@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/tui/screens/SecurityBaseline.js

@@ -0,0 +1,272 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Box, Text, useInput } from 'ink';
+import { S } from '../strings.js';
+import { readConfigOrDefault } from '../../shared/config-io.js';
+import { saveConfigAndReloadDaemon, statusForConfigSave } from '../lib/config-save.js';
+import { PATH_DENY_PATTERNS_DISPLAY } from '../../daemon/path-deny.js';
+import { TextField } from '../components/TextField.js';
+import { ScreenHeader, ScreenFooter, ScreenLayout } from '../components/ScreenChrome.js';
+import { validateRange } from '../lib/number-validate.js';
+import { URL_ACCESS_PRESETS } from '../../daemon/url-access-baseline.js';
+import { isValidCidr, isValidUrlGlobPattern, isValidUrlHostPattern, isValidUrlScheme, normalizeCidr, normalizeUrlGlobPattern, normalizeUrlHostPattern, normalizeUrlScheme, } from '../../shared/url-patterns.js';
+const ROW_ORDER = ['credprot', 'url', 'ttl', 'save', 'cancel'];
+const URL_ROW_ORDER = [
+    'cloud_metadata',
+    'unsafe_url_shapes',
+    'oob_callback_collectors',
+    'strict_internal_network',
+    'public_paste_and_file_drops',
+    'custom_hosts',
+    'custom_cidrs',
+    'custom_schemes',
+    'custom_patterns',
+    'back',
+];
+function customRuleKind(view) {
+    if (view === 'custom-hosts')
+        return 'hosts';
+    if (view === 'custom-cidrs')
+        return 'cidrs';
+    if (view === 'custom-schemes')
+        return 'schemes';
+    return 'url_patterns';
+}
+function customRuleTitle(kind) {
+    if (kind === 'hosts')
+        return 'Custom denied hosts';
+    if (kind === 'cidrs')
+        return 'Custom denied CIDRs';
+    if (kind === 'schemes')
+        return 'Custom denied schemes';
+    return 'Custom denied URL patterns';
+}
+function validateCustomRule(kind, value) {
+    if (kind === 'hosts') {
+        const normalized = normalizeUrlHostPattern(value);
+        return isValidUrlHostPattern(normalized)
+            ? { ok: true, value: normalized }
+            : { ok: false, message: 'Use a hostname, wildcard hostname, or IP literal - not a full URL.' };
+    }
+    if (kind === 'cidrs') {
+        const normalized = normalizeCidr(value);
+        return isValidCidr(normalized)
+            ? { ok: true, value: normalized }
+            : { ok: false, message: 'Use CIDR notation such as 192.168.0.0/16.' };
+    }
+    if (kind === 'schemes') {
+        const normalized = normalizeUrlScheme(value);
+        return isValidUrlScheme(normalized)
+            ? { ok: true, value: normalized }
+            : { ok: false, message: 'Use a scheme name without ://, for example gopher.' };
+    }
+    const normalized = normalizeUrlGlobPattern(value);
+    return isValidUrlGlobPattern(normalized)
+        ? { ok: true, value: normalized }
+        : { ok: false, message: 'Use a simple URL glob, not a regex.' };
+}
+export function SecurityBaseline({ onBack }) {
+    const [initial] = useState(() => readConfigOrDefault());
+    const [credProt, setCredProt] = useState(initial.policy.credential_protection);
+    const [ttl, setTtl] = useState(String(initial.policy.session_idle_ttl_hours));
+    const [view, setView] = useState('overview');
+    const [row, setRow] = useState('credprot');
+    const [urlRow, setUrlRow] = useState('cloud_metadata');
+    const [urlBaseline, setUrlBaseline] = useState(initial.policy.url_access_baseline);
+    const [ruleInput, setRuleInput] = useState('');
+    const [ruleError, setRuleError] = useState(null);
+    const [pendingDisable, setPendingDisable] = useState(false);
+    const [saveMsg, setSaveMsg] = useState(null);
+    const ttlV = validateRange(ttl, 1, 168);
+    const isDirty = credProt !== initial.policy.credential_protection ||
+        (ttlV.ok && ttlV.value !== initial.policy.session_idle_ttl_hours) ||
+        JSON.stringify(urlBaseline) !== JSON.stringify(initial.policy.url_access_baseline);
+    const performSave = async () => {
+        if (!ttlV.ok) {
+            setSaveMsg({ message: `${S.SAVE_ERROR}: validation failed` });
+            return;
+        }
+        const next = {
+            ...initial,
+            policy: {
+                ...initial.policy,
+                credential_protection: credProt,
+                session_idle_ttl_hours: ttlV.value,
+                url_access_baseline: urlBaseline,
+            },
+        };
+        const out = await saveConfigAndReloadDaemon(next);
+        setSaveMsg(statusForConfigSave(out, S.SAVE_SUCCESS));
+        if (out.ok)
+            setTimeout(onBack, 1200);
+    };
+    useInput((input, key) => {
+        if (key.escape) {
+            if (view.startsWith('custom-')) {
+                setRuleInput('');
+                setRuleError(null);
+                setView('url-baseline');
+                return;
+            }
+            if (view === 'url-baseline') {
+                setView('overview');
+                return;
+            }
+            if (pendingDisable) {
+                setPendingDisable(false);
+                return;
+            }
+            if (isDirty && saveMsg === null) {
+                setSaveMsg({ message: 'Unsaved changes — press Esc again to discard.' });
+                return;
+            }
+            onBack();
+            return;
+        }
+        if (view.startsWith('custom-')) {
+            const kind = customRuleKind(view);
+            if (input === 'e') {
+                const last = urlBaseline.custom_deny[kind].at(-1);
+                if (!last)
+                    return;
+                setRuleInput(last);
+                setRuleError(null);
+                setUrlBaseline((current) => ({
+                    ...current,
+                    custom_deny: {
+                        ...current.custom_deny,
+                        [kind]: current.custom_deny[kind].slice(0, -1),
+                    },
+                }));
+                return;
+            }
+            if (input === 'd') {
+                setUrlBaseline((current) => ({
+                    ...current,
+                    custom_deny: {
+                        ...current.custom_deny,
+                        [kind]: current.custom_deny[kind].slice(0, -1),
+                    },
+                }));
+                return;
+            }
+            if (key.return) {
+                const validation = validateCustomRule(kind, ruleInput);
+                if (!validation.ok) {
+                    setRuleError(validation.message);
+                    return;
+                }
+                setUrlBaseline((current) => ({
+                    ...current,
+                    custom_deny: {
+                        ...current.custom_deny,
+                        [kind]: current.custom_deny[kind].includes(validation.value)
+                            ? current.custom_deny[kind]
+                            : [...current.custom_deny[kind], validation.value],
+                    },
+                }));
+                setRuleInput('');
+                setRuleError(null);
+                return;
+            }
+            if (input === 's' && isDirty)
+                void performSave();
+            return;
+        }
+        if (view === 'url-baseline') {
+            if (key.tab || key.downArrow) {
+                const i = URL_ROW_ORDER.indexOf(urlRow);
+                if (i < URL_ROW_ORDER.length - 1)
+                    setUrlRow(URL_ROW_ORDER[i + 1]);
+                return;
+            }
+            if (key.upArrow) {
+                const i = URL_ROW_ORDER.indexOf(urlRow);
+                if (i > 0)
+                    setUrlRow(URL_ROW_ORDER[i - 1]);
+                return;
+            }
+            if (key.return || input === ' ') {
+                if (urlRow === 'back')
+                    setView('overview');
+                else if (urlRow === 'custom_hosts')
+                    setView('custom-hosts');
+                else if (urlRow === 'custom_cidrs')
+                    setView('custom-cidrs');
+                else if (urlRow === 'custom_schemes')
+                    setView('custom-schemes');
+                else if (urlRow === 'custom_patterns')
+                    setView('custom-patterns');
+                else {
+                    setUrlBaseline((current) => ({
+                        ...current,
+                        presets: {
+                            ...current.presets,
+                            [urlRow]: !current.presets[urlRow],
+                        },
+                    }));
+                }
+                return;
+            }
+            if (input === 's' && isDirty)
+                void performSave();
+            return;
+        }
+        if (key.tab || key.downArrow) {
+            const i = ROW_ORDER.indexOf(row);
+            if (i < ROW_ORDER.length - 1)
+                setRow(ROW_ORDER[i + 1]);
+            return;
+        }
+        if (key.upArrow) {
+            const i = ROW_ORDER.indexOf(row);
+            if (i > 0)
+                setRow(ROW_ORDER[i - 1]);
+            return;
+        }
+        if (key.return) {
+            if (row === 'credprot') {
+                if (credProt && !pendingDisable) {
+                    setPendingDisable(true);
+                    return;
+                }
+                setCredProt(!credProt);
+                setPendingDisable(false);
+                return;
+            }
+            if (row === 'url') {
+                setView('url-baseline');
+                return;
+            }
+            if (row === 'save')
+                void performSave();
+            else if (row === 'cancel')
+                onBack();
+            return;
+        }
+        if (input === 's' && isDirty && row !== 'ttl') {
+            void performSave();
+        }
+    });
+    const cell = (selected, label) => (_jsxs(Text, { color: selected ? 'cyan' : undefined, children: [selected ? '› ' : '  ', label] }));
+    const customDenyCount = urlBaseline.custom_deny.hosts.length +
+        urlBaseline.custom_deny.cidrs.length +
+        urlBaseline.custom_deny.schemes.length +
+        urlBaseline.custom_deny.url_patterns.length;
+    const activePresetCount = Object.values(urlBaseline.presets).filter(Boolean).length;
+    if (view.startsWith('custom-')) {
+        const kind = customRuleKind(view);
+        const title = customRuleTitle(kind);
+        return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: title, description: ['Enter adds a rule. e edits the last rule. d deletes the last rule.'] }), _jsxs(Box, { flexDirection: "column", children: [urlBaseline.custom_deny[kind].length === 0 ? _jsx(Text, { dimColor: true, children: "No entries" }) : null, urlBaseline.custom_deny[kind].map((entry) => (_jsx(Text, { children: `  ${entry}` }, entry)))] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(TextField, { label: "New rule", value: ruleInput, active: true, onChange: setRuleInput }), ruleError ? _jsx(Text, { color: "red", children: ruleError }) : null] }), _jsx(ScreenFooter, { hint: "Enter add \u00B7 e edit last \u00B7 d delete last \u00B7 s save \u00B7 Esc back", status: saveMsg ? _jsx(Text, { color: saveMsg.color, children: saveMsg.message }) : undefined })] }));
+    }
+    if (view === 'url-baseline') {
+        const presetRow = (key) => {
+            const preset = URL_ACCESS_PRESETS[key];
+            const enabled = urlBaseline.presets[key];
+            return (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsxs(Text, { color: urlRow === key ? 'cyan' : undefined, children: [urlRow === key ? '› ' : '  ', "[", enabled ? 'x' : ' ', "] ", preset.label, " ", enabled ? 'BLOCK' : 'ALLOW unless enabled'] }) }, key));
+        };
+        return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: "URL Access Baseline", description: ['Mode: deny-list only', 'Default action: ALLOW'] }), presetRow('cloud_metadata'), presetRow('unsafe_url_shapes'), presetRow('oob_callback_collectors'), presetRow('strict_internal_network'), presetRow('public_paste_and_file_drops'), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: "cyan", children: "Custom deny rules" }), cell(urlRow === 'custom_hosts', `Hosts: ${urlBaseline.custom_deny.hosts.length} entries`), cell(urlRow === 'custom_cidrs', `CIDRs: ${urlBaseline.custom_deny.cidrs.length} entries`), cell(urlRow === 'custom_schemes', `Schemes: ${urlBaseline.custom_deny.schemes.length} entries`), cell(urlRow === 'custom_patterns', `URL patterns: ${urlBaseline.custom_deny.url_patterns.length} entries`)] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "Always allowed by default" }), _jsx(Text, { dimColor: true, children: "localhost, 127.0.0.1, ::1, 0.0.0.0" }), _jsx(Text, { dimColor: true, children: "private LAN, normal public http:// and https:// URLs" })] }), cell(urlRow === 'back', '[Back]'), _jsx(ScreenFooter, { hint: "Tab/\u2191\u2193: row \u00B7 Enter/Space: toggle \u00B7 s save \u00B7 Esc back", status: saveMsg ? _jsx(Text, { color: saveMsg.color, children: saveMsg.message }) : undefined })] }));
+    }
+    return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: S.SECURITY_TITLE, description: [...S.DESC_SECURITY_BASELINE] }), cell(row === 'credprot', `${S.CREDENTIAL_PROTECTION_LABEL}: ${credProt ? 'enabled' : 'DISABLED'}`), row === 'credprot' && pendingDisable ? (_jsxs(Box, { flexDirection: "column", marginLeft: 4, marginTop: 1, children: [_jsx(Text, { color: "red", children: S.CREDENTIAL_PROTECTION_WARNING }), _jsx(Text, { children: S.CREDENTIAL_PROTECTION_DENY_LIST_HEADER }), PATH_DENY_PATTERNS_DISPLAY.map((p) => (_jsx(Text, { dimColor: true, children: `  • ${p}` }, p))), _jsx(Text, { color: "yellow", children: S.CREDENTIAL_PROTECTION_CONFIRM })] })) : null, _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [cell(row === 'url', `URL Access Baseline: ${urlBaseline.enabled ? 'enabled' : 'disabled'}`), _jsx(Text, { dimColor: true, children: `  Default action: ALLOW · active block categories: ${activePresetCount} · custom deny rules: ${customDenyCount}` })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: S.SESSION_TTL_LABEL }), _jsx(TextField, { label: "", value: ttl, active: row === 'ttl', onChange: setTtl }), !ttlV.ok && row === 'ttl' ? _jsx(Text, { color: "red", children: ttlV.error }) : null] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [cell(row === 'save', '[Save]'), cell(row === 'cancel', '[Cancel]')] }), _jsx(ScreenFooter, { hint: "Tab/\u2191\u2193: row \u00B7 Enter: act \u00B7 Esc: back", status: saveMsg ? _jsx(Text, { color: saveMsg.color, children: saveMsg.message }) : undefined })] }));
+}
+//# sourceMappingURL=SecurityBaseline.js.map

package/dist/tui/screens/SecurityBaseline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityBaseline.js","sourceRoot":"","sources":["../../../src/tui/screens/SecurityBaseline.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAyB,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EACL,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAqBtC,MAAM,SAAS,GAAU,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACtE,MAAM,aAAa,GAAa;IAC9B,gBAAgB;IAChB,mBAAmB;IACnB,yBAAyB;IACzB,yBAAyB;IACzB,6BAA6B;IAC7B,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,MAAM;CACP,CAAC;AAIF,SAAS,cAAc,CAAC,IAAU;IAChC,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,IAAoB;IAC3C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,qBAAqB,CAAC;IACnD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,qBAAqB,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,uBAAuB,CAAC;IACvD,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAoB,EAAE,KAAa;IAG7D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,qBAAqB,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;YACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,WAAW,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;YACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,gBAAgB,CAAC,UAAU,CAAC;YACjC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;YACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,qBAAqB,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE;QACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,MAAM,EAAS;IAChD,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAS,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAO,UAAU,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAM,UAAU,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,gBAAgB,CAAC,CAAC;IAC/D,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnF,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAExC,MAAM,OAAO,GACX,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,qBAAqB;QACjD,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAErF,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,qBAAqB,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAW;YACnB,GAAG,OAAO;YACV,MAAM,EAAE;gBACN,GAAG,OAAO,CAAC,MAAM;gBACjB,qBAAqB,EAAE,QAAQ;gBAC/B,sBAAsB,EAAE,IAAI,CAAC,KAAK;gBAClC,mBAAmB,EAAE,WAAW;aACjC;SACF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClD,UAAU,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,EAAE;YAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,YAAY,CAAC,EAAE,CAAC,CAAC;gBACjB,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,CAAC,cAAc,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,OAAO,CAAC,UAAU,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACnB,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBAChC,UAAU,CAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC3B,GAAG,OAAO;oBACV,WAAW,EAAE;wBACX,GAAG,OAAO,CAAC,WAAW;wBACtB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;qBAC/C;iBACF,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAClB,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC3B,GAAG,OAAO;oBACV,WAAW,EAAE;wBACX,GAAG,OAAO,CAAC,WAAW;wBACtB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;qBAC/C;iBACF,CAAC,CAAC,CAAC;gBACJ,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACvD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;oBACnB,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC3B,GAAG,OAAO;oBACV,WAAW,EAAE;wBACX,GAAG,OAAO,CAAC,WAAW;wBACtB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;4BAC1D,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;4BAC3B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC;qBACrD;iBACF,CAAC,CAAC,CAAC;gBACJ,YAAY,CAAC,EAAE,CAAC,CAAC;gBACjB,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,GAAG,IAAI,OAAO;gBAAE,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAS,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAChC,IAAI,MAAM,KAAK,MAAM;oBAAE,OAAO,CAAC,UAAU,CAAC,CAAC;qBACtC,IAAI,MAAM,KAAK,cAAc;oBAAE,OAAO,CAAC,cAAc,CAAC,CAAC;qBACvD,IAAI,MAAM,KAAK,cAAc;oBAAE,OAAO,CAAC,cAAc,CAAC,CAAC;qBACvD,IAAI,MAAM,KAAK,gBAAgB;oBAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;qBAC3D,IAAI,MAAM,KAAK,iBAAiB;oBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;qBAC7D,CAAC;oBACJ,cAAc,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC3B,GAAG,OAAO;wBACV,OAAO,EAAE;4BACP,GAAG,OAAO,CAAC,OAAO;4BAClB,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;yBACnC;qBACF,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,KAAK,KAAK,GAAG,IAAI,OAAO;gBAAE,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACvB,IAAI,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;oBAChC,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACvB,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,OAAO,CAAC,cAAc,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,KAAK,MAAM;gBAAE,KAAK,WAAW,EAAE,CAAC;iBAClC,IAAI,GAAG,KAAK,QAAQ;gBAAE,MAAM,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,OAAO,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAC9C,KAAK,WAAW,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,QAAiB,EAAE,KAAa,EAAsB,EAAE,CAAC,CACrE,MAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACvC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACtB,KAAK,IACD,CACR,CAAC;IAEF,MAAM,eAAe,GACnB,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM;QACpC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM;QACpC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM;QACtC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC;IAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEpF,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CACL,MAAC,YAAY,eACX,KAAC,YAAY,IAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,oEAAoE,CAAC,GAAI,EACnH,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,aACxB,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,QAAQ,iCAAkB,CAAC,CAAC,CAAC,IAAI,EACpF,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC5C,KAAC,IAAI,cAAc,KAAK,KAAK,EAAE,IAApB,KAAK,CAAuB,CACxC,CAAC,IACE,EACN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,SAAS,IAAC,KAAK,EAAC,UAAU,EAAC,KAAK,EAAE,SAAS,EAAE,MAAM,QAAC,QAAQ,EAAE,YAAY,GAAI,EAC9E,SAAS,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,SAAS,GAAQ,CAAC,CAAC,CAAC,IAAI,IACpD,EACN,KAAC,YAAY,IACX,IAAI,EAAC,iFAA6D,EAClE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,YAAG,OAAO,CAAC,OAAO,GAAQ,CAAC,CAAC,CAAC,SAAS,GAClF,IACW,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,CAAC,GAAc,EAAsB,EAAE;YACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzC,OAAO,CACL,KAAC,GAAG,IAAW,aAAa,EAAC,QAAQ,EAAC,SAAS,EAAE,CAAC,YAChD,MAAC,IAAI,IAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAC3B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,QAAI,MAAM,CAAC,KAAK,OAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,IAC7E,IAJC,GAAG,CAKP,CACP,CAAC;QACJ,CAAC,CAAC;QAEF,OAAO,CACL,MAAC,YAAY,eACX,KAAC,YAAY,IAAC,KAAK,EAAC,qBAAqB,EAAC,WAAW,EAAE,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,GAAI,EAC3G,SAAS,CAAC,gBAAgB,CAAC,EAC3B,SAAS,CAAC,mBAAmB,CAAC,EAC9B,SAAS,CAAC,yBAAyB,CAAC,EACpC,SAAS,CAAC,yBAAyB,CAAC,EACpC,SAAS,CAAC,6BAA6B,CAAC,EAEzC,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,KAAK,EAAC,MAAM,kCAAyB,EAC1C,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,UAAU,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,EACzF,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,UAAU,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,EACzF,IAAI,CAAC,MAAM,KAAK,gBAAgB,EAAE,YAAY,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,EAC/F,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,iBAAiB,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,UAAU,CAAC,IACvG,EACN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,QAAQ,gDAAiC,EAC/C,KAAC,IAAI,IAAC,QAAQ,yDAA0C,EACxD,KAAC,IAAI,IAAC,QAAQ,2EAA4D,IACtE,EACL,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,QAAQ,CAAC,EAClC,KAAC,YAAY,IACX,IAAI,EAAC,gFAAuD,EAC5D,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,YAAG,OAAO,CAAC,OAAO,GAAQ,CAAC,CAAC,CAAC,SAAS,GAClF,IACW,CAChB,CAAC;IACJ,CAAC;IAED,OAAO,CACL,MAAC,YAAY,eACX,KAAC,YAAY,IAAC,KAAK,EAAE,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,GAAI,EAEpF,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,GAAG,CAAC,CAAC,2BAA2B,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAElG,GAAG,KAAK,UAAU,IAAI,cAAc,CAAC,CAAC,CAAC,CACtC,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,aACrD,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,CAAC,CAAC,6BAA6B,GAAQ,EAC1D,KAAC,IAAI,cAAE,CAAC,CAAC,sCAAsC,GAAQ,EACtD,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACrC,KAAC,IAAI,IAAS,QAAQ,kBAAE,OAAO,CAAC,EAAE,IAAvB,CAAC,CAA8B,CAC3C,CAAC,EACF,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,CAAC,CAAC,6BAA6B,GAAQ,IACzD,CACP,CAAC,CAAC,CAAC,IAAI,EAER,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACtC,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,wBAAwB,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAC5F,KAAC,IAAI,IAAC,QAAQ,kBAAE,sDAAsD,iBAAiB,yBAAyB,eAAe,EAAE,GAAQ,IACrI,EAEN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,QAAQ,kBAAE,CAAC,CAAC,iBAAiB,GAAQ,EAC3C,KAAC,SAAS,IACR,KAAK,EAAC,EAAE,EACR,KAAK,EAAE,GAAG,EACV,MAAM,EAAE,GAAG,KAAK,KAAK,EACrB,QAAQ,EAAE,MAAM,GAChB,EACD,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,YAAE,IAAI,CAAC,KAAK,GAAQ,CAAC,CAAC,CAAC,IAAI,IACrE,EAEN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACtC,IAAI,CAAC,GAAG,KAAK,MAAM,EAAE,QAAQ,CAAC,EAC9B,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,UAAU,CAAC,IAC/B,EAEN,KAAC,YAAY,IACX,IAAI,EAAC,0DAAsC,EAC3C,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,YAAG,OAAO,CAAC,OAAO,GAAQ,CAAC,CAAC,CAAC,SAAS,GAClF,IACW,CAChB,CAAC;AACJ,CAAC"}

package/dist/tui/screens/Stats.d.ts

@@ -0,0 +1,7 @@
+import React from 'react';
+interface Props {
+    onBack: () => void;
+}
+export declare function Stats({ onBack }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=Stats.d.ts.map

package/dist/tui/screens/Stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Stats.d.ts","sourceRoot":"","sources":["../../../src/tui/screens/Stats.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AASnD,UAAU,KAAK;IACb,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB;AAED,wBAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CA0D3D"}

package/dist/tui/screens/Stats.js

@@ -0,0 +1,36 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { Box, Text, useInput } from 'ink';
+import { decisionHistogram, checkVgeHealth } from '../lib/stats.js';
+import { activeSessionCount } from '../lib/session-files.js';
+import { loadConfig, getCurrentConfig } from '../../daemon/tool-policy.js';
+import { DEFAULT_CONFIG } from '../../shared/config-schema.js';
+import { ScreenHeader, ScreenFooter, ScreenLayout } from '../components/ScreenChrome.js';
+import { S } from '../strings.js';
+export function Stats({ onBack }) {
+    const [hist, setHist] = useState(() => decisionHistogram());
+    const [sessions, setSessions] = useState(() => activeSessionCount());
+    const [health, setHealth] = useState(null);
+    useEffect(() => {
+        let cancelled = false;
+        const refresh = async () => {
+            setHist(decisionHistogram());
+            setSessions(activeSessionCount());
+            try {
+                loadConfig();
+            }
+            catch { /* config may be missing — fall back to defaults */ }
+            const cfg = getCurrentConfig() ?? DEFAULT_CONFIG;
+            const h = await checkVgeHealth(cfg.vge.api_url, cfg.vge.api_key_input || null);
+            if (!cancelled)
+                setHealth(h);
+        };
+        void refresh();
+        const t = setInterval(() => void refresh(), 5_000);
+        return () => { cancelled = true; clearInterval(t); };
+    }, []);
+    useInput((_input, key) => { if (key.escape)
+        onBack(); });
+    return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: "Stats", description: [...S.DESC_STATS] }), _jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsx(Text, { bold: true, children: "HITL decisions" }), _jsxs(Text, { color: "green", children: ["  allow once         ", hist.allowOnce] }), _jsxs(Text, { color: "green", children: ["  allow for session  ", hist.allowSession] }), _jsxs(Text, { color: "red", children: ["  block              ", hist.block] }), _jsxs(Text, { color: "yellow", children: ["  pending gauge      ", hist.pending] })] }), _jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsx(Text, { bold: true, children: "VGE signals" }), _jsxs(Text, { color: "red", children: ["  explicit block     ", hist.explicitBlockSignals] }), _jsxs(Text, { color: "yellow", children: ["  escalate           ", hist.escalateSignals] }), _jsxs(Text, { color: "blue", children: ["  soft signal        ", hist.softSignals] }), _jsxs(Text, { color: "green", children: ["  allow signal       ", hist.allowSignals] })] }), _jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsx(Text, { bold: true, children: "VGE health" }), health == null ? (_jsx(Text, { dimColor: true, children: "  checking\u2026" })) : health.reachable ? (_jsxs(Text, { color: "green", children: ["  \u2713 reachable \u00B7 ", health.latencyMs, "ms \u00B7 status ", health.status] })) : (_jsxs(Text, { color: "red", children: ["  \u2717 unreachable \u00B7 ", health.error ?? `status ${String(health.status)}`] }))] }), _jsxs(Text, { bold: true, children: ["Sessions on disk: ", sessions] }), _jsx(ScreenFooter, { hint: "Esc: back \u00B7 auto-refresh every 5s" })] }));
+}
+//# sourceMappingURL=Stats.js.map

package/dist/tui/screens/Stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Stats.js","sourceRoot":"","sources":["../../../src/tui/screens/Stats.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAA0C,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAMlC,MAAM,UAAU,KAAK,CAAC,EAAE,MAAM,EAAS;IACrC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAoB,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAS,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAmB,IAAI,CAAC,CAAC;IAE7D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACxC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC7B,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC;gBAAC,UAAU,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;YACnF,MAAM,GAAG,GAAG,gBAAgB,EAAE,IAAI,cAAc,CAAC;YACjD,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,SAAS;gBAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,OAAO,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QACnD,OAAO,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,QAAQ,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,OAAO,CACL,MAAC,YAAY,eACX,KAAC,YAAY,IAAC,KAAK,EAAC,OAAO,EAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAI,EAE9D,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,KAAC,IAAI,IAAC,IAAI,qCAAsB,EAChC,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,sCAAuB,IAAI,CAAC,SAAS,IAAQ,EAChE,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,sCAAuB,IAAI,CAAC,YAAY,IAAQ,EACnE,MAAC,IAAI,IAAC,KAAK,EAAC,KAAK,sCAAuB,IAAI,CAAC,KAAK,IAAQ,EAC1D,MAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,sCAAuB,IAAI,CAAC,OAAO,IAAQ,IAC3D,EAEN,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,KAAC,IAAI,IAAC,IAAI,kCAAmB,EAC7B,MAAC,IAAI,IAAC,KAAK,EAAC,KAAK,sCAAuB,IAAI,CAAC,oBAAoB,IAAQ,EACzE,MAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,sCAAuB,IAAI,CAAC,eAAe,IAAQ,EACvE,MAAC,IAAI,IAAC,KAAK,EAAC,MAAM,sCAAuB,IAAI,CAAC,WAAW,IAAQ,EACjE,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,sCAAuB,IAAI,CAAC,YAAY,IAAQ,IAC/D,EAEN,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,KAAC,IAAI,IAAC,IAAI,iCAAkB,EAC3B,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAChB,KAAC,IAAI,IAAC,QAAQ,uCAAmB,CAClC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CACrB,MAAC,IAAI,IAAC,KAAK,EAAC,OAAO,2CAAkB,MAAM,CAAC,SAAS,uBAAc,MAAM,CAAC,MAAM,IAAQ,CACzF,CAAC,CAAC,CAAC,CACF,MAAC,IAAI,IAAC,KAAK,EAAC,KAAK,6CAAoB,MAAM,CAAC,KAAK,IAAI,UAAU,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAQ,CAC/F,IACG,EAEN,MAAC,IAAI,IAAC,IAAI,yCAAoB,QAAQ,IAAQ,EAE9C,KAAC,YAAY,IAAC,IAAI,EAAC,wCAAmC,GAAG,IAC5C,CAChB,CAAC;AACJ,CAAC"}

package/dist/tui/screens/ToolsPolicy.d.ts

@@ -0,0 +1,7 @@
+import React from 'react';
+interface Props {
+    onBack: () => void;
+}
+export declare function ToolsPolicy({ onBack }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=ToolsPolicy.d.ts.map

package/dist/tui/screens/ToolsPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolsPolicy.d.ts","sourceRoot":"","sources":["../../../src/tui/screens/ToolsPolicy.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAexC,UAAU,KAAK;IACb,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB;AAMD,wBAAgB,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAsHjE"}

package/dist/tui/screens/ToolsPolicy.js

@@ -0,0 +1,87 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Box, Text, useInput } from 'ink';
+import { S } from '../strings.js';
+import { ScreenHeader, ScreenFooter, ScreenLayout } from '../components/ScreenChrome.js';
+import { readConfigOrDefault } from '../../shared/config-io.js';
+import { saveConfigAndReloadDaemon, statusForConfigSave } from '../lib/config-save.js';
+import { cycleGate, hasBuiltInToolDefaultDrift, restoreBuiltInToolDefaults, toggleAnalyze, sortToolNames, } from '../lib/tools-policy-ops.js';
+const UNSAVED_MESSAGE = 'Unsaved changes — press Esc again to discard.';
+export function ToolsPolicy({ onBack }) {
+    const [initial] = useState(() => readConfigOrDefault());
+    const [tools, setTools] = useState({ ...initial.tools });
+    const [row, setRow] = useState(0);
+    const [col, setCol] = useState('gate');
+    const [saveMsg, setSaveMsg] = useState(null);
+    const names = sortToolNames(Object.keys(tools));
+    const isDirty = JSON.stringify(tools) !== JSON.stringify(initial.tools);
+    const defaultDrift = hasBuiltInToolDefaultDrift(tools);
+    const performSave = async () => {
+        const next = { ...initial, tools };
+        const out = await saveConfigAndReloadDaemon(next);
+        setSaveMsg(statusForConfigSave(out, S.SAVE_SUCCESS));
+        if (out.ok)
+            setTimeout(onBack, 1200);
+    };
+    useInput((_input, key) => {
+        if (key.escape) {
+            if (isDirty && saveMsg?.message !== UNSAVED_MESSAGE) {
+                setSaveMsg({ message: UNSAVED_MESSAGE });
+                return;
+            }
+            onBack();
+            return;
+        }
+        if (key.upArrow) {
+            setRow((r) => Math.max(0, r - 1));
+            return;
+        }
+        if (key.downArrow) {
+            setRow((r) => Math.min(names.length - 1, r + 1));
+            return;
+        }
+        if (key.leftArrow) {
+            setCol('gate');
+            return;
+        }
+        if (key.rightArrow) {
+            setCol('analyze');
+            return;
+        }
+        if (key.return) {
+            const name = names[row];
+            if (!name)
+                return;
+            const cur = tools[name];
+            if (!cur)
+                return;
+            const updated = col === 'gate'
+                ? { ...cur, gate: cycleGate(cur.gate) }
+                : { ...cur, analyze_output: toggleAnalyze(cur.analyze_output) };
+            setTools({ ...tools, [name]: updated });
+            return;
+        }
+        if (_input === 's' && isDirty) {
+            void performSave();
+            return;
+        }
+        if (_input === 'r') {
+            if (!defaultDrift) {
+                setSaveMsg({ message: 'Built-in defaults already active.' });
+                return;
+            }
+            setTools(restoreBuiltInToolDefaults(tools));
+            setSaveMsg({ message: 'Built-in defaults restored; press s save.' });
+        }
+    });
+    return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: S.TOOLS_POLICY_TITLE, description: [...S.DESC_TOOLS_POLICY] }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: S.TOOLS_POLICY_IDE_HITL_NOTE }) }), defaultDrift ? (_jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: "Built-in tool defaults differ; press r to restore safe defaults." }) })) : null, _jsxs(Box, { children: [_jsx(Box, { width: 20, children: _jsx(Text, { dimColor: true, children: "Tool" }) }), _jsx(Box, { width: 12, children: _jsx(Text, { dimColor: true, children: "Gate" }) }), _jsx(Box, { width: 16, children: _jsx(Text, { dimColor: true, children: "analyze_output" }) })] }), names.map((name, i) => {
+                const t = tools[name];
+                if (!t)
+                    return null;
+                const onRow = i === row;
+                const gateSel = onRow && col === 'gate';
+                const anaSel = onRow && col === 'analyze';
+                return (_jsxs(Box, { children: [_jsx(Box, { width: 20, children: _jsxs(Text, { color: onRow ? 'cyan' : undefined, children: [onRow ? '› ' : '  ', name] }) }), _jsx(Box, { width: 12, children: _jsx(Text, { color: gateSel ? 'cyan' : undefined, inverse: gateSel, children: t.gate }) }), _jsx(Box, { width: 16, children: _jsx(Text, { color: anaSel ? 'cyan' : undefined, inverse: anaSel, children: String(t.analyze_output) }) })] }, name));
+            }), _jsx(ScreenFooter, { hint: "\u2191\u2193 row \u00B7 \u2190\u2192 column \u00B7 Enter cycle \u00B7 r defaults \u00B7 s save \u00B7 Esc back", status: saveMsg ? _jsx(Text, { color: saveMsg.color, children: saveMsg.message }) : undefined })] }));
+}
+//# sourceMappingURL=ToolsPolicy.js.map

package/dist/tui/screens/ToolsPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolsPolicy.js","sourceRoot":"","sources":["../../../src/tui/screens/ToolsPolicy.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAyB,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,0BAA0B,EAC1B,aAAa,EACb,aAAa,GACd,MAAM,4BAA4B,CAAC;AASpC,MAAM,eAAe,GAAG,+CAA+C,CAAC;AAExE,MAAM,UAAU,WAAW,CAAC,EAAE,MAAM,EAAS;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAS,GAAG,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAA6B,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAS,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA0B,IAAI,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAEvD,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,MAAM,IAAI,GAAW,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClD,UAAU,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,EAAE;YAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,QAAQ,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACvB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,OAAO,IAAI,OAAO,EAAE,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,UAAU,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI;gBAAE,OAAO;YAClB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG;gBAAE,OAAO;YACjB,MAAM,OAAO,GACX,GAAG,KAAK,MAAM;gBACZ,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACvC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,UAAU,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,QAAQ,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,UAAU,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,YAAY,eACX,KAAC,YAAY,IAAC,KAAK,EAAE,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,GAAI,EACpF,KAAC,GAAG,IAAC,YAAY,EAAE,CAAC,YAClB,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,CAAC,CAAC,0BAA0B,GAAQ,GACtD,EACL,YAAY,CAAC,CAAC,CAAC,CACd,KAAC,GAAG,IAAC,YAAY,EAAE,CAAC,YAClB,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,iFAAwE,GACxF,CACP,CAAC,CAAC,CAAC,IAAI,EACR,MAAC,GAAG,eACF,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YAAE,KAAC,IAAI,IAAC,QAAQ,2BAAY,GAAM,EAChD,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YAAE,KAAC,IAAI,IAAC,QAAQ,2BAAY,GAAM,EAChD,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YAAE,KAAC,IAAI,IAAC,QAAQ,qCAAsB,GAAM,IACtD,EACL,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACrB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtB,IAAI,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACpB,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC;gBACxB,MAAM,OAAO,GAAG,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,KAAK,SAAS,CAAC;gBAC1C,OAAO,CACL,MAAC,GAAG,eACF,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,MAAC,IAAI,IAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACpC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACnB,IAAI,IACA,GACH,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,YACxD,CAAC,CAAC,IAAI,GACF,GACH,EACN,KAAC,GAAG,IAAC,KAAK,EAAE,EAAE,YACZ,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,YACtD,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,GACpB,GACH,KAhBE,IAAI,CAiBR,CACP,CAAC;YACJ,CAAC,CAAC,EACF,KAAC,YAAY,IACX,IAAI,EAAC,gHAAmE,EACxE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAE,OAAO,CAAC,KAAK,YAAG,OAAO,CAAC,OAAO,GAAQ,CAAC,CAAC,CAAC,SAAS,GAClF,IACW,CAChB,CAAC;AACJ,CAAC"}

package/dist/tui/screens/ViewConfig.d.ts

@@ -0,0 +1,9 @@
+import React from 'react';
+import type { DaemonStatusOutcome } from '../lib/daemon-client.js';
+interface Props {
+    onBack: () => void;
+    daemonStatus?: DaemonStatusOutcome;
+}
+export declare function ViewConfig({ onBack, daemonStatus }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=ViewConfig.d.ts.map

package/dist/tui/screens/ViewConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ViewConfig.d.ts","sourceRoot":"","sources":["../../../src/tui/screens/ViewConfig.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4B,MAAM,OAAO,CAAC;AAmBjD,OAAO,KAAK,EAA0B,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE3F,UAAU,KAAK;IACb,MAAM,EAAE,MAAM,IAAI,CAAC;IACnB,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAoID,wBAAgB,UAAU,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAqF9E"}

package/dist/tui/screens/ViewConfig.js

@@ -0,0 +1,117 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useMemo, useState } from 'react';
+import * as path from 'path';
+import { Box, Text, useInput } from 'ink';
+import { S } from '../strings.js';
+import { CC_BINARY_SHA_PREFIX_LEN, ccContractNextAction, getCcContractHealth, } from '../../daemon/cc-contract-status.js';
+import { readConfigOrDefault, redactConfig, resolveConfigPath, writeRedactedExport, } from '../../shared/config-io.js';
+import { ScreenHeader, ScreenFooter, ScreenLayout } from '../components/ScreenChrome.js';
+import { sortToolNames } from '../lib/tools-policy-ops.js';
+const LABEL_WIDTH = 32;
+const VALUE_WIDTH = 44;
+const PATH_WIDTH = 72;
+function truncate(value, width) {
+    if (value.length <= width)
+        return value;
+    if (width <= 3)
+        return value.slice(0, width);
+    return `${value.slice(0, width - 3)}...`;
+}
+function truncateMiddle(value, width) {
+    if (value.length <= width)
+        return value;
+    if (width <= 3)
+        return value.slice(0, width);
+    const tailLength = Math.min(28, Math.floor((width - 3) / 2));
+    const headLength = width - 3 - tailLength;
+    return `${value.slice(0, headLength)}...${value.slice(value.length - tailLength)}`;
+}
+function boolText(value) {
+    return value ? 'on' : 'off';
+}
+function field(label, value, color) {
+    return (_jsxs(Box, { children: [_jsx(Box, { width: LABEL_WIDTH, children: _jsx(Text, { dimColor: true, children: label }) }), _jsx(Box, { width: VALUE_WIDTH, children: _jsx(Text, { color: color, children: truncate(value, VALUE_WIDTH) }) })] }));
+}
+function wideField(label, value, color) {
+    return (_jsxs(Box, { children: [_jsx(Box, { width: LABEL_WIDTH, children: _jsx(Text, { dimColor: true, children: label }) }), _jsx(Box, { children: _jsx(Text, { color: color, children: value }) })] }));
+}
+function section(title) {
+    return (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: "cyan", children: title }) }));
+}
+function fromDaemonStatus(status) {
+    return {
+        source: 'daemon',
+        daemonNote: null,
+        state: status.state,
+        l0RedactionAvailable: status.l0RedactionAvailable,
+        reason: status.reason,
+        claudeVersion: status.claudeVersion,
+        binaryPath: status.binaryPath,
+        binarySha256: status.binarySha256,
+        checkedAt: status.checkedAt,
+        liveContract: status.liveContract,
+    };
+}
+function fromLocalHealth(health, daemonStatus) {
+    const daemonNote = daemonStatus?.ok === false
+        ? `daemon ${daemonStatus.reason.replace('_', ' ')}`
+        : 'daemon status not loaded';
+    return {
+        source: 'local read-only',
+        daemonNote,
+        state: health.state,
+        l0RedactionAvailable: health.l0RedactionAvailable,
+        reason: health.reason,
+        claudeVersion: health.claudeVersion,
+        binaryPath: health.binaryPath,
+        binarySha256: health.binarySha256,
+        checkedAt: health.checkedAt,
+        liveContract: health.liveContract,
+    };
+}
+function runtimeStatusView(daemonStatus) {
+    if (daemonStatus?.ok && daemonStatus.ccContract) {
+        return fromDaemonStatus(daemonStatus.ccContract);
+    }
+    return fromLocalHealth(getCcContractHealth(), daemonStatus);
+}
+function stateColor(state) {
+    if (state === 'healthy')
+        return 'green';
+    if (state === 'failed')
+        return 'red';
+    return 'yellow';
+}
+function runtimeSection(status) {
+    const color = stateColor(status.state);
+    const sha = status.binarySha256 ? `${status.binarySha256.slice(0, CC_BINARY_SHA_PREFIX_LEN)}...` : '(unknown)';
+    return (_jsxs(_Fragment, { children: [section('Runtime'), field('status_source', status.source), status.daemonNote ? field('daemon_note', status.daemonNote, 'yellow') : null, field('contract_state', status.state, color), field('l0_replacement', status.l0RedactionAvailable ? 'enabled' : 'disabled', status.l0RedactionAvailable ? 'green' : 'yellow'), field('claude_version', status.claudeVersion ?? '(unknown)'), field('binary_path', status.binaryPath ? truncateMiddle(status.binaryPath, VALUE_WIDTH) : '(unknown)'), field('binary_sha256', sha), field('live_contract', status.liveContract ?? '(unknown)'), field('checked_at', status.checkedAt ?? '(never)'), field('reason', status.reason, status.reason === 'healthy' ? 'green' : 'yellow'), wideField('next_action', ccContractNextAction(status.reason), status.reason === 'healthy' ? 'green' : 'yellow')] }));
+}
+export function ViewConfig({ onBack, daemonStatus }) {
+    const [config] = useState(() => readConfigOrDefault());
+    const runtimeStatus = useMemo(() => runtimeStatusView(daemonStatus), [daemonStatus]);
+    const [exportMsg, setExportMsg] = useState(null);
+    useInput((input, key) => {
+        if (key.escape)
+            onBack();
+        else if (input === 'e') {
+            const r = writeRedactedExport(config);
+            setExportMsg(r.ok ? `Exported redacted config: ${path.basename(r.path)}` : `Export failed: ${r.message}`);
+        }
+    });
+    const r = redactConfig(config);
+    const toolNames = sortToolNames(Object.keys(r.tools));
+    const allowlist = r.policy.url_allowlist;
+    const urlBaseline = r.policy.url_access_baseline;
+    const customDenyCount = urlBaseline.custom_deny.hosts.length +
+        urlBaseline.custom_deny.cidrs.length +
+        urlBaseline.custom_deny.schemes.length +
+        urlBaseline.custom_deny.url_patterns.length;
+    return (_jsxs(ScreenLayout, { children: [_jsx(ScreenHeader, { title: S.VIEW_CONFIG_TITLE, description: [...S.DESC_VIEW_CONFIG] }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { dimColor: true, children: truncateMiddle(resolveConfigPath(), PATH_WIDTH) }) }), runtimeSection(runtimeStatus), section('VGE'), field('schema', r.version), field('api_url', r.vge.api_url), field('client_id', r.vge.client_id), field('client_id_source', r.vge.client_id_source), field('api_key_input', r.vge.api_key_input), field('api_key_output', r.vge.api_key_output), field('verified_at', r.vge.verified_at), section('Tools'), _jsxs(Box, { children: [_jsx(Box, { width: 20, children: _jsx(Text, { dimColor: true, children: "Tool" }) }), _jsx(Box, { width: 12, children: _jsx(Text, { dimColor: true, children: "Gate" }) }), _jsx(Box, { width: 16, children: _jsx(Text, { dimColor: true, children: "analyze_output" }) })] }), toolNames.map((name) => {
+                const policy = r.tools[name];
+                if (!policy)
+                    return null;
+                return (_jsxs(Box, { children: [_jsx(Box, { width: 20, children: _jsx(Text, { children: name }) }), _jsx(Box, { width: 12, children: _jsx(Text, { children: policy.gate }) }), _jsx(Box, { width: 16, children: _jsx(Text, { children: boolText(policy.analyze_output) }) })] }, name));
+            }), section('Policy'), field('credential_protection', r.policy.credential_protection ? 'enabled' : 'disabled', r.policy.credential_protection ? 'green' : 'red'), field('prompt_text', r.policy.prompt_text_analysis, r.policy.prompt_text_analysis === 'off' ? 'yellow' : undefined), field('prompt_attachments', r.policy.prompt_attachment_analysis, r.policy.prompt_attachment_analysis === 'off' ? 'yellow' : undefined), field('subagent_outputs', r.policy.subagent_output_analysis, r.policy.subagent_output_analysis === 'off' ? 'yellow' : undefined), field('vge_failure_prompt_text', r.policy.vge_failure_mode.prompt_text, r.policy.vge_failure_mode.prompt_text === 'fail_open' ? 'yellow' : undefined), field('vge_failure_prompt_attachment', r.policy.vge_failure_mode.prompt_attachment, r.policy.vge_failure_mode.prompt_attachment === 'fail_open' ? 'yellow' : undefined), field('vge_failure_posttool_output', r.policy.vge_failure_mode.posttool_output, r.policy.vge_failure_mode.posttool_output === 'fail_open' ? 'yellow' : undefined), field('vge_backpressure_posttool', r.policy.vge_overload_backpressure.posttool_output.enabled ? 'enabled' : 'disabled', r.policy.vge_overload_backpressure.posttool_output.enabled ? 'green' : 'yellow'), field('vge_backpressure_cooldown', `${r.policy.vge_overload_backpressure.posttool_output.base_cooldown_ms}-${r.policy.vge_overload_backpressure.posttool_output.max_cooldown_ms} ms`), field('cc_contract_auto_probe', r.policy.cc_contract.auto_probe_enabled ? 'enabled' : 'disabled', r.policy.cc_contract.auto_probe_enabled ? 'green' : 'yellow'), field('cc_contract_probe_timeout', `${r.policy.cc_contract.auto_probe_timeout_ms} ms`), field('decision_timeout_ms', String(r.policy.decision_timeout_ms)), field('resolver_stale_ms', String(r.policy.resolver_heartbeat_stale_ms)), field('session_ttl_hours', String(r.policy.session_idle_ttl_hours)), field('url_baseline', urlBaseline.enabled ? 'enabled' : 'disabled', urlBaseline.enabled ? 'green' : 'yellow'), field('url_default', urlBaseline.default_action), field('url_presets', `${Object.values(urlBaseline.presets).filter(Boolean).length} active`), field('url_custom_deny', `${customDenyCount} entries`), allowlist.length > 0 ? field('url_allowlist_legacy', `${allowlist.length} entries`) : null, _jsx(ScreenFooter, { hint: "e export redacted \u00B7 Esc back", status: exportMsg ? _jsx(Text, { children: exportMsg }) : undefined })] }));
+}
+//# sourceMappingURL=ViewConfig.js.map