diff --git a/src/shared/versions.js b/src/shared/versions.js
index 281847a..bae5581 100644
--- a/src/shared/versions.js
+++ b/src/shared/versions.js
@@ -1,6 +1,6 @@
 export const HARBOR_VERSIONS = Object.freeze({
-  macClient: '0.6.1',
-  gatewayClient: '0.6.0',
+  macClient: '0.6.2',
+  gatewayClient: '0.6.1',
   gatewayBackend: '0.6.0',
 });
 
diff --git a/src/web/styles.css b/src/web/styles.css
index ec4f152..d675d7a 100644
--- a/src/web/styles.css
+++ b/src/web/styles.css
@@ -903,6 +903,7 @@ p {
 }
 
 .client-local-rule {
+  position: relative;
   min-width: 0;
   display: grid;
   grid-template-columns: 24px 116px minmax(0, 1fr) 112px 28px;
@@ -913,6 +914,10 @@ p {
   transition: opacity 260ms ease, filter 360ms ease;
 }
 
+.client-local-rule:has(.client-rule-type.is-open) {
+  z-index: 5;
+}
+
 .client-local-rule-status {
   color: var(--client-muted);
   font-size: 9px;
diff --git a/test/web/rule-editor-contract.test.js b/test/web/rule-editor-contract.test.js
index 2922a78..fca18ad 100644
--- a/test/web/rule-editor-contract.test.js
+++ b/test/web/rule-editor-contract.test.js
@@ -19,6 +19,7 @@ test('rule editor add latency stays constant and dirty exits are guarded', () =>
   assert.match(component, /Не сохранено/);
   assert.match(component, /Ждёт перезапуска/);
   assert.match(component, /Перезапустить VPN/);
+  assert.match(styles, /\.client-local-rule:has\(\.client-rule-type\.is-open\)[\s\S]*z-index: 5/);
 });
 
 test('critical confirmations share one accessible blocking popup', () => {