@solongate/proxy 0.83.59 → 0.83.60

package/dist/tui/index.js

@@ -495,8 +495,8 @@ function readCodexHooksFile(path) {
       continue;
     }
     if (k === "hooks" && v && typeof v === "object") {
-      for (const [ev, groups] of Object.entries(v)) {
-        if (Array.isArray(groups)) out.hooks[ev] = groups;
+      for (const [ev, groups2] of Object.entries(v)) {
+        if (Array.isArray(groups2)) out.hooks[ev] = groups2;
       }
       continue;
     }
@@ -510,7 +510,7 @@ function readCodexHooksFile(path) {
 }
 function writeCodexHooksFile(path, file) {
   const hooks = {};
-  for (const [ev, groups] of Object.entries(file.hooks)) if (groups.length) hooks[ev] = groups;
+  for (const [ev, groups2] of Object.entries(file.hooks)) if (groups2.length) hooks[ev] = groups2;
   const body = { ...file.rest };
   if (file.description) body["description"] = file.description;
   body["hooks"] = hooks;
@@ -557,9 +557,9 @@ function removeCodexGuard(p) {
   try {
     const file = readCodexHooksFile(p.codexHooksPath);
     let changed = false;
-    for (const [ev, groups] of Object.entries(file.hooks)) {
-      const kept = groups.filter((g) => !isOurCodexGroup(g));
-      if (kept.length !== groups.length) {
+    for (const [ev, groups2] of Object.entries(file.hooks)) {
+      const kept = groups2.filter((g) => !isOurCodexGroup(g));
+      if (kept.length !== groups2.length) {
         file.hooks[ev] = kept;
         changed = true;
       }
@@ -691,7 +691,7 @@ function repairQuiet() {
   const p = globalPaths();
   const has = (f) => existsSync3(f);
   const guardFile = join4(p.hooksDir, "guard.mjs");
-  const line = (label, ok, yes, no) => ({ label, ok, detail: ok ? yes : no });
+  const line = (label2, ok, yes, no) => ({ label: label2, ok, detail: ok ? yes : no });
   const runtime = () => {
     const r2 = hookCanStart();
     return { label: "hook runtime", ok: r2.ok, detail: r2.ok ? `node ${r2.detail}` : r2.detail };
@@ -834,13 +834,13 @@ function guardHookOutdated() {
     return false;
   }
 }
-function hookCommandFor(hooksDir2, script, client = "claude-code", label = "Claude Code") {
+function hookCommandFor(hooksDir2, script, client = "claude-code", label2 = "Claude Code") {
   const target = join4(hooksDir2, script).replace(/\\/g, "/");
   if (process.platform === "win32") {
-    return `& "${process.execPath.replace(/\\/g, "/")}" "${target}" ${client} "${label}"`;
+    return `& "${process.execPath.replace(/\\/g, "/")}" "${target}" ${client} "${label2}"`;
   }
   const launcher = join4(hooksDir2, LAUNCHER_NAME).replace(/\\/g, "/");
-  return `/bin/sh "${launcher}" "${target}" ${client} "${label}"`;
+  return `/bin/sh "${launcher}" "${target}" ${client} "${label2}"`;
 }
 function writeLauncher(hooksDir2) {
   writeFileSync2(join4(hooksDir2, LAUNCHER_NAME), launcherScript(process.execPath));
@@ -948,8 +948,8 @@ import { join as join11 } from "path";
 import { render } from "ink";
 
 // src/tui/App.tsx
-import { Box as Box9, Text as Text9, useApp, useInput as useInput8 } from "ink";
-import { useEffect as useEffect8, useState as useState9 } from "react";
+import { Box as Box11, Text as Text11, useApp, useInput as useInput10 } from "ink";
+import { useEffect as useEffect9, useState as useState11 } from "react";
 
 // src/cli-utils.ts
 var c = {
@@ -1072,14 +1072,14 @@ var ymd = (ts) => {
   const p = (n) => String(n).padStart(2, "0");
   return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
 };
-function PaneTitle({ label, extra, width }) {
+function PaneTitle({ label: label2, extra, width }) {
   const tail = extra ? ` ${extra} ` : " ";
-  const used = 2 + 1 + label.length + tail.length;
+  const used = 2 + 1 + label2.length + tail.length;
   return /* @__PURE__ */ jsxs(Text, { wrap: "truncate", children: [
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: "\u2500 " }),
     /* @__PURE__ */ jsxs(Text, { color: theme.accentBright, bold: true, children: [
       "\u258E",
-      label
+      label2
     ] }),
     /* @__PURE__ */ jsx(Text, { color: theme.dim, children: tail + "\u2500".repeat(Math.max(0, width - used)) })
   ] });
@@ -1133,10 +1133,10 @@ function Table({ columns, rows }) {
   ] });
 }
 function KeyHints({ hints }) {
-  return /* @__PURE__ */ jsx(Box, { children: hints.map(([key, label], i) => /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
+  return /* @__PURE__ */ jsx(Box, { children: hints.map(([key, label2], i) => /* @__PURE__ */ jsxs(Text, { color: theme.dim, children: [
     /* @__PURE__ */ jsx(Text, { color: theme.accent, children: key }),
     " ",
-    label,
+    label2,
     i < hints.length - 1 ? "   " : ""
   ] }, i)) });
 }
@@ -1471,6 +1471,10 @@ function buildUrl(base, path, query) {
   if (query) {
     for (const [k, v] of Object.entries(query)) {
       if (v === void 0) continue;
+      if (Array.isArray(v)) {
+        for (const one of v) url.searchParams.append(k, one);
+        continue;
+      }
       url.searchParams.set(k, String(v));
     }
   }
@@ -1530,6 +1534,7 @@ async function request(method, path, opts = {}) {
     if (res.status >= 500) throw new ApiError(res.status, "SERVER_ERROR", text || "SolonGate API had a problem (server error). Please try again in a moment.");
     throw new ApiError(res.status, "ERROR", text || res.statusText || `HTTP ${res.status}`);
   }
+  if (opts.raw) return text;
   return json;
 }
 
@@ -1809,8 +1814,100 @@ function list4() {
   return request("GET", "/mcp-servers");
 }
 
+// src/api-client/fleet.ts
+var fleet_exports = {};
+__export(fleet_exports, {
+  activity: () => activity,
+  analytics: () => analytics,
+  assignGroup: () => assignGroup,
+  createGroup: () => createGroup,
+  deleteGroup: () => deleteGroup,
+  groups: () => groups,
+  invite: () => invite,
+  overview: () => overview,
+  renameGroup: () => renameGroup,
+  report: () => report,
+  reportDownload: () => reportDownload,
+  reportSchedule: () => reportSchedule,
+  revoke: () => revoke2,
+  sendReport: () => sendReport,
+  setGroupColor: () => setGroupColor,
+  setGroupPolicy: () => setGroupPolicy,
+  setReportSchedule: () => setReportSchedule,
+  setUserPolicy: () => setUserPolicy,
+  stream: () => stream,
+  summary: () => summary
+});
+function overview() {
+  return request("GET", "/fleet");
+}
+function summary(opts = {}) {
+  const query = {};
+  if (opts.range) query.range = opts.range;
+  if (opts.group?.length) query.group = opts.group;
+  if (opts.who?.length) query.who = opts.who;
+  if (opts.agent) query.agent = opts.agent;
+  return request("GET", "/fleet/summary", { query });
+}
+function groups() {
+  return request("GET", "/fleet/groups");
+}
+function createGroup(name, color) {
+  return request("POST", "/fleet/groups", { body: { name, color } });
+}
+function renameGroup(name, newName) {
+  return request("POST", "/fleet/groups/rename", { body: { name, new_name: newName } });
+}
+function setGroupColor(name, color) {
+  return request("POST", "/fleet/groups/color", { body: { name, color } });
+}
+function deleteGroup(name) {
+  return request("POST", "/fleet/groups/delete", { body: { name } });
+}
+function setGroupPolicy(name, policyId) {
+  return request("POST", "/fleet/groups/policy", { body: { name, policy_id: policyId } });
+}
+function setUserPolicy(ids, policyId) {
+  return request("POST", "/fleet/policy", { body: { ids, policy_id: policyId } });
+}
+function assignGroup(ids, group) {
+  return request("POST", "/fleet/group", { body: { ids, group } });
+}
+function invite(email) {
+  return request("POST", "/fleet/invitations", { body: { email } });
+}
+function revoke2(id) {
+  return request("DELETE", `/fleet/invitations/${encodeURIComponent(id)}`);
+}
+function analytics(guest) {
+  return request("GET", "/fleet/analytics", { query: { guest } });
+}
+function activity(guest, limit) {
+  const query = { guest };
+  if (limit) query.limit = limit;
+  return request("GET", "/fleet/activity", { query });
+}
+function report(span = "day") {
+  return request("GET", "/fleet/report", { query: { span } });
+}
+function reportDownload(span, format = "md") {
+  return request("GET", "/fleet/report/download", { query: { span, format }, raw: true });
+}
+function sendReport(span = "day") {
+  return request("POST", "/fleet/report/send", { query: { span }, body: {} });
+}
+function reportSchedule() {
+  return request("GET", "/settings/reports");
+}
+function setReportSchedule(schedule) {
+  return request("PUT", "/settings/reports", { body: schedule });
+}
+function stream(limit = 60) {
+  return request("GET", "/fleet/stream", { query: { limit } });
+}
+
 // src/api-client/index.ts
-var api = { auth: auth_exports, policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports };
+var api = { auth: auth_exports, policies: policies_exports, settings: settings_exports, stats: stats_exports, audit: audit_exports, agents: agents_exports, keys: keys_exports, mcp: mcp_exports, fleet: fleet_exports };
 
 // src/tui/notify.ts
 import { spawn as spawn3 } from "child_process";
@@ -1980,10 +2077,10 @@ function ColumnChart({ series, hot, height, width, color, hotColor = theme.bad }
   }
   return /* @__PURE__ */ jsx2(Box2, { flexDirection: "column", children: lines });
 }
-function HBar({ label, value, max, width, color }) {
+function HBar({ label: label2, value, max, width, color }) {
   const filled = max > 0 ? Math.round(value / max * width) : 0;
   return /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label.padEnd(10) }),
+    /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: label2.padEnd(10) }),
     /* @__PURE__ */ jsx2(Text2, { color, children: "\u2588".repeat(Math.min(width, filled)) }),
     /* @__PURE__ */ jsx2(Text2, { color: DIM_FLOOR, children: "\u2591".repeat(Math.max(0, width - filled)) }),
     /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: " " + value })
@@ -2384,7 +2481,7 @@ function LivePanel({ active: active2 }) {
   const selClamped = Math.min(Math.max(0, sel), Math.max(0, visibleDesc.length - 1));
   const maxScroll = Math.max(0, visibleDesc.length - streamBodyRows);
   const clampedScroll = Math.min(Math.max(0, selClamped - Math.floor((streamBodyRows - 1) / 2)), maxScroll);
-  const windowed = visibleDesc.slice(clampedScroll, clampedScroll + streamBodyRows);
+  const windowed2 = visibleDesc.slice(clampedScroll, clampedScroll + streamBodyRows);
   const selEntry = visibleDesc[selClamped];
   const detailEntries = detail ? (() => {
     const seen = /* @__PURE__ */ new Set();
@@ -2647,11 +2744,11 @@ function LivePanel({ active: active2 }) {
     const L = [];
     const push = (el) => L.push(/* @__PURE__ */ jsx2(Box2, { children: el }, L.length));
     const blank = () => push(/* @__PURE__ */ jsx2(Text2, { children: " " }));
-    const section = (label, m, note) => push(
+    const section = (label2, m, note) => push(
       /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
         /* @__PURE__ */ jsxs2(Text2, { bold: true, color: theme.accentBright, children: [
           "\u258E",
-          label.padEnd(10)
+          label2.padEnd(10)
         ] }),
         /* @__PURE__ */ jsx2(Text2, { bold: true, color: modeColor2(m), children: (m ?? "?").padEnd(8) }),
         note ? /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: note }) : null
@@ -2924,7 +3021,7 @@ function LivePanel({ active: active2 }) {
         /* @__PURE__ */ jsx2(Text2, { color: theme.ok, children: "local logs on" }),
         /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: ` \u2014 no entries yet \xB7 hooks write ${localPath?.file ?? ""}` })
       ] }) : null,
-      windowed.length === 0 ? (
+      windowed2.length === 0 ? (
         // With a source filter on, "awaiting traffic" reads as "nothing is
         // happening" when the stream is merely filtered — say which it is.
         filter === "all" ? /* @__PURE__ */ jsxs2(Text2, { color: theme.dim, children: [
@@ -2932,7 +3029,7 @@ function LivePanel({ active: active2 }) {
           " awaiting traffic\u2026"
         ] }) : /* @__PURE__ */ jsx2(Text2, { color: theme.dim, children: `${spin} no ${filter === "local" ? "LOC (local log)" : "CLD (cloud)"} calls in the buffer \xB7 f switches source` })
       ) : null,
-      windowed.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
+      windowed2.map((e, i) => /* @__PURE__ */ jsx2(StreamLine, { e, loc: isLoc(e), selected: clampedScroll + i === selClamped }, e.id))
     ] }),
     /* @__PURE__ */ jsxs2(Text2, { wrap: "truncate", children: [
       /* @__PURE__ */ jsx2(Text2, { backgroundColor: BG, color: "white", bold: true, children: " LIVE " }),
@@ -2942,16 +3039,665 @@ function LivePanel({ active: active2 }) {
   ] });
 }
 
-// src/tui/panels/Policies.tsx
+// src/tui/panels/FleetLive.tsx
+import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
+import { useEffect as useEffect3, useMemo, useRef as useRef3, useState as useState3 } from "react";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var TICK_MS = 2e3;
+var hhmmss2 = (unix) => {
+  const d = new Date(unix * 1e3);
+  return Number.isNaN(d.getTime()) ? "--:--:--" : d.toTimeString().slice(0, 8);
+};
+function FleetLivePanel({ focused }) {
+  const { cols, rows } = useTermSize();
+  const streamQ = useLoader(() => api.fleet.stream(80));
+  const summaryQ = useLoader(() => api.fleet.summary({ range: "24h" }));
+  const [paused, setPaused] = useState3(false);
+  const [onlyDenies, setOnlyDenies] = useState3(false);
+  usePoll(() => {
+    if (paused) return;
+    streamQ.reloadQuiet();
+  }, TICK_MS);
+  usePoll(() => {
+    if (paused) return;
+    summaryQ.reloadQuiet();
+  }, 15e3);
+  useInput2(
+    (input) => {
+      if (input === " ") setPaused((p) => !p);
+      else if (input === "d") setOnlyDenies((d) => !d);
+      else if (input === "r") {
+        streamQ.reload();
+        summaryQ.reload();
+      }
+    },
+    { isActive: focused }
+  );
+  const calls = streamQ.data?.calls ?? [];
+  const seenIds = useRef3(/* @__PURE__ */ new Set());
+  const started = useRef3(Date.now());
+  const [since, setSince] = useState3(() => ({
+    calls: 0,
+    denied: 0,
+    byUser: /* @__PURE__ */ new Map()
+  }));
+  useEffect3(() => {
+    if (calls.length === 0) return;
+    let added = 0;
+    let denied = 0;
+    const byUser = new Map(since.byUser);
+    for (const row of [...calls].reverse()) {
+      if (seenIds.current.has(row.id)) continue;
+      seenIds.current.add(row.id);
+      added++;
+      const isDeny = row.decision.toUpperCase() === "DENY";
+      if (isDeny) denied++;
+      const prev = byUser.get(row.who) ?? { calls: 0, denied: 0, last: 0 };
+      byUser.set(row.who, {
+        calls: prev.calls + 1,
+        denied: prev.denied + (isDeny ? 1 : 0),
+        last: Math.max(prev.last, row.created_at)
+      });
+    }
+    if (added === 0) return;
+    if (seenIds.current.size === added) {
+      setSince({ calls: 0, denied: 0, byUser: /* @__PURE__ */ new Map() });
+      return;
+    }
+    setSince((s) => ({ calls: s.calls + added, denied: s.denied + denied, byUser }));
+  }, [calls]);
+  const shown = useMemo(
+    () => onlyDenies ? calls.filter((c2) => c2.decision.toUpperCase() === "DENY") : calls,
+    [calls, onlyDenies]
+  );
+  const people = useMemo(() => {
+    const list5 = [...since.byUser.entries()].map(([who, s]) => ({ who, ...s }));
+    list5.sort((a, b) => b.calls - a.calls || b.last - a.last);
+    return list5.slice(0, 8);
+  }, [since]);
+  const totals = summaryQ.data?.totals;
+  const elapsed = Math.max(1, Math.round((Date.now() - started.current) / 1e3));
+  const rate = since.calls > 0 ? (since.calls / (elapsed / 60)).toFixed(1) : "0.0";
+  const tickerRows = Math.max(4, rows - 12 - Math.min(people.length, 8));
+  const width = Math.max(40, cols - 4);
+  return /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", width: cols, height: rows - 1, paddingX: 1, overflow: "hidden", children: [
+    /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: "\u25B6 FLEET LIVE" }),
+      /* @__PURE__ */ jsxs3(Text3, { color: theme.dim, children: [
+        "   " + (summaryQ.data?.developers ?? 0) + " people",
+        totals ? "   " + totals.calls + " calls / 24h \xB7 " + totals.denied + " denied" : ""
+      ] }),
+      paused ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "   paused" }) : null,
+      onlyDenies ? /* @__PURE__ */ jsx3(Text3, { color: theme.bad, children: "   denies only" }) : null
+    ] }),
+    /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "since you opened this: " + since.calls + " calls, " }),
+      /* @__PURE__ */ jsx3(Text3, { color: since.denied > 0 ? theme.bad : theme.dim, children: since.denied + " denied" }),
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  \xB7  " + rate + "/min" })
+    ] }),
+    people.length > 0 ? /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "Working now" }),
+      people.map((p) => /* @__PURE__ */ jsxs3(Box3, { children: [
+        /* @__PURE__ */ jsx3(Text3, { children: "  " + truncate(p.who, 28).padEnd(29) }),
+        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: String(p.calls).padStart(5) + " calls  " }),
+        /* @__PURE__ */ jsx3(Text3, { color: p.denied > 0 ? theme.bad : theme.dim, children: String(p.denied).padStart(4) + " denied  " }),
+        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: hhmmss2(p.last) })
+      ] }, p.who))
+    ] }) : null,
+    /* @__PURE__ */ jsxs3(Box3, { marginTop: 1, flexDirection: "column", flexGrow: 1, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: onlyDenies ? "Refusals" : "Calls" }),
+      streamQ.error ? /* @__PURE__ */ jsx3(Text3, { color: theme.bad, children: "\u2717 " + streamQ.error }) : shown.length === 0 ? /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "Nothing yet. This fills as your fleet works." }) : shown.slice(0, tickerRows).map((row) => /* @__PURE__ */ jsx3(StreamRow, { row, width }, row.id))
+    ] }),
+    /* @__PURE__ */ jsx3(Box3, { children: /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "space pause \xB7 d denies only \xB7 r refresh \xB7 \u2190/esc back" }) })
+  ] });
+}
+function StreamRow({ row, width }) {
+  const decision = (row.decision || "").toUpperCase();
+  const who = truncate(row.who, 22).padEnd(23);
+  const tool = truncate(row.tool || "\u2014", 26).padEnd(27);
+  const rest = Math.max(10, width - 23 - 27 - 9 - 8);
+  const tail = decision === "DENY" ? row.reason || "" : row.agent || "";
+  return /* @__PURE__ */ jsxs3(Box3, { children: [
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: hhmmss2(row.created_at) + " " }),
+    /* @__PURE__ */ jsx3(Text3, { children: who }),
+    /* @__PURE__ */ jsx3(Text3, { color: decisionColor(decision), children: (decision || "\u2014").padEnd(7) }),
+    /* @__PURE__ */ jsx3(Text3, { children: tool }),
+    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: truncate(tail, rest) })
+  ] });
+}
+
+// src/tui/panels/Fleet.tsx
 import { Box as Box4, Text as Text4, useInput as useInput3 } from "ink";
-import TextInput3 from "ink-text-input";
-import { useEffect as useEffect4, useState as useState4 } from "react";
+import TextInput2 from "ink-text-input";
+import { useMemo as useMemo2, useState as useState4 } from "react";
+import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+var SELF = "self";
+var UNGROUPED = "~ungrouped";
+var GROUP_COLORS = ["slate", "blue", "green", "amber", "red", "violet", "cyan", "pink"];
+var shortId = (id) => id.length > 10 ? id.slice(0, 9) + "\u2026" : id;
+var policyLabel = (id, policies) => {
+  if (!id) return "\u2014";
+  const hit = policies.find((p) => p.id === id);
+  return hit ? hit.name : shortId(id);
+};
+function FleetPanel({ focused }) {
+  const { cols, rows } = usePanelSize();
+  const overviewQ = useLoader(() => api.fleet.overview());
+  const groupsQ = useLoader(() => api.fleet.groups());
+  const summaryQ = useLoader(() => api.fleet.summary({ range: "30d" }));
+  const policiesQ = useLoader(() => api.policies.list());
+  const [view, setView] = useState4("roster");
+  const [sel, setSel] = useState4(0);
+  const [status, setStatus] = useState4(null);
+  const [prompt, setPrompt] = useState4(null);
+  const [draft, setDraft] = useState4("");
+  const [pick, setPick] = useState4(0);
+  const [confirm, setConfirm] = useState4(null);
+  usePoll(() => {
+    if (prompt) return;
+    overviewQ.reloadQuiet();
+    groupsQ.reloadQuiet();
+    summaryQ.reloadQuiet();
+  }, 15e3);
+  const policies = policiesQ.data?.policies ?? [];
+  const overview2 = overviewQ.data;
+  const groups2 = groupsQ.data?.groups ?? [];
+  const summary2 = summaryQ.data;
+  const byUser = useMemo2(() => {
+    const map = /* @__PURE__ */ new Map();
+    for (const p of summary2?.people ?? []) map.set(p.role === "host" ? SELF : p.guest_user_id, p);
+    return map;
+  }, [summary2]);
+  const list5 = useMemo2(() => {
+    const accepted = (overview2?.invitations ?? []).filter((m) => m.status === "accepted");
+    const pending2 = (overview2?.invitations ?? []).filter((m) => m.status === "pending");
+    const self = {
+      id: "",
+      guest_user_id: SELF,
+      email: "You (host)",
+      status: "accepted",
+      group: overview2?.host_group ?? "",
+      policy_id: "",
+      top_agent: overview2?.host_top_agent ?? "",
+      variant_id: "",
+      created_at: "",
+      accepted_at: ""
+    };
+    const named = groups2.filter((g) => g.name !== UNGROUPED);
+    const ungrouped = groups2.find((g) => g.name === UNGROUPED) ?? { name: UNGROUPED, members: 0, color: "slate", policy_id: "" };
+    const out = [];
+    const push = (group, members) => {
+      out.push({ kind: "group", group });
+      for (const m of members) {
+        out.push({ kind: "member", group, member: m, person: byUser.get(m.guest_user_id || SELF) });
+      }
+    };
+    const inGroup = (name) => {
+      const mine = accepted.filter((m) => (m.group || "") === name);
+      if ((self.group || "") === name) return [self, ...mine];
+      return mine;
+    };
+    for (const g of named) push(g, inGroup(g.name));
+    push(ungrouped, inGroup(""));
+    if (pending2.length > 0) {
+      const waiting = { name: "Waiting to answer", members: pending2.length, color: "amber", policy_id: "" };
+      out.push({ kind: "group", group: waiting });
+      for (const m of pending2) out.push({ kind: "pending", group: waiting, member: m });
+    }
+    return out;
+  }, [overview2, groups2, byUser]);
+  const current = list5[Math.min(sel, Math.max(0, list5.length - 1))];
+  const say = (msg) => setStatus(msg);
+  const reloadAll = () => {
+    overviewQ.reload();
+    groupsQ.reload();
+    summaryQ.reload();
+  };
+  const run = async (what, fn) => {
+    setStatus(what + "\u2026");
+    try {
+      await fn();
+      setStatus("\u2713 " + what);
+      reloadAll();
+    } catch (e) {
+      setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
+    }
+  };
+  const openPrompt = (p, initial = "") => {
+    setPrompt(p);
+    setDraft(initial);
+    setStatus(null);
+    setPick(0);
+  };
+  const submitPrompt = async (value) => {
+    const v = value.trim();
+    const p = prompt;
+    setPrompt(null);
+    setDraft("");
+    if (!p) return;
+    if (p === "invite") {
+      if (!v) return;
+      await run("Invited " + v, () => api.fleet.invite(v));
+      return;
+    }
+    if (p === "newGroup") {
+      if (!v) return;
+      await run("Created " + v, () => api.fleet.createGroup(v));
+      return;
+    }
+    if (p === "rename") {
+      const g = current?.group;
+      if (!v || !g || g.name === UNGROUPED) return;
+      await run("Renamed to " + v, () => api.fleet.renameGroup(g.name, v));
+      return;
+    }
+    if (p === "assign") {
+      const m = current?.member;
+      if (!m || !m.id) return;
+      await run(v ? "Filed under " + v : "Unfiled", () => api.fleet.assignGroup([m.id], v));
+      return;
+    }
+    if (p === "emails" || p === "telegram" || p === "endTime") {
+      await saveSchedule(p, v);
+      return;
+    }
+  };
+  const reportQ = useLoader(() => view === "reports" ? api.fleet.report("day") : Promise.resolve(null), [view]);
+  const scheduleQ = useLoader(() => view === "reports" ? api.fleet.reportSchedule() : Promise.resolve(null), [view]);
+  const schedule = scheduleQ.data?.schedule;
+  const saveSchedule = async (field, value) => {
+    if (!schedule) return;
+    const next = {};
+    if (field === "emails") next.emails = splitTargets(value);
+    if (field === "telegram") next.telegram = splitTargets(value);
+    if (field === "endTime") next.endMinute = minutesOf(value);
+    await run("Saved schedule", async () => {
+      await api.fleet.setReportSchedule(next);
+      scheduleQ.reload();
+      reportQ.reload();
+    });
+  };
+  const toggleSpan = async (span) => {
+    if (!schedule) return;
+    await run(span + " report " + (schedule[span] ? "off" : "on"), async () => {
+      await api.fleet.setReportSchedule({ [span]: !schedule[span] });
+      scheduleQ.reload();
+    });
+  };
+  useInput3(
+    (input, key) => {
+      if (prompt) {
+        if (key.escape) {
+          setPrompt(null);
+          setDraft("");
+        }
+        return;
+      }
+      if (confirm) {
+        if (input === "y") {
+          const target = confirm;
+          setConfirm(null);
+          void doDelete(target);
+        } else {
+          setConfirm(null);
+        }
+        return;
+      }
+      if (view === "person") {
+        if (key.leftArrow || key.escape) setView("roster");
+        return;
+      }
+      if (view === "reports") {
+        if (key.leftArrow || key.escape) setView("roster");
+        else if (input === "d") void toggleSpan("day");
+        else if (input === "w") void toggleSpan("week");
+        else if (input === "m") void toggleSpan("month");
+        else if (input === "e") openPrompt("emails", (schedule?.emails ?? []).join(", "));
+        else if (input === "t") openPrompt("telegram", (schedule?.telegram ?? []).join(", "));
+        else if (input === "h") openPrompt("endTime", timeOf(schedule?.endMinute ?? 0));
+        else if (input === "s") void run("Sent", () => api.fleet.sendReport("day"));
+        else if (input === "r") {
+          reportQ.reload();
+          scheduleQ.reload();
+        }
+        return;
+      }
+      if (key.upArrow) setSel((s) => Math.max(0, s - 1));
+      else if (key.downArrow) setSel((s) => Math.min(list5.length - 1, s + 1));
+      else if (key.rightArrow || key.return) {
+        if (current?.kind === "member") setView("person");
+      } else if (input === "R") setView("reports");
+      else if (input === "i") openPrompt("invite");
+      else if (input === "n") openPrompt("newGroup");
+      else if (input === "r") {
+        if (current?.kind === "group" && current.group.name !== UNGROUPED) openPrompt("rename", current.group.name);
+      } else if (input === "g") {
+        if (current?.kind === "member" && current.member?.id) openPrompt("assign", current.member.group || "");
+      } else if (input === "c") void cycleColor();
+      else if (input === "p") openPolicyPicker();
+      else if (input === "d") askDelete();
+      else if (input === "x") reloadAll();
+    },
+    { isActive: focused }
+  );
+  const cycleColor = async () => {
+    const g = current?.group;
+    if (!g || g.name === UNGROUPED || current?.kind !== "group") return;
+    const next = GROUP_COLORS[(GROUP_COLORS.indexOf(g.color) + 1 + GROUP_COLORS.length) % GROUP_COLORS.length];
+    await run("Coloured " + next, () => api.fleet.setGroupColor(g.name, next));
+  };
+  const openPolicyPicker = () => {
+    if (!current) return;
+    if (current.kind === "pending") return;
+    if (policies.length === 0) {
+      say("No policies to choose from yet.");
+      return;
+    }
+    openPrompt("policy");
+  };
+  const choosePolicy = async (id) => {
+    const target = current;
+    setPrompt(null);
+    if (!target) return;
+    if (target.kind === "group") {
+      if (target.group.name === UNGROUPED) {
+        say("Uncategorized is the absence of a group, so it carries no policy.");
+        return;
+      }
+      await run(
+        id ? "Group runs " + policyLabel(id, policies) : "Group names no policy",
+        () => api.fleet.setGroupPolicy(target.group.name, id)
+      );
+      return;
+    }
+    const m = target.member;
+    if (!m?.id) {
+      say("The host's own machine follows their group. Set the group's policy.");
+      return;
+    }
+    await run(
+      id ? "Pinned to " + policyLabel(id, policies) : "Back to their group",
+      () => api.fleet.setUserPolicy([m.id], id)
+    );
+  };
+  const askDelete = () => {
+    if (!current) return;
+    if (current.kind === "group") {
+      if (current.group.name === UNGROUPED) return;
+      setConfirm("group:" + current.group.name);
+      return;
+    }
+    const m = current.member;
+    if (!m?.id) {
+      say("You cannot remove yourself from your own fleet.");
+      return;
+    }
+    setConfirm("member:" + m.id);
+  };
+  const doDelete = async (target) => {
+    const [kind, ...rest] = target.split(":");
+    const value = rest.join(":");
+    if (kind === "group") await run("Deleted " + value, () => api.fleet.deleteGroup(value));
+    else await run("Revoked", () => api.fleet.revoke(value));
+  };
+  const loading = overviewQ.loading || groupsQ.loading;
+  const error = overviewQ.error ?? groupsQ.error;
+  if (overview2 && !overview2.host) {
+    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "This account does not run a fleet." }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Ask whoever manages your team for a seat, then come back." })
+    ] });
+  }
+  if (view === "person") {
+    return /* @__PURE__ */ jsx4(PersonView, { row: current, policies, cols });
+  }
+  if (view === "reports") {
+    return /* @__PURE__ */ jsx4(
+      ReportsView,
+      {
+        report: reportQ.data,
+        loading: reportQ.loading,
+        error: reportQ.error,
+        schedule,
+        next: scheduleQ.data?.next ?? 0,
+        status,
+        prompt,
+        draft,
+        onChange: setDraft,
+        onSubmit: submitPrompt,
+        cols
+      }
+    );
+  }
+  const visible = windowed(list5, sel, Math.max(4, rows - 6));
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx4(Box4, { children: /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
+      (overview2?.used ?? 0) + " of " + (overview2?.seats ?? 0) + " seats",
+      summary2 ? "   " + summary2.totals.calls + " calls \xB7 " + summary2.totals.denied + " denied (30d)" : ""
+    ] }) }),
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: /* @__PURE__ */ jsx4(DataView, { loading, error, empty: list5.length === 0, emptyText: "Nobody on this fleet yet. Press i to invite somebody.", children: visible.map((row, i) => {
+      const index = list5.indexOf(row);
+      const selected = index === sel;
+      if (row.kind === "group") {
+        return /* @__PURE__ */ jsxs4(Box4, { children: [
+          /* @__PURE__ */ jsx4(Text4, { color: selected ? theme.accentBright : theme.accent, bold: true, children: (selected ? "\u25B8 " : "  ") + label(row.group).padEnd(22) }),
+          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: String(row.group.members).padStart(3) + " people   " }),
+          /* @__PURE__ */ jsx4(Text4, { color: row.group.policy_id ? theme.ok : theme.dim, children: row.group.policy_id ? policyLabel(row.group.policy_id, policies) : "no group policy" })
+        ] }, "g" + index + i);
+      }
+      const m = row.member;
+      const pinned = Boolean(m.policy_id);
+      const runs = pinned ? m.policy_id : row.group.policy_id;
+      return /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { color: selected ? theme.accentBright : void 0, children: (selected ? "  \u25B8 " : "    ") + truncate(m.email, 30).padEnd(31) }),
+        row.kind === "pending" ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "waiting" }) : /* @__PURE__ */ jsxs4(Fragment3, { children: [
+          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: String(row.person?.calls ?? 0).padStart(6) + " calls  " }),
+          /* @__PURE__ */ jsx4(Text4, { color: (row.person?.denied ?? 0) > 0 ? theme.bad : theme.dim, children: String(row.person?.denied ?? 0).padStart(4) + " deny  " }),
+          /* @__PURE__ */ jsx4(Text4, { color: pinned ? theme.warn : theme.dim, children: runs ? policyLabel(runs, policies) + (pinned ? " (only them)" : "") : "\u2014" })
+        ] })
+      ] }, "m" + index + i);
+    }) }) }),
+    confirm ? /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: confirm.startsWith("group:") ? "Delete this group? Its people become uncategorized. (y/n)" : "Revoke this person? Their machines stop being managed. (y/n)" }) }) : null,
+    prompt === "policy" ? /* @__PURE__ */ jsx4(
+      PolicyPicker,
+      {
+        policies,
+        pick,
+        onMove: setPick,
+        onChoose: choosePolicy,
+        onCancel: () => setPrompt(null),
+        focused,
+        target: current?.kind === "group" ? label(current.group) : current?.member?.email ?? ""
+      }
+    ) : prompt ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.accent, children: promptLabel(prompt) + " " }),
+      /* @__PURE__ */ jsx4(TextInput2, { value: draft, onChange: setDraft, onSubmit: submitPrompt })
+    ] }) : null,
+    status ? /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null
+  ] });
+}
+var label = (g) => g.name === UNGROUPED ? "Uncategorized" : g.name;
+var promptLabel = (p) => {
+  switch (p) {
+    case "invite":
+      return "Invite (email):";
+    case "newGroup":
+      return "New group:";
+    case "rename":
+      return "Rename to:";
+    case "assign":
+      return "File under (blank = uncategorized):";
+    case "emails":
+      return "Email the report to:";
+    case "telegram":
+      return "Telegram chat id or @handle:";
+    case "endTime":
+      return "A day ends at (HH:MM):";
+    default:
+      return "";
+  }
+};
+function windowed(list5, sel, height) {
+  if (list5.length <= height) return list5;
+  const start = Math.min(Math.max(0, sel - Math.floor(height / 2)), list5.length - height);
+  return list5.slice(start, start + height);
+}
+var splitTargets = (v) => v.split(/[\s,;]+/).map((s) => s.trim()).filter(Boolean);
+var minutesOf = (v) => {
+  const [h, m] = v.split(":");
+  const total = (Number(h) || 0) * 60 + (Number(m) || 0);
+  return total >= 0 && total <= 1439 ? total : 0;
+};
+var timeOf = (minute) => String(Math.floor(minute / 60)).padStart(2, "0") + ":" + String(minute % 60).padStart(2, "0");
+function PolicyPicker({
+  policies,
+  pick,
+  onMove,
+  onChoose,
+  onCancel,
+  focused,
+  target
+}) {
+  const options = [
+    { id: "", name: "No policy of its own", detail: "follow the level above" },
+    ...policies.map((p) => ({
+      id: p.id,
+      name: p.name,
+      detail: (p.rules?.length ?? 0) + " rules \xB7 " + p.mode
+    }))
+  ];
+  useInput3(
+    (_input, key) => {
+      if (key.upArrow) onMove(Math.max(0, pick - 1));
+      else if (key.downArrow) onMove(Math.min(options.length - 1, pick + 1));
+      else if (key.return) onChoose(options[pick]?.id ?? "");
+      else if (key.escape || key.leftArrow) onCancel();
+    },
+    { isActive: focused }
+  );
+  const visible = windowed(options, pick, 8);
+  return /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+    /* @__PURE__ */ jsx4(Text4, { color: theme.accent, children: "Policy for " + target + "  (\u2191\u2193 enter \xB7 esc cancel)" }),
+    visible.map((o, i) => {
+      const index = options.indexOf(o);
+      const selected = index === pick;
+      return /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { color: selected ? theme.accentBright : void 0, children: (selected ? "\u25B8 " : "  ") + truncate(o.name, 30).padEnd(31) }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: o.detail })
+      ] }, o.id + i);
+    })
+  ] });
+}
+function PersonView({ row, policies, cols }) {
+  const m = row?.member;
+  const guest = m?.guest_user_id || SELF;
+  const analyticsQ = useLoader(() => api.fleet.analytics(guest), [guest]);
+  if (!m) return /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Nobody selected." });
+  const a = analyticsQ.data ?? {};
+  const totals = a["totals"] ?? {};
+  const agents = a["agents"] ?? [];
+  const tools = a["tools"] ?? [];
+  const denies = a["deny_reasons"] ?? [];
+  const runs = m.policy_id || row?.group.policy_id || "";
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: m.email }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   " + (row?.group ? label(row.group) : "") })
+    ] }),
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Runs " }),
+      /* @__PURE__ */ jsx4(Text4, { color: m.policy_id ? theme.warn : theme.ok, children: runs ? policyLabel(runs, policies) + (m.policy_id ? " (only them)" : " (their group)") : "the project default" })
+    ] }),
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(DataView, { loading: analyticsQ.loading, error: analyticsQ.error, children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs4(Text4, { children: [
+        String(totals.calls ?? 0) + " calls   ",
+        /* @__PURE__ */ jsx4(Text4, { color: (totals.denied ?? 0) > 0 ? theme.bad : theme.dim, children: String(totals.denied ?? 0) + " denied" }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "   " + String(totals.sessions ?? 0) + " sessions" })
+      ] }),
+      denies.length > 0 ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "What was stopped" }),
+        /* @__PURE__ */ jsx4(
+          Table,
+          {
+            columns: [{ header: "reason", width: Math.min(48, cols - 14) }, { header: "times", width: 8 }],
+            rows: denies.slice(0, 6).map((d) => [{ value: d.name, color: theme.bad }, { value: String(d.calls) }])
+          }
+        )
+      ] }) : null,
+      tools.length > 0 ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Most used tools" }),
+        /* @__PURE__ */ jsx4(
+          Table,
+          {
+            columns: [{ header: "tool", width: Math.min(48, cols - 14) }, { header: "calls", width: 8 }],
+            rows: tools.slice(0, 6).map((t) => [{ value: t.name }, { value: String(t.calls) }])
+          }
+        )
+      ] }) : null,
+      agents.length > 0 ? /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Agents: " + agents.slice(0, 5).map((x) => x.name + " (" + x.calls + ")").join("  ") }) }) : null
+    ] }) }) }),
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2190 back" }) })
+  ] });
+}
+function ReportsView({
+  report: report2,
+  loading,
+  error,
+  schedule,
+  next,
+  status,
+  prompt,
+  draft,
+  onChange,
+  onSubmit,
+  cols
+}) {
+  const on = (v) => v ? theme.ok : theme.dim;
+  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx4(DataView, { loading, error, children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(Text4, { bold: true, children: report2?.headline ?? "" }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: report2?.title ?? "" }),
+      report2 && report2.top_denies.length > 0 ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "What was stopped" }),
+        /* @__PURE__ */ jsx4(
+          Table,
+          {
+            columns: [{ header: "reason", width: Math.min(48, cols - 14) }, { header: "times", width: 8 }],
+            rows: report2.top_denies.slice(0, 5).map((d) => [{ value: d.name, color: theme.bad }, { value: String(d.calls) }])
+          }
+        )
+      ] }) : null
+    ] }) }),
+    /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "Scheduled" }),
+      /* @__PURE__ */ jsxs4(Box4, { children: [
+        /* @__PURE__ */ jsx4(Text4, { color: on(schedule?.day), children: "daily  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: on(schedule?.week), children: "weekly  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: on(schedule?.month), children: "monthly  " }),
+        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "day ends " + timeOf(schedule?.endMinute ?? 0) + " UTC" })
+      ] }),
+      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "to " + ((schedule?.emails ?? []).concat(schedule?.telegram ?? []).join(", ") || "nobody yet") }),
+      next > 0 ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "next " + new Date(next * 1e3).toISOString().slice(0, 16).replace("T", " ") + " UTC" }) : null
+    ] }),
+    prompt ? /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, children: [
+      /* @__PURE__ */ jsx4(Text4, { color: theme.accent, children: promptLabel(prompt) + " " }),
+      /* @__PURE__ */ jsx4(TextInput2, { value: draft, onChange, onSubmit })
+    ] }) : null,
+    status ? /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) }) : null,
+    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "d daily \xB7 w weekly \xB7 m monthly \xB7 h day ends \xB7 e email \xB7 t telegram \xB7 s send now \xB7 \u2190 back" }) })
+  ] });
+}
+
+// src/tui/panels/Policies.tsx
+import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
+import TextInput4 from "ink-text-input";
+import { useEffect as useEffect5, useState as useState6 } from "react";
 
 // src/tui/panels/DryRun.tsx
-import { Box as Box3, Text as Text3, useInput as useInput2 } from "ink";
-import TextInput2 from "ink-text-input";
-import { useEffect as useEffect3, useState as useState3 } from "react";
-import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
+import TextInput3 from "ink-text-input";
+import { useEffect as useEffect4, useState as useState5 } from "react";
+import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
 var DEFAULT_LIMIT = 1e3;
 var MAX_LIMIT = 5e3;
 var pendingPolicyId = null;
@@ -2962,15 +3708,15 @@ var pct = (n, d) => d ? (n / d * 100).toFixed(1) + "%" : "0%";
 function DryRunPanel({ focused }) {
   const list5 = useLoader(() => api.policies.list());
   const policies = list5.data?.policies ?? [];
-  const [pi, setPi] = useState3(0);
-  const [limit, setLimit] = useState3(DEFAULT_LIMIT);
-  const [editLogs, setEditLogs] = useState3(null);
+  const [pi, setPi] = useState5(0);
+  const [limit, setLimit] = useState5(DEFAULT_LIMIT);
+  const [editLogs, setEditLogs] = useState5(null);
   const statsQ = useLoader(() => api.stats.get());
   const totalLogs = statsQ.data?.total_calls ?? null;
-  const [res, setRes] = useState3(null);
-  const [running, setRunning] = useState3(false);
-  const [err2, setErr] = useState3(null);
-  const [off, setOff] = useState3(0);
+  const [res, setRes] = useState5(null);
+  const [running, setRunning] = useState5(false);
+  const [err2, setErr] = useState5(null);
+  const [off, setOff] = useState5(0);
   const { cols, rows } = usePanelSize();
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   function run(policyIdx = pi, lim = limit) {
@@ -2982,7 +3728,7 @@ function DryRunPanel({ focused }) {
     setOff(0);
     api.policies.backtest({ rules: p.rules ?? [], mode: p.mode, limit: lim }).then((r) => setRes(r)).catch((e) => setErr(e instanceof Error ? e.message : String(e))).finally(() => setRunning(false));
   }
-  useEffect3(() => {
+  useEffect4(() => {
     if (policies.length === 0 || res || running || err2) return;
     let idx = 0;
     if (pendingPolicyId) {
@@ -2993,7 +3739,7 @@ function DryRunPanel({ focused }) {
     setPi(idx);
     run(idx, limit);
   }, [policies.length]);
-  useInput2((input, key) => {
+  useInput4((input, key) => {
     if (!focused || editLogs !== null) return;
     if (key.upArrow) setOff((n) => Math.max(0, n - 1));
     else if (key.downArrow) setOff((n) => n + 1);
@@ -3015,10 +3761,10 @@ function DryRunPanel({ focused }) {
   }
   const w = Math.max(40, cols);
   const lines = [];
-  const head = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: t }, `h${lines.length}`));
-  const dim2 = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: t }, `d${lines.length}`));
-  const row = (t) => lines.push(/* @__PURE__ */ jsx3(Text3, { wrap: "truncate", children: t }, `r${lines.length}`));
-  const blank = () => lines.push(/* @__PURE__ */ jsx3(Text3, { children: " " }, `b${lines.length}`));
+  const head = (t) => lines.push(/* @__PURE__ */ jsx5(Text5, { bold: true, color: theme.accentBright, children: t }, `h${lines.length}`));
+  const dim2 = (t) => lines.push(/* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: t }, `d${lines.length}`));
+  const row = (t) => lines.push(/* @__PURE__ */ jsx5(Text5, { wrap: "truncate", children: t }, `r${lines.length}`));
+  const blank = () => lines.push(/* @__PURE__ */ jsx5(Text5, { children: " " }, `b${lines.length}`));
   if (res) {
     const s = res.summary;
     const denyAfter = s.would_deny;
@@ -3029,13 +3775,13 @@ function DryRunPanel({ focused }) {
     head("Summary");
     row(`  evaluated ${s.evaluated}    would allow ${s.would_allow}    would deny ${s.would_deny}`);
     lines.push(
-      /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
         "  newly blocked ",
-        /* @__PURE__ */ jsx3(Text3, { color: theme.bad, bold: true, children: String(s.newly_blocked) }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.bad, bold: true, children: String(s.newly_blocked) }),
         "    newly allowed ",
-        /* @__PURE__ */ jsx3(Text3, { color: theme.ok, bold: true, children: String(s.newly_allowed) }),
+        /* @__PURE__ */ jsx5(Text5, { color: theme.ok, bold: true, children: String(s.newly_allowed) }),
         "    unchanged ",
-        /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: String(s.unchanged) })
+        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: String(s.unchanged) })
       ] }, `sum${lines.length}`)
     );
     row(`  deny rate ${before} -> ${after}  (${Number(ppShift) > 0 ? "+" : ""}${ppShift}pp)`);
@@ -3070,12 +3816,12 @@ function DryRunPanel({ focused }) {
         const flip = `${c2.original}->${c2.predicted}`;
         const newlyAllowed = c2.predicted === "ALLOW";
         lines.push(
-          /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
             "  ",
-            /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: truncate(c2.tool, 16).padEnd(17) }),
-            /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: truncate(c2.agent || "-", 14).padEnd(15) }),
-            /* @__PURE__ */ jsx3(Text3, { color: newlyAllowed ? theme.ok : theme.bad, children: flip.padEnd(14) }),
-            /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: truncate(c2.preview.replace(/\s+/g, " "), Math.max(10, w - 50)) })
+            /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: truncate(c2.tool, 16).padEnd(17) }),
+            /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: truncate(c2.agent || "-", 14).padEnd(15) }),
+            /* @__PURE__ */ jsx5(Text5, { color: newlyAllowed ? theme.ok : theme.bad, children: flip.padEnd(14) }),
+            /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: truncate(c2.preview.replace(/\s+/g, " "), Math.max(10, w - 50)) })
           ] }, `c${lines.length}`)
         );
       }
@@ -3088,36 +3834,36 @@ function DryRunPanel({ focused }) {
   const win = lines.slice(start, start + budget);
   const above = start;
   const below = Math.max(0, lines.length - (start + budget));
-  return /* @__PURE__ */ jsx3(DataView, { loading: list5.loading && !list5.data, error: list5.error, children: /* @__PURE__ */ jsxs3(Box3, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx3(Text3, { bold: true, color: theme.accentBright, children: "Policy Dry Run" }),
-    /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  policy  " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: "\u2039 " + truncate(selected?.name ?? "none", 30) + " \u203A" }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: `  ${policies.length ? pi + 1 : 0}/${policies.length}  press p   \xB7   mode ${selected?.mode ?? "-"}` })
+  return /* @__PURE__ */ jsx5(DataView, { loading: list5.loading && !list5.data, error: list5.error, children: /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx5(Text5, { bold: true, color: theme.accentBright, children: "Policy Dry Run" }),
+    /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  policy  " }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: "\u2039 " + truncate(selected?.name ?? "none", 30) + " \u203A" }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  ${policies.length ? pi + 1 : 0}/${policies.length}  press p   \xB7   mode ${selected?.mode ?? "-"}` })
     ] }),
-    editLogs !== null ? /* @__PURE__ */ jsxs3(Box3, { children: [
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  logs    " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "how many recent logs to replay: " }),
-      /* @__PURE__ */ jsx3(TextInput2, { value: editLogs, onChange: setEditLogs, onSubmit: commitLogs }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: `   (max ${Math.min(MAX_LIMIT, totalLogs && totalLogs > 0 ? totalLogs : MAX_LIMIT)})` })
-    ] }) : /* @__PURE__ */ jsxs3(Text3, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "  logs    " }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.accent, children: "\u2039 " + String(limit) + " \u203A" }),
-      /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: `  press n to type a number   max ${Math.min(MAX_LIMIT, totalLogs && totalLogs > 0 ? totalLogs : MAX_LIMIT)}${res?.sampled != null ? `   replayed ${res.sampled}` : ""}` })
+    editLogs !== null ? /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  logs    " }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "how many recent logs to replay: " }),
+      /* @__PURE__ */ jsx5(TextInput3, { value: editLogs, onChange: setEditLogs, onSubmit: commitLogs }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `   (max ${Math.min(MAX_LIMIT, totalLogs && totalLogs > 0 ? totalLogs : MAX_LIMIT)})` })
+    ] }) : /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "  logs    " }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.accent, children: "\u2039 " + String(limit) + " \u203A" }),
+      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  press n to type a number   max ${Math.min(MAX_LIMIT, totalLogs && totalLogs > 0 ? totalLogs : MAX_LIMIT)}${res?.sampled != null ? `   replayed ${res.sampled}` : ""}` })
     ] }),
-    /* @__PURE__ */ jsx3(Text3, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 scroll \xB7 p policy \xB7 n logs \xB7 r re-run${above ? ` \xB7 \u25B2${above}` : ""}${below ? ` \xB7 \u25BC${below}` : ""}` : "press \u2192 to open" }),
-    running ? /* @__PURE__ */ jsx3(Text3, { color: theme.warn, children: "replaying recent traffic\u2026" }) : null,
-    err2 ? /* @__PURE__ */ jsx3(Text3, { color: theme.bad, wrap: "truncate", children: "\u2717 " + err2 }) : null,
-    !running && !err2 && !res ? /* @__PURE__ */ jsx3(Text3, { color: theme.dim, children: "no result yet, press r to run" }) : null,
-    /* @__PURE__ */ jsx3(Box3, { marginTop: 1, flexDirection: "column", children: win })
+    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 scroll \xB7 p policy \xB7 n logs \xB7 r re-run${above ? ` \xB7 \u25B2${above}` : ""}${below ? ` \xB7 \u25BC${below}` : ""}` : "press \u2192 to open" }),
+    running ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "replaying recent traffic\u2026" }) : null,
+    err2 ? /* @__PURE__ */ jsx5(Text5, { color: theme.bad, wrap: "truncate", children: "\u2717 " + err2 }) : null,
+    !running && !err2 && !res ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "no result yet, press r to run" }) : null,
+    /* @__PURE__ */ jsx5(Box5, { marginTop: 1, flexDirection: "column", children: win })
   ] }) });
 }
 
 // src/tui/nav.ts
 var pending = null;
 var subs = /* @__PURE__ */ new Set();
-function requestSection(label) {
-  pending = label;
+function requestSection(label2) {
+  pending = label2;
   for (const fn of subs) fn();
 }
 function takePendingSection() {
@@ -3133,7 +3879,7 @@ function onSectionRequest(fn) {
 }
 
 // src/tui/panels/Policies.tsx
-import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+import { Fragment as Fragment4, jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
 var CTYPES = ["none", "command", "path", "filename", "url"];
 var CTYPE_GROUP = {
   command: "commandConstraints",
@@ -3237,23 +3983,23 @@ function PoliciesPanel({ focused }) {
   const activeId = activeQ.data?.policy?.id ?? null;
   const activeBy = activeQ.data?.matched_by;
   const { rows: panelRows } = usePanelSize();
-  const [view, setView] = useState4("list");
-  const [pi, setPi] = useState4(0);
-  const [ri, setRi] = useState4(0);
-  const [fi, setFi] = useState4(0);
-  const [rules, setRules] = useState4([]);
-  const [mode, setMode] = useState4("denylist");
-  const [dirty, setDirty] = useState4(false);
-  const [editing, setEditing] = useState4(false);
-  const [editVal, setEditVal] = useState4("");
-  const [status, setStatus] = useState4(null);
-  const [pendingDel, setPendingDel] = useState4(null);
-  const [permCursor, setPermCursor] = useState4(0);
-  const [matchSel, setMatchSel] = useState4(0);
-  const [busyCreate, setBusyCreate] = useState4(false);
+  const [view, setView] = useState6("list");
+  const [pi, setPi] = useState6(0);
+  const [ri, setRi] = useState6(0);
+  const [fi, setFi] = useState6(0);
+  const [rules, setRules] = useState6([]);
+  const [mode, setMode] = useState6("denylist");
+  const [dirty, setDirty] = useState6(false);
+  const [editing, setEditing] = useState6(false);
+  const [editVal, setEditVal] = useState6("");
+  const [status, setStatus] = useState6(null);
+  const [pendingDel, setPendingDel] = useState6(null);
+  const [permCursor, setPermCursor] = useState6(0);
+  const [matchSel, setMatchSel] = useState6(0);
+  const [busyCreate, setBusyCreate] = useState6(false);
   const selected = policies[Math.min(pi, Math.max(0, policies.length - 1))];
   const detail = useLoader(() => selected ? api.policies.get(selected.id) : Promise.resolve(null), [selected?.id]);
-  useEffect4(() => {
+  useEffect5(() => {
     if (detail.data) {
       setRules(detail.data.rules);
       setMode(detail.data.mode ?? "denylist");
@@ -3304,7 +4050,7 @@ function PoliciesPanel({ focused }) {
     setDirty(false);
     setStatus("discarded");
   };
-  const [creating, setCreating] = useState4(null);
+  const [creating, setCreating] = useState6(null);
   function commitNewPolicy(name) {
     const n = name.trim();
     setCreating(null);
@@ -3319,10 +4065,10 @@ function PoliciesPanel({ focused }) {
       setStatus("\u2717 " + (e instanceof Error ? e.message : String(e)));
     });
   }
-  useEffect4(() => {
+  useEffect5(() => {
     if (busyCreate && policies.length > 0) setBusyCreate(false);
   }, [busyCreate, policies.length]);
-  useInput3(
+  useInput5(
     (input, key) => {
       if (creating !== null) return;
       if (key.ctrl && input === "r" && !editing) {
@@ -3493,39 +4239,39 @@ function PoliciesPanel({ focused }) {
     const lWin = policies.slice(lStart, lStart + lBudget);
     const lAbove = lStart;
     const lBelow = Math.max(0, policies.length - (lStart + lBudget));
-    return /* @__PURE__ */ jsx4(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0 && creating === null && !busyCreate, emptyText: "No policies yet \u2014 press n to create one.", children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "active: " }),
-        activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs4(Fragment3, { children: [
-          /* @__PURE__ */ jsxs4(Text4, { color: theme.ok, bold: true, children: [
+    return /* @__PURE__ */ jsx6(DataView, { loading: list5.loading && !list5.data, error: list5.error, empty: !!list5.data && policies.length === 0 && creating === null && !busyCreate, emptyText: "No policies yet \u2014 press n to create one.", children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "active: " }),
+        activeQ.loading && !activeQ.data ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2026" }) : activeName ? /* @__PURE__ */ jsxs6(Fragment4, { children: [
+          /* @__PURE__ */ jsxs6(Text6, { color: theme.ok, bold: true, children: [
             "\u25CF ",
             truncate(activeName, 28)
           ] }),
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: activeBy ? ` (${activeBy})` : "" })
-        ] }) : /* @__PURE__ */ jsx4(Text4, { color: theme.bad, bold: true, children: "\u25CB NONE \u2014 nothing enforced, grants refused" })
+          /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: activeBy ? ` (${activeBy})` : "" })
+        ] }) : /* @__PURE__ */ jsx6(Text6, { color: theme.bad, bold: true, children: "\u25CB NONE \u2014 nothing enforced, grants refused" })
       ] }),
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 select \xB7 enter open \xB7 n new \xB7 a activate \xB7 x deactivate \xB7 d delete \xB7 ^R refresh${lAbove ? ` \xB7 \u25B2${lAbove}` : ""}${lBelow ? ` \xB7 \u25BC${lBelow}` : ""}` : "press \u2192 to browse" }),
-      creating !== null ? /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "new policy name: " }),
-        /* @__PURE__ */ jsx4(TextInput3, { value: creating, onChange: setCreating, onSubmit: commitNewPolicy })
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 select \xB7 enter open \xB7 n new \xB7 a activate \xB7 x deactivate \xB7 d delete \xB7 ^R refresh${lAbove ? ` \xB7 \u25B2${lAbove}` : ""}${lBelow ? ` \xB7 \u25BC${lBelow}` : ""}` : "press \u2192 to browse" }),
+      creating !== null ? /* @__PURE__ */ jsxs6(Box6, { children: [
+        /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "new policy name: " }),
+        /* @__PURE__ */ jsx6(TextInput4, { value: creating, onChange: setCreating, onSubmit: commitNewPolicy })
       ] }) : null,
-      /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: lWin.map((p, wi) => {
+      /* @__PURE__ */ jsx6(Box6, { marginTop: 1, flexDirection: "column", children: lWin.map((p, wi) => {
         const i = lStart + wi;
-        return /* @__PURE__ */ jsxs4(Text4, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
+        return /* @__PURE__ */ jsxs6(Text6, { color: i === pi ? theme.accentBright : void 0, bold: i === pi, children: [
           (i === pi ? "\u25B8 " : "  ") + truncate(p.name, 26).padEnd(27),
-          /* @__PURE__ */ jsxs4(Text4, { color: theme.dim, children: [
+          /* @__PURE__ */ jsxs6(Text6, { color: theme.dim, children: [
             p.mode.padEnd(10),
             " ",
             p.rules.length,
             " rules"
           ] }),
-          p.id === activeId ? /* @__PURE__ */ jsx4(Text4, { color: theme.ok, bold: true, children: "  \u25CF ACTIVE" }) : null
+          p.id === activeId ? /* @__PURE__ */ jsx6(Text6, { color: theme.ok, bold: true, children: "  \u25CF ACTIVE" }) : null
         ] }, p.id);
       }) }),
-      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+      status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
-  const dirtyTag = dirty ? /* @__PURE__ */ jsx4(Text4, { color: theme.warn, children: "  \u25CF unsaved (s save \xB7 x discard)" }) : null;
+  const dirtyTag = dirty ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "  \u25CF unsaved (s save \xB7 x discard)" }) : null;
   if (view === "rules") {
     const rStatusLines = status ? status.split("\n").length : 0;
     const rHead = 4 + rStatusLines;
@@ -3535,16 +4281,16 @@ function PoliciesPanel({ focused }) {
     const rWin = rules.slice(rStart, rStart + rBudget);
     const rAbove = rStart;
     const rBelow = Math.max(0, rules.length - (rStart + rBudget));
-    return /* @__PURE__ */ jsx4(DataView, { loading: detail.loading && !detail.data, error: detail.error, children: /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  mode: " }),
-        /* @__PURE__ */ jsx4(Text4, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: `  ${rules.length} rules` }),
+    return /* @__PURE__ */ jsx6(DataView, { loading: detail.loading && !detail.data, error: detail.error, children: /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { children: [
+        /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accentBright, children: truncate(selected?.name ?? "", 28) }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  mode: " }),
+        /* @__PURE__ */ jsx6(Text6, { color: mode === "whitelist" ? theme.warn : void 0, children: mode }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: `  ${rules.length} rules` }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, wrap: "truncate", children: `\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 s save \xB7 \u2190 back${rAbove ? ` \xB7 \u25B2${rAbove}` : ""}${rBelow ? ` \xB7 \u25BC${rBelow}` : ""}` }),
-      /* @__PURE__ */ jsx4(Box4, { marginTop: 1, children: /* @__PURE__ */ jsx4(
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: `\u2191\u2193 \xB7 enter edit \xB7 space on/off \xB7 e effect \xB7 n new \xB7 d del \xB7 m mode \xB7 D dry-run \xB7 s save \xB7 \u2190 back${rAbove ? ` \xB7 \u25B2${rAbove}` : ""}${rBelow ? ` \xB7 \u25BC${rBelow}` : ""}` }),
+      /* @__PURE__ */ jsx6(Box6, { marginTop: 1, children: /* @__PURE__ */ jsx6(
         Table,
         {
           columns: [
@@ -3568,33 +4314,33 @@ function PoliciesPanel({ focused }) {
           })
         }
       ) }),
-      rules.length === 0 ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "(no rules)" }) : null,
-      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+      rules.length === 0 ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "(no rules)" }) : null,
+      status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] }) });
   }
   if (view === "match") {
     const r = rules[ri];
     const items = r ? matchItems(r) : [];
     const t = r ? currentCType(r) : "none";
-    return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs4(Box4, { children: [
-        /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: "Match values " }),
-        /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: r ? `${r.effect} \xB7 ${t}` : "" }),
+    return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs6(Box6, { children: [
+        /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accentBright, children: "Match values " }),
+        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: r ? `${r.effect} \xB7 ${t}` : "" }),
         dirtyTag
       ] }),
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 select \xB7 enter/e edit \xB7 a add \xB7 [ / ] wildcard L/R \xB7 d remove \xB7 s save \xB7 \u2190 back" }),
-      /* @__PURE__ */ jsxs4(Box4, { marginTop: 1, flexDirection: "column", children: [
-        items.length === 0 ? /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "(no values \u2014 press a to add one)" }) : null,
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2191\u2193 select \xB7 enter/e edit \xB7 a add \xB7 [ / ] wildcard L/R \xB7 d remove \xB7 s save \xB7 \u2190 back" }),
+      /* @__PURE__ */ jsxs6(Box6, { marginTop: 1, flexDirection: "column", children: [
+        items.length === 0 ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "(no values \u2014 press a to add one)" }) : null,
         items.map((it, i) => {
           const sel = i === matchSel;
           if (sel && editing) {
             const lE = editVal.startsWith("*");
             const rE = editVal.length > 0 && editVal.endsWith("*");
-            return /* @__PURE__ */ jsxs4(Box4, { children: [
-              /* @__PURE__ */ jsx4(Text4, { color: theme.accentBright, children: "\u25B8 " }),
-              /* @__PURE__ */ jsx4(Text4, { color: lE ? theme.ok : theme.dim, children: lE ? "\u2731 " : "\xB7 " }),
-              /* @__PURE__ */ jsx4(
-                TextInput3,
+            return /* @__PURE__ */ jsxs6(Box6, { children: [
+              /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, children: "\u25B8 " }),
+              /* @__PURE__ */ jsx6(Text6, { color: lE ? theme.ok : theme.dim, children: lE ? "\u2731 " : "\xB7 " }),
+              /* @__PURE__ */ jsx6(
+                TextInput4,
                 {
                   value: editVal,
                   onChange: setEditVal,
@@ -3608,41 +4354,41 @@ function PoliciesPanel({ focused }) {
                   }
                 }
               ),
-              /* @__PURE__ */ jsx4(Text4, { color: rE ? theme.ok : theme.dim, children: rE ? " \u2731" : " \xB7" })
+              /* @__PURE__ */ jsx6(Text6, { color: rE ? theme.ok : theme.dim, children: rE ? " \u2731" : " \xB7" })
             ] }, i);
           }
           const lOn = it.startsWith("*");
           const rOn = it.length > 0 && it.endsWith("*");
-          return /* @__PURE__ */ jsxs4(Box4, { children: [
-            /* @__PURE__ */ jsx4(Text4, { color: sel ? theme.accentBright : void 0, children: sel ? "\u25B8 " : "  " }),
-            /* @__PURE__ */ jsx4(Text4, { color: lOn ? theme.ok : theme.dim, children: lOn ? "\u2731 " : "\xB7 " }),
-            /* @__PURE__ */ jsx4(Text4, { dimColor: !it, children: it || "(empty)" }),
-            /* @__PURE__ */ jsx4(Text4, { color: rOn ? theme.ok : theme.dim, children: rOn ? " \u2731" : " \xB7" })
+          return /* @__PURE__ */ jsxs6(Box6, { children: [
+            /* @__PURE__ */ jsx6(Text6, { color: sel ? theme.accentBright : void 0, children: sel ? "\u25B8 " : "  " }),
+            /* @__PURE__ */ jsx6(Text6, { color: lOn ? theme.ok : theme.dim, children: lOn ? "\u2731 " : "\xB7 " }),
+            /* @__PURE__ */ jsx6(Text6, { dimColor: !it, children: it || "(empty)" }),
+            /* @__PURE__ */ jsx6(Text6, { color: rOn ? theme.ok : theme.dim, children: rOn ? " \u2731" : " \xB7" })
           ] }, i);
         })
       ] }),
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "  * = wildcard (any run of chars). Type it directly (rm*) or toggle with [ / ]. Green \u2731 = active \xB7 left & right shown as you type. Multiple values = OR (any one matches)." }),
-      status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  * = wildcard (any run of chars). Type it directly (rm*) or toggle with [ / ]. Green \u2731 = active \xB7 left & right shown as you type. Multiple values = OR (any one matches)." }),
+      status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
     ] });
   }
   const rule = rules[ri];
-  return /* @__PURE__ */ jsxs4(Box4, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Text4, { bold: true, color: theme.accentBright, children: "Rule " }),
-      /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: rule?.id ?? "" }),
+  return /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs6(Box6, { children: [
+      /* @__PURE__ */ jsx6(Text6, { bold: true, color: theme.accentBright, children: "Rule " }),
+      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: rule?.id ?? "" }),
       dirtyTag
     ] }),
-    /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit/open \xB7 space toggle \xB7 \u2190\u2192 move/pick \xB7 s save \xB7 \u2190 back" }),
-    /* @__PURE__ */ jsx4(Box4, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
+    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "\u2191\u2193 field \xB7 enter edit/open \xB7 space toggle \xB7 \u2190\u2192 move/pick \xB7 s save \xB7 \u2190 back" }),
+    /* @__PURE__ */ jsx6(Box6, { marginTop: 1, flexDirection: "column", children: FIELDS.map((f, i) => {
       const active2 = i === fi;
-      const label = /* @__PURE__ */ jsx4(Text4, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) });
+      const label2 = /* @__PURE__ */ jsx6(Text6, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + f.label.padEnd(13) });
       if (f.kind === "perms" && rule) {
-        return /* @__PURE__ */ jsxs4(Box4, { children: [
-          label,
+        return /* @__PURE__ */ jsxs6(Box6, { children: [
+          label2,
           PERMS.map((p, pi2) => {
             const on = permList(rule).includes(p);
             const cur = active2 && pi2 === permCursor % PERMS.length;
-            return /* @__PURE__ */ jsxs4(Text4, { color: on ? theme.ok : theme.bad, inverse: cur, children: [
+            return /* @__PURE__ */ jsxs6(Text6, { color: on ? theme.ok : theme.bad, inverse: cur, children: [
               p,
               pi2 < PERMS.length - 1 ? "  " : ""
             ] }, p);
@@ -3652,17 +4398,17 @@ function PoliciesPanel({ focused }) {
       if (f.kind === "match" && rule) {
         const items = matchItems(rule);
         const preview = items.join(", ");
-        return /* @__PURE__ */ jsxs4(Box4, { children: [
-          label,
-          /* @__PURE__ */ jsx4(Text4, { dimColor: !preview, children: preview || "\u2014" }),
-          /* @__PURE__ */ jsx4(Text4, { color: theme.dim, children: items.length ? `   (${items.length} value${items.length > 1 ? "s" : ""} \xB7 enter: edit)` : "   (enter: add values)" })
+        return /* @__PURE__ */ jsxs6(Box6, { children: [
+          label2,
+          /* @__PURE__ */ jsx6(Text6, { dimColor: !preview, children: preview || "\u2014" }),
+          /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: items.length ? `   (${items.length} value${items.length > 1 ? "s" : ""} \xB7 enter: edit)` : "   (enter: add values)" })
         ] }, f.label);
       }
       const val = rule ? f.get(rule) : "";
-      return /* @__PURE__ */ jsxs4(Box4, { children: [
-        label,
-        active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx4(
-          TextInput3,
+      return /* @__PURE__ */ jsxs6(Box6, { children: [
+        label2,
+        active2 && editing && f.kind === "text" ? /* @__PURE__ */ jsx6(
+          TextInput4,
           {
             value: editVal,
             onChange: setEditVal,
@@ -3671,8 +4417,8 @@ function PoliciesPanel({ focused }) {
               setEditing(false);
             }
           }
-        ) : /* @__PURE__ */ jsx4(
-          Text4,
+        ) : /* @__PURE__ */ jsx6(
+          Text6,
           {
             color: f.kind === "effect" ? val === "ALLOW" ? theme.ok : theme.bad : void 0,
             dimColor: !val,
@@ -3681,14 +4427,14 @@ function PoliciesPanel({ focused }) {
         )
       ] }, f.label);
     }) }),
-    status ? /* @__PURE__ */ jsx4(Text4, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
+    status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: status }) : null
   ] });
 }
 
 // src/tui/panels/RateLimit.tsx
-import { Box as Box5, Text as Text5, useInput as useInput4 } from "ink";
-import { useEffect as useEffect5, useState as useState5 } from "react";
-import { Fragment as Fragment4, jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
+import { useEffect as useEffect6, useState as useState7 } from "react";
+import { Fragment as Fragment5, jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var MODES = ["off", "detect", "block"];
 var FIELDS2 = ["mode", "perMinute", "perHour", "perDay"];
 var when = (ms) => {
@@ -3700,11 +4446,11 @@ function RateLimitPanel({ focused }) {
   const layersQ = useLoader(() => api.settings.getSecurityLayers());
   const historyQ = useLoader(() => api.settings.getRateLimitHistory());
   const insightsQ = useLoader(() => api.stats.securityInsights(7));
-  const [draft, setDraft] = useState5(null);
-  const [dirty, setDirty] = useState5(false);
-  const [sel, setSel] = useState5(0);
-  const [status, setStatus] = useState5(null);
-  useEffect5(() => {
+  const [draft, setDraft] = useState7(null);
+  const [dirty, setDirty] = useState7(false);
+  const [sel, setSel] = useState7(0);
+  const [status, setStatus] = useState7(null);
+  useEffect6(() => {
     if (layersQ.data && !dirty) setDraft({ ...layersQ.data.layers.rateLimit });
   }, [layersQ.data]);
   usePoll(() => {
@@ -3753,7 +4499,7 @@ function RateLimitPanel({ focused }) {
   const fi = onField ? selC : -1;
   const bcur = onField ? -1 : selC - 4;
   const off = bcur < 0 ? 0 : Math.min(Math.max(0, bcur - Math.floor(burstBudget / 2)), maxOff);
-  useInput4(
+  useInput6(
     (input, key) => {
       const step = key.shift ? 10 : 1;
       if (key.upArrow) setSel((n) => Math.max(0, n - 1));
@@ -3772,52 +4518,52 @@ function RateLimitPanel({ focused }) {
     },
     { isActive: focused }
   );
-  return /* @__PURE__ */ jsx5(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
+  return /* @__PURE__ */ jsx7(DataView, { loading: layersQ.loading && !draft, error: layersQ.error, children: draft ? (() => {
     const lim = draft.perMinute;
     const now = insightsQ.data ? insightsQ.data["activity"]?.minute?.slice(-1)[0]?.count ?? 0 : 0;
     const loadPct = lim > 0 ? Math.min(100, Math.round(now / lim * 100)) : 0;
     const last24h = (insightsQ.data?.["activity"]?.hour ?? []).reduce((s, b) => s + b.count, 0);
     const shown = anomalies2.slice(off, off + burstBudget);
     const bw = Math.max(10, cols - 30);
-    return /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", height: rows, overflow: "hidden", children: [
-      /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 move (fields + bursts) \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save \xB7 ^R refresh" : "press \u2192 to edit" }),
-      /* @__PURE__ */ jsxs5(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
-        /* @__PURE__ */ jsx5(Text5, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
-        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
+    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", height: rows, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 move (fields + bursts) \xB7 \u2190\u2192 \xB11 \xB7 shift+\u2190\u2192 \xB110 \xB7 s save \xB7 ^R refresh" : "press \u2192 to edit" }),
+      /* @__PURE__ */ jsxs7(FieldRow, { label: "Mode", active: focused && fi === 0, children: [
+        /* @__PURE__ */ jsx7(Text7, { color: modeColor(draft.mode), bold: true, children: draft.mode }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: draft.mode === "off" ? "  no limit" : draft.mode === "detect" ? "  flag bursts, never block" : "  DENY calls over the limit" })
       ] }),
-      /* @__PURE__ */ jsx5(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perMinute || "off" }) }),
-      /* @__PURE__ */ jsx5(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perHour || "off" }) }),
-      /* @__PURE__ */ jsx5(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx5(Text5, { bold: true, children: draft.perDay || "off" }) }),
-      showExtras && /* @__PURE__ */ jsxs5(Fragment4, { children: [
-        hasLoad ? /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "load now".padEnd(13) }),
-          /* @__PURE__ */ jsx5(Text5, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(18, Math.round(now / lim * 18))) }),
-          /* @__PURE__ */ jsx5(Text5, { color: "#233457", children: "\u2591".repeat(Math.max(0, 18 - Math.round(now / lim * 18))) }),
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
+      /* @__PURE__ */ jsx7(FieldRow, { label: "Per minute", active: focused && fi === 1, children: /* @__PURE__ */ jsx7(Text7, { bold: true, children: draft.perMinute || "off" }) }),
+      /* @__PURE__ */ jsx7(FieldRow, { label: "Per hour", active: focused && fi === 2, children: /* @__PURE__ */ jsx7(Text7, { bold: true, children: draft.perHour || "off" }) }),
+      /* @__PURE__ */ jsx7(FieldRow, { label: "Per day", active: focused && fi === 3, children: /* @__PURE__ */ jsx7(Text7, { bold: true, children: draft.perDay || "off" }) }),
+      showExtras && /* @__PURE__ */ jsxs7(Fragment5, { children: [
+        hasLoad ? /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "load now".padEnd(13) }),
+          /* @__PURE__ */ jsx7(Text7, { color: loadPct >= 100 ? theme.bad : loadPct >= 80 ? theme.warn : theme.ok, children: "\u2588".repeat(Math.min(18, Math.round(now / lim * 18))) }),
+          /* @__PURE__ */ jsx7(Text7, { color: "#233457", children: "\u2591".repeat(Math.max(0, 18 - Math.round(now / lim * 18))) }),
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  ${now}/${lim} this minute (${loadPct}%)` })
         ] }) : null,
-        /* @__PURE__ */ jsxs5(Text5, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+        /* @__PURE__ */ jsxs7(Text7, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
           "Busiest 7d",
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   most calls in one window vs your limit" })
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   most calls in one window vs your limit" })
         ] }),
-        /* @__PURE__ */ jsx5(BusiestRow, { label: "minute", peak: peaks.minute, limit: draft.perMinute }),
-        /* @__PURE__ */ jsx5(BusiestRow, { label: "hour", peak: peaks.hour, limit: draft.perHour }),
-        /* @__PURE__ */ jsx5(BusiestRow, { label: "day", peak: peaks.day, limit: draft.perDay }),
-        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, wrap: "truncate", children: `activity`.padEnd(11) + `   last 24h \xB7 ${last24h} calls \xB7 busiest hour ${peaks.hour}/hr` })
+        /* @__PURE__ */ jsx7(BusiestRow, { label: "minute", peak: peaks.minute, limit: draft.perMinute }),
+        /* @__PURE__ */ jsx7(BusiestRow, { label: "hour", peak: peaks.hour, limit: draft.perHour }),
+        /* @__PURE__ */ jsx7(BusiestRow, { label: "day", peak: peaks.day, limit: draft.perDay }),
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `activity`.padEnd(11) + `   last 24h \xB7 ${last24h} calls \xB7 busiest hour ${peaks.hour}/hr` })
       ] }),
-      /* @__PURE__ */ jsxs5(Box5, { flexDirection: "column", children: [
-        /* @__PURE__ */ jsxs5(Text5, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
+      /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+        /* @__PURE__ */ jsxs7(Text7, { color: theme.accentBright, bold: true, wrap: "truncate", children: [
           `Recent bursts 7d${anomalies2.length ? ` (${anomalies2.length})` : ""}`,
-          maxOff > 0 ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: `  ${off + 1}-${Math.min(off + burstBudget, anomalies2.length)}/${anomalies2.length}` }) : null,
-          /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
+          maxOff > 0 ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: `  ${off + 1}-${Math.min(off + burstBudget, anomalies2.length)}/${anomalies2.length}` }) : null,
+          /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "   over the per-minute limit \xB7 Bypassed = detect (not blocked)" })
         ] }),
-        anomalies2.length === 0 ? /* @__PURE__ */ jsxs5(Text5, { color: theme.dim, children: [
+        anomalies2.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
           "  ",
           insightsQ.loading ? "loading\u2026" : insightsQ.error ? `couldn't load bursts: ${String(insightsQ.error).slice(0, 60)}` : "no bursts in the last 7 days"
         ] }) : (
           // Bounded here as well as on the outer frame, so a list longer than
           // the budget is clipped inside its own box instead of shoving the
           // footer out of the panel and taking the scroll window with it.
-          /* @__PURE__ */ jsx5(Box5, { flexDirection: "column", height: burstBudget + 1, overflow: "hidden", children: /* @__PURE__ */ jsx5(
+          /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: burstBudget + 1, overflow: "hidden", children: /* @__PURE__ */ jsx7(
             Table,
             {
               columns: [{ header: "WHEN", width: 15 }, { header: "RESULT", width: 9 }, { header: "CALLS", width: 7 }, { header: "AGENT", width: Math.max(8, bw - 31) }],
@@ -3834,54 +4580,54 @@ function RateLimitPanel({ focused }) {
           ) })
         )
       ] }),
-      spacerRows ? /* @__PURE__ */ jsx5(Text5, { children: " " }) : null,
-      /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: "limit now  " }),
-        /* @__PURE__ */ jsx5(Text5, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
-        lastChange ? /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
-        dirty ? /* @__PURE__ */ jsx5(Text5, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
-        status ? /* @__PURE__ */ jsx5(Text5, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
+      spacerRows ? /* @__PURE__ */ jsx7(Text7, { children: " " }) : null,
+      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "limit now  " }),
+        /* @__PURE__ */ jsx7(Text7, { children: lim > 0 ? `${lim}/min` : "no per-minute limit" }),
+        lastChange ? /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: `  \xB7 changed ${when(lastChange.ts)}` }) : null,
+        dirty ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "   \u25CF unsaved (s)" }) : null,
+        status ? /* @__PURE__ */ jsx7(Text7, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, children: "   " + status }) : null
       ] })
     ] });
   })() : null });
 }
-function BusiestRow({ label, peak, limit }) {
+function BusiestRow({ label: label2, peak, limit }) {
   const ctx = limit > 0 ? peak > limit ? `over ${limit}` : peak === limit ? `at limit ${limit}` : `limit ${limit}` : "no limit set";
   const hot = limit > 0 && peak > limit;
-  return /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx5(Text5, { color: theme.dim, children: ("  " + label).padEnd(11) }),
-    /* @__PURE__ */ jsx5(Text5, { color: hot ? theme.bad : void 0, bold: hot, children: String(peak).padStart(4) + " calls" }),
-    /* @__PURE__ */ jsx5(Text5, { color: hot ? theme.bad : theme.dim, children: "  \xB7 " + ctx })
+  return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: ("  " + label2).padEnd(11) }),
+    /* @__PURE__ */ jsx7(Text7, { color: hot ? theme.bad : void 0, bold: hot, children: String(peak).padStart(4) + " calls" }),
+    /* @__PURE__ */ jsx7(Text7, { color: hot ? theme.bad : theme.dim, children: "  \xB7 " + ctx })
   ] });
 }
-function FieldRow({ label, active: active2, children }) {
-  return /* @__PURE__ */ jsxs5(Text5, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx5(Text5, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label.padEnd(11) }),
+function FieldRow({ label: label2, active: active2, children }) {
+  return /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx7(Text7, { color: active2 ? theme.accentBright : void 0, children: (active2 ? "\u25B8 " : "  ") + label2.padEnd(11) }),
     children
   ] });
 }
 
 // src/tui/panels/Dlp.tsx
-import { Box as Box6, Text as Text6, useInput as useInput5 } from "ink";
-import TextInput4 from "ink-text-input";
-import { useEffect as useEffect6, useState as useState6 } from "react";
-import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
+import TextInput5 from "ink-text-input";
+import { useEffect as useEffect7, useState as useState8 } from "react";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
 var MODES2 = ["off", "detect", "block"];
 function DlpPanel({ focused }) {
   const { cols, rows } = usePanelSize();
   const q = useLoader(() => api.settings.getSecurityLayers());
-  const [dlp, setDlp] = useState6(null);
-  const [available, setAvailable] = useState6([]);
-  const [ghostOn, setGhostOn] = useState6(false);
-  const [ghostPats, setGhostPats] = useState6([]);
-  const [sel, setSel] = useState6(0);
-  const [dirty, setDirty] = useState6(false);
-  const [status, setStatus] = useState6(null);
-  const [adding, setAdding] = useState6(null);
-  const [newName, setNewName] = useState6("");
-  const [input, setInput] = useState6("");
-  const [editIdx, setEditIdx] = useState6(null);
-  useEffect6(() => {
+  const [dlp, setDlp] = useState8(null);
+  const [available, setAvailable] = useState8([]);
+  const [ghostOn, setGhostOn] = useState8(false);
+  const [ghostPats, setGhostPats] = useState8([]);
+  const [sel, setSel] = useState8(0);
+  const [dirty, setDirty] = useState8(false);
+  const [status, setStatus] = useState8(null);
+  const [adding, setAdding] = useState8(null);
+  const [newName, setNewName] = useState8("");
+  const [input, setInput] = useState8("");
+  const [editIdx, setEditIdx] = useState8(null);
+  useEffect7(() => {
     if (q.data && !dirty) {
       setDlp({ ...q.data.layers.dlp, patterns: [...q.data.layers.dlp.patterns], custom: [...q.data.layers.dlp.custom] });
       setAvailable(q.data.availablePatterns);
@@ -3928,7 +4674,7 @@ function DlpPanel({ focused }) {
   ];
   const selC = Math.min(sel, Math.max(0, entries.length - 1));
   const cur = entries[selC];
-  useInput5(
+  useInput7(
     (input2, key) => {
       if (!dlp) return;
       if (key.ctrl && input2 === "r") {
@@ -3991,17 +4737,17 @@ function DlpPanel({ focused }) {
     if (right) core = core.replace(/\*+$/, "");
     return { left, core: core || s, right };
   };
-  const starL = (on) => /* @__PURE__ */ jsx6(Text6, { color: on ? theme.ok : theme.dim, children: on ? "\u2731 " : "\xB7 " });
-  const starR = (on) => /* @__PURE__ */ jsx6(Text6, { color: on ? theme.ok : theme.dim, children: on ? " \u2731" : " \xB7" });
+  const starL = (on) => /* @__PURE__ */ jsx8(Text8, { color: on ? theme.ok : theme.dim, children: on ? "\u2731 " : "\xB7 " });
+  const starR = (on) => /* @__PURE__ */ jsx8(Text8, { color: on ? theme.ok : theme.dim, children: on ? " \u2731" : " \xB7" });
   const lines = [];
-  const header = (key, label, extra) => lines.push({
-    node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx6(Text6, { color: theme.accentBright, bold: true, children: label }),
-      extra ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " + extra }) : null
+  const header = (key, label2, extra) => lines.push({
+    node: /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, children: label2 }),
+      extra ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  " + extra }) : null
     ] }, key),
     entry: -1
   });
-  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
+  const note = (key, text) => lines.push({ node: /* @__PURE__ */ jsx8(Text8, { color: theme.dim, wrap: "truncate", children: text }, key), entry: -1 });
   let ei = 0;
   header("h:builtin", "built-in secret patterns", "space toggles on/off");
   available.forEach((p) => {
@@ -4009,10 +4755,10 @@ function DlpPanel({ focused }) {
     const isCur = focused && ei === selC;
     const idx = ei++;
     lines.push({
-      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx6(Text6, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
-        /* @__PURE__ */ jsx6(Text6, { color: on ? void 0 : theme.dim, children: p })
+      node: /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx8(Text8, { color: on ? theme.ok : theme.dim, children: on ? "\u25CF " : "\u25CB " }),
+        /* @__PURE__ */ jsx8(Text8, { color: on ? void 0 : theme.dim, children: p })
       ] }, "b:" + p),
       entry: idx
     });
@@ -4025,12 +4771,12 @@ function DlpPanel({ focused }) {
     const idx = ei++;
     const w = wcParts(c2.re);
     lines.push({
-      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.accent, children: c2.name }),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  " }),
+      node: /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: c2.name }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  " }),
         starL(w.left),
-        /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: truncate(w.core, Math.max(6, cols - c2.name.length - 14)) }),
+        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: truncate(w.core, Math.max(6, cols - c2.name.length - 14)) }),
         starR(w.right)
       ] }, "c:" + c2.name + i),
       entry: idx
@@ -4044,12 +4790,12 @@ function DlpPanel({ focused }) {
     const idx = ei++;
     const w = wcParts(p);
     lines.push({
-      node: /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
-        /* @__PURE__ */ jsx6(Text6, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
+      node: /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", backgroundColor: isCur ? "#1c2f63" : void 0, bold: isCur, children: [
+        /* @__PURE__ */ jsx8(Text8, { color: isCur ? theme.accentBright : theme.dim, children: isCur ? "\u25B8 " : "  " }),
         starL(w.left),
-        /* @__PURE__ */ jsx6(Text6, { color: ghostOn ? theme.accent : theme.dim, children: truncate(w.core, Math.max(6, cols - 12)) }),
+        /* @__PURE__ */ jsx8(Text8, { color: ghostOn ? theme.accent : theme.dim, children: truncate(w.core, Math.max(6, cols - 12)) }),
         starR(w.right),
-        !ghostOn ? /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: "  (ghost off)" }) : null
+        !ghostOn ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  (ghost off)" }) : null
       ] }, "g:" + p + i),
       entry: idx
     });
@@ -4063,19 +4809,19 @@ function DlpPanel({ focused }) {
   const win = lines.slice(start, start + budget);
   const moreAbove = start;
   const moreBelow = Math.max(0, lines.length - (start + budget));
-  return /* @__PURE__ */ jsx6(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs6(Box6, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsxs6(Text6, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx6(Text6, { children: "mode: " }),
-      /* @__PURE__ */ jsx6(Text6, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
-      /* @__PURE__ */ jsx6(Text6, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
-      dirty ? /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
+  return /* @__PURE__ */ jsx8(DataView, { loading: q.loading && !dlp, error: q.error, children: dlp ? /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx8(Text8, { children: "mode: " }),
+      /* @__PURE__ */ jsx8(Text8, { color: modeColor(dlp.mode), bold: true, children: dlp.mode }),
+      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: dlp.mode === "off" ? "  (scanning disabled)" : dlp.mode === "detect" ? "  (flag dlp:yes, redact output)" : "  (deny + redact secrets)" }),
+      dirty ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "   \u25CF unsaved (s save \xB7 x discard)" }) : null
     ] }),
-    /* @__PURE__ */ jsx6(Text6, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add \xB7 r route \xB7 e/enter edit \xB7 d remove \xB7 g ghost \xB7 s save \xB7 ^R refresh${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
-    adding ? /* @__PURE__ */ jsx6(Box6, { flexDirection: "column", children: /* @__PURE__ */ jsxs6(Box6, { children: [
-      /* @__PURE__ */ jsx6(Text6, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `${editIdx != null ? "edit" : "new"} pattern for "${newName}" (glob, * = any chars): ` : `${editIdx != null ? "edit ghost path" : "ghost path to hide"} (glob, * = any chars, e.g. */.env  *.pem): ` }),
+    /* @__PURE__ */ jsx8(Text8, { color: theme.dim, wrap: "truncate", children: focused ? `\u2191\u2193 move \xB7 space on/off \xB7 m mode \xB7 a add \xB7 r route \xB7 e/enter edit \xB7 d remove \xB7 g ghost \xB7 s save \xB7 ^R refresh${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to edit" }),
+    adding ? /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", children: /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: adding === "name" ? "new pattern name: " : adding === "re" ? `${editIdx != null ? "edit" : "new"} pattern for "${newName}" (glob, * = any chars): ` : `${editIdx != null ? "edit ghost path" : "ghost path to hide"} (glob, * = any chars, e.g. */.env  *.pem): ` }),
       adding !== "name" ? starL(input.startsWith("*")) : null,
-      /* @__PURE__ */ jsx6(
-        TextInput4,
+      /* @__PURE__ */ jsx8(
+        TextInput5,
         {
           value: input,
           onChange: setInput,
@@ -4117,19 +4863,19 @@ function DlpPanel({ focused }) {
       ),
       adding !== "name" ? starR(input.length > 1 && input.endsWith("*")) : null
     ] }) }) : null,
-    /* @__PURE__ */ jsx6(Box6, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
-    status ? /* @__PURE__ */ jsx6(Text6, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
+    /* @__PURE__ */ jsx8(Box8, { marginTop: 1, flexDirection: "column", height: budget, overflow: "hidden", children: win.map((l) => l.node) }),
+    status ? /* @__PURE__ */ jsx8(Text8, { color: status.startsWith("\u2717") ? theme.bad : theme.ok, wrap: "truncate", children: status }) : null
   ] }) : null });
 }
 
 // src/tui/panels/Audit.tsx
-import { Box as Box7, Text as Text7, useInput as useInput6 } from "ink";
-import TextInput5 from "ink-text-input";
+import { Box as Box9, Text as Text9, useInput as useInput8 } from "ink";
+import TextInput6 from "ink-text-input";
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir7 } from "os";
 import { join as join7 } from "path";
-import { useState as useState7 } from "react";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+import { useState as useState9 } from "react";
+import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
 var DECISIONS = [void 0, "DENY", "ALLOW"];
 var SIGNALS = [void 0, "dlp", "ratelimit"];
 var SESS_STATUS = [void 0, "active", "idle", "ended"];
@@ -4235,24 +4981,24 @@ var STATUS_DOT = {
 };
 function AuditPanel({ active: active2, focused }) {
   const { cols, rows } = usePanelSize();
-  const [source, setSource] = useState7("cloud");
-  const [view, setView] = useState7("logs");
-  const [di, setDi] = useState7(0);
-  const [gi, setGi] = useState7(0);
-  const [tool, setTool] = useState7("");
-  const [agent, setAgent] = useState7("");
-  const [search, setSearch] = useState7("");
-  const [sessFilter, setSessFilter] = useState7("");
-  const [page, setPage] = useState7(0);
-  const [sel, setSel] = useState7(0);
-  const [detailScroll, setDetailScroll] = useState7(0);
-  const [editing, setEditing] = useState7(null);
-  const [si, setSi] = useState7(0);
-  const [sessSearch, setSessSearch] = useState7("");
-  const [sessSel, setSessSel] = useState7(0);
-  const [msg, setMsg] = useState7(null);
-  const [showHelp, setShowHelp] = useState7(false);
-  const [frozen, setFrozen] = useState7(false);
+  const [source, setSource] = useState9("cloud");
+  const [view, setView] = useState9("logs");
+  const [di, setDi] = useState9(0);
+  const [gi, setGi] = useState9(0);
+  const [tool, setTool] = useState9("");
+  const [agent, setAgent] = useState9("");
+  const [search, setSearch] = useState9("");
+  const [sessFilter, setSessFilter] = useState9("");
+  const [page, setPage] = useState9(0);
+  const [sel, setSel] = useState9(0);
+  const [detailScroll, setDetailScroll] = useState9(0);
+  const [editing, setEditing] = useState9(null);
+  const [si, setSi] = useState9(0);
+  const [sessSearch, setSessSearch] = useState9("");
+  const [sessSel, setSessSel] = useState9(0);
+  const [msg, setMsg] = useState9(null);
+  const [showHelp, setShowHelp] = useState9(false);
+  const [frozen, setFrozen] = useState9(false);
   const toTop = () => setSel(0);
   const statsQ = useLoader(() => source === "cloud" ? api.stats.get() : Promise.resolve(null), [source]);
   usePoll(statsQ.reloadQuiet, 15e3, active2 && source === "cloud" && !frozen);
@@ -4348,7 +5094,7 @@ function AuditPanel({ active: active2, focused }) {
     };
     run().then(({ n, file }) => setMsg({ text: `\u2713 exported ${n} rows \u2192 ${file}`, level: "ok" })).catch((e) => setMsg({ text: "\u2717 export failed: " + (e instanceof Error ? e.message : String(e)), level: "bad" }));
   };
-  useInput6(
+  useInput8(
     (input, key) => {
       if (input === " ") {
         setFrozen((f) => !f);
@@ -4464,58 +5210,58 @@ function AuditPanel({ active: active2, focused }) {
     { isActive: focused && !editing }
   );
   const localAll = localQ.data ?? [];
-  const strip = source === "cloud" ? /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx7(Text7, { bold: true, children: statsQ.data ? statsQ.data.total_calls : "\xB7\xB7\xB7\xB7" }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " calls \xB7 " }),
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.ok, children: [
+  const strip = source === "cloud" ? /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, children: statsQ.data ? statsQ.data.total_calls : "\xB7\xB7\xB7\xB7" }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " calls \xB7 " }),
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.ok, children: [
       statsQ.data?.allowed ?? "\xB7\xB7\xB7",
       " allow"
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.bad, children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \xB7 " }),
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.bad, children: [
       statsQ.data?.denied ?? "\xB7\xB7",
       " deny"
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: ` \xB7 ${statsQ.data?.active_policies ?? "\xB7"} policies` })
-  ] }) : /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-    /* @__PURE__ */ jsx7(Text7, { bold: true, children: localAll.length }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " calls in local file \xB7 " }),
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.ok, children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: ` \xB7 ${statsQ.data?.active_policies ?? "\xB7"} policies` })
+  ] }) : /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+    /* @__PURE__ */ jsx9(Text9, { bold: true, children: localAll.length }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " calls in local file \xB7 " }),
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.ok, children: [
       localAll.filter((r) => r.decision === "ALLOW").length,
       " allow"
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 " }),
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.bad, children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \xB7 " }),
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.bad, children: [
       localAll.filter((r) => r.decision !== "ALLOW").length,
       " deny"
     ] }),
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
       " \xB7 ",
       localLogFile()
     ] })
   ] });
-  const copyBanner = frozen ? /* @__PURE__ */ jsx7(Text7, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, wrap: "truncate", children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : null;
-  const srcChip = /* @__PURE__ */ jsxs7(Text7, { children: [
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "src:" }),
-    /* @__PURE__ */ jsx7(Text7, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " (s) " })
+  const copyBanner = frozen ? /* @__PURE__ */ jsx9(Text9, { backgroundColor: "#123d1f", color: "#7bd88f", bold: true, wrap: "truncate", children: " \u23F5 COPY MODE \u2014 screen frozen, select & copy freely \xB7 space resume " }) : null;
+  const srcChip = /* @__PURE__ */ jsxs9(Text9, { children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "src:" }),
+    /* @__PURE__ */ jsx9(Text9, { color: source === "local" ? theme.ok : "#4f6db8", bold: true, children: source }),
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " (s) " })
   ] });
   if (showHelp) {
-    const colOf = (groups) => /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", width: "50%", paddingRight: 2, children: groups.map(([group, keys]) => /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx7(Text7, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, children: ("  " + k).padEnd(19) }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: desc })
+    const colOf = (groups2) => /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: "50%", paddingRight: 2, children: groups2.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(19) }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) });
-    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs7(Text7, { bold: true, color: theme.accentBright, children: [
+      /* @__PURE__ */ jsxs9(Text9, { bold: true, color: theme.accentBright, children: [
         "AUDIT \u2014 all keys",
         " ",
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: frozen ? "\xB7 screen frozen \u2014 space resumes, other keys are locked" : "\xB7 press any key to close \xB7 space = copy mode (works here too)" })
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: frozen ? "\xB7 screen frozen \u2014 space resumes, other keys are locked" : "\xB7 press any key to close \xB7 space = copy mode (works here too)" })
       ] }),
-      /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
+      /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, children: [
         colOf(AUDIT_HELP.slice(0, 1)),
         colOf(AUDIT_HELP.slice(1))
       ] })
@@ -4534,53 +5280,53 @@ function AuditPanel({ active: active2, focused }) {
     const maxScroll = Math.max(0, contentLines.length - bodyRows);
     const off = Math.min(detailScroll, maxScroll);
     const win = contentLines.slice(off, off + bodyRows);
-    return /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
       copyBanner,
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
-        /* @__PURE__ */ jsx7(Text7, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accent, bold: true, children: "  " + e.tool }),
-        /* @__PURE__ */ jsx7(Text7, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
-        e.dlp.length ? /* @__PURE__ */ jsx7(Text7, { color: theme.bad, children: "  DLP!" }) : null,
-        e.burst ? /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "  BURST" }) : null,
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "  \u2190 back" })
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx9(Text9, { color: decisionColor(e.decision), bold: true, children: "  " + e.decision }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accent, bold: true, children: "  " + e.tool }),
+        /* @__PURE__ */ jsx9(Text9, { color: loc ? theme.ok : "white", children: "  " + (loc ? "LOC" : "CLD") }),
+        e.dlp.length ? /* @__PURE__ */ jsx9(Text9, { color: theme.bad, children: "  DLP!" }) : null,
+        e.burst ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: "  BURST" }) : null,
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \u2190 back" })
       ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2502 when " }),
-        /* @__PURE__ */ jsx7(Text7, { children: new Date(e.at).toLocaleString() }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 perm " }),
-        /* @__PURE__ */ jsx7(Text7, { children: e.permission || "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 trust " }),
-        /* @__PURE__ */ jsx7(Text7, { children: e.trust || "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 eval " }),
-        /* @__PURE__ */ jsx7(Text7, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 agent " }),
-        /* @__PURE__ */ jsx7(Text7, { children: e.agent ?? "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502" })
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "\u2502 when " }),
+        /* @__PURE__ */ jsx9(Text9, { children: new Date(e.at).toLocaleString() }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502 perm " }),
+        /* @__PURE__ */ jsx9(Text9, { children: e.permission || "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502 trust " }),
+        /* @__PURE__ */ jsx9(Text9, { children: e.trust || "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502 eval " }),
+        /* @__PURE__ */ jsx9(Text9, { color: e.evalMs != null && e.evalMs > 500 ? theme.warn : void 0, children: e.evalMs != null ? `${e.evalMs}ms` : "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502 agent " }),
+        /* @__PURE__ */ jsx9(Text9, { children: e.agent ?? "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: "\u2502 session " }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: e.session ?? "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502 rule " }),
-        /* @__PURE__ */ jsx7(Text7, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \u2502" })
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "\u2502 session " }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: e.session ?? "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502 rule " }),
+        /* @__PURE__ */ jsx9(Text9, { color: e.rule && e.decision !== "ALLOW" ? theme.bad : theme.dim, children: e.rule ?? "\u2014" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2502" })
       ] }),
-      /* @__PURE__ */ jsx7(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
-      /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx7(Text7, { wrap: "truncate", children: l || " " }, off + i)) }),
-      /* @__PURE__ */ jsxs7(Text7, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
-        /* @__PURE__ */ jsx7(Text7, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
-        /* @__PURE__ */ jsx7(Text7, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
+      /* @__PURE__ */ jsx9(PaneTitle, { label: "FULL CONTENT", extra: `${contentLines.length} lines${maxScroll ? ` \xB7 \u25BC${maxScroll - off} more \xB7 \u2191\u2193 scroll` : ""} \xB7 space copy \xB7 \u2190 back`, width: innerW }),
+      /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", height: bodyRows, overflow: "hidden", children: win.map((l, i) => /* @__PURE__ */ jsx9(Text9, { wrap: "truncate", children: l || " " }, off + i)) }),
+      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx9(Text9, { backgroundColor: BG2, color: "white", bold: true, children: " ENTRY " }),
+        /* @__PURE__ */ jsx9(Text9, { backgroundColor: "#0b1530", color: "white", children: ` ${e.id} ` }),
+        /* @__PURE__ */ jsx9(Text9, { backgroundColor: BG2, color: "white", children: " \u2191\u2193 scroll \xB7 space copy \xB7 ? all keys \xB7 \u2190 back \xB7 esc menu " })
       ] })
     ] });
   }
-  const chip = (label, val, on) => /* @__PURE__ */ jsxs7(Text7, { children: [
-    /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
-      label,
+  const chip = (label2, val, on) => /* @__PURE__ */ jsxs9(Text9, { children: [
+    /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
+      label2,
       ":"
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: on ? theme.accentBright : theme.dim, children: val }),
-    /* @__PURE__ */ jsx7(Text7, { children: " " })
+    /* @__PURE__ */ jsx9(Text9, { color: on ? theme.accentBright : theme.dim, children: val }),
+    /* @__PURE__ */ jsx9(Text9, { children: " " })
   ] });
   if (view === "sessions") {
     const headerRows2 = 5 + (editing ? 1 : 0);
@@ -4588,21 +5334,21 @@ function AuditPanel({ active: active2, focused }) {
     const selC = Math.min(sessSel, Math.max(0, sessionsFiltered.length - 1));
     const start2 = Math.min(Math.max(0, selC - Math.floor((listRows2 - 1) / 2)), Math.max(0, sessionsFiltered.length - listRows2));
     const win = sessionsFiltered.slice(start2, start2 + listRows2);
-    return /* @__PURE__ */ jsx7(DataView, { loading: sessLoading && !frozen, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+    return /* @__PURE__ */ jsx9(DataView, { loading: sessLoading && !frozen, error: source === "cloud" ? agentsQ.error : localQ.error, children: /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
       strip,
       copyBanner,
-      /* @__PURE__ */ jsxs7(Box7, { children: [
+      /* @__PURE__ */ jsxs9(Box9, { children: [
         srcChip,
-        /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, children: "SESSIONS" }),
-        /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 logs (v) " }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "SESSIONS" }),
+        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \xB7 logs (v) " }),
         chip("status", SESS_STATUS[si] ?? "all", si !== 0),
         chip("search", sessSearch || "\xB7", !!sessSearch)
       ] }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
-      editing === "sess-search" ? /* @__PURE__ */ jsxs7(Box7, { children: [
-        /* @__PURE__ */ jsx7(Text7, { color: theme.warn, children: "search: " }),
-        /* @__PURE__ */ jsx7(
-          TextInput5,
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter \u2192 session logs \xB7 v logs \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
+      editing === "sess-search" ? /* @__PURE__ */ jsxs9(Box9, { children: [
+        /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: "search: " }),
+        /* @__PURE__ */ jsx9(
+          TextInput6,
           {
             value: sessSearch,
             onChange: (v) => {
@@ -4613,8 +5359,8 @@ function AuditPanel({ active: active2, focused }) {
           }
         )
       ] }) : null,
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${sessionsFiltered.length} sessions \xB7 ${selC + 1}/${sessionsFiltered.length}${start2 ? ` \xB7 \u25B2${start2}` : ""}${start2 + listRows2 < sessionsFiltered.length ? ` \xB7 \u25BC${sessionsFiltered.length - start2 - listRows2}` : ""}` }),
-      /* @__PURE__ */ jsx7(
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, wrap: "truncate", children: `${sessionsFiltered.length} sessions \xB7 ${selC + 1}/${sessionsFiltered.length}${start2 ? ` \xB7 \u25B2${start2}` : ""}${start2 + listRows2 < sessionsFiltered.length ? ` \xB7 \u25BC${sessionsFiltered.length - start2 - listRows2}` : ""}` }),
+      /* @__PURE__ */ jsx9(
         Table,
         {
           columns: [
@@ -4645,7 +5391,7 @@ function AuditPanel({ active: active2, focused }) {
           })
         }
       ),
-      sessionsFiltered.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+      sessionsFiltered.length === 0 ? /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
         "(no sessions",
         source === "local" ? " in the local file" : "",
         ")"
@@ -4657,14 +5403,14 @@ function AuditPanel({ active: active2, focused }) {
   const selClamped = Math.min(sel, Math.max(0, pageRows.length - 1));
   const maxStart = Math.max(0, pageRows.length - listRows);
   const start = Math.min(Math.max(0, selClamped - Math.floor((listRows - 1) / 2)), maxStart);
-  const windowed = pageRows.slice(start, start + listRows);
-  return /* @__PURE__ */ jsx7(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+  const windowed2 = pageRows.slice(start, start + listRows);
+  return /* @__PURE__ */ jsx9(DataView, { loading: logsLoading && !frozen, error: source === "cloud" ? cloudQ.error : localQ.error, children: /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
     strip,
     copyBanner,
-    /* @__PURE__ */ jsxs7(Box7, { children: [
+    /* @__PURE__ */ jsxs9(Box9, { children: [
       srcChip,
-      /* @__PURE__ */ jsx7(Text7, { color: theme.accentBright, bold: true, children: "LOGS" }),
-      /* @__PURE__ */ jsx7(Text7, { color: theme.dim, children: " \xB7 sessions (v) " }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "LOGS" }),
+      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \xB7 sessions (v) " }),
       chip("dec", DECISIONS[di] ?? "all", di !== 0),
       chip("sig", SIGNALS[gi] ?? "all", gi !== 0),
       chip("tool", tool || "\xB7", !!tool),
@@ -4672,15 +5418,15 @@ function AuditPanel({ active: active2, focused }) {
       chip("search", search || "\xB7", !!search),
       sessFilter ? chip("sess", sessFilter.slice(0, 8), true) : null
     ] }),
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
-    msg ? /* @__PURE__ */ jsx7(Text7, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
-    editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsxs7(Text7, { color: theme.warn, children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, wrap: "truncate", children: focused ? "\u2191\u2193 select \xB7 enter full entry \xB7 \u2190\u2192 page \xB7 v sessions \xB7 ^R refresh \xB7 ? all keys" : "press \u2192 to browse" }),
+    msg ? /* @__PURE__ */ jsx9(Text9, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : null,
+    editing && editing !== "sess-search" ? /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsxs9(Text9, { color: theme.warn, children: [
         editing,
         ": "
       ] }),
-      /* @__PURE__ */ jsx7(
-        TextInput5,
+      /* @__PURE__ */ jsx9(
+        TextInput6,
         {
           value: editing === "tool" ? tool : editing === "agent" ? agent : search,
           onChange: (v) => {
@@ -4692,9 +5438,9 @@ function AuditPanel({ active: active2, focused }) {
         }
       )
     ] }) : null,
-    /* @__PURE__ */ jsx7(Text7, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
-    /* @__PURE__ */ jsx7(Box7, { flexDirection: "column", overflow: "hidden", children: windowed.map((e, i) => /* @__PURE__ */ jsx7(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
-    pageRows.length === 0 ? /* @__PURE__ */ jsxs7(Text7, { color: theme.dim, children: [
+    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, wrap: "truncate", children: `${total} matched \xB7 page ${Math.min(page + 1, pages)}/${pages} \xB7 ${PAGE}/page \xB7 ${pageRows.length ? selClamped + 1 : 0}/${pageRows.length}${start ? ` \xB7 \u25B2${start} newer` : ""}${start + listRows < pageRows.length ? ` \xB7 \u25BC${pageRows.length - start - listRows} older` : ""}` }),
+    /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", overflow: "hidden", children: windowed2.map((e, i) => /* @__PURE__ */ jsx9(StreamLine, { e: toStream(e), loc: source === "local", selected: start + i === selClamped && focused, date: true }, e.id)) }),
+    pageRows.length === 0 ? /* @__PURE__ */ jsxs9(Text9, { color: theme.dim, children: [
       "(no entries",
       source === "local" ? " in the local file" : "",
       " \u2014 c clears filters)"
@@ -4703,9 +5449,9 @@ function AuditPanel({ active: active2, focused }) {
 }
 
 // src/tui/panels/Settings.tsx
-import { Box as Box8, Text as Text8, useInput as useInput7 } from "ink";
-import TextInput6 from "ink-text-input";
-import { useEffect as useEffect7, useRef as useRef3, useState as useState8 } from "react";
+import { Box as Box10, Text as Text10, useInput as useInput9 } from "ink";
+import TextInput7 from "ink-text-input";
+import { useEffect as useEffect8, useRef as useRef4, useState as useState10 } from "react";
 init_global_install();
 
 // src/commands/doctor.ts
@@ -5099,7 +5845,7 @@ async function tuiUpdateFlow(onStatus) {
 }
 
 // src/tui/panels/Settings.tsx
-import { Fragment as Fragment5, jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+import { Fragment as Fragment6, jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
 var EVENTS = ["denials", "allowed", "all"];
 var SPIN2 = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SIGNALS2 = ["any", "deny", "dlp", "ratelimit"];
@@ -5125,19 +5871,19 @@ function SettingsPanel({
 }) {
   void active2;
   const { cols, rows } = usePanelSize();
-  const [sel, setSel] = useState8(0);
-  const [editing, setEditing] = useState8(null);
-  const [input, setInput] = useState8("");
-  const [confirmDel, setConfirmDel] = useState8(null);
-  const [msg, setMsg] = useState8(null);
-  const [busy, setBusy] = useState8(false);
-  const [editor, setEditor] = useState8(null);
-  const [latest, setLatest] = useState8(null);
-  const [diagBusy, setDiagBusy] = useState8(null);
-  const [autoUp, setAutoUp] = useState8(() => autoUpdateEnabled());
-  const [updBusy, setUpdBusy] = useState8(false);
-  const [llSetting, setLlSetting] = useState8(null);
-  useEffect7(() => {
+  const [sel, setSel] = useState10(0);
+  const [editing, setEditing] = useState10(null);
+  const [input, setInput] = useState10("");
+  const [confirmDel, setConfirmDel] = useState10(null);
+  const [msg, setMsg] = useState10(null);
+  const [busy, setBusy] = useState10(false);
+  const [editor, setEditor] = useState10(null);
+  const [latest, setLatest] = useState10(null);
+  const [diagBusy, setDiagBusy] = useState10(null);
+  const [autoUp, setAutoUp] = useState10(() => autoUpdateEnabled());
+  const [updBusy, setUpdBusy] = useState10(false);
+  const [llSetting, setLlSetting] = useState10(null);
+  useEffect8(() => {
     const read = () => {
       try {
         setLlSetting(localLogsSetting());
@@ -5148,8 +5894,8 @@ function SettingsPanel({
     const t = setInterval(read, 5e3);
     return () => clearInterval(t);
   }, []);
-  const [canInstall, setCanInstall] = useState8(null);
-  useEffect7(() => {
+  const [canInstall, setCanInstall] = useState10(null);
+  useEffect8(() => {
     let live2 = true;
     globalInstallCheck().then((r) => {
       if (live2) setCanInstall(r.writable);
@@ -5159,8 +5905,8 @@ function SettingsPanel({
       live2 = false;
     };
   }, []);
-  const [diag, setDiag] = useState8(null);
-  const [diagStep, setDiagStep] = useState8(0);
+  const [diag, setDiag] = useState10(null);
+  const [diagStep, setDiagStep] = useState10(0);
   const DIAG_STEPS = {
     doctor: ["login", "active policy", "guard hook", "agent hooks", "local logs"],
     repair: ["inspecting protection files", "rewriting hook files", "registering with agents", "re-locking"]
@@ -5170,14 +5916,14 @@ function SettingsPanel({
     const left = min - (Date.now() - started);
     if (left > 0) await new Promise((res) => setTimeout(res, left));
   };
-  useEffect7(() => {
+  useEffect8(() => {
     if (!diagBusy) return;
     const total = DIAG_STEPS[diagBusy].length;
     const step = setInterval(() => setDiagStep((s) => Math.min(s + 1, total - 1)), 220);
     return () => clearInterval(step);
   }, [diagBusy]);
   const ver = currentVersion();
-  useEffect7(() => {
+  useEffect8(() => {
     let live2 = true;
     latestVersion().then((v) => {
       if (live2) setLatest(v);
@@ -5187,20 +5933,20 @@ function SettingsPanel({
       live2 = false;
     };
   }, []);
-  const [accounts, setAccounts] = useState8(() => listAccounts());
-  const [login, setLogin] = useState8(null);
-  const [tick, setTick] = useState8(0);
-  const abort = useRef3(false);
+  const [accounts, setAccounts] = useState10(() => listAccounts());
+  const [login, setLogin] = useState10(null);
+  const [tick, setTick] = useState10(0);
+  const abort = useRef4(false);
   const refreshAccounts = () => setAccounts(listAccounts());
-  const [guardHere, setGuardHere] = useState8(() => isGuardInstalled());
-  const [guardVer, setGuardVer] = useState8(() => installedGuardVersion());
-  const [guardOld, setGuardOld] = useState8(() => guardHookOutdated());
+  const [guardHere, setGuardHere] = useState10(() => isGuardInstalled());
+  const [guardVer, setGuardVer] = useState10(() => installedGuardVersion());
+  const [guardOld, setGuardOld] = useState10(() => guardHookOutdated());
   const codexNeedsTrust = () => {
     if (!codexDetected()) return false;
     const cx = codexHooksStatus();
     return cx.registered && !cx.trusted;
   };
-  const [codexTrust, setCodexTrust] = useState8(codexNeedsTrust);
+  const [codexTrust, setCodexTrust] = useState10(codexNeedsTrust);
   const refreshGuard = () => {
     setGuardHere(isGuardInstalled());
     setGuardVer(installedGuardVersion());
@@ -5208,12 +5954,12 @@ function SettingsPanel({
     setCodexTrust(codexNeedsTrust());
   };
   const locked = accounts.length === 0;
-  const [srv, setSrv] = useState8(() => logsServerStatus());
-  useEffect7(() => {
+  const [srv, setSrv] = useState10(() => logsServerStatus());
+  useEffect8(() => {
     const t = setInterval(() => setSrv(logsServerStatus()), 3e3);
     return () => clearInterval(t);
   }, []);
-  useEffect7(() => {
+  useEffect8(() => {
     const loggingIn = login && login.phase !== "done" && login.phase !== "error";
     if (!loggingIn && !diagBusy && !updBusy) return;
     const t = setInterval(() => setTick((n) => n + 1), 120);
@@ -5226,8 +5972,8 @@ function SettingsPanel({
   const selfQ = useLoader(() => listAccounts().length ? api.settings.getSelfProtection() : Promise.resolve(null));
   const local = localQ.data;
   const selfProt = selfQ.data;
-  const autoInstalledRef = useRef3(false);
-  useEffect7(() => {
+  const autoInstalledRef = useRef4(false);
+  useEffect8(() => {
     if (autoInstalledRef.current) return;
     if (guardHere && guardOld) {
       autoInstalledRef.current = true;
@@ -5239,7 +5985,7 @@ function SettingsPanel({
       }
     }
   }, [guardHere, guardOld]);
-  const [hidden, setHidden] = useState8(/* @__PURE__ */ new Set());
+  const [hidden, setHidden] = useState10(/* @__PURE__ */ new Set());
   const webhooks = (whQ.data?.webhooks ?? []).filter((w) => !hidden.has("wh:" + w.id));
   const alerts = (alertQ.data?.rules ?? []).filter((r) => !hidden.has("alert:" + r.id));
   const hasEmailAlert = alerts.some((r) => alertChannel(r) === "email");
@@ -5275,12 +6021,12 @@ function SettingsPanel({
     guardQ.reload();
     selfQ.reload();
   };
-  const run = (label, fn, reload) => {
+  const run = (label2, fn, reload) => {
     if (busy) return;
     setBusy(true);
-    setMsg({ text: label + "\u2026", level: "ok" });
+    setMsg({ text: label2 + "\u2026", level: "ok" });
     fn().then(() => {
-      setMsg({ text: "\u2713 " + label, level: "ok" });
+      setMsg({ text: "\u2713 " + label2, level: "ok" });
       reload();
     }).catch((e) => setMsg({ text: "\u2717 " + (e instanceof Error ? e.message : String(e)), level: "bad" })).finally(() => setBusy(false));
   };
@@ -5522,7 +6268,7 @@ function SettingsPanel({
       setEditor({ ...editor, target: v, field: 1 });
     }
   };
-  useInput7(
+  useInput9(
     (inp, key) => {
       if (login && (login.phase === "starting" || login.phase === "waiting")) {
         if (key.escape) {
@@ -5657,58 +6403,58 @@ function SettingsPanel({
   );
   const spin = SPIN2[tick % SPIN2.length];
   if (login && (login.phase === "starting" || login.phase === "waiting")) {
-    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: "Add an account" }),
-      login.phase === "starting" ? /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
+    return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: "Add an account" }),
+      login.phase === "starting" ? /* @__PURE__ */ jsxs10(Text10, { color: theme.dim, children: [
         spin,
         " starting device pairing\u2026"
-      ] }) : /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", marginTop: 1, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
-        /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
-          /* @__PURE__ */ jsxs8(Text8, { color: theme.warn, children: [
+      ] }) : /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", marginTop: 1, children: [
+        /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "Opening your browser to authorize. If it didn't open, visit:" }),
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, bold: true, wrap: "truncate", children: login.url }),
+        /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+          /* @__PURE__ */ jsxs10(Text10, { color: theme.warn, children: [
             spin,
             " waiting for authorization\u2026 "
           ] }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "esc to cancel" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "esc to cancel" })
         ] })
       ] })
     ] });
   }
   if (editor) {
-    const fieldRow = (idx, label, value, hint) => /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
-      /* @__PURE__ */ jsx8(Text8, { color: editor.field === idx ? theme.accentBright : theme.dim, children: editor.field === idx ? "\u25B8 " : "  " }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: label.padEnd(11) }),
+    const fieldRow = (idx, label2, value, hint) => /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
+      /* @__PURE__ */ jsx10(Text10, { color: editor.field === idx ? theme.accentBright : theme.dim, children: editor.field === idx ? "\u25B8 " : "  " }),
+      /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: label2.padEnd(11) }),
       value,
-      editor.field === idx && hint ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   " + hint }) : null
+      editor.field === idx && hint ? /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "   " + hint }) : null
     ] });
-    return /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-      /* @__PURE__ */ jsxs8(Text8, { bold: true, color: theme.accentBright, children: [
+    return /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsxs10(Text10, { bold: true, color: theme.accentBright, children: [
         editor.id ? "Edit" : "New",
         " ",
         editor.channel,
         " alert"
       ] }),
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u2191\u2193 field \xB7 \u2190\u2192 change \xB7 e edit target \xB7 enter save \xB7 esc cancel" }),
-      editing === "alert-target" ? /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, children: [
-        /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: editor.channel === "email" ? "e-mail address: " : "telegram chat id (from @userinfobot): " }),
-        /* @__PURE__ */ jsx8(TextInput6, { value: input, onChange: setInput, onSubmit: submitInput })
-      ] }) : msg ? /* @__PURE__ */ jsx8(Text8, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
-      /* @__PURE__ */ jsxs8(Box8, { marginTop: 1, flexDirection: "column", children: [
-        fieldRow(0, "target", editor.target ? /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(editor.target, cols - 16) }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "empty \u2014 press e" }), "press e to edit"),
-        fieldRow(1, "signal", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }), "\u2190\u2192 change"),
-        fieldRow(2, "threshold", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: `\u2265 ${editor.threshold}` }), "\u2190\u2192 \xB15"),
-        fieldRow(3, "window", /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: winLabel(editor.windowSeconds) }), "\u2190\u2192 change"),
-        editor.id ? fieldRow(4, "status", editor.enabled ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "on" }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "off" }), "\u2190\u2192 turn on/off") : null
+      /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "\u2191\u2193 field \xB7 \u2190\u2192 change \xB7 e edit target \xB7 enter save \xB7 esc cancel" }),
+      editing === "alert-target" ? /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, children: [
+        /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: editor.channel === "email" ? "e-mail address: " : "telegram chat id (from @userinfobot): " }),
+        /* @__PURE__ */ jsx10(TextInput7, { value: input, onChange: setInput, onSubmit: submitInput })
+      ] }) : msg ? /* @__PURE__ */ jsx10(Text10, { color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : /* @__PURE__ */ jsx10(Text10, { children: " " }),
+      /* @__PURE__ */ jsxs10(Box10, { marginTop: 1, flexDirection: "column", children: [
+        fieldRow(0, "target", editor.target ? /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: truncate(editor.target, cols - 16) }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "empty \u2014 press e" }), "press e to edit"),
+        fieldRow(1, "signal", /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }), "\u2190\u2192 change"),
+        fieldRow(2, "threshold", /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: `\u2265 ${editor.threshold}` }), "\u2190\u2192 \xB15"),
+        fieldRow(3, "window", /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: winLabel(editor.windowSeconds) }), "\u2190\u2192 change"),
+        editor.id ? fieldRow(4, "status", editor.enabled ? /* @__PURE__ */ jsx10(Text10, { color: theme.ok, children: "on" }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "off" }), "\u2190\u2192 turn on/off") : null
       ] }),
-      /* @__PURE__ */ jsx8(Box8, { marginTop: 1, children: editor.id && !editor.enabled ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "disabled \u2014 this alert will NOT fire until you set status back to on" }) : /* @__PURE__ */ jsxs8(Text8, { color: theme.dim, children: [
+      /* @__PURE__ */ jsx10(Box10, { marginTop: 1, children: editor.id && !editor.enabled ? /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: "disabled \u2014 this alert will NOT fire until you set status back to on" }) : /* @__PURE__ */ jsxs10(Text10, { color: theme.dim, children: [
         "fires when ",
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }),
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: SIGNAL_LABEL[editor.signal] }),
         " reach ",
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: editor.threshold }),
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: editor.threshold }),
         " within",
         " ",
-        /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: winLabel(editor.windowSeconds) })
+        /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: winLabel(editor.windowSeconds) })
       ] }) })
     ] });
   }
@@ -5717,140 +6463,140 @@ function SettingsPanel({
   const authError = rawError && /invalid api key|authentication|401|unauthor|not logged in/i.test(rawError) ? rawError : null;
   const noKey = !!authError && /not logged in/i.test(authError);
   const error = authError ? null : rawError;
-  const onOff = (on) => on ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "off" });
+  const onOff = (on) => on ? /* @__PURE__ */ jsx10(Text10, { color: theme.ok, children: "on " }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "off" });
   const chanOf = (rule) => [...rule.emails ?? [], ...(rule.telegram ?? []).map((t) => "tg " + t)].join(", ") || "\u2014";
   const isCur = (r) => keyOf(r) === keyOf(cur) && focused;
-  const cursor = (r) => /* @__PURE__ */ jsx8(Text8, { color: isCur(r) ? theme.accentBright : theme.dim, children: isCur(r) ? "\u25B8 " : "  " });
+  const cursor = (r) => /* @__PURE__ */ jsx10(Text10, { color: isCur(r) ? theme.accentBright : theme.dim, children: isCur(r) ? "\u25B8 " : "  " });
   const rowLine = (r) => {
     switch (r.kind) {
       case "acct": {
         const a = r.acc;
         const isView = viewApiKey ? a.apiKey === viewApiKey : accounts[0]?.apiKey === a.apiKey;
         const isActive = isActiveAccount(a.apiKey);
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(acctLabel(a), 30).padEnd(31) }),
-          isView ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "          " }),
-          isActive ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "       " }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: a.project ? truncate(a.project, 20) : "" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: truncate(acctLabel(a), 30).padEnd(31) }),
+          isView ? /* @__PURE__ */ jsx10(Text10, { color: theme.ok, children: "\u25CF viewing " }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "          " }),
+          isActive ? /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: "ACTIVE " }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "       " }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: a.project ? truncate(a.project, 20) : "" })
         ] });
       }
       case "acct-add":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "+ add account (enter \u2014 device login in the browser)" })
         ] });
       case "guard":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "guard".padEnd(11) }),
-          !guardHere ? /* @__PURE__ */ jsxs8(Fragment5, { children: [
-            /* @__PURE__ */ jsx8(Text8, { color: theme.bad, bold: true, children: "removed" }),
-            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \xB7 " }),
-            /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: "enter to install" })
-          ] }) : /* @__PURE__ */ jsxs8(Fragment5, { children: [
-            /* @__PURE__ */ jsx8(Text8, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
-            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
-            /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: " \xB7 d remove" }),
-            codexTrust ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: " \xB7 codex: run /hooks once to trust" }) : null
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "guard".padEnd(11) }),
+          !guardHere ? /* @__PURE__ */ jsxs10(Fragment6, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: theme.bad, bold: true, children: "removed" }),
+            /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " \xB7 " }),
+            /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: "enter to install" })
+          ] }) : /* @__PURE__ */ jsxs10(Fragment6, { children: [
+            /* @__PURE__ */ jsx10(Text10, { color: guardOld ? theme.warn : theme.ok, children: `v${guardVer ?? "?"}` }),
+            /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: guardOld ? " \xB7 update available \xB7 enter update" : " (latest) \xB7 enter reinstall" }),
+            /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: " \xB7 d remove" }),
+            codexTrust ? /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: " \xB7 codex: run /hooks once to trust" }) : null
           ] })
         ] });
       case "self":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "self-prot".padEnd(11) }),
-          selfProt ? onOff(selfProt.enabled) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "\u2026" }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   blocks agents editing SolonGate\u2019s own hooks/config \xB7 enter toggles" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "self-prot".padEnd(11) }),
+          selfProt ? onOff(selfProt.enabled) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "\u2026" }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "   blocks agents editing SolonGate\u2019s own hooks/config \xB7 enter toggles" })
         ] });
       case "doctor":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "doctor".padEnd(11) }),
-          diagBusy === "doctor" ? /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: `${spin} running health check\u2026` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "health check: login, policy, guard, hooks, local logs \xB7 enter runs it" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "doctor".padEnd(11) }),
+          diagBusy === "doctor" ? /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: `${spin} running health check\u2026` }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "health check: login, policy, guard, hooks, local logs \xB7 enter runs it" })
         ] });
       case "repair":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "repair".padEnd(11) }),
-          diagBusy === "repair" ? /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: `${spin} restoring protection\u2026` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "restore every protection file after tampering or deletion \xB7 enter runs it" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "repair".padEnd(11) }),
+          diagBusy === "repair" ? /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: `${spin} restoring protection\u2026` }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "restore every protection file after tampering or deletion \xB7 enter runs it" })
         ] });
       case "cli-update": {
         const behind = latest ? newerThan(latest, ver) : false;
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "version".padEnd(11) }),
-          /* @__PURE__ */ jsx8(Text8, { color: behind ? theme.warn : theme.ok, children: `v${ver}` }),
-          updBusy ? /* @__PURE__ */ jsx8(Text8, { color: theme.accentBright, children: `   ${spin} updating\u2026` }) : behind && canInstall === false ? (
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "version".padEnd(11) }),
+          /* @__PURE__ */ jsx10(Text10, { color: behind ? theme.warn : theme.ok, children: `v${ver}` }),
+          updBusy ? /* @__PURE__ */ jsx10(Text10, { color: theme.accentBright, children: `   ${spin} updating\u2026` }) : behind && canInstall === false ? (
             // Said before they press enter, not after a minute of npm noise.
-            /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `   v${latest} on npm \xB7 needs sudo here \xB7 enter shows how` })
-          ) : behind ? /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `   v${latest} on npm \xB7 enter updates now` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: latest ? "   latest \xB7 enter checks again" : "   enter checks npm and updates" })
+            /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: `   v${latest} on npm \xB7 needs sudo here \xB7 enter shows how` })
+          ) : behind ? /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: `   v${latest} on npm \xB7 enter updates now` }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: latest ? "   latest \xB7 enter checks again" : "   enter checks npm and updates" })
         ] });
       }
       case "auto-update":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "auto".padEnd(11) }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "auto".padEnd(11) }),
           onOff(autoUp),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: autoUpdateForcedByEnv() ? "   set by SOLONGATE_AUTO_UPDATE" : canInstall === false ? "   cannot work here: npm needs sudo, so updates stay manual \xB7 enter toggles" : autoUp ? "   installs new versions in the background \xB7 enter toggles" : "   off: nothing installs on its own (npm -g may need sudo) \xB7 enter toggles" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: autoUpdateForcedByEnv() ? "   set by SOLONGATE_AUTO_UPDATE" : canInstall === false ? "   cannot work here: npm needs sudo, so updates stay manual \xB7 enter toggles" : autoUp ? "   installs new versions in the background \xB7 enter toggles" : "   off: nothing installs on its own (npm -g may need sudo) \xB7 enter toggles" })
         ] });
       case "ll-enabled":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "enabled ".padEnd(11) }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "enabled ".padEnd(11) }),
           onOff(!!local?.enabled),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "   enter toggles" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "   enter toggles" })
         ] });
       case "ll-path":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "path ".padEnd(11) }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "path ".padEnd(11) }),
           local?.path ? (
             // The folder is a PROJECT setting shared by every device on it, so
             // it can name a path that only exists on another OS. The hooks then
             // quietly fall back and this row was the last place still claiming
             // the configured path was in use.
-            llSetting && local.enabled && !llSetting.usableHere ? /* @__PURE__ */ jsxs8(Fragment5, { children: [
-              /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: truncate(local.path, Math.max(12, Math.floor((cols - 20) / 2))) }),
-              /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: `  not valid here \u2192 ${truncate(llSetting.file, Math.max(12, Math.floor((cols - 20) / 2)))}` })
-            ] }) : /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(local.path, cols - 14) })
-          ) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "not set \u2014 enter to edit" })
+            llSetting && local.enabled && !llSetting.usableHere ? /* @__PURE__ */ jsxs10(Fragment6, { children: [
+              /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: truncate(local.path, Math.max(12, Math.floor((cols - 20) / 2))) }),
+              /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: `  not valid here \u2192 ${truncate(llSetting.file, Math.max(12, Math.floor((cols - 20) / 2)))}` })
+            ] }) : /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: truncate(local.path, cols - 14) })
+          ) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "not set \u2014 enter to edit" })
         ] });
       case "ll-server":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "dashboard".padEnd(11) }),
-          srv.running ? /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "stopped" }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: srv.running ? "   survives closing the dataroom \xB7 enter stops" : "   enter starts the dashboard local-logs link" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "dashboard".padEnd(11) }),
+          srv.running ? /* @__PURE__ */ jsx10(Text10, { color: theme.ok, children: `running 127.0.0.1:${srv.port}` }) : /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "stopped" }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: srv.running ? "   survives closing the dataroom \xB7 enter stops" : "   enter starts the dashboard local-logs link" })
         ] });
       case "wh":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
           onOff(r.wh.enabled),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: (" " + r.wh.events).padEnd(9) }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(r.wh.url, cols - 16) })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: (" " + r.wh.events).padEnd(9) }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: truncate(r.wh.url, cols - 16) })
         ] });
       case "wh-add":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add webhook (enter)" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "+ add webhook (enter)" })
         ] });
       case "alert":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
           onOff(r.rule.enabled),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: (" " + SIGNAL_LABEL[r.rule.signal]).padEnd(13) }),
-          /* @__PURE__ */ jsx8(Text8, { children: `\u2265${r.rule.threshold}/${winLabel(r.rule.windowSeconds)} `.padEnd(11) }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.accent, children: truncate(chanOf(r.rule), cols - 34) })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: (" " + SIGNAL_LABEL[r.rule.signal]).padEnd(13) }),
+          /* @__PURE__ */ jsx10(Text10, { children: `\u2265${r.rule.threshold}/${winLabel(r.rule.windowSeconds)} `.padEnd(11) }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.accent, children: truncate(chanOf(r.rule), cols - 34) })
         ] });
       case "alert-add-email":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add email alert (enter)" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "+ add email alert (enter)" })
         ] });
       case "alert-add-tg":
-        return /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
+        return /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
           cursor(r),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "+ add telegram alert (enter \u2014 numeric chat id from @userinfobot)" })
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "+ add telegram alert (enter \u2014 numeric chat id from @userinfobot)" })
         ] });
     }
   };
@@ -5870,31 +6616,31 @@ function SettingsPanel({
     const sec = sectionOf(r);
     if (sec !== lastSec) {
       if (lastSec) {
-        lineEls.push(/* @__PURE__ */ jsx8(Text8, { children: " " }, "sp:" + sec));
+        lineEls.push(/* @__PURE__ */ jsx10(Text10, { children: " " }, "sp:" + sec));
         lineKey.push("");
       }
       lastSec = sec;
       lineEls.push(
-        /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", children: [
-          /* @__PURE__ */ jsx8(Text8, { bold: true, color: theme.accentBright, children: sec }),
-          /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  \u2014 " + SECTION_DESC[sec] })
+        /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", children: [
+          /* @__PURE__ */ jsx10(Text10, { bold: true, color: theme.accentBright, children: sec }),
+          /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "  \u2014 " + SECTION_DESC[sec] })
         ] }, "h:" + sec)
       );
       lineKey.push("");
       if ((sec === "WEBHOOKS" || sec === "ALERTS") && local?.enabled) {
         lineEls.push(
-          /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
+          /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: theme.warn, children: `  \u26A0 local logs on \u2014 real denials stay on this machine, so ${sec.toLowerCase()} do NOT fire${sec === "WEBHOOKS" ? " (t test still works)" : ""}` }, "warn:" + sec)
         );
         lineKey.push("");
       }
     }
-    lineEls.push(/* @__PURE__ */ jsx8(Box8, { children: rowLine(r) }, keyOf(r)));
+    lineEls.push(/* @__PURE__ */ jsx10(Box10, { children: rowLine(r) }, keyOf(r)));
     lineKey.push(keyOf(r));
     if ((r.kind === "doctor" || r.kind === "repair") && diagBusy === r.kind) {
-      DIAG_STEPS[r.kind].forEach((label, i) => {
+      DIAG_STEPS[r.kind].forEach((label2, i) => {
         const done = i < diagStep;
         lineEls.push(
-          /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: done ? theme.ok : i === diagStep ? theme.accentBright : theme.dim, children: `      ${done ? "\u2713" : i === diagStep ? spin : " "} ${label}` }, `step:${r.kind}:${i}`)
+          /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: done ? theme.ok : i === diagStep ? theme.accentBright : theme.dim, children: `      ${done ? "\u2713" : i === diagStep ? spin : " "} ${label2}` }, `step:${r.kind}:${i}`)
         );
         lineKey.push("");
       });
@@ -5902,8 +6648,8 @@ function SettingsPanel({
     if (diag && (r.kind === "doctor" && diag.of === "doctor" || r.kind === "repair" && diag.of === "repair" || r.kind === "cli-update" && diag.of === "cli-update")) {
       diag.lines.forEach((l, i) => {
         lineEls.push(
-          /* @__PURE__ */ jsx8(
-            Text8,
+          /* @__PURE__ */ jsx10(
+            Text10,
             {
               wrap: "truncate",
               color: l.level === "ok" ? theme.ok : l.level === "warn" ? theme.warn : l.level === "bad" ? theme.bad : theme.dim,
@@ -5918,16 +6664,16 @@ function SettingsPanel({
   });
   if (hasEmailAlert && hasTgAlert) {
     lineEls.push(
-      /* @__PURE__ */ jsx8(Text8, { color: theme.dim, children: "  both channels in use \u2014 remove one (d) to change it" }, "both-note")
+      /* @__PURE__ */ jsx10(Text10, { color: theme.dim, children: "  both channels in use \u2014 remove one (d) to change it" }, "both-note")
     );
     lineKey.push("");
   }
-  lineEls.push(/* @__PURE__ */ jsx8(Text8, { children: " " }, "ver-sp"));
+  lineEls.push(/* @__PURE__ */ jsx10(Text10, { children: " " }, "ver-sp"));
   lineKey.push("");
   lineEls.push(
-    /* @__PURE__ */ jsxs8(Text8, { wrap: "truncate", color: theme.dim, children: [
+    /* @__PURE__ */ jsxs10(Text10, { wrap: "truncate", color: theme.dim, children: [
       `solongate v${ver}`,
-      latest ? newerThan(latest, ver) ? /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: `  \xB7 v${latest} on npm \u2014 ${autoUp ? "auto-updating" : "UPDATES above"}` }) : /* @__PURE__ */ jsx8(Text8, { color: theme.ok, children: "  \xB7 latest" }) : null
+      latest ? newerThan(latest, ver) ? /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: `  \xB7 v${latest} on npm \u2014 ${autoUp ? "auto-updating" : "UPDATES above"}` }) : /* @__PURE__ */ jsx10(Text10, { color: theme.ok, children: "  \xB7 latest" }) : null
     ] }, "ver")
   );
   lineKey.push("");
@@ -5938,36 +6684,50 @@ function SettingsPanel({
   const win = lineEls.slice(startL, startL + budget);
   const moreAbove = startL;
   const moreBelow = Math.max(0, lineEls.length - (startL + budget));
-  return /* @__PURE__ */ jsx8(DataView, { loading, error, children: /* @__PURE__ */ jsxs8(Box8, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.dim, children: focused ? `\u2191\u2193 move \xB7 enter act \xB7 m toggle \xB7 t test \xB7 e edit \xB7 x remove \xB7 d delete \xB7 n add${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to configure" }),
-    authError ? /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: theme.bad, children: truncate(
+  return /* @__PURE__ */ jsx10(DataView, { loading, error, children: /* @__PURE__ */ jsxs10(Box10, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: theme.dim, children: focused ? `\u2191\u2193 move \xB7 enter act \xB7 m toggle \xB7 t test \xB7 e edit \xB7 x remove \xB7 d delete \xB7 n add${moreAbove ? ` \xB7 \u25B2${moreAbove}` : ""}${moreBelow ? ` \xB7 \u25BC${moreBelow}` : ""}` : "press \u2192 to configure" }),
+    authError ? /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: theme.bad, children: truncate(
       noKey ? "\u2717 this device is not paired yet \u2014 press + add account below to sign in and pair it" : "\u2717 this device's key is invalid or was revoked \u2014 press x on the account below to remove it, then + add account to pair again",
       cols
     ) }) : null,
-    editing ? /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { color: theme.warn, children: editing === "path" ? "local log path: " : "webhook url: " }),
-      /* @__PURE__ */ jsx8(TextInput6, { value: input, onChange: setInput, onSubmit: submitInput })
-    ] }) : msg ? /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx8(Text8, { wrap: "truncate", color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx8(Text8, { children: " " }),
-    /* @__PURE__ */ jsx8(Box8, { flexDirection: "column", height: budget, overflow: "hidden", children: win })
+    editing ? /* @__PURE__ */ jsxs10(Box10, { children: [
+      /* @__PURE__ */ jsx10(Text10, { color: theme.warn, children: editing === "path" ? "local log path: " : "webhook url: " }),
+      /* @__PURE__ */ jsx10(TextInput7, { value: input, onChange: setInput, onSubmit: submitInput })
+    ] }) : msg ? /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: msg.level === "bad" ? theme.bad : theme.ok, children: truncate(msg.text, cols) }) : login?.msg ? /* @__PURE__ */ jsx10(Text10, { wrap: "truncate", color: login.phase === "error" ? theme.bad : theme.ok, children: login.msg }) : /* @__PURE__ */ jsx10(Text10, { children: " " }),
+    /* @__PURE__ */ jsx10(Box10, { flexDirection: "column", height: budget, overflow: "hidden", children: win })
   ] }) });
 }
 
 // src/tui/App.tsx
-import { jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+import { jsx as jsx11, jsxs as jsxs11 } from "react/jsx-runtime";
 function LiveHint() {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE" }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, children: /* @__PURE__ */ jsxs9(Text9, { children: [
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx11(Text11, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE \u2014 THIS MACHINE" }),
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "Fullscreen live monitor \u2014 streaming tool calls, active charts," }),
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "counters, DLP hits and denial alerts. Updates every 2s." }),
+    /* @__PURE__ */ jsx11(Box11, { marginTop: 1, children: /* @__PURE__ */ jsxs11(Text11, { children: [
+      "press ",
+      /* @__PURE__ */ jsx11(Text11, { color: theme.accent, children: "enter" }),
+      " to go live"
+    ] }) })
+  ] });
+}
+function FleetLiveHint() {
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx11(Text11, { color: theme.accentBright, bold: true, children: "\u25B6 REALTIME CONSOLE \u2014 THE WHOLE FLEET" }),
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "Every machine under your policy, as it happens: whose call it was," }),
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "what was refused, and who is working right now." }),
+    /* @__PURE__ */ jsx11(Box11, { marginTop: 1, children: /* @__PURE__ */ jsxs11(Text11, { children: [
       "press ",
-      /* @__PURE__ */ jsx9(Text9, { color: theme.accent, children: "enter" }),
+      /* @__PURE__ */ jsx11(Text11, { color: theme.accent, children: "enter" }),
       " to go live"
     ] }) })
   ] });
 }
 var SECTIONS = [
-  { label: "Live", Panel: LiveHint },
+  { label: "Solo Live", Panel: LiveHint },
+  { label: "Fleet Live", Panel: FleetLiveHint },
+  { label: "Fleet", Panel: FleetPanel },
   { label: "Policies", Panel: PoliciesPanel },
   { label: "Rate Limit", Panel: RateLimitPanel },
   { label: "DLP", Panel: DlpPanel },
@@ -5975,33 +6735,34 @@ var SECTIONS = [
   { label: "Audit", Panel: AuditPanel },
   { label: "Settings", Panel: SettingsPanel }
 ];
+var TAKEOVER = /* @__PURE__ */ new Set(["Solo Live", "Fleet Live"]);
 var BANNER_HEX = ["white", "white", "white", "white", "white", "white"];
 function Banner({ cols }) {
   const wide = cols >= 82;
   if (!wide) {
-    return /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate" }),
-      /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " \u2014 security control center" })
+    return /* @__PURE__ */ jsxs11(Box11, { children: [
+      /* @__PURE__ */ jsx11(Text11, { bold: true, color: theme.accentBright, children: "SolonGate" }),
+      /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: " \u2014 security control center" })
     ] });
   }
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", children: [
-    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx9(Text9, { bold: true, color: BANNER_HEX[i], children: line }, i)),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", children: [
+    BANNER_FULL.map((line, i) => /* @__PURE__ */ jsx11(Text11, { bold: true, color: BANNER_HEX[i], children: line }, i)),
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: " security control center \xB7 manage policies, rate limits, DLP & more" })
   ] });
 }
 var SETTINGS_SECTION = SECTIONS.findIndex((s) => s.label === "Settings");
 function App() {
   const { exit } = useApp();
-  const [accounts, setAccounts] = useState9(() => listAccounts());
-  const [viewKey, setViewKey] = useState9(() => accounts[0]?.apiKey);
-  const [viewNonce, setViewNonce] = useState9(0);
-  const [section, setSection] = useState9(accounts.length === 0 ? SETTINGS_SECTION : 0);
-  const [focus, setFocus] = useState9("nav");
-  useEffect8(
+  const [accounts, setAccounts] = useState11(() => listAccounts());
+  const [viewKey, setViewKey] = useState11(() => accounts[0]?.apiKey);
+  const [viewNonce, setViewNonce] = useState11(0);
+  const [section, setSection] = useState11(accounts.length === 0 ? SETTINGS_SECTION : 0);
+  const [focus, setFocus] = useState11("nav");
+  useEffect9(
     () => onSectionRequest(() => {
-      const label = takePendingSection();
-      if (!label) return;
-      const idx = SECTIONS.findIndex((s) => s.label === label);
+      const label2 = takePendingSection();
+      if (!label2) return;
+      const idx = SECTIONS.findIndex((s) => s.label === label2);
       if (idx >= 0) {
         setSection(idx);
         setFocus("panel");
@@ -6009,9 +6770,9 @@ function App() {
     }),
     []
   );
-  const [help, setHelp] = useState9(false);
-  const [update2, setUpdate] = useState9({ kind: "idle" });
-  useEffect8(() => {
+  const [help, setHelp] = useState11(false);
+  const [update2, setUpdate] = useState11({ kind: "idle" });
+  useEffect9(() => {
     let alive = true;
     const run = () => void tuiUpdateFlow((s) => alive && setUpdate(s));
     run();
@@ -6025,7 +6786,7 @@ function App() {
   const cur = accounts[acctIdx];
   const rawEmail = cur?.email ?? "";
   const acctLabel2 = !cur ? "not logged in" : rawEmail || cur.user || cur.project || `account \u2026${cur.apiKey.slice(-4)}`;
-  useEffect8(() => {
+  useEffect9(() => {
     if (!cur || cur.email) return;
     let alive = true;
     api.auth.me().then((r) => {
@@ -6059,7 +6820,7 @@ function App() {
     setViewKey(next?.apiKey);
     setViewNonce((n) => n + 1);
   };
-  useEffect8(() => {
+  useEffect9(() => {
     try {
       ensureLocalLogOwner(enforcingKey());
     } catch {
@@ -6067,7 +6828,7 @@ function App() {
   }, [accounts.length]);
   const locked = accounts.length === 0;
   const effectiveSection = locked ? SETTINGS_SECTION : section;
-  useInput8((input, key) => {
+  useInput10((input, key) => {
     if (help) {
       setHelp(false);
       return;
@@ -6095,39 +6856,41 @@ function App() {
   });
   const { cols, rows } = useTermSize();
   const current = SECTIONS[effectiveSection];
-  if (help) return /* @__PURE__ */ jsx9(HelpOverlay, { cols, rows });
-  if (current.label === "Live" && focus === "panel") {
-    return /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: /* @__PURE__ */ jsx9(LivePanel, { active: true, focused: true }, viewNonce) });
+  if (help) return /* @__PURE__ */ jsx11(HelpOverlay, { cols, rows });
+  if (TAKEOVER.has(current.label) && focus === "panel") {
+    return /* @__PURE__ */ jsx11(Box11, { flexDirection: "column", width: cols, height: rows - 1, overflow: "hidden", children: current.label === "Fleet Live" ? /* @__PURE__ */ jsx11(FleetLivePanel, { active: true, focused: true }, viewNonce) : /* @__PURE__ */ jsx11(LivePanel, { active: true, focused: true }, viewNonce) });
   }
   const Panel = current.Panel;
-  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx9(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx9(Panel, { active: focus === "panel" || current.label !== "Live", focused: focus === "panel" });
+  const panelBody = current.label === "Settings" ? /* @__PURE__ */ jsx11(SettingsPanel, { active: true, focused: focus === "panel", viewApiKey: viewKey, onView: viewAccount, onAccountsChanged: syncAccounts }) : /* @__PURE__ */ jsx11(Panel, { active: focus === "panel" || !TAKEOVER.has(current.label), focused: focus === "panel" });
   return (
     // height rows-1 (not rows): once total output reaches stdout.rows ink stops
     // diffing and clearTerminal-repaints every frame, which slides the banner.
     // overflow hidden makes it a hard guarantee even if a panel over-renders.
-    /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows - 1, paddingX: 1, paddingTop: 1, overflow: "hidden", children: [
-      /* @__PURE__ */ jsx9(Banner, { cols }),
-      /* @__PURE__ */ jsxs9(Text9, { wrap: "truncate", children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "account: " }),
-        /* @__PURE__ */ jsx9(Text9, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
-        locked ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "  \xB7 Settings to add another" }),
-        update2.kind === "updating" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx9(Text9, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \xB7 restart (q, then solongate) to apply` }) : update2.kind === "available" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} out \xB7 Settings \u2192 UPDATES` }) : update2.kind === "needs-admin" ? /* @__PURE__ */ jsx9(Text9, { color: theme.warn, children: `  \u2191 v${update2.version} needs admin rights \xB7 Settings \u2192 UPDATES` }) : null
+    /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", width: cols, height: rows - 1, paddingX: 1, paddingTop: 1, overflow: "hidden", children: [
+      /* @__PURE__ */ jsx11(Banner, { cols }),
+      /* @__PURE__ */ jsxs11(Text11, { wrap: "truncate", children: [
+        /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "account: " }),
+        /* @__PURE__ */ jsx11(Text11, { color: locked ? theme.warn : theme.accentBright, bold: true, children: acctLabel2 }),
+        locked ? /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "  \xB7 log in from Settings to unlock the dataroom" }) : accounts.length > 1 ? /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: `  (${acctIdx + 1}/${accounts.length} \xB7 a switch \xB7 Settings to manage)` }) : /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "  \xB7 Settings to add another" }),
+        update2.kind === "updating" ? /* @__PURE__ */ jsx11(Text11, { color: theme.warn, children: `  \u2191 updating to v${update2.version}\u2026` }) : update2.kind === "updated" ? /* @__PURE__ */ jsx11(Text11, { color: theme.ok, bold: true, children: `  \u2191 v${update2.version} installed \xB7 restart (q, then solongate) to apply` }) : update2.kind === "available" ? /* @__PURE__ */ jsx11(Text11, { color: theme.warn, children: `  \u2191 v${update2.version} out \xB7 Settings \u2192 UPDATES` }) : update2.kind === "needs-admin" ? /* @__PURE__ */ jsx11(Text11, { color: theme.warn, children: `  \u2191 v${update2.version} needs admin rights \xB7 Settings \u2192 UPDATES` }) : null
       ] }),
-      /* @__PURE__ */ jsxs9(Box9, { marginTop: 1, flexGrow: 1, children: [
-        /* @__PURE__ */ jsx9(Box9, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
+      /* @__PURE__ */ jsxs11(Box11, { marginTop: 1, flexGrow: 1, children: [
+        /* @__PURE__ */ jsx11(Box11, { flexDirection: "column", flexShrink: 0, width: 16, borderStyle: "round", borderColor: focus === "nav" ? theme.accent : "gray", paddingX: 1, children: SECTIONS.map((s, i) => {
           const isCur = i === effectiveSection;
           const disabled = locked && s.label !== "Settings";
-          return /* @__PURE__ */ jsx9(Text9, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
+          return /* @__PURE__ */ jsx11(Text11, { color: isCur ? theme.accentBright : disabled ? theme.dim : void 0, bold: isCur, dimColor: disabled, children: (isCur ? "\u25B8 " : disabled ? "\u2298 " : "  ") + s.label }, s.label);
         }) }),
-        /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
+        /* @__PURE__ */ jsx11(Box11, { flexGrow: 1, minWidth: 0, borderStyle: "round", borderColor: focus === "panel" ? theme.accent : "gray", paddingX: 1, paddingY: 0, overflow: "hidden", children: panelBody })
       ] }, viewNonce),
-      /* @__PURE__ */ jsx9(Box9, { children: locked ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx9(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
+      /* @__PURE__ */ jsx11(Box11, { children: locked ? /* @__PURE__ */ jsx11(KeyHints, { hints: [["\u2192/enter", "open Settings"], ["n", "log in"], ["q", "quit"]] }) : focus === "nav" ? /* @__PURE__ */ jsx11(KeyHints, { hints: [["\u2191\u2193", "section"], ["\u2192/enter", "open"], ...accounts.length > 1 ? [["a", "account"]] : [], ["?", "help"], ["q", "quit"]] }) : /* @__PURE__ */ jsx11(KeyHints, { hints: [["\u2190/esc", "back"], ["\u2191\u2193", "in-panel"], ["space/s", "act"]] }) })
     ] })
   );
 }
 var HELP = [
   ["Global", [["\u2191\u2193", "move between sections"], ["\u2192 / enter", "open a section"], ["\u2190 / esc", "back to the menu"], ["?", "this help"], ["q", "quit"]]],
-  ["Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+  ["Solo Live", [["\u2191\u2193", "select a stream row"], ["enter", "full entry content"], ["w", "whitelist the selected DENY"], ["b", "block the selected ALLOW"], ["d / x / r", "filter denies / dlp / rate-limit"], ["f", "local / cloud filter"], ["/", "search"], ["s", "sessions (\u2191\u2193 pick, enter open)"], ["space", "copy mode (freeze)"]]],
+  ["Fleet Live", [["space", "pause the ticker"], ["d", "refusals only"], ["r", "refresh"], ["", "counters are since you opened it, so a still number means nothing is happening"]]],
+  ["Fleet", [["\u2191\u2193", "move through the groups and the people in them"], ["\u2192 / enter", "open one person"], ["i", "invite somebody"], ["n", "new group"], ["r", "rename the group"], ["c", "cycle its colour"], ["g", "file this person under a group"], ["p", "policy \u2014 on a group it applies to all of them, on a person it is an exception"], ["d", "delete the group / revoke the person"], ["R", "reports: yesterday, the schedule, and sending one now"]]],
   ["Policies", [["\u2191\u2193", "browse / select"], ["a", "activate (pin) selected policy"], ["x", "deactivate \u2014 no active policy"], ["enter", "open rules \u2192 open a rule"], ["space", "toggle a rule on/off"], ["e", "flip effect"], ["n", "new rule"], ["d", "delete rule"], ["m", "flip mode"], ["D", "dry-run the draft"], ["s", "save"], ["x", "discard"]]],
   ["Rate limit", [["\u2191\u2193", "field"], ["\u2190\u2192", "adjust (shift = \xB110)"], ["s", "save"]]],
   ["DLP", [["\u2191\u2193", "move"], ["space", "toggle a built-in pattern on/off"], ["m", "cycle mode"], ["a", "add custom pattern (name \u2192 glob, * = any chars)"], ["r", "add a ghost route (glob path to hide)"], ["d", "remove custom / route"], ["g", "ghost on/off"], ["s", "save \xB7 x discard"]]],
@@ -6136,21 +6899,21 @@ var HELP = [
   ["Accounts", [["a", "switch account (view another account logged in on this device)"], ["", "the header shows which account you are viewing; guard/logging keep the active key"]]]
 ];
 function HelpOverlay({ cols, rows }) {
-  return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
-    /* @__PURE__ */ jsx9(Box9, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: theme.accent, children: group }),
-      keys.map(([k, desc]) => /* @__PURE__ */ jsxs9(Text9, { children: [
-        /* @__PURE__ */ jsx9(Text9, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
-        /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: desc })
+  return /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", width: cols, height: rows, paddingX: 2, paddingTop: 1, children: [
+    /* @__PURE__ */ jsx11(Text11, { bold: true, color: theme.accentBright, children: "SolonGate \u2014 keyboard shortcuts" }),
+    /* @__PURE__ */ jsx11(Box11, { marginTop: 1, flexDirection: "column", children: HELP.map(([group, keys]) => /* @__PURE__ */ jsxs11(Box11, { flexDirection: "column", marginBottom: 1, children: [
+      /* @__PURE__ */ jsx11(Text11, { bold: true, color: theme.accent, children: group }),
+      keys.map(([k, desc]) => /* @__PURE__ */ jsxs11(Text11, { children: [
+        /* @__PURE__ */ jsx11(Text11, { color: theme.accentBright, children: ("  " + k).padEnd(16) }),
+        /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: desc })
       ] }, k))
     ] }, group)) }),
-    /* @__PURE__ */ jsx9(Text9, { color: theme.dim, children: "press any key to close" })
+    /* @__PURE__ */ jsx11(Text11, { color: theme.dim, children: "press any key to close" })
   ] });
 }
 
 // src/tui/index.tsx
-import { jsx as jsx10 } from "react/jsx-runtime";
+import { jsx as jsx12 } from "react/jsx-runtime";
 async function launchTui() {
   if (!process.stdout.isTTY || !process.stdin.isTTY) {
     process.stderr.write(
@@ -6175,7 +6938,7 @@ async function launchTui() {
   console.info = toFile("info");
   console.debug = toFile("debug");
   try {
-    const { waitUntilExit } = render(/* @__PURE__ */ jsx10(App, {}), { patchConsole: false });
+    const { waitUntilExit } = render(/* @__PURE__ */ jsx12(App, {}), { patchConsole: false });
     await waitUntilExit();
   } finally {
     Object.assign(console, saved);