pyre-cli 6.0.0 → 6.1.0

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import fs5 from "fs";
-import os3 from "os";
-import path3 from "path";
+import fs8 from "fs";
+import os4 from "os";
+import path5 from "path";
 import readline2 from "readline";
 import { Command } from "commander";
-import chalk9 from "chalk";
+import chalk11 from "chalk";
 
 // src/monitors/collectors.ts
 import chalk from "chalk";
@@ -472,9 +472,41 @@ async function collectMemory() {
     usagePercent
   };
 }
+var cachedDiskIo = null;
+async function getDiskIoRates() {
+  const now = Date.now();
+  if (cachedDiskIo && now - cachedDiskIo.ts < 1e3) {
+    return { readBytesSec: cachedDiskIo.readBytesSec, writeBytesSec: cachedDiskIo.writeBytesSec };
+  }
+  try {
+    const raw = (await run("iostat -d -c 2 1 2", "")).trim();
+    const blocks = raw.split(/\n\s*\n/).filter(Boolean);
+    const targetBlock = blocks.length > 1 ? blocks[1] : blocks[0];
+    if (targetBlock) {
+      const lines = targetBlock.trim().split("\n");
+      if (lines.length >= 2) {
+        const dataLine = lines[lines.length - 1].trim();
+        const parts = dataLine.split(/\s+/);
+        if (parts.length >= 3) {
+          const mbSec = parseFloat(parts[2]);
+          if (!isNaN(mbSec)) {
+            const bytesSec = Math.round(mbSec * 1024 * 1024);
+            cachedDiskIo = { readBytesSec: Math.round(bytesSec * 0.6), writeBytesSec: Math.round(bytesSec * 0.4), ts: now };
+            return { readBytesSec: cachedDiskIo.readBytesSec, writeBytesSec: cachedDiskIo.writeBytesSec };
+          }
+        }
+      }
+    }
+  } catch {
+  }
+  return { readBytesSec: 0, writeBytesSec: 0 };
+}
 async function collectDisk() {
-  const raw = (await run("df -h")).trim();
-  const lines = raw.split("\n").slice(1);
+  const [rawDf, ioRates] = await Promise.all([
+    run("df -h"),
+    getDiskIoRates()
+  ]);
+  const lines = rawDf.trim().split("\n").slice(1);
   return lines.map((line) => {
     const parts = line.split(/\s+/);
     return {
@@ -483,7 +515,9 @@ async function collectDisk() {
       used: parts[2],
       available: parts[3],
       capacity: parts[4],
-      mountpoint: parts[5] || parts[6] || "/"
+      mountpoint: parts[5] || parts[6] || "/",
+      readBytesSec: ioRates.readBytesSec,
+      writeBytesSec: ioRates.writeBytesSec
     };
   }).filter((d) => d.filesystem.includes("/") || d.size.includes("G") || d.size.includes("T"));
 }
@@ -791,7 +825,10 @@ function multiRowSparkline(values, height, opts2 = {}) {
 
 // src/formatters/themes.ts
 import chalk2 from "chalk";
-var THEMES = {
+import fs from "fs";
+import os2 from "os";
+import path from "path";
+var BUILTIN_THEMES = {
   default: {
     border: chalk2.hex("#4b5563"),
     cpu: chalk2.hex("#22d3ee"),
@@ -871,6 +908,42 @@ var THEMES = {
     process: chalk2.hex("#ebdbb2")
   }
 };
+function loadCustomThemes() {
+  const themes = { ...BUILTIN_THEMES };
+  const themesDir = path.join(os2.homedir(), ".config", "pyre", "themes");
+  try {
+    if (fs.existsSync(themesDir)) {
+      const files = fs.readdirSync(themesDir);
+      for (const file of files) {
+        if (file.endsWith(".json")) {
+          const name = path.basename(file, ".json");
+          try {
+            const raw = fs.readFileSync(path.join(themesDir, file), "utf-8");
+            const data = JSON.parse(raw);
+            const buildColor = (val) => val ? val.startsWith("#") ? chalk2.hex(val) : chalk2[val] || chalk2.white : chalk2.white;
+            themes[name] = {
+              border: buildColor(data.border),
+              cpu: buildColor(data.cpu),
+              mem: buildColor(data.mem),
+              gpu: buildColor(data.gpu),
+              power: buildColor(data.power),
+              battery: buildColor(data.battery),
+              thermal: buildColor(data.thermal),
+              network: buildColor(data.network),
+              disk: buildColor(data.disk),
+              graphs: buildColor(data.graphs),
+              process: buildColor(data.process)
+            };
+          } catch {
+          }
+        }
+      }
+    }
+  } catch {
+  }
+  return themes;
+}
+var THEMES = loadCustomThemes();
 
 // src/formatters/render.ts
 function visLen(s) {
@@ -1405,7 +1478,7 @@ function btopCpuBox(data, width, theme, opts2) {
     if (data.cpu.coreUsage && data.cpu.coreUsage.length) {
       const coreColW = Math.floor((rightW - 1) / 2);
       const half = Math.ceil(data.cpu.coreUsage.length / 2);
-      for (let i = 0; i < Math.min(2, half); i++) {
+      for (let i = 0; i < half; i++) {
         const u1 = data.cpu.coreUsage[i];
         const u2 = data.cpu.coreUsage[i + half];
         const c1BarW = Math.max(3, coreColW - 8);
@@ -1447,9 +1520,18 @@ function btopLeftColumn(data, width, theme, opts2) {
     for (const d of data.disk.slice(0, 2)) {
       const capNum = parseInt(d.capacity, 10) || 0;
       const mountShort = truncatePlain(d.mountpoint, 8);
-      diskLines.push(`${mountShort} ${d.used}/${d.size} [${gaugeBar(capNum, Math.max(3, contentWidth - 18))}] ${d.capacity}`);
+      let ioStr = "";
+      if (d.readBytesSec !== void 0 || d.writeBytesSec !== void 0) {
+        const rStr = formatBytes(d.readBytesSec || 0);
+        const wStr = formatBytes(d.writeBytesSec || 0);
+        ioStr = ` R:${rStr}/s W:${wStr}/s`;
+      }
+      diskLines.push(`${mountShort} ${d.used}/${d.size} [${gaugeBar(capNum, Math.max(3, contentWidth - 18 - ioStr.length))}] ${d.capacity}${ioStr}`);
     }
-    out.push(...panel("0 disk io", diskLines, width, theme.disk, theme.border, diskLines.length));
+    const totalRead = data.disk.reduce((acc, d) => acc + (d.readBytesSec || 0), 0);
+    const totalWrite = data.disk.reduce((acc, d) => acc + (d.writeBytesSec || 0), 0);
+    const diskHeaderRight = `R:${formatBytes(totalRead)}/s W:${formatBytes(totalWrite)}/s`;
+    out.push(...panel("0 disk io", diskLines, width, theme.disk, theme.border, diskLines.length, diskHeaderRight));
   }
   const netLines = [];
   const rxRate = opts2.history?.netRxRate.length ? opts2.history.netRxRate[opts2.history.netRxRate.length - 1] : 0;
@@ -2152,11 +2234,11 @@ var History = class _History {
 };
 
 // src/state/config.ts
-import fs from "fs";
-import os2 from "os";
-import path from "path";
-var CONFIG_DIR = path.join(os2.homedir(), ".config", "pyre");
-var CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
+import fs2 from "fs";
+import os3 from "os";
+import path2 from "path";
+var CONFIG_DIR = path2.join(os3.homedir(), ".config", "pyre");
+var CONFIG_FILE = path2.join(CONFIG_DIR, "config.json");
 var DEFAULT_CONFIG = {
   theme: "default",
   interval: 2,
@@ -2170,6 +2252,9 @@ var DEFAULT_CONFIG = {
   mouseEnabled: true,
   cpuAlertPct: 90,
   tempAlertC: 95,
+  watchdogProcess: "",
+  watchdogCpu: 80,
+  watchdogMem: 80,
   notificationsEnabled: true,
   p2pPort: 9876,
   p2pPassword: "pyre",
@@ -2193,8 +2278,8 @@ var DEFAULT_CONFIG = {
 };
 function readConfig() {
   try {
-    if (!fs.existsSync(CONFIG_FILE)) return { ...DEFAULT_CONFIG };
-    const raw = fs.readFileSync(CONFIG_FILE, "utf-8");
+    if (!fs2.existsSync(CONFIG_FILE)) return { ...DEFAULT_CONFIG };
+    const raw = fs2.readFileSync(CONFIG_FILE, "utf-8");
     const parsed = JSON.parse(raw);
     return deepMerge(DEFAULT_CONFIG, parsed);
   } catch {
@@ -2203,11 +2288,11 @@ function readConfig() {
 }
 function writeConfig(config3) {
   try {
-    if (!fs.existsSync(CONFIG_DIR)) {
-      fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    if (!fs2.existsSync(CONFIG_DIR)) {
+      fs2.mkdirSync(CONFIG_DIR, { recursive: true });
     }
     const merged = deepMerge(readConfig(), config3);
-    fs.writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2) + "\n");
+    fs2.writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2) + "\n");
   } catch {
   }
 }
@@ -2295,6 +2380,9 @@ var state = {
   ],
   CPU_ALERT_PCT: config.cpuAlertPct,
   TEMP_ALERT_C: config.tempAlertC,
+  watchdogProcess: config.watchdogProcess || "",
+  watchdogCpu: config.watchdogCpu || 80,
+  watchdogMem: config.watchdogMem || 80,
   notificationsEnabled: config.notificationsEnabled,
   alerted: false,
   activePanel: "grid",
@@ -2349,10 +2437,10 @@ function getToggleKey(opt) {
 }
 
 // src/live/export.ts
-import fs2 from "fs";
-import path2 from "path";
+import fs3 from "fs";
+import path3 from "path";
 function ensureDir(dir) {
-  if (!fs2.existsSync(dir)) fs2.mkdirSync(dir, { recursive: true });
+  if (!fs3.existsSync(dir)) fs3.mkdirSync(dir, { recursive: true });
 }
 function timestampForFile() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
@@ -2365,7 +2453,7 @@ function exportSnapshot() {
   try {
     ensureDir(state.exportDir);
     const ext = state.exportFormat === "json" ? "json" : state.exportFormat === "csv" ? "csv" : state.exportFormat === "tsv" ? "tsv" : state.exportFormat === "html" ? "html" : "md";
-    const file = path2.join(state.exportDir, `pyre-${timestampForFile()}.${ext}`);
+    const file = path3.join(state.exportDir, `pyre-${timestampForFile()}.${ext}`);
     let content;
     switch (state.exportFormat) {
       case "json":
@@ -2384,7 +2472,7 @@ function exportSnapshot() {
         content = formatMarkdown(state.lastData);
         break;
     }
-    fs2.writeFileSync(file, content);
+    fs3.writeFileSync(file, content);
     setStatus(`Exported snapshot -> ${file}`);
   } catch (err) {
     setStatus(`Export failed: ${err.message}`);
@@ -2394,8 +2482,8 @@ function startLogging() {
   try {
     ensureDir(state.exportDir);
     rotateLogs();
-    const file = path2.join(state.exportDir, `pyre-log-${timestampForFile()}.csv`);
-    state.logStream = fs2.createWriteStream(file, { flags: "a" });
+    const file = path3.join(state.exportDir, `pyre-log-${timestampForFile()}.csv`);
+    state.logStream = fs3.createWriteStream(file, { flags: "a" });
     state.logStream.write("timestamp,cpu_usage,mem_usage_percent,temp_c,net_rx_bytes,net_tx_bytes,net_rx_packets,net_tx_packets,connections,thermal_state\n");
     state.logging = true;
     setStatus(`Logging every tick -> ${file}`);
@@ -2409,37 +2497,37 @@ var MAX_LOG_BYTES = 50 * 1024 * 1024;
 function rotateLogs() {
   try {
     const dir = state.exportDir;
-    if (!fs2.existsSync(dir)) return;
-    const files = fs2.readdirSync(dir).filter((f) => f.startsWith("pyre-log-") && f.endsWith(".csv")).map((f) => ({ name: f, path: path2.join(dir, f), mtime: fs2.statSync(path2.join(dir, f)).mtimeMs, size: fs2.statSync(path2.join(dir, f)).size })).sort((a, b) => a.mtime - b.mtime);
+    if (!fs3.existsSync(dir)) return;
+    const files = fs3.readdirSync(dir).filter((f) => f.startsWith("pyre-log-") && f.endsWith(".csv")).map((f) => ({ name: f, path: path3.join(dir, f), mtime: fs3.statSync(path3.join(dir, f)).mtimeMs, size: fs3.statSync(path3.join(dir, f)).size })).sort((a, b) => a.mtime - b.mtime);
     const now = Date.now();
     for (const f of files) {
       if (now - f.mtime > MAX_LOG_AGE_MS) {
         try {
-          fs2.unlinkSync(f.path);
+          fs3.unlinkSync(f.path);
         } catch {
         }
       }
     }
-    const remaining = fs2.readdirSync(dir).filter((f) => f.startsWith("pyre-log-") && f.endsWith(".csv"));
+    const remaining = fs3.readdirSync(dir).filter((f) => f.startsWith("pyre-log-") && f.endsWith(".csv"));
     if (remaining.length > MAX_LOG_COUNT) {
       const toDelete = remaining.sort().slice(0, remaining.length - MAX_LOG_COUNT);
       for (const f of toDelete) {
         try {
-          fs2.unlinkSync(path2.join(dir, f));
+          fs3.unlinkSync(path3.join(dir, f));
         } catch {
         }
       }
     }
     let totalSize = 0;
     for (const f of remaining) {
-      totalSize += fs2.statSync(path2.join(dir, f)).size;
+      totalSize += fs3.statSync(path3.join(dir, f)).size;
     }
     if (totalSize > MAX_LOG_BYTES) {
       const sorted = remaining.sort();
       for (const f of sorted) {
-        const sz = fs2.statSync(path2.join(dir, f)).size;
+        const sz = fs3.statSync(path3.join(dir, f)).size;
         try {
-          fs2.unlinkSync(path2.join(dir, f));
+          fs3.unlinkSync(path3.join(dir, f));
         } catch {
         }
         totalSize -= sz;
@@ -2634,13 +2722,15 @@ function p2pPanelLines() {
   const title = `P2P \xB7 ${state.p2pServerRunning ? "ON" : "OFF"} \xB7 ${events.length} events`;
   return { title, body };
 }
-function renderCustomizerOverlay() {
+function renderCustomizerOverlay(scrollOffset, maxVisibleItems) {
   const themesList = Object.keys(THEMES);
-  const lines = [
-    chalk5.bgCyan.black.bold(" UI CUSTOMIZER (Use \u2191/\u2193 or J/K to navigate, Enter/Space to toggle, Esc to exit) ")
-  ];
-  state.CUSTOMIZER_OPTIONS.forEach((opt, idx) => {
-    const isSelected = idx === state.customizerIndex;
+  const headerLine = chalk5.bgCyan.black.bold(" UI CUSTOMIZER (Use \u2191/\u2193 or J/K to navigate, Enter/Space to toggle, Esc to exit) ");
+  const totalItems = state.CUSTOMIZER_OPTIONS.length;
+  const end = Math.min(scrollOffset + maxVisibleItems, totalItems);
+  const lines = [headerLine];
+  for (let i = scrollOffset; i < end; i++) {
+    const opt = state.CUSTOMIZER_OPTIONS[i];
+    const isSelected = i === state.customizerIndex;
     const prefix = isSelected ? chalk5.yellow("\u25B6 ") : "  ";
     if (opt === "Theme") {
       lines.push(`${prefix}${opt}: ${chalk5.bold.green(state.currentTheme)} [${themesList.join(", ")}]`);
@@ -2664,7 +2754,7 @@ function renderCustomizerOverlay() {
       const status = isVisible ? chalk5.green("[VISIBLE]") : chalk5.red("[HIDDEN]");
       lines.push(`${prefix}${opt}: ${status}`);
     }
-  });
+  }
   return lines.map((l) => `  ${l}`).join("\n");
 }
 var _prevFrameLines = [];
@@ -2752,9 +2842,18 @@ function render() {
   const footerLine22 = footerLine()[1] || "";
   const footerLine3 = footerLine()[2] || " ";
   const footerLines = [footerLine1, footerLine22, footerLine3];
+  const footerHeight = 3;
+  const targetBodyHeight = Math.max(1, state.termHeight - footerHeight);
   if (state.inputMode === "customizer") {
-    bodyLines.push("");
-    bodyLines.push(...renderCustomizerOverlay().split("\n"));
+    const preOverlayCount = bodyLines.length;
+    const availableForOverlay = targetBodyHeight - preOverlayCount;
+    const totalItems = state.CUSTOMIZER_OPTIONS.length;
+    const headerLines = 1;
+    const blankLines = availableForOverlay >= 2 ? 1 : 0;
+    const maxVisibleItems = Math.max(0, availableForOverlay - headerLines - blankLines);
+    const scrollOffset = totalItems > maxVisibleItems ? Math.max(0, Math.min(state.customizerIndex, totalItems - maxVisibleItems)) : 0;
+    if (blankLines > 0) bodyLines.push("");
+    bodyLines.push(...renderCustomizerOverlay(scrollOffset, maxVisibleItems).split("\n"));
   } else if (state.inputMode === "filter") {
     bodyLines.push(chalk5.cyan(`  Filter processes: ${state.inputBuffer}_`));
   } else if (state.inputMode === "kill") {
@@ -2770,8 +2869,6 @@ function render() {
   } else if (state.statusMessage) {
     bodyLines.push(`  ${state.statusMessage}`);
   }
-  const footerHeight = 3;
-  const targetBodyHeight = Math.max(1, state.termHeight - footerHeight);
   if (bodyLines.length > targetBodyHeight) {
     bodyLines.length = targetBodyHeight;
   }
@@ -2831,19 +2928,30 @@ function checkAlerts(data) {
   const anomalies = detectAnomalies(data, state.history);
   const hasCriticalAnomaly = anomalies.some((a) => a.severity === "critical");
   const hasWarningAnomaly = anomalies.some((a) => a.severity === "warning");
+  let watchdogTriggered = false;
+  if (state.watchdogProcess) {
+    const matches = data.processes.filter((p) => p.command.toLowerCase().includes(state.watchdogProcess.toLowerCase()));
+    for (const p of matches) {
+      if (p.cpu >= state.watchdogCpu || p.mem >= state.watchdogMem) {
+        watchdogTriggered = true;
+        break;
+      }
+    }
+  }
   const anomalyTriggered = hasCriticalAnomaly || hasWarningAnomaly;
-  if ((hot || anomalyTriggered) && !state.alerted) {
+  if ((hot || anomalyTriggered || watchdogTriggered) && !state.alerted) {
     state.alerted = true;
     process.stdout.write("\x07");
     const reasons = [];
     if (data.cpu.usage >= state.CPU_ALERT_PCT) reasons.push(`CPU at ${data.cpu.usage}%`);
     if (temp !== null && temp >= state.TEMP_ALERT_C) reasons.push(`Temp at ${formatTempForUnit(temp)}`);
+    if (watchdogTriggered) reasons.push(`Watchdog process "${state.watchdogProcess}" crossed threshold`);
     for (const a of anomalies) {
       reasons.push(`${a.metric} anomaly (\u03C3=${a.zScore.toFixed(1)})`);
     }
     setStatus(chalk5.red(`\u26A0 Alert: ${reasons.join("; ")}`), 5e3);
     sendNotification("pyre Alert", reasons.join("; "));
-  } else if (!hot && !anomalyTriggered) {
+  } else if (!hot && !anomalyTriggered && !watchdogTriggered) {
     state.alerted = false;
   }
 }
@@ -2851,7 +2959,7 @@ function checkAlerts(data) {
 // src/p2p/server.ts
 import net from "net";
 import tls from "tls";
-import fs3 from "fs";
+import fs4 from "fs";
 import crypto2 from "crypto";
 import chalk6 from "chalk";
 
@@ -2996,9 +3104,9 @@ var P2PServer = class {
   async start() {
     if (this.options.auditLog) {
       try {
-        fs3.mkdirSync(this.options.auditLog, { recursive: true });
+        fs4.mkdirSync(this.options.auditLog, { recursive: true });
         const logFile = `${this.options.auditLog}/p2p-audit.log`;
-        this.auditStream = fs3.createWriteStream(logFile, { flags: "a" });
+        this.auditStream = fs4.createWriteStream(logFile, { flags: "a" });
       } catch {
         this.log(chalk6.yellow("Warning: could not open audit log"));
       }
@@ -3007,11 +3115,11 @@ var P2PServer = class {
       const useTLS = !!(this.options.tlsCert && this.options.tlsKey);
       if (useTLS) {
         const tlsOptions = {
-          key: fs3.readFileSync(this.options.tlsKey),
-          cert: fs3.readFileSync(this.options.tlsCert)
+          key: fs4.readFileSync(this.options.tlsKey),
+          cert: fs4.readFileSync(this.options.tlsCert)
         };
         if (this.options.tlsCA) {
-          tlsOptions.ca = fs3.readFileSync(this.options.tlsCA);
+          tlsOptions.ca = fs4.readFileSync(this.options.tlsCA);
         }
         this.server = tls.createServer(tlsOptions, (socket) => this.onConnection(socket));
       } else {
@@ -3279,7 +3387,7 @@ async function startP2PServer(options) {
 // src/p2p/client.ts
 import net2 from "net";
 import tls2 from "tls";
-import fs4 from "fs";
+import fs5 from "fs";
 import crypto3 from "crypto";
 import chalk7 from "chalk";
 var P2PClient = class {
@@ -3307,9 +3415,9 @@ var P2PClient = class {
   async connect() {
     if (this.options.auditLog) {
       try {
-        fs4.mkdirSync(this.options.auditLog, { recursive: true });
+        fs5.mkdirSync(this.options.auditLog, { recursive: true });
         const logFile = `${this.options.auditLog}/p2p-client-audit.log`;
-        this.auditStream = fs4.createWriteStream(logFile, { flags: "a" });
+        this.auditStream = fs5.createWriteStream(logFile, { flags: "a" });
       } catch {
         console.log(chalk7.yellow("Warning: could not open audit log"));
       }
@@ -3324,7 +3432,7 @@ var P2PClient = class {
           rejectUnauthorized: !this.options.tlsInsecure
         };
         if (this.options.tlsCA) {
-          tlsOptions.ca = fs4.readFileSync(this.options.tlsCA);
+          tlsOptions.ca = fs5.readFileSync(this.options.tlsCA);
         }
         this.socket = tls2.connect(tlsOptions, () => {
           this.running = true;
@@ -3678,11 +3786,19 @@ function handleInputModeKey(str, key) {
   }
   if (key.name === "backspace") {
     state.inputBuffer = state.inputBuffer.slice(0, -1);
+    if (state.inputMode === "filter") {
+      state.processFilter = state.inputBuffer;
+      invalidateTableCache();
+    }
     render();
     return;
   }
   if (str && str.length === 1 && !key.ctrl && !key.meta) {
     state.inputBuffer += str;
+    if (state.inputMode === "filter") {
+      state.processFilter = state.inputBuffer;
+      invalidateTableCache();
+    }
     render();
   }
 }
@@ -4439,11 +4555,106 @@ async function showSplash(config3) {
   });
 }
 
+// src/historyCmd.ts
+import fs6 from "fs";
+import path4 from "path";
+import chalk9 from "chalk";
+function runHistoryCommand(opts2 = {}) {
+  const days = opts2.days || 7;
+  const dir = opts2.dir || "./pyre-exports";
+  console.log(chalk9.bold(`
+  pyre history \u2014 Past ${days} Days Trend
+`));
+  if (!fs6.existsSync(dir)) {
+    console.log(chalk9.yellow(`  No logs directory found at ${dir}`));
+    return;
+  }
+  const files = fs6.readdirSync(dir).filter((f) => f.startsWith("pyre-log-") && f.endsWith(".csv"));
+  if (files.length === 0) {
+    console.log(chalk9.yellow(`  No CSV logs found in ${dir}`));
+    return;
+  }
+  const cutoff = Date.now() - days * 24 * 60 * 60 * 1e3;
+  const cpuPoints = [];
+  const memPoints = [];
+  const tempPoints = [];
+  for (const file of files.sort()) {
+    const fullPath = path4.join(dir, file);
+    try {
+      const content = fs6.readFileSync(fullPath, "utf-8");
+      const lines = content.split("\n").slice(1);
+      for (const line of lines) {
+        if (!line.trim()) continue;
+        const parts = line.split(",");
+        if (parts.length >= 4) {
+          const tsStr = parts[0];
+          const ts = new Date(tsStr).getTime();
+          if (!isNaN(ts) && ts >= cutoff) {
+            const cpu = parseFloat(parts[1]);
+            const mem = parseFloat(parts[2]);
+            const temp = parseFloat(parts[3]);
+            if (!isNaN(cpu)) cpuPoints.push(cpu);
+            if (!isNaN(mem)) memPoints.push(mem);
+            if (!isNaN(temp)) tempPoints.push(temp);
+          }
+        }
+      }
+    } catch {
+    }
+  }
+  if (cpuPoints.length === 0) {
+    console.log(chalk9.yellow(`  No historical entries recorded within the last ${days} days.`));
+    return;
+  }
+  console.log(`  Data Points: ${cpuPoints.length} logged snapshots`);
+  console.log(`  CPU Usage:   ${sparkline(cpuPoints, { min: 0, max: 100 })} (${(cpuPoints.reduce((a, b) => a + b, 0) / cpuPoints.length).toFixed(1)}% avg)`);
+  console.log(`  Memory:      ${sparkline(memPoints, { min: 0, max: 100 })} (${(memPoints.reduce((a, b) => a + b, 0) / memPoints.length).toFixed(1)}% avg)`);
+  if (tempPoints.length) {
+    console.log(`  Temperature: ${sparkline(tempPoints)} (${(tempPoints.reduce((a, b) => a + b, 0) / tempPoints.length).toFixed(1)}\xB0C avg)`);
+  }
+  console.log();
+}
+
+// src/diffCmd.ts
+import fs7 from "fs";
+import chalk10 from "chalk";
+function runDiffCommand(file1, file2) {
+  console.log(chalk10.bold(`
+  pyre diff \u2014 Snapshot Comparison
+`));
+  console.log(chalk10.dim(`  Snapshot A: ${file1}`));
+  console.log(chalk10.dim(`  Snapshot B: ${file2}
+`));
+  try {
+    const dataA = JSON.parse(fs7.readFileSync(file1, "utf-8"));
+    const dataB = JSON.parse(fs7.readFileSync(file2, "utf-8"));
+    const diffNum = (label, valA, valB, unit = "") => {
+      const delta = valB - valA;
+      const sign = delta > 0 ? "+" : "";
+      const color = delta > 0 ? chalk10.red : delta < 0 ? chalk10.green : chalk10.dim;
+      console.log(`  ${label.padEnd(20)} ${valA.toFixed(1)}${unit} \u2794 ${valB.toFixed(1)}${unit} (${color(sign + delta.toFixed(1) + unit)})`);
+    };
+    diffNum("CPU Usage", dataA.cpu.usage, dataB.cpu.usage, "%");
+    diffNum("Memory Usage", dataA.memory.usagePercent, dataB.memory.usagePercent, "%");
+    if (dataA.cpu.temperature && dataB.cpu.temperature) {
+      diffNum("CPU Temp", dataA.cpu.temperature, dataB.cpu.temperature, "\xB0C");
+    }
+    if (dataA.gpu && dataB.gpu) {
+      diffNum("GPU Util", dataA.gpu.utilization, dataB.gpu.utilization, "%");
+    }
+    diffNum("Network RX Packets", dataA.network.rxPackets, dataB.network.rxPackets);
+    diffNum("Network TX Packets", dataA.network.txPackets, dataB.network.txPackets);
+    console.log();
+  } catch (err) {
+    console.log(chalk10.red(`Failed to compare snapshots: ${err.message}`));
+  }
+}
+
 // src/index.ts
 var config2 = readConfig();
-var pkg = JSON.parse(fs5.readFileSync(new URL("../package.json", import.meta.url), "utf-8"));
+var pkg = JSON.parse(fs8.readFileSync(new URL("../package.json", import.meta.url), "utf-8"));
 var program = new Command();
-program.name("pyre").version(pkg.version).description("Mac system monitoring CLI: interactive live dashboard, stats, graphs, export, packet monitor, battery predictor").option("-j, --json", "Output as JSON").option("--html", "Output as HTML").option("--md", "Output as Markdown").option("-c, --csv", "Output as CSV").option("-t, --tsv", "Output as TSV").option("--detailed", "Include detailed system info and sensor readings").option("--theme <name>", "Default theme for live mode (default, dracula, cyberpunk, monochrome, nord, gruvbox)", config2.theme).option("--interval <seconds>", "Refresh interval for live mode", String(config2.interval)).option("--once", "Show a single static snapshot instead of live feed").option("--out <file>", "Also write the snapshot output to a file (--once/--json/--csv/--tsv modes)").option("--export-dir <dir>", "Directory used for live-mode snapshot exports and logs", config2.exportDir).option("--log", "Start continuous CSV logging immediately when live mode starts").option("--tree", "Show process tree view instead of flat list").option("--sort <key>", "Sort processes by: cpu, mem, pid, user, command, state, threads, runtime", config2.sortMode).option("--packets", "Include packet monitor panel in output").option("--limit <n>", "Max number of processes to include in --once/--json/--csv/--tsv snapshots (0 = all)", "10").option("--alert-cpu <pct>", "CPU usage alert threshold (default: 90)", String(config2.cpuAlertPct)).option("--alert-temp <c>", "CPU temperature alert threshold in Celsius (default: 95)", String(config2.tempAlertC)).option("--temp-unit <unit>", "Temperature display unit: c or f (default: c)", "c").option("--p2p-host <host>", "P2P host address (server: bind address, client: server address)").option("--p2p-port <port>", "P2P port number", "9876").option("--p2p-password <password>", "Password for P2P authentication").option("--p2p-tls", "Enable TLS encryption for P2P connections").option("--p2p-cert <file>", "TLS certificate file (PEM) for P2P server").option("--p2p-key <file>", "TLS private key file (PEM) for P2P server").option("--p2p-ca <file>", "TLS CA certificate file (PEM) for P2P client").option("--p2p-insecure", "Skip TLS certificate verification (client only)").option("--p2p-rate-limit <n>", "Max auth attempts per IP per minute (default: 5)", "5").option("--p2p-allow <ips>", "Comma-separated list of allowed IPs (empty = all)").option("--p2p-deny <ips>", "Comma-separated list of denied IPs").option("--p2p-audit-log <dir>", "Directory for P2P audit logs").option("--p2p-hmac-key <key>", "HMAC key for message signing (default: derived from password)").option("--port <port>", "Port number for web server mode", "3000");
+program.name("pyre").version(pkg.version).description("Mac system monitoring CLI: interactive live dashboard, stats, graphs, export, packet monitor, battery predictor").option("-j, --json", "Output as JSON").option("--html", "Output as HTML").option("--md", "Output as Markdown").option("-c, --csv", "Output as CSV").option("-t, --tsv", "Output as TSV").option("--detailed", "Include detailed system info and sensor readings").option("--theme <name>", "Default theme for live mode (default, dracula, cyberpunk, monochrome, nord, gruvbox)", config2.theme).option("--interval <seconds>", "Refresh interval for live mode", String(config2.interval)).option("--once", "Show a single static snapshot instead of live feed").option("--out <file>", "Also write the snapshot output to a file (--once/--json/--csv/--tsv modes)").option("--export-dir <dir>", "Directory used for live-mode snapshot exports and logs", config2.exportDir).option("--log", "Start continuous CSV logging immediately when live mode starts").option("--tree", "Show process tree view instead of flat list").option("--sort <key>", "Sort processes by: cpu, mem, pid, user, command, state, threads, runtime", config2.sortMode).option("--packets", "Include packet monitor panel in output").option("--limit <n>", "Max number of processes to include in --once/--json/--csv/--tsv snapshots (0 = all)", "10").option("--alert-cpu <pct>", "CPU usage alert threshold (default: 90)", String(config2.cpuAlertPct)).option("--alert-temp <c>", "CPU temperature alert threshold in Celsius (default: 95)", String(config2.tempAlertC)).option("--temp-unit <unit>", "Temperature display unit: c or f (default: c)", "c").option("--p2p-host <host>", "P2P host address (server: bind address, client: server address)").option("--p2p-port <port>", "P2P port number", "9876").option("--p2p-password <password>", "Password for P2P authentication").option("--p2p-tls", "Enable TLS encryption for P2P connections").option("--p2p-cert <file>", "TLS certificate file (PEM) for P2P server").option("--p2p-key <file>", "TLS private key file (PEM) for P2P server").option("--p2p-ca <file>", "TLS CA certificate file (PEM) for P2P client").option("--p2p-insecure", "Skip TLS certificate verification (client only)").option("--p2p-rate-limit <n>", "Max auth attempts per IP per minute (default: 5)", "5").option("--p2p-allow <ips>", "Comma-separated list of allowed IPs (empty = all)").option("--p2p-deny <ips>", "Comma-separated list of denied IPs").option("--p2p-audit-log <dir>", "Directory for P2P audit logs").option("--p2p-hmac-key <key>", "HMAC key for message signing (default: derived from password)").option("--port <port>", "Port number for web server mode", "3000").option("--web-auth", "Enable Basic Authentication for web server").option("--web-user <user>", "Username for web server authentication", "admin").option("--web-pass <pass>", "Password for web server authentication", "pyre");
 program.parse(process.argv);
 var opts = program.opts();
 function isExportMode() {
@@ -4456,7 +4667,7 @@ function sanitizeHost2(host) {
   return host.trim().replace(/%$/, "");
 }
 function detectLocalIP() {
-  const ifaces = os3.networkInterfaces();
+  const ifaces = os4.networkInterfaces();
   for (const [, addrs] of Object.entries(ifaces)) {
     if (!addrs) continue;
     for (const addr of addrs) {
@@ -4470,34 +4681,46 @@ function detectLocalIP() {
 async function runServerCommand() {
   const ip = detectLocalIP();
   if (!ip) {
-    console.log(chalk9.red("Could not detect a non-loopback IP address. Connect to a network first."));
+    console.log(chalk11.red("Could not detect a non-loopback IP address. Connect to a network first."));
     process.exit(1);
   }
   const port = 9876;
   const password = "mysecret";
-  console.log(chalk9.bold(`
+  console.log(chalk11.bold(`
   pyre server`));
-  console.log(chalk9.dim(`  Detected IP: ${ip}`));
-  console.log(chalk9.dim(`  Port: ${port}`));
-  console.log(chalk9.dim(`  Password: ${password}`));
+  console.log(chalk11.dim(`  Detected IP: ${ip}`));
+  console.log(chalk11.dim(`  Port: ${port}`));
+  console.log(chalk11.dim(`  Password: ${password}`));
   console.log();
-  console.log(chalk9.bold("Run this on THIS machine (server):"));
-  console.log(chalk9.hex("#ff6a39")(`pyre p2p server --p2p-host 0.0.0.0 --p2p-port ${port} --p2p-password ${password}`));
+  console.log(chalk11.bold("Run this on THIS machine (server):"));
+  console.log(chalk11.hex("#ff6a39")(`pyre p2p server --p2p-host 0.0.0.0 --p2p-port ${port} --p2p-password ${password}`));
   console.log();
-  console.log(chalk9.bold("Run this on the OTHER machine (client):"));
-  console.log(chalk9.hex("#ff6a39")(`pyre p2p connect --p2p-host ${ip} --p2p-port ${port} --p2p-password ${password}`));
+  console.log(chalk11.bold("Run this on the OTHER machine (client):"));
+  console.log(chalk11.hex("#ff6a39")(`pyre p2p connect --p2p-host ${ip} --p2p-port ${port} --p2p-password ${password}`));
   console.log();
 }
 async function main() {
   const cmd = program.args[0];
-  if (cmd === "info") {
-    await runInfoCommand();
+  if (cmd === "history") {
+    const daysIdx = program.args.indexOf("--days");
+    const days = daysIdx !== -1 ? parseInt(program.args[daysIdx + 1], 10) || 7 : 7;
+    runHistoryCommand({ days });
+    return;
+  }
+  if (cmd === "diff") {
+    const file1 = program.args[1];
+    const file2 = program.args[2];
+    if (!file1 || !file2) {
+      console.log(chalk11.red("Usage: pyre diff <snapshot1.json> <snapshot2.json>"));
+      process.exit(1);
+    }
+    runDiffCommand(file1, file2);
     return;
   }
   if (cmd === "ssh") {
     const host = program.args[1];
     if (!host) {
-      console.log(chalk9.red("Usage: pyre ssh <host>"));
+      console.log(chalk11.red("Usage: pyre ssh <host>"));
       process.exit(1);
     }
     await runSshCommand(host);
@@ -4510,7 +4733,7 @@ async function main() {
   if (cmd === "bench") {
     const benchCmd = program.args.slice(1).join(" ");
     if (!benchCmd) {
-      console.log(chalk9.red("Usage: pyre bench <command>"));
+      console.log(chalk11.red("Usage: pyre bench <command>"));
       process.exit(1);
     }
     await runBenchCommand(benchCmd);
@@ -4522,8 +4745,8 @@ async function main() {
       const cfg = readConfig();
       console.log(JSON.stringify(cfg, null, 2));
     } else if (sub === "reset") {
-      fs5.rmSync(CONFIG_FILE, { force: true });
-      console.log(chalk9.green("Config reset to defaults"));
+      fs8.rmSync(CONFIG_FILE, { force: true });
+      console.log(chalk11.green("Config reset to defaults"));
     } else {
       console.log("Usage: pyre config <show|reset>");
     }
@@ -4571,7 +4794,7 @@ async function main() {
       await runP2PConnect();
       return;
     } else {
-      console.log(chalk9.red("Usage: pyre p2p <server|connect> [options]"));
+      console.log(chalk11.red("Usage: pyre p2p <server|connect> [options]"));
       process.exit(1);
     }
   }
@@ -4587,13 +4810,13 @@ async function main() {
   else output = formatTable(data, { width: process.stdout.columns || 80, sortBy: opts.sort, treeView: opts.tree ?? config2.treeView, visible: { packets: opts.packets ? true : void 0 } });
   console.log(output);
   if (opts.out) {
-    fs5.writeFileSync(opts.out, stripAnsi(output));
-    console.log(chalk9.dim(`
+    fs8.writeFileSync(opts.out, stripAnsi(output));
+    console.log(chalk11.dim(`
 Saved to ${opts.out}`));
   }
 }
 main().catch((err) => {
-  console.error(chalk9.red(`Error: ${err.message}`));
+  console.error(chalk11.red(`Error: ${err.message}`));
   process.exit(1);
 });
 async function runP2PServer() {
@@ -4609,15 +4832,15 @@ async function runP2PServer() {
   const allowList = opts.p2pAllow ? opts.p2pAllow.split(",").map((s) => s.trim()).filter(Boolean) : [];
   const denyList = opts.p2pDeny ? opts.p2pDeny.split(",").map((s) => s.trim()).filter(Boolean) : [];
   if (!password) {
-    console.log(chalk9.red("Error: a password is required for P2P server mode. Use --p2p-password <password>"));
+    console.log(chalk11.red("Error: a password is required for P2P server mode. Use --p2p-password <password>"));
     process.exit(1);
   }
   if (tlsCert && !tlsKey) {
-    console.log(chalk9.red("Error: --p2p-key is required when --p2p-cert is specified"));
+    console.log(chalk11.red("Error: --p2p-key is required when --p2p-cert is specified"));
     process.exit(1);
   }
   if (tlsKey && !tlsCert) {
-    console.log(chalk9.red("Error: --p2p-cert is required when --p2p-key is specified"));
+    console.log(chalk11.red("Error: --p2p-cert is required when --p2p-key is specified"));
     process.exit(1);
   }
   const server = new P2PServer({
@@ -4637,18 +4860,18 @@ async function runP2PServer() {
     hmacKey: opts.p2pHmacKey
   });
   const tlsEnabled = !!(tlsCert && tlsKey);
-  console.log(chalk9.bold(`
+  console.log(chalk11.bold(`
   pyre P2P Server`));
-  console.log(chalk9.dim(`  Host: ${host}`));
-  console.log(chalk9.dim(`  Port: ${port}`));
-  console.log(chalk9.dim(`  Protocol: ${tlsEnabled ? "TLS" : "TCP"}`));
-  console.log(chalk9.dim(`  Password: ${password}`));
-  console.log(chalk9.dim(`  Interval: ${interval}s`));
-  console.log(chalk9.dim(`  Detailed: ${detailed ? "on" : "off"}`));
-  console.log(chalk9.dim(`  Rate limit: ${rateLimit} attempts/min`));
-  if (allowList.length > 0) console.log(chalk9.dim(`  Allowed IPs: ${allowList.join(", ")}`));
-  if (denyList.length > 0) console.log(chalk9.dim(`  Denied IPs: ${denyList.join(", ")}`));
-  console.log(chalk9.dim(`  Waiting for peers...
+  console.log(chalk11.dim(`  Host: ${host}`));
+  console.log(chalk11.dim(`  Port: ${port}`));
+  console.log(chalk11.dim(`  Protocol: ${tlsEnabled ? "TLS" : "TCP"}`));
+  console.log(chalk11.dim(`  Password: ${password}`));
+  console.log(chalk11.dim(`  Interval: ${interval}s`));
+  console.log(chalk11.dim(`  Detailed: ${detailed ? "on" : "off"}`));
+  console.log(chalk11.dim(`  Rate limit: ${rateLimit} attempts/min`));
+  if (allowList.length > 0) console.log(chalk11.dim(`  Allowed IPs: ${allowList.join(", ")}`));
+  if (denyList.length > 0) console.log(chalk11.dim(`  Denied IPs: ${denyList.join(", ")}`));
+  console.log(chalk11.dim(`  Waiting for peers...
 `));
   await server.start();
   const rl = readline2.createInterface({ input: process.stdin });
@@ -4660,7 +4883,7 @@ async function runP2PServer() {
       process.exit(0);
     } else if (trimmed === "status") {
       const info = server.info;
-      console.log(chalk9.dim(`  Peers connected: ${info.peersConnected}`));
+      console.log(chalk11.dim(`  Peers connected: ${info.peersConnected}`));
     }
   });
   process.once("SIGINT", () => {
@@ -4693,7 +4916,7 @@ async function runP2PConnect() {
   const tlsCA = opts.p2pCA;
   const tlsInsecure = !!opts.p2pInsecure;
   if (!password) {
-    console.log(chalk9.red("Error: a password is required for P2P connect mode. Use --p2p-password <password>"));
+    console.log(chalk11.red("Error: a password is required for P2P connect mode. Use --p2p-password <password>"));
     process.exit(1);
   }
   const client = new P2PClient({
@@ -4707,12 +4930,12 @@ async function runP2PConnect() {
     hmacKey: opts.p2pHmacKey
   });
   client.setOnStatus((msg) => {
-    process.stdout.write(`\r${chalk9.dim(msg)}${" ".repeat(40)}\r`);
+    process.stdout.write(`\r${chalk11.dim(msg)}${" ".repeat(40)}\r`);
   });
   client.setOnData((data) => {
     const lines = [];
-    lines.push(chalk9.bold(`  pyre P2P Client \u2014 ${data.header.hostname}`));
-    lines.push(chalk9.dim(`  ${data.timestamp}`));
+    lines.push(chalk11.bold(`  pyre P2P Client \u2014 ${data.header.hostname}`));
+    lines.push(chalk11.dim(`  ${data.timestamp}`));
     lines.push("");
     lines.push(...formatTable(data, {
       width: process.stdout.columns || 80,
@@ -4729,11 +4952,11 @@ async function runP2PConnect() {
     writeFrame2(lines);
   });
   const protocolLabel = useTLS ? "TLS" : "TCP";
-  console.log(chalk9.bold(`
+  console.log(chalk11.bold(`
   pyre P2P Client`));
-  console.log(chalk9.dim(`  Protocol: ${protocolLabel}`));
-  console.log(chalk9.dim(`  Connecting to ${host}:${port}...`));
-  console.log(chalk9.dim(`  Press Ctrl+C to disconnect
+  console.log(chalk11.dim(`  Protocol: ${protocolLabel}`));
+  console.log(chalk11.dim(`  Connecting to ${host}:${port}...`));
+  console.log(chalk11.dim(`  Press Ctrl+C to disconnect
 `));
   process.stdout.write("\x1B[?25l");
   try {
@@ -4741,23 +4964,23 @@ async function runP2PConnect() {
   } catch (err) {
     const code = err.code;
     const msg = err.message || String(err);
-    console.log(chalk9.red(`Connection failed: ${msg}`));
+    console.log(chalk11.red(`Connection failed: ${msg}`));
     if (code === "ECONNREFUSED") {
-      console.log(chalk9.yellow("  Hints:"));
-      console.log(chalk9.dim("  1. Start the server: pyre p2p server --p2p-host 0.0.0.0 --p2p-port " + port + " --p2p-password <password>"));
-      console.log(chalk9.dim("  2. Check the server IP with: hostname -I"));
-      console.log(chalk9.dim("  3. Open the port on the server firewall: sudo ufw allow " + port + "/tcp"));
+      console.log(chalk11.yellow("  Hints:"));
+      console.log(chalk11.dim("  1. Start the server: pyre p2p server --p2p-host 0.0.0.0 --p2p-port " + port + " --p2p-password <password>"));
+      console.log(chalk11.dim("  2. Check the server IP with: hostname -I"));
+      console.log(chalk11.dim("  3. Open the port on the server firewall: sudo ufw allow " + port + "/tcp"));
     } else if (code === "ETIMEDOUT") {
-      console.log(chalk9.yellow("  Hints:"));
-      console.log(chalk9.dim("  1. Verify the server IP is correct"));
-      console.log(chalk9.dim("  2. Check that both machines are on the same network/subnet"));
-      console.log(chalk9.dim("  3. Open the port on the server firewall"));
+      console.log(chalk11.yellow("  Hints:"));
+      console.log(chalk11.dim("  1. Verify the server IP is correct"));
+      console.log(chalk11.dim("  2. Check that both machines are on the same network/subnet"));
+      console.log(chalk11.dim("  3. Open the port on the server firewall"));
     } else if (code === "EHOSTDOWN" || code === "EHOSTUNREACH") {
-      console.log(chalk9.yellow("  Hints:"));
-      console.log(chalk9.dim("  1. The server at " + host + " is not responding"));
-      console.log(chalk9.dim("  2. Start the server first: pyre p2p server --p2p-host 0.0.0.0 --p2p-port " + port + " --p2p-password <password>"));
-      console.log(chalk9.dim("  3. Check connectivity: ping " + host));
-      console.log(chalk9.dim("  4. Ensure both machines are on the same LAN (ping each other first)"));
+      console.log(chalk11.yellow("  Hints:"));
+      console.log(chalk11.dim("  1. The server at " + host + " is not responding"));
+      console.log(chalk11.dim("  2. Start the server first: pyre p2p server --p2p-host 0.0.0.0 --p2p-port " + port + " --p2p-password <password>"));
+      console.log(chalk11.dim("  3. Check connectivity: ping " + host));
+      console.log(chalk11.dim("  4. Ensure both machines are on the same LAN (ping each other first)"));
     }
     process.stdout.write("\x1B[?25h");
     process.exit(1);
@@ -4769,41 +4992,21 @@ async function runP2PConnect() {
     process.exit(0);
   });
 }
-async function runInfoCommand() {
-  const data = await collectAll({ detailed: true });
-  const lines = [];
-  lines.push(chalk9.bold("  pyre info"));
-  lines.push("");
-  lines.push(`  Hostname:  ${data.header.hostname}`);
-  lines.push(`  OS:        ${data.header.os}`);
-  lines.push(`  Uptime:    ${data.header.uptime}`);
-  lines.push(`  CPU:       ${data.cpu.brand}`);
-  lines.push(`  Cores:     ${data.cpu.physicalCores}/${data.cpu.cores} (phys/log)`);
-  lines.push(`  Frequency: ${data.cpu.frequency} MHz`);
-  lines.push(`  Memory:    ${formatBytes(data.memory.total)}`);
-  if (data.gpu) lines.push(`  GPU:       ${data.gpu.model} (${formatBytes(data.gpu.memory)})`);
-  if (data.battery) {
-    lines.push(`  Battery:   ${data.battery.level}% (${data.battery.state})`);
-    lines.push(`  Health:    ${data.battery.health}`);
-  }
-  lines.push(`  Thermal:   ${data.thermal.state}`);
-  console.log(lines.join("\n"));
-}
 async function runSshCommand(host) {
   const password = opts.p2pPassword || "mysecret";
   const cmd = `ssh -o LogLevel=QUIET ${host} "pyre --json --once"`;
-  console.log(chalk9.bold(`
+  console.log(chalk11.bold(`
   pyre ssh \u2014 ${host}`));
-  console.log(chalk9.dim(`  Running: ${cmd}
+  console.log(chalk11.dim(`  Running: ${cmd}
 `));
   const { execFile: execFile2 } = await import("child_process");
   const child = execFile2("ssh", ["-o", "LogLevel=QUIET", host, "pyre", "--json", "--once"], (err, stdout, stderr) => {
     if (err) {
-      console.log(chalk9.red(`  SSH failed: ${err.message}`));
-      console.log(chalk9.dim("  Ensure SSH keys are set up or the host is reachable."));
+      console.log(chalk11.red(`  SSH failed: ${err.message}`));
+      console.log(chalk11.dim("  Ensure SSH keys are set up or the host is reachable."));
       process.exit(1);
     }
-    if (stderr) console.log(chalk9.dim(stderr));
+    if (stderr) console.log(chalk11.dim(stderr));
     try {
       const remote = JSON.parse(stdout);
       console.log(formatTable(remote, { width: process.stdout.columns || 80, sortBy: "cpu", treeView: false, visible: { packets: true } }));
@@ -4821,14 +5024,66 @@ async function runSshCommand(host) {
 async function runWebCommand() {
   const http = await import("http");
   const port = parseInt(opts.port || process.env.PORT || "3000", 10) || 3e3;
+  const authEnabled = !!opts.webAuth;
+  const authUser = opts.webUser || "admin";
+  const authPass = opts.webPass || "pyre";
   const server = http.createServer(async (req, res) => {
+    if (authEnabled) {
+      const authHeader = req.headers.authorization;
+      if (!authHeader || !authHeader.startsWith("Basic ")) {
+        res.writeHead(401, {
+          "WWW-Authenticate": 'Basic realm="pyre Web Dashboard"',
+          "Content-Type": "text/plain"
+        });
+        res.end("401 Unauthorized");
+        return;
+      }
+      const credentials = Buffer.from(authHeader.split(" ")[1], "base64").toString("utf-8");
+      const [user, pass] = credentials.split(":");
+      if (user !== authUser || pass !== authPass) {
+        res.writeHead(401, {
+          "WWW-Authenticate": 'Basic realm="pyre Web Dashboard"',
+          "Content-Type": "text/plain"
+        });
+        res.end("401 Unauthorized");
+        return;
+      }
+    }
     const url = req.url || "/";
+    if (url === "/health" || url === "/api/health") {
+      res.writeHead(200, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ status: "ok", uptime: process.uptime(), timestamp: (/* @__PURE__ */ new Date()).toISOString() }));
+      return;
+    }
+    if (url === "/api/stream") {
+      res.writeHead(200, {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache",
+        "Connection": "keep-alive",
+        "Access-Control-Allow-Origin": "*"
+      });
+      const sendStats = async () => {
+        try {
+          const data = await collectAll({ detailed: true });
+          res.write(`data: ${JSON.stringify(data)}
+
+`);
+        } catch {
+        }
+      };
+      sendStats();
+      const intervalId = setInterval(sendStats, 2e3);
+      req.on("close", () => {
+        clearInterval(intervalId);
+      });
+      return;
+    }
     if (url === "/" || url === "/index.html") {
       res.writeHead(200, { "Content-Type": "text/html" });
-      const indexPath = path3.join(process.cwd(), "index.html");
+      const indexPath = path5.join(process.cwd(), "index.html");
       let htmlContent = "";
-      if (fs5.existsSync(indexPath)) {
-        htmlContent = fs5.readFileSync(indexPath, "utf-8");
+      if (fs8.existsSync(indexPath)) {
+        htmlContent = fs8.readFileSync(indexPath, "utf-8");
       } else {
         const data = await collectAll({ detailed: true });
         htmlContent = formatHtml(data);
@@ -4848,11 +5103,15 @@ async function runWebCommand() {
     }
   });
   server.listen(port, "0.0.0.0", () => {
-    console.log(chalk9.bold(`
+    console.log(chalk11.bold(`
   pyre web server running on port ${port}`));
-    console.log(chalk9.dim(`  Dashboard: http://0.0.0.0:${port}/`));
-    console.log(chalk9.dim(`  API:       http://0.0.0.0:${port}/api`));
-    console.log(chalk9.dim("  Press Ctrl+C to stop\n"));
+    console.log(chalk11.dim(`  Dashboard: http://0.0.0.0:${port}/`));
+    console.log(chalk11.dim(`  API:       http://0.0.0.0:${port}/api`));
+    console.log(chalk11.dim(`  SSE Stream: http://0.0.0.0:${port}/api/stream`));
+    if (authEnabled) {
+      console.log(chalk11.yellow(`  Authentication: Enabled (${authUser}:${authPass})`));
+    }
+    console.log(chalk11.dim("  Press Ctrl+C to stop\n"));
   });
   process.once("SIGINT", () => {
     server.close();
@@ -4862,14 +5121,14 @@ async function runWebCommand() {
 async function runBenchCommand(benchCmd) {
   const { spawn } = await import("child_process");
   const logDir = opts.exportDir || "./pyre-exports";
-  const file = path3.join(logDir, `pyre-bench-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.csv`);
-  if (!fs5.existsSync(logDir)) fs5.mkdirSync(logDir, { recursive: true });
-  const stream = fs5.createWriteStream(file, { flags: "a" });
+  const file = path5.join(logDir, `pyre-bench-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.csv`);
+  if (!fs8.existsSync(logDir)) fs8.mkdirSync(logDir, { recursive: true });
+  const stream = fs8.createWriteStream(file, { flags: "a" });
   stream.write("timestamp,cpu_usage,mem_usage_percent,temp_c,net_rx_bytes,net_tx_bytes,net_rx_packets,net_tx_packets,connections,thermal_state\n");
-  console.log(chalk9.bold(`
+  console.log(chalk11.bold(`
   pyre bench`));
-  console.log(chalk9.dim(`  Command: ${benchCmd}`));
-  console.log(chalk9.dim(`  Log: ${file}
+  console.log(chalk11.dim(`  Command: ${benchCmd}`));
+  console.log(chalk11.dim(`  Log: ${file}
 `));
   const child = spawn("sh", ["-c", benchCmd]);
   child.stdout.on("data", (d) => process.stdout.write(d));
@@ -4890,7 +5149,7 @@ async function runBenchCommand(benchCmd) {
   child.on("close", () => {
     clearInterval(handle);
     stream.end();
-    console.log(chalk9.green(`
+    console.log(chalk11.green(`
   Bench complete. Log saved to ${file}`));
     process.exit(0);
   });