apiblaze 0.21.5 → 0.21.6

package/dist/index.js

@@ -40,9 +40,9 @@ var init_types = __esm({
   "src/types.ts"() {
     "use strict";
     ApiError = class extends Error {
-      constructor(status, message, body) {
+      constructor(status2, message, body) {
         super(message);
-        this.status = status;
+        this.status = status2;
         this.body = body;
         this.name = "ApiError";
       }
@@ -81,6 +81,8 @@ function loadCredentials() {
   }
 }
 function getAccessToken() {
+  const fromEnv = process.env.APIBLAZE_TOKEN;
+  if (fromEnv && fromEnv.trim()) return fromEnv.trim();
   const creds = loadCredentials();
   if (!creds) {
     throw new Error("Not authenticated. Run `apiblaze login` first.");
@@ -545,19 +547,19 @@ var init_trace = __esm({
 });
 
 // src/lib/admin.ts
-async function admin(call) {
+async function admin(call2) {
   const token = getAccessToken();
   const res = await fetch(`${DASHBOARD_BASE3}/api/cli/admin`, {
     method: "POST",
     headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
-    body: JSON.stringify({ path: call.path, method: call.method, body: call.body })
+    body: JSON.stringify({ path: call2.path, method: call2.method, body: call2.body })
   });
   let data = null;
   try {
     data = await res.json();
   } catch {
   }
-  recordCall({ method: call.method, path: call.path, body: call.body, status: res.status, summary: call.summary });
+  recordCall({ method: call2.method, path: call2.path, body: call2.body, status: res.status, summary: call2.summary });
   maybePrintBilling(data);
   if (!res.ok) {
     const msg = data?.details ?? data?.error ?? res.statusText;
@@ -650,13 +652,13 @@ async function resolveActingTeam(caller, optTeam) {
   }
   return resolveTeam(optTeam);
 }
-async function producer(caller, call) {
-  if (caller.mode === "session") return admin(call);
-  const out = await cpFetch(caller.cpKey, call.path, {
-    method: call.method,
-    ...call.body !== void 0 ? { body: JSON.stringify(call.body) } : {}
+async function producer(caller, call2) {
+  if (caller.mode === "session") return admin(call2);
+  const out = await cpFetch(caller.cpKey, call2.path, {
+    method: call2.method,
+    ...call2.body !== void 0 ? { body: JSON.stringify(call2.body) } : {}
   });
-  recordCall({ method: call.method, path: call.path, body: call.body, status: 200, summary: call.summary });
+  recordCall({ method: call2.method, path: call2.path, body: call2.body, status: 200, summary: call2.summary });
   return out;
 }
 async function resolveProjectVia(caller, teamId, nameOrId, version2) {
@@ -1332,10 +1334,10 @@ var init_tenant_pick = __esm({
 // src/index.ts
 var import_fs5 = __toESM(require("fs"));
 var import_commander = require("commander");
-var import_chalk59 = __toESM(require("chalk"));
+var import_chalk62 = __toESM(require("chalk"));
 
 // package.json
-var version = "0.21.5";
+var version = "0.21.6";
 
 // src/index.ts
 init_types();
@@ -1523,11 +1525,11 @@ function colorMethod(method) {
   const colorFn = METHOD_COLORS[method.toUpperCase()] ?? import_chalk3.default.white;
   return colorFn(method.padEnd(7));
 }
-function colorStatus(status) {
-  const s = String(status);
-  if (status >= 500) return import_chalk3.default.red(s);
-  if (status >= 400) return import_chalk3.default.yellow(s);
-  if (status >= 300) return import_chalk3.default.cyan(s);
+function colorStatus(status2) {
+  const s = String(status2);
+  if (status2 >= 500) return import_chalk3.default.red(s);
+  if (status2 >= 400) return import_chalk3.default.yellow(s);
+  if (status2 >= 300) return import_chalk3.default.cyan(s);
   return import_chalk3.default.green(s);
 }
 function colorLatency(latency) {
@@ -2041,8 +2043,8 @@ function startTunnelClient(opts) {
     inflight.delete(id);
     void forward(socket, id, f);
   }
-  function sendResponse(socket, id, status, headers, body) {
-    send(socket, { id, type: "res", status, headers, bodyLen: body.length });
+  function sendResponse(socket, id, status2, headers, body) {
+    send(socket, { id, type: "res", status: status2, headers, bodyLen: body.length });
     if (body.length === 0) {
       send(socket, { id, type: "chunk", seq: 0, data: "", final: true });
       return;
@@ -2052,7 +2054,7 @@ function startTunnelClient(opts) {
       send(socket, { id, type: "chunk", seq: seq++, data: slice.toString("base64"), final: off + CHUNK_BYTES >= body.length });
     }
   }
-  function record(f, reqBody, status, captured, resHeaders, resBody) {
+  function record(f, reqBody, status2, captured, resHeaders, resBody) {
     if (!opts.onRecord) return;
     const req = encodeBody(reqBody);
     const res = resBody ? encodeBody(resBody) : void 0;
@@ -2065,7 +2067,7 @@ function startTunnelClient(opts) {
       requestHeaders: f.headers,
       requestBody: reqBody.length ? req.value : void 0,
       requestBodyEncoding: reqBody.length ? req.encoding : void 0,
-      status,
+      status: status2,
       responseHeaders: resHeaders,
       responseBody: res?.value,
       responseBodyEncoding: res?.encoding,
@@ -2078,7 +2080,7 @@ function startTunnelClient(opts) {
     if (body.length) init.body = body;
     try {
       const resp = await fetch(target + f.path, init);
-      const status = resp.status;
+      const status2 = resp.status;
       const buf = Buffer.from(await resp.arrayBuffer());
       const headers = {};
       resp.headers.forEach((value, key) => {
@@ -2088,9 +2090,9 @@ function startTunnelClient(opts) {
         capturing = false;
         opts.onResume?.();
       }
-      sendResponse(socket, id, status, headers, buf);
-      opts.onEntry({ method: f.method, path: f.path, status, latency: Date.now() - f.start });
-      record(f, body, status, false, headers, buf);
+      sendResponse(socket, id, status2, headers, buf);
+      opts.onEntry({ method: f.method, path: f.path, status: status2, latency: Date.now() - f.start });
+      record(f, body, status2, false, headers, buf);
     } catch (err) {
       const code = err?.cause?.code;
       if (OFFLINE_CODES.has(code)) {
@@ -2731,101 +2733,101 @@ function refreshInstall(cli, spec2) {
   const r = cli === "claude" ? installIntoClaude(spec2) : installIntoCodex(spec2);
   return r.ok;
 }
-async function installAndDemo(cli, spec2, getQuestion, log = console.log) {
+async function installAndDemo(cli, spec2, getQuestion, log4 = console.log) {
   if (cli.kind === "claude") {
-    log(`
+    log4(`
   ${import_chalk10.default.dim("$")} ${renderCommand(["claude", ...claudeInstallArgs(spec2, true)])}`);
     const r = installIntoClaude(spec2);
     if (!r.ok) {
-      log(import_chalk10.default.red(`  ${r.conflict ? "" : "Install failed: "}${r.error}`));
+      log4(import_chalk10.default.red(`  ${r.conflict ? "" : "Install failed: "}${r.error}`));
       return false;
     }
-    log(`  ${import_chalk10.default.green("\u2714")} MCP ${import_chalk10.default.bold(spec2.name)} added to Claude CLI (local scope \u2014 this directory).`);
-    if (spec2.apiKey) log(import_chalk10.default.dim("     The API key is stored in Claude's local MCP config for this directory."));
+    log4(`  ${import_chalk10.default.green("\u2714")} MCP ${import_chalk10.default.bold(spec2.name)} added to Claude CLI (local scope \u2014 this directory).`);
+    if (spec2.apiKey) log4(import_chalk10.default.dim("     The API key is stored in Claude's local MCP config for this directory."));
   } else {
     const r = installIntoCodex(spec2);
     if (!r.ok) {
-      log(import_chalk10.default.red(`  ${r.conflict ? "" : `Could not write ${r.path}: `}${r.error}`));
+      log4(import_chalk10.default.red(`  ${r.conflict ? "" : `Could not write ${r.path}: `}${r.error}`));
       return false;
     }
-    log(`  ${import_chalk10.default.green("\u2714")} MCP ${import_chalk10.default.bold(spec2.name)} added to ${r.path}.`);
+    log4(`  ${import_chalk10.default.green("\u2714")} MCP ${import_chalk10.default.bold(spec2.name)} added to ${r.path}.`);
   }
   if (!spec2.apiKey) {
     if (!supportsMcpLogin(cli.kind)) {
-      log(`
+      log4(`
   ${import_chalk10.default.dim("This proxy authenticates by login.")}`);
-      log(import_chalk10.default.yellow(`  Your ${cli.label}${cli.version ? ` (${cli.version})` : ""} can't start that sign-in from the shell.`));
-      log(import_chalk10.default.dim(`  ${manualAuthHint(cli.kind, spec2.name)}`));
-      log(import_chalk10.default.dim("  (Upgrading the CLI lets apichat do this for you.)"));
+      log4(import_chalk10.default.yellow(`  Your ${cli.label}${cli.version ? ` (${cli.version})` : ""} can't start that sign-in from the shell.`));
+      log4(import_chalk10.default.dim(`  ${manualAuthHint(cli.kind, spec2.name)}`));
+      log4(import_chalk10.default.dim("  (Upgrading the CLI lets apichat do this for you.)"));
     } else {
       const loginArgv = [cli.kind, "mcp", "login", spec2.name];
-      log(`
+      log4(`
   ${import_chalk10.default.dim("This proxy authenticates by login \u2014 signing you in:")}`);
-      log(`  ${import_chalk10.default.dim("$")} ${renderCommand(loginArgv)}`);
+      log4(`  ${import_chalk10.default.dim("$")} ${renderCommand(loginArgv)}`);
       const r = run(loginArgv[0], loginArgv.slice(1), { interactive: true });
       if (r.status !== 0) {
-        log(import_chalk10.default.yellow(`  Sign-in didn't complete (exit ${r.status ?? "?"}). Run \`${renderCommand(loginArgv)}\` yourself to finish it.`));
+        log4(import_chalk10.default.yellow(`  Sign-in didn't complete (exit ${r.status ?? "?"}). Run \`${renderCommand(loginArgv)}\` yourself to finish it.`));
       } else {
-        log(`  ${import_chalk10.default.green("\u2714")} Signed in.`);
+        log4(`  ${import_chalk10.default.green("\u2714")} Signed in.`);
       }
     }
   }
   if (cli.kind === "claude") {
-    const status = waitForClaudeConnection(spec2.name);
-    if (status !== "connected") {
-      log(import_chalk10.default.yellow(`
-  ${cli.label} has the MCP configured, but reports: ${status === "needs-auth" ? "needs authentication" : status === "failed" ? "failed to connect" : "unknown status"}.`));
-      if (status === "needs-auth") {
-        log(import_chalk10.default.dim(supportsMcpLogin("claude") ? `  Finish the sign-in with:  claude mcp login ${spec2.name}` : `  ${manualAuthHint("claude", spec2.name)}`));
+    const status2 = waitForClaudeConnection(spec2.name);
+    if (status2 !== "connected") {
+      log4(import_chalk10.default.yellow(`
+  ${cli.label} has the MCP configured, but reports: ${status2 === "needs-auth" ? "needs authentication" : status2 === "failed" ? "failed to connect" : "unknown status"}.`));
+      if (status2 === "needs-auth") {
+        log4(import_chalk10.default.dim(supportsMcpLogin("claude") ? `  Finish the sign-in with:  claude mcp login ${spec2.name}` : `  ${manualAuthHint("claude", spec2.name)}`));
       } else {
-        log(import_chalk10.default.dim(`  Check it with:  claude mcp get ${spec2.name}   (or /mcp inside Claude Code)`));
+        log4(import_chalk10.default.dim(`  Check it with:  claude mcp get ${spec2.name}   (or /mcp inside Claude Code)`));
       }
-      log(import_chalk10.default.dim("  Chatting here instead so you still get an answer."));
+      log4(import_chalk10.default.dim("  Chatting here instead so you still get an answer."));
       return false;
     }
-    log(`  ${import_chalk10.default.green("\u2714")} ${cli.label} reports the server connected.`);
+    log4(`  ${import_chalk10.default.green("\u2714")} ${cli.label} reports the server connected.`);
   }
   const oneShot = cli.kind === "claude" ? claudeOneShot : codexOneShot;
   const abilities = `What are the tool abilities of the MCP server "${spec2.name}"? List them briefly.`;
-  log(`
+  log4(`
   ${import_chalk10.default.dim("Checking what the API can do\u2026")}`);
-  log(`  ${import_chalk10.default.dim("$")} ${renderCommand(cli.kind === "claude" ? ["claude", "-p", abilities, "--allowedTools", `mcp__${spec2.name}__*`] : ["codex", "exec", "--skip-git-repo-check", abilities])}
+  log4(`  ${import_chalk10.default.dim("$")} ${renderCommand(cli.kind === "claude" ? ["claude", "-p", abilities, "--allowedTools", `mcp__${spec2.name}__*`] : ["codex", "exec", "--skip-git-repo-check", abilities])}
 `);
   const check = oneShot(spec2, abilities);
   if (check.status !== 0) {
-    log(import_chalk10.default.yellow(`
+    log4(import_chalk10.default.yellow(`
   ${cli.label} exited with ${check.status ?? "no status"} \u2014 the MCP is installed, but the demo call failed.`));
-    log(import_chalk10.default.yellow(`  Open ${cli.label} and try it there${cli.kind === "claude" ? " (use /mcp to inspect the connection)" : ""}.`));
+    log4(import_chalk10.default.yellow(`  Open ${cli.label} and try it there${cli.kind === "claude" ? " (use /mcp to inspect the connection)" : ""}.`));
     return true;
   }
   const question = await getQuestion();
   if (question) {
     const handoff = !!process.stdin.isTTY;
     const ask = handoff ? cli.kind === "claude" ? claudeInteractive : codexInteractive : oneShot;
-    log(`
+    log4(`
   ${import_chalk10.default.dim(handoff ? `Opening ${cli.label} with your question \u2014 you'll stay in that session:` : `Your question, through ${cli.label}:`)}`);
     const directed = directedPrompt(spec2, question);
     const shown = cli.kind === "claude" ? handoff ? ["claude", directed, "--allowedTools", `mcp__${spec2.name}__*`, "--append-system-prompt", "\u2026"] : ["claude", "-p", directed, "--allowedTools", `mcp__${spec2.name}__*`] : handoff ? ["codex", directed] : ["codex", "exec", "--skip-git-repo-check", directed];
-    log(`  ${import_chalk10.default.dim("$")} ${renderCommand(shown)}
+    log4(`  ${import_chalk10.default.dim("$")} ${renderCommand(shown)}
 `);
     const ans = ask(spec2, directedPrompt(spec2, question));
-    if (ans.status !== 0) log(import_chalk10.default.yellow(`
+    if (ans.status !== 0) log4(import_chalk10.default.yellow(`
   ${cli.label} exited with ${ans.status ?? "no status"} \u2014 the MCP stays installed.`));
   }
   const instructionFile = writeAgentInstruction(cli.kind, spec2);
   const off = `npx apiblaze apichat ${spec2.name} --remove-mcp ${cli.kind}`;
   const mdName = cli.kind === "claude" ? "CLAUDE.md" : "AGENTS.md";
-  log("");
-  log(import_chalk10.default.bgRed.white.bold(`  ${cli.label} will launch with your MCP to ${spec2.projectLabel} enabled from now on.  `));
-  log(import_chalk10.default.red.bold(`  Every ${cli.label} session in this directory can call your API's tools.`));
+  log4("");
+  log4(import_chalk10.default.bgRed.white.bold(`  ${cli.label} will launch with your MCP to ${spec2.projectLabel} enabled from now on.  `));
+  log4(import_chalk10.default.red.bold(`  Every ${cli.label} session in this directory can call your API's tools.`));
   if (instructionFile) {
-    log(import_chalk10.default.red(`  We added a "use this MCP" block to your ${import_chalk10.default.bold(mdName)} \u2014 that is what makes it stick:`));
-    log(import_chalk10.default.red(`    ${instructionFile}`));
+    log4(import_chalk10.default.red(`  We added a "use this MCP" block to your ${import_chalk10.default.bold(mdName)} \u2014 that is what makes it stick:`));
+    log4(import_chalk10.default.red(`    ${instructionFile}`));
   } else {
-    log(import_chalk10.default.red(`  (Could not write ${mdName} here, so this applies only to sessions apichat starts.)`));
+    log4(import_chalk10.default.red(`  (Could not write ${mdName} here, so this applies only to sessions apichat starts.)`));
   }
-  log(import_chalk10.default.red(`  Turn it off (removes the MCP server AND the ${mdName} block):`));
-  log(import_chalk10.default.red(`    ${import_chalk10.default.bold(off)}`));
+  log4(import_chalk10.default.red(`  Turn it off (removes the MCP server AND the ${mdName} block):`));
+  log4(import_chalk10.default.red(`    ${import_chalk10.default.bold(off)}`));
   return true;
 }
 
@@ -3301,13 +3303,13 @@ async function provision(spec2, target, opts) {
       spinner.succeed(`Proxy provisioned${name !== base2 ? ` as "${name}"` : ""}.`);
       break;
     } catch (err) {
-      const status = err instanceof ApiError ? err.status : void 0;
+      const status2 = err instanceof ApiError ? err.status : void 0;
       const collision = err instanceof ApiError && (err.status === 409 || /exist|taken|available/i.test(err.message));
       if (collision && attempt < 3) {
         name = `${base2}${salt()}`;
         continue;
       }
-      if (status === 401) {
+      if (status2 === 401) {
         if (!loggedIn && attempt < 3) {
           clearAnonCred();
           continue;
@@ -3682,9 +3684,9 @@ async function replTurn(p, messages, userText) {
           const id = String(ev.toolCallId ?? "");
           const meta = toolMeta.get(id);
           const ok = ev.type === "tool-output-available";
-          const ms = meta ? Date.now() - meta.startedAt : void 0;
+          const ms2 = meta ? Date.now() - meta.startedAt : void 0;
           const mark = ok ? import_chalk12.default.green("\u2713") : import_chalk12.default.red("\u2717");
-          console.log(`  ${mark} ${import_chalk12.default.cyan(meta?.name ?? "tool")} ${import_chalk12.default.dim(`(${ok ? "ok" : "error"}${ms != null ? `, ${ms}ms` : ""})`)}`);
+          console.log(`  ${mark} ${import_chalk12.default.cyan(meta?.name ?? "tool")} ${import_chalk12.default.dim(`(${ok ? "ok" : "error"}${ms2 != null ? `, ${ms2}ms` : ""})`)}`);
           const detail = ok ? String(ev.output ?? "") : String(ev.errorText ?? "Tool call failed.");
           if (meta) {
             Object.assign(parts[meta.partIdx], ok ? { state: "output-available", output: detail } : { state: "output-error", errorText: detail });
@@ -5084,10 +5086,10 @@ async function chooseSecure(args) {
     return null;
   }
   const spinner = quiet ? null : (0, import_ora6.default)("Reading your OpenAPI spec\u2026").start();
-  const { status, data } = await proposeFromSpec(openapi).catch((err) => ({ status: 0, data: { error: err.message } }));
-  if (status !== 200 || !data || !Array.isArray(data.families)) {
+  const { status: status2, data } = await proposeFromSpec(openapi).catch((err) => ({ status: 0, data: { error: err.message } }));
+  if (status2 !== 200 || !data || !Array.isArray(data.families)) {
     spinner?.stop();
-    const why = data?.details ?? data?.error ?? (status ? `HTTP ${status}` : "network error");
+    const why = data?.details ?? data?.error ?? (status2 ? `HTTP ${status2}` : "network error");
     say(import_chalk16.default.yellow(`  \u26A0 Could not work out what to protect (${why}) \u2014 creating without rules. Later: npx ${B.cli} rule ${name}`));
     return null;
   }
@@ -6227,7 +6229,7 @@ async function runDev(options) {
       projectId,
       localPort: options.port,
       onEntry: (entry) => say(formatLogLine(entry)),
-      onStatus: (status) => say(import_chalk17.default.gray(`[${projectId}] ${status}`)),
+      onStatus: (status2) => say(import_chalk17.default.gray(`[${projectId}] ${status2}`)),
       onCapture: (req, note) => say(formatCapturedRequest(req, note)),
       onCaptureStart: () => say(import_chalk17.default.magenta(`
 \u26B2 No local server on port ${options.port} yet \u2014 capturing requests below. Start your server and they'll forward automatically.
@@ -7080,14 +7082,14 @@ async function runAgentChatRepl(opts) {
   async function turn(content) {
     messages.push({ role: "user", content });
     process.stdout.write(import_chalk26.default.dim("  \u2026thinking\n"));
-    const { status, data } = await agentCall(endpoint, "POST", { messages, ...buildBody(messages) });
-    if (status === 402) {
+    const { status: status2, data } = await agentCall(endpoint, "POST", { messages, ...buildBody(messages) });
+    if (status2 === 402) {
       console.log(import_chalk26.default.red("  Insufficient credits \u2014 top up to keep using the agents.\n"));
       messages.pop();
       return;
     }
-    if (status >= 400 || !data) {
-      console.log(import_chalk26.default.red(`  Error (${status}): ${(data && data.error) ?? "request failed"}
+    if (status2 >= 400 || !data) {
+      console.log(import_chalk26.default.red(`  Error (${status2}): ${(data && data.error) ?? "request failed"}
 `));
       messages.pop();
       return;
@@ -7188,17 +7190,17 @@ function maybeWarnNoTraffic(total, projectArg) {
 `));
 }
 async function applyProposal(opts) {
-  const log = opts.log ?? ((s) => console.log(s));
+  const log4 = opts.log ?? ((s) => console.log(s));
   const { projectId, apiVersion, tenant: tenant2, proposal, enable } = opts;
   {
     const m = await agentCall(`/projects/${projectId}/${apiVersion}/policies/model?tenantId=${encodeURIComponent(tenant2)}`, "POST", proposal.model);
     if (m.status === 404) {
-      log(import_chalk27.default.red(`  Project ${projectId} ${apiVersion} not found on the authorization service \u2014 check \`apiblaze projects\`.
+      log4(import_chalk27.default.red(`  Project ${projectId} ${apiVersion} not found on the authorization service \u2014 check \`apiblaze projects\`.
 `));
       return { ok: 0, fail: 0, enabled: false, aborted: true };
     }
     if (m.status >= 400) {
-      log(import_chalk27.default.red(`  Model save failed (${m.status}): ${m.data?.error ?? ""}
+      log4(import_chalk27.default.red(`  Model save failed (${m.status}): ${m.data?.error ?? ""}
 `));
       return { ok: 0, fail: 0, enabled: false, aborted: true };
     }
@@ -7230,17 +7232,17 @@ async function applyProposal(opts) {
     }
   }
   if (fail6 > 0) {
-    log(import_chalk27.default.red(`  ${fail6} of ${proposal.routes.length} route rule(s) could not be saved:`));
-    for (const f of failed) log(import_chalk27.default.red(`    ${f}`));
+    log4(import_chalk27.default.red(`  ${fail6} of ${proposal.routes.length} route rule(s) could not be saved:`));
+    for (const f of failed) log4(import_chalk27.default.red(`    ${f}`));
     if (enable) {
-      log(import_chalk27.default.red("  Enforcement NOT turned on \u2014 a route without a saved rule is left open by the gateway. Fix the rule(s) above and re-run with --enforce.\n"));
+      log4(import_chalk27.default.red("  Enforcement NOT turned on \u2014 a route without a saved rule is left open by the gateway. Fix the rule(s) above and re-run with --enforce.\n"));
     }
     return { ok, fail: fail6, enabled: false, aborted: true, failed };
   }
   if (enable) {
     const e = await agentCall(`/projects/${projectId}/${apiVersion}`, "PATCH", { authorization: { enforce_authorization: true }, tenant: tenant2 });
     if (e.status >= 400) {
-      log(import_chalk27.default.red(`  Enforced ${ok} route(s) but turning on the project-level switch failed (${e.status}). Toggle "Enforce Authorization" on in the dashboard.
+      log4(import_chalk27.default.red(`  Enforced ${ok} route(s) but turning on the project-level switch failed (${e.status}). Toggle "Enforce Authorization" on in the dashboard.
 `));
       return { ok, fail: fail6, enabled: false, failed };
     }
@@ -7330,13 +7332,13 @@ async function runRule(projectArg, ruleText, opts) {
     role: "user",
     content: `Author this authorization rule and generate the COMPLETE proposal (OpenFGA model + per-route rules) NOW for every affected route. Do not ask clarifying questions; make reasonable assumptions and state them briefly. Rule: "${rule}"`
   }];
-  const { status, data } = await agentCall(
+  const { status: status2, data } = await agentCall(
     `/projects/${projectId}/${apiVersion}/authz/chat`,
     "POST",
     { messages, included_sample_ids: sampleIds, existing_model: null, existing_routes: [] }
   );
-  if (status >= 400) {
-    spinner.fail(`Authorization agent error (${status}): ${data?.error ?? ""}`);
+  if (status2 >= 400) {
+    spinner.fail(`Authorization agent error (${status2}): ${data?.error ?? ""}`);
     return;
   }
   const proposal = data?.proposal;
@@ -7759,16 +7761,16 @@ async function runExport(projectArg, versionArg, opts) {
   });
   if (!job?.job_id) throw new Error("Failed to queue export.");
   const statusPath = `/projects/${projectId}/${version2}/export/jobs/${job.job_id}`;
-  let status = "queued";
+  let status2 = "queued";
   const started = Date.now();
   process.stdout.write(import_chalk35.default.dim("Building bundle"));
-  while (status !== "ready" && status !== "failed") {
+  while (status2 !== "ready" && status2 !== "failed") {
     if (Date.now() - started > 10 * 6e4) throw new Error("Export timed out after 10 minutes.");
     await new Promise((r) => setTimeout(r, 3e3));
     process.stdout.write(import_chalk35.default.dim("."));
     const st = await admin({ path: statusPath, method: "GET", summary: "poll export" });
-    status = st?.status ?? "queued";
-    if (status === "failed") {
+    status2 = st?.status ?? "queued";
+    if (status2 === "failed") {
       process.stdout.write("\n");
       throw new Error(`Export failed: ${st?.error ?? "unknown error"}`);
     }
@@ -7854,38 +7856,38 @@ async function publicFetch(path11) {
   }
   return { status: res.status, data, json };
 }
-function registryDown(status) {
+function registryDown(status2) {
   return new Error(
-    `The recipe registry at ${RECIPES_BASE}/api/recipes did not answer with JSON (HTTP ${status}).
+    `The recipe registry at ${RECIPES_BASE}/api/recipes did not answer with JSON (HTTP ${status2}).
        Set APIBLAZE_RECIPES_BASE if you are pointing at a different deployment.`
   );
 }
 async function searchRecipes(query, limit) {
   const q = `?q=${encodeURIComponent(query ?? "")}${limit ? `&limit=${limit}` : ""}`;
-  const { status, data, json } = await publicFetch(`/search${q}`);
-  if (!json) throw registryDown(status);
-  if (status >= 400) throw new ApiError(status, data?.error ?? "Search failed.");
+  const { status: status2, data, json } = await publicFetch(`/search${q}`);
+  if (!json) throw registryDown(status2);
+  if (status2 >= 400) throw new ApiError(status2, data?.error ?? "Search failed.");
   return data?.recipes ?? [];
 }
 async function getRecipeHead(ref) {
-  const { status, data, json } = await publicFetch(`/${ref.handle}/${ref.slug}`);
-  if (!json) throw registryDown(status);
-  if (status === 404) return null;
-  if (status >= 400) throw new ApiError(status, data?.error ?? "Lookup failed.");
+  const { status: status2, data, json } = await publicFetch(`/${ref.handle}/${ref.slug}`);
+  if (!json) throw registryDown(status2);
+  if (status2 === 404) return null;
+  if (status2 >= 400) throw new ApiError(status2, data?.error ?? "Lookup failed.");
   return data;
 }
 async function fetchRecipeFile(ref, caller) {
   const head = ref.revision !== void 0 ? null : await getRecipeHead(ref);
   const revision = ref.revision ?? head?.revision;
   if (revision !== void 0) {
-    const { status, data, json } = await publicFetch(
+    const { status: status2, data, json } = await publicFetch(
       `/${ref.handle}/${ref.slug}/${revision}`
     );
-    if (!json) throw registryDown(status);
-    if (status === 410) {
+    if (!json) throw registryDown(status2);
+    if (status2 === 410) {
       throw new Error(`${ref.name}@${revision} was withdrawn by its publisher. Try a different revision.`);
     }
-    if (status < 400 && data) return data;
+    if (status2 < 400 && data) return data;
   }
   if (!caller) {
     throw new Error(
@@ -7901,8 +7903,8 @@ async function fetchRecipeFile(ref, caller) {
       summary: `Read private recipe ${ref.name}${revision !== void 0 ? `@${revision}` : ""}`
     });
   } catch (err) {
-    const status = err instanceof ApiError ? err.status : 0;
-    if (status === 404 || status === 400) {
+    const status2 = err instanceof ApiError ? err.status : 0;
+    if (status2 === 404 || status2 === 400) {
       throw new Error(
         `${ref.name} does not exist, or it is private and your team does not own it.
        (admin-api exposes no authorized read for a private recipe file yet \u2014 only GET /recipes/public/* is registered, so private install cannot resolve.)`
@@ -9124,10 +9126,10 @@ init_resolve();
 // src/lib/log-view.ts
 var import_chalk39 = __toESM(require("chalk"));
 var readline2 = __toESM(require("readline"));
-function statusColor(status) {
-  if (status < 300) return import_chalk39.default.green;
-  if (status < 400) return import_chalk39.default.blue;
-  if (status < 500) return import_chalk39.default.yellow;
+function statusColor(status2) {
+  if (status2 < 300) return import_chalk39.default.green;
+  if (status2 < 400) return import_chalk39.default.blue;
+  if (status2 < 500) return import_chalk39.default.yellow;
   return import_chalk39.default.red;
 }
 function methodColor(method) {
@@ -9157,10 +9159,10 @@ function formatRow(r) {
   const time = import_chalk39.default.dim(clock(r.ts));
   const method = methodColor(r.method)(String(r.method || "\u2014").padEnd(6));
   const route = routeCell(String(r.route || "\u2014"));
-  const status = statusColor(r.status)(String(r.status ?? "\u2014").padStart(3));
-  const ms = import_chalk39.default.dim(`${r.duration_ms}ms`.padStart(8));
+  const status2 = statusColor(r.status)(String(r.status ?? "\u2014").padStart(3));
+  const ms2 = import_chalk39.default.dim(`${r.duration_ms}ms`.padStart(8));
   const step = r.error_step ? import_chalk39.default.dim(` ${r.error_step}`) : "";
-  return `${time}  ${method} ${route} ${status} ${ms}${step}`;
+  return `${time}  ${method} ${route} ${status2} ${ms2}${step}`;
 }
 function printRow(r, json) {
   console.log(json ? JSON.stringify(r) : formatRow(r));
@@ -13026,10 +13028,33 @@ async function runOriginsRemove(origin, opts) {
 }
 
 // src/commands/op.ts
-var import_chalk58 = __toESM(require("chalk"));
+var import_chalk61 = __toESM(require("chalk"));
+init_auth();
+
+// src/lib/op-call.ts
 init_auth();
 init_trace();
 init_types();
+var DASHBOARD_BASE8 = process.env.APIBLAZE_DASHBOARD_BASE || "https://dashboard.apiblaze.com";
+async function opCall(call2) {
+  const token = getAccessToken();
+  const res = await fetch(`${DASHBOARD_BASE8}/api/cli/op`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+    body: JSON.stringify({ path: call2.path, method: call2.method, body: call2.body })
+  });
+  let data = null;
+  try {
+    data = await res.json();
+  } catch {
+  }
+  recordCall({ method: call2.method, path: call2.path, body: call2.body, status: res.status, summary: call2.summary });
+  if (!res.ok) {
+    const msg = data?.details ?? data?.error ?? res.statusText;
+    throw new ApiError(res.status, typeof msg === "string" ? msg : JSON.stringify(msg), data);
+  }
+  return data;
+}
 
 // src/commands/op-billing.ts
 var import_chalk57 = __toESM(require("chalk"));
@@ -13043,7 +13068,7 @@ var SANDBOX = {
 };
 var dpHost = `${SANDBOX.project}.abz.run`;
 var ZONE_COUNT = 3;
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep = (ms2) => new Promise((r) => setTimeout(r, ms2));
 async function readQuiet(read, tries = 8) {
   let prev = await read();
   for (let i = 0; i < tries; i++) {
@@ -13261,32 +13286,502 @@ function printChecks(checks) {
   console.log("");
 }
 
-// src/commands/op.ts
-var OPERATOR_EMAILS = /* @__PURE__ */ new Set(["julienpmjacquet@gmail.com", "chkev@umich.edu"]);
-var DASHBOARD_BASE8 = process.env.APIBLAZE_DASHBOARD_BASE || "https://dashboard.apiblaze.com";
-function isOperatorLogin() {
-  const email = loadCredentials()?.email?.toLowerCase();
-  return !!email && OPERATOR_EMAILS.has(email);
-}
-async function opCall(call) {
+// src/commands/op-test.ts
+var import_chalk58 = __toESM(require("chalk"));
+init_auth();
+init_types();
+var DASHBOARD_BASE9 = process.env.APIBLAZE_DASHBOARD_BASE || "https://dashboard.apiblaze.com";
+async function runnerCall(body, timeoutS) {
   const token = getAccessToken();
-  const res = await fetch(`${DASHBOARD_BASE8}/api/cli/op`, {
+  const res = await fetch(`${DASHBOARD_BASE9}/api/cli/op/test`, {
     method: "POST",
     headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
-    body: JSON.stringify({ path: call.path, method: call.method, body: call.body })
+    body: JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutS * 1e3)
   });
-  let data = null;
-  try {
-    data = await res.json();
-  } catch {
-  }
-  recordCall({ method: call.method, path: call.path, body: call.body, status: res.status, summary: call.summary });
+  const data = await res.json().catch(() => ({}));
   if (!res.ok) {
-    const msg = data?.details ?? data?.error ?? res.statusText;
+    const msg = data.error ?? res.statusText;
     throw new ApiError(res.status, typeof msg === "string" ? msg : JSON.stringify(msg), data);
   }
   return data;
 }
+var call = runnerCall;
+var matches = (id, group2, o) => {
+  if (o.only) {
+    const wanted = o.only.split(",").map((s) => s.trim()).filter(Boolean);
+    if (!wanted.some((w) => id === w || id.startsWith(w))) return false;
+  }
+  if (o.group && group2 && !group2.toLowerCase().includes(o.group.toLowerCase())) return false;
+  if (o.group && !group2) return false;
+  return true;
+};
+var ms = (n) => n >= 1e3 ? `${(n / 1e3).toFixed(1)}s` : `${n}ms`;
+var log = (s) => process.stderr.write(s + "\n");
+async function runOpTest(o = {}) {
+  const timeoutS = o.timeout && o.timeout > 0 ? o.timeout : 150;
+  const listing = await call({ action: "list" }, 60);
+  const specs = o.gutsOnly ? [] : listing.specs.filter((s) => matches(s.id, s.group, o));
+  const guts = o.skipGuts ? [] : listing.guts.filter((g) => matches(g.id, void 0, { ...o, group: void 0 }));
+  const total = specs.length + guts.length;
+  if (total === 0) {
+    log(import_chalk58.default.yellow("nothing matched"));
+    process.exitCode = 2;
+    return;
+  }
+  log(import_chalk58.default.bold(`apiblaze op test \u2014 ${specs.length} spec(s) + ${guts.length} gut check(s) on sandbox ${listing.sandbox_team}`));
+  const results = [];
+  let failed = 0;
+  const started = Date.now();
+  const record = (r) => {
+    results.push(r);
+    if (!r.ok) failed += 1;
+    const mark = r.ok ? import_chalk58.default.green("PASS") : import_chalk58.default.red("FAIL");
+    log(`[${mark}] ${r.id} \u2014 ${r.label} (${ms(r.duration_ms)})`);
+    if (!r.ok) {
+      if (r.kind === "spec") for (const c of r.cases.filter((c2) => !c2.ok)) log(import_chalk58.default.red(`   \u2717 ${c.name}: ${c.detail}`));
+      else if (r.error) log(import_chalk58.default.red(`   \u2717 ${r.error}`));
+      else for (const x of r.results.filter((x2) => x2 && x2.ok === false)) log(import_chalk58.default.red(`   \u2717 ${x.name ?? ""}: ${x.detail ?? JSON.stringify(x)}`));
+    }
+  };
+  for (const s of specs) {
+    let r;
+    try {
+      r = await call({ action: "spec", id: s.id }, timeoutS);
+    } catch (e) {
+      r = { kind: "spec", id: s.id, label: s.label, group: s.group, ok: false, cases: [{ name: "runner", ok: false, detail: e instanceof Error ? e.message : String(e) }], duration_ms: 0 };
+    }
+    record(r);
+    if (!r.ok && o.failFast) break;
+  }
+  if (!(o.failFast && failed)) {
+    for (const g of guts) {
+      let r;
+      try {
+        r = await call({ action: "gut", id: g.id }, timeoutS);
+      } catch (e) {
+        r = { kind: "gut", id: g.id, label: g.label, ok: false, results: [], error: e instanceof Error ? e.message : String(e), duration_ms: 0 };
+      }
+      record(r);
+      if (!r.ok && o.failFast) break;
+    }
+  }
+  const summary = { ran: results.length, passed: results.length - failed, failed, duration_ms: Date.now() - started, sandbox_team: listing.sandbox_team };
+  log("");
+  log(failed ? import_chalk58.default.red(`${summary.passed}/${summary.ran} passed, ${failed} failed (${ms(summary.duration_ms)})`) : import_chalk58.default.green(`${summary.passed}/${summary.ran} passed (${ms(summary.duration_ms)})`));
+  if (o.json) process.stdout.write(JSON.stringify({ ...summary, results }, null, 2) + "\n");
+  if (failed) process.exitCode = 1;
+}
+
+// src/commands/op-consumer.ts
+var import_chalk59 = __toESM(require("chalk"));
+var SANDBOX_TENANT = "portalteststenant";
+var SANDBOX_PROXY = "portaltestproxypreapproved@2.7.0";
+function proxyUrlFor(spec2, path11 = "/get") {
+  const [name, version2 = "1.0.0"] = spec2.split("@");
+  return `https://${name}.abz.run/${version2}/prod${path11.startsWith("/") ? path11 : `/${path11}`}`;
+}
+function isPortalAudience(aud) {
+  return /^https:\/\/[a-z0-9-]+\.portal\.apiblaze\.com\b/i.test(aud);
+}
+var log2 = (s) => process.stderr.write(s + "\n");
+function probeUrlFor(audience, path11 = "/") {
+  const base2 = audience.replace(/\/+$/, "");
+  return `${base2}/prod${path11.startsWith("/") ? path11 : `/${path11}`}`;
+}
+function tamper(token) {
+  const parts = token.split(".");
+  if (parts.length !== 3) return token + "x";
+  const sig = parts[2];
+  const i = Math.floor(sig.length / 2);
+  const c = sig[i] === "A" ? "B" : "A";
+  parts[2] = sig.slice(0, i) + c + sig.slice(i + 1);
+  return parts.join(".");
+}
+function audienceOf(token) {
+  try {
+    const payload = JSON.parse(Buffer.from(token.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), "base64").toString());
+    return typeof payload.aud === "string" ? payload.aud : Array.isArray(payload.aud) ? String(payload.aud[0]) : null;
+  } catch {
+    return null;
+  }
+}
+async function status(url, headers) {
+  const res = await fetch(url, { headers, signal: AbortSignal.timeout(15e3), redirect: "manual" });
+  const body = (await res.text().catch(() => "")).slice(0, 300);
+  return { status: res.status, body };
+}
+async function runOpConsumer(o = {}) {
+  const t0 = Date.now();
+  const creds = loadConsumer();
+  const done = (r) => {
+    const out = { kind: "consumer", id: "consumer-door", label: "Consumer door: the stored consumer token opens its tenant's OAuth-door proxy", duration_ms: Date.now() - t0, ...r };
+    const mark = out.skipped ? import_chalk59.default.yellow("SKIP") : out.ok ? import_chalk59.default.green("PASS") : import_chalk59.default.red("FAIL");
+    log2(`[${mark}] ${out.id} \u2014 ${out.label}${out.tenant ? ` (tenant ${out.tenant})` : ""}${out.url ? ` \u2192 ${out.url}` : ""}`);
+    for (const c of out.cases) if (!c.ok || out.skipped) log2((c.ok ? import_chalk59.default.dim : import_chalk59.default.red)(`   ${c.ok ? "ok  " : "\u2717"} ${c.name}: ${c.detail}`));
+    if (o.json) process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+    if (!out.ok && !out.skipped) process.exitCode = 1;
+    if (out.skipped) process.exitCode = 2;
+    return out;
+  };
+  if (!creds) {
+    return done({ ok: false, skipped: true, cases: [{ name: "consumer session", ok: false, detail: "none stored \u2014 run `apiblaze consumer login --team <team> --tenant <tenant>` first" }] });
+  }
+  if (Date.now() >= creds.expiresAt) {
+    return done({ ok: false, skipped: true, tenant: creds.tenant, cases: [{ name: "consumer session", ok: false, detail: `expired ${new Date(creds.expiresAt).toISOString()} \u2014 run \`apiblaze consumer login --tenant ${creds.tenant}\`` }] });
+  }
+  const audience = audienceOf(creds.accessToken);
+  if (!audience) {
+    return done({ ok: false, tenant: creds.tenant, cases: [{ name: "token audience", ok: false, detail: "the stored access token carries no aud claim" }] });
+  }
+  let url = null;
+  if (o.url) url = o.url;
+  else if (o.proxy) url = proxyUrlFor(o.proxy, o.path ?? "/get");
+  else if (creds.tenant === SANDBOX_TENANT) url = proxyUrlFor(SANDBOX_PROXY, o.path ?? "/get");
+  else if (!isPortalAudience(audience)) url = probeUrlFor(audience, o.path ?? "/");
+  if (!url) {
+    return done({ ok: false, skipped: true, tenant: creds.tenant, audience, cases: [{ name: "target", ok: false, detail: `the session's audience is the tenant portal (${audience}); pass --proxy <name@version> (an OAuth-door proxy of tenant ${creds.tenant}) or --url` }] });
+  }
+  const cases = [];
+  try {
+    const noAuth = await status(url, {});
+    cases.push({ name: "no token \u2192 401", ok: noAuth.status === 401, detail: `${noAuth.status} ${noAuth.body}` });
+    const withAuth = await status(url, { Authorization: `Bearer ${creds.accessToken}` });
+    const opened = withAuth.status !== 401 && withAuth.status !== 403;
+    cases.push({ name: "valid token \u2192 door opens (not 401/403)", ok: opened, detail: `${withAuth.status} ${withAuth.body}` });
+    const bad = await status(url, { Authorization: `Bearer ${tamper(creds.accessToken)}` });
+    cases.push({ name: "tampered signature \u2192 401", ok: bad.status === 401, detail: `${bad.status} ${bad.body}` });
+  } catch (e) {
+    cases.push({ name: "probe", ok: false, detail: e instanceof Error ? e.message : String(e) });
+  }
+  return done({ ok: cases.every((c) => c.ok), tenant: creds.tenant, audience, url, cases });
+}
+
+// src/commands/op-perf.ts
+var import_chalk60 = __toESM(require("chalk"));
+var RPS_DEFAULT = 100;
+var RPS_CAP = 300;
+var SECONDS_DEFAULT = 60;
+var SECONDS_CAP = 300;
+var REQUEST_TIMEOUT_MS = 1e4;
+var PROGRESS_EVERY_MS = 1e4;
+var GATEWAY_WAIT_MS = 9e4;
+var GATEWAY_POLL_MS = 1e4;
+var GATEWAY_MIN_SHARE = 0.8;
+var DEFAULT_THRESHOLDS = {
+  p50_ms: 250,
+  p95_ms: 800,
+  error_rate_pct: 0.5,
+  gateway_p50_ms: 60,
+  gateway_p95_ms: 250
+};
+function percentile(values, p) {
+  if (values.length === 0) return 0;
+  const sorted = [...values].sort((a, b) => a - b);
+  const rank = Math.ceil(p * sorted.length) - 1;
+  return sorted[Math.min(sorted.length - 1, Math.max(0, rank))];
+}
+function clampRate(rps, seconds) {
+  const r = Number.isFinite(rps) && rps > 0 ? Math.min(RPS_CAP, rps) : RPS_DEFAULT;
+  const s = Number.isFinite(seconds) && seconds > 0 ? Math.min(SECONDS_CAP, seconds) : SECONDS_DEFAULT;
+  return { rps: r, seconds: s };
+}
+function thresholdsFrom(o) {
+  const pick2 = (v, d) => Number.isFinite(v) && v >= 0 ? v : d;
+  return {
+    p50_ms: pick2(o.maxP50, DEFAULT_THRESHOLDS.p50_ms),
+    p95_ms: pick2(o.maxP95, DEFAULT_THRESHOLDS.p95_ms),
+    error_rate_pct: pick2(o.maxErrorRate, DEFAULT_THRESHOLDS.error_rate_pct),
+    gateway_p50_ms: pick2(o.maxGatewayP50, DEFAULT_THRESHOLDS.gateway_p50_ms),
+    gateway_p95_ms: pick2(o.maxGatewayP95, DEFAULT_THRESHOLDS.gateway_p95_ms)
+  };
+}
+function perfOptionsFrom(opts) {
+  const num = (v) => {
+    if (v === void 0 || v === null || v === "") return void 0;
+    const n = Number(v);
+    return Number.isFinite(n) ? n : void 0;
+  };
+  const str = (v) => typeof v === "string" && v.trim() ? v.trim() : void 0;
+  return {
+    json: !!opts.json,
+    rps: num(opts.rps),
+    seconds: num(opts.seconds),
+    url: str(opts.url),
+    key: str(opts.key),
+    maxP50: num(opts.maxP50),
+    maxP95: num(opts.maxP95),
+    maxErrorRate: num(opts.maxErrorRate),
+    maxGatewayP50: num(opts.maxGatewayP50),
+    maxGatewayP95: num(opts.maxGatewayP95)
+  };
+}
+function summarize(samples, elapsedMs) {
+  let ok = 0, non2xx = 0, timeouts = 0, network = 0;
+  for (const s of samples) {
+    if (s.error === "timeout") timeouts += 1;
+    else if (s.error === "network") network += 1;
+    else if (s.status >= 200 && s.status < 300) ok += 1;
+    else non2xx += 1;
+  }
+  const sent = samples.length;
+  const errors = non2xx + timeouts + network;
+  const ms2 = samples.map((s) => s.ms);
+  const r1 = (n) => Math.round(n * 10) / 10;
+  return {
+    sent,
+    ok,
+    errors,
+    non2xx,
+    timeouts,
+    network,
+    error_rate_pct: sent ? Math.round(errors / sent * 1e4) / 100 : 0,
+    p50: r1(percentile(ms2, 0.5)),
+    p95: r1(percentile(ms2, 0.95)),
+    p99: r1(percentile(ms2, 0.99)),
+    rps_achieved: elapsedMs > 0 ? r1(sent / (elapsedMs / 1e3)) : 0
+  };
+}
+function evaluate(client, gateway, t) {
+  const out = [];
+  if (client.p50 > t.p50_ms) out.push({ metric: "client_p50", value: client.p50, limit: t.p50_ms });
+  if (client.p95 > t.p95_ms) out.push({ metric: "client_p95", value: client.p95, limit: t.p95_ms });
+  if (client.error_rate_pct > t.error_rate_pct) out.push({ metric: "error_rate", value: client.error_rate_pct, limit: t.error_rate_pct });
+  if (gateway) {
+    if (gateway.p50 > t.gateway_p50_ms) out.push({ metric: "gateway_p50", value: gateway.p50, limit: t.gateway_p50_ms });
+    if (gateway.p95 > t.gateway_p95_ms) out.push({ metric: "gateway_p95", value: gateway.p95, limit: t.gateway_p95_ms });
+  }
+  return out;
+}
+function schedule(opts) {
+  return new Promise((resolve3) => {
+    const start = Date.now();
+    let sent = 0;
+    let timer;
+    const finish = () => {
+      if (timer) clearTimeout(timer);
+      opts.signal?.removeEventListener("abort", finish);
+      resolve3({ sent, elapsedMs: Date.now() - start });
+    };
+    opts.signal?.addEventListener("abort", finish, { once: true });
+    const tick = () => {
+      if (opts.signal?.aborted) return;
+      const due = Math.min(opts.total, Math.floor((Date.now() - start) / opts.intervalMs) + 1);
+      while (sent < due) {
+        opts.fire(sent);
+        sent += 1;
+      }
+      if (sent >= opts.total) return finish();
+      const next = start + sent * opts.intervalMs;
+      timer = setTimeout(tick, Math.max(0, next - Date.now()));
+    };
+    if (opts.total <= 0 || opts.signal?.aborted) return finish();
+    tick();
+  });
+}
+function proxyFromUrl(url) {
+  return new URL(url).hostname.split(".")[0];
+}
+var log3 = (s) => process.stderr.write(s + "\n");
+var fmtMs = (n) => `${Math.round(n)}ms`;
+var sleep2 = (ms2, signal) => new Promise((resolve3) => {
+  const t = setTimeout(done, ms2);
+  function done() {
+    clearTimeout(t);
+    signal?.removeEventListener("abort", done);
+    resolve3();
+  }
+  signal?.addEventListener("abort", done, { once: true });
+});
+async function fireRequest(url, key, samples) {
+  const t0 = performance.now();
+  try {
+    const res = await fetch(url, {
+      method: "GET",
+      headers: { "X-API-Key": key, "User-Agent": "apiblaze-cli op-perf" },
+      keepalive: true,
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    await res.arrayBuffer();
+    samples.push({ status: res.status, ms: performance.now() - t0 });
+  } catch (e) {
+    const name = e?.name;
+    const timeout = name === "TimeoutError" || name === "AbortError";
+    samples.push({ status: 0, ms: performance.now() - t0, error: timeout ? "timeout" : "network" });
+  }
+}
+async function readGateway(proxy, sent, signal) {
+  const q = `?hours=1&project=${encodeURIComponent(proxy)}`;
+  const deadline = Date.now() + GATEWAY_WAIT_MS;
+  const need = Math.ceil(sent * GATEWAY_MIN_SHARE);
+  let lastSeen = 0;
+  let lastErr = "";
+  for (; ; ) {
+    if (signal.aborted) return null;
+    try {
+      const s = await opCall({ method: "GET", path: `/operator/latency/summary${q}`, summary: "perf gate: gateway share" });
+      lastSeen = Number(s?.requests ?? 0);
+      if (lastSeen >= need) {
+        const ov = s?.apiblaze_overhead_ms ?? {};
+        const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : void 0;
+        const g = { p50: Number(ov.p50 ?? 0), p95: Number(ov.p95 ?? 0), p99: num(ov.p99), requests: lastSeen };
+        const kv = num(s?.kv_reads_per_request ?? s?.kv_per_req);
+        const redis = num(s?.redis_commands_per_request ?? s?.redis_per_req);
+        if (kv !== void 0) g.kv_per_req = kv;
+        if (redis !== void 0) g.redis_per_req = redis;
+        try {
+          const blame = await opCall({ method: "GET", path: `/operator/latency${q}`, summary: "perf gate: blame table" });
+          const rows = blame?.blame ?? [];
+          if (rows.length) g.blame = rows.slice(0, 3).map((r) => ({ feature: String(r.feature), dep: String(r.dep), share: Number(r.share ?? 0), p95_ms: Number(r.p95_ms ?? 0) }));
+        } catch {
+        }
+        return g;
+      }
+    } catch (e) {
+      lastErr = e instanceof Error ? e.message : String(e);
+    }
+    const left = deadline - Date.now();
+    if (left <= 0) {
+      log3(import_chalk60.default.yellow(`  gateway: not available \u2014 Analytics Engine had ${lastSeen}/${sent} rows for ${proxy} after ${GATEWAY_WAIT_MS / 1e3}s${lastErr ? ` (last error: ${lastErr})` : ""}`));
+      return null;
+    }
+    log3(import_chalk60.default.dim(`  waiting for the latency ledger\u2026 ${lastSeen}/${sent} rows for ${proxy}${lastErr ? ` (${lastErr})` : ""}`));
+    await sleep2(Math.min(GATEWAY_POLL_MS, left), signal);
+  }
+}
+async function runOpPerf(o = {}) {
+  const { rps, seconds } = clampRate(o.rps, o.seconds);
+  const thresholds = thresholdsFrom(o);
+  const ctrl = new AbortController();
+  const onSigint = () => {
+    log3(import_chalk60.default.yellow("\ninterrupted \u2014 stopping the load and tearing down the fixture"));
+    ctrl.abort();
+  };
+  process.once("SIGINT", onSigint);
+  let fixture;
+  if (o.url) {
+    if (!o.key) throw new Error("--url needs --key (the fixture proxy's API key)");
+    fixture = { url: o.url, key: o.key, proxy: proxyFromUrl(o.url), provisioned: false };
+  } else {
+    log3(import_chalk60.default.dim("provisioning the perf fixture through the runner\u2026"));
+    const f = await runnerCall({ action: "perf-fixture" }, 120);
+    if (!f?.url || !f?.key) throw new Error(`perf-fixture returned no url/key: ${JSON.stringify(f).slice(0, 200)}`);
+    fixture = { url: f.url, key: f.key, proxy: f.proxy || proxyFromUrl(f.url), team: f.team, provisioned: true };
+  }
+  try {
+    const total = Math.round(rps * seconds);
+    const intervalMs = 1e3 / rps;
+    log3(import_chalk60.default.bold(`apiblaze op test --perf \u2014 ${rps} rps \xD7 ${seconds}s (${total} requests) against ${fixture.url}${fixture.team ? ` (sandbox ${fixture.team})` : ""}`));
+    const samples = [];
+    const inflight = /* @__PURE__ */ new Set();
+    let fired = 0;
+    const t0 = Date.now();
+    const progress = setInterval(() => {
+      const m = summarize(samples, Date.now() - t0);
+      const secs = (Date.now() - t0) / 1e3;
+      log3(import_chalk60.default.dim(`  ${Math.round(secs)}s  sent ${fired}  ok ${m.ok}  err ${m.errors}  p50 ${fmtMs(m.p50)}  p95 ${fmtMs(m.p95)}  (${(fired / secs).toFixed(1)} rps)`));
+    }, PROGRESS_EVERY_MS);
+    const { sent, elapsedMs } = await schedule({
+      total,
+      intervalMs,
+      signal: ctrl.signal,
+      fire: () => {
+        fired += 1;
+        const p = fireRequest(fixture.url, fixture.key, samples);
+        inflight.add(p);
+        p.finally(() => inflight.delete(p));
+      }
+    });
+    clearInterval(progress);
+    if (inflight.size) log3(import_chalk60.default.dim(`  load sent; waiting for ${inflight.size} in-flight response(s) (\u2264 ${REQUEST_TIMEOUT_MS / 1e3}s)\u2026`));
+    await Promise.all([...inflight]);
+    const client = summarize(samples, elapsedMs);
+    log3("");
+    log3(`  ${import_chalk60.default.bold("client ")}  p50 ${fmtMs(client.p50).padStart(7)}  p95 ${fmtMs(client.p95).padStart(7)}  p99 ${fmtMs(client.p99).padStart(7)}   errors ${client.error_rate_pct.toFixed(2)}% (${client.errors}/${client.sent}: ${client.non2xx} non-2xx, ${client.timeouts} timeouts, ${client.network} network)   achieved ${client.rps_achieved} rps of ${rps}`);
+    const gateway = ctrl.signal.aborted ? null : await readGateway(fixture.proxy, sent, ctrl.signal);
+    if (gateway) {
+      const extras = [
+        gateway.kv_per_req !== void 0 ? `kv/req ${gateway.kv_per_req}` : "",
+        gateway.redis_per_req !== void 0 ? `redis/req ${gateway.redis_per_req}` : ""
+      ].filter(Boolean).join("  ");
+      log3(`  ${import_chalk60.default.bold("gateway")}  p50 ${fmtMs(gateway.p50).padStart(7)}  p95 ${fmtMs(gateway.p95).padStart(7)}${gateway.p99 !== void 0 ? `  p99 ${fmtMs(gateway.p99).padStart(7)}` : ""}   ${import_chalk60.default.dim(`(${gateway.requests} ledger rows${extras ? `, ${extras}` : ""})`)}`);
+      for (const b of gateway.blame ?? []) log3(import_chalk60.default.dim(`           ${(b.share * 100).toFixed(1).padStart(5)}%  p95 ${fmtMs(b.p95_ms).padStart(6)}  ${b.feature} \u2192 ${b.dep}`));
+    } else {
+      log3(`  ${import_chalk60.default.bold("gateway")}  ${import_chalk60.default.yellow("not available")} ${import_chalk60.default.dim("(gateway thresholds not evaluated)")}`);
+    }
+    const breaches = evaluate(client, gateway, thresholds);
+    const aborted = ctrl.signal.aborted;
+    const ok = breaches.length === 0 && !aborted;
+    log3("");
+    const row = (metric, value, limit, unit) => {
+      const hit = breaches.find((b) => b.metric === metric);
+      log3(`[${hit ? import_chalk60.default.red("FAIL") : import_chalk60.default.green("PASS")}] ${metric.padEnd(11)} ${String(value)}${unit} ${hit ? ">" : "\u2264"} ${limit}${unit}`);
+    };
+    row("client_p50", client.p50, thresholds.p50_ms, "ms");
+    row("client_p95", client.p95, thresholds.p95_ms, "ms");
+    row("error_rate", client.error_rate_pct, thresholds.error_rate_pct, "%");
+    if (gateway) {
+      row("gateway_p50", gateway.p50, thresholds.gateway_p50_ms, "ms");
+      row("gateway_p95", gateway.p95, thresholds.gateway_p95_ms, "ms");
+    } else {
+      log3(`[${import_chalk60.default.yellow("SKIP")}] gateway_p50 / gateway_p95 \u2014 ledger rows not available`);
+    }
+    log3("");
+    if (aborted) log3(import_chalk60.default.red(`FAIL \u2014 interrupted after ${sent}/${total} requests`));
+    else if (ok) log3(import_chalk60.default.green(`PASS \u2014 ${client.sent} requests at ${client.rps_achieved} rps, no threshold breached`));
+    else log3(import_chalk60.default.red(`FAIL \u2014 ${breaches.length} threshold(s) breached: ${breaches.map((b) => `${b.metric} ${b.value} > ${b.limit}`).join(", ")}`));
+    if (o.json) {
+      const doc = {
+        kind: "perf",
+        fixture: { url: fixture.url, proxy: fixture.proxy, team: fixture.team ?? null, provisioned: fixture.provisioned },
+        rps_target: rps,
+        seconds,
+        rps_achieved: client.rps_achieved,
+        sent: client.sent,
+        // 2xx count. The plan's shape spells both this and the verdict `ok`; a
+        // fixing loop reads the verdict, so that keeps the name (last field).
+        succeeded: client.ok,
+        errors: client.errors,
+        error_rate_pct: client.error_rate_pct,
+        error_detail: { non2xx: client.non2xx, timeouts: client.timeouts, network: client.network },
+        client: { p50: client.p50, p95: client.p95, p99: client.p99 },
+        gateway: gateway ? {
+          p50: gateway.p50,
+          p95: gateway.p95,
+          ...gateway.p99 !== void 0 ? { p99: gateway.p99 } : {},
+          ...gateway.kv_per_req !== void 0 ? { kv_per_req: gateway.kv_per_req } : {},
+          ...gateway.redis_per_req !== void 0 ? { redis_per_req: gateway.redis_per_req } : {},
+          requests: gateway.requests,
+          ...gateway.blame ? { blame: gateway.blame } : {}
+        } : null,
+        thresholds,
+        breaches,
+        ...aborted ? { interrupted: true } : {},
+        ok
+      };
+      process.stdout.write(JSON.stringify(doc, null, 2) + "\n");
+    }
+    if (!ok) process.exitCode = 1;
+  } finally {
+    process.off("SIGINT", onSigint);
+    if (fixture.provisioned) {
+      try {
+        await runnerCall({ action: "perf-teardown", proxy: fixture.proxy }, 120);
+        log3(import_chalk60.default.dim(`fixture ${fixture.proxy} torn down`));
+      } catch (e) {
+        log3(import_chalk60.default.red(`teardown of ${fixture.proxy} failed: ${e instanceof Error ? e.message : String(e)} \u2014 run \`apiblaze op residue\` / clean the sandbox`));
+        process.exitCode = 1;
+      }
+    }
+  }
+}
+
+// src/commands/op.ts
+var OPERATOR_EMAILS = /* @__PURE__ */ new Set(["julienpmjacquet@gmail.com", "chkev@umich.edu"]);
+function isOperatorLogin() {
+  const email = loadCredentials()?.email?.toLowerCase();
+  return !!email && OPERATOR_EMAILS.has(email);
+}
 var OP_COMMANDS = [
   { cmd: "op latency", blurb: "which FEATURE is slow, and what inside it", extra: "--hours N --team T --project P" },
   { cmd: "op latency slow", blurb: "slowest requests, each with a request id you can look up", extra: "--min-ms N" },
@@ -13298,102 +13793,135 @@ var OP_COMMANDS = [
   { cmd: "op billing", blurb: "billing conformance: every door metered, 1 request = 1 charge", extra: "--key K --count N" },
   { cmd: "op billing doors", blurb: "every live route + workers.dev URL, and whether it passes the meter (free, read-only)" },
   { cmd: "op billing meter", blurb: "send known traffic, assert the ledger moved by exactly that much", extra: "spends a few tenths of a cent" },
+  { cmd: "op test", blurb: "run the operator test suite against production (sandbox team only): contract specs + gut checks", extra: "--json --only <ids> --group <g> --skip-guts --guts-only --fail-fast" },
+  { cmd: "op test --perf", blurb: "performance gate: fixed-rate load on a sandbox proxy, client + gateway latency vs thresholds (alias: op perf)", extra: "--rps 100 --seconds 60 --json --max-p50 --max-p95 --max-error-rate --max-gateway-p50 --max-gateway-p95 --url --key" },
+  { cmd: "op test --consumer", blurb: "the data plane as a consumer: the stored `consumer login` token opens exactly its own proxy (401 without, 401 tampered)", extra: "--path /get --json" },
   { cmd: "op residue", blurb: "external-store residue report (Upstash + Neon/OpenFGA) \u2014 dry run, deletes nothing" },
   { cmd: "op sweep", blurb: "delete the orphans the residue report found", extra: "asks first; -y to skip" }
 ];
 function renderOpCommands() {
   const width = Math.max(...OP_COMMANDS.map((c) => c.cmd.length)) + 10;
   const lines = OP_COMMANDS.map((c) => {
-    const left = `  ${import_chalk58.default.cyan(`apiblaze ${c.cmd}`)}`;
+    const left = `  ${import_chalk61.default.cyan(`apiblaze ${c.cmd}`)}`;
     const pad = " ".repeat(Math.max(1, width - c.cmd.length));
-    return `${left}${pad}${c.blurb}${c.extra ? " " + import_chalk58.default.dim(`(${c.extra})`) : ""}`;
+    return `${left}${pad}${c.blurb}${c.extra ? " " + import_chalk61.default.dim(`(${c.extra})`) : ""}`;
   });
   return [
-    import_chalk58.default.bold("Operator commands"),
+    import_chalk61.default.bold("Operator commands"),
     ...lines,
     "",
-    import_chalk58.default.dim("  Operators only. The gate is server-side (dashboard /api/cli/op checks the"),
-    import_chalk58.default.dim("  signed-in email, admin-api re-checks with operatorGate) \u2014 a patched CLI just"),
-    import_chalk58.default.dim("  gets 403s. Every op call is read-only except `op sweep`."),
+    import_chalk61.default.dim("  Operators only. The gate is server-side (dashboard /api/cli/op checks the"),
+    import_chalk61.default.dim("  signed-in email, admin-api re-checks with operatorGate) \u2014 a patched CLI just"),
+    import_chalk61.default.dim("  gets 403s. Every op call is read-only except `op sweep`."),
     "",
-    import_chalk58.default.dim("  Not a CLI command: to prune all non-CP data run scripts/nuke-but-cp.sh --apply --sweep"),
-    import_chalk58.default.dim("  in the repo. Operator dashboards (dlq, thresholds, throttling, pricing, billing,"),
-    import_chalk58.default.dim("  agent-spend, teams, tests, leak-detection, lifecycle) live at /operator/* in the app.")
+    import_chalk61.default.dim("  Not a CLI command: to prune all non-CP data run scripts/nuke-but-cp.sh --apply --sweep"),
+    import_chalk61.default.dim("  in the repo. Operator dashboards (dlq, thresholds, throttling, pricing, billing,"),
+    import_chalk61.default.dim("  agent-spend, teams, tests, leak-detection, lifecycle) live at /operator/* in the app.")
   ].join("\n");
 }
 function printResidue(report, applied) {
   const up = report?.upstash ?? {};
   const fga = report?.fga ?? {};
   const ghosts = report?.ghosts ?? {};
-  console.log(import_chalk58.default.bold(applied ? "\nExternal-residue sweep" : "\nExternal residue (dry-run \u2014 nothing deleted)"));
-  console.log(import_chalk58.default.bold("\n  Upstash"));
+  console.log(import_chalk61.default.bold(applied ? "\nExternal-residue sweep" : "\nExternal residue (dry-run \u2014 nothing deleted)"));
+  console.log(import_chalk61.default.bold("\n  Upstash"));
   const orphans = up.orphans ?? [];
-  if (orphans.length === 0) console.log(import_chalk58.default.green("    no orphaned keys"));
-  for (const o of orphans) console.log(`    ${import_chalk58.default.yellow(o.key)} ${import_chalk58.default.dim(`\u2014 ${o.reason}`)}`);
-  console.log(import_chalk58.default.dim(`    kept (live principals): ${up.kept ?? 0} \xB7 anon wallets (untouched): ${up.anon_wallets ?? 0}`));
+  if (orphans.length === 0) console.log(import_chalk61.default.green("    no orphaned keys"));
+  for (const o of orphans) console.log(`    ${import_chalk61.default.yellow(o.key)} ${import_chalk61.default.dim(`\u2014 ${o.reason}`)}`);
+  console.log(import_chalk61.default.dim(`    kept (live principals): ${up.kept ?? 0} \xB7 anon wallets (untouched): ${up.anon_wallets ?? 0}`));
   if (up.anon_wallet_detail) {
     const d = up.anon_wallet_detail;
-    console.log(import_chalk58.default.dim(`    anon wallets: ${d.count} ($${(d.total_cents / 100).toFixed(2)}), ${d.no_ttl} with NO TTL${d.no_ttl ? " \u26A0" : " (all self-expire)"}`));
+    console.log(import_chalk61.default.dim(`    anon wallets: ${d.count} ($${(d.total_cents / 100).toFixed(2)}), ${d.no_ttl} with NO TTL${d.no_ttl ? " \u26A0" : " (all self-expire)"}`));
   }
   if (up.keyspace_census) {
     const census = Object.entries(up.keyspace_census).map(([k, v]) => `${k}=${v}`).join(" \xB7 ");
-    console.log(import_chalk58.default.dim(`    keyspace: ${census}`));
+    console.log(import_chalk61.default.dim(`    keyspace: ${census}`));
   }
-  if (up.unknown?.length) console.log(import_chalk58.default.dim(`    unknown (never deleted): ${up.unknown.join(", ")}`));
-  if (applied) console.log(`    ${import_chalk58.default.bold(String(up.deleted ?? 0))} key(s) deleted`);
-  for (const e of up.errors ?? []) console.log(import_chalk58.default.red(`    error: ${e}`));
-  console.log(import_chalk58.default.bold("\n  OpenFGA / Neon \u2014 orphan stores"));
+  if (up.unknown?.length) console.log(import_chalk61.default.dim(`    unknown (never deleted): ${up.unknown.join(", ")}`));
+  if (applied) console.log(`    ${import_chalk61.default.bold(String(up.deleted ?? 0))} key(s) deleted`);
+  for (const e of up.errors ?? []) console.log(import_chalk61.default.red(`    error: ${e}`));
+  console.log(import_chalk61.default.bold("\n  OpenFGA / Neon \u2014 orphan stores"));
   if (applied) {
     const swept = fga?.swept ?? [];
-    if (swept.length === 0) console.log(import_chalk58.default.green("    no orphaned stores"));
+    if (swept.length === 0) console.log(import_chalk61.default.green("    no orphaned stores"));
     for (const s of swept) {
       console.log(
-        `    ${import_chalk58.default.yellow(s.store_id)} ${import_chalk58.default.dim(`\u2014 store ${s.openfga_deleted ? "deleted" : "DEFERRED"}, ${s.neon_deleted} Neon tuple(s) purged`)}`
+        `    ${import_chalk61.default.yellow(s.store_id)} ${import_chalk61.default.dim(`\u2014 store ${s.openfga_deleted ? "deleted" : "DEFERRED"}, ${s.neon_deleted} Neon tuple(s) purged`)}`
       );
     }
-    if (fga?.remaining) console.log(import_chalk58.default.yellow(`    ${fga.remaining} more orphan store(s) \u2014 re-run to drain`));
+    if (fga?.remaining) console.log(import_chalk61.default.yellow(`    ${fga.remaining} more orphan store(s) \u2014 re-run to drain`));
     const st = fga?.side_tables;
-    if (st) console.log(import_chalk58.default.dim(`    Neon side-tables purged: ${st.soft_deleted_stores} store records, ${st.orphan_models} models, ${st.orphan_changelog} changelog rows${st.error ? ` (${st.error})` : ""}`));
+    if (st) console.log(import_chalk61.default.dim(`    Neon side-tables purged: ${st.soft_deleted_stores} store records, ${st.orphan_models} models, ${st.orphan_changelog} changelog rows${st.error ? ` (${st.error})` : ""}`));
   } else {
     const fgaOrphans = fga?.orphans ?? [];
-    if (fgaOrphans.length === 0) console.log(import_chalk58.default.green("    no orphaned stores"));
+    if (fgaOrphans.length === 0) console.log(import_chalk61.default.green("    no orphaned stores"));
     for (const s of fgaOrphans) {
       const src = s.in_openfga ? "live in OpenFGA" : "Neon tuples only";
-      console.log(`    ${import_chalk58.default.yellow(s.store_id)} ${import_chalk58.default.dim(`\u2014 ${src}${s.name ? ` (${s.name})` : ""}, ${s.neon_tuples} Neon tuple(s)`)}`);
+      console.log(`    ${import_chalk61.default.yellow(s.store_id)} ${import_chalk61.default.dim(`\u2014 ${src}${s.name ? ` (${s.name})` : ""}, ${s.neon_tuples} Neon tuple(s)`)}`);
     }
-    console.log(import_chalk58.default.dim(`    kept stores: ${(fga?.kept_store_ids ?? []).length}`));
+    console.log(import_chalk61.default.dim(`    kept stores: ${(fga?.kept_store_ids ?? []).length}`));
     const st = fga?.side_tables;
-    if (st) console.log(import_chalk58.default.dim(`    Neon side-table residue: ${st.soft_deleted_stores} soft-deleted store records, ${st.orphan_models} orphan models, ${st.orphan_changelog} orphan changelog rows`));
+    if (st) console.log(import_chalk61.default.dim(`    Neon side-table residue: ${st.soft_deleted_stores} soft-deleted store records, ${st.orphan_models} orphan models, ${st.orphan_changelog} orphan changelog rows`));
   }
-  for (const e of fga?.errors ?? []) console.log(import_chalk58.default.red(`    error: ${e}`));
-  console.log(import_chalk58.default.bold("\n  OpenFGA \u2014 ghost tuples in surviving stores"));
+  for (const e of fga?.errors ?? []) console.log(import_chalk61.default.red(`    error: ${e}`));
+  console.log(import_chalk61.default.bold("\n  OpenFGA \u2014 ghost tuples in surviving stores"));
   if (applied) {
-    if ((ghosts?.ghost_count ?? 0) === 0) console.log(import_chalk58.default.green("    no ghost tuples"));
-    else console.log(`    ${import_chalk58.default.bold(String(ghosts.deleted ?? 0))} ghost tuple(s) deleted ${import_chalk58.default.dim(`(of ${ghosts.ghost_count} found, ${ghosts.scanned_tuples} scanned across ${ghosts.live_stores} live stores)`)}`);
+    if ((ghosts?.ghost_count ?? 0) === 0) console.log(import_chalk61.default.green("    no ghost tuples"));
+    else console.log(`    ${import_chalk61.default.bold(String(ghosts.deleted ?? 0))} ghost tuple(s) deleted ${import_chalk61.default.dim(`(of ${ghosts.ghost_count} found, ${ghosts.scanned_tuples} scanned across ${ghosts.live_stores} live stores)`)}`);
   } else {
     const n = ghosts?.ghost_count ?? 0;
-    if (n === 0) console.log(import_chalk58.default.green(`    no ghost tuples ${import_chalk58.default.dim(`(${ghosts.scanned_tuples ?? 0} scanned across ${ghosts.live_stores ?? 0} live stores)`)}`));
+    if (n === 0) console.log(import_chalk61.default.green(`    no ghost tuples ${import_chalk61.default.dim(`(${ghosts.scanned_tuples ?? 0} scanned across ${ghosts.live_stores ?? 0} live stores)`)}`));
     else {
-      console.log(import_chalk58.default.yellow(`    ${n} ghost tuple(s) referencing entities absent from D1:`));
+      console.log(import_chalk61.default.yellow(`    ${n} ghost tuple(s) referencing entities absent from D1:`));
       for (const g of (ghosts.ghosts ?? []).slice(0, 20)) {
-        console.log(import_chalk58.default.dim(`      ${g.object_type}:${g.object_id} ${g.relation} ${g._user}`));
+        console.log(import_chalk61.default.dim(`      ${g.object_type}:${g.object_id} ${g.relation} ${g._user}`));
       }
-      if (n > 20) console.log(import_chalk58.default.dim(`      \u2026 and ${n - 20} more`));
+      if (n > 20) console.log(import_chalk61.default.dim(`      \u2026 and ${n - 20} more`));
     }
   }
-  for (const e of ghosts?.errors ?? []) console.log(import_chalk58.default.red(`    error: ${e}`));
+  for (const e of ghosts?.errors ?? []) console.log(import_chalk61.default.red(`    error: ${e}`));
   console.log();
 }
 async function runOp(sub, opts = {}, view) {
   if (!loadCredentials()) {
-    console.log(import_chalk58.default.dim("Not logged in. Run `apiblaze login`."));
+    console.log(import_chalk61.default.dim("Not logged in. Run `apiblaze login`."));
     return;
   }
   if (!isOperatorLogin()) {
-    console.log(import_chalk58.default.dim("`apiblaze op` is only available to platform operators."));
+    console.log(import_chalk61.default.dim("`apiblaze op` is only available to platform operators."));
     return;
   }
   switch (sub) {
+    // `op test --perf` and `op perf` are the same thing: the load gate (plan row
+    // 6) instead of the suite. `--perf` is perf ONLY — the suite is not run first.
+    case "perf": {
+      await runOpPerf(perfOptionsFrom(opts));
+      return;
+    }
+    case "consumer": {
+      await runOpConsumer({ json: !!opts.json, path: typeof opts.path === "string" ? opts.path : void 0, proxy: typeof opts.proxy === "string" ? opts.proxy : void 0, url: typeof opts.url === "string" ? opts.url : void 0 });
+      return;
+    }
+    case "test": {
+      if (opts.consumer) {
+        await runOpConsumer({ json: !!opts.json, path: typeof opts.path === "string" ? opts.path : void 0, proxy: typeof opts.proxy === "string" ? opts.proxy : void 0, url: typeof opts.url === "string" ? opts.url : void 0 });
+        return;
+      }
+      if (opts.perf) {
+        await runOpPerf(perfOptionsFrom(opts));
+        return;
+      }
+      await runOpTest({
+        json: !!opts.json,
+        only: typeof opts.only === "string" ? opts.only : void 0,
+        group: typeof opts.group === "string" ? opts.group : void 0,
+        skipGuts: !!opts.skipGuts,
+        gutsOnly: !!opts.gutsOnly,
+        failFast: !!opts.failFast,
+        timeout: typeof opts.timeout === "string" ? Number(opts.timeout) : void 0
+      });
+      return;
+    }
     case void 0:
     case "menu": {
       console.log("");
@@ -13416,17 +13944,17 @@ async function runOp(sub, opts = {}, view) {
       const nSide = (st.soft_deleted_stores ?? 0) + (st.orphan_models ?? 0) + (st.orphan_changelog ?? 0);
       printResidue(report, false);
       if (nUp + nFga + nGhost + nSide === 0) {
-        console.log(import_chalk58.default.green("Nothing to sweep."));
+        console.log(import_chalk61.default.green("Nothing to sweep."));
         return;
       }
       if (!opts.yes) {
         const readline3 = await import("readline/promises");
         const rl = readline3.createInterface({ input: process.stdin, output: process.stdout });
         const answer = await rl.question(
-          import_chalk58.default.red(`Delete ${nUp} Upstash key(s) + ${nFga} OpenFGA store(s) + ${nGhost} ghost tuple(s) + ${nSide} Neon side-table row(s)? Type 'sweep' to confirm: `)
+          import_chalk61.default.red(`Delete ${nUp} Upstash key(s) + ${nFga} OpenFGA store(s) + ${nGhost} ghost tuple(s) + ${nSide} Neon side-table row(s)? Type 'sweep' to confirm: `)
         );
         rl.close();
-        if (answer.trim() !== "sweep") return void console.log(import_chalk58.default.dim("Aborted."));
+        if (answer.trim() !== "sweep") return void console.log(import_chalk61.default.dim("Aborted."));
       }
       const result = await opCall({ method: "POST", path: "/operator/external-residue/sweep", summary: "external residue sweep" });
       if (opts.json) return void console.log(JSON.stringify(result, null, 2));
@@ -13436,25 +13964,25 @@ async function runOp(sub, opts = {}, view) {
     case "mark": {
       const label3 = (view ?? "").trim();
       if (!label3) {
-        console.log(import_chalk58.default.red("Give the change a name:") + import_chalk58.default.cyan(' apiblaze op mark "cached tenant count"'));
+        console.log(import_chalk61.default.red("Give the change a name:") + import_chalk61.default.cyan(' apiblaze op mark "cached tenant count"'));
         return;
       }
       const res = await opCall({ method: "POST", path: "/operator/latency/mark", body: { label: label3 }, summary: "record change marker" });
       const ts = new Date(res?.marker?.ts ?? Date.now()).toISOString();
-      console.log(import_chalk58.default.green(`
-  Marked: `) + import_chalk58.default.bold(label3));
-      console.log(import_chalk58.default.dim(`  ${ts}`));
-      console.log(import_chalk58.default.dim(`  Once traffic has run on both sides, compare with: `) + import_chalk58.default.cyan("apiblaze op latency compare") + "\n");
+      console.log(import_chalk61.default.green(`
+  Marked: `) + import_chalk61.default.bold(label3));
+      console.log(import_chalk61.default.dim(`  ${ts}`));
+      console.log(import_chalk61.default.dim(`  Once traffic has run on both sides, compare with: `) + import_chalk61.default.cyan("apiblaze op latency compare") + "\n");
       return;
     }
     case "credits": {
       const data = await opCall({ method: "GET", path: "/operator/credits", summary: "list credit wallets" });
       if (opts.json) return void console.log(JSON.stringify(data, null, 2));
       const accounts = data?.accounts ?? [];
-      if (accounts.length === 0) return void console.log(import_chalk58.default.dim("No credit wallets."));
+      if (accounts.length === 0) return void console.log(import_chalk61.default.dim("No credit wallets."));
       for (const a of accounts) {
         const bal = typeof a.balance_cents === "number" ? `$${(a.balance_cents / 100).toFixed(2)}` : "?";
-        console.log(`  ${import_chalk58.default.bold(bal.padStart(9))}  ${a.walletId}${a.owner_email ? import_chalk58.default.dim(` \u2014 ${a.owner_email}`) : a.anon ? import_chalk58.default.dim(" \u2014 anon") : ""}`);
+        console.log(`  ${import_chalk61.default.bold(bal.padStart(9))}  ${a.walletId}${a.owner_email ? import_chalk61.default.dim(` \u2014 ${a.owner_email}`) : a.anon ? import_chalk61.default.dim(" \u2014 anon") : ""}`);
       }
       return;
     }
@@ -13465,7 +13993,7 @@ async function runOp(sub, opts = {}, view) {
     case "billing": {
       const which = (view ?? "").trim().toLowerCase();
       if (which && which !== "doors" && which !== "meter") {
-        return void console.log(import_chalk58.default.red(`Unknown: apiblaze op billing ${which}. Use 'doors', 'meter', or neither for both.`));
+        return void console.log(import_chalk61.default.red(`Unknown: apiblaze op billing ${which}. Use 'doors', 'meter', or neither for both.`));
       }
       const checks = [];
       let doorsData = null;
@@ -13534,29 +14062,29 @@ async function runOp(sub, opts = {}, view) {
         const data = await opCall({ method: "GET", path: `/operator/latency/grades${q}`, summary: "latency grades" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const t = data.thresholds_ms;
-        console.log(import_chalk58.default.bold("\nHow good was apiblaze itself?") + import_chalk58.default.dim("  (our overhead only \u2014 a slow customer API never counts against us)"));
-        console.log(import_chalk58.default.dim(`  excellent <${t.excellent.replace("<", "")}ms \xB7 okay ${t.okay}ms \xB7 bad ${t.bad}ms \xB7 terrible ${t.terrible.replace(">=", "")}ms+
+        console.log(import_chalk61.default.bold("\nHow good was apiblaze itself?") + import_chalk61.default.dim("  (our overhead only \u2014 a slow customer API never counts against us)"));
+        console.log(import_chalk61.default.dim(`  excellent <${t.excellent.replace("<", "")}ms \xB7 okay ${t.okay}ms \xB7 bad ${t.bad}ms \xB7 terrible ${t.terrible.replace(">=", "")}ms+
 `));
-        console.log(import_chalk58.default.dim("  date         reqs   excellent      okay       bad  terrible"));
+        console.log(import_chalk61.default.dim("  date         reqs   excellent      okay       bad  terrible"));
         for (const d of data.days ?? []) {
           const p = d.pct;
-          const cell = (v, colour) => v > 0 ? colour(`${String(v).padStart(5)}%`) : import_chalk58.default.dim(`${String(v).padStart(5)}%`);
+          const cell = (v, colour) => v > 0 ? colour(`${String(v).padStart(5)}%`) : import_chalk61.default.dim(`${String(v).padStart(5)}%`);
           console.log(
-            `  ${d.date}  ${String(d.total).padStart(5)}   ${cell(p.excellent, import_chalk58.default.green)}  ${cell(p.okay, import_chalk58.default.cyan)}  ${cell(p.bad, import_chalk58.default.yellow)}  ${cell(p.terrible, import_chalk58.default.red)}`
+            `  ${d.date}  ${String(d.total).padStart(5)}   ${cell(p.excellent, import_chalk61.default.green)}  ${cell(p.okay, import_chalk61.default.cyan)}  ${cell(p.bad, import_chalk61.default.yellow)}  ${cell(p.terrible, import_chalk61.default.red)}`
           );
         }
         const cul = data.culprits ?? [];
         if (cul.length) {
-          console.log(import_chalk58.default.bold("\n  Who caused the bad and terrible ones\n"));
-          console.log(import_chalk58.default.dim("     bad  terrible  feature \u2192 dependency"));
+          console.log(import_chalk61.default.bold("\n  Who caused the bad and terrible ones\n"));
+          console.log(import_chalk61.default.dim("     bad  terrible  feature \u2192 dependency"));
           for (const r of cul.slice(0, 12)) {
             if (!r.bad && !r.terrible) continue;
             console.log(
-              `  ${String(r.bad).padStart(6)}  ${import_chalk58.default.red(String(r.terrible).padStart(8))}  ${import_chalk58.default.yellow(r.feature)} ${import_chalk58.default.dim("\u2192")} ${import_chalk58.default.cyan(r.dep)}`
+              `  ${String(r.bad).padStart(6)}  ${import_chalk61.default.red(String(r.terrible).padStart(8))}  ${import_chalk61.default.yellow(r.feature)} ${import_chalk61.default.dim("\u2192")} ${import_chalk61.default.cyan(r.dep)}`
             );
           }
         }
-        if (data.caveat) console.log(import_chalk58.default.dim(`
+        if (data.caveat) console.log(import_chalk61.default.dim(`
   \u26A0 ${data.caveat}
 `));
         return;
@@ -13565,24 +14093,24 @@ async function runOp(sub, opts = {}, view) {
         const data = await opCall({ method: "GET", path: `/operator/latency/compare${q}`, summary: "latency before/after" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const b = data.before, a = data.after, d = data.delta;
-        console.log(import_chalk58.default.bold(`
-Before vs after: `) + import_chalk58.default.cyan(data.marker.label));
-        console.log(import_chalk58.default.dim(`  marked ${new Date(data.marker.ts).toISOString()} \xB7 ${data.window_hours}h either side
+        console.log(import_chalk61.default.bold(`
+Before vs after: `) + import_chalk61.default.cyan(data.marker.label));
+        console.log(import_chalk61.default.dim(`  marked ${new Date(data.marker.ts).toISOString()} \xB7 ${data.window_hours}h either side
 `));
         const row = (name, before, after, delta) => {
           const arrow = delta === 0 ? "=" : delta < 0 ? "\u2193" : "\u2191";
           const txt = `${String(before).padStart(6)}ms  \u2192${String(after).padStart(7)}ms   ${arrow}${Math.abs(delta)}ms`;
-          console.log(`  ${name.padEnd(22)}${data.trustworthy ? delta <= 0 ? import_chalk58.default.green(txt) : import_chalk58.default.red(txt) : import_chalk58.default.dim(txt)}`);
+          console.log(`  ${name.padEnd(22)}${data.trustworthy ? delta <= 0 ? import_chalk61.default.green(txt) : import_chalk61.default.red(txt) : import_chalk61.default.dim(txt)}`);
         };
-        console.log(import_chalk58.default.dim("  metric                 before        after      change"));
+        console.log(import_chalk61.default.dim("  metric                 before        after      change"));
         row("total p50", b.total_p50, a.total_p50, d.total_p50);
         row("total p95", b.total_p95, a.total_p95, d.total_p95);
         row("apiblaze overhead p50", b.gw_p50, a.gw_p50, d.gw_p50);
         row("apiblaze overhead p95", b.gw_p95, a.gw_p95, d.gw_p95);
-        console.log(import_chalk58.default.dim(`
+        console.log(import_chalk61.default.dim(`
   requests: ${b.requests} before \xB7 ${a.requests} after`));
         for (const w of data.warnings ?? []) {
-          console.log((data.trustworthy ? import_chalk58.default.dim : import_chalk58.default.yellow)(`  ${data.trustworthy ? "\xB7" : "\u26A0"} ${w}`));
+          console.log((data.trustworthy ? import_chalk61.default.dim : import_chalk61.default.yellow)(`  ${data.trustworthy ? "\xB7" : "\u26A0"} ${w}`));
         }
         console.log("");
         return;
@@ -13591,19 +14119,19 @@ Before vs after: `) + import_chalk58.default.cyan(data.marker.label));
         const data = await opCall({ method: "GET", path: `/operator/latency/slow${q}`, summary: "slowest requests" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const rows2 = data?.rows ?? [];
-        if (!rows2.length) return void console.log(import_chalk58.default.dim("No requests over the threshold in that window."));
-        console.log(import_chalk58.default.bold(`
+        if (!rows2.length) return void console.log(import_chalk61.default.dim("No requests over the threshold in that window."));
+        console.log(import_chalk61.default.bold(`
 Slowest requests \u2014 last ${data.window_hours}h, over ${data.min_ms}ms
 `));
-        console.log(import_chalk58.default.dim("  total   ours   theirs  blame                 request id"));
+        console.log(import_chalk61.default.dim("  total   ours   theirs  blame                 request id"));
         for (const r of rows2.slice(0, 30)) {
           console.log(
-            `  ${String(Math.round(r.duration_ms)).padStart(6)}  ${String(Math.round(r.gateway_ms)).padStart(5)}  ${String(Math.round(r.upstream_ttfb_ms)).padStart(6)}  ${import_chalk58.default.yellow(`${r.slow_gw_feature || "-"}\u2192${r.slow_dep || "-"}`.padEnd(20))}  ${import_chalk58.default.dim(r.request_id || "")}`
+            `  ${String(Math.round(r.duration_ms)).padStart(6)}  ${String(Math.round(r.gateway_ms)).padStart(5)}  ${String(Math.round(r.upstream_ttfb_ms)).padStart(6)}  ${import_chalk61.default.yellow(`${r.slow_gw_feature || "-"}\u2192${r.slow_dep || "-"}`.padEnd(20))}  ${import_chalk61.default.dim(r.request_id || "")}`
           );
         }
-        console.log(import_chalk58.default.dim(`
+        console.log(import_chalk61.default.dim(`
   The last column is the request id (Cloudflare calls it a "cf-ray"). Look one up with`));
-        console.log(import_chalk58.default.dim(`  \`apiblaze logs\` for that request's exact per-feature breakdown \u2014 unsampled, unlike the table above.
+        console.log(import_chalk61.default.dim(`  \`apiblaze logs\` for that request's exact per-feature breakdown \u2014 unsampled, unlike the table above.
 `));
         return;
       }
@@ -13611,18 +14139,18 @@ Slowest requests \u2014 last ${data.window_hours}h, over ${data.min_ms}ms
         const data = await opCall({ method: "GET", path: `/operator/latency/llm${q}`, summary: "llm latency" });
         if (opts.json) return void console.log(JSON.stringify(data, null, 2));
         const rows2 = data?.rows ?? [];
-        if (!rows2.length) return void console.log(import_chalk58.default.dim("No LLM traffic in that window."));
-        console.log(import_chalk58.default.bold(`
+        if (!rows2.length) return void console.log(import_chalk61.default.dim("No LLM traffic in that window."));
+        console.log(import_chalk61.default.bold(`
 LLM timing \u2014 last ${data.window_hours}h
 `));
-        console.log(import_chalk58.default.dim("     turns   turn p95   ttfc p95   gen p95   reserve p95   in/out tokens p95   model"));
+        console.log(import_chalk61.default.dim("     turns   turn p95   ttfc p95   gen p95   reserve p95   in/out tokens p95   model"));
         for (const r of rows2) {
           const n = r.turns ?? r.requests ?? 0;
           console.log(
             `  ${String(Math.round(n)).padStart(8)}   ${String(Math.round(r.turn_p95_ms ?? 0)).padStart(6)}ms   ${String(Math.round(r.ttfc_p95_ms ?? 0)).padStart(6)}ms   ${String(Math.round(r.gen_p95_ms ?? 0)).padStart(6)}ms   ${String(Math.round(r.reserve_p95_ms ?? 0)).padStart(9)}ms   ${String(Math.round(r.input_tokens_p95 ?? 0)).padStart(6)}/${String(Math.round(r.output_tokens_p95 ?? 0)).padEnd(6)}   ${r.model || "-"}`
           );
         }
-        console.log(import_chalk58.default.dim(`
+        console.log(import_chalk61.default.dim(`
   ${data.note}
 `));
         return;
@@ -13633,26 +14161,26 @@ LLM timing \u2014 last ${data.window_hours}h
       ]);
       if (opts.json) return void console.log(JSON.stringify({ blame, summary }, null, 2));
       const ov = summary?.apiblaze_overhead_ms ?? {};
-      console.log(import_chalk58.default.bold(`
+      console.log(import_chalk61.default.bold(`
 Latency \u2014 last ${summary?.window_hours ?? "?"}h, ${Number(summary?.requests ?? 0).toLocaleString()} requests
 `));
-      console.log(`  ${import_chalk58.default.bold("apiblaze overhead")}  p50 ${String(ov.p50 ?? 0).padStart(5)}ms   p95 ${String(ov.p95 ?? 0).padStart(6)}ms   p99 ${String(ov.p99 ?? 0).padStart(6)}ms   ${import_chalk58.default.dim("\u2190 ours")}`);
-      console.log(`  ${import_chalk58.default.bold("upstream ttfb    ")}  ${" ".repeat(24)}p95 ${String(summary?.upstream_ttfb_p95_ms ?? 0).padStart(6)}ms   ${import_chalk58.default.dim("\u2190 theirs")}`);
-      console.log(import_chalk58.default.dim(`  (per-request percentiles \u2014 never subtract one from the other)
+      console.log(`  ${import_chalk61.default.bold("apiblaze overhead")}  p50 ${String(ov.p50 ?? 0).padStart(5)}ms   p95 ${String(ov.p95 ?? 0).padStart(6)}ms   p99 ${String(ov.p99 ?? 0).padStart(6)}ms   ${import_chalk61.default.dim("\u2190 ours")}`);
+      console.log(`  ${import_chalk61.default.bold("upstream ttfb    ")}  ${" ".repeat(24)}p95 ${String(summary?.upstream_ttfb_p95_ms ?? 0).padStart(6)}ms   ${import_chalk61.default.dim("\u2190 theirs")}`);
+      console.log(import_chalk61.default.dim(`  (per-request percentiles \u2014 never subtract one from the other)
 `));
       const rows = blame?.blame ?? [];
-      if (!rows.length) return void console.log(import_chalk58.default.dim("No latency rows in that window."));
-      console.log(import_chalk58.default.bold("  Which feature ate the time, and what inside it\n"));
-      console.log(import_chalk58.default.dim("   share   p95      feature \u2192 dependency"));
+      if (!rows.length) return void console.log(import_chalk61.default.dim("No latency rows in that window."));
+      console.log(import_chalk61.default.bold("  Which feature ate the time, and what inside it\n"));
+      console.log(import_chalk61.default.dim("   share   p95      feature \u2192 dependency"));
       for (const r of rows.slice(0, 15)) {
         const share = `${(r.share * 100).toFixed(1)}%`;
-        console.log(`   ${share.padStart(6)}  ${String(r.p95_ms).padStart(6)}ms  ${import_chalk58.default.yellow(r.feature)} ${import_chalk58.default.dim("\u2192")} ${import_chalk58.default.cyan(r.dep)}`);
+        console.log(`   ${share.padStart(6)}  ${String(r.p95_ms).padStart(6)}ms  ${import_chalk61.default.yellow(r.feature)} ${import_chalk61.default.dim("\u2192")} ${import_chalk61.default.cyan(r.dep)}`);
       }
       console.log("");
       return;
     }
     default:
-      console.log(import_chalk58.default.red(`Unknown op subcommand '${sub}'. Run \`apiblaze op\` for the menu.`));
+      console.log(import_chalk61.default.red(`Unknown op subcommand '${sub}'. Run \`apiblaze op\` for the menu.`));
   }
 }
 
@@ -13722,7 +14250,7 @@ program.command("dev").description(`Put the code running on this machine behind
   try {
     const resolved = parseInt(port ?? opts.port, 10);
     if (Number.isNaN(resolved)) {
-      console.error(import_chalk59.default.red(`Invalid port: ${port ?? opts.port}`));
+      console.error(import_chalk62.default.red(`Invalid port: ${port ?? opts.port}`));
       process.exit(1);
     }
     await runDev({ ...opts, port: resolved });
@@ -13826,7 +14354,7 @@ apikeys.command("list").description("List control-plane API keys in your team").
 apikeys.command("mint").description("Create a control-plane API key (secret shown once) \u2014 or, with --tenant, a consumer key in that tenant").option("--desc <text>", "Description").option("--expires-days <n>", "Expiry in days (default 90 server-side)").option("--tenant <slug>", "Mint a CONSUMER key in this tenant instead of a control-plane key").option("--for <email|id>", "Issue this key to a named person \u2014 calls made with it count as that person, and ownership rules trust it. Needs --tenant.").option("--env <name>", "Environment the consumer key is valid for (with --tenant; default dev)").option("--team <id|name>", "Team (defaults to active team)").option("--json", "Output machine-readable JSON").action(action((opts, cmd) => runKeyMint({ ...cmd.parent?.opts(), ...opts })));
 apikeys.command("revoke").description("Revoke a control-plane API key").argument("<keyId>", "Key id (see `apikeys list`)").option("--team <id|name>", "Team (defaults to active team)").action(action((keyId, opts, cmd) => runKeyRevoke(keyId, { ...cmd.parent?.opts(), ...opts })));
 program.addCommand(apikeys, { hidden: true });
-var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "latency | billing | mark | credits | residue | sweep (omit for the menu)").argument("[view]", "for `latency`: slow | llm | compare | grades \xB7 for `billing`: doors | meter \xB7 for `mark`: the change name, quoted").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").option("--hours <n>", "Look-back window in hours (default 1)").option("--team <id>", "Filter to one team").option("--project <name>", "Filter to one proxy").option("--api-version <v>", "Filter to one API version").option("--tenant <name>", "Filter to one tenant").option("--route <path>", "Filter to one route").option("--environment <env>", "Filter to one environment").option("--status-class <c>", "Filter to a status class (2xx/4xx/5xx)").option("--min-ms <n>", "For `latency slow`: minimum duration (default 1000)").option("--days <n>", "For `latency grades`: how many days back (default 7)").option("--excellent <ms>", "Grade threshold: under this is excellent (default 250)").option("--okay <ms>", "Grade threshold: under this is okay (default 500)").option("--bad <ms>", "Grade threshold: under this is bad, at/over is terrible (default 1000)").option("--key <key>", "For `billing meter`: a data-plane API key for the sandbox proxy (without it the served-request checks are SKIPPED)").option("--count <n>", "For `billing meter`: requests per check (default 3, max 10)").option("--mcp-host <host>", "For `billing meter`: an MCP host to check tools/call is charged once").action(action((sub, view, opts) => runOp(sub, opts, view))).addHelpText("after", () => `
+var op = new import_commander.Command("op").description("Operator menu (platform operators only)").argument("[action]", "latency | billing | mark | credits | residue | sweep | test | perf (omit for the menu)").argument("[view]", "for `latency`: slow | llm | compare | grades \xB7 for `billing`: doors | meter \xB7 for `mark`: the change name, quoted").option("-y, --yes", "Skip the sweep confirmation prompt").option("--json", "Output machine-readable JSON").option("--hours <n>", "Look-back window in hours (default 1)").option("--team <id>", "Filter to one team").option("--only <ids>", "for `test`: comma-separated spec/gut ids or prefixes").option("--group <name>", "for `test`: only specs whose group matches").option("--skip-guts", "for `test`: contract specs only").option("--guts-only", "for `test`: server-side gut checks only").option("--fail-fast", "for `test`: stop at the first failure").option("--timeout <s>", "for `test`: seconds to wait per check (default 150)").option("--perf", "for `test`: run the performance gate instead of the suite (fixed-rate load on a sandbox proxy)").option("--consumer", "for `test`: probe the data plane with the stored `consumer login` token instead of the suite").option("--path <p>", "for `test --consumer`: request path on the proxy (default /get)").option("--proxy <name@version>", "for `test --consumer`: the OAuth-door proxy to knock on (default: the sandbox proxy for a sandbox-tenant session)").option("--rps <n>", "for `test --perf`: requests per second (default 100, max 300)").option("--seconds <n>", "for `test --perf`: how long to send for (default 60, max 300)").option("--url <url>", "for `test --perf`: load this fixture URL instead of provisioning one (with --key; nothing is torn down)").option("--max-p50 <ms>", "for `test --perf`: client p50 threshold (default 250)").option("--max-p95 <ms>", "for `test --perf`: client p95 threshold (default 800)").option("--max-error-rate <pct>", "for `test --perf`: error-rate threshold in percent (default 0.5)").option("--max-gateway-p50 <ms>", "for `test --perf`: apiblaze-overhead p50 threshold (default 60)").option("--max-gateway-p95 <ms>", "for `test --perf`: apiblaze-overhead p95 threshold (default 250)").option("--project <name>", "Filter to one proxy").option("--api-version <v>", "Filter to one API version").option("--tenant <name>", "Filter to one tenant").option("--route <path>", "Filter to one route").option("--environment <env>", "Filter to one environment").option("--status-class <c>", "Filter to a status class (2xx/4xx/5xx)").option("--min-ms <n>", "For `latency slow`: minimum duration (default 1000)").option("--days <n>", "For `latency grades`: how many days back (default 7)").option("--excellent <ms>", "Grade threshold: under this is excellent (default 250)").option("--okay <ms>", "Grade threshold: under this is okay (default 500)").option("--bad <ms>", "Grade threshold: under this is bad, at/over is terrible (default 1000)").option("--key <key>", "For `billing meter`: a data-plane API key for the sandbox proxy (without it the served-request checks are SKIPPED) \xB7 for `test --perf --url`: the fixture's API key").option("--count <n>", "For `billing meter`: requests per check (default 3, max 10)").option("--mcp-host <host>", "For `billing meter`: an MCP host to check tools/call is charged once").action(action((sub, view, opts) => runOp(sub, opts, view))).addHelpText("after", () => `
 ${renderOpCommands()}
 `);
 program.addCommand(op, { hidden: true });
@@ -13865,7 +14393,7 @@ function groupedCommandHelp() {
       const sub = byName.get(e.parent)?.commands.find((s) => s.name() === e.sub);
       return sub ? `  ${helpLabel(e).padEnd(width)}${sub.description()}` : "";
     }).filter(Boolean).join("\n");
-    return `${import_chalk59.default.bold(g.title)}
+    return `${import_chalk62.default.bold(g.title)}
 ${rows}`;
   }).join("\n\n");
 }
@@ -13876,7 +14404,7 @@ program.configureHelp({
   }
 });
 program.addHelpText("after", () => `
-${import_chalk59.default.bold("Don't like reading docs?")} Run ${import_chalk59.default.bgCyan.black.bold(` npx ${B.cli} docs `)} ${import_chalk59.default.cyan(`\u2014 ask an AI chatbot about ${B.product}, and let it act on your account.`)}
+${import_chalk62.default.bold("Don't like reading docs?")} Run ${import_chalk62.default.bgCyan.black.bold(` npx ${B.cli} docs `)} ${import_chalk62.default.cyan(`\u2014 ask an AI chatbot about ${B.product}, and let it act on your account.`)}
 
 ${groupedCommandHelp()}
 
@@ -13912,14 +14440,14 @@ async function recoverStaleTeam() {
     const { resolveLinkedTeam: resolveLinkedTeam2 } = await Promise.resolve().then(() => (init_team(), team_exports));
     const linked = await resolveLinkedTeam2({ preferredId: creds.teamId, interactive: !!process.stdin.isTTY });
     if (!linked) {
-      console.error(import_chalk59.default.yellow("Your account has no teams anymore (deleted?). Run `apiblaze login` or `apiblaze create` to get a workspace."));
+      console.error(import_chalk62.default.yellow("Your account has no teams anymore (deleted?). Run `apiblaze login` or `apiblaze create` to get a workspace."));
       return;
     }
     if (linked.teamId === creds.teamId) return;
     const next = { ...creds, teamId: linked.teamId, teamName: linked.teamName };
     delete next.activeTenant;
     saveCredentials(next);
-    console.error(import_chalk59.default.yellow(`Your previous team no longer exists \u2014 relinked to ${import_chalk59.default.bold(linked.teamName ?? linked.teamId)}. Re-run your command.`));
+    console.error(import_chalk62.default.yellow(`Your previous team no longer exists \u2014 relinked to ${import_chalk62.default.bold(linked.teamName ?? linked.teamId)}. Re-run your command.`));
   } catch {
   }
 }
@@ -13927,16 +14455,16 @@ async function printError(err) {
   if (err instanceof ApiError) {
     const data = err.body;
     const extra = [data?.body?.reason, data?.body?.details, data?.details, data?.body?.error].find((x) => typeof x === "string" && x && x !== err.message);
-    console.error(import_chalk59.default.red(`
+    console.error(import_chalk62.default.red(`
 API error (${err.status}): ${err.message}${extra ? ` \u2014 ${extra}` : ""}`));
     if (err.status === 403 || err.status === 404) {
       await recoverStaleTeam();
     }
   } else if (err instanceof Error) {
-    console.error(import_chalk59.default.red(`
+    console.error(import_chalk62.default.red(`
 Error: ${err.message}`));
   } else {
-    console.error(import_chalk59.default.red("\nUnknown error"));
+    console.error(import_chalk62.default.red("\nUnknown error"));
   }
 }
 program.parse(process.argv);