@solongate/proxy 0.82.30 → 0.82.32

package/dist/tui/index.js

@@ -11,8 +11,8 @@ import { join as join9 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
-import { Box as Box8, Text as Text8, useApp, useInput as useInput7 } from "ink";
-import { useEffect as useEffect7, useState as useState8 } from "react";
+import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
+import { useEffect as useEffect8, useState as useState9 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -566,6 +566,7 @@ var policies_exports = {};
 __export(policies_exports, {
   active: () => active,
   addRule: () => addRule,
+  backtest: () => backtest,
   create: () => create,
   dryRun: () => dryRun,
   get: () => get,
@@ -615,6 +616,9 @@ function setActive(policyId) {
 function dryRun(body) {
   return request("POST", "/policies/dry-run", { body });
 }
+function backtest(body) {
+  return request("POST", "/policies/backtest", { body });
+}
 
 // src/api-client/settings.ts
 var settings_exports = {};
@@ -1899,11 +1903,167 @@ function LivePanel({ active: active2 }) {
 }
 
 // src/tui/panels/Policies.tsx
-import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
+import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
 import TextInput2 from "ink-text-input";
+import { useEffect as useEffect4, useState as useState4 } from "react";
+
+// src/tui/panels/DryRun.tsx
+import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
 import { useEffect as useEffect3, useState as useState3 } from "react";
-import { Fragment as Fragment3, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
-var DASHBOARD_URL = "https://dashboard.solongate.com";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var SAMPLES = [100, 250, 500, 1e3, 2500, 5e3];
+var pendingPolicyId = null;
+function requestDryRun(policyId) {
+  pendingPolicyId = policyId;
+}
+var pct = (n, d) => d ? (n / d * 100).toFixed(1) + "%" : "0%";
+function DryRunPanel({ focused }) {
+  const list5 = useLoader(() => api.policies.list());
+  const policies = list5.data?.policies ?? [];
+  const [pi, setPi] = useState3(0);
+  const [si, setSi] = useState3(3);
+  const [res, setRes] = useState3(null);
+  const [running, setRunning] = useState3(false);
+  const [err, setErr] = useState3(null);
+  const [off, setOff] = useState3(0);
+  const { cols, rows } = usePanelSize();
+  const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
+  function run(policyIdx = pi, sampleIdx = si) {
+    const p = policies[policyIdx];
+    if (!p) return;
+    setRunning(true);
+    setErr(null);
+    setRes(null);
+    setOff(0);
+    api.policies.backtest({ rules: p.rules ?? [], mode: p.mode, limit: SAMPLES[sampleIdx] }).then((r) => setRes(r)).catch((e) => setErr(e instanceof Error ? e.message : String(e))).finally(() => setRunning(false));
+  }
+  useEffect3(() => {
+    if (policies.length === 0 || res || running || err) return;
+    let idx = 0;
+    if (pendingPolicyId) {
+      const found = policies.findIndex((p) => p.id === pendingPolicyId);
+      if (found >= 0) idx = found;
+      pendingPolicyId = null;
+    }
+    setPi(idx);
+    run(idx, si);
+  }, [policies.length]);
+  useInput2((input, key) => {
+    if (!focused) return;
+    if (key.upArrow) setOff((n) => Math.max(0, n - 1));
+    else if (key.downArrow) setOff((n) => n + 1);
+    else if (input === "p") {
+      const n = policies.length ? (pi + 1) % policies.length : 0;
+      setPi(n);
+      run(n, si);
+    } else if (input === "n") {
+      const n = (si + 1) % SAMPLES.length;
+      setSi(n);
+      run(pi, n);
+    } else if (input === "r") run(pi, si);
+  });
+  const w = Math.max(40, cols);
+  const lines = [];
+  const head = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: t }, `h${lines.length}`));
+  const dim = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: t }, `d${lines.length}`));
+  const row = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { wrap: "truncate", children: t }, `r${lines.length}`));
+  const blank = () => lines.push(/* @__PURE__ */ jsx3(Text3, { children: " " }, `b${lines.length}`));
+  if (res) {
+    const s = res.summary;
+    const denyAfter = s.would_deny;
+    const denyBefore = s.would_deny - s.newly_blocked + s.newly_allowed;
+    const before = pct(denyBefore, s.evaluated);
+    const after = pct(denyAfter, s.evaluated);
+    const ppShift = s.evaluated ? ((denyAfter - denyBefore) / s.evaluated * 100).toFixed(1) : "0.0";
+    head("Summary");
+    row(`  evaluated ${s.evaluated}    would allow ${s.would_allow}    would deny ${s.would_deny}`);
+    lines.push(
+      /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
+        "  newly blocked ",
+        /* @__PURE__ */ jsx3(Text3, { color: theme.bad, bold: true, children: String(s.newly_blocked) }),
+        "    newly allowed ",
+        /* @__PURE__ */ jsx3(Text3, { color: theme.ok, bold: true, children: String(s.newly_allowed) }),
+        "    unchanged ",
+        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: String(s.unchanged) })
+      ] }, `sum${lines.length}`)
+    );
+    row(`  deny rate ${before} -> ${after}  (${Number(ppShift) > 0 ? "+" : ""}${ppShift}pp)`);
+    blank();
+    if (res.per_rule.length) {
+      head("Per-rule impact");
+      dim(`  ${"RULE".padEnd(38)}${"MATCHED".padEnd(9)}${"%".padEnd(8)}${"NEW-BLK".padEnd(9)}NEW-ALW`);
+      for (const r of res.per_rule.slice(0, 30)) {
+        row(`  ${truncate(r.rule_id, 36).padEnd(38)}${String(r.matched).padEnd(9)}${pct(r.matched, s.evaluated).padEnd(8)}${String(r.newly_blocked).padEnd(9)}${r.newly_allowed}`);
+      }
+      blank();
+    }
+    if (res.per_agent.length) {
+      head("Per-agent impact");
+      dim(`  ${"AGENT".padEnd(24)}${"EVALUATED".padEnd(11)}${"CHANGED".padEnd(9)}${"NEW-BLK".padEnd(9)}NEW-ALW`);
+      for (const a of res.per_agent) {
+        row(`  ${truncate(a.agent || "-", 22).padEnd(24)}${String(a.evaluated).padEnd(11)}${String(a.changed).padEnd(9)}${String(a.newly_blocked).padEnd(9)}${a.newly_allowed}`);
+      }
+      blank();
+    }
+    if (res.per_tool.length) {
+      head("Per-tool breakdown");
+      dim(`  ${"TOOL".padEnd(24)}${"EVALUATED".padEnd(11)}${"CHANGED".padEnd(9)}${"NEW-BLK".padEnd(9)}NEW-ALW`);
+      for (const t of res.per_tool) {
+        row(`  ${truncate(t.tool || "-", 22).padEnd(24)}${String(t.evaluated).padEnd(11)}${String(t.changed).padEnd(9)}${String(t.newly_blocked).padEnd(9)}${t.newly_allowed}`);
+      }
+      blank();
+    }
+    if (res.samples.length) {
+      head(`Changed calls (${res.samples.length})`);
+      for (const c2 of res.samples) {
+        const flip = `${c2.original}->${c2.predicted}`;
+        const newlyAllowed = c2.predicted === "ALLOW";
+        lines.push(
+          /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
+            "  ",
+            /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: truncate(c2.tool, 16).padEnd(17) }),
+            /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: truncate(c2.agent || "-", 14).padEnd(15) }),
+            /* @__PURE__ */ jsx3(Text3, { color: newlyAllowed ? theme.ok : theme.bad, children: flip.padEnd(14) }),
+            /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: truncate(c2.preview.replace(/\s+/g, " "), Math.max(10, w - 50)) })
+          ] }, `c${lines.length}`)
+        );
+      }
+    }
+  }
+  const headerRows = 3;
+  const budget = Math.max(3, rows - headerRows);
+  const maxOff = Math.max(0, lines.length - budget);
+  const start = Math.min(off, maxOff);
+  const win = lines.slice(start, start + budget);
+  const above = start;
+  const below = Math.max(0, lines.length - (start + budget));
+  const sampleLabel = `${SAMPLES[si]}${res?.sampled != null ? ` (ran ${res.sampled})` : ""}`;
+  return /* @__PURE__ */ jsx3(DataView, { loading: list5.loading && !list5.data, error: list5.error, children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: "Policy Dry Run" }),
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "  ",
+        truncate(selected?.name ?? "no policy", 26)
+      ] }),
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "  mode: ",
+        selected?.mode ?? "-"
+      ] }),
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "  sample: ",
+        sampleLabel
+      ] })
+    ] }),
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 scroll \xB7 p policy \xB7 n sample \xB7 r re-run${above ? ` \xB7 \u25B2${above}` : ""}${below ? ` \xB7 \u25BC${below}` : ""}` : "press \u2192 to open" }),
+    running ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "replaying recent traffic\u2026" }) : null,
+    err ? /* @__PURE__ */ jsx3(Text3, { color: theme.bad, wrap: "truncate", children: "\u2717 " + err }) : null,
+    !running && !err && !res ? /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "no result yet \u2014 press r to run" }) : null,
+    /* @__PURE__ */ jsx3(Box3, { marginTop: 1, flexDirection: "column", children: win })
+  ] }) });
+}
+
+// src/tui/panels/Policies.tsx
+import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
 var constr = (r, g, side) => (r[g]?.[side] ?? []).join(", ");
 var setConstr = (r, g, side, val) => {
   const arr = val.split(",").map((s) => s.trim()).filter(Boolean);
@@ -1941,19 +2101,19 @@ function PoliciesPanel({ focused }) {
   const activeId = activeQ.data?.policy?.id ?? null;
   const activeBy = activeQ.data?.matched_by;
   const { rows: panelRows } = usePanelSize();
-  const [view, setView] = useState3("list");
-  const [pi, setPi] = useState3(0);
-  const [ri, setRi] = useState3(0);
-  const [fi, setFi] = useState3(0);
-  const [rules, setRules] = useState3([]);
-  const [mode, setMode] = useState3("denylist");
-  const [dirty, setDirty] = useState3(false);
-  const [editing, setEditing] = useState3(false);
-  const [editVal, setEditVal] = useState3("");
-  const [status, setStatus] = useState3(null);
+  const [view, setView] = useState4("list");
+  const [pi, setPi] = useState4(0);
+  const [ri, setRi] = useState4(0);
+  const [fi, setFi] = useState4(0);
+  const [rules, setRules] = useState4([]);
+  const [mode, setMode] = useState4("denylist");
+  const [dirty, setDirty] = useState4(false);
+  const [editing, setEditing] = useState4(false);
+  const [editVal, setEditVal] = useState4("");
+  const [status, setStatus] = useState4(null);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
-  useEffect3(() => {
+  useEffect4(() => {
     if (detail.data) {
       setRules(detail.data.rules);
       setMode(detail.data.mode ?? "denylist");
@@ -1999,7 +2159,7 @@ function PoliciesPanel({ focused }) {
     setDirty(false);
     setStatus("discarded");
   };
-  useInput2(
+  useInput3(
     (input, key) => {
       if (key.ctrl && input === "r" && !editing) {
         list5.reload();
@@ -2032,13 +2192,6 @@ function PoliciesPanel({ focused }) {
         return;
       }
       if (view === "rules") {
-        if (key.ctrl && input === "d") {
-          if (selected) {
-            openBrowser(`${DASHBOARD_URL}/playground?policy=${encodeURIComponent(selected.id)}`);
-            setStatus("Opened the dry-run playground in your browser.");
-          }
-          return;
-        }
         if (key.leftArrow) return setView("list"), void setStatus(null);
         if (key.upArrow) setRi((n) => Math.max(0, n - 1));
         else if (key.downArrow) setRi((n) => Math.min(rules.length - 1, n + 1));
@@ -2066,13 +2219,10 @@ function PoliciesPanel({ focused }) {
           setFi(0);
           setView("rule");
         } else if (input === "D") {
-          setStatus("Dry-running\u2026");
-          void api.policies.dryRun({ rules, mode }).then((res) => setStatus(
-            `dry-run: replayed ${res.evaluated} recent calls against ${rules.length} rules
-  would allow ${res.would_allow}   would deny ${res.would_deny}
-  newly allowed ${res.newly_allowed}   newly blocked ${res.newly_blocked}   unchanged ${res.unchanged}` + (res.sample_newly_blocked?.length ? `
-  now blocked e.g.: ${res.sample_newly_blocked.slice(0, 3).map((s) => truncate(s.tool, 24)).join(", ")}` : "")
-          )).catch((e) => setStatus("\u2717 " + (e instanceof Error ? e.message : String(e))));
+          if (selected) {
+            requestDryRun(selected.id);
+            setStatus('Sent to Dry Run - open the "Dry Run" section in the left nav for the full report.');
+          }
         } else if (input === "s") void save();
         else if (input === "x") discard();
         return;
@@ -2105,35 +2255,35 @@ function PoliciesPanel({ focused }) {
     const lWin = policies.slice(lStart, lStart + lBudget);
     const lAbove = lStart;
     const lBelow = Math.max(0, policies.length - (lStart + lBudget));
-    return /* @__PURE__ */ jsx3(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs3(Box3, { children: [
-        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "active: " }),
-        activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs3(Fragment3, { children: [
-          /* @__PURE__ */ jsxs3(Text3, { color: theme.ok, bold: true, children: [
+    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0, emptyText: "No policies.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "active: " }),
+        activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
+          /* @__PURE__ */ jsxs4(Text4, { color: theme.ok, bold: true, children: [
             "\u25CF ",
             truncate(activeName, 28)
           ] }),
-          /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: activeBy ? ` (${activeBy})` : "" })
-        ] }) : /* @__PURE__ */ jsx3(Text3, { color: theme.bad, bold: true, children: "\u25CB NONE \u2014 nothing enforced, grants refused" })
+          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: activeBy ? ` (${activeBy})` : "" })
+        ] }) : /* @__PURE__ */ jsx4(Text4, { color: theme.bad, bold: true, children: "\u25CB NONE \u2014 nothing enforced, grants refused" })
       ] }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 select \xB7 enter open \xB7 a activate \xB7 x deactivate \xB7 ^R refresh${lAbove ? ` \xB7 \u25B2${lAbove}` : ""}${lBelow ? ` \xB7 \u25BC${lBelow}` : ""}` : "press \u2192 to browse" }),
-      /* @__PURE__ */ jsx3(Box3, { marginTop: 1, flexDirection: "column", children: lWin.map((p, wi) => {
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 select \xB7 enter open \xB7 a activate \xB7 x deactivate \xB7 ^R refresh${lAbove ? ` \xB7 \u25B2${lAbove}` : ""}${lBelow ? ` \xB7 \u25BC${lBelow}` : ""}` : "press \u2192 to browse" }),
+      /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: lWin.map((p, wi) => {
         const i = lStart + wi;
-        return /* @__PURE__ */ jsxs3(Text3, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
+        return /* @__PURE__ */ jsxs4(Text4, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
           (i === pi ? "\u25B8 " : "  ") + truncate(p.name, 26).padEnd(27),
-          /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+          /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
             p.mode.padEnd(10),
             " ",
             p.rules.length,
             " rules"
           ] }),
-          p.id === activeId ? /* @__PURE__ */ jsx3(Text3, { color: theme.ok, bold: true, children: "  \u25CF ACTIVE" }) : null
+          p.id === activeId ? /* @__PURE__ */ jsx4(Text4, { color: theme.ok, bold: true, children: "  \u25CF ACTIVE" }) : null
         ] }, p.id);
       }) }),
-      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
-  const dirtyTag = dirty ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "  \u25CF unsaved (s save \xB7 x discard)" }) : null;
+  const dirtyTag = dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "  \u25CF unsaved (s save \xB7 x discard)" }) : null;
   if (view === "rules") {
     const rStatusLines = status ? status.split("\n").length : 0;
     const rHead = 4 + rStatusLines;
@@ -2143,16 +2293,16 @@ function PoliciesPanel({ focused }) {
     const rWin = rules.slice(rStart, rStart + rBudget);
     const rAbove = rStart;
     const rBelow = Math.max(0, rules.length - (rStart + rBudget));
-    return /* @__PURE__ */ jsx3(DataView, { loading: detail.loading && !detail.data, error: detail.error, children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs3(Box3, { children: [
-        /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
-        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  mode: " }),
-        /* @__PURE__ */ jsx3(Text3, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
-        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: `  ${rules.length} rules` }),
+    return /* @__PURE__ */ jsx4(DataView, { loading: detail.loading && !detail.data, error: detail.error, children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  mode: " }),
+        /* @__PURE__ */ jsx4(Text4, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  ${rules.length} rules` }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: `\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 ^D playground \xB7 s save \xB7 \u2190 back${rAbove ? ` \xB7 \u25B2${rAbove}` : ""}${rBelow ? ` \xB7 \u25BC${rBelow}` : ""}` }),
-      /* @__PURE__ */ jsx3(Box3, { marginTop: 1, children: /* @__PURE__ */ jsx3(
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: `\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 s save \xB7 \u2190 back${rAbove ? ` \xB7 \u25B2${rAbove}` : ""}${rBelow ? ` \xB7 \u25BC${rBelow}` : ""}` }),
+      /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(
         Table,
         {
           columns: [
@@ -2178,24 +2328,24 @@ function PoliciesPanel({ focused }) {
           })
         }
       ) }),
-      rules.length === 0 ? /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "(no rules)" }) : null,
-      status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+      rules.length === 0 ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "(no rules)" }) : null,
+      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
   const rule = rules[ri];
-  return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs3(Box3, { children: [
-      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: "Rule " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: rule?.id ?? "" }),
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: "Rule " }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: rule?.id ?? "" }),
       dirtyTag
     ] }),
-    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit text \xB7 space/\u2192 toggle \xB7 s save \xB7 \u2190 back" }),
-    /* @__PURE__ */ jsx3(Box3, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
+    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit text \xB7 space/\u2192 toggle \xB7 s save \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
       const val = rule ? f.get(rule) : "";
       const active2 = i === fi;
-      return /* @__PURE__ */ jsxs3(Box3, { children: [
-        /* @__PURE__ */ jsx3(Text3, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
-        active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx3(
+      return /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) }),
+        active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx4(
           TextInput2,
           {
             value: editVal,
@@ -2205,8 +2355,8 @@ function PoliciesPanel({ focused }) {
               setEditing(false);
             }
           }
-        ) : /* @__PURE__ */ jsx3(
-          Text3,
+        ) : /* @__PURE__ */ jsx4(
+          Text4,
           {
             color: f.kind === "effect" ? val === "ALLOW" ? theme.ok : theme.bad : void 0,
             dimColor: !val,
@@ -2215,14 +2365,14 @@ function PoliciesPanel({ focused }) {
         )
       ] }, f.label);
     }) }),
-    status ? /* @__PURE__ */ jsx3(Text3, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
   ] });
 }
 
 // src/tui/panels/RateLimit.tsx
-import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
-import { useEffect as useEffect4, useState as useState4 } from "react";
-import { Fragment as Fragment4, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
+import { useEffect as useEffect5, useState as useState5 } from "react";
+import { Fragment as Fragment4, jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 var MODES = ["off", "detect", "block"];
 var FIELDS2 = ["mode", "perMinute", "perHour", "perDay"];
 var when = (ms) => {
@@ -2234,11 +2384,11 @@ function RateLimitPanel({ focused }) {
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
   const insightsQ = useLoader(() => api.stats.securityInsights(7));
-  const [draft, setDraft] = useState4(null);
-  const [dirty, setDirty] = useState4(false);
-  const [sel, setSel] = useState4(0);
-  const [status, setStatus] = useState4(null);
-  useEffect4(() => {
+  const [draft, setDraft] = useState5(null);
+  const [dirty, setDirty] = useState5(false);
+  const [sel, setSel] = useState5(0);
+  const [status, setStatus] = useState5(null);
+  useEffect5(() => {
     if (layersQ.data && !dirty) setDraft({ ...layersQ.data.layers.rateLimit });
   }, [layersQ.data]);
   usePoll(() => {
@@ -2286,7 +2436,7 @@ function RateLimitPanel({ focused }) {
   const fi = onField ? selC : -1;
   const bcur = onField ? -1 : selC - 4;
   const off = bcur < 0 ? 0 : Math.min(Math.max(0, bcur - Math.floor(burstBudget / 2)), maxOff);
-  useInput3(
+  useInput4(
     (input, key) => {
       const step = key.shift ? 10 : 1;
       if (key.upArrow) setSel((n) => Math.max(0, n - 1));
@@ -2305,48 +2455,48 @@ function RateLimitPanel({ focused }) {
     },
     { isActive: focused }
   );
-  return /* @__PURE__ */ jsx4(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
+  return /* @__PURE__ */ jsx5(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
     const lim = draft.perMinute;
     const now = insightsQ.data ? insightsQ.data["activity"]?.minute?.slice(-1)[0]?.count ?? 0 : 0;
     const loadPct = lim > 0 ? Math.min(100, Math.round(now / lim * 100)) : 0;
     const last24h = (insightsQ.data?.["activity"]?.hour ?? []).reduce((s, b) => s + b.count, 0);
     const shown = anomalies2.slice(off, off + burstBudget);
     const bw = Math.max(10, cols - 30);
-    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", height: rows, overflow: "hidden", children: [
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 move (fields + bursts) \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save \xB7 ^R refresh" : "press \u2192 to edit" }),
-      /* @__PURE__ */ jsxs4(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
-        /* @__PURE__ */ jsx4(Text4, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
+    return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", height: rows, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 move (fields + bursts) \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save \xB7 ^R refresh" : "press \u2192 to edit" }),
+      /* @__PURE__ */ jsxs5(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
+        /* @__PURE__ */ jsx5(Text5, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
       ] }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perMinute || "off" }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perHour || "off" }) }),
-      /* @__PURE__ */ jsx4(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx4(Text4, { bold: true, children: draft.perDay || "off" }) }),
-      showExtras && /* @__PURE__ */ jsxs4(Fragment4, { children: [
-        hasLoad ? /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "load now".padEnd(13) }),
-          /* @__PURE__ */ jsx4(Text4, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(18, Math.round(now / lim * 18))) }),
-          /* @__PURE__ */ jsx4(Text4, { color: "#233457", children: "\u2591".repeat(Math.max(0, 18 - Math.round(now / lim * 18))) }),
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
+      /* @__PURE__ */ jsx5(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perMinute || "off" }) }),
+      /* @__PURE__ */ jsx5(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perHour || "off" }) }),
+      /* @__PURE__ */ jsx5(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perDay || "off" }) }),
+      showExtras && /* @__PURE__ */ jsxs5(Fragment4, { children: [
+        hasLoad ? /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "load now".padEnd(13) }),
+          /* @__PURE__ */ jsx5(Text5, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(18, Math.round(now / lim * 18))) }),
+          /* @__PURE__ */ jsx5(Text5, { color: "#233457", children: "\u2591".repeat(Math.max(0, 18 - Math.round(now / lim * 18))) }),
+          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
         ] }) : null,
-        /* @__PURE__ */ jsxs4(Text4, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+        /* @__PURE__ */ jsxs5(Text5, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
           "Busiest 7d",
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   most calls in one window vs your limit" })
+          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   most calls in one window vs your limit" })
         ] }),
-        /* @__PURE__ */ jsx4(BusiestRow, { label: "minute", peak: peaks.minute, limit: draft.perMinute }),
-        /* @__PURE__ */ jsx4(BusiestRow, { label: "hour", peak: peaks.hour, limit: draft.perHour }),
-        /* @__PURE__ */ jsx4(BusiestRow, { label: "day", peak: peaks.day, limit: draft.perDay }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: `activity`.padEnd(11) + `   last 24h \xB7 ${last24h} calls \xB7 busiest hour ${peaks.hour}/hr` })
+        /* @__PURE__ */ jsx5(BusiestRow, { label: "minute", peak: peaks.minute, limit: draft.perMinute }),
+        /* @__PURE__ */ jsx5(BusiestRow, { label: "hour", peak: peaks.hour, limit: draft.perHour }),
+        /* @__PURE__ */ jsx5(BusiestRow, { label: "day", peak: peaks.day, limit: draft.perDay }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: `activity`.padEnd(11) + `   last 24h \xB7 ${last24h} calls \xB7 busiest hour ${peaks.hour}/hr` })
       ] }),
-      /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs4(Text4, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+      /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs5(Text5, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
           `Recent bursts 7d${anomalies2.length ? ` (${anomalies2.length})` : ""}`,
-          maxOff > 0 ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: `  ${off + 1}-${Math.min(off + burstBudget, anomalies2.length)}/${anomalies2.length}` }) : null,
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
+          maxOff > 0 ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: `  ${off + 1}-${Math.min(off + burstBudget, anomalies2.length)}/${anomalies2.length}` }) : null,
+          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
         ] }),
-        anomalies2.length === 0 ? /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
+        anomalies2.length === 0 ? /* @__PURE__ */ jsxs5(Text5, { color: theme.dim, children: [
           "  ",
           insightsQ.loading ? "loading\u2026" : insightsQ.error ? `couldn't load bursts: ${String(insightsQ.error).slice(0, 60)}` : "no bursts in the last 7 days"
-        ] }) : /* @__PURE__ */ jsx4(
+        ] }) : /* @__PURE__ */ jsx5(
           Table,
           {
             columns: [{ header: "WHEN", width: 15 }, { header: "RESULT", width: 9 }, { header: "CALLS", width: 7 }, { header: "AGENT", width: Math.max(8, bw - 31) }],
@@ -2362,13 +2512,13 @@ function RateLimitPanel({ focused }) {
           }
         )
       ] }),
-      /* @__PURE__ */ jsx4(Text4, { children: " " }),
-      /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "limit now  " }),
-        /* @__PURE__ */ jsx4(Text4, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
-        lastChange ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
-        dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
-        status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
+      /* @__PURE__ */ jsx5(Text5, { children: " " }),
+      /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "limit now  " }),
+        /* @__PURE__ */ jsx5(Text5, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
+        lastChange ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
+        dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
+        status ? /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
       ] })
     ] });
   })() : null });
@@ -2376,39 +2526,39 @@ function RateLimitPanel({ focused }) {
 function BusiestRow({ label, peak, limit }) {
   const ctx = limit > 0 ? peak > limit ? `over ${limit}` : peak === limit ? `at limit ${limit}` : `limit ${limit}` : "no limit set";
   const hot = limit > 0 && peak > limit;
-  return /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: ("  " + label).padEnd(11) }),
-    /* @__PURE__ */ jsx4(Text4, { color: hot ? theme.bad : void 0, bold: hot, children: String(peak).padStart(4) + " calls" }),
-    /* @__PURE__ */ jsx4(Text4, { color: hot ? theme.bad : theme.dim, children: "  \xB7 " + ctx })
+  return /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: ("  " + label).padEnd(11) }),
+    /* @__PURE__ */ jsx5(Text5, { color: hot ? theme.bad : void 0, bold: hot, children: String(peak).padStart(4) + " calls" }),
+    /* @__PURE__ */ jsx5(Text5, { color: hot ? theme.bad : theme.dim, children: "  \xB7 " + ctx })
   ] });
 }
 function FieldRow({ label, active: active2, children }) {
-  return /* @__PURE__ */ jsxs4(Text4, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(11) }),
+  return /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx5(Text5, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(11) }),
     children
   ] });
 }
 
 // src/tui/panels/Dlp.tsx
-import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
+import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
 import TextInput3 from "ink-text-input";
-import { useEffect as useEffect5, useState as useState5 } from "react";
-import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+import { useEffect as useEffect6, useState as useState6 } from "react";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 var MODES2 = ["off", "detect", "block"];
 function DlpPanel({ focused }) {
   const { cols, rows } = usePanelSize();
   const q = useLoader(() => api.settings.getSecurityLayers());
-  const [dlp, setDlp] = useState5(null);
-  const [available, setAvailable] = useState5([]);
-  const [ghostOn, setGhostOn] = useState5(false);
-  const [ghostPats, setGhostPats] = useState5([]);
-  const [sel, setSel] = useState5(0);
-  const [dirty, setDirty] = useState5(false);
-  const [status, setStatus] = useState5(null);
-  const [adding, setAdding] = useState5(null);
-  const [newName, setNewName] = useState5("");
-  const [input, setInput] = useState5("");
-  useEffect5(() => {
+  const [dlp, setDlp] = useState6(null);
+  const [available, setAvailable] = useState6([]);
+  const [ghostOn, setGhostOn] = useState6(false);
+  const [ghostPats, setGhostPats] = useState6([]);
+  const [sel, setSel] = useState6(0);
+  const [dirty, setDirty] = useState6(false);
+  const [status, setStatus] = useState6(null);
+  const [adding, setAdding] = useState6(null);
+  const [newName, setNewName] = useState6("");
+  const [input, setInput] = useState6("");
+  useEffect6(() => {
     if (q.data && !dirty) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
@@ -2455,7 +2605,7 @@ function DlpPanel({ focused }) {
   ];
   const selC = Math.min(sel, Math.max(0, entries.length - 1));
   const cur = entries[selC];
-  useInput4(
+  useInput5(
     (input2, key) => {
       if (!dlp) return;
       if (key.ctrl && input2 === "r") {
@@ -2500,13 +2650,13 @@ function DlpPanel({ focused }) {
   const enabled = new Set(dlp?.patterns ?? []);
   const lines = [];
   const header = (key, label, extra) => lines.push({
-    node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.accentBright, bold: true, children: label }),
-      extra ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + extra }) : null
+    node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, bold: true, children: label }),
+      extra ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " + extra }) : null
     ] }, key),
     entry: -1
   });
-  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
+  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
   let ei = 0;
   header("h:builtin", "built-in secret patterns", "space toggles on/off");
   available.forEach((p) => {
@@ -2514,10 +2664,10 @@ function DlpPanel({ focused }) {
     const isCur = focused && ei === selC;
     const idx = ei++;
     lines.push({
-      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx5(Text5, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
-        /* @__PURE__ */ jsx5(Text5, { color: on ? void 0 : theme.dim, children: p })
+      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx6(Text6, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
+        /* @__PURE__ */ jsx6(Text6, { color: on ? void 0 : theme.dim, children: p })
       ] }, "b:" + p),
       entry: idx
     });
@@ -2529,10 +2679,10 @@ function DlpPanel({ focused }) {
     const isCur = focused && ei === selC;
     const idx = ei++;
     lines.push({
-      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: c2.name }),
-        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  " + truncate(c2.re, Math.max(10, cols - c2.name.length - 8)) })
+      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, children: c2.name }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " + truncate(c2.re, Math.max(10, cols - c2.name.length - 8)) })
       ] }, "c:" + c2.name + i),
       entry: idx
     });
@@ -2544,10 +2694,10 @@ function DlpPanel({ focused }) {
     const isCur = focused && ei === selC;
     const idx = ei++;
     lines.push({
-      node: /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx5(Text5, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx5(Text5, { color: ghostOn ? theme.accent : theme.dim, children: truncate(p, Math.max(10, cols - 6)) }),
-        !ghostOn ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  (ghost off)" }) : null
+      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx6(Text6, { color: ghostOn ? theme.accent : theme.dim, children: truncate(p, Math.max(10, cols - 6)) }),
+        !ghostOn ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  (ghost off)" }) : null
       ] }, "g:" + p + i),
       entry: idx
     });
@@ -2561,17 +2711,17 @@ function DlpPanel({ focused }) {
   const win = lines.slice(start, start + budget);
   const moreAbove = start;
   const moreBelow = Math.max(0, lines.length - (start + budget));
-  return /* @__PURE__ */ jsx5(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx5(Text5, { children: "mode: " }),
-      /* @__PURE__ */ jsx5(Text5, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
-      dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
+  return /* @__PURE__ */ jsx6(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx6(Text6, { children: "mode: " }),
+      /* @__PURE__ */ jsx6(Text6, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
+      dirty ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add pattern \xB7 r add route \xB7 d remove \xB7 g ghost \xB7 s save \xB7 ^R refresh${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
-    adding ? /* @__PURE__ */ jsx5(Box5, { flexDirection: "column", children: /* @__PURE__ */ jsxs5(Box5, { children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `pattern for "${newName}" (glob, * = any chars, e.g. sk-*  AKIA*): ` : "ghost path to hide (glob, * = any chars, e.g. */.env  *.pem): " }),
-      /* @__PURE__ */ jsx5(
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add pattern \xB7 r add route \xB7 d remove \xB7 g ghost \xB7 s save \xB7 ^R refresh${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
+    adding ? /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", children: /* @__PURE__ */ jsxs6(Box6, { children: [
+      /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `pattern for "${newName}" (glob, * = any chars, e.g. sk-*  AKIA*): ` : "ghost path to hide (glob, * = any chars, e.g. */.env  *.pem): " }),
+      /* @__PURE__ */ jsx6(
         TextInput3,
         {
           value: input,
@@ -2598,19 +2748,19 @@ function DlpPanel({ focused }) {
         }
       )
     ] }) }) : null,
-    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
-    status ? /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
+    /* @__PURE__ */ jsx6(Box6, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
+    status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
   ] }) : null });
 }
 
 // src/tui/panels/Audit.tsx
-import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
+import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
 import TextInput4 from "ink-text-input";
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join5 } from "path";
-import { useState as useState6 } from "react";
-import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+import { useState as useState7 } from "react";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
 var SIGNALS = [void 0, "dlp", "ratelimit"];
 var SESS_STATUS = [void 0, "active", "idle", "ended"];
@@ -2718,25 +2868,25 @@ var STATUS_DOT = {
 };
 function AuditPanel({ active: active2, focused }) {
   const { cols, rows } = usePanelSize();
-  const [source, setSource] = useState6("cloud");
-  const [view, setView] = useState6("logs");
-  const [di, setDi] = useState6(0);
-  const [gi, setGi] = useState6(0);
-  const [tool, setTool] = useState6("");
-  const [agent, setAgent] = useState6("");
-  const [search, setSearch] = useState6("");
-  const [sessFilter, setSessFilter] = useState6("");
-  const [page, setPage] = useState6(0);
-  const [sel, setSel] = useState6(0);
-  const [detailScroll, setDetailScroll] = useState6(0);
-  const [editing, setEditing] = useState6(null);
-  const [si, setSi] = useState6(0);
-  const [sessSearch, setSessSearch] = useState6("");
-  const [sessSel, setSessSel] = useState6(0);
-  const [confirm, setConfirm] = useState6(null);
-  const [msg, setMsg] = useState6(null);
-  const [showHelp, setShowHelp] = useState6(false);
-  const [frozen, setFrozen] = useState6(false);
+  const [source, setSource] = useState7("cloud");
+  const [view, setView] = useState7("logs");
+  const [di, setDi] = useState7(0);
+  const [gi, setGi] = useState7(0);
+  const [tool, setTool] = useState7("");
+  const [agent, setAgent] = useState7("");
+  const [search, setSearch] = useState7("");
+  const [sessFilter, setSessFilter] = useState7("");
+  const [page, setPage] = useState7(0);
+  const [sel, setSel] = useState7(0);
+  const [detailScroll, setDetailScroll] = useState7(0);
+  const [editing, setEditing] = useState7(null);
+  const [si, setSi] = useState7(0);
+  const [sessSearch, setSessSearch] = useState7("");
+  const [sessSel, setSessSel] = useState7(0);
+  const [confirm, setConfirm] = useState7(null);
+  const [msg, setMsg] = useState7(null);
+  const [showHelp, setShowHelp] = useState7(false);
+  const [frozen, setFrozen] = useState7(false);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   usePoll(statsQ.reloadQuiet, 15e3, active2 && source === "cloud" && !frozen);
@@ -2855,7 +3005,7 @@ function AuditPanel({ active: active2, focused }) {
     };
     run().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
   };
-  useInput5(
+  useInput6(
     (input, key) => {
       if (input === " ") {
         setFrozen((f) => !f);
@@ -2989,58 +3139,58 @@ function AuditPanel({ active: active2, focused }) {
     { isActive: focused && !editing }
   );
   const localAll = localQ.data ?? [];
-  const strip = source === "cloud" ? /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx6(Text6, { bold: true, children: statsQ.data ? statsQ.data.total_calls : "\xB7\xB7\xB7\xB7" }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " calls \xB7 " }),
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.ok, children: [
+  const strip = source === "cloud" ? /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx7(Text7, { bold: true, children: statsQ.data ? statsQ.data.total_calls : "\xB7\xB7\xB7\xB7" }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " calls \xB7 " }),
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.ok, children: [
       statsQ.data?.allowed ?? "\xB7\xB7\xB7",
       " allow"
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \xB7 " }),
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.bad, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.bad, children: [
       statsQ.data?.denied ?? "\xB7\xB7",
       " deny"
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: ` \xB7 ${statsQ.data?.active_policies ?? "\xB7"} policies` })
-  ] }) : /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx6(Text6, { bold: true, children: localAll.length }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " calls in local file \xB7 " }),
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.ok, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: ` \xB7 ${statsQ.data?.active_policies ?? "\xB7"} policies` })
+  ] }) : /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx7(Text7, { bold: true, children: localAll.length }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " calls in local file \xB7 " }),
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.ok, children: [
       localAll.filter((r) => r.decision === "ALLOW").length,
       " allow"
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \xB7 " }),
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.bad, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.bad, children: [
       localAll.filter((r) => r.decision !== "ALLOW").length,
       " deny"
     ] }),
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
       " \xB7 ",
       LOCAL_LOG
     ] })
   ] });
-  const copyBanner = frozen ? /* @__PURE__ */ jsx6(Text6, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, wrap: "truncate", children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : null;
-  const srcChip = /* @__PURE__ */ jsxs6(Text6, { children: [
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "src:" }),
-    /* @__PURE__ */ jsx6(Text6, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " (s) " })
+  const copyBanner = frozen ? /* @__PURE__ */ jsx7(Text7, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, wrap: "truncate", children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : null;
+  const srcChip = /* @__PURE__ */ jsxs7(Text7, { children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "src:" }),
+    /* @__PURE__ */ jsx7(Text7, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " (s) " })
   ] });
   if (showHelp) {
-    const colOf = (groups) => /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", width: "50%", paddingRight: 2, children: groups.map(([group, keys]) => /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, children: ("  " + k).padEnd(19) }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: desc })
+    const colOf = (groups) => /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", width: "50%", paddingRight: 2, children: groups.map(([group, keys]) => /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: ("  " + k).padEnd(19) }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) });
-    return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs6(Text6, { bold: true, color: theme.accentBright, children: [
+      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
         "AUDIT \u2014 all keys",
         " ",
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: frozen ? "\xB7 screen frozen \u2014 space resumes, other keys are locked" : "\xB7 press any key to close \xB7 space = copy mode (works here too)" })
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: frozen ? "\xB7 screen frozen \u2014 space resumes, other keys are locked" : "\xB7 press any key to close \xB7 space = copy mode (works here too)" })
       ] }),
-      /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, children: [
+      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
         colOf(AUDIT_HELP.slice(0, 1)),
         colOf(AUDIT_HELP.slice(1))
       ] })
@@ -3059,53 +3209,53 @@ function AuditPanel({ active: active2, focused }) {
     const maxScroll = Math.max(0, contentLines.length - bodyRows);
     const off = Math.min(detailScroll, maxScroll);
     const win = contentLines.slice(off, off + bodyRows);
-    return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
-        /* @__PURE__ */ jsx6(Text6, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx6(Text6, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
-        e.dlp.length ? /* @__PURE__ */ jsx6(Text6, { color: theme.bad, children: "  DLP!" }) : null,
-        e.burst ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "  BURST" }) : null,
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  \u2190 back" })
+      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })
       ] }),
-      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 when " }),
-        /* @__PURE__ */ jsx6(Text6, { children: new Date(e.at).toLocaleString() }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 perm " }),
-        /* @__PURE__ */ jsx6(Text6, { children: e.permission || "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 trust " }),
-        /* @__PURE__ */ jsx6(Text6, { children: e.trust || "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 eval " }),
-        /* @__PURE__ */ jsx6(Text6, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 agent " }),
-        /* @__PURE__ */ jsx6(Text6, { children: e.agent ?? "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx7(Text7, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx7(Text7, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 trust " }),
+        /* @__PURE__ */ jsx7(Text7, { children: e.trust || "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx7(Text7, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx7(Text7, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2502 session " }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: e.session ?? "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502 rule " }),
-        /* @__PURE__ */ jsx6(Text6, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \u2502" })
+      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx7(Text7, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsx6(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
-      /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx6(Text6, { wrap: "truncate", children: l || " " }, off + i)) }),
-      /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
-        /* @__PURE__ */ jsx6(Text6, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
-        /* @__PURE__ */ jsx6(Text6, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      /* @__PURE__ */ jsx7(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx7(Text7, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
-  const chip = (label, val, on) => /* @__PURE__ */ jsxs6(Text6, { children: [
-    /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+  const chip = (label, val, on) => /* @__PURE__ */ jsxs7(Text7, { children: [
+    /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
       label,
       ":"
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: on ? theme.accentBright : theme.dim, children: val }),
-    /* @__PURE__ */ jsx6(Text6, { children: " " })
+    /* @__PURE__ */ jsx7(Text7, { color: on ? theme.accentBright : theme.dim, children: val }),
+    /* @__PURE__ */ jsx7(Text7, { children: " " })
   ] });
   if (view === "sessions") {
     const headerRows2 = 5 + (editing ? 1 : 0);
@@ -3113,20 +3263,20 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    return /* @__PURE__ */ jsx6(DataView, { loading: sessLoading && !frozen, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx7(DataView, { loading: sessLoading && !frozen, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       strip,
       copyBanner,
-      /* @__PURE__ */ jsxs6(Box6, { children: [
+      /* @__PURE__ */ jsxs7(Box7, { children: [
         srcChip,
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, bold: true, children: "SESSIONS" }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \xB7 logs (v) " }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, children: "SESSIONS" }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 logs (v) " }),
         chip("status", SESS_STATUS[si] ?? "all", si !== 0),
         chip("search", sessSearch || "\xB7", !!sessSearch)
       ] }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
-      editing === "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
-        /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "search: " }),
-        /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
+      editing === "sess-search" ? /* @__PURE__ */ jsxs7(Box7, { children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "search: " }),
+        /* @__PURE__ */ jsx7(
           TextInput4,
           {
             value: sessSearch,
@@ -3138,8 +3288,8 @@ function AuditPanel({ active: active2, focused }) {
           }
         )
       ] }) : null,
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${sessionsFiltered.length} sessions \xB7 ${selC + 1}/${sessionsFiltered.length}${start2 ? ` \xB7 \u25B2${start2}` : ""}${start2 + listRows2 < sessionsFiltered.length ? ` \xB7 \u25BC${sessionsFiltered.length - start2 - listRows2}` : ""}` }),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${sessionsFiltered.length} sessions \xB7 ${selC + 1}/${sessionsFiltered.length}${start2 ? ` \xB7 \u25B2${start2}` : ""}${start2 + listRows2 < sessionsFiltered.length ? ` \xB7 \u25BC${sessionsFiltered.length - start2 - listRows2}` : ""}` }),
+      /* @__PURE__ */ jsx7(
         Table,
         {
           columns: [
@@ -3170,7 +3320,7 @@ function AuditPanel({ active: active2, focused }) {
           })
         }
       ),
-      sessionsFiltered.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+      sessionsFiltered.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
         "(no sessions",
         source === "local" ? " in the local file" : "",
         ")"
@@ -3183,13 +3333,13 @@ function AuditPanel({ active: active2, focused }) {
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
   const windowed = pageRows.slice(start, start + listRows);
-  return /* @__PURE__ */ jsx6(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+  return /* @__PURE__ */ jsx7(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
     strip,
     copyBanner,
-    /* @__PURE__ */ jsxs6(Box6, { children: [
+    /* @__PURE__ */ jsxs7(Box7, { children: [
       srcChip,
-      /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, bold: true, children: "LOGS" }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: " \xB7 sessions (v) " }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, children: "LOGS" }),
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 sessions (v) " }),
       chip("dec", DECISIONS[di] ?? "all", di !== 0),
       chip("sig", SIGNALS[gi] ?? "all", gi !== 0),
       chip("tool", tool || "\xB7", !!tool),
@@ -3197,14 +3347,14 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
-    msg ? /* @__PURE__ */ jsx6(Text6, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
-    editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs6(Box6, { children: [
-      /* @__PURE__ */ jsxs6(Text6, { color: theme.warn, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
+    editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs7(Box7, { children: [
+      /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
         editing,
         ": "
       ] }),
-      /* @__PURE__ */ jsx6(
+      /* @__PURE__ */ jsx7(
         TextInput4,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
@@ -3217,9 +3367,9 @@ function AuditPanel({ active: active2, focused }) {
         }
       )
     ] }) : null,
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx6(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
-    pageRows.length === 0 ? /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
+    /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx7(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
+    pageRows.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
       " \u2014 c clears filters)"
@@ -3228,9 +3378,9 @@ function AuditPanel({ active: active2, focused }) {
 }
 
 // src/tui/panels/Settings.tsx
-import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
+import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
 import TextInput5 from "ink-text-input";
-import { useEffect as useEffect6, useRef as useRef3, useState as useState7 } from "react";
+import { useEffect as useEffect7, useRef as useRef3, useState as useState8 } from "react";
 
 // src/global-install.ts
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync5, existsSync as existsSync2, mkdirSync as mkdirSync4, rmSync } from "fs";
@@ -3714,7 +3864,7 @@ async function tuiUpdateFlow(onStatus) {
 }
 
 // src/tui/panels/Settings.tsx
-import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { Fragment as Fragment5, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 var EVENTS = ["denials", "allowed", "all"];
 var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SIGNALS2 = ["any", "deny", "dlp", "ratelimit"];
@@ -3740,16 +3890,16 @@ function SettingsPanel({
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
-  const [sel, setSel] = useState7(0);
-  const [editing, setEditing] = useState7(null);
-  const [input, setInput] = useState7("");
-  const [confirmDel, setConfirmDel] = useState7(null);
-  const [msg, setMsg] = useState7(null);
-  const [busy, setBusy] = useState7(false);
-  const [editor, setEditor] = useState7(null);
-  const [latest, setLatest] = useState7(null);
+  const [sel, setSel] = useState8(0);
+  const [editing, setEditing] = useState8(null);
+  const [input, setInput] = useState8("");
+  const [confirmDel, setConfirmDel] = useState8(null);
+  const [msg, setMsg] = useState8(null);
+  const [busy, setBusy] = useState8(false);
+  const [editor, setEditor] = useState8(null);
+  const [latest, setLatest] = useState8(null);
   const ver = currentVersion();
-  useEffect6(() => {
+  useEffect7(() => {
     let live2 = true;
     latestVersion().then((v) => {
       if (live2) setLatest(v);
@@ -3759,26 +3909,26 @@ function SettingsPanel({
       live2 = false;
     };
   }, []);
-  const [accounts, setAccounts] = useState7(() => listAccounts());
-  const [login, setLogin] = useState7(null);
-  const [tick, setTick] = useState7(0);
+  const [accounts, setAccounts] = useState8(() => listAccounts());
+  const [login, setLogin] = useState8(null);
+  const [tick, setTick] = useState8(0);
   const abort = useRef3(false);
   const refreshAccounts = () => setAccounts(listAccounts());
-  const [guardHere, setGuardHere] = useState7(() => isGuardInstalled());
-  const [guardVer, setGuardVer] = useState7(() => installedGuardVersion());
-  const [guardOld, setGuardOld] = useState7(() => guardHookOutdated());
+  const [guardHere, setGuardHere] = useState8(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState8(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState8(() => guardHookOutdated());
   const refreshGuard = () => {
     setGuardHere(isGuardInstalled());
     setGuardVer(installedGuardVersion());
     setGuardOld(guardHookOutdated());
   };
   const locked = accounts.length === 0;
-  const [srv, setSrv] = useState7(() => logsServerStatus());
-  useEffect6(() => {
+  const [srv, setSrv] = useState8(() => logsServerStatus());
+  useEffect7(() => {
     const t = setInterval(() => setSrv(logsServerStatus()), 3e3);
     return () => clearInterval(t);
   }, []);
-  useEffect6(() => {
+  useEffect7(() => {
     if (!login || login.phase === "done" || login.phase === "error") return;
     const t = setInterval(() => setTick((n) => n + 1), 120);
     return () => clearInterval(t);
@@ -3791,7 +3941,7 @@ function SettingsPanel({
   const local = localQ.data;
   const selfProt = selfQ.data;
   const autoInstalledRef = useRef3(false);
-  useEffect6(() => {
+  useEffect7(() => {
     if (autoInstalledRef.current) return;
     if (guardHere && guardOld) {
       autoInstalledRef.current = true;
@@ -3803,7 +3953,7 @@ function SettingsPanel({
       }
     }
   }, [guardHere, guardOld]);
-  const [hidden, setHidden] = useState7(/* @__PURE__ */ new Set());
+  const [hidden, setHidden] = useState8(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
   const hasEmailAlert = alerts.some((r) => alertChannel(r) === "email");
@@ -3984,7 +4134,7 @@ function SettingsPanel({
       setEditor({ ...editor, target: v, field: 1 });
     }
   };
-  useInput6(
+  useInput7(
     (inp, key) => {
       if (login && (login.phase === "starting" || login.phase === "waiting")) {
         if (key.escape) {
@@ -4117,156 +4267,156 @@ function SettingsPanel({
   );
   const spin = SPIN2[tick % SPIN2.length];
   if (login && (login.phase === "starting" || login.phase === "waiting")) {
-    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accentBright, children: "Add an account" }),
-      login.phase === "starting" ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "Add an account" }),
+      login.phase === "starting" ? /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
         spin,
         " starting device pairing\u2026"
-      ] }) : /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
-        /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
-          /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
+      ] }) : /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
+        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+          /* @__PURE__ */ jsxs8(Text8, { color: theme.warn, children: [
             spin,
             " waiting for authorization\u2026 "
           ] }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "esc to cancel" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "esc to cancel" })
         ] })
       ] })
     ] });
   }
   if (editor) {
-    const fieldRow = (idx, label, value, hint) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx7(Text7, { color: editor.field === idx ? theme.accentBright : theme.dim, children: editor.field === idx ? "\u25B8 " : "  " }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: label.padEnd(11) }),
+    const fieldRow = (idx, label, value, hint) => /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: editor.field === idx ? theme.accentBright : theme.dim, children: editor.field === idx ? "\u25B8 " : "  " }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: label.padEnd(11) }),
       value,
-      editor.field === idx && hint ? /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   " + hint }) : null
+      editor.field === idx && hint ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   " + hint }) : null
     ] });
-    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs8(Text8, { bold: true, color: theme.accentBright, children: [
         editor.id ? "Edit" : "New",
         " ",
         editor.channel,
         " alert"
       ] }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2191\u2193 field \xB7 \u2190\u2192 change \xB7 e edit target \xB7 enter save \xB7 esc cancel" }),
-      editing === "alert-target" ? /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: editor.channel === "email" ? "e-mail address: " : "telegram chat id (from @userinfobot): " }),
-        /* @__PURE__ */ jsx7(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
-      ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, flexDirection: "column", children: [
-        fieldRow(0, "target", editor.target ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(editor.target, cols - 16) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "empty \u2014 press e" }), "press e to edit"),
-        fieldRow(1, "signal", /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }), "\u2190\u2192 change"),
-        fieldRow(2, "threshold", /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: `\u2265 ${editor.threshold}` }), "\u2190\u2192 \xB15"),
-        fieldRow(3, "window", /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: winLabel(editor.windowSeconds) }), "\u2190\u2192 change"),
-        editor.id ? fieldRow(4, "status", editor.enabled ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "on" }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "off" }), "\u2190\u2192 turn on/off") : null
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u2191\u2193 field \xB7 \u2190\u2192 change \xB7 e edit target \xB7 enter save \xB7 esc cancel" }),
+      editing === "alert-target" ? /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: editor.channel === "email" ? "e-mail address: " : "telegram chat id (from @userinfobot): " }),
+        /* @__PURE__ */ jsx8(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
+      ] }) : msg ? /* @__PURE__ */ jsx8(Text8, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
+      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
+        fieldRow(0, "target", editor.target ? /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(editor.target, cols - 16) }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "empty \u2014 press e" }), "press e to edit"),
+        fieldRow(1, "signal", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }), "\u2190\u2192 change"),
+        fieldRow(2, "threshold", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: `\u2265 ${editor.threshold}` }), "\u2190\u2192 \xB15"),
+        fieldRow(3, "window", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: winLabel(editor.windowSeconds) }), "\u2190\u2192 change"),
+        editor.id ? fieldRow(4, "status", editor.enabled ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "on" }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "off" }), "\u2190\u2192 turn on/off") : null
       ] }),
-      /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: editor.id && !editor.enabled ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "disabled \u2014 this alert will NOT fire until you set status back to on" }) : /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+      /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: editor.id && !editor.enabled ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "disabled \u2014 this alert will NOT fire until you set status back to on" }) : /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
         "fires when ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }),
         " reach ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: editor.threshold }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: editor.threshold }),
         " within",
         " ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: winLabel(editor.windowSeconds) })
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: winLabel(editor.windowSeconds) })
       ] }) })
     ] });
   }
   const loading = !locked && (localQ.loading && !localQ.data || whQ.loading && !whQ.data || alertQ.loading && !alertQ.data || guardQ.loading && !guardQ.data || selfQ.loading && !selfQ.data);
   const error = locked ? null : localQ.error ?? whQ.error ?? alertQ.error ?? guardQ.error ?? selfQ.error;
-  const onOff = (on) => on ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "off" });
+  const onOff = (on) => on ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "off" });
   const chanOf = (rule) => [...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
   const isCur = (r) => keyOf(r) === keyOf(cur) && focused;
-  const cursor = (r) => /* @__PURE__ */ jsx7(Text7, { color: isCur(r) ? theme.accentBright : theme.dim, children: isCur(r) ? "\u25B8 " : "  " });
+  const cursor = (r) => /* @__PURE__ */ jsx8(Text8, { color: isCur(r) ? theme.accentBright : theme.dim, children: isCur(r) ? "\u25B8 " : "  " });
   const rowLine = (r) => {
     switch (r.kind) {
       case "acct": {
         const a = r.acc;
         const isView = viewApiKey ? a.apiKey === viewApiKey : accounts[0]?.apiKey === a.apiKey;
         const isActive = isActiveAccount(a.apiKey);
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(acctLabel(a), 30).padEnd(31) }),
-          isView ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "          " }),
-          isActive ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "       " }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: a.project ? truncate(a.project, 20) : "" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(acctLabel(a), 30).padEnd(31) }),
+          isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
+          isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate(a.project, 20) : "" })
         ] });
       }
       case "acct-add":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
         ] });
       case "guard":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "guard".padEnd(11) }),
-          !guardHere ? /* @__PURE__ */ jsxs7(Fragment5, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: "enter to install" })
-          ] }) : /* @__PURE__ */ jsxs7(Fragment5, { children: [
-            /* @__PURE__ */ jsx7(Text7, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
-            /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 d remove" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "guard".padEnd(11) }),
+          !guardHere ? /* @__PURE__ */ jsxs8(Fragment5, { children: [
+            /* @__PURE__ */ jsx8(Text8, { color: theme.bad, bold: true, children: "removed" }),
+            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \xB7 " }),
+            /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: "enter to install" })
+          ] }) : /* @__PURE__ */ jsxs8(Fragment5, { children: [
+            /* @__PURE__ */ jsx8(Text8, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \xB7 d remove" })
           ] })
         ] });
       case "self":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "self-prot".padEnd(11) }),
-          selfProt ? onOff(selfProt.enabled) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2026" }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   blocks agents editing SolonGate\u2019s own hooks/config \xB7 enter toggles" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "self-prot".padEnd(11) }),
+          selfProt ? onOff(selfProt.enabled) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u2026" }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   blocks agents editing SolonGate\u2019s own hooks/config \xB7 enter toggles" })
         ] });
       case "ll-enabled":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "enabled ".padEnd(11) }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "enabled ".padEnd(11) }),
           onOff(!!local?.enabled),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   enter toggles" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   enter toggles" })
         ] });
       case "ll-path":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "path ".padEnd(11) }),
-          local?.path ? /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(local.path, cols - 14) }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "not set \u2014 enter to edit" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "path ".padEnd(11) }),
+          local?.path ? /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(local.path, cols - 14) }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
         ] });
       case "ll-server":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "dashboard".padEnd(11) }),
-          srv.running ? /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "stopped" }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: srv.running ? "   survives closing the dataroom \xB7 enter stops" : "   enter starts the dashboard local-logs link" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "dashboard".padEnd(11) }),
+          srv.running ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "stopped" }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: srv.running ? "   survives closing the dataroom \xB7 enter stops" : "   enter starts the dashboard local-logs link" })
         ] });
       case "wh":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
           onOff(r.wh.enabled),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + r.wh.events).padEnd(9) }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(r.wh.url, cols - 16) })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: (" " + r.wh.events).padEnd(9) }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(r.wh.url, cols - 16) })
         ] });
       case "wh-add":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add webhook (enter)" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add webhook (enter)" })
         ] });
       case "alert":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
           onOff(r.rule.enabled),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: (" " + SIGNAL_LABEL[r.rule.signal]).padEnd(13) }),
-          /* @__PURE__ */ jsx7(Text7, { children: `\u2265${r.rule.threshold}/${winLabel(r.rule.windowSeconds)} `.padEnd(11) }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.accent, children: truncate(chanOf(r.rule), cols - 34) })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: (" " + SIGNAL_LABEL[r.rule.signal]).padEnd(13) }),
+          /* @__PURE__ */ jsx8(Text8, { children: `\u2265${r.rule.threshold}/${winLabel(r.rule.windowSeconds)} `.padEnd(11) }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(chanOf(r.rule), cols - 34) })
         ] });
       case "alert-add-email":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add email alert (enter)" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add email alert (enter)" })
         ] });
       case "alert-add-tg":
-        return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "+ add telegram alert (enter \u2014 numeric chat id from @userinfobot)" })
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add telegram alert (enter \u2014 numeric chat id from @userinfobot)" })
         ] });
     }
   };
@@ -4285,39 +4435,39 @@ function SettingsPanel({
     const sec = sectionOf(r);
     if (sec !== lastSec) {
       if (lastSec) {
-        lineEls.push(/* @__PURE__ */ jsx7(Text7, { children: " " }, "sp:" + sec));
+        lineEls.push(/* @__PURE__ */ jsx8(Text8, { children: " " }, "sp:" + sec));
         lineKey.push("");
       }
       lastSec = sec;
       lineEls.push(
-        /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accentBright, children: sec }),
-          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2014 " + SECTION_DESC[sec] })
+        /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: sec }),
+          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \u2014 " + SECTION_DESC[sec] })
         ] }, "h:" + sec)
       );
       lineKey.push("");
       if ((sec === "WEBHOOKS" || sec === "ALERTS") && local?.enabled) {
         lineEls.push(
-          /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
+          /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
         );
         lineKey.push("");
       }
     }
-    lineEls.push(/* @__PURE__ */ jsx7(Box7, { children: rowLine(r) }, keyOf(r)));
+    lineEls.push(/* @__PURE__ */ jsx8(Box8, { children: rowLine(r) }, keyOf(r)));
     lineKey.push(keyOf(r));
   });
   if (hasEmailAlert && hasTgAlert) {
     lineEls.push(
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  both channels in use \u2014 remove one (d) to change it" }, "both-note")
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  both channels in use \u2014 remove one (d) to change it" }, "both-note")
     );
     lineKey.push("");
   }
-  lineEls.push(/* @__PURE__ */ jsx7(Text7, { children: " " }, "ver-sp"));
+  lineEls.push(/* @__PURE__ */ jsx8(Text8, { children: " " }, "ver-sp"));
   lineKey.push("");
   lineEls.push(
-    /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", color: theme.dim, children: [
+    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", color: theme.dim, children: [
       `solongate v${ver}`,
-      latest ? newerThan(latest, ver) ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: `  \xB7 v${latest} on npm \u2014 auto-updating` }) : /* @__PURE__ */ jsx7(Text7, { color: theme.ok, children: "  \xB7 latest" }) : null
+      latest ? newerThan(latest, ver) ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \xB7 v${latest} on npm \u2014 auto-updating` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "  \xB7 latest" }) : null
     ] }, "ver")
   );
   lineKey.push("");
@@ -4328,26 +4478,26 @@ function SettingsPanel({
   const win = lineEls.slice(startL, startL + budget);
   const moreAbove = startL;
   const moreBelow = Math.max(0, lineEls.length - (startL + budget));
-  return /* @__PURE__ */ jsx7(DataView, { loading, error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", color: theme.dim, children: focused ? `\u2191\u2193 move \xB7 enter act \xB7 m toggle \xB7 t test \xB7 e edit \xB7 x remove \xB7 d delete \xB7 n add${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to configure" }),
-    editing ? /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: editing === "path" ? "local log path: " : "webhook url: " }),
-      /* @__PURE__ */ jsx7(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
-    ] }) : msg ? /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx7(Text7, { children: " " }),
-    /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: budget, overflow: "hidden", children: win })
+  return /* @__PURE__ */ jsx8(DataView, { loading, error, children: /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.dim, children: focused ? `\u2191\u2193 move \xB7 enter act \xB7 m toggle \xB7 t test \xB7 e edit \xB7 x remove \xB7 d delete \xB7 n add${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to configure" }),
+    editing ? /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: editing === "path" ? "local log path: " : "webhook url: " }),
+      /* @__PURE__ */ jsx8(TextInput5, { value: input, onChange: setInput, onSubmit: submitInput })
+    ] }) : msg ? /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
+    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", height: budget, overflow: "hidden", children: win })
   ] }) });
 }
 
 // src/tui/App.tsx
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: /* @__PURE__ */ jsxs8(Text8, { children: [
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
       "press ",
-      /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
@@ -4357,6 +4507,7 @@ var SECTIONS = [
   { label: "Policies", Panel: PoliciesPanel },
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
+  { label: "Dry Run", Panel: DryRunPanel },
   { label: "Audit", Panel: AuditPanel },
   { label: "Settings", Panel: SettingsPanel }
 ];
@@ -4364,27 +4515,27 @@ var BANNER_HEX = ["white", "white", "white", "white", "white", "white"];
 function Banner({ cols }) {
   const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx8(Text8, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 var SETTINGS_SECTION = SECTIONS.findIndex((s) => s.label === "Settings");
 function App() {
   const { exit } = useApp();
-  const [accounts, setAccounts] = useState8(() => listAccounts());
-  const [viewKey, setViewKey] = useState8(() => accounts[0]?.apiKey);
-  const [viewNonce, setViewNonce] = useState8(0);
-  const [section, setSection] = useState8(accounts.length === 0 ? SETTINGS_SECTION : 0);
-  const [focus, setFocus] = useState8("nav");
-  const [help, setHelp] = useState8(false);
-  const [update2, setUpdate] = useState8({ kind: "idle" });
-  useEffect7(() => {
+  const [accounts, setAccounts] = useState9(() => listAccounts());
+  const [viewKey, setViewKey] = useState9(() => accounts[0]?.apiKey);
+  const [viewNonce, setViewNonce] = useState9(0);
+  const [section, setSection] = useState9(accounts.length === 0 ? SETTINGS_SECTION : 0);
+  const [focus, setFocus] = useState9("nav");
+  const [help, setHelp] = useState9(false);
+  const [update2, setUpdate] = useState9({ kind: "idle" });
+  useEffect8(() => {
     let alive = true;
     const run = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
     run();
@@ -4397,7 +4548,7 @@ function App() {
   const acctIdx = Math.max(0, accounts.findIndex((a) => a.apiKey === viewKey));
   const cur = accounts[acctIdx];
   const acctLabel2 = cur ? cur.email || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}` : "not logged in";
-  useEffect7(() => {
+  useEffect8(() => {
     if (!cur || cur.email) return;
     let alive = true;
     api.auth.me().then((r) => {
@@ -4433,7 +4584,7 @@ function App() {
   };
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
-  useInput7((input, key) => {
+  useInput8((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -4461,33 +4612,33 @@ function App() {
   });
   const { cols, rows } = useTermSize();
   const current = SECTIONS[effectiveSection];
-  if (help) return /* @__PURE__ */ jsx8(HelpOverlay, { cols, rows });
+  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
   if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx8(LivePanel, { active: true, focused: true }, viewNonce) });
+    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx8(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx8(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx9(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.
     // overflow hidden makes it a hard guarantee even if a panel over-renders.
-    /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows - 1, paddingX: 1, paddingTop: 1, overflow: "hidden", children: [
-      /* @__PURE__ */ jsx8(Banner, { cols }),
-      /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "account: " }),
-        /* @__PURE__ */ jsx8(Text8, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
-        locked ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \xB7 Settings to add another" }),
-        update2.kind === "updating" ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : null
+    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows - 1, paddingX: 1, paddingTop: 1, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx9(Banner, { cols }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
+        /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
+        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \u2014 restart (q, then solongate) to apply` }) : null
       ] }),
-      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexGrow: 1, children: [
-        /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+      /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
+        /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
           const isCur = i === effectiveSection;
           const disabled = locked && s.label !== "Settings";
-          return /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+          return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
         }) }),
-        /* @__PURE__ */ jsx8(Box8, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
+        /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
       ] }, viewNonce),
-      /* @__PURE__ */ jsx8(Box8, { children: locked ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx8(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+      /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
     ] })
   );
 }
@@ -4502,21 +4653,21 @@ var HELP = [
   ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]
 ];
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs8(Text8, { children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 
 // src/tui/index.tsx
-import { jsx as jsx9 } from "react/jsx-runtime";
+import { jsx as jsx10 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -4541,7 +4692,7 @@ async function launchTui() {
   console.info = toFile("info");
   console.debug = toFile("debug");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx9(App, {}), { patchConsole: false });
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}), { patchConsole: false });
     await waitUntilExit();
   } finally {
     Object.assign(console, saved);