TUI Dashboard

waterwall dashboard launches a cyberpunk Textual TUI for live operational visibility — Matrix-green for healthy, magenta-red for alarms. It is a read-only renderer that polls 127.0.0.1:8889/admin/state at 1 Hz on a worker thread, so it must run on the proxy host and a slow admin endpoint never freezes the UI.

waterwall dashboard
# always-on in tmux (create-or-attach, respawns on quit):
/opt/waterwall/deploy/waterwall-tui

The six panes

Pane	Shows
LIVE ACTIVITY	streaming tail of intercepted flows (OUT magenta, IN green, warn amber, err red)
COUNTERS (5-min)	rolling redaction / detokenization / unknown-placeholder counts
KILL SWITCH	the four sources and whether each is asserted
MAP / PATTERNS	store occupancy and the live pattern count + policy hash
CHAIN / AUDIT	chain length, last checkpoint, `chain_intact`
ACTIVE SESSIONS	per-session redaction fingerprints

Keymap

Key	Action
`[r]`	Reload patterns (POST `/admin/reload`; surfaces a 500 on refusal)
`[k]`	Killswitch arm/disarm modal
`[v]`	`verify-install --runtime`
`[e]`	Export evidence bundle (date-range pickers)
`[t]`	Toggle the live-activity tail
`[q]`	Quit

Pane status indicators

●UP (green) — proxy healthy, accepting traffic
●FAIL (red) — /healthz 503; check signer key, pattern count, chain
●ACTIVE (kill-switch pane) — at least one source asserted
●OFFLINE — admin endpoint unreachable; all panels go red rather than show stale data

Theme

The dashboard requires 24-bit color, available in any modern terminal (Windows Terminal, tmux on Linux, xterm with TERM=xterm-256color). The same palette — matrix green #00ff41, cyan #00ffff, hot magenta #ff00ff, amber #ffaa00, alarm red #ff003c on near-black — is the basis for this documentation site, so the docs and the dashboard read as one system.