[fylorn]

What

The security log can now be narrowed to one type, from the Type column header itself (no extra toolbar control):

• Clicking the header opens a menu: all types, secrets & privacy, dangerous commands, content filter (radio items).
• While a type is selected the header shows its name in the foreground colour, so a filtered table is obvious at a glance.
• The log reads that type from core (guard on GET /security/events, already supported), so paging and the per-day counts are exact.
• Export follows the filter.
• An empty filtered result keeps the table and its header, with a "show all types" action in the body.
• The page summary (hits and outcomes) still counts every type; jumping in from the overview resets the filter to all.
• Switching to a type that has not been read yet shows the matching rows from the all-types page until the filtered read lands, so the header (and its focus) never disappears behind a skeleton.

Also adds DropdownMenuRadioGroup / DropdownMenuRadioItem to src/ui/dropdown-menu.tsx, styled like the checkbox item. The Type column is 112px (from 92) so the longest label plus the chevron fits at the Windows 14px body size.

Checks

• pnpm typecheck, pnpm test (1216 tests; new case for the filtered export).
• Checked in the mock preview: zh/en, each type, empty filtered state, reset, header width at 13px and 14px.

🤖 Generated with Claude Code