apiblaze 0.3.0 → 0.3.2

package/dist/index.js

@@ -6,13 +6,6 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -30,23 +23,33 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// src/index.ts
+var import_commander = require("commander");
+var import_chalk15 = __toESM(require("chalk"));
+
+// package.json
+var version = "0.3.2";
+
 // src/types.ts
-var ApiError;
-var init_types = __esm({
-  "src/types.ts"() {
-    "use strict";
-    ApiError = class extends Error {
-      constructor(status, message, body) {
-        super(message);
-        this.status = status;
-        this.body = body;
-        this.name = "ApiError";
-      }
-    };
+var ApiError = class extends Error {
+  constructor(status, message, body) {
+    super(message);
+    this.status = status;
+    this.body = body;
+    this.name = "ApiError";
   }
-});
+};
+
+// src/commands/login.ts
+var import_chalk2 = __toESM(require("chalk"));
+var import_ora = __toESM(require("ora"));
 
 // src/lib/auth.ts
+var fs = __toESM(require("fs"));
+var os = __toESM(require("os"));
+var path = __toESM(require("path"));
+var APIBLAZE_DIR = path.join(os.homedir(), ".apiblaze");
+var CREDENTIALS_PATH = path.join(APIBLAZE_DIR, "credentials.json");
 function saveCredentials(creds) {
   fs.mkdirSync(APIBLAZE_DIR, { recursive: true });
   fs.writeFileSync(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), "utf-8");
@@ -78,32 +81,13 @@ function getAccessToken() {
   }
   return creds.accessToken;
 }
-var fs, os, path, APIBLAZE_DIR, CREDENTIALS_PATH;
-var init_auth = __esm({
-  "src/lib/auth.ts"() {
-    "use strict";
-    fs = __toESM(require("fs"));
-    os = __toESM(require("os"));
-    path = __toESM(require("path"));
-    APIBLAZE_DIR = path.join(os.homedir(), ".apiblaze");
-    CREDENTIALS_PATH = path.join(APIBLAZE_DIR, "credentials.json");
-  }
-});
+
+// src/lib/team.ts
+var import_chalk = __toESM(require("chalk"));
 
 // src/lib/api.ts
-var api_exports = {};
-__export(api_exports, {
-  agentCall: () => agentCall,
-  checkProxyName: () => checkProxyName,
-  claimProxy: () => claimProxy,
-  createProxy: () => createProxy,
-  createProxyAnonymous: () => createProxyAnonymous,
-  deleteDevTunnel: () => deleteDevTunnel,
-  getLocalhostTargets: () => getLocalhostTargets,
-  getProjects: () => getProjects,
-  getTeams: () => getTeams,
-  putDevTunnel: () => putDevTunnel
-});
+var DASHBOARD_BASE = "https://dashboard.apiblaze.com";
+var PUBLIC_API_BASE = "https://api.apiblaze.com";
 async function createProxyAnonymous(body) {
   const res = await fetch(`${PUBLIC_API_BASE}/proxy`, {
     method: "POST",
@@ -205,32 +189,41 @@ async function deleteDevTunnel(restore) {
     body: JSON.stringify({ restore })
   });
 }
-var DASHBOARD_BASE, PUBLIC_API_BASE;
-var init_api = __esm({
-  "src/lib/api.ts"() {
-    "use strict";
-    init_auth();
-    init_types();
-    DASHBOARD_BASE = "https://dashboard.apiblaze.com";
-    PUBLIC_API_BASE = "https://api.apiblaze.com";
-  }
-});
 
-// src/index.ts
-var import_commander = require("commander");
-var import_chalk14 = __toESM(require("chalk"));
-
-// package.json
-var version = "0.3.0";
-
-// src/index.ts
-init_types();
+// src/lib/team.ts
+async function resolveLinkedTeam(opts) {
+  let teams;
+  try {
+    teams = await getTeams();
+  } catch {
+    return opts.preferredId ? { teamId: opts.preferredId } : null;
+  }
+  if (teams.length === 0) return null;
+  const preferred = opts.preferredId ? teams.find((t) => t.teamId === opts.preferredId) : void 0;
+  if (preferred) return { teamId: preferred.teamId, teamName: preferred.name };
+  if (opts.preferredId) {
+    console.log(import_chalk.default.yellow("\nYour previously linked team is no longer available."));
+  }
+  if (teams.length === 1) {
+    console.log(`${import_chalk.default.cyan("\u2192")} Linking to your team ${import_chalk.default.bold(teams[0].name)}.`);
+    return { teamId: teams[0].teamId, teamName: teams[0].name };
+  }
+  if (!opts.interactive) {
+    console.log(import_chalk.default.yellow(`Linking to "${teams[0].name}" \u2014 pass --team to choose another.`));
+    return { teamId: teams[0].teamId, teamName: teams[0].name };
+  }
+  const { default: inquirer2 } = await import("inquirer");
+  const { chosen } = await inquirer2.prompt([{
+    type: "list",
+    name: "chosen",
+    message: "Which team do you want to link to?",
+    choices: teams.map((t) => ({ name: t.name, value: t.teamId }))
+  }]);
+  const picked = teams.find((t) => t.teamId === chosen);
+  return { teamId: picked.teamId, teamName: picked.name };
+}
 
 // src/commands/login.ts
-var import_chalk = __toESM(require("chalk"));
-var import_ora = __toESM(require("ora"));
-init_auth();
-init_api();
 var DASHBOARD_BASE2 = "https://dashboard.apiblaze.com";
 function openBrowser(url) {
   const { exec } = require("child_process");
@@ -242,17 +235,17 @@ function decodeJWTPayload(token) {
   return JSON.parse(Buffer.from(part, "base64url").toString());
 }
 async function runLogin() {
-  console.log(import_chalk.default.bold("\nLogging in to APIblaze...\n"));
+  console.log(import_chalk2.default.bold("\nLogging in to APIblaze...\n"));
   const codeRes = await fetch(`${DASHBOARD_BASE2}/api/device/code`, { method: "POST" });
   if (!codeRes.ok) {
     throw new Error(`Failed to start login: ${codeRes.status}`);
   }
   const deviceAuth = await codeRes.json();
   const loginUrl = deviceAuth.verification_uri_complete ?? deviceAuth.verification_uri;
-  console.log(`${import_chalk.default.cyan("\u2192")} Open this URL in your browser to confirm login:`);
-  console.log(`  ${import_chalk.default.bold.underline(loginUrl)}
+  console.log(`${import_chalk2.default.cyan("\u2192")} Open this URL in your browser to confirm login:`);
+  console.log(`  ${import_chalk2.default.bold.underline(loginUrl)}
 `);
-  console.log(`${import_chalk.default.cyan("\u2192")} Your code: ${import_chalk.default.bold(deviceAuth.user_code)}
+  console.log(`${import_chalk2.default.cyan("\u2192")} Your code: ${import_chalk2.default.bold(deviceAuth.user_code)}
 `);
   openBrowser(loginUrl);
   const spinner = (0, import_ora.default)("Waiting for authorization in browser...").start();
@@ -300,33 +293,20 @@ async function runLogin() {
     email,
     teamId: defaultTeamId ?? void 0
   });
-  spinner.succeed(import_chalk.default.green("Authorized!"));
+  spinner.succeed(import_chalk2.default.green("Authorized!"));
   if (githubHandle) {
-    console.log(`${import_chalk.default.cyan("\u2192")} Logged in as ${import_chalk.default.bold("@" + githubHandle)}`);
+    console.log(`${import_chalk2.default.cyan("\u2192")} Logged in as ${import_chalk2.default.bold("@" + githubHandle)}`);
   }
   let teamId = defaultTeamId ?? void 0;
   let teamName;
-  try {
-    const teams = await getTeams();
-    if (teams.length === 0) {
-      console.log(import_chalk.default.yellow("\nNo teams found \u2014 you can still use apiblaze dev with a personal workspace."));
-    } else if (teams.length === 1) {
-      teamId = teams[0].teamId;
-      teamName = teams[0].name;
-      console.log(`
-${import_chalk.default.cyan("\u2192")} Team: ${import_chalk.default.bold(teamName)}`);
-    } else {
-      const { default: inquirer2 } = await import("inquirer");
-      const { chosen } = await inquirer2.prompt([{
-        type: "list",
-        name: "chosen",
-        message: "Which team do you want to use?",
-        choices: teams.map((t) => ({ name: t.name, value: t.teamId }))
-      }]);
-      teamId = chosen;
-      teamName = teams.find((t) => t.teamId === chosen)?.name;
-    }
-  } catch {
+  const linked = await resolveLinkedTeam({ preferredId: defaultTeamId ?? void 0, interactive: !!process.stdin.isTTY });
+  if (linked) {
+    teamId = linked.teamId;
+    teamName = linked.teamName;
+    if (teamName) console.log(`
+${import_chalk2.default.cyan("\u2192")} Team: ${import_chalk2.default.bold(teamName)}`);
+  } else {
+    console.log(import_chalk2.default.yellow("\nNo teams found \u2014 your personal workspace will be created on first use."));
   }
   saveCredentials({
     accessToken,
@@ -338,48 +318,254 @@ ${import_chalk.default.cyan("\u2192")} Team: ${import_chalk.default.bold(teamNam
     teamId,
     teamName
   });
-  console.log(import_chalk.default.green("\n\u2714 Logged in successfully!"));
+  console.log(import_chalk2.default.green("\n\u2714 Logged in successfully!"));
 }
 
 // src/commands/dev.ts
-var import_chalk3 = __toESM(require("chalk"));
+var import_fs = __toESM(require("fs"));
+var import_chalk4 = __toESM(require("chalk"));
 var import_ora2 = __toESM(require("ora"));
 var import_inquirer = __toESM(require("inquirer"));
-init_auth();
-init_api();
 
 // src/lib/traffic.ts
-var import_chalk2 = __toESM(require("chalk"));
+var import_chalk3 = __toESM(require("chalk"));
 var METHOD_COLORS = {
-  GET: import_chalk2.default.cyan,
-  POST: import_chalk2.default.green,
-  PUT: import_chalk2.default.yellow,
-  PATCH: import_chalk2.default.magenta,
-  DELETE: import_chalk2.default.red,
-  HEAD: import_chalk2.default.blue,
-  OPTIONS: import_chalk2.default.gray
+  GET: import_chalk3.default.cyan,
+  POST: import_chalk3.default.green,
+  PUT: import_chalk3.default.yellow,
+  PATCH: import_chalk3.default.magenta,
+  DELETE: import_chalk3.default.red,
+  HEAD: import_chalk3.default.blue,
+  OPTIONS: import_chalk3.default.gray
 };
 function colorMethod(method) {
-  const colorFn = METHOD_COLORS[method.toUpperCase()] ?? import_chalk2.default.white;
+  const colorFn = METHOD_COLORS[method.toUpperCase()] ?? import_chalk3.default.white;
   return colorFn(method.padEnd(7));
 }
 function colorStatus(status) {
   const s = String(status);
-  if (status >= 500) return import_chalk2.default.red(s);
-  if (status >= 400) return import_chalk2.default.yellow(s);
-  if (status >= 300) return import_chalk2.default.cyan(s);
-  return import_chalk2.default.green(s);
+  if (status >= 500) return import_chalk3.default.red(s);
+  if (status >= 400) return import_chalk3.default.yellow(s);
+  if (status >= 300) return import_chalk3.default.cyan(s);
+  return import_chalk3.default.green(s);
 }
 function colorLatency(latency) {
   const s = `${latency}ms`;
-  if (latency < 100) return import_chalk2.default.green(s);
-  if (latency < 500) return import_chalk2.default.yellow(s);
-  return import_chalk2.default.red(s);
+  if (latency < 100) return import_chalk3.default.green(s);
+  if (latency < 500) return import_chalk3.default.yellow(s);
+  return import_chalk3.default.red(s);
+}
+function timestamp() {
+  return (/* @__PURE__ */ new Date()).toTimeString().slice(0, 8);
 }
 function formatLogLine(entry) {
-  const now = /* @__PURE__ */ new Date();
-  const ts = now.toTimeString().slice(0, 8);
-  return `${import_chalk2.default.gray(`[${ts}]`)} ${colorMethod(entry.method)} ${import_chalk2.default.white(entry.path)} ${import_chalk2.default.gray("\u2192")} ${colorStatus(entry.status)} ${import_chalk2.default.gray(`(${colorLatency(entry.latency)})`)}`;
+  return `${import_chalk3.default.gray(`[${timestamp()}]`)} ${colorMethod(entry.method)} ${import_chalk3.default.white(entry.path)} ${import_chalk3.default.gray("\u2192")} ${colorStatus(entry.status)} ${import_chalk3.default.gray(`(${colorLatency(entry.latency)})`)}`;
+}
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "cookie",
+  "set-cookie",
+  "x-api-key",
+  "api-key",
+  "apikey",
+  "x-auth-token",
+  "x-access-token",
+  "x-refresh-token",
+  "x-amz-security-token",
+  "x-csrf-token"
+]);
+var SENSITIVE_QUERY = /* @__PURE__ */ new Set([
+  "api_key",
+  "apikey",
+  "key",
+  "token",
+  "access_token",
+  "refresh_token",
+  "id_token",
+  "secret",
+  "client_secret",
+  "password",
+  "sig",
+  "signature"
+]);
+function maskSecret(value) {
+  const v = value.trim();
+  if (v.length <= 8) return "\u2022\u2022\u2022\u2022";
+  const head = v.slice(0, 4);
+  const tail = v.slice(-4);
+  return `${head}\u2026${tail} ${import_chalk3.default.gray(`(${v.length} chars, masked)`)}`;
+}
+function base64UrlDecode(seg) {
+  try {
+    const pad = seg.length % 4 === 0 ? "" : "=".repeat(4 - seg.length % 4);
+    const b64 = seg.replace(/-/g, "+").replace(/_/g, "/") + pad;
+    return Buffer.from(b64, "base64").toString("utf8");
+  } catch {
+    return null;
+  }
+}
+function decodeJwt(token) {
+  const parts = token.trim().split(".");
+  if (parts.length !== 3) return null;
+  const headerRaw = base64UrlDecode(parts[0]);
+  const payloadRaw = base64UrlDecode(parts[1]);
+  if (!headerRaw || !payloadRaw) return null;
+  try {
+    const header = JSON.parse(headerRaw);
+    const payload = JSON.parse(payloadRaw);
+    if (!header || typeof header !== "object" || !("alg" in header)) return null;
+    return { header, payload };
+  } catch {
+    return null;
+  }
+}
+function maskPath(path2) {
+  const q = path2.indexOf("?");
+  if (q < 0) return path2;
+  const base = path2.slice(0, q);
+  const query = path2.slice(q + 1);
+  const masked = query.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq < 0) return pair;
+    const name = pair.slice(0, eq);
+    const val = pair.slice(eq + 1);
+    if (val && SENSITIVE_QUERY.has(decodeURIComponent(name).toLowerCase())) {
+      return `${name}=${maskSecret(decodeURIComponent(val))}`;
+    }
+    return pair;
+  }).join("&");
+  return `${base}?${masked}`;
+}
+function formatHeaderLines(name, value) {
+  const lower = name.toLowerCase();
+  if (lower === "authorization" || lower === "proxy-authorization") {
+    const m = /^Bearer\s+(.+)$/i.exec(value.trim());
+    if (m) {
+      const token = m[1];
+      const jwt = decodeJwt(token);
+      if (jwt) {
+        return [
+          `    ${import_chalk3.default.dim(name)}: Bearer ${maskSecret(token)} ${import_chalk3.default.cyan("(JWT)")}`,
+          `      ${import_chalk3.default.gray("\u251C header: ")} ${import_chalk3.default.gray(JSON.stringify(jwt.header))}`,
+          `      ${import_chalk3.default.gray("\u2514 payload:")} ${import_chalk3.default.gray(JSON.stringify(jwt.payload))}`
+        ];
+      }
+      return [`    ${import_chalk3.default.dim(name)}: Bearer ${maskSecret(token)}`];
+    }
+    return [`    ${import_chalk3.default.dim(name)}: ${maskSecret(value)}`];
+  }
+  if (SENSITIVE_HEADERS.has(lower)) {
+    return [`    ${import_chalk3.default.dim(name)}: ${maskSecret(value)}`];
+  }
+  return [`    ${import_chalk3.default.dim(name)}: ${value}`];
+}
+function formatBody(body, contentType) {
+  if (body.length === 0) return import_chalk3.default.gray("    (empty)");
+  if (body.includes(0)) return import_chalk3.default.gray(`    <binary, ${body.length} bytes>`);
+  let text = body.toString("utf8");
+  const ct = (contentType ?? "").toLowerCase();
+  if (ct.includes("json") || /^[[{]/.test(text.trim())) {
+    try {
+      text = JSON.stringify(JSON.parse(text), null, 2);
+    } catch {
+    }
+  }
+  const MAX = 4e3;
+  const truncated = text.length > MAX;
+  const shown = truncated ? text.slice(0, MAX) : text;
+  const indented = shown.split("\n").map((l) => `    ${l}`).join("\n");
+  return indented + (truncated ? import_chalk3.default.gray(`
+    \u2026 (${text.length - MAX} more bytes \u2014 see --capture-file for full)`) : "");
+}
+function formatCapturedRequest(req, note) {
+  const headerLines = Object.keys(req.headers).flatMap((name) => formatHeaderLines(name, req.headers[name]));
+  const contentType = Object.keys(req.headers).find((k) => k.toLowerCase() === "content-type");
+  return [
+    `${import_chalk3.default.gray(`[${timestamp()}]`)} ${import_chalk3.default.magenta("\u26B2 CAPTURED")} ${colorMethod(req.method)} ${import_chalk3.default.white(maskPath(req.path))} ${import_chalk3.default.gray(`\u2014 ${note}`)}`,
+    import_chalk3.default.bold("  Headers:"),
+    ...headerLines,
+    import_chalk3.default.bold("  Body:"),
+    formatBody(req.body, contentType ? req.headers[contentType] : void 0),
+    ""
+  ].join("\n");
+}
+
+// src/lib/random-name.ts
+var ADJECTIVES = [
+  "amber",
+  "azure",
+  "brave",
+  "bright",
+  "calm",
+  "clever",
+  "cosmic",
+  "crisp",
+  "eager",
+  "fancy",
+  "gentle",
+  "happy",
+  "jolly",
+  "keen",
+  "lively",
+  "lucky",
+  "mellow",
+  "merry",
+  "nimble",
+  "noble",
+  "plucky",
+  "quiet",
+  "rapid",
+  "shiny",
+  "smooth",
+  "snappy",
+  "sunny",
+  "swift",
+  "tidy",
+  "vivid",
+  "witty",
+  "zesty"
+];
+var NOUNS = [
+  "badger",
+  "beacon",
+  "cedar",
+  "comet",
+  "dolphin",
+  "ember",
+  "falcon",
+  "finch",
+  "harbor",
+  "heron",
+  "koala",
+  "lark",
+  "lemur",
+  "maple",
+  "meadow",
+  "otter",
+  "panda",
+  "pebble",
+  "puffin",
+  "quail",
+  "raccoon",
+  "river",
+  "robin",
+  "sparrow",
+  "spruce",
+  "tiger",
+  "turtle",
+  "walrus",
+  "willow",
+  "wombat",
+  "yak",
+  "zebra"
+];
+function pick(list) {
+  return list[Math.floor(Math.random() * list.length)];
+}
+function randomProxyName() {
+  const digits = String(Math.floor(Math.random() * 100)).padStart(2, "0");
+  return `${pick(ADJECTIVES)}${pick(NOUNS)}${digits}`;
 }
 
 // src/lib/tunnel-client.ts
@@ -387,6 +573,7 @@ var import_ws = __toESM(require("ws"));
 var CHUNK_BYTES = 512 * 1024;
 var PING_INTERVAL_MS = 6e4;
 var MAX_RECONNECT_DELAY_MS = 15e3;
+var OFFLINE_CODES = /* @__PURE__ */ new Set(["ECONNREFUSED", "ECONNRESET", "ENOTFOUND", "EHOSTUNREACH"]);
 var STRIP_HEADERS = /* @__PURE__ */ new Set([
   "host",
   "content-length",
@@ -404,6 +591,10 @@ function stripHeaders(headers) {
   }
   return out;
 }
+function encodeBody(buf) {
+  if (buf.includes(0)) return { value: buf.toString("base64"), encoding: "base64" };
+  return { value: buf.toString("utf8"), encoding: "utf8" };
+}
 function startTunnelClient(opts) {
   const target = `http://127.0.0.1:${opts.localPort}`;
   const inflight = /* @__PURE__ */ new Map();
@@ -411,6 +602,7 @@ function startTunnelClient(opts) {
   let closed = false;
   let reconnects = 0;
   let pingTimer;
+  let capturing = false;
   function connect() {
     const url = `${opts.connectUrl}?project=${encodeURIComponent(opts.projectId)}&token=${encodeURIComponent(opts.token)}`;
     const socket = new import_ws.default(url);
@@ -470,30 +662,80 @@ function startTunnelClient(opts) {
     inflight.delete(id);
     void forward(socket, id, f);
   }
+  function sendResponse(socket, id, status, headers, body) {
+    send(socket, { id, type: "res", status, headers, bodyLen: body.length });
+    if (body.length === 0) {
+      send(socket, { id, type: "chunk", seq: 0, data: "", final: true });
+      return;
+    }
+    for (let off = 0, seq = 0; off < body.length; off += CHUNK_BYTES) {
+      const slice = body.subarray(off, Math.min(off + CHUNK_BYTES, body.length));
+      send(socket, { id, type: "chunk", seq: seq++, data: slice.toString("base64"), final: off + CHUNK_BYTES >= body.length });
+    }
+  }
+  function record(f, reqBody, status, captured, resHeaders, resBody) {
+    if (!opts.onRecord) return;
+    const req = encodeBody(reqBody);
+    const res = resBody ? encodeBody(resBody) : void 0;
+    opts.onRecord({
+      ts: (/* @__PURE__ */ new Date()).toISOString(),
+      projectId: opts.projectId,
+      captured,
+      method: f.method,
+      path: f.path,
+      requestHeaders: f.headers,
+      requestBody: reqBody.length ? req.value : void 0,
+      requestBodyEncoding: reqBody.length ? req.encoding : void 0,
+      status,
+      responseHeaders: resHeaders,
+      responseBody: res?.value,
+      responseBodyEncoding: res?.encoding,
+      latencyMs: Date.now() - f.start
+    });
+  }
   async function forward(socket, id, f) {
     const body = Buffer.concat(f.chunks);
     const init = { method: f.method, headers: stripHeaders(f.headers) };
     if (body.length) init.body = body;
-    let status = 502;
     try {
       const resp = await fetch(target + f.path, init);
-      status = resp.status;
+      const status = resp.status;
       const buf = Buffer.from(await resp.arrayBuffer());
       const headers = {};
       resp.headers.forEach((value, key) => {
         if (!STRIP_HEADERS.has(key.toLowerCase())) headers[key] = value;
       });
-      send(socket, { id, type: "res", status, headers, bodyLen: buf.length });
-      for (let off = 0, seq = 0; off < buf.length; off += CHUNK_BYTES) {
-        const slice = buf.subarray(off, Math.min(off + CHUNK_BYTES, buf.length));
-        send(socket, { id, type: "chunk", seq: seq++, data: slice.toString("base64"), final: off + CHUNK_BYTES >= buf.length });
+      if (capturing) {
+        capturing = false;
+        opts.onResume?.();
       }
+      sendResponse(socket, id, status, headers, buf);
+      opts.onEntry({ method: f.method, path: f.path, status, latency: Date.now() - f.start });
+      record(f, body, status, false, headers, buf);
     } catch (err) {
       const code = err?.cause?.code;
-      const message = code === "ECONNREFUSED" || code === "ECONNRESET" || code === "ENOTFOUND" || code === "EHOSTUNREACH" ? `No local server reachable at ${target} \u2014 is your dev server running on port ${opts.localPort}?` : err?.cause?.message || err?.message || String(err);
+      if (OFFLINE_CODES.has(code)) {
+        if (!capturing) {
+          capturing = true;
+          opts.onCaptureStart?.();
+        }
+        const note = `no local server on port ${opts.localPort}`;
+        const payload = Buffer.from(JSON.stringify({
+          apiblaze_dev: "captured",
+          message: `No local server on port ${opts.localPort} \u2014 request captured by \`apiblaze dev\`. Start your server and resend to forward it.`,
+          request: { method: f.method, path: f.path }
+        }, null, 2));
+        const headers = { "content-type": "application/json", "x-apiblaze-dev": "captured" };
+        sendResponse(socket, id, 200, headers, payload);
+        opts.onCapture?.({ method: f.method, path: f.path, headers: f.headers, body }, note);
+        record(f, body, 200, true, headers, payload);
+        return;
+      }
+      const message = err?.cause?.message || err?.message || String(err);
       send(socket, { id, type: "err", message });
+      opts.onEntry({ method: f.method, path: f.path, status: 502, latency: Date.now() - f.start });
+      record(f, body, 502, false);
     }
-    opts.onEntry({ method: f.method, path: f.path, status, latency: Date.now() - f.start });
   }
   function send(socket, frame) {
     try {
@@ -515,34 +757,93 @@ function startTunnelClient(opts) {
 }
 
 // src/commands/dev.ts
+async function offerAutoCreate(teamId, port) {
+  if (!process.stdin.isTTY) {
+    console.log(import_chalk4.default.yellow("No projects found with an internal target."));
+    console.log("Point a project at localhost in the dashboard, or run `apiblaze dev` in an interactive terminal to create one automatically.");
+    return null;
+  }
+  const { create } = await import_inquirer.default.prompt([{
+    type: "confirm",
+    name: "create",
+    message: `No project points at this machine. Create a quick dev proxy \u2192 ${import_chalk4.default.bold(`http://localhost:${port}`)} and tunnel it?`,
+    default: true
+  }]);
+  if (!create) return null;
+  const { auth } = await import_inquirer.default.prompt([{
+    type: "list",
+    name: "auth",
+    message: "How should callers authenticate to the new proxy?",
+    choices: [
+      { name: "none \u2014 open to anyone with the URL (simplest)", value: "none" },
+      { name: "api_key \u2014 callers must send an X-API-Key header", value: "api_key" }
+    ],
+    default: "none"
+  }]);
+  let name = randomProxyName();
+  for (let i = 0; i < 8; i++) {
+    const check = await checkProxyName(name, teamId).catch(() => null);
+    if (!check || check.canUseProjectName && check.canUseApiVersion) break;
+    name = randomProxyName();
+  }
+  const spinner = (0, import_ora2.default)(`Creating dev proxy "${name}"...`).start();
+  let result;
+  try {
+    result = await createProxy({ name, target_url: `http://localhost:${port}`, auth_type: auth, team_id: teamId });
+    spinner.succeed(import_chalk4.default.green(`Created dev proxy "${name}".`));
+  } catch (err) {
+    spinner.fail("Failed to create the dev proxy.");
+    throw err;
+  }
+  const version2 = result.api_version || "1.0.0";
+  const endpoint = `https://${name}.apiblaze.com/${version2}/dev`;
+  console.log(`  ${import_chalk4.default.dim("Endpoint:")} ${import_chalk4.default.bold(endpoint)}`);
+  if (auth === "api_key") {
+    const key = result.api_keys?.dev ?? Object.values(result.api_keys ?? {})[0];
+    if (key) {
+      console.log(`  ${import_chalk4.default.dim("API key (dev):")} ${import_chalk4.default.bold.green(key)}`);
+      console.log(import_chalk4.default.dim("  Send it as the X-API-Key header. It may not be shown again."));
+    }
+  }
+  const targets = await getLocalhostTargets(teamId).catch(() => []);
+  const created = targets.find((t) => t.projectId === result.project_id);
+  if (!created) {
+    console.log(import_chalk4.default.yellow("  Proxy created, but it did not appear as a localhost target \u2014 try `apiblaze dev` again."));
+    return null;
+  }
+  return created;
+}
+async function probeLocalServer(port) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 1500);
+  try {
+    await fetch(`http://127.0.0.1:${port}/`, { method: "HEAD", signal: controller.signal });
+    return true;
+  } catch (err) {
+    if (err?.name === "AbortError") return true;
+    const code = err?.cause?.code;
+    return !(code === "ECONNREFUSED" || code === "ENOTFOUND" || code === "EHOSTUNREACH");
+  } finally {
+    clearTimeout(timer);
+  }
+}
 async function runDev(options) {
   const creds = loadCredentials();
   if (!creds) {
-    console.error(import_chalk3.default.red("Not logged in. Run `apiblaze login` first."));
+    console.error(import_chalk4.default.red("Not logged in. Run `apiblaze login` first."));
     process.exit(1);
   }
-  let teamId = creds.teamId;
-  if (!teamId) {
-    const { getTeams: getTeams2 } = await Promise.resolve().then(() => (init_api(), api_exports));
-    const teams = await getTeams2().catch(() => []);
-    if (teams.length === 1) {
-      teamId = teams[0].teamId;
-    } else if (teams.length > 1) {
-      const { chosen } = await import_inquirer.default.prompt([{
-        type: "list",
-        name: "chosen",
-        message: "Which team?",
-        choices: teams.map((t) => ({ name: t.name, value: t.teamId }))
-      }]);
-      teamId = chosen;
-    }
+  const linked = await resolveLinkedTeam({ preferredId: creds.teamId, interactive: !!process.stdin.isTTY });
+  if (!linked) {
+    console.error(import_chalk4.default.red("No team available. Run `apiblaze login` to set up your team."));
+    process.exit(1);
   }
-  if (creds.teamName) {
-    console.log(`${import_chalk3.default.cyan("\u2192")} Team: ${import_chalk3.default.bold(creds.teamName)}`);
+  const teamId = linked.teamId;
+  if (linked.teamId !== creds.teamId || linked.teamName !== creds.teamName) {
+    saveCredentials({ ...creds, teamId: linked.teamId, teamName: linked.teamName });
   }
-  if (!teamId) {
-    console.error(import_chalk3.default.red("No team selected. Run `apiblaze login` to set up your team."));
-    process.exit(1);
+  if (linked.teamName) {
+    console.log(`${import_chalk4.default.cyan("\u2192")} Team: ${import_chalk4.default.bold(linked.teamName)}`);
   }
   let targets;
   {
@@ -555,17 +856,19 @@ async function runDev(options) {
       throw err;
     }
   }
-  if (targets.length === 0) {
-    console.log(import_chalk3.default.yellow("No projects found with an internal target."));
-    console.log("Set a project's upstream target to localhost or a private IP in your APIblaze dashboard, then try again.");
-    process.exit(0);
-  }
   let selectedTargets;
-  if (targets.length === 1) {
+  if (targets.length === 0) {
+    const created = await offerAutoCreate(teamId, options.port);
+    if (!created) {
+      console.log("Set a project's upstream target to localhost or a private IP, then try again.");
+      process.exit(0);
+    }
+    selectedTargets = [created];
+  } else if (targets.length === 1) {
     const { confirmed } = await import_inquirer.default.prompt([{
       type: "confirm",
       name: "confirmed",
-      message: `Found 1 project with an internal target \u2014 tunnel "${import_chalk3.default.bold(targets[0].projectName)}" (${targets[0].tenantName})?`,
+      message: `Found 1 project with an internal target \u2014 tunnel "${import_chalk4.default.bold(targets[0].projectName)}" (${targets[0].tenantName})?`,
       default: true
     }]);
     if (!confirmed) {
@@ -581,7 +884,7 @@ async function runDev(options) {
       message: `Found ${targets.length} projects with an internal target \u2014 pick one to tunnel:`,
       choices: [
         ...targets.map((t) => ({
-          name: `${import_chalk3.default.bold(t.projectName)} (${t.tenantName}) \u2014 ${t.target}`,
+          name: `${import_chalk4.default.bold(t.projectName)} (${t.tenantName}) \u2014 ${t.target}`,
           value: t
         })),
         new import_inquirer.default.Separator(),
@@ -591,10 +894,18 @@ async function runDev(options) {
     selectedTargets = chosen === ALL ? targets : [chosen];
   }
   console.log(
-    import_chalk3.default.green(`
+    import_chalk4.default.green(`
 Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
 `)
   );
+  let recordSink;
+  let captureStream;
+  if (options.captureFile) {
+    captureStream = import_fs.default.createWriteStream(options.captureFile, { flags: "a" });
+    recordSink = (r) => captureStream.write(JSON.stringify(r) + "\n");
+    console.log(import_chalk4.default.gray(`Streaming full traffic to ${options.captureFile}
+`));
+  }
   let restore = [];
   let connect;
   {
@@ -618,21 +929,38 @@ Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
       projectId,
       localPort: options.port,
       onEntry: (entry) => console.log(formatLogLine(entry)),
-      onStatus: (status) => console.log(import_chalk3.default.gray(`[${projectId}] ${status}`))
+      onStatus: (status) => console.log(import_chalk4.default.gray(`[${projectId}] ${status}`)),
+      onCapture: (req, note) => console.log(formatCapturedRequest(req, note)),
+      onCaptureStart: () => console.log(
+        import_chalk4.default.magenta(`
+\u26B2 No local server on port ${options.port} yet \u2014 capturing requests below. Start your server and they'll forward automatically.
+`)
+      ),
+      onResume: () => console.log(
+        import_chalk4.default.green(`
+\u2713 Local server detected on port ${options.port} \u2014 forwarding resumed.
+`)
+      ),
+      onRecord: recordSink
     })
   );
-  console.log("\n" + import_chalk3.default.gray("\u2500".repeat(60)));
-  console.log(import_chalk3.default.bold("Live traffic") + import_chalk3.default.gray(" (Ctrl+C to stop)"));
-  console.log(import_chalk3.default.gray("\u2500".repeat(60)) + "\n");
+  const localUp = await probeLocalServer(options.port);
+  console.log("\n" + import_chalk4.default.gray("\u2500".repeat(60)));
+  console.log(import_chalk4.default.bold("Live traffic") + import_chalk4.default.gray(" (Ctrl+C to stop)"));
+  console.log(
+    localUp ? import_chalk4.default.green(`\u2713 Local server detected on port ${options.port} \u2014 forwarding live.`) : import_chalk4.default.magenta(`\u26B2 Nothing listening on port ${options.port} yet \u2014 requests will be captured until your server starts.`)
+  );
+  console.log(import_chalk4.default.gray("\u2500".repeat(60)) + "\n");
   let isCleaningUp = false;
   async function cleanup() {
     if (isCleaningUp) return;
     isCleaningUp = true;
-    console.log(import_chalk3.default.gray("\n\nShutting down..."));
+    console.log(import_chalk4.default.gray("\n\nShutting down..."));
     for (const client of clients) client.close();
+    captureStream?.end();
     await deleteDevTunnel(restore).catch(() => {
     });
-    console.log(import_chalk3.default.green("Tunnel stopped."));
+    console.log(import_chalk4.default.green("Tunnel stopped."));
     process.exit(0);
   }
   process.on("SIGINT", () => void cleanup());
@@ -642,18 +970,16 @@ Tunneling ${selectedTargets.length} project(s) to localhost:${options.port}
 }
 
 // src/commands/projects.ts
-var import_chalk4 = __toESM(require("chalk"));
+var import_chalk5 = __toESM(require("chalk"));
 var import_ora3 = __toESM(require("ora"));
-init_auth();
-init_api();
 async function runProjects() {
   const creds = loadCredentials();
   if (!creds) {
-    console.error(import_chalk4.default.red("Not logged in. Run `apiblaze login` first."));
+    console.error(import_chalk5.default.red("Not logged in. Run `apiblaze login` first."));
     process.exit(1);
   }
   if (creds.githubHandle) {
-    console.log(`${import_chalk4.default.cyan("\u2192")} Logged in as ${import_chalk4.default.bold("@" + creds.githubHandle)}`);
+    console.log(`${import_chalk5.default.cyan("\u2192")} Logged in as ${import_chalk5.default.bold("@" + creds.githubHandle)}`);
   }
   let teamId = creds.teamId;
   let teamName = creds.teamName;
@@ -675,10 +1001,10 @@ async function runProjects() {
     }
   }
   if (!teamId) {
-    console.error(import_chalk4.default.red("No team found. Run `apiblaze login` to set up your team."));
+    console.error(import_chalk5.default.red("No team found. Run `apiblaze login` to set up your team."));
     process.exit(1);
   }
-  console.log(`${import_chalk4.default.cyan("\u2192")} Team: ${import_chalk4.default.bold(teamName ?? teamId)}
+  console.log(`${import_chalk5.default.cyan("\u2192")} Team: ${import_chalk5.default.bold(teamName ?? teamId)}
 `);
   const spinner = (0, import_ora3.default)("Fetching projects...").start();
   let projects;
@@ -690,23 +1016,21 @@ async function runProjects() {
     throw err;
   }
   if (projects.length === 0) {
-    console.log(import_chalk4.default.yellow("No projects found for this team."));
+    console.log(import_chalk5.default.yellow("No projects found for this team."));
     return;
   }
   const width = Math.max(...projects.map((p) => p.projectName.length));
   for (const p of projects) {
-    console.log(`  ${import_chalk4.default.bold(p.projectName.padEnd(width))}   ${import_chalk4.default.dim("v" + p.apiVersion)}`);
+    console.log(`  ${import_chalk5.default.bold(p.projectName.padEnd(width))}   ${import_chalk5.default.dim("v" + p.apiVersion)}`);
   }
-  console.log(import_chalk4.default.dim(`
+  console.log(import_chalk5.default.dim(`
 ${projects.length} project${projects.length === 1 ? "" : "s"}`));
 }
 
 // src/commands/create.ts
-var import_fs = __toESM(require("fs"));
-var import_chalk5 = __toESM(require("chalk"));
+var import_fs2 = __toESM(require("fs"));
+var import_chalk6 = __toESM(require("chalk"));
 var import_ora4 = __toESM(require("ora"));
-init_auth();
-init_api();
 function normalizeName(raw) {
   return (raw || "").toLowerCase().replace(/[^a-z0-9]/g, "");
 }
@@ -731,17 +1055,17 @@ function stripTenantFromPortal(devPortal) {
   }
 }
 function fail(message) {
-  console.error(import_chalk5.default.red(`Error: ${message}`));
+  console.error(import_chalk6.default.red(`Error: ${message}`));
   process.exit(1);
 }
 function printCurlExample(url, apiKey) {
   console.log();
-  console.log(`  ${import_chalk5.default.dim("Try it with curl:")}`);
+  console.log(`  ${import_chalk6.default.dim("Try it with curl:")}`);
   if (apiKey) {
-    console.log(`    ${import_chalk5.default.cyan(`curl ${url} \\`)}`);
-    console.log(`    ${import_chalk5.default.cyan(`  -H "X-API-Key: ${apiKey}"`)}`);
+    console.log(`    ${import_chalk6.default.cyan(`curl ${url} \\`)}`);
+    console.log(`    ${import_chalk6.default.cyan(`  -H "X-API-Key: ${apiKey}"`)}`);
   } else {
-    console.log(`    ${import_chalk5.default.cyan(`curl ${url}`)}`);
+    console.log(`    ${import_chalk6.default.cyan(`curl ${url}`)}`);
   }
 }
 var VALID_AUTH = ["api_key", "none", "oauth"];
@@ -771,7 +1095,7 @@ async function runCreate(opts = {}) {
       teamId = match.teamId;
     }
   }
-  if (!opts.json) console.log(import_chalk5.default.bold("\nCreate an API proxy\n"));
+  if (!opts.json) console.log(import_chalk6.default.bold("\nCreate an API proxy\n"));
   let name = "";
   if (opts.name !== void 0) {
     name = normalizeName(opts.name);
@@ -791,7 +1115,7 @@ async function runCreate(opts = {}) {
       }]);
       name = normalizeName(rawName);
       if (name.length < 3) {
-        console.log(import_chalk5.default.yellow("  Name must be at least 3 characters (letters and digits only).\n"));
+        console.log(import_chalk6.default.yellow("  Name must be at least 3 characters (letters and digits only).\n"));
         continue;
       }
       const spinner2 = (0, import_ora4.default)("Checking availability...").start();
@@ -799,15 +1123,15 @@ async function runCreate(opts = {}) {
         const check = await checkProxyName(name, teamId, opts.apiversion);
         spinner2.stop();
         if (!check.canUseProjectName || !check.canUseApiVersion) {
-          console.log(import_chalk5.default.yellow(`  "${name}" is not available${check.message ? ` \u2014 ${check.message}` : ""}. Try another.
+          console.log(import_chalk6.default.yellow(`  "${name}" is not available${check.message ? ` \u2014 ${check.message}` : ""}. Try another.
 `));
           continue;
         }
       } catch {
         spinner2.stop();
-        console.log(import_chalk5.default.dim("  (could not verify availability; continuing)"));
+        console.log(import_chalk6.default.dim("  (could not verify availability; continuing)"));
       }
-      console.log(`${import_chalk5.default.cyan("\u2192")} Your API will live at ${import_chalk5.default.bold(`https://${name}.apiblaze.com`)}
+      console.log(`${import_chalk6.default.cyan("\u2192")} Your API will live at ${import_chalk6.default.bold(`https://${name}.apiblaze.com`)}
 `);
       break;
     }
@@ -827,7 +1151,7 @@ async function runCreate(opts = {}) {
         message: "Target URL to forward requests to (e.g. https://httpbin.org):"
       }]);
       if (!isHttpUrl(url)) {
-        console.log(import_chalk5.default.yellow("  Enter a valid http(s) URL.\n"));
+        console.log(import_chalk6.default.yellow("  Enter a valid http(s) URL.\n"));
         continue;
       }
       targetUrl = url.trim();
@@ -838,7 +1162,7 @@ async function runCreate(opts = {}) {
   }
   if (interactive && !opts.yes) {
     const { default: inquirer2 } = await import("inquirer");
-    console.log(`${import_chalk5.default.cyan("\u2192")} Auth: ${import_chalk5.default.bold(auth)}${auth === "api_key" ? " \u2014 consumers send an X-API-Key header" : ""}`);
+    console.log(`${import_chalk6.default.cyan("\u2192")} Auth: ${import_chalk6.default.bold(auth)}${auth === "api_key" ? " \u2014 consumers send an X-API-Key header" : ""}`);
     const { ok } = await inquirer2.prompt([{
       type: "confirm",
       name: "ok",
@@ -846,7 +1170,7 @@ async function runCreate(opts = {}) {
       default: true
     }]);
     if (!ok) {
-      console.log(import_chalk5.default.yellow("Cancelled."));
+      console.log(import_chalk6.default.yellow("Cancelled."));
       return;
     }
   }
@@ -854,45 +1178,10 @@ async function runCreate(opts = {}) {
   let result;
   try {
     result = await createProxy({ name, target_url: targetUrl, auth_type: auth, team_id: teamId, ...opts.apiversion ? { api_version: opts.apiversion } : {} });
-    spinner?.succeed(import_chalk5.default.green("Proxy created!"));
+    spinner?.succeed(import_chalk6.default.green("Proxy created!"));
   } catch (err) {
-    const e = err;
-    const ownedByYou = e?.status === 409 && e?.body?.reason === "slug_owned_by_your_other_team" && !opts.team;
     spinner?.fail("Failed to create proxy.");
-    if (ownedByYou) {
-      const ownerId = e.body.owning_team_id;
-      const ownerName = e.body.owning_team_name || ownerId;
-      if (!opts.json) console.log(import_chalk5.default.yellow(`
-  You already own "${e.body.product_slug}" under your team "${ownerName}".`));
-      let doSwitch = false;
-      if (interactive && !opts.yes) {
-        const { default: inquirer2 } = await import("inquirer");
-        const { ok } = await inquirer2.prompt([{
-          type: "confirm",
-          name: "ok",
-          message: `Switch to team "${ownerName}" and create "${name}" there?`,
-          default: true
-        }]);
-        doSwitch = ok;
-      }
-      if (!doSwitch) {
-        if (!opts.json) console.log(import_chalk5.default.dim(`  Run \`apiblaze team ${ownerId}\` to switch, then retry \u2014 or pick another --name.`));
-        throw err;
-      }
-      const creds2 = loadCredentials();
-      if (creds2) saveCredentials({ ...creds2, teamId: ownerId, teamName: ownerName });
-      teamId = ownerId;
-      const spinner2 = !opts.json ? (0, import_ora4.default)(`Creating proxy under "${ownerName}"...`).start() : null;
-      try {
-        result = await createProxy({ name, target_url: targetUrl, auth_type: auth, team_id: ownerId, ...opts.apiversion ? { api_version: opts.apiversion } : {} });
-        spinner2?.succeed(import_chalk5.default.green(`Proxy created \u2014 active team switched to "${ownerName}".`));
-      } catch (err2) {
-        spinner2?.fail("Failed to create proxy after switching team.");
-        throw err2;
-      }
-    } else {
-      throw err;
-    }
+    throw err;
   }
   const version2 = result.api_version || "1.0.0";
   const keys = result.api_keys ?? {};
@@ -912,16 +1201,16 @@ async function runCreate(opts = {}) {
     return;
   }
   console.log();
-  console.log(`  ${import_chalk5.default.dim("Proxy URL: ")} ${import_chalk5.default.bold(proxyUrl)}`);
-  if (devPortal) console.log(`  ${import_chalk5.default.dim("Dev portal:")} ${import_chalk5.default.bold(devPortal)}`);
+  console.log(`  ${import_chalk6.default.dim("Proxy URL: ")} ${import_chalk6.default.bold(proxyUrl)}`);
+  if (devPortal) console.log(`  ${import_chalk6.default.dim("Dev portal:")} ${import_chalk6.default.bold(devPortal)}`);
   if (adminKey) {
     console.log();
-    console.log(`  ${import_chalk5.default.dim("Consumer admin API key (dev):")}`);
-    console.log(`    ${import_chalk5.default.bold.green(adminKey)}`);
-    console.log(import_chalk5.default.dim("\n  Save this now \u2014 send it as the X-API-Key header. It may not be shown again."));
+    console.log(`  ${import_chalk6.default.dim("Consumer admin API key (dev):")}`);
+    console.log(`    ${import_chalk6.default.bold.green(adminKey)}`);
+    console.log(import_chalk6.default.dim("\n  Save this now \u2014 send it as the X-API-Key header. It may not be shown again."));
     const otherEnvs = Object.keys(keys).filter((e) => e !== "dev");
     if (otherEnvs.length) {
-      console.log(import_chalk5.default.dim(`  (Separate keys were also created for: ${otherEnvs.join(", ")}.)`));
+      console.log(import_chalk6.default.dim(`  (Separate keys were also created for: ${otherEnvs.join(", ")}.)`));
     }
   }
   printCurlExample(proxyUrl, auth === "none" ? void 0 : adminKey);
@@ -930,14 +1219,14 @@ async function runCreate(opts = {}) {
 async function runAnonymousCreate(opts) {
   const interactive = !!process.stdin.isTTY && !opts.json;
   if (!opts.json) {
-    console.log(import_chalk5.default.bold("\nCreate an API proxy"));
-    console.log(import_chalk5.default.dim("Not logged in \u2014 creating an anonymous proxy. You can claim it to your account within 30 days.\n"));
+    console.log(import_chalk6.default.bold("\nCreate an API proxy"));
+    console.log(import_chalk6.default.dim("Not logged in \u2014 creating an anonymous proxy. You can claim it to your account within 30 days.\n"));
   }
   let body = {};
   if (opts.config) {
     let raw = "";
     try {
-      raw = import_fs.default.readFileSync(opts.config, "utf8");
+      raw = import_fs2.default.readFileSync(opts.config, "utf8");
     } catch {
       fail(`Cannot read --config file: ${opts.config}`);
     }
@@ -977,7 +1266,7 @@ async function runAnonymousCreate(opts) {
           message: "Target URL to forward requests to (e.g. https://httpbin.org):"
         }]);
         if (!isHttpUrl(url)) {
-          console.log(import_chalk5.default.yellow("  Enter a valid http(s) URL.\n"));
+          console.log(import_chalk6.default.yellow("  Enter a valid http(s) URL.\n"));
           continue;
         }
         target = url.trim();
@@ -1005,7 +1294,7 @@ async function runAnonymousCreate(opts) {
   let result;
   try {
     result = await createProxyAnonymous(body);
-    spinner?.succeed(import_chalk5.default.green("Proxy created!"));
+    spinner?.succeed(import_chalk6.default.green("Proxy created!"));
   } catch (err) {
     spinner?.fail("Failed to create proxy.");
     throw err;
@@ -1027,30 +1316,28 @@ async function runAnonymousCreate(opts) {
     return;
   }
   console.log();
-  if (prodEndpoint) console.log(`  ${import_chalk5.default.dim("Proxy URL: ")} ${import_chalk5.default.bold(prodEndpoint)}`);
-  if (result.portal) console.log(`  ${import_chalk5.default.dim("Dev portal:")} ${import_chalk5.default.bold(result.portal)}`);
+  if (prodEndpoint) console.log(`  ${import_chalk6.default.dim("Proxy URL: ")} ${import_chalk6.default.bold(prodEndpoint)}`);
+  if (result.portal) console.log(`  ${import_chalk6.default.dim("Dev portal:")} ${import_chalk6.default.bold(result.portal)}`);
   if (apiKey) {
     console.log();
-    console.log(`  ${import_chalk5.default.dim("API key:")}`);
-    console.log(`    ${import_chalk5.default.bold.green(apiKey)}`);
-    console.log(import_chalk5.default.dim("\n  Save this now \u2014 send it as the X-API-Key header. It may not be shown again."));
+    console.log(`  ${import_chalk6.default.dim("API key:")}`);
+    console.log(`    ${import_chalk6.default.bold.green(apiKey)}`);
+    console.log(import_chalk6.default.dim("\n  Save this now \u2014 send it as the X-API-Key header. It may not be shown again."));
   }
   if (prodEndpoint) printCurlExample(prodEndpoint, apiKey);
   if (result.claim_url) {
     console.log();
-    console.log(`  ${import_chalk5.default.yellow("\u26A0 Anonymous proxy \u2014 claim it to your account within 30 days or it expires:")}`);
-    console.log(`    ${import_chalk5.default.bold(result.claim_url)}`);
-    console.log(import_chalk5.default.dim("  (or run `apiblaze login`, then re-run `apiblaze create` to create it under your account)"));
+    console.log(`  ${import_chalk6.default.yellow("\u26A0 Anonymous proxy \u2014 claim it to your account within 30 days or it expires:")}`);
+    console.log(`    ${import_chalk6.default.bold(result.claim_url)}`);
+    console.log(import_chalk6.default.dim("  (or run `apiblaze login`, then re-run `apiblaze create` to create it under your account)"));
   }
   console.log();
 }
 
 // src/commands/claim.ts
-var import_chalk6 = __toESM(require("chalk"));
-init_auth();
-init_api();
+var import_chalk7 = __toESM(require("chalk"));
 function fail2(message) {
-  console.error(import_chalk6.default.red(`Error: ${message}`));
+  console.error(import_chalk7.default.red(`Error: ${message}`));
   process.exit(1);
 }
 async function runClaim(claimCodeArg, opts) {
@@ -1106,41 +1393,39 @@ async function runClaim(claimCodeArg, opts) {
     console.log(JSON.stringify(result, null, 2));
     return;
   }
-  console.log(import_chalk6.default.green(`
-\u2714 Claimed into ${import_chalk6.default.bold(teamName)}.`));
-  if (result.project_id) console.log(`  Project: ${import_chalk6.default.bold(result.project_id)}`);
+  console.log(import_chalk7.default.green(`
+\u2714 Claimed into ${import_chalk7.default.bold(teamName)}.`));
+  if (result.project_id) console.log(`  Project: ${import_chalk7.default.bold(result.project_id)}`);
   if (result.endpoints?.length) {
     console.log("  Endpoints:");
     for (const e of result.endpoints) console.log(`    ${e}`);
   }
   console.log(`
-  Manage it at ${import_chalk6.default.cyan("https://dashboard.apiblaze.com/dashboard")}`);
+  Manage it at ${import_chalk7.default.cyan("https://dashboard.apiblaze.com/dashboard")}`);
 }
 
 // src/commands/logout.ts
-var import_chalk7 = __toESM(require("chalk"));
-init_auth();
+var import_chalk8 = __toESM(require("chalk"));
 async function runLogout() {
   const creds = loadCredentials();
   const removed = clearCredentials();
   if (!removed) {
-    console.log(import_chalk7.default.yellow("You were not logged in."));
+    console.log(import_chalk8.default.yellow("You were not logged in."));
     return;
   }
   const who = creds?.githubHandle ?? creds?.email;
-  console.log(import_chalk7.default.green(`\u2714 Logged out${who ? ` (${who})` : ""}.`));
+  console.log(import_chalk8.default.green(`\u2714 Logged out${who ? ` (${who})` : ""}.`));
 }
 
 // src/commands/whoami.ts
-var import_chalk8 = __toESM(require("chalk"));
-init_auth();
+var import_chalk9 = __toESM(require("chalk"));
 async function runWhoami(opts = {}) {
   const creds = loadCredentials();
   if (!creds) {
     if (opts.json) {
       console.log(JSON.stringify({ loggedIn: false }, null, 2));
     } else {
-      console.log(import_chalk8.default.yellow("Not logged in. Run `apiblaze login` first."));
+      console.log(import_chalk9.default.yellow("Not logged in. Run `apiblaze login` first."));
     }
     return;
   }
@@ -1158,23 +1443,21 @@ async function runWhoami(opts = {}) {
     return;
   }
   const who = creds.githubHandle ?? creds.email ?? creds.apiblazeUserId ?? "unknown";
-  console.log(`${import_chalk8.default.cyan("Signed in as")} ${import_chalk8.default.bold(who)}`);
+  console.log(`${import_chalk9.default.cyan("Signed in as")} ${import_chalk9.default.bold(who)}`);
   if (creds.email && creds.email !== who) console.log(`  Email:   ${creds.email}`);
   if (creds.apiblazeUserId) console.log(`  User ID: ${creds.apiblazeUserId}`);
   if (creds.teamName || creds.teamId) {
-    console.log(`  Team:    ${import_chalk8.default.bold(creds.teamName ?? creds.teamId)}${creds.teamName && creds.teamId ? import_chalk8.default.gray(` (${creds.teamId})`) : ""}`);
+    console.log(`  Team:    ${import_chalk9.default.bold(creds.teamName ?? creds.teamId)}${creds.teamName && creds.teamId ? import_chalk9.default.gray(` (${creds.teamId})`) : ""}`);
   }
   if (expired) {
-    console.log(import_chalk8.default.yellow("\n\u26A0 Session expired. Run `apiblaze login` to re-authenticate."));
+    console.log(import_chalk9.default.yellow("\n\u26A0 Session expired. Run `apiblaze login` to re-authenticate."));
   }
 }
 
 // src/commands/team.ts
-var import_chalk9 = __toESM(require("chalk"));
-init_auth();
-init_api();
+var import_chalk10 = __toESM(require("chalk"));
 function fail3(message) {
-  console.error(import_chalk9.default.red(`Error: ${message}`));
+  console.error(import_chalk10.default.red(`Error: ${message}`));
   process.exit(1);
 }
 async function runTeam(arg) {
@@ -1196,7 +1479,7 @@ async function runTeam(arg) {
     }
   } else if (teams.length === 1) {
     chosen = teams[0];
-    console.log(`${import_chalk9.default.cyan("\u2192")} You only have one team: ${import_chalk9.default.bold(chosen.name)}`);
+    console.log(`${import_chalk10.default.cyan("\u2192")} You only have one team: ${import_chalk10.default.bold(chosen.name)}`);
   } else if (process.stdin.isTTY) {
     const { default: inquirer2 } = await import("inquirer");
     const { picked } = await inquirer2.prompt([{
@@ -1211,46 +1494,43 @@ async function runTeam(arg) {
     fail3(`Specify a team: \`apiblaze team <name|id>\`. Available: ${teams.map((t) => t.name).join(", ")}.`);
   }
   saveCredentials({ ...creds, teamId: chosen.teamId, teamName: chosen.name });
-  console.log(import_chalk9.default.green(`
-\u2714 Active team: ${import_chalk9.default.bold(chosen.name)}`));
+  console.log(import_chalk10.default.green(`
+\u2714 Active team: ${import_chalk10.default.bold(chosen.name)}`));
 }
 
 // src/commands/authz.ts
-var import_chalk11 = __toESM(require("chalk"));
-init_auth();
-init_api();
+var import_chalk12 = __toESM(require("chalk"));
 
 // src/lib/agent-chat.ts
 var import_readline = __toESM(require("readline"));
-var import_chalk10 = __toESM(require("chalk"));
-init_api();
+var import_chalk11 = __toESM(require("chalk"));
 async function runAgentChatRepl(opts) {
   const { title, subtitle, endpoint, buildBody, seedPrompt, summarizeProposal, commands } = opts;
-  console.log("\n" + import_chalk10.default.cyan.bold(title));
-  if (subtitle) console.log(import_chalk10.default.dim(subtitle));
+  console.log("\n" + import_chalk11.default.cyan.bold(title));
+  if (subtitle) console.log(import_chalk11.default.dim(subtitle));
   const messages = [];
   const ctx = { proposal: null, lastData: null, log: (s) => console.log(s) };
   const cmdByName = new Map(commands.map((c) => [c.name, c]));
   const footer = () => {
     const parts = [
-      import_chalk10.default.dim("type to chat/refine"),
-      ...commands.map((c) => import_chalk10.default.dim(`/${c.name} ${c.describe}`)),
-      import_chalk10.default.dim("/show"),
-      import_chalk10.default.dim("/drop discard & exit")
+      import_chalk11.default.dim("type to chat/refine"),
+      ...commands.map((c) => import_chalk11.default.dim(`/${c.name} ${c.describe}`)),
+      import_chalk11.default.dim("/show"),
+      import_chalk11.default.dim("/drop discard & exit")
     ];
-    return "  " + import_chalk10.default.dim("[ ") + parts.join(import_chalk10.default.dim(" \xB7 ")) + import_chalk10.default.dim(" ]");
+    return "  " + import_chalk11.default.dim("[ ") + parts.join(import_chalk11.default.dim(" \xB7 ")) + import_chalk11.default.dim(" ]");
   };
   async function turn(content) {
     messages.push({ role: "user", content });
-    process.stdout.write(import_chalk10.default.dim("  \u2026thinking\n"));
+    process.stdout.write(import_chalk11.default.dim("  \u2026thinking\n"));
     const { status, data } = await agentCall(endpoint, "POST", { messages, ...buildBody(messages) });
     if (status === 402) {
-      console.log(import_chalk10.default.red("  Insufficient credits \u2014 top up to keep using the agents.\n"));
+      console.log(import_chalk11.default.red("  Insufficient credits \u2014 top up to keep using the agents.\n"));
       messages.pop();
       return;
     }
     if (status >= 400 || !data) {
-      console.log(import_chalk10.default.red(`  Error (${status}): ${(data && data.error) ?? "request failed"}
+      console.log(import_chalk11.default.red(`  Error (${status}): ${(data && data.error) ?? "request failed"}
 `));
       messages.pop();
       return;
@@ -1258,20 +1538,20 @@ async function runAgentChatRepl(opts) {
     ctx.lastData = data;
     const reply = data.reply ?? data.message ?? "(no reply)";
     messages.push({ role: "assistant", content: reply });
-    console.log("\n" + import_chalk10.default.cyan("agent \u203A ") + reply + "\n");
+    console.log("\n" + import_chalk11.default.cyan("agent \u203A ") + reply + "\n");
     if (data.proposal) {
       ctx.proposal = data.proposal;
       const summary = summarizeProposal?.(data);
-      if (summary) console.log(import_chalk10.default.yellow("  " + summary));
+      if (summary) console.log(import_chalk11.default.yellow("  " + summary));
       const ready = commands.filter((c) => c.needsProposal).map((c) => `/${c.name}`).join(" or ");
-      if (ready) console.log(import_chalk10.default.dim(`  Ready \u2014 ${ready} to make it official, or keep refining.`));
+      if (ready) console.log(import_chalk11.default.dim(`  Ready \u2014 ${ready} to make it official, or keep refining.`));
       console.log();
     }
     const llm = data.llm;
     if (llm) {
       const credits = data.credits_remaining;
       const left = typeof credits === "number" ? ` \xB7 $${(credits / 100).toFixed(2)} credit left` : "";
-      console.log(import_chalk10.default.dim(`  ~$${(llm.cost_estimate ?? 0).toFixed(4)} \xB7 ${llm.model ?? "?"}${left}`));
+      console.log(import_chalk11.default.dim(`  ~$${(llm.cost_estimate ?? 0).toFixed(4)} \xB7 ${llm.model ?? "?"}${left}`));
     }
   }
   const rl = import_readline.default.createInterface({ input: process.stdin, output: process.stdout });
@@ -1279,26 +1559,26 @@ async function runAgentChatRepl(opts) {
   await turn(seedPrompt);
   for (; ; ) {
     console.log(footer());
-    const line = (await ask(import_chalk10.default.green("you \u203A "))).trim();
+    const line = (await ask(import_chalk11.default.green("you \u203A "))).trim();
     if (!line) continue;
     if (line === "/drop" || line === "/exit" || line === "/quit") {
-      console.log(import_chalk10.default.dim("  Dropped \u2014 nothing applied.\n"));
+      console.log(import_chalk11.default.dim("  Dropped \u2014 nothing applied.\n"));
       break;
     }
     if (line === "/show") {
-      if (!ctx.proposal) console.log(import_chalk10.default.dim("  No proposal yet \u2014 keep chatting until the agent proposes one.\n"));
+      if (!ctx.proposal) console.log(import_chalk11.default.dim("  No proposal yet \u2014 keep chatting until the agent proposes one.\n"));
       else console.log("\n" + JSON.stringify(ctx.proposal, null, 2) + "\n");
       continue;
     }
     if (line.startsWith("/")) {
       const cmd = cmdByName.get(line.slice(1));
       if (!cmd) {
-        console.log(import_chalk10.default.red(`  Unknown command "${line}". Try one of: ${commands.map((c) => "/" + c.name).join(", ")}, /show, /drop
+        console.log(import_chalk11.default.red(`  Unknown command "${line}". Try one of: ${commands.map((c) => "/" + c.name).join(", ")}, /show, /drop
 `));
         continue;
       }
       if (cmd.needsProposal && !ctx.proposal) {
-        console.log(import_chalk10.default.yellow("  No proposal yet \u2014 keep chatting until the agent generates one, then try again.\n"));
+        console.log(import_chalk11.default.yellow("  No proposal yet \u2014 keep chatting until the agent generates one, then try again.\n"));
         continue;
       }
       await cmd.run(ctx);
@@ -1327,11 +1607,11 @@ async function runAuthz(projectArg, apiVersionArg) {
     if (!enable) {
       const m = await agentCall(`/projects/${projectId}/${apiVersion}/policies/model?tenantId=${encodeURIComponent(tenant)}`, "POST", proposal.model);
       if (m.status === 404) {
-        ctx.log(import_chalk11.default.red("  Authorization store not provisioned yet. Open the dashboard Authorization tab for this project once (it auto-provisions the store), then re-run.\n"));
+        ctx.log(import_chalk12.default.red("  Authorization store not provisioned yet. Open the dashboard Authorization tab for this project once (it auto-provisions the store), then re-run.\n"));
         return;
       }
       if (m.status >= 400) {
-        ctx.log(import_chalk11.default.red(`  Model save failed (${m.status}): ${m.data?.error ?? ""}
+        ctx.log(import_chalk12.default.red(`  Model save failed (${m.status}): ${m.data?.error ?? ""}
 `));
         return;
       }
@@ -1360,14 +1640,14 @@ async function runAuthz(projectArg, apiVersionArg) {
     if (enable) {
       const e = await agentCall(`/${projectId}/${apiVersion}/config`, "PATCH", { authorization: { enforce_authorization: true }, tenant });
       if (e.status >= 400) {
-        ctx.log(import_chalk11.default.red(`  Enforced ${ok} route(s) but turning on the project-level switch failed (${e.status}). Toggle "Enforce Authorization" on in the dashboard.
+        ctx.log(import_chalk12.default.red(`  Enforced ${ok} route(s) but turning on the project-level switch failed (${e.status}). Toggle "Enforce Authorization" on in the dashboard.
 `));
         return;
       }
-      ctx.log(import_chalk11.default.green(`  \u2713 Enforcement ON \u2014 ${ok} route(s) + project switch on${fail4 ? `, ${fail4} failed` : ""}.
+      ctx.log(import_chalk12.default.green(`  \u2713 Enforcement ON \u2014 ${ok} route(s) + project switch on${fail4 ? `, ${fail4} failed` : ""}.
 `));
     } else {
-      ctx.log(import_chalk11.default.green(`  \u2713 Published (shadow): model + ${ok} route(s)${fail4 ? `, ${fail4} failed` : ""}. Review, then /enable.
+      ctx.log(import_chalk12.default.green(`  \u2713 Published (shadow): model + ${ok} route(s)${fail4 ? `, ${fail4} failed` : ""}. Review, then /enable.
 `));
     }
   }
@@ -1392,9 +1672,7 @@ async function runAuthz(projectArg, apiVersionArg) {
 }
 
 // src/commands/openapi.ts
-var import_chalk12 = __toESM(require("chalk"));
-init_auth();
-init_api();
+var import_chalk13 = __toESM(require("chalk"));
 async function runOpenapi(projectArg, apiVersionArg) {
   const creds = loadCredentials();
   if (!creds) throw new Error("Not authenticated. Run `apiblaze login` first.");
@@ -1403,10 +1681,10 @@ async function runOpenapi(projectArg, apiVersionArg) {
   if (!match) throw new Error(`Project "${projectArg}" not found in your active team. Run \`apiblaze projects\`.`);
   const projectId = match.projectId;
   const apiVersion = apiVersionArg || match.apiVersion;
-  console.log(import_chalk12.default.dim("Gathering captured traffic samples\u2026"));
+  console.log(import_chalk13.default.dim("Gathering captured traffic samples\u2026"));
   const routesRes = await agentCall(`/projects/${projectId}/${apiVersion}/samples/routes`, "GET");
   if (routesRes.status >= 400) {
-    console.log(import_chalk12.default.red(`Could not list traffic (${routesRes.status}): ${routesRes.data?.error ?? ""}`));
+    console.log(import_chalk13.default.red(`Could not list traffic (${routesRes.status}): ${routesRes.data?.error ?? ""}`));
     return;
   }
   const routes = routesRes.data?.routes ?? (Array.isArray(routesRes.data) ? routesRes.data : []);
@@ -1419,25 +1697,25 @@ async function runOpenapi(projectArg, apiVersionArg) {
   }
   const sampleIds = [...ids];
   if (sampleIds.length === 0) {
-    console.log(import_chalk12.default.yellow("No captured traffic samples found. Hit the dev environment of this proxy to capture some traces, then retry."));
+    console.log(import_chalk13.default.yellow("No captured traffic samples found. Hit the dev environment of this proxy to capture some traces, then retry."));
     return;
   }
   async function publish(ctx) {
     const patch = ctx.proposal.patch;
     if (!Array.isArray(patch) || patch.length === 0) {
-      ctx.log(import_chalk12.default.green("  Nothing to publish \u2014 the spec already covers the observed traffic.\n"));
+      ctx.log(import_chalk13.default.green("  Nothing to publish \u2014 the spec already covers the observed traffic.\n"));
       return;
     }
     const specSource = ctx.lastData?.spec_source ?? "unknown";
     const endpoint = specSource === "github" ? "open-pr" : "publish-openapi";
     const pub = await agentCall(`/projects/${projectId}/${apiVersion}/samples/${endpoint}`, "POST", { patch, sample_ids_used: sampleIds });
     if (pub.status >= 400) {
-      ctx.log(import_chalk12.default.red(`  Publish failed (${pub.status}): ${pub.data?.error ?? ""}
+      ctx.log(import_chalk13.default.red(`  Publish failed (${pub.status}): ${pub.data?.error ?? ""}
 `));
       return;
     }
     const prUrl = pub.data?.pr_url;
-    ctx.log(import_chalk12.default.green(prUrl ? `  \u2713 Pull request opened: ${prUrl}
+    ctx.log(import_chalk13.default.green(prUrl ? `  \u2713 Pull request opened: ${prUrl}
 ` : "  \u2713 Published updated OpenAPI spec.\n"));
   }
   await runAgentChatRepl({
@@ -1458,9 +1736,7 @@ async function runOpenapi(projectArg, apiVersionArg) {
 }
 
 // src/commands/mcp.ts
-var import_chalk13 = __toESM(require("chalk"));
-init_auth();
-init_api();
+var import_chalk14 = __toESM(require("chalk"));
 async function runMcp(projectArg, apiVersionArg, opts) {
   const creds = loadCredentials();
   if (!creds) throw new Error("Not authenticated. Run `apiblaze login` first.");
@@ -1474,11 +1750,11 @@ async function runMcp(projectArg, apiVersionArg, opts) {
     const spec = ctx.proposal;
     const pub = await agentCall(`/projects/${projectId}/${apiVersion}/mcp/spec`, "PUT", { environment, spec });
     if (pub.status >= 400) {
-      ctx.log(import_chalk13.default.red(`  Publish failed (${pub.status}): ${pub.data?.error ?? ""}
+      ctx.log(import_chalk14.default.red(`  Publish failed (${pub.status}): ${pub.data?.error ?? ""}
 `));
       return;
     }
-    ctx.log(import_chalk13.default.green(`  \u2713 Published MCP server \u2014 ${projectId}.mcp.apiblaze.com/${apiVersion}/${environment}.
+    ctx.log(import_chalk14.default.green(`  \u2713 Published MCP server \u2014 ${projectId}.mcp.apiblaze.com/${apiVersion}/${environment}.
 `));
   }
   await runAgentChatRepl({
@@ -1510,7 +1786,7 @@ program.command("login").description("Authenticate with APIblaze").action(async
     process.exit(1);
   }
 });
-program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.apiblaze.com)").option("--target <url>", "Target URL to forward requests to").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant slug (anonymous create; generated if omitted)").option("--product <slug>", "Product slug (anonymous create; defaults to the proxy name)").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
+program.command("create").description("Create a new API proxy (no login needed \u2014 without auth it creates an anonymous proxy and prints a claim URL)").option("--name <name>", "Proxy name (becomes <name>.apiblaze.com)").option("--target <url>", "Target URL to forward requests to").option("--team <id|name>", "Team to create under (defaults to your active team)").option("--auth <type>", "Auth type: api_key | none | oauth", "api_key").option("--apiversion <version>", "API version to create (e.g. 2.0.0). Creating a new version of a proxy you own adds a version to the existing project.").option("--tenant <slug>", "Tenant slug (anonymous create; generated if omitted)").option("--product <slug>", "Product tag to group this project under in the portal (team-scoped; anonymous create). Defaults to your team's existing/placeholder tag.").option("--display-name <name>", "Human-friendly display name").option("--subdomain <slug>", "Explicit subdomain (defaults to --name)").option("--config <file>", "JSON file with the full request body (anonymous create): requests_auth, login providers + client/server token types, scopes, callback URLs, etc. See apiblaze_anonymous.yaml. Flags override its fields.").option("-y, --yes", "Skip the confirmation prompt").option("--json", "Output machine-readable JSON (non-interactive)").action(async (opts) => {
   try {
     await runCreate(opts);
   } catch (err) {
@@ -1582,14 +1858,14 @@ program.command("mcp").description("Design an MCP server from the spec + traffic
     process.exit(1);
   }
 });
-program.command("dev").description("Start a dev tunnel for your localhost projects").argument("[port]", "Local port to tunnel (positional; overrides --port)").option("-p, --port <number>", "Local port to tunnel", "3000").action(async (port, opts) => {
+program.command("dev").description("Start a dev tunnel for your localhost projects").argument("[port]", "Local port to tunnel (positional; overrides --port)").option("-p, --port <number>", "Local port to tunnel", "3000").option("-o, --capture-file <path>", "Stream full request/response traffic to a file (JSON lines)").action(async (port, opts) => {
   try {
     const resolved = parseInt(port ?? opts.port, 10);
     if (Number.isNaN(resolved)) {
-      console.error(import_chalk14.default.red(`Invalid port: ${port ?? opts.port}`));
+      console.error(import_chalk15.default.red(`Invalid port: ${port ?? opts.port}`));
       process.exit(1);
     }
-    await runDev({ port: resolved });
+    await runDev({ port: resolved, captureFile: opts.captureFile });
   } catch (err) {
     printError(err);
     process.exit(1);
@@ -1609,23 +1885,27 @@ Examples:
   $ npx apiblaze login
   $ npx apiblaze create --name myapi --target https://api.example.com --auth api_key
 
+  # Dev tunnel \u2014 auto-creates a proxy if none point here, and captures
+  # traffic (full headers + body, secrets masked) until your server is up:
+  $ npx apiblaze dev 3000
+  $ npx apiblaze dev 3000 --capture-file traffic.jsonl
+
   # Manage:
   $ npx apiblaze whoami
   $ npx apiblaze projects
   $ npx apiblaze team
-  $ npx apiblaze dev 3000
   $ npx apiblaze logout
 `
 );
 function printError(err) {
   if (err instanceof ApiError) {
-    console.error(import_chalk14.default.red(`
+    console.error(import_chalk15.default.red(`
 API error (${err.status}): ${err.message}`));
   } else if (err instanceof Error) {
-    console.error(import_chalk14.default.red(`
+    console.error(import_chalk15.default.red(`
 Error: ${err.message}`));
   } else {
-    console.error(import_chalk14.default.red("\nUnknown error"));
+    console.error(import_chalk15.default.red("\nUnknown error"));
   }
 }
 program.parse(process.argv);