apiblaze 0.20.6 → 0.20.9

package/dist/index.js

@@ -929,10 +929,10 @@ var init_tenant_pick = __esm({
 
 // src/index.ts
 var import_commander = require("commander");
-var import_chalk51 = __toESM(require("chalk"));
+var import_chalk52 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.20.6";
+var version = "0.20.9";
 
 // src/index.ts
 init_types();
@@ -9801,10 +9801,242 @@ async function runOriginsRemove(origin, opts) {
 }
 
 // src/commands/op.ts
-var import_chalk50 = __toESM(require("chalk"));
+var import_chalk51 = __toESM(require("chalk"));
 init_auth();
 init_trace();
 init_types();
+
+// src/commands/op-billing.ts
+var import_chalk50 = __toESM(require("chalk"));
+init_admin();
+var SANDBOX = {
+  teamId: "team_1782844865835_zujrf",
+  project: "portaltestproxypreapproved",
+  tenant: "portalteststenant",
+  version: "2.7.0",
+  environment: "prod"
+};
+var dpHost = `${SANDBOX.project}.abz.run`;
+var ZONE_COUNT = 3;
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function readQuiet(read, tries = 8) {
+  let prev = await read();
+  for (let i = 0; i < tries; i++) {
+    await sleep(1200);
+    const now = await read();
+    if (now.band_count === prev.band_count && now.balance_microcents === prev.balance_microcents) return now;
+    prev = now;
+  }
+  return prev;
+}
+async function fire(url, n, headers = {}) {
+  const out = [];
+  for (let i = 0; i < n; i++) {
+    try {
+      const res = await fetch(url, { headers });
+      const ray = (res.headers.get("cf-ray") || "").split("-")[0];
+      out.push({ ray, status: res.status });
+      await res.text().catch(() => "");
+    } catch {
+      out.push({ ray: "", status: 0 });
+    }
+  }
+  return out;
+}
+async function rowsForRays(project, version2, tenant2, rays) {
+  const want = new Set(rays.filter(Boolean));
+  const found = /* @__PURE__ */ new Map();
+  for (let attempt = 0; attempt < 6 && found.size < want.size; attempt++) {
+    if (attempt) await sleep(2e3);
+    const q = new URLSearchParams({ tenant: tenant2, limit: "200" });
+    const res = await admin({
+      path: `/projects/${project}/${version2}/logs/window?${q.toString()}`,
+      method: "GET",
+      summary: "read request log for billing assertion"
+    }).catch(() => ({ rows: [] }));
+    found.clear();
+    for (const r of res.rows ?? []) {
+      if (!want.has(r.request_id)) continue;
+      const list = found.get(r.request_id) ?? [];
+      list.push({ status: r.status, cost_cents: r.cost_cents });
+      found.set(r.request_id, list);
+    }
+  }
+  return found;
+}
+function printDoors(data) {
+  const checks = [];
+  console.log(import_chalk50.default.bold("\n  Doors \u2014 is every way in metered?\n"));
+  const doors = data?.doors ?? [];
+  const metered = doors.filter((d) => d.verdict === "metered");
+  const allowed = doors.filter((d) => d.verdict === "allowed-free");
+  const known = doors.filter((d) => d.verdict === "known-open");
+  const stray = data?.stray_routes ?? [];
+  const errs = data?.errors ?? [];
+  const routeAuditBroke = errs.some((e) => e.startsWith("zone "));
+  const devAuditBroke = errs.some((e) => e.startsWith("workers.dev audit"));
+  console.log(import_chalk50.default.dim(`    ${metered.length} route(s) behind main-proxy (metered)`));
+  for (const d of metered) console.log(import_chalk50.default.green(`      \u2713 ${d.pattern}`));
+  console.log(import_chalk50.default.dim(`
+    ${allowed.length} route(s) free ON PURPOSE`));
+  for (const d of allowed) {
+    console.log(import_chalk50.default.cyan(`      \u2022 ${d.pattern}`) + import_chalk50.default.dim(` \u2192 ${d.script}`));
+    console.log(import_chalk50.default.dim(`        ${d.why}`));
+  }
+  if (known.length) {
+    console.log(import_chalk50.default.yellow(`
+    ${known.length} route(s) KNOWN OPEN \u2014 unmetered, not yet closed`));
+    for (const d of known) {
+      console.log(import_chalk50.default.yellow(`      ! ${d.pattern}`) + import_chalk50.default.dim(` \u2192 ${d.script}`));
+      console.log(import_chalk50.default.dim(`        ${d.why}`));
+    }
+    checks.push({ name: "no known-open doors", status: "KNOWN", detail: `${known.length} unmetered route(s) still open \u2014 see above` });
+  }
+  if (stray.length) {
+    console.log(import_chalk50.default.red(`
+    ${stray.length} STRAY route(s) \u2014 not main-proxy, not on the allowlist`));
+    for (const d of stray) {
+      console.log(import_chalk50.default.red(`      \u2717 ${d.pattern}`) + import_chalk50.default.dim(` \u2192 ${d.script}`));
+      console.log(import_chalk50.default.dim(`        ${d.why}`));
+    }
+    checks.push({ name: "no stray routes", status: "FAIL", detail: `${stray.length}: ${stray.map((s) => s.pattern).join(", ")}` });
+  } else if (routeAuditBroke) {
+    checks.push({ name: "no stray routes", status: "SKIP", detail: `route enumeration failed for ${errs.filter((e) => e.startsWith("zone ")).length} zone(s) \u2014 NOT a pass, the routes were never read. Needs a CF token with Workers Routes:Read.` });
+  } else {
+    checks.push({ name: "no stray routes", status: "PASS", detail: `all ${doors.length} live route(s) across ${ZONE_COUNT} zone(s) are main-proxy or allowlisted` });
+  }
+  const wd = data?.workers_dev ?? {};
+  const open = wd.enabled ?? [];
+  if (open.length) {
+    console.log(import_chalk50.default.red(`
+    ${open.length} of ${wd.total} worker(s) reachable on *.workers.dev`));
+    for (const s of open) console.log(import_chalk50.default.red(`      \u2717 ${s.script}.workers.dev`) + import_chalk50.default.dim(`  (enabled=${s.enabled} previews=${s.previews})`));
+    console.log(import_chalk50.default.dim("        A workers.dev hostname bypasses every CF route, WAF rule and the credit gate."));
+    checks.push({ name: "no workers.dev doors", status: "FAIL", detail: `${open.length} script(s) publicly reachable: ${open.map((s) => s.script).join(", ")}` });
+  } else if (devAuditBroke || !wd.total) {
+    checks.push({ name: "no workers.dev doors", status: "SKIP", detail: "script enumeration failed \u2014 NOT a pass, no subdomain was ever read. Needs a CF token with Workers Scripts:Read." });
+  } else {
+    console.log(import_chalk50.default.green(`
+    \u2713 0 of ${wd.total} workers reachable on *.workers.dev`));
+    checks.push({ name: "no workers.dev doors", status: "PASS", detail: `all ${wd.total} scripts have workers.dev + previews disabled` });
+  }
+  if (data?.how_to_fix) console.log(import_chalk50.default.yellow(`
+    ${data.reason}`) + import_chalk50.default.dim(`
+    ${data.how_to_fix}`));
+  else for (const e of errs) console.log(import_chalk50.default.red(`
+    audit error: ${e}`));
+  if (errs.length) {
+    checks.push({ name: "audit completeness", status: "FAIL", detail: `${errs.length} part(s) of the audit could not run \u2014 coverage is INCOMPLETE, and the checks they would have covered are SKIP above` });
+  }
+  return checks;
+}
+async function runMeter(readLedger, opts) {
+  const checks = [];
+  const N = Math.max(1, Math.min(10, opts.count ?? 3));
+  console.log(import_chalk50.default.bold("\n  Meter \u2014 is 1 request charged exactly 1 request?\n"));
+  const snap = await readLedger();
+  console.log(import_chalk50.default.dim(`    wallet ${snap.billing_account_id} \xB7 band count ${snap.band_count} \xB7 next request ${snap.next_request_cents}\xA2
+`));
+  const url = `https://${dpHost}/${SANDBOX.version}/${SANDBOX.environment}/`;
+  const headers = opts.key ? { "X-API-Key": opts.key } : {};
+  const sent = await fire(url, N, headers);
+  const rays = sent.map((r) => r.ray).filter(Boolean);
+  if (rays.length !== N) {
+    checks.push({ name: "1 request = 1 charge", status: "SKIP", detail: `only ${rays.length}/${N} responses carried a cf-ray \u2014 cannot attribute charges without a request id.` });
+  } else {
+    const rows = await rowsForRays(SANDBOX.project, SANDBOX.version, SANDBOX.tenant, rays);
+    const missing = rays.filter((r) => !rows.has(r));
+    const doubled = rays.filter((r) => (rows.get(r)?.length ?? 0) > 1);
+    if (missing.length === rays.length) {
+      checks.push({ name: "1 request = 1 charge", status: "SKIP", detail: `none of the ${N} request(s) appeared in ${SANDBOX.project}'s log within ~12s (statuses ${sent.map((x) => x.status).join(",")}). Either request logging is off for this proxy or the requests never reached it \u2014 nothing was verified.` });
+    } else if (doubled.length) {
+      checks.push({ name: "1 request = 1 charge", status: "FAIL", detail: `DOUBLE CHARGE: ${doubled.length} of ${N} request(s) produced more than one billed log row (${doubled.map((r) => `${r}\xD7${rows.get(r).length}`).join(", ")}).` });
+    } else if (missing.length) {
+      checks.push({ name: "1 request = 1 charge", status: "FAIL", detail: `${rays.length - missing.length}/${N} request(s) logged exactly once, but ${missing.length} never appeared \u2014 those requests were served and not recorded.` });
+    } else {
+      const costs = rays.map((r) => rows.get(r)[0].cost_cents ?? 0);
+      const statuses = sent.map((x) => x.status).join(",");
+      checks.push({ name: "1 request = 1 charge", status: "PASS", detail: `${N} request(s) (${statuses}) \u2192 exactly ${N} billed row(s), one per request id, at ${costs.join("/")}\xA2 each` });
+      const served = sent.every((x) => x.status > 0 && x.status < 400);
+      const want = served ? snap.next_request_cents : 0;
+      const label3 = served ? "served request charged the catalog rate" : "refused request is not billed";
+      const wrong = want === null ? [] : costs.filter((cst) => Math.abs(cst - want) > 1e-9);
+      if (want === null) {
+        checks.push({ name: label3, status: "SKIP", detail: "no request_bands row \u2014 banded pricing is off, so there is no catalog rate to check against." });
+      } else {
+        checks.push(wrong.length ? { name: label3, status: "FAIL", detail: served ? `expected ${want}\xA2 per request (band ${snap.band_count + 1}, thresholds ${snap.bands?.b1_to}/${snap.bands?.b2_to}); saw ${costs.join(", ")}\xA2` : `our own rejection (status ${sent[0].status}) should cost the caller nothing; the log shows ${costs.join(", ")}\xA2 billed` } : { name: label3, status: "PASS", detail: served ? `every request charged ${want}\xA2, matching the live request_bands row` : `${N} request(s) refused at the gate (status ${sent[0].status}) \u2192 0\xA2 billed, one row each` });
+      }
+    }
+  }
+  const shared = snap.wallet_shared_with ?? [];
+  if (shared.length) {
+    checks.push({
+      name: "pre-upstream reject is refunded",
+      status: "SKIP",
+      detail: `needs a wallet nothing else spends. ${snap.billing_account_id} also pays for ${shared.length} other team(s): ${shared.slice(0, 3).join(", ")}${shared.length > 3 ? " \u2026" : ""} \u2014 including this command's own op-lane calls. A refund is a wallet event with no per-request row, so it cannot be attributed here. NOT VERIFIED.`
+    });
+  } else {
+    const before = await readQuiet(readLedger);
+    const rejects = await fire(`https://${dpHost}/${SANDBOX.version}/${SANDBOX.environment}/__billing_probe`, N);
+    const after = await readQuiet(readLedger);
+    const dBand = after.band_count - before.band_count;
+    const dMoney = (before.balance_microcents ?? 0) - (after.balance_microcents ?? 0);
+    checks.push(dBand === 0 && dMoney === 0 ? { name: "pre-upstream reject is refunded", status: "PASS", detail: `${N} unauthenticated request(s) (${rejects.map((r) => r.status).join(",")}) \u2192 charged then fully refunded: band +0, money +0` } : { name: "pre-upstream reject is refunded", status: "FAIL", detail: `${N} rejected request(s) left band +${dBand} and ${dMoney}\xB5\xA2 charged; expected 0 and 0 \u2014 refund-on-reject is ${dMoney > 0 ? "not firing" : "over-refunding"}.` });
+  }
+  if (!opts.key) {
+    checks.push({ name: "management planes bill correctly", status: "SKIP", detail: "needs --key <key> to call the iam/apikeys planes. NOT COVERED: whether a direct IAM call is billed, and whether the apikeys plane stayed free." });
+  } else {
+    for (const plane of [
+      { name: "iam plane bills 1", project: "iam", url: "https://iam.apiblaze.com/1.0.0/prod/groups", want: 1 },
+      { name: "apikeys plane is free", project: "apikeys", url: "https://apikeys.apiblaze.com/1.0.0/prod/apikeys", want: 0 }
+    ]) {
+      const b = await readQuiet(readLedger);
+      const st = await fire(plane.url, 1, { "X-API-Key": opts.key });
+      const aft = await readQuiet(readLedger);
+      const d = aft.band_count - b.band_count;
+      if (shared.length) {
+        checks.push({ name: plane.name, status: "SKIP", detail: `measured band +${d}, but the wallet is shared so that number is not attributable. NOT VERIFIED.` });
+      } else {
+        checks.push(d === plane.want ? { name: plane.name, status: "PASS", detail: `1 call (${st.map((x) => x.status).join(",")}) \u2192 band +${d}` } : { name: plane.name, status: "FAIL", detail: `1 call (${st.map((x) => x.status).join(",")}) \u2192 band +${d}, expected +${plane.want}. ${d > plane.want ? "Charged more than once for one call." : "Free lane \u2014 this plane is usable without paying."}` });
+      }
+    }
+  }
+  if (!opts.mcpHost || !opts.key) {
+    checks.push({ name: "MCP tools/call = 1 charge", status: "SKIP", detail: "needs --mcp-host <host> --key <key> to send a SERVED tool call. Fixed in code and deployed, but NOT verified live: an unauthenticated probe bills 0\xA2 either way, so it would prove nothing." });
+  } else {
+    const sentMcp = await fire(`https://${opts.mcpHost}/${SANDBOX.version}/${SANDBOX.environment}`, 1, { "X-API-Key": opts.key });
+    const ray = sentMcp[0]?.ray;
+    if (!ray || sentMcp[0].status >= 400) {
+      checks.push({ name: "MCP tools/call = 1 charge", status: "SKIP", detail: `the MCP call returned ${sentMcp[0]?.status} \u2014 only a SERVED tool call can tell one charge from two.` });
+    } else {
+      const rows = await rowsForRays(SANDBOX.project, SANDBOX.version, SANDBOX.tenant, [ray]);
+      const n = rows.get(ray)?.length ?? 0;
+      checks.push(n === 1 ? { name: "MCP tools/call = 1 charge", status: "PASS", detail: "1 tool call \u2192 1 billed row (was 2 before 2026-08-11)" } : { name: "MCP tools/call = 1 charge", status: "FAIL", detail: `1 tool call \u2192 ${n} billed row(s); expected 1. The edge hop is billing again.` });
+    }
+  }
+  return checks;
+}
+function printChecks(checks) {
+  console.log(import_chalk50.default.bold("\n  Results\n"));
+  const mark = { PASS: import_chalk50.default.green("  PASS"), FAIL: import_chalk50.default.red("  FAIL"), SKIP: import_chalk50.default.dim("  SKIP"), KNOWN: import_chalk50.default.yellow(" KNOWN") };
+  for (const ch of checks) {
+    console.log(`  ${mark[ch.status]}  ${import_chalk50.default.bold(ch.name)}`);
+    console.log(import_chalk50.default.dim(`          ${ch.detail}`));
+  }
+  const fails = checks.filter((c) => c.status === "FAIL").length;
+  const skips = checks.filter((c) => c.status === "SKIP").length;
+  const known = checks.filter((c) => c.status === "KNOWN").length;
+  console.log("");
+  const passes = checks.filter((c) => c.status === "PASS").length;
+  if (fails) console.log(import_chalk50.default.red(`  ${fails} check(s) FAILED.`));
+  else if (passes) console.log(import_chalk50.default.green(`  ${passes} check(s) passed, 0 failed.`));
+  else console.log(import_chalk50.default.yellow("  NOTHING WAS VERIFIED \u2014 every check was skipped."));
+  if (known) console.log(import_chalk50.default.yellow(`  ${known} known-open issue(s) still outstanding.`));
+  if (skips) console.log(import_chalk50.default.dim(`  ${skips} check(s) NOT RUN (see SKIP above) \u2014 those invariants are unverified.`));
+  console.log("");
+}
+
+// src/commands/op.ts
 var OPERATOR_EMAILS = /* @__PURE__ */ new Set(["julienpmjacquet@gmail.com", "chkev@umich.edu"]);
 var DASHBOARD_BASE8 = process.env.APIBLAZE_DASHBOARD_BASE || "https://dashboard.apiblaze.com";
 function isOperatorLogin() {
@@ -9838,99 +10070,102 @@ var OP_COMMANDS = [
   { cmd: "op mark", blurb: 'record "I changed something significant just now"', extra: 'apiblaze op mark "cached tenant count"' },
   { cmd: "op latency compare", blurb: "latency before vs after the last mark, equal windows", extra: "--hours N" },
   { cmd: "op credits", blurb: "list credit wallets across all teams" },
+  { cmd: "op billing", blurb: "billing conformance: every door metered, 1 request = 1 charge", extra: "--key K --count N" },
+  { cmd: "op billing doors", blurb: "every live route + workers.dev URL, and whether it passes the meter (free, read-only)" },
+  { cmd: "op billing meter", blurb: "send known traffic, assert the ledger moved by exactly that much", extra: "spends a few tenths of a cent" },
   { cmd: "op residue", blurb: "external-store residue report (Upstash + Neon/OpenFGA) \u2014 dry run, deletes nothing" },
   { cmd: "op sweep", blurb: "delete the orphans the residue report found", extra: "asks first; -y to skip" }
 ];
 function renderOpCommands() {
   const width = Math.max(...OP_COMMANDS.map((c) => c.cmd.length)) + 10;
   const lines = OP_COMMANDS.map((c) => {
-    const left = `  ${import_chalk50.default.cyan(`apiblaze ${c.cmd}`)}`;
+    const left = `  ${import_chalk51.default.cyan(`apiblaze ${c.cmd}`)}`;
     const pad = " ".repeat(Math.max(1, width - c.cmd.length));
-    return `${left}${pad}${c.blurb}${c.extra ? " " + import_chalk50.default.dim(`(${c.extra})`) : ""}`;
+    return `${left}${pad}${c.blurb}${c.extra ? " " + import_chalk51.default.dim(`(${c.extra})`) : ""}`;
   });
   return [
-    import_chalk50.default.bold("Operator commands"),
+    import_chalk51.default.bold("Operator commands"),
     ...lines,
     "",
-    import_chalk50.default.dim("  Operators only. The gate is server-side (dashboard /api/cli/op checks the"),
-    import_chalk50.default.dim("  signed-in email, admin-api re-checks with operatorGate) \u2014 a patched CLI just"),
-    import_chalk50.default.dim("  gets 403s. Every op call is read-only except `op sweep`."),
+    import_chalk51.default.dim("  Operators only. The gate is server-side (dashboard /api/cli/op checks the"),
+    import_chalk51.default.dim("  signed-in email, admin-api re-checks with operatorGate) \u2014 a patched CLI just"),
+    import_chalk51.default.dim("  gets 403s. Every op call is read-only except `op sweep`."),
     "",
-    import_chalk50.default.dim("  Not a CLI command: to prune all non-CP data run scripts/nuke-but-cp.sh --apply --sweep"),
-    import_chalk50.default.dim("  in the repo. Operator dashboards (dlq, thresholds, throttling, pricing, billing,"),
-    import_chalk50.default.dim("  agent-spend, teams, tests, leak-detection, lifecycle) live at /operator/* in the app.")
+    import_chalk51.default.dim("  Not a CLI command: to prune all non-CP data run scripts/nuke-but-cp.sh --apply --sweep"),
+    import_chalk51.default.dim("  in the repo. Operator dashboards (dlq, thresholds, throttling, pricing, billing,"),
+    import_chalk51.default.dim("  agent-spend, teams, tests, leak-detection, lifecycle) live at /operator/* in the app.")
   ].join("\n");
 }
 function printResidue(report, applied) {
   const up = report?.upstash ?? {};
   const fga = report?.fga ?? {};
   const ghosts = report?.ghosts ?? {};
-  console.log(import_chalk50.default.bold(applied ? "\nExternal-residue sweep" : "\nExternal residue (dry-run \u2014 nothing deleted)"));
-  console.log(import_chalk50.default.bold("\n  Upstash"));
+  console.log(import_chalk51.default.bold(applied ? "\nExternal-residue sweep" : "\nExternal residue (dry-run \u2014 nothing deleted)"));
+  console.log(import_chalk51.default.bold("\n  Upstash"));
   const orphans = up.orphans ?? [];
-  if (orphans.length === 0) console.log(import_chalk50.default.green("    no orphaned keys"));
-  for (const o of orphans) console.log(`    ${import_chalk50.default.yellow(o.key)} ${import_chalk50.default.dim(`\u2014 ${o.reason}`)}`);
-  console.log(import_chalk50.default.dim(`    kept (live principals): ${up.kept ?? 0} \xB7 anon wallets (untouched): ${up.anon_wallets ?? 0}`));
+  if (orphans.length === 0) console.log(import_chalk51.default.green("    no orphaned keys"));
+  for (const o of orphans) console.log(`    ${import_chalk51.default.yellow(o.key)} ${import_chalk51.default.dim(`\u2014 ${o.reason}`)}`);
+  console.log(import_chalk51.default.dim(`    kept (live principals): ${up.kept ?? 0} \xB7 anon wallets (untouched): ${up.anon_wallets ?? 0}`));
   if (up.anon_wallet_detail) {
     const d = up.anon_wallet_detail;
-    console.log(import_chalk50.default.dim(`    anon wallets: ${d.count} ($${(d.total_cents / 100).toFixed(2)}), ${d.no_ttl} with NO TTL${d.no_ttl ? " \u26A0" : " (all self-expire)"}`));
+    console.log(import_chalk51.default.dim(`    anon wallets: ${d.count} ($${(d.total_cents / 100).toFixed(2)}), ${d.no_ttl} with NO TTL${d.no_ttl ? " \u26A0" : " (all self-expire)"}`));
   }
   if (up.keyspace_census) {
     const census = Object.entries(up.keyspace_census).map(([k, v]) => `${k}=${v}`).join(" \xB7 ");
-    console.log(import_chalk50.default.dim(`    keyspace: ${census}`));
+    console.log(import_chalk51.default.dim(`    keyspace: ${census}`));
   }
-  if (up.unknown?.length) console.log(import_chalk50.default.dim(`    unknown (never deleted): ${up.unknown.join(", ")}`));
-  if (applied) console.log(`    ${import_chalk50.default.bold(String(up.deleted ?? 0))} key(s) deleted`);
-  for (const e of up.errors ?? []) console.log(import_chalk50.default.red(`    error: ${e}`));
-  console.log(import_chalk50.default.bold("\n  OpenFGA / Neon \u2014 orphan stores"));
+  if (up.unknown?.length) console.log(import_chalk51.default.dim(`    unknown (never deleted): ${up.unknown.join(", ")}`));
+  if (applied) console.log(`    ${import_chalk51.default.bold(String(up.deleted ?? 0))} key(s) deleted`);
+  for (const e of up.errors ?? []) console.log(import_chalk51.default.red(`    error: ${e}`));
+  console.log(import_chalk51.default.bold("\n  OpenFGA / Neon \u2014 orphan stores"));
   if (applied) {
     const swept = fga?.swept ?? [];
-    if (swept.length === 0) console.log(import_chalk50.default.green("    no orphaned stores"));
+    if (swept.length === 0) console.log(import_chalk51.default.green("    no orphaned stores"));
     for (const s of swept) {
       console.log(
-        `    ${import_chalk50.default.yellow(s.store_id)} ${import_chalk50.default.dim(`\u2014 store ${s.openfga_deleted ? "deleted" : "DEFERRED"}, ${s.neon_deleted} Neon tuple(s) purged`)}`
+        `    ${import_chalk51.default.yellow(s.store_id)} ${import_chalk51.default.dim(`\u2014 store ${s.openfga_deleted ? "deleted" : "DEFERRED"}, ${s.neon_deleted} Neon tuple(s) purged`)}`
       );
     }
-    if (fga?.remaining) console.log(import_chalk50.default.yellow(`    ${fga.remaining} more orphan store(s) \u2014 re-run to drain`));
+    if (fga?.remaining) console.log(import_chalk51.default.yellow(`    ${fga.remaining} more orphan store(s) \u2014 re-run to drain`));
     const st = fga?.side_tables;
-    if (st) console.log(import_chalk50.default.dim(`    Neon side-tables purged: ${st.soft_deleted_stores} store records, ${st.orphan_models} models, ${st.orphan_changelog} changelog rows${st.error ? ` (${st.error})` : ""}`));
+    if (st) console.log(import_chalk51.default.dim(`    Neon side-tables purged: ${st.soft_deleted_stores} store records, ${st.orphan_models} models, ${st.orphan_changelog} changelog rows${st.error ? ` (${st.error})` : ""}`));
   } else {
     const fgaOrphans = fga?.orphans ?? [];
-    if (fgaOrphans.length === 0) console.log(import_chalk50.default.green("    no orphaned stores"));
+    if (fgaOrphans.length === 0) console.log(import_chalk51.default.green("    no orphaned stores"));
     for (const s of fgaOrphans) {
       const src = s.in_openfga ? "live in OpenFGA" : "Neon tuples only";
-      console.log(`    ${import_chalk50.default.yellow(s.store_id)} ${import_chalk50.default.dim(`\u2014 ${src}${s.name ? ` (${s.name})` : ""}, ${s.neon_tuples} Neon tuple(s)`)}`);
+      console.log(`    ${import_chalk51.default.yellow(s.store_id)} ${import_chalk51.default.dim(`\u2014 ${src}${s.name ? ` (${s.name})` : ""}, ${s.neon_tuples} Neon tuple(s)`)}`);
     }
-    console.log(import_chalk50.default.dim(`    kept stores: ${(fga?.kept_store_ids ?? []).length}`));
+    console.log(import_chalk51.default.dim(`    kept stores: ${(fga?.kept_store_ids ?? []).length}`));
     const st = fga?.side_tables;
-    if (st) console.log(import_chalk50.default.dim(`    Neon side-table residue: ${st.soft_deleted_stores} soft-deleted store records, ${st.orphan_models} orphan models, ${st.orphan_changelog} orphan changelog rows`));
+    if (st) console.log(import_chalk51.default.dim(`    Neon side-table residue: ${st.soft_deleted_stores} soft-deleted store records, ${st.orphan_models} orphan models, ${st.orphan_changelog} orphan changelog rows`));
   }
-  for (const e of fga?.errors ?? []) console.log(import_chalk50.default.red(`    error: ${e}`));
-  console.log(import_chalk50.default.bold("\n  OpenFGA \u2014 ghost tuples in surviving stores"));
+  for (const e of fga?.errors ?? []) console.log(import_chalk51.default.red(`    error: ${e}`));
+  console.log(import_chalk51.default.bold("\n  OpenFGA \u2014 ghost tuples in surviving stores"));
   if (applied) {
-    if ((ghosts?.ghost_count ?? 0) === 0) console.log(import_chalk50.default.green("    no ghost tuples"));
-    else console.log(`    ${import_chalk50.default.bold(String(ghosts.deleted ?? 0))} ghost tuple(s) deleted ${import_chalk50.default.dim(`(of ${ghosts.ghost_count} found, ${ghosts.scanned_tuples} scanned across ${ghosts.live_stores} live stores)`)}`);
+    if ((ghosts?.ghost_count ?? 0) === 0) console.log(import_chalk51.default.green("    no ghost tuples"));
+    else console.log(`    ${import_chalk51.default.bold(String(ghosts.deleted ?? 0))} ghost tuple(s) deleted ${import_chalk51.default.dim(`(of ${ghosts.ghost_count} found, ${ghosts.scanned_tuples} scanned across ${ghosts.live_stores} live stores)`)}`);
   } else {
     const n = ghosts?.ghost_count ?? 0;
-    if (n === 0) console.log(import_chalk50.default.green(`    no ghost tuples ${import_chalk50.default.dim(`(${ghosts.scanned_tuples ?? 0} scanned across ${ghosts.live_stores ?? 0} live stores)`)}`));
+    if (n === 0) console.log(import_chalk51.default.green(`    no ghost tuples ${import_chalk51.default.dim(`(${ghosts.scanned_tuples ?? 0} scanned across ${ghosts.live_stores ?? 0} live stores)`)}`));
     else {
-      console.log(import_chalk50.default.yellow(`    ${n} ghost tuple(s) referencing entities absent from D1:`));
+      console.log(import_chalk51.default.yellow(`    ${n} ghost tuple(s) referencing entities absent from D1:`));
       for (const g of (ghosts.ghosts ?? []).slice(0, 20)) {
-        console.log(import_chalk50.default.dim(`      ${g.object_type}:${g.object_id} ${g.relation} ${g._user}`));
+        console.log(import_chalk51.default.dim(`      ${g.object_type}:${g.object_id} ${g.relation} ${g._user}`));
       }
-      if (n > 20) console.log(import_chalk50.default.dim(`      \u2026 and ${n - 20} more`));
+      if (n > 20) console.log(import_chalk51.default.dim(`      \u2026 and ${n - 20} more`));
     }
   }
-  for (const e of ghosts?.errors ?? []) console.log(import_chalk50.default.red(`    error: ${e}`));
+  for (const e of ghosts?.errors ?? []) console.log(import_chalk51.default.red(`    error: ${e}`));
   console.log();
 }
 async function runOp(sub, opts = {}, view) {
   if (!loadCredentials()) {
-    console.log(import_chalk50.default.dim("Not logged in. Run `apiblaze login`."));
+    console.log(import_chalk51.default.dim("Not logged in. Run `apiblaze login`."));
     return;
   }
   if (!isOperatorLogin()) {
-    console.log(import_chalk50.default.dim("`apiblaze op` is only available to platform operators."));
+    console.log(import_chalk51.default.dim("`apiblaze op` is only available to platform operators."));
     return;
   }
   switch (sub) {
@@ -9956,17 +10191,17 @@ async function runOp(sub, opts = {}, view) {
       const nSide = (st.soft_deleted_stores ?? 0) + (st.orphan_models ?? 0) + (st.orphan_changelog ?? 0);
       printResidue(report, false);
       if (nUp + nFga + nGhost + nSide === 0) {
-        console.log(import_chalk50.default.green("Nothing to sweep."));
+        console.log(import_chalk51.default.green("Nothing to sweep."));
         return;
       }
       if (!opts.yes) {
         const readline3 = await import("readline/promises");
         const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
         const answer = await rl.question(
-          import_chalk50.default.red(`Delete ${nUp} Upstash key(s) + ${nFga} OpenFGA store(s) + ${nGhost} ghost tuple(s) + ${nSide} Neon side-table row(s)? Type 'sweep' to confirm: `)
+          import_chalk51.default.red(`Delete ${nUp} Upstash key(s) + ${nFga} OpenFGA store(s) + ${nGhost} ghost tuple(s) + ${nSide} Neon side-table row(s)? Type 'sweep' to confirm: `)
         );
         rl.close();
-        if (answer.trim() !== "sweep") return void console.log(import_chalk50.default.dim("Aborted."));
+        if (answer.trim() !== "sweep") return void console.log(import_chalk51.default.dim("Aborted."));
       }
       const result = await opCall({ method: "POST", path: "/operator/external-residue/sweep", summary: "external residue sweep" });
       if (opts.json) return void console.log(JSON.stringify(result, null, 2));
@@ -9976,26 +10211,61 @@ async function runOp(sub, opts = {}, view) {
     case "mark": {
       const label3 = (view ?? "").trim();
       if (!label3) {
-        console.log(import_chalk50.default.red("Give the change a name:") + import_chalk50.default.cyan(' apiblaze op mark "cached tenant count"'));
+        console.log(import_chalk51.default.red("Give the change a name:") + import_chalk51.default.cyan(' apiblaze op mark "cached tenant count"'));
         return;
       }
       const res = await opCall({ method: "POST", path: "/operator/latency/mark", body: { label: label3 }, summary: "record change marker" });
       const ts = new Date(res?.marker?.ts ?? Date.now()).toISOString();
-      console.log(import_chalk50.default.green(`
-  Marked: `) + import_chalk50.default.bold(label3));
-      console.log(import_chalk50.default.dim(`  ${ts}`));
-      console.log(import_chalk50.default.dim(`  Once traffic has run on both sides, compare with: `) + import_chalk50.default.cyan("apiblaze op latency compare") + "\n");
+      console.log(import_chalk51.default.green(`
+  Marked: `) + import_chalk51.default.bold(label3));
+      console.log(import_chalk51.default.dim(`  ${ts}`));
+      console.log(import_chalk51.default.dim(`  Once traffic has run on both sides, compare with: `) + import_chalk51.default.cyan("apiblaze op latency compare") + "\n");
       return;
     }
     case "credits": {
       const data = await opCall({ method: "GET", path: "/operator/credits", summary: "list credit wallets" });
       if (opts.json) return void console.log(JSON.stringify(data, null, 2));
       const accounts = data?.accounts ?? [];
-      if (accounts.length === 0) return void console.log(import_chalk50.default.dim("No credit wallets."));
+      if (accounts.length === 0) return void console.log(import_chalk51.default.dim("No credit wallets."));
       for (const a of accounts) {
         const bal = typeof a.balance_cents === "number" ? `$${(a.balance_cents / 100).toFixed(2)}` : "?";
-        console.log(`  ${import_chalk50.default.bold(bal.padStart(9))}  ${a.walletId}${a.owner_email ? import_chalk50.default.dim(` \u2014 ${a.owner_email}`) : a.anon ? import_chalk50.default.dim(" \u2014 anon") : ""}`);
+        console.log(`  ${import_chalk51.default.bold(bal.padStart(9))}  ${a.walletId}${a.owner_email ? import_chalk51.default.dim(` \u2014 ${a.owner_email}`) : a.anon ? import_chalk51.default.dim(" \u2014 anon") : ""}`);
+      }
+      return;
+    }
+    // ── BILLING (specs/billing/callable_outside_a_request.md) ─────────────
+    // Two invariants: every door is metered (so nobody runs their RBAC/OpenFGA on
+    // us for free), and one request is charged one request (so closing a free lane
+    // by billing it can never turn into a double charge).
+    case "billing": {
+      const which = (view ?? "").trim().toLowerCase();
+      if (which && which !== "doors" && which !== "meter") {
+        return void console.log(import_chalk51.default.red(`Unknown: apiblaze op billing ${which}. Use 'doors', 'meter', or neither for both.`));
+      }
+      const checks = [];
+      let doorsData = null;
+      if (which !== "meter") {
+        doorsData = await opCall({ method: "GET", path: "/operator/billing/doors", summary: "billing door audit" });
+        if (!opts.json) checks.push(...printDoors(doorsData));
+      }
+      if (which !== "doors") {
+        const teamId = opts.team || void 0;
+        const readLedger = async () => {
+          const q = teamId ? `?team_id=${encodeURIComponent(String(teamId))}` : "";
+          return await opCall({
+            method: "GET",
+            path: `/operator/billing/ledger${q || "?team_id=team_1782844865835_zujrf"}`,
+            summary: "billing ledger snapshot"
+          });
+        };
+        checks.push(...await runMeter(readLedger, {
+          key: opts.key,
+          mcpHost: opts.mcpHost,
+          count: opts.count ? Number(opts.count) : void 0
+        }));
       }
+      if (opts.json) return void console.log(JSON.stringify({ doors: doorsData, checks }, null, 2));
+      printChecks(checks);
       return;
     }
     // ── LATENCY (specs/latency/ §7.4) ─────────────────────────────────────
@@ -10031,29 +10301,29 @@ async function runOp(sub, opts = {}, view) {
         const data = await opCall({ method: "GET", path: `/operator/latency/grades${q}`, summary: "latency grades" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const t = data.thresholds_ms;
-        console.log(import_chalk50.default.bold("\nHow good was apiblaze itself?") + import_chalk50.default.dim("  (our overhead only \u2014 a slow customer API never counts against us)"));
-        console.log(import_chalk50.default.dim(`  excellent <${t.excellent.replace("<", "")}ms \xB7 okay ${t.okay}ms \xB7 bad ${t.bad}ms \xB7 terrible ${t.terrible.replace(">=", "")}ms+
+        console.log(import_chalk51.default.bold("\nHow good was apiblaze itself?") + import_chalk51.default.dim("  (our overhead only \u2014 a slow customer API never counts against us)"));
+        console.log(import_chalk51.default.dim(`  excellent <${t.excellent.replace("<", "")}ms \xB7 okay ${t.okay}ms \xB7 bad ${t.bad}ms \xB7 terrible ${t.terrible.replace(">=", "")}ms+
 `));
-        console.log(import_chalk50.default.dim("  date         reqs   excellent      okay       bad  terrible"));
+        console.log(import_chalk51.default.dim("  date         reqs   excellent      okay       bad  terrible"));
         for (const d of data.days ?? []) {
           const p = d.pct;
-          const cell = (v, colour) => v > 0 ? colour(`${String(v).padStart(5)}%`) : import_chalk50.default.dim(`${String(v).padStart(5)}%`);
+          const cell = (v, colour) => v > 0 ? colour(`${String(v).padStart(5)}%`) : import_chalk51.default.dim(`${String(v).padStart(5)}%`);
           console.log(
-            `  ${d.date}  ${String(d.total).padStart(5)}   ${cell(p.excellent, import_chalk50.default.green)}  ${cell(p.okay, import_chalk50.default.cyan)}  ${cell(p.bad, import_chalk50.default.yellow)}  ${cell(p.terrible, import_chalk50.default.red)}`
+            `  ${d.date}  ${String(d.total).padStart(5)}   ${cell(p.excellent, import_chalk51.default.green)}  ${cell(p.okay, import_chalk51.default.cyan)}  ${cell(p.bad, import_chalk51.default.yellow)}  ${cell(p.terrible, import_chalk51.default.red)}`
           );
         }
         const cul = data.culprits ?? [];
         if (cul.length) {
-          console.log(import_chalk50.default.bold("\n  Who caused the bad and terrible ones\n"));
-          console.log(import_chalk50.default.dim("     bad  terrible  feature \u2192 dependency"));
+          console.log(import_chalk51.default.bold("\n  Who caused the bad and terrible ones\n"));
+          console.log(import_chalk51.default.dim("     bad  terrible  feature \u2192 dependency"));
           for (const r of cul.slice(0, 12)) {
             if (!r.bad && !r.terrible) continue;
             console.log(
-              `  ${String(r.bad).padStart(6)}  ${import_chalk50.default.red(String(r.terrible).padStart(8))}  ${import_chalk50.default.yellow(r.feature)} ${import_chalk50.default.dim("\u2192")} ${import_chalk50.default.cyan(r.dep)}`
+              `  ${String(r.bad).padStart(6)}  ${import_chalk51.default.red(String(r.terrible).padStart(8))}  ${import_chalk51.default.yellow(r.feature)} ${import_chalk51.default.dim("\u2192")} ${import_chalk51.default.cyan(r.dep)}`
             );
           }
         }
-        if (data.caveat) console.log(import_chalk50.default.dim(`
+        if (data.caveat) console.log(import_chalk51.default.dim(`
   \u26A0 ${data.caveat}
 `));
         return;
@@ -10062,24 +10332,24 @@ async function runOp(sub, opts = {}, view) {
         const data = await opCall({ method: "GET", path: `/operator/latency/compare${q}`, summary: "latency before/after" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const b = data.before, a = data.after, d = data.delta;
-        console.log(import_chalk50.default.bold(`
-Before vs after: `) + import_chalk50.default.cyan(data.marker.label));
-        console.log(import_chalk50.default.dim(`  marked ${new Date(data.marker.ts).toISOString()} \xB7 ${data.window_hours}h either side
+        console.log(import_chalk51.default.bold(`
+Before vs after: `) + import_chalk51.default.cyan(data.marker.label));
+        console.log(import_chalk51.default.dim(`  marked ${new Date(data.marker.ts).toISOString()} \xB7 ${data.window_hours}h either side
 `));
         const row = (name, before, after, delta) => {
           const arrow = delta === 0 ? "=" : delta < 0 ? "\u2193" : "\u2191";
           const txt = `${String(before).padStart(6)}ms  \u2192${String(after).padStart(7)}ms   ${arrow}${Math.abs(delta)}ms`;
-          console.log(`  ${name.padEnd(22)}${data.trustworthy ? delta <= 0 ? import_chalk50.default.green(txt) : import_chalk50.default.red(txt) : import_chalk50.default.dim(txt)}`);
+          console.log(`  ${name.padEnd(22)}${data.trustworthy ? delta <= 0 ? import_chalk51.default.green(txt) : import_chalk51.default.red(txt) : import_chalk51.default.dim(txt)}`);
         };
-        console.log(import_chalk50.default.dim("  metric                 before        after      change"));
+        console.log(import_chalk51.default.dim("  metric                 before        after      change"));
         row("total p50", b.total_p50, a.total_p50, d.total_p50);
         row("total p95", b.total_p95, a.total_p95, d.total_p95);
         row("apiblaze overhead p50", b.gw_p50, a.gw_p50, d.gw_p50);
         row("apiblaze overhead p95", b.gw_p95, a.gw_p95, d.gw_p95);
-        console.log(import_chalk50.default.dim(`
+        console.log(import_chalk51.default.dim(`
   requests: ${b.requests} before \xB7 ${a.requests} after`));
         for (const w of data.warnings ?? []) {
-          console.log((data.trustworthy ? import_chalk50.default.dim : import_chalk50.default.yellow)(`  ${data.trustworthy ? "\xB7" : "\u26A0"} ${w}`));
+          console.log((data.trustworthy ? import_chalk51.default.dim : import_chalk51.default.yellow)(`  ${data.trustworthy ? "\xB7" : "\u26A0"} ${w}`));
         }
         console.log("");
         return;
@@ -10088,19 +10358,19 @@ Before vs after: `) + import_chalk50.default.cyan(data.marker.label));
         const data = await opCall({ method: "GET", path: `/operator/latency/slow${q}`, summary: "slowest requests" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const rows2 = data?.rows ?? [];
-        if (!rows2.length) return void console.log(import_chalk50.default.dim("No requests over the threshold in that window."));
-        console.log(import_chalk50.default.bold(`
+        if (!rows2.length) return void console.log(import_chalk51.default.dim("No requests over the threshold in that window."));
+        console.log(import_chalk51.default.bold(`
 Slowest requests \u2014 last ${data.window_hours}h, over ${data.min_ms}ms
 `));
-        console.log(import_chalk50.default.dim("  total   ours   theirs  blame                 request id"));
+        console.log(import_chalk51.default.dim("  total   ours   theirs  blame                 request id"));
         for (const r of rows2.slice(0, 30)) {
           console.log(
-            `  ${String(Math.round(r.duration_ms)).padStart(6)}  ${String(Math.round(r.gateway_ms)).padStart(5)}  ${String(Math.round(r.upstream_ttfb_ms)).padStart(6)}  ${import_chalk50.default.yellow(`${r.slow_gw_feature || "-"}\u2192${r.slow_dep || "-"}`.padEnd(20))}  ${import_chalk50.default.dim(r.request_id || "")}`
+            `  ${String(Math.round(r.duration_ms)).padStart(6)}  ${String(Math.round(r.gateway_ms)).padStart(5)}  ${String(Math.round(r.upstream_ttfb_ms)).padStart(6)}  ${import_chalk51.default.yellow(`${r.slow_gw_feature || "-"}\u2192${r.slow_dep || "-"}`.padEnd(20))}  ${import_chalk51.default.dim(r.request_id || "")}`
           );
         }
-        console.log(import_chalk50.default.dim(`
+        console.log(import_chalk51.default.dim(`
   The last column is the request id (Cloudflare calls it a "cf-ray"). Look one up with`));
-        console.log(import_chalk50.default.dim(`  \`apiblaze logs\` for that request's exact per-feature breakdown \u2014 unsampled, unlike the table above.
+        console.log(import_chalk51.default.dim(`  \`apiblaze logs\` for that request's exact per-feature breakdown \u2014 unsampled, unlike the table above.
 `));
         return;
       }
@@ -10108,17 +10378,17 @@ Slowest requests \u2014 last ${data.window_hours}h, over ${data.min_ms}ms
         const data = await opCall({ method: "GET", path: `/operator/latency/llm${q}`, summary: "llm latency" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const rows2 = data?.rows ?? [];
-        if (!rows2.length) return void console.log(import_chalk50.default.dim("No LLM traffic in that window."));
-        console.log(import_chalk50.default.bold(`
+        if (!rows2.length) return void console.log(import_chalk51.default.dim("No LLM traffic in that window."));
+        console.log(import_chalk51.default.bold(`
 LLM timing \u2014 last ${data.window_hours}h
 `));
-        console.log(import_chalk50.default.dim("  requests   gen p95   reserve p95   in/out tokens p95   model"));
+        console.log(import_chalk51.default.dim("  requests   gen p95   reserve p95   in/out tokens p95   model"));
         for (const r of rows2) {
           console.log(
             `  ${String(Math.round(r.requests)).padStart(8)}   ${String(Math.round(r.gen_p95_ms)).padStart(6)}ms   ${String(Math.round(r.reserve_p95_ms)).padStart(9)}ms   ${String(Math.round(r.input_tokens_p95)).padStart(6)}/${String(Math.round(r.output_tokens_p95)).padEnd(6)}   ${r.model || "-"}`
           );
         }
-        console.log(import_chalk50.default.dim(`
+        console.log(import_chalk51.default.dim(`
   ${data.note}
 `));
         return;
@@ -10129,26 +10399,26 @@ LLM timing \u2014 last ${data.window_hours}h
       ]);
       if (opts.json) return void console.log(JSON.stringify({ blame, summary }, null, 2));
       const ov = summary?.apiblaze_overhead_ms ?? {};
-      console.log(import_chalk50.default.bold(`
+      console.log(import_chalk51.default.bold(`
 Latency \u2014 last ${summary?.window_hours ?? "?"}h, ${Number(summary?.requests ?? 0).toLocaleString()} requests
 `));
-      console.log(`  ${import_chalk50.default.bold("apiblaze overhead")}  p50 ${String(ov.p50 ?? 0).padStart(5)}ms   p95 ${String(ov.p95 ?? 0).padStart(6)}ms   p99 ${String(ov.p99 ?? 0).padStart(6)}ms   ${import_chalk50.default.dim("\u2190 ours")}`);
-      console.log(`  ${import_chalk50.default.bold("upstream ttfb    ")}  ${" ".repeat(24)}p95 ${String(summary?.upstream_ttfb_p95_ms ?? 0).padStart(6)}ms   ${import_chalk50.default.dim("\u2190 theirs")}`);
-      console.log(import_chalk50.default.dim(`  (per-request percentiles \u2014 never subtract one from the other)
+      console.log(`  ${import_chalk51.default.bold("apiblaze overhead")}  p50 ${String(ov.p50 ?? 0).padStart(5)}ms   p95 ${String(ov.p95 ?? 0).padStart(6)}ms   p99 ${String(ov.p99 ?? 0).padStart(6)}ms   ${import_chalk51.default.dim("\u2190 ours")}`);
+      console.log(`  ${import_chalk51.default.bold("upstream ttfb    ")}  ${" ".repeat(24)}p95 ${String(summary?.upstream_ttfb_p95_ms ?? 0).padStart(6)}ms   ${import_chalk51.default.dim("\u2190 theirs")}`);
+      console.log(import_chalk51.default.dim(`  (per-request percentiles \u2014 never subtract one from the other)
 `));
       const rows = blame?.blame ?? [];
-      if (!rows.length) return void console.log(import_chalk50.default.dim("No latency rows in that window."));
-      console.log(import_chalk50.default.bold("  Which feature ate the time, and what inside it\n"));
-      console.log(import_chalk50.default.dim("   share   p95      feature \u2192 dependency"));
+      if (!rows.length) return void console.log(import_chalk51.default.dim("No latency rows in that window."));
+      console.log(import_chalk51.default.bold("  Which feature ate the time, and what inside it\n"));
+      console.log(import_chalk51.default.dim("   share   p95      feature \u2192 dependency"));
       for (const r of rows.slice(0, 15)) {
         const share = `${(r.share * 100).toFixed(1)}%`;
-        console.log(`   ${share.padStart(6)}  ${String(r.p95_ms).padStart(6)}ms  ${import_chalk50.default.yellow(r.feature)} ${import_chalk50.default.dim("\u2192")} ${import_chalk50.default.cyan(r.dep)}`);
+        console.log(`   ${share.padStart(6)}  ${String(r.p95_ms).padStart(6)}ms  ${import_chalk51.default.yellow(r.feature)} ${import_chalk51.default.dim("\u2192")} ${import_chalk51.default.cyan(r.dep)}`);
       }
       console.log("");
       return;
     }
     default:
-      console.log(import_chalk50.default.red(`Unknown op subcommand '${sub}'. Run \`apiblaze op\` for the menu.`));
+      console.log(import_chalk51.default.red(`Unknown op subcommand '${sub}'. Run \`apiblaze op\` for the menu.`));
   }
 }
 
@@ -10211,7 +10481,7 @@ program.command("dev").description("Put your localhost behind a public URL (dev
   try {
     const resolved = parseInt(port ?? opts.port, 10);
     if (Number.isNaN(resolved)) {
-      console.error(import_chalk51.default.red(`Invalid port: ${port ?? opts.port}`));
+      console.error(import_chalk52.default.red(`Invalid port: ${port ?? opts.port}`));
       process.exit(1);
     }
     await runDev({ port: resolved, project: opts.project, yes: opts.yes, captureFile: opts.captureFile, newSession: opts.newSession });
@@ -10310,7 +10580,7 @@ apikeys.command("list").description("List control-plane API keys in your team").
 apikeys.command("mint").description("Create a control-plane API key (secret shown once)").option("--desc <text>", "Description").option("--expires-days <n>", "Expiry in days (default 90 server-side)").option("--team <id|name>", "Team (defaults to active team)").option("--json", "Output machine-readable JSON").action(action((opts, cmd) => runKeyMint({ ...cmd.parent?.opts(), ...opts })));
 apikeys.command("revoke").description("Revoke a control-plane API key").argument("<keyId>", "Key id (see `apikeys list`)").option("--team <id|name>", "Team (defaults to active team)").action(action((keyId, opts, cmd) => runKeyRevoke(keyId, { ...cmd.parent?.opts(), ...opts })));
 program.addCommand(apikeys, { hidden: true });
-var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "latency | mark | credits | residue | sweep (omit for the menu)").argument("[view]", "for `latency`: slow | llm | compare | grades \xB7 for `mark`: the change name, quoted").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").option("--hours <n>", "Look-back window in hours (default 1)").option("--team <id>", "Filter to one team").option("--project <name>", "Filter to one proxy").option("--api-version <v>", "Filter to one API version").option("--tenant <name>", "Filter to one tenant").option("--route <path>", "Filter to one route").option("--environment <env>", "Filter to one environment").option("--status-class <c>", "Filter to a status class (2xx/4xx/5xx)").option("--min-ms <n>", "For `latency slow`: minimum duration (default 1000)").option("--days <n>", "For `latency grades`: how many days back (default 7)").option("--excellent <ms>", "Grade threshold: under this is excellent (default 250)").option("--okay <ms>", "Grade threshold: under this is okay (default 500)").option("--bad <ms>", "Grade threshold: under this is bad, at/over is terrible (default 1000)").action(action((sub, view, opts) => runOp(sub, opts, view))).addHelpText("after", () => `
+var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "latency | billing | mark | credits | residue | sweep (omit for the menu)").argument("[view]", "for `latency`: slow | llm | compare | grades \xB7 for `billing`: doors | meter \xB7 for `mark`: the change name, quoted").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").option("--hours <n>", "Look-back window in hours (default 1)").option("--team <id>", "Filter to one team").option("--project <name>", "Filter to one proxy").option("--api-version <v>", "Filter to one API version").option("--tenant <name>", "Filter to one tenant").option("--route <path>", "Filter to one route").option("--environment <env>", "Filter to one environment").option("--status-class <c>", "Filter to a status class (2xx/4xx/5xx)").option("--min-ms <n>", "For `latency slow`: minimum duration (default 1000)").option("--days <n>", "For `latency grades`: how many days back (default 7)").option("--excellent <ms>", "Grade threshold: under this is excellent (default 250)").option("--okay <ms>", "Grade threshold: under this is okay (default 500)").option("--bad <ms>", "Grade threshold: under this is bad, at/over is terrible (default 1000)").option("--key <key>", "For `billing meter`: a data-plane API key for the sandbox proxy (without it the served-request checks are SKIPPED)").option("--count <n>", "For `billing meter`: requests per check (default 3, max 10)").option("--mcp-host <host>", "For `billing meter`: an MCP host to check tools/call is charged once").action(action((sub, view, opts) => runOp(sub, opts, view))).addHelpText("after", () => `
 ${renderOpCommands()}
 `);
 program.addCommand(op, { hidden: true });
@@ -10343,7 +10613,7 @@ function groupedCommandHelp() {
       const sub = byName.get(e.parent)?.commands.find((s) => s.name() === e.sub);
       return sub ? `  ${helpLabel(e).padEnd(width)}${sub.description()}` : "";
     }).filter(Boolean).join("\n");
-    return `${import_chalk51.default.bold(g.title)}
+    return `${import_chalk52.default.bold(g.title)}
 ${rows}`;
   }).join("\n\n");
 }
@@ -10381,14 +10651,14 @@ async function recoverStaleTeam() {
     const { resolveLinkedTeam: resolveLinkedTeam2 } = await Promise.resolve().then(() => (init_team(), team_exports));
     const linked = await resolveLinkedTeam2({ preferredId: creds.teamId, interactive: !!process.stdin.isTTY });
     if (!linked) {
-      console.error(import_chalk51.default.yellow("Your account has no teams anymore (deleted?). Run `apiblaze login` or `apiblaze create` to get a workspace."));
+      console.error(import_chalk52.default.yellow("Your account has no teams anymore (deleted?). Run `apiblaze login` or `apiblaze create` to get a workspace."));
       return;
     }
     if (linked.teamId === creds.teamId) return;
     const next = { ...creds, teamId: linked.teamId, teamName: linked.teamName };
     delete next.activeTenant;
     saveCredentials(next);
-    console.error(import_chalk51.default.yellow(`Your previous team no longer exists \u2014 relinked to ${import_chalk51.default.bold(linked.teamName ?? linked.teamId)}. Re-run your command.`));
+    console.error(import_chalk52.default.yellow(`Your previous team no longer exists \u2014 relinked to ${import_chalk52.default.bold(linked.teamName ?? linked.teamId)}. Re-run your command.`));
   } catch {
   }
 }
@@ -10396,16 +10666,16 @@ async function printError(err) {
   if (err instanceof ApiError) {
     const data = err.body;
     const extra = [data?.body?.reason, data?.body?.details, data?.details, data?.body?.error].find((x) => typeof x === "string" && x && x !== err.message);
-    console.error(import_chalk51.default.red(`
+    console.error(import_chalk52.default.red(`
 API error (${err.status}): ${err.message}${extra ? ` \u2014 ${extra}` : ""}`));
     if (err.status === 403 || err.status === 404) {
       await recoverStaleTeam();
     }
   } else if (err instanceof Error) {
-    console.error(import_chalk51.default.red(`
+    console.error(import_chalk52.default.red(`
 Error: ${err.message}`));
   } else {
-    console.error(import_chalk51.default.red("\nUnknown error"));
+    console.error(import_chalk52.default.red("\nUnknown error"));
   }
 }
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apiblaze",
-  "version": "0.20.6",
+  "version": "0.20.9",
   "description": "APIblaze CLI — Chat with your APIs, Manage your API keys, users and groups with the APIblaze serverless proxy",
   "keywords": [
     "apiblaze",