commands/format.ts"() {
     "use strict";
@@ -11229,7 +11210,7 @@ var init_format = __esm({
     cyan = (s) => `${c.cyan}${s}${c.reset}`;
     ANSI = /\x1b\[[0-9;]*m/g;
     width = (s) => s.replace(ANSI, "").length;
-    BLOCKS2 = ["\u2581", "\u2582", "\u2583", "\u2584", "\u2585", "\u2586", "\u2587", "\u2588"];
+    BLOCKS = ["\u2581", "\u2582", "\u2583", "\u2584", "\u2585", "\u2586", "\u2587", "\u2588"];
   }
 });
 

package/dist/tui/index.js

@@ -2176,17 +2176,12 @@ import { useEffect as useEffect4, useState as useState4 } from "react";
 import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 var MODES = ["off", "detect", "block"];
 var FIELDS2 = ["mode", "perMinute", "perHour", "perDay"];
-var BLOCKS = ["\u2581", "\u2582", "\u2583", "\u2584", "\u2585", "\u2586", "\u2587", "\u2588"];
-function ColoredSpark({ values, limit, width = 60 }) {
-  const v = values.length > width ? values.slice(values.length - width) : values;
-  const max = Math.max(1, ...v);
-  return /* @__PURE__ */ jsx4(Text4, { children: v.map((n, i) => {
-    const ch = BLOCKS[Math.min(BLOCKS.length - 1, Math.round(n / max * (BLOCKS.length - 1)))];
-    const over = limit > 0 && n > limit;
-    return /* @__PURE__ */ jsx4(Text4, { color: over ? theme.bad : theme.accent, children: ch }, i);
-  }) });
-}
+var when = (ms) => {
+  const d = new Date(ms);
+  return Number.isNaN(d.getTime()) ? "\u2014" : d.toLocaleDateString([], { month: "short", day: "numeric" }) + " " + d.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit", hour12: false });
+};
 function RateLimitPanel({ focused }) {
+  const { cols, rows } = usePanelSize();
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
   const insightsQ = useLoader(() => api.stats.securityInsights(7));
@@ -2200,12 +2195,8 @@ function RateLimitPanel({ focused }) {
   const adjust = (dir, step) => {
     if (!draft) return;
     const field = FIELDS2[fi];
-    if (field === "mode") {
-      const idx = (MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length;
-      setDraft({ ...draft, mode: MODES[idx] });
-    } else {
-      setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
-    }
+    if (field === "mode") setDraft({ ...draft, mode: MODES[(MODES.indexOf(draft.mode) + dir + MODES.length) % MODES.length] });
+    else setDraft({ ...draft, [field]: Math.max(0, draft[field] + dir * step) });
     setDirty(true);
     setStatus(null);
   };
@@ -2218,6 +2209,7 @@ function RateLimitPanel({ focused }) {
       setDirty(false);
       setStatus("\u2713 Saved");
       historyQ.reload();
+      insightsQ.reload();
     } catch (e) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     }
@@ -2234,82 +2226,71 @@ function RateLimitPanel({ focused }) {
     { isActive: focused }
   );
   const history = (historyQ.data?.history ?? []).slice().sort((a, b) => b.ts - a.ts);
-  const activity = insightsQ.data?.["activity"] ?? {};
-  const minuteSeries = (activity.minute ?? []).map((b) => b.count);
-  const hourSeries = (activity.hour ?? []).map((b) => b.count);
-  const bursts = minuteSeries.filter((c2) => draft && draft.perMinute > 0 && c2 > draft.perMinute).length;
-  return /* @__PURE__ */ jsx4(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Mode", active: focused && fi === 0, children: /* @__PURE__ */ jsx4(Text4, { color: modeColor(draft.mode), children: draft.mode }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perMinute }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour === 0 ? "off" : draft.perHour }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay === 0 ? "off" : draft.perDay }) })
-    ] }),
-    draft.perMinute > 0 ? (() => {
-      const now = minuteSeries.slice(-1)[0] ?? 0;
-      const pct = Math.min(100, Math.round(now / draft.perMinute * 100));
-      const width = 30;
-      const filled = Math.min(width, Math.round(now / draft.perMinute * width));
-      const col = pct >= 100 ? theme.bad : pct >= 80 ? theme.warn : theme.ok;
-      return /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load  " }),
-        /* @__PURE__ */ jsx4(Text4, { color: col, children: "\u2588".repeat(filled) }),
-        /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, width - filled)) }),
-        /* @__PURE__ */ jsx4(Text4, { color: col, children: `  ${now}/${draft.perMinute} ` }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `(${pct}% this min)` })
-      ] });
-    })() : null,
-    dirty || status ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
-      dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "\u25CF unsaved \u2014 press s to apply   " }) : null,
-      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
-    ] }) : null,
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Activity " }),
-        bursts > 0 ? /* @__PURE__ */ jsxs4(Text4, { color: theme.bad, children: [
-          bursts,
-          " burst min"
-        ] }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no bursts" }),
-        insightsQ.loading && !insightsQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: " \u2026" }) : null
+  const lastChange = history[0];
+  const peaks = insightsQ.data?.["peaks"] ?? { minute: 0, hour: 0, day: 0 };
+  const anomalies2 = (insightsQ.data?.["anomalies"] ?? []).slice().sort((a, b) => new Date(b.minute).getTime() - new Date(a.minute).getTime());
+  return /* @__PURE__ */ jsx4(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
+    const lim = draft.perMinute;
+    const now = insightsQ.data ? insightsQ.data["activity"]?.minute?.slice(-1)[0]?.count ?? 0 : 0;
+    const loadPct = lim > 0 ? Math.min(100, Math.round(now / lim * 100)) : 0;
+    const peakFlag = (peak) => lim > 0 ? peak > lim ? ` OVER ${lim}` : peak === lim ? ` at ${lim}` : ` / ${lim}` : "";
+    const hasLoad = lim > 0;
+    const fixed = 1 + 4 + (hasLoad ? 1 : 0) + 1 + 1 + 1 + 1 + (dirty || status ? 1 : 0) + 1;
+    const burstBudget = Math.max(1, rows - fixed);
+    const shown = anomalies2.slice(0, burstBudget);
+    const bw = Math.max(10, cols - 30);
+    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", height: rows, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 field \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save" : "press \u2192 to edit" }),
+      /* @__PURE__ */ jsxs4(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
+        /* @__PURE__ */ jsx4(Text4, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
       ] }),
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { children: "/min  " }),
-        minuteSeries.length ? /* @__PURE__ */ jsx4(ColoredSpark, { values: minuteSeries, limit: draft.perMinute }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no data" })
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perMinute || "off" }) }),
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour || "off" }) }),
+      /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay || "off" }) }),
+      hasLoad ? /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load".padEnd(13) }),
+        /* @__PURE__ */ jsx4(Text4, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(20, Math.round(now / lim * 20))) }),
+        /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, 20 - Math.round(now / lim * 20))) }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
+      ] }) : null,
+      /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.accentBright, bold: true, children: "Busiest 7d  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: peaks.minute > lim && lim > 0 ? theme.bad : theme.dim, children: `min ${peaks.minute}${peakFlag(peaks.minute)}` }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  \xB7  hr ${peaks.hour}  \xB7  day ${peaks.day}` })
       ] }),
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { children: "/hour " }),
-        hourSeries.length ? /* @__PURE__ */ jsx4(ColoredSpark, { values: hourSeries, limit: draft.perHour, width: 24 }) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "no data" })
-      ] })
-    ] }),
-    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
-        "Change history ",
-        history.length ? `(${history.length})` : ""
+      /* @__PURE__ */ jsxs4(Text4, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+        `Recent bursts 7d${anomalies2.length ? ` (${anomalies2.length})` : ""}`,
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
       ] }),
-      history.length ? /* @__PURE__ */ jsx4(
+      anomalies2.length === 0 ? /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
+        "  ",
+        insightsQ.loading ? "loading\u2026" : "no bursts in the last 7 days"
+      ] }) : /* @__PURE__ */ jsx4(
         Table,
         {
-          columns: [
-            { header: "WHEN", width: 10 },
-            { header: "/MIN", width: 6 },
-            { header: "/HOUR", width: 7 },
-            { header: "/DAY", width: 6 }
-          ],
-          rows: history.slice(0, 4).map((h, i) => [
-            { value: ago(h.ts) + " ago", dim: true, bold: i === 0 },
-            { value: String(h.minute), bold: i === 0 },
-            { value: h.hour === 0 ? "off" : String(h.hour), dim: h.hour === 0 },
-            { value: h.day === 0 ? "off" : String(h.day), dim: h.day === 0 }
+          columns: [{ header: "WHEN", width: 13 }, { header: "RESULT", width: 9 }, { header: "CALLS", width: 7 }, { header: "AGENT", width: Math.max(8, bw - 29) }],
+          rows: shown.map((a) => [
+            { value: when(new Date(a.minute).getTime()), dim: true },
+            { value: a.blocked ? "Blocked" : "Bypassed", color: a.blocked ? theme.bad : theme.warn },
+            { value: `${a.count}/${a.limit}`, color: theme.warn },
+            { value: truncate(a.agent, Math.max(8, bw - 29)), dim: true }
           ])
         }
-      ) : /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  no changes" })
-    ] })
-  ] }) : null });
+      ),
+      /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "limit now  " }),
+        /* @__PURE__ */ jsx4(Text4, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
+        lastChange ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
+        dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
+        status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
+      ] })
+    ] });
+  })() : null });
 }
 function FieldRow({ label, active: active2, children }) {
-  return /* @__PURE__ */ jsxs4(Box4, { children: [
-    /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(12) }),
+  return /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(11) }),
     children
   ] });
 }

package/hooks/guard.bundled.mjs

@@ -6536,7 +6536,7 @@ import { resolve, join, dirname, isAbsolute } from "node:path";
 import { homedir } from "node:os";
 import { gunzipSync } from "node:zlib";
 import { createHash } from "node:crypto";
-var HOOK_VERSION = 42;
+var HOOK_VERSION = 43;
 function localLogsOnly(security) {
   if (security && typeof security === "object") {
     const l = security.localLogs;
@@ -7180,6 +7180,29 @@ function dlpGlobToRe(glob) {
   }
   return new RegExp(re, "i");
 }
+function dlpViews(text) {
+  const views = [text];
+  try {
+    const dequoted = text.replace(/[`'"\\]/g, "");
+    if (dequoted !== text)
+      views.push(dequoted);
+    const src = dequoted !== text ? text + "\n" + dequoted : text;
+    const toks = src.match(/[A-Za-z0-9+/]{16,}={0,2}/g) || [];
+    let decoded = "";
+    for (const t of toks.slice(0, 60)) {
+      try {
+        const d = Buffer.from(t, "base64").toString("latin1");
+        if (/[ -~]{8,}/.test(d))
+          decoded += d + "\n";
+      } catch {
+      }
+    }
+    if (decoded)
+      views.push(decoded);
+  } catch {
+  }
+  return views;
+}
 function dlpScan(args, cfg) {
   if (!cfg)
     return null;
@@ -7189,14 +7212,16 @@ function dlpScan(args, cfg) {
   } catch {
     return null;
   }
+  const views = dlpViews(text);
   const allow = new Set(Array.isArray(cfg.patterns) ? cfg.patterns : []);
   for (const p of DLP_PATTERNS) {
-    if (allow.has(p.name) && p.re.test(text))
+    if (allow.has(p.name) && views.some((v) => p.re.test(v)))
       return p.name;
   }
   for (const c of Array.isArray(cfg.custom) ? cfg.custom : []) {
     try {
-      if (dlpGlobToRe(c.re).test(text))
+      const re = dlpGlobToRe(c.re);
+      if (views.some((v) => re.test(v)))
         return c.name || "custom pattern";
     } catch {
     }

package/hooks/guard.mjs

@@ -32,7 +32,7 @@ import { createHash } from 'node:crypto';
 // the installed hook self-updates when the cloud version is higher (see
 // maybeSelfUpdate). This is what makes guard fixes propagate without a manual
 // reinstall — the same trust model as the OPA WASM this hook already runs.
-const HOOK_VERSION = 42;
+const HOOK_VERSION = 43;
 
 // True when local log storage is ON. In that mode logs are kept LOCAL ONLY and
 // nothing is sent to the cloud audit log.
@@ -900,18 +900,45 @@ function dlpGlobToRe(glob) {
   }
   return new RegExp(re, 'i');
 }
+// De-obfuscated VIEWS of the scanned text, so an agent can't smuggle a secret
+// past the literal patterns by SPLITTING it (printf "AKIA""3XZ9…") or ENCODING it
+// (echo <base64> | base64 -d). We scan every view. Not exhaustive — pattern DLP
+// can never be — but it closes the two obvious bypasses.
+function dlpViews(text) {
+  const views = [text];
+  try {
+    // 1) Drop shell quotes + backslashes so a split secret collapses back to a
+    //    contiguous run: "AKIA""3XZ9…" / 'AKIA'\''…' / AKIA\3XZ9 → AKIA3XZ9…
+    const dequoted = text.replace(/[`'"\\]/g, '');
+    if (dequoted !== text) views.push(dequoted);
+    // 2) Decode base64-looking tokens (from both the raw and the dequoted view —
+    //    the payload itself may be split too) and scan the decoded bytes.
+    const src = dequoted !== text ? text + '\n' + dequoted : text;
+    const toks = src.match(/[A-Za-z0-9+/]{16,}={0,2}/g) || [];
+    let decoded = '';
+    for (const t of toks.slice(0, 60)) {
+      try {
+        const d = Buffer.from(t, 'base64').toString('latin1');
+        if (/[ -~]{8,}/.test(d)) decoded += d + '\n'; // keep printable decodes only
+      } catch { /* not base64 */ }
+    }
+    if (decoded) views.push(decoded);
+  } catch { /* fall back to the raw view */ }
+  return views;
+}
 // Scan args against the enabled built-in patterns + any user custom patterns.
 // `cfg` = { patterns: string[], custom: {name,re}[] }.
 function dlpScan(args, cfg) {
   if (!cfg) return null;
   let text = '';
   try { text = JSON.stringify(args || {}); } catch { return null; }
+  const views = dlpViews(text);
   const allow = new Set(Array.isArray(cfg.patterns) ? cfg.patterns : []);
   for (const p of DLP_PATTERNS) {
-    if (allow.has(p.name) && p.re.test(text)) return p.name;
+    if (allow.has(p.name) && views.some((v) => p.re.test(v))) return p.name;
   }
   for (const c of Array.isArray(cfg.custom) ? cfg.custom : []) {
-    try { if (dlpGlobToRe(c.re).test(text)) return c.name || 'custom pattern'; } catch { /* skip invalid */ }
+    try { const re = dlpGlobToRe(c.re); if (views.some((v) => re.test(v))) return c.name || 'custom pattern'; } catch { /* skip invalid */ }
   }
   return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solongate/proxy",
-  "version": "0.81.86",
+  "version": "0.81.88",
   "description": "AI tool security proxy: protect any AI tool server with customizable policies, path/command constraints, rate limiting, and audit logging. No code changes required.",
   "type": "module",
   "bin": {