function ui::logs::fw_row() {
  local ts="${1:-}" client="${2:-}" dest_ip="${3:-}" dest_port="${4:-}" \
        proto="${5:-}" svc_name="${6:-}" count="${7:-1}" \
        w_client="${8:-20}" w_dest="${9:-30}" \
        src_endpoint="${10:-}" src_resolved="${11:-}" \
        w_endpoint="${12:-0}" resolved_only="${13:-false}"
 
  local ts_pad client_pad
  ts_pad=$(printf "%-11s" "$ts")
  client_pad=$(printf "%-${w_client}s" "$client")
 
  # ── Source endpoint ──
  local src_padded=""
  if [[ "$w_endpoint" -gt 0 ]]; then
    if [[ -n "$src_endpoint" ]]; then
      local src_colored
      if $resolved_only; then
        # Show resolved name only, or raw if unresolved
        src_colored="${src_resolved:-$src_endpoint}"
      else
        src_colored="$src_endpoint"
        [[ -n "$src_resolved" ]] && \
          src_colored="${src_endpoint} \033[2m→ ${src_resolved}\033[0m"
      fi
      src_padded=$(ui::pad_mb "$src_colored" "$w_endpoint")
    else
      src_padded=$(ui::pad_mb "\033[2m—\033[0m" "$w_endpoint")
    fi
  fi
 
  # ── Destination ──
  local svc_display="" raw_suffix=""
  if [[ -n "$svc_name" ]]; then
    [[ -n "$dest_port" ]] && svc_display="${svc_name}/${proto}" \
                          || svc_display="${svc_name} (${proto})"
    # Only add raw suffix when not resolved_only
    if ! $resolved_only; then
      [[ -n "$dest_port" ]] && raw_suffix=" \033[2m(${dest_ip}:${dest_port})\033[0m" \
                            || raw_suffix=" \033[2m(${dest_ip})\033[0m"
    fi
  else
    [[ -n "$dest_port" ]] && svc_display="${dest_ip}:${dest_port}/${proto}" \
                          || svc_display="${dest_ip} (${proto})"
  fi
 
  # Pad for count alignment
  local raw_plain=""
  if ! $resolved_only; then
    [[ -n "$svc_name" && -n "$dest_port" ]] && raw_plain=" (${dest_ip}:${dest_port})"
    [[ -n "$svc_name" && -z "$dest_port" ]] && raw_plain=" (${dest_ip})"
  fi
  local full_dest_len=$(( ${#svc_display} + ${#raw_plain} ))
  local dest_pad_n=$(( w_dest - full_dest_len ))
  [[ $dest_pad_n -lt 0 ]] && dest_pad_n=0
 
  # ── Count ──
  local count_suffix=""
  [[ "$count" -gt 1 ]] && count_suffix=" \033[2m(x${count})\033[0m"
 
  # ── Render ──
  if [[ "$w_endpoint" -gt 0 ]]; then
    printf "  %s  %s  %b  \033[1;31m→\033[0m %s%b%*s%b\n" \
      "$ts_pad" "$client_pad" \
      "$src_padded" \
      "$svc_display" "$raw_suffix" \
      "$dest_pad_n" "" \
      "$count_suffix"
  else
    printf "  %s  %s  \033[1;31m→\033[0m %s%b%*s%b\n" \
      "$ts_pad" "$client_pad" \
      "$svc_display" "$raw_suffix" \
      "$dest_pad_n" "" \
      "$count_suffix"
  fi
}
function ui::logs::wg_row() {
  local ts="${1:-}" client="${2:-}" endpoint="${3:-}" event="${4:-}" \
        count="${5:-1}" w_client="${6:-20}" w_endpoint="${7:-20}" \
        gap_seconds="${8:-}" resolved="${9:-}"

  local event_color
  case "$event" in
    handshake) event_color="\033[1;32m" ;;
    attempt)   event_color="\033[1;31m" ;;
    *)         event_color="\033[0;37m" ;;
  esac

  local count_suffix=""
  [[ "$count" -gt 1 ]] && count_suffix=" \033[2m(x${count})\033[0m"

  # Gap suffix — offline label only when gap > threshold * 2
  local gap_suffix=""
  if [[ "$event" == "handshake" && -n "$gap_seconds" && "$gap_seconds" -gt 0 ]]; then
    local gap_int="$gap_seconds"
    local threshold="${WG_HANDSHAKE_CHECK_TIME_SEC:-300}"
    local offline_label=""
    [[ "$gap_int" -gt $(( threshold * 2 )) ]] && offline_label=" offline"
    if (( gap_int >= 3600 )); then
      gap_suffix="  \033[2m↑ $(( gap_int / 3600 ))h${offline_label}\033[0m"
    elif (( gap_int >= 60 )); then
      gap_suffix="  \033[2m↑ $(( gap_int / 60 ))m${offline_label}\033[0m"
    fi
  fi

  # Build endpoint display: raw_ip [dim → resolved]
  # Use ui::pad_mb so ANSI annotation doesn't affect column alignment
  local endpoint_raw="${endpoint:--}"
  local endpoint_colored
  if [[ -n "$resolved" && -n "$endpoint" ]]; then
    endpoint_colored="${endpoint} \033[2m→ ${resolved}\033[0m"
  else
    endpoint_colored="$endpoint_raw"
  fi
  local endpoint_padded
  endpoint_padded=$(ui::pad_mb "$endpoint_colored" "$w_endpoint")

  local ts_pad client_pad
  ts_pad=$(printf "%-11s" "$ts")
  client_pad=$(printf "%-${w_client}s" "$client")

  printf "  %s  %s  %b  %b%s\033[0m%b%b\n" \
    "$ts_pad" "$client_pad" \
    "$endpoint_padded" \
    "$event_color" "$event" "$count_suffix" "$gap_suffix"
}