wasper-cli 0.3.0 → 0.3.2

package/dist/cli.js

@@ -21,7 +21,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "wasper-cli",
-    version: "0.3.0",
+    version: "0.3.2",
     description: "Host an MCP server + API proxy from any OpenAPI spec. Like Drizzle Studio, but for APIs.",
     type: "module",
     homepage: "https://wasper.site",
@@ -111,25 +111,69 @@ var init_version = __esm(() => {
 // src/daemon.ts
 import { join } from "path";
 import { homedir } from "os";
-import { mkdir, readFile, writeFile, unlink } from "fs/promises";
+import { mkdir, readFile, readdir, writeFile, unlink } from "fs/promises";
 async function ensureDir() {
-  await mkdir(DIR, { recursive: true });
+  await mkdir(WASPER_DIR, { recursive: true });
+}
+function stateFile(port) {
+  return join(WASPER_DIR, `server-${port}.json`);
+}
+function logFile(port) {
+  return join(WASPER_DIR, `server-${port}.log`);
 }
 async function writeDaemonState(s) {
   await ensureDir();
-  await writeFile(STATE_FILE, JSON.stringify(s, null, 2), "utf-8");
+  await writeFile(stateFile(s.port), JSON.stringify(s, null, 2), "utf-8");
 }
-async function readDaemonState() {
+async function readAllDaemonStates() {
   try {
-    const raw = await readFile(STATE_FILE, "utf-8");
-    return JSON.parse(raw);
+    const files = await readdir(WASPER_DIR);
+    const states = [];
+    for (const f of files) {
+      if (!f.match(/^server(-\d+)?\.json$/))
+        continue;
+      const filePath = join(WASPER_DIR, f);
+      try {
+        const raw = await readFile(filePath, "utf-8");
+        const state = JSON.parse(raw);
+        if (isProcessAlive(state.pid)) {
+          states.push(state);
+        } else {
+          await unlink(filePath).catch(() => {});
+        }
+      } catch {}
+    }
+    return states.sort((a, b) => a.port - b.port);
   } catch {
-    return null;
+    return [];
+  }
+}
+async function readDaemonState(port) {
+  if (port !== undefined) {
+    try {
+      const raw = await readFile(stateFile(port), "utf-8");
+      const state = JSON.parse(raw);
+      return isProcessAlive(state.pid) ? state : null;
+    } catch {
+      return null;
+    }
   }
+  const all = await readAllDaemonStates();
+  if (all.length === 0)
+    return null;
+  if (all.length === 1)
+    return all[0];
+  return all.find((s) => s.port === DEFAULT_PORT) ?? all[0];
 }
-async function clearDaemonState() {
+async function clearDaemonState(port) {
+  try {
+    await unlink(stateFile(port));
+  } catch {}
   try {
-    await unlink(STATE_FILE);
+    const raw = await readFile(join(WASPER_DIR, "server.json"), "utf-8");
+    const state = JSON.parse(raw);
+    if (state.port === port)
+      await unlink(join(WASPER_DIR, "server.json")).catch(() => {});
   } catch {}
 }
 function isProcessAlive(pid) {
@@ -163,353 +207,830 @@ async function spawnDaemon(specUrl, port, opts = {}) {
       args.push("--readonly");
   }
   args.push("--_daemon");
-  const logDir = DIR;
   await ensureDir();
-  const logPath = join(logDir, "server.log");
   const child = Bun.spawn([process.execPath, Bun.main, ...args], {
     detached: true,
     cwd: process.cwd(),
     env: { ...process.env },
-    stdio: ["ignore", Bun.file(logPath), Bun.file(logPath)]
+    stdio: ["ignore", Bun.file(logFile(port)), Bun.file(logFile(port))]
   });
   child.unref();
   return child.pid;
 }
-var DIR, STATE_FILE;
+var WASPER_DIR, DEFAULT_PORT = 3388;
 var init_daemon = __esm(() => {
-  DIR = join(homedir(), ".wasper");
-  STATE_FILE = join(DIR, "server.json");
+  WASPER_DIR = join(homedir(), ".wasper");
 });
 
-// src/ui.ts
-class Spinner {
-  i = 0;
-  timer = null;
-  msg = "";
-  start(msg) {
-    this.msg = msg;
-    if (!isTTY) {
-      process.stdout.write(`  ${msg}
-`);
-      return;
-    }
-    this.i = 0;
-    this.timer = setInterval(() => {
-      const f = FRAMES[this.i++ % FRAMES.length];
-      process.stdout.write(`\r  ${paint.cyan(f)}  ${this.msg}\x1B[K`);
-    }, 80);
-  }
-  update(msg) {
-    this.msg = msg;
-  }
-  stop(icon = "\u2713", msg = "", color = "green") {
-    if (this.timer) {
-      clearInterval(this.timer);
-      this.timer = null;
-    }
-    if (!isTTY) {
-      if (msg)
-        process.stdout.write(`  ${icon}  ${msg}
-`);
-      return;
-    }
-    process.stdout.write(msg ? `\r  ${paint[color](icon)}  ${msg}\x1B[K
-` : `\r\x1B[K`);
-  }
-}
-function printBanner(opts) {
-  const { port, pid, specTitle, specVersion, endpointCount, origin, host, tokenSet } = opts;
-  const base = origin ?? `http://localhost:${port}`;
-  const arrow = paint.cyan("\u279C");
-  const dot = paint.dim("\xB7");
-  const hint = [
-    `${paint.bold("r")} reload`,
-    `${paint.bold("b")} background`,
-    `${paint.bold("/")} commands  ${paint.dim("(Tab to complete)")}`,
-    `${paint.bold("q")} quit`,
-    `${paint.bold("?")} help`
-  ].join(`  ${dot}  `);
-  const lines = [
-    "",
-    `  ${paint.bold("wasper")}  ${paint.dim("PID " + pid)}`,
-    "",
-    `  ${arrow}  ${paint.dim("Studio ")}  ${paint.url(base + "/")}`,
-    `  ${arrow}  ${paint.dim("MCP    ")}  ${paint.url(base + "/mcp")}`,
-    `  ${arrow}  ${paint.dim("OpenAPI")}  ${paint.url(base + "/openapi.json")}`,
-    ""
-  ];
-  if (origin) {
-    lines.push(`  ${arrow}  ${paint.dim("Local  ")}  ${paint.url(`http://localhost:${port}/`)}${host && host !== "0.0.0.0" ? `  ${dot}  ${paint.dim("bound to " + host)}` : ""}`, "");
-  }
-  if (specTitle) {
-    const ep = endpointCount != null ? `  ${dot}  ${paint.green(endpointCount + " endpoints")}` : "";
-    lines.push(`  ${paint.green("\u2713")}  ${paint.bold(specTitle)}  ${paint.dim("v" + (specVersion ?? ""))}${ep}`);
-  } else {
-    lines.push(`  ${paint.yellow("\u25CB")}  ${paint.dim("No spec \u2014 start with --url <url>")}`);
-  }
-  if (tokenSet) {
-    lines.push(`  ${paint.green("\u2713")}  ${paint.dim("Access token required (Authorization: Bearer \u2026 or ?token=)")}`);
-  } else if (origin) {
-    lines.push(`  ${paint.yellow("!")}  ${paint.yellow("Publicly reachable without a token \u2014 consider --token <secret>")}`);
+// src/db/schema.ts
+var SCHEMA = `
+  CREATE TABLE IF NOT EXISTS auth_config (
+    id TEXT PRIMARY KEY DEFAULT 'default',
+    type TEXT NOT NULL DEFAULT 'none',
+    config TEXT NOT NULL DEFAULT '{}',
+    token_cache TEXT,
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+
+  CREATE TABLE IF NOT EXISTS request_logs (
+    id TEXT PRIMARY KEY,
+    source TEXT NOT NULL DEFAULT 'mcp',
+    tool_name TEXT,
+    method TEXT NOT NULL,
+    url TEXT NOT NULL,
+    request_headers TEXT,
+    request_body TEXT,
+    status_code INTEGER,
+    response_headers TEXT,
+    response_body TEXT,
+    latency_ms INTEGER,
+    error TEXT,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_logs_created ON request_logs(created_at DESC);
+
+  CREATE TABLE IF NOT EXISTS settings (
+    key TEXT PRIMARY KEY,
+    value TEXT NOT NULL DEFAULT '{}'
+  );
+
+  CREATE TABLE IF NOT EXISTS intercept_rules (
+    id TEXT PRIMARY KEY,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    name TEXT NOT NULL DEFAULT '',
+    sort_order INTEGER NOT NULL DEFAULT 0,
+    match_path TEXT NOT NULL DEFAULT '',
+    match_method TEXT NOT NULL DEFAULT '',
+    target_host TEXT NOT NULL DEFAULT '',
+    strip_prefix TEXT NOT NULL DEFAULT '',
+    add_prefix TEXT NOT NULL DEFAULT '',
+    add_headers TEXT NOT NULL DEFAULT '{}',
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_rules_order ON intercept_rules(sort_order, created_at);
+
+  CREATE TABLE IF NOT EXISTS auth_profiles (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    description TEXT NOT NULL DEFAULT '',
+    type TEXT NOT NULL DEFAULT 'none',
+    config TEXT NOT NULL DEFAULT '{}',
+    token_cache TEXT,
+    is_active INTEGER NOT NULL DEFAULT 0,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+
+  CREATE TABLE IF NOT EXISTS saved_requests (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL DEFAULT 'Untitled',
+    folder TEXT NOT NULL DEFAULT '',
+    method TEXT NOT NULL DEFAULT 'GET',
+    url TEXT NOT NULL DEFAULT '',
+    headers TEXT NOT NULL DEFAULT '[]',
+    params TEXT NOT NULL DEFAULT '[]',
+    body TEXT NOT NULL DEFAULT '',
+    body_type TEXT NOT NULL DEFAULT 'none',
+    raw_type TEXT NOT NULL DEFAULT 'text/plain',
+    form_rows TEXT NOT NULL DEFAULT '[]',
+    auth TEXT NOT NULL DEFAULT '{}',
+    notes TEXT NOT NULL DEFAULT '',
+    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_saved_folder ON saved_requests(folder, created_at DESC);
+
+  CREATE TABLE IF NOT EXISTS spec_history (
+    id TEXT PRIMARY KEY,
+    url TEXT NOT NULL UNIQUE,
+    title TEXT,
+    version TEXT,
+    endpoint_count INTEGER,
+    last_used INTEGER NOT NULL DEFAULT (unixepoch()),
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_spec_history_last_used ON spec_history(last_used DESC);
+
+  CREATE TABLE IF NOT EXISTS workflows (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL DEFAULT 'Untitled Workflow',
+    description TEXT NOT NULL DEFAULT '',
+    steps TEXT NOT NULL DEFAULT '[]',
+    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_workflows_updated ON workflows(updated_at DESC);
+
+  CREATE TABLE IF NOT EXISTS capture_bins (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL DEFAULT '',
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+
+  CREATE TABLE IF NOT EXISTS chat_memory (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    role TEXT NOT NULL,
+    content TEXT NOT NULL,
+    created_at INTEGER NOT NULL DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_memory_created ON chat_memory(created_at DESC);
+`;
+
+// src/db/index.ts
+import { Database } from "bun:sqlite";
+import { join as join2 } from "path";
+import { mkdirSync, existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { randomUUID } from "crypto";
+function resolveDataDir() {
+  if (process.env.WASPER_DATA_DIR ?? process.env.OPENAPI_AGENT_DATA_DIR) {
+    return process.env.WASPER_DATA_DIR ?? process.env.OPENAPI_AGENT_DATA_DIR;
   }
-  lines.push("", `  ${hint}`, "");
-  console.log(lines.join(`
-`));
-}
-function fmtUptime(ms) {
-  const s = Math.floor(ms / 1000);
-  const m = Math.floor(s / 60);
-  const h = Math.floor(m / 60);
-  if (h > 0)
-    return `${h}h ${m % 60}m`;
-  if (m > 0)
-    return `${m}m ${s % 60}s`;
-  return `${s}s`;
+  try {
+    const legacy = join2(import.meta.dir, "../../data");
+    if (!Bun.main.includes("$bunfs") && (existsSync(join2(legacy, "wasper.db")) || existsSync(join2(legacy, "openapi-agent.db"))))
+      return legacy;
+  } catch {}
+  const oldDir = join2(homedir2(), ".openapi-agent", "data");
+  if (existsSync(oldDir))
+    return oldDir;
+  return join2(homedir2(), ".wasper", "data");
 }
-function printStatus(opts) {
-  const { running, pid, port, uptime, specTitle, specVersion, endpointCount, origin } = opts;
-  if (!running) {
-    console.log(`
-  ${paint.dim("\u25CB")}  ${paint.bold("OpenAPI Agent")}  ${paint.dim("\xB7")}  ${paint.yellow("not running")}
-`);
-    return;
+var DATA_DIR, DB_PATH, db, hasOldSchema, dbQueries;
+var init_db = __esm(() => {
+  DATA_DIR = resolveDataDir();
+  mkdirSync(DATA_DIR, { recursive: true });
+  DB_PATH = join2(DATA_DIR, existsSync(join2(DATA_DIR, "openapi-agent.db")) && !existsSync(join2(DATA_DIR, "wasper.db")) ? "openapi-agent.db" : "wasper.db");
+  db = new Database(DB_PATH, { create: true });
+  db.exec("PRAGMA journal_mode = WAL;");
+  db.exec("PRAGMA foreign_keys = OFF;");
+  hasOldSchema = db.query("SELECT name FROM sqlite_master WHERE type='table' AND name='specs'").get() !== null;
+  if (hasOldSchema) {
+    db.exec("DROP TABLE IF EXISTS tools; DROP TABLE IF EXISTS specs; DROP TABLE IF EXISTS auth_configs; DROP TABLE IF EXISTS request_logs;");
   }
-  const rows = [
-    ["pid     ", String(pid)],
-    ["port    ", String(port)],
-    ["uptime  ", uptime != null ? fmtUptime(uptime) : "\u2014"],
-    ["spec    ", specTitle ? `${specTitle} ${paint.dim("v" + (specVersion ?? ""))}` : "\u2014"],
-    ["endpoints", String(endpointCount ?? "\u2014")]
-  ];
-  const maxKey = Math.max(...rows.map(([k]) => k.length));
-  console.log(`
-  ${paint.green("\u25CF")}  ${paint.bold("OpenAPI Agent")}  ${paint.dim("\xB7")}  ${paint.green("running")}`);
-  console.log();
-  for (const [k, v] of rows) {
-    console.log(`     ${paint.dim(k.padEnd(maxKey))}  ${v}`);
-  }
-  if (port) {
-    const base = origin ?? `http://localhost:${port}`;
-    console.log();
-    console.log(`     ${paint.url(`${base}/`)}  ${paint.dim("\xB7")}  ${paint.url(`${base}/mcp`)}`);
-  }
-  console.log();
-}
-var isTTY, esc = (s) => isTTY ? s : "", clr, paint, FRAMES;
-var init_ui = __esm(() => {
-  isTTY = process.stdout.isTTY ?? false;
-  clr = {
-    reset: esc("\x1B[0m"),
-    bold: esc("\x1B[1m"),
-    dim: esc("\x1B[2m"),
-    green: esc("\x1B[32m"),
-    cyan: esc("\x1B[36m"),
-    yellow: esc("\x1B[33m"),
-    red: esc("\x1B[31m"),
-    gray: esc("\x1B[90m")
-  };
-  paint = {
-    green: (s) => `${clr.green}${s}${clr.reset}`,
-    cyan: (s) => `${clr.cyan}${s}${clr.reset}`,
-    yellow: (s) => `${clr.yellow}${s}${clr.reset}`,
-    red: (s) => `${clr.red}${s}${clr.reset}`,
-    gray: (s) => `${clr.gray}${s}${clr.reset}`,
-    dim: (s) => `${clr.dim}${s}${clr.reset}`,
-    bold: (s) => `${clr.bold}${s}${clr.reset}`,
-    url: (s) => `${clr.cyan}${s}${clr.reset}`
+  db.exec(SCHEMA);
+  dbQueries = {
+    getAuthConfig: () => db.query("SELECT * FROM auth_config WHERE id = 'default'").get(),
+    setAuthConfig: (type, config) => db.query(`INSERT INTO auth_config (id, type, config, updated_at)
+              VALUES ('default', ?, ?, unixepoch())
+              ON CONFLICT(id) DO UPDATE SET type = excluded.type, config = excluded.config, updated_at = unixepoch()`).run(type, JSON.stringify(config)),
+    updateTokenCache: (tokenCache) => db.query("UPDATE auth_config SET token_cache = ? WHERE id = 'default'").run(tokenCache ? JSON.stringify(tokenCache) : null),
+    getRecentLogs: (limit = 500) => db.query("SELECT * FROM request_logs ORDER BY created_at DESC LIMIT ?").all(limit),
+    insertLog: (data) => db.query(`INSERT INTO request_logs
+              (id, source, tool_name, method, url, request_headers, request_body,
+               status_code, response_headers, response_body, latency_ms, error)
+              VALUES ($id, $source, $tool_name, $method, $url, $request_headers, $request_body,
+               $status_code, $response_headers, $response_body, $latency_ms, $error)`).run({
+      $id: data.id,
+      $source: data.source,
+      $tool_name: data.tool_name,
+      $method: data.method,
+      $url: data.url,
+      $request_headers: data.request_headers,
+      $request_body: data.request_body,
+      $status_code: data.status_code,
+      $response_headers: data.response_headers,
+      $response_body: data.response_body,
+      $latency_ms: data.latency_ms,
+      $error: data.error
+    }),
+    clearLogs: () => db.query("DELETE FROM request_logs").run(),
+    getRules: () => db.query("SELECT * FROM intercept_rules ORDER BY sort_order, created_at").all(),
+    insertRule: (rule) => db.query(`INSERT INTO intercept_rules (id,enabled,name,sort_order,match_path,match_method,target_host,strip_prefix,add_prefix,add_headers)
+      VALUES ($id,$enabled,$name,$sort_order,$match_path,$match_method,$target_host,$strip_prefix,$add_prefix,$add_headers)`).run({
+      $id: rule.id,
+      $enabled: rule.enabled,
+      $name: rule.name,
+      $sort_order: rule.sort_order,
+      $match_path: rule.match_path,
+      $match_method: rule.match_method,
+      $target_host: rule.target_host,
+      $strip_prefix: rule.strip_prefix,
+      $add_prefix: rule.add_prefix,
+      $add_headers: rule.add_headers
+    }),
+    updateRule: (id, patch) => {
+      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
+      const params = { $id: id };
+      for (const [k, v] of Object.entries(patch))
+        params[`$${k}`] = v;
+      db.query(`UPDATE intercept_rules SET ${cols} WHERE id = $id`).run(params);
+    },
+    deleteRule: (id) => db.query("DELETE FROM intercept_rules WHERE id = ?").run(id),
+    getSettings: () => db.query("SELECT value FROM settings WHERE key='app' LIMIT 1").get() ?? null,
+    setSettings: (value) => {
+      db.run("INSERT INTO settings(key,value) VALUES('app',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value", [JSON.stringify(value)]);
+    },
+    getProfiles: () => db.query("SELECT * FROM auth_profiles ORDER BY name COLLATE NOCASE").all(),
+    getActiveProfile: () => db.query("SELECT * FROM auth_profiles WHERE is_active = 1 LIMIT 1").get(),
+    insertProfile: (p) => db.query(`INSERT INTO auth_profiles (id,name,description,type,config,token_cache,is_active)
+      VALUES ($id,$name,$description,$type,$config,$token_cache,$is_active)`).run({
+      $id: p.id,
+      $name: p.name,
+      $description: p.description,
+      $type: p.type,
+      $config: p.config,
+      $token_cache: p.token_cache,
+      $is_active: p.is_active
+    }),
+    updateProfile: (id, patch) => {
+      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
+      const params = { $id: id };
+      for (const [k, v] of Object.entries(patch))
+        params[`$${k}`] = v;
+      db.query(`UPDATE auth_profiles SET ${cols} WHERE id = $id`).run(params);
+    },
+    deleteProfile: (id) => db.query("DELETE FROM auth_profiles WHERE id = ?").run(id),
+    activateProfile: (id) => {
+      const profile = db.query("SELECT * FROM auth_profiles WHERE id = ?").get(id);
+      if (!profile)
+        return;
+      db.query("UPDATE auth_profiles SET is_active = 0").run();
+      db.query("UPDATE auth_profiles SET is_active = 1 WHERE id = ?").run(id);
+      db.query(`INSERT INTO auth_config (id, type, config, updated_at) VALUES ('default', $type, $config, unixepoch())
+      ON CONFLICT(id) DO UPDATE SET type=excluded.type, config=excluded.config, updated_at=unixepoch()`).run({ $type: profile.type, $config: profile.config });
+    },
+    getSavedRequests: () => db.query("SELECT * FROM saved_requests ORDER BY folder, name COLLATE NOCASE").all(),
+    getSavedRequest: (id) => db.query("SELECT * FROM saved_requests WHERE id = ?").get(id),
+    insertSavedRequest: (r) => db.query(`INSERT INTO saved_requests
+      (id, name, folder, method, url, headers, params, body, body_type, raw_type, form_rows, auth, notes)
+      VALUES ($id,$name,$folder,$method,$url,$headers,$params,$body,$body_type,$raw_type,$form_rows,$auth,$notes)`).run({
+      $id: r.id,
+      $name: r.name,
+      $folder: r.folder,
+      $method: r.method,
+      $url: r.url,
+      $headers: r.headers,
+      $params: r.params,
+      $body: r.body,
+      $body_type: r.body_type,
+      $raw_type: r.raw_type,
+      $form_rows: r.form_rows,
+      $auth: r.auth,
+      $notes: r.notes
+    }),
+    updateSavedRequest: (id, patch) => {
+      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
+      const params = { $id: id };
+      for (const [k, v] of Object.entries(patch))
+        params[`$${k}`] = v;
+      db.query(`UPDATE saved_requests SET ${cols}, updated_at = unixepoch() WHERE id = $id`).run(params);
+    },
+    deleteSavedRequest: (id) => db.query("DELETE FROM saved_requests WHERE id = ?").run(id),
+    getSpecHistory: () => db.query("SELECT * FROM spec_history ORDER BY last_used DESC").all(),
+    getLastSpec: () => db.query("SELECT * FROM spec_history ORDER BY last_used DESC LIMIT 1").get(),
+    upsertSpec: (url, title, version, endpointCount) => {
+      const existing = db.query("SELECT id FROM spec_history WHERE url = ?").get(url);
+      if (existing) {
+        db.query("UPDATE spec_history SET title=?, version=?, endpoint_count=?, last_used=unixepoch() WHERE url=?").run(title, version, endpointCount, url);
+      } else {
+        db.query(`INSERT INTO spec_history (id, url, title, version, endpoint_count)
+        VALUES (?, ?, ?, ?, ?)`).run(randomUUID(), url, title, version, endpointCount);
+      }
+    },
+    deleteSpec: (id) => {
+      db.query("DELETE FROM spec_history WHERE id = ?").run(id);
+    },
+    getWorkflows: () => db.query("SELECT * FROM workflows ORDER BY updated_at DESC").all(),
+    getWorkflow: (id) => db.query("SELECT * FROM workflows WHERE id = ?").get(id),
+    insertWorkflow: (w) => db.query("INSERT INTO workflows (id, name, description, steps) VALUES ($id, $name, $description, $steps)").run({ $id: w.id, $name: w.name, $description: w.description, $steps: w.steps }),
+    updateWorkflow: (id, patch) => {
+      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
+      const params = { $id: id };
+      for (const [k, v] of Object.entries(patch))
+        params[`$${k}`] = v;
+      db.query(`UPDATE workflows SET ${cols}, updated_at = unixepoch() WHERE id = $id`).run(params);
+    },
+    deleteWorkflow: (id) => db.query("DELETE FROM workflows WHERE id = ?").run(id),
+    getCaptureBins: () => db.query("SELECT * FROM capture_bins ORDER BY created_at DESC").all(),
+    getCaptureBin: (id) => db.query("SELECT * FROM capture_bins WHERE id = ?").get(id),
+    insertCaptureBin: (id, name) => {
+      db.query("INSERT INTO capture_bins (id, name) VALUES (?, ?)").run(id, name);
+    },
+    deleteCaptureBin: (id) => {
+      db.query("DELETE FROM capture_bins WHERE id = ?").run(id);
+    },
+    getSetting: (key) => (db.query("SELECT value FROM settings WHERE key = ?").get(key) ?? null)?.value ?? null,
+    setSetting: (key, value) => {
+      db.run("INSERT INTO settings(key,value) VALUES(?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value", [key, value]);
+    },
+    saveMemory: (role, content) => {
+      db.query("INSERT INTO chat_memory (role, content) VALUES (?, ?)").run(role, content);
+    },
+    getMemory: (limit = 20) => {
+      const rows = db.query("SELECT role, content FROM chat_memory ORDER BY created_at DESC LIMIT ?").all(limit);
+      return rows.reverse();
+    },
+    clearMemory: () => {
+      db.query("DELETE FROM chat_memory").run();
+    },
+    trimMemory: (keepLast = 40) => {
+      db.query("DELETE FROM chat_memory WHERE id NOT IN (SELECT id FROM chat_memory ORDER BY created_at DESC LIMIT ?)").run(keepLast);
+    }
   };
-  FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 });
 
-// src/commands/stop.ts
-var exports_stop = {};
-__export(exports_stop, {
-  run: () => run
-});
-async function run() {
-  const state = await readDaemonState();
-  if (!state) {
-    console.log(`
-  ${paint.dim("\u25CB")}  ${paint.bold("OpenAPI Agent")}  \xB7  ${paint.yellow("No running instance found")}
-`);
-    process.exit(1);
-  }
-  if (!isProcessAlive(state.pid)) {
-    await clearDaemonState();
-    console.log(`
-  ${paint.dim("\u25CB")}  Process ${state.pid} is no longer running. Cleaned up state.
-`);
-    process.exit(0);
-  }
+// src/config.ts
+function setServerConfig(c) {
+  config = c;
+}
+function getServerConfig() {
+  return config;
+}
+function updateServerConfig(patch) {
+  config = { ...config, ...patch };
+}
+function getFeatures() {
+  return features;
+}
+function setFeatures(patch) {
+  features = { ...features, ...patch };
+}
+function readonlyViolation(method) {
+  if (!features.readonly)
+    return null;
+  if (SAFE_METHODS.has(method.toUpperCase()))
+    return null;
+  return `Read-only mode is enabled \u2014 ${method.toUpperCase()} requests are blocked. Ask the operator to run /readonly off.`;
+}
+function isAuthorized(req) {
+  if (!config.token)
+    return true;
+  const auth = req.headers.get("authorization");
+  if (auth === `Bearer ${config.token}`)
+    return true;
   try {
-    process.kill(state.pid, "SIGTERM");
+    return new URL(req.url).searchParams.get("token") === config.token;
   } catch {
-    console.log(`
-  ${paint.red("\u2717")}  Failed to stop process ${state.pid}
-`);
-    process.exit(1);
-  }
-  for (let i = 0;i < 30; i++) {
-    await Bun.sleep(100);
-    if (!isProcessAlive(state.pid))
-      break;
+    return false;
   }
-  await clearDaemonState();
-  console.log(`
-  ${paint.green("\u2713")}  ${paint.bold("Stopped OpenAPI Agent")}  ${paint.dim(`(was PID ${state.pid})`)}
-`);
 }
-var init_stop = __esm(() => {
-  init_daemon();
-  init_ui();
+var config, features, SAFE_METHODS;
+var init_config = __esm(() => {
+  config = {
+    port: 3388,
+    host: "0.0.0.0",
+    origin: null,
+    token: null
+  };
+  features = { mcp: true, proxy: true, ai: true, readonly: false };
+  SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
 });
 
-// src/commands/update.ts
-var exports_update = {};
-__export(exports_update, {
-  run: () => run2,
-  printUpdateNotice: () => printUpdateNotice,
-  performUpdate: () => performUpdate,
-  fetchLatestVersion: () => fetchLatestVersion,
-  checkForUpdate: () => checkForUpdate
-});
-import { join as join2 } from "path";
-import { homedir as homedir2 } from "os";
-import { chmod, rename, unlink as unlink2, mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-async function fetchLatestVersion() {
-  try {
-    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
-      signal: AbortSignal.timeout(5000),
-      headers: { Accept: "application/json" }
-    });
-    if (!res.ok)
-      return null;
-    const data = await res.json();
-    return data.version ?? null;
-  } catch {
-    return null;
-  }
-}
-async function checkForUpdate() {
-  if (process.env.WASPER_NO_UPDATE_CHECK)
-    return null;
-  let state = null;
-  try {
-    state = JSON.parse(await readFile2(CHECK_FILE, "utf-8"));
-  } catch {}
-  let latest = state?.latest ?? null;
-  if (!state || Date.now() - state.lastCheck > CHECK_INTERVAL) {
-    latest = await fetchLatestVersion();
-    if (latest) {
-      await mkdir2(join2(homedir2(), ".wasper"), { recursive: true }).catch(() => {});
-      await writeFile2(CHECK_FILE, JSON.stringify({ lastCheck: Date.now(), latest }), "utf-8").catch(() => {});
+// src/ui.ts
+class Spinner {
+  i = 0;
+  timer = null;
+  msg = "";
+  start(msg) {
+    this.msg = msg;
+    if (!isTTY) {
+      process.stdout.write(`  ${msg}
+`);
+      return;
     }
+    this.i = 0;
+    this.timer = setInterval(() => {
+      const f = FRAMES[this.i++ % FRAMES.length];
+      process.stdout.write(`\r  ${paint.cyan(f)}  ${this.msg}\x1B[K`);
+    }, 80);
   }
-  if (latest && compareSemver(latest, VERSION) > 0)
-    return latest;
-  return null;
-}
-function printUpdateNotice(latest) {
-  console.log(`  ${paint.yellow("\u25B2")}  Update available ${paint.dim(VERSION)} \u2192 ${paint.green(latest)}  ${paint.dim("\xB7")}  run ${paint.bold("wasper update")}
-`);
-}
-function binaryAssetName() {
-  const os = process.platform === "darwin" ? "darwin" : process.platform === "win32" ? "windows" : "linux";
-  const arch = process.arch === "arm64" ? "arm64" : "x64";
-  return `wasper-${os}-${arch}${os === "windows" ? ".exe" : ""}`;
-}
-async function updateCompiledBinary(latest) {
-  const exe = process.execPath;
-  const asset = binaryAssetName();
-  const url = `https://github.com/${REPO}/releases/download/v${latest}/${asset}`;
-  const res = await fetch(url, { redirect: "follow" });
-  if (!res.ok)
-    throw new Error(`Download failed (HTTP ${res.status}) \u2014 ${url}`);
-  const bytes = new Uint8Array(await res.arrayBuffer());
-  if (bytes.byteLength < 1024 * 100)
-    throw new Error("Downloaded file is suspiciously small \u2014 aborting");
-  const tmp = `${exe}.update`;
-  const old = `${exe}.old`;
-  await Bun.write(tmp, bytes);
-  await chmod(tmp, 493);
-  await rename(exe, old);
-  try {
-    await rename(tmp, exe);
-  } catch (e) {
-    await rename(old, exe).catch(() => {});
-    throw e;
+  update(msg) {
+    this.msg = msg;
   }
-  await unlink2(old).catch(() => {});
-}
-async function updatePackageInstall() {
-  const tryRun = async (cmd) => {
-    try {
-      const p = Bun.spawn(cmd, { stdout: "pipe", stderr: "pipe" });
-      const code = await p.exited;
-      return code === 0;
-    } catch {
-      return false;
+  stop(icon = "\u2713", msg = "", color = "green") {
+    if (this.timer) {
+      clearInterval(this.timer);
+      this.timer = null;
     }
-  };
-  if (await tryRun(["bun", "add", "-g", `${PACKAGE_NAME}@latest`]))
-    return;
-  if (await tryRun(["npm", "install", "-g", `${PACKAGE_NAME}@latest`]))
-    return;
-  throw new Error("Neither `bun add -g` nor `npm install -g` succeeded. Update manually.");
+    if (!isTTY) {
+      if (msg)
+        process.stdout.write(`  ${icon}  ${msg}
+`);
+      return;
+    }
+    process.stdout.write(msg ? `\r  ${paint[color](icon)}  ${msg}\x1B[K
+` : `\r\x1B[K`);
+  }
 }
-async function performUpdate(opts = {}) {
-  const spinner = new Spinner;
-  if (!opts.quiet)
-    spinner.start("Checking for updates\u2026");
-  const latest = await fetchLatestVersion();
-  if (!latest) {
-    spinner.stop("\u2717", "Could not reach the npm registry", "red");
-    return false;
+function printBanner(opts) {
+  const { port, pid, specTitle, specVersion, endpointCount, origin, host, tokenSet } = opts;
+  const base = origin ?? `http://localhost:${port}`;
+  const arrow = paint.cyan("\u279C");
+  const dot = paint.dim("\xB7");
+  const hint = [
+    `${paint.bold("r")} reload`,
+    `${paint.bold("b")} background`,
+    `${paint.bold("/")} commands  ${paint.dim("(Tab to complete)")}`,
+    `${paint.bold("q")} quit`,
+    `${paint.bold("?")} help`
+  ].join(`  ${dot}  `);
+  const lines = [
+    "",
+    `  ${paint.bold("wasper")}  ${paint.dim("PID " + pid)}`,
+    "",
+    `  ${arrow}  ${paint.dim("Studio ")}  ${paint.url(base + "/")}`,
+    `  ${arrow}  ${paint.dim("MCP    ")}  ${paint.url(base + "/mcp")}`,
+    `  ${arrow}  ${paint.dim("OpenAPI")}  ${paint.url(base + "/openapi.json")}`,
+    ""
+  ];
+  if (origin) {
+    lines.push(`  ${arrow}  ${paint.dim("Local  ")}  ${paint.url(`http://localhost:${port}/`)}${host && host !== "0.0.0.0" ? `  ${dot}  ${paint.dim("bound to " + host)}` : ""}`, "");
   }
-  if (compareSemver(latest, VERSION) <= 0) {
-    spinner.stop("\u2713", `Already up to date  ${paint.dim("v" + VERSION)}`, "green");
-    return false;
+  if (specTitle) {
+    const ep = endpointCount != null ? `  ${dot}  ${paint.green(endpointCount + " endpoints")}` : "";
+    lines.push(`  ${paint.green("\u2713")}  ${paint.bold(specTitle)}  ${paint.dim("v" + (specVersion ?? ""))}${ep}`);
+  } else {
+    lines.push(`  ${paint.yellow("\u25CB")}  ${paint.dim("No spec \u2014 start with --url <url>")}`);
   }
-  spinner.stop();
-  if (!opts.quiet)
-    spinner.start(`Updating ${paint.dim(VERSION)} \u2192 ${paint.green(latest)}\u2026`);
-  try {
-    if (isCompiledBinary())
-      await updateCompiledBinary(latest);
-    else
-      await updatePackageInstall();
-    spinner.stop("\u2713", `Updated to ${paint.bold("v" + latest)}  ${paint.dim("\u2014 restart any running servers to use it")}`, "green");
-    await writeFile2(CHECK_FILE, JSON.stringify({ lastCheck: Date.now(), latest }), "utf-8").catch(() => {});
-    return true;
-  } catch (e) {
-    spinner.stop("\u2717", `Update failed: ${e instanceof Error ? e.message : String(e)}`, "red");
-    return false;
+  if (tokenSet) {
+    lines.push(`  ${paint.green("\u2713")}  ${paint.dim("Access token required (Authorization: Bearer \u2026 or ?token=)")}`);
+  } else if (origin) {
+    lines.push(`  ${paint.yellow("!")}  ${paint.yellow("Publicly reachable without a token \u2014 consider --token <secret>")}`);
   }
+  lines.push("", `  ${hint}`, "");
+  console.log(lines.join(`
+`));
 }
-async function run2() {
+function fmtUptime(ms) {
+  const s = Math.floor(ms / 1000);
+  const m = Math.floor(s / 60);
+  const h = Math.floor(m / 60);
+  if (h > 0)
+    return `${h}h ${m % 60}m`;
+  if (m > 0)
+    return `${m}m ${s % 60}s`;
+  return `${s}s`;
+}
+function printStatus(opts) {
+  const { running, pid, port, uptime, specTitle, specVersion, endpointCount, origin } = opts;
+  if (!running) {
+    console.log(`
+  ${paint.dim("\u25CB")}  ${paint.bold("OpenAPI Agent")}  ${paint.dim("\xB7")}  ${paint.yellow("not running")}
+`);
+    return;
+  }
+  const rows = [
+    ["pid     ", String(pid)],
+    ["port    ", String(port)],
+    ["uptime  ", uptime != null ? fmtUptime(uptime) : "\u2014"],
+    ["spec    ", specTitle ? `${specTitle} ${paint.dim("v" + (specVersion ?? ""))}` : "\u2014"],
+    ["endpoints", String(endpointCount ?? "\u2014")]
+  ];
+  const maxKey = Math.max(...rows.map(([k]) => k.length));
+  console.log(`
+  ${paint.green("\u25CF")}  ${paint.bold("OpenAPI Agent")}  ${paint.dim("\xB7")}  ${paint.green("running")}`);
   console.log();
-  await performUpdate();
+  for (const [k, v] of rows) {
+    console.log(`     ${paint.dim(k.padEnd(maxKey))}  ${v}`);
+  }
+  if (port) {
+    const base = origin ?? `http://localhost:${port}`;
+    console.log();
+    console.log(`     ${paint.url(`${base}/`)}  ${paint.dim("\xB7")}  ${paint.url(`${base}/mcp`)}`);
+  }
   console.log();
 }
-var CHECK_FILE, CHECK_INTERVAL;
-var init_update = __esm(() => {
-  init_version();
-  init_ui();
-  CHECK_FILE = join2(homedir2(), ".wasper", "update-check.json");
-  CHECK_INTERVAL = 24 * 60 * 60 * 1000;
+var isTTY, esc = (s) => isTTY ? s : "", clr, paint, FRAMES;
+var init_ui = __esm(() => {
+  isTTY = process.stdout.isTTY ?? false;
+  clr = {
+    reset: esc("\x1B[0m"),
+    bold: esc("\x1B[1m"),
+    dim: esc("\x1B[2m"),
+    green: esc("\x1B[32m"),
+    cyan: esc("\x1B[36m"),
+    yellow: esc("\x1B[33m"),
+    red: esc("\x1B[31m"),
+    gray: esc("\x1B[90m")
+  };
+  paint = {
+    green: (s) => `${clr.green}${s}${clr.reset}`,
+    cyan: (s) => `${clr.cyan}${s}${clr.reset}`,
+    yellow: (s) => `${clr.yellow}${s}${clr.reset}`,
+    red: (s) => `${clr.red}${s}${clr.reset}`,
+    gray: (s) => `${clr.gray}${s}${clr.reset}`,
+    dim: (s) => `${clr.dim}${s}${clr.reset}`,
+    bold: (s) => `${clr.bold}${s}${clr.reset}`,
+    url: (s) => `${clr.cyan}${s}${clr.reset}`
+  };
+  FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 });
 
-// src/commands/status.ts
-var exports_status = {};
-__export(exports_status, {
-  run: () => run3
+// src/commands/up.ts
+var exports_up = {};
+__export(exports_up, {
+  run: () => run
 });
-async function run3() {
-  const state = await readDaemonState();
-  if (!state || !isProcessAlive(state.pid)) {
+import { parseArgs } from "util";
+async function run() {
+  const { values } = parseArgs({
+    args: process.argv.slice(2).filter((a) => a !== "up"),
+    options: {
+      url: { type: "string" },
+      port: { type: "string", default: process.env.WASPER_PORT ?? "3388" },
+      host: { type: "string" },
+      origin: { type: "string" },
+      token: { type: "string" },
+      "no-mcp": { type: "boolean" },
+      "no-proxy": { type: "boolean" },
+      "no-ai": { type: "boolean" },
+      readonly: { type: "boolean" },
+      force: { type: "boolean", short: "f" },
+      help: { type: "boolean", short: "h" }
+    },
+    strict: false
+  });
+  if (values.help) {
+    printHelp();
+    process.exit(0);
+  }
+  let specUrl = values.url ? String(values.url) : null;
+  specUrl ??= process.env.WASPER_SPEC_URL ?? null;
+  const PORT = parseInt(String(values.port ?? "3388"), 10);
+  const HOST = (values.host ? String(values.host) : null) ?? process.env.WASPER_HOST ?? "0.0.0.0";
+  const ORIGIN = ((values.origin ? String(values.origin) : null) ?? process.env.WASPER_ORIGIN ?? null)?.replace(/\/$/, "") ?? null;
+  const TOKEN = (values.token ? String(values.token) : null) ?? process.env.WASPER_TOKEN ?? null;
+  if (!specUrl) {
+    const last = dbQueries.getLastSpec();
+    if (last)
+      specUrl = last.url;
+  }
+  const existing = await readDaemonState(PORT);
+  if (existing && isProcessAlive(existing.pid) && !values.force) {
+    const base2 = existing.origin ?? `http://localhost:${existing.port}`;
+    console.log(`
+  ${paint.yellow("\u25CF")}  Already running on :${PORT}  ${paint.dim(`PID ${existing.pid}`)}`);
+    console.log(`  ${paint.dim("\u279C")}  ${paint.cyan(base2 + "/")}`);
+    console.log(`
+  ${paint.dim("wasper ps  \xB7  wasper down --port " + PORT + "  \xB7  wasper up --port " + PORT + " --force")}
+`);
+    process.exit(0);
+  }
+  setServerConfig({ port: PORT, host: HOST, origin: ORIGIN, token: TOKEN });
+  setFeatures({
+    ...values["no-mcp"] ? { mcp: false } : {},
+    ...values["no-proxy"] ? { proxy: false } : {},
+    ...values["no-ai"] ? { ai: false } : {},
+    readonly: !!values.readonly
+  });
+  if (existing && isProcessAlive(existing.pid)) {
+    try {
+      process.kill(existing.pid, "SIGTERM");
+    } catch {}
+    await Bun.sleep(400);
+  }
+  const pid = await spawnDaemon(specUrl, PORT, {
+    host: HOST,
+    origin: ORIGIN,
+    token: TOKEN,
+    features: getFeatures()
+  });
+  await Bun.sleep(600);
+  await writeDaemonState({ pid, port: PORT, specUrl, startedAt: Date.now(), host: HOST, origin: ORIGIN, token: TOKEN });
+  const base = ORIGIN ?? `http://localhost:${PORT}`;
+  console.log(`
+  ${paint.green("\u2713")}  Started on :${PORT}  ${paint.dim(`PID ${pid}`)}`);
+  if (specUrl)
+    console.log(`  ${paint.dim("\u21A9")}  ${specUrl}`);
+  console.log(`  ${paint.dim("\u279C")}  ${paint.cyan(base + "/")}`);
+  console.log(`     MCP ${paint.dim(base + "/mcp")}`);
+  console.log(`
+  ${paint.dim("wasper ps  \xB7  wasper down  \xB7  wasper logs -f" + (PORT !== 3388 ? " --port " + PORT : ""))}
+`);
+  process.exit(0);
+}
+function printHelp() {
+  console.log(`
+Usage: wasper up [options]
+
+  Start the wasper daemon in the background.
+  Run multiple instances with different --port values.
+
+Options:
+  --url, -u        OpenAPI spec URL or local path
+  --port           Port (default: 3388, env WASPER_PORT)
+  --host           Bind address (default: 0.0.0.0)
+  --origin         Public URL (env WASPER_ORIGIN)
+  --token          Access token (env WASPER_TOKEN)
+  --no-mcp         Disable the MCP endpoint
+  --no-proxy       Disable the HTTP proxy
+  --no-ai          Disable the AI chat endpoint
+  --readonly       Block non-GET upstream requests
+  --force, -f      Restart if already running on that port
+
+Examples:
+  wasper up --url https://api.example.com/openapi.json
+  wasper up --url https://api2.example.com/openapi.json --port 3389
+  wasper ps                  # list all running instances
+`);
+}
+var init_up = __esm(() => {
+  init_daemon();
+  init_db();
+  init_config();
+  init_ui();
+});
+
+// src/commands/ps.ts
+var exports_ps = {};
+__export(exports_ps, {
+  run: () => run2
+});
+function uptime(startedAt) {
+  const secs = Math.floor((Date.now() - startedAt) / 1000);
+  if (secs < 60)
+    return `${secs}s`;
+  if (secs < 3600)
+    return `${Math.floor(secs / 60)}m`;
+  if (secs < 86400)
+    return `${Math.floor(secs / 3600)}h`;
+  return `${Math.floor(secs / 86400)}d`;
+}
+async function run2() {
+  const all = await readAllDaemonStates();
+  if (all.length === 0) {
+    console.log(`
+  ${paint.dim("\u25CB")}  No running instances
+  ${paint.dim("wasper up --url <spec> [--port <port>]")}
+`);
+    process.exit(0);
+  }
+  console.log();
+  const header = `  ${"PORT".padEnd(7)}  ${"PID".padEnd(8)}  ${"UP".padEnd(6)}  ${"SPEC / URL"}`;
+  console.log(paint.dim(header));
+  console.log(paint.dim("  " + "\u2500".repeat(header.length - 2)));
+  for (const s of all) {
+    const port = paint.green(String(s.port).padEnd(7));
+    const pid = paint.dim(String(s.pid).padEnd(8));
+    const up = paint.dim(uptime(s.startedAt).padEnd(6));
+    const spec = s.specUrl ? s.specUrl : paint.dim("no spec");
+    console.log(`  ${port}  ${pid}  ${up}  ${spec}`);
+  }
+  console.log();
+  console.log(paint.dim(`  wasper status --port <port>  \u2014  details`));
+  console.log(paint.dim(`  wasper down --port <port>    \u2014  stop one`));
+  console.log(paint.dim(`  wasper down --all            \u2014  stop all`));
+  console.log();
+  process.exit(0);
+}
+var init_ps = __esm(() => {
+  init_daemon();
+  init_ui();
+});
+
+// src/commands/stop.ts
+var exports_stop = {};
+__export(exports_stop, {
+  run: () => run3
+});
+async function run3() {
+  const args = process.argv.slice(2).filter((a) => a !== "down" && a !== "stop");
+  const stopAll = args.includes("--all") || args.includes("-a");
+  const portIdx = args.findIndex((a) => a === "--port" || a === "-p");
+  const portArg = portIdx >= 0 ? parseInt(args[portIdx + 1] ?? "", 10) : undefined;
+  if (stopAll) {
+    const all = await readAllDaemonStates();
+    if (!all.length) {
+      console.log(`
+  ${paint.dim("\u25CB")}  No running instances
+`);
+      process.exit(0);
+    }
+    for (const state2 of all) {
+      try {
+        process.kill(state2.pid, "SIGTERM");
+      } catch {}
+      await Bun.sleep(300);
+      await clearDaemonState(state2.port);
+      const label = state2.specUrl ? paint.dim(state2.specUrl) : paint.dim("no spec");
+      console.log(`  ${paint.green("\u2713")}  Stopped :${state2.port}  ${label}`);
+    }
+    console.log();
+    process.exit(0);
+  }
+  const state = await readDaemonState(portArg);
+  if (!state) {
+    if (portArg) {
+      console.log(`
+  ${paint.dim("\u25CB")}  No instance running on :${portArg}
+`);
+    } else {
+      const all = await readAllDaemonStates();
+      if (all.length > 1) {
+        console.log(`
+  ${paint.yellow("\u25CB")}  Multiple instances running \u2014 specify a port or use --all:
+`);
+        for (const s of all) {
+          console.log(`     :${s.port}  ${paint.dim(s.specUrl ?? "no spec")}`);
+        }
+        console.log(`
+  ${paint.dim("wasper down --port <port>  \xB7  wasper down --all")}
+`);
+        process.exit(1);
+      }
+      console.log(`
+  ${paint.dim("\u25CB")}  No running instance found
+`);
+    }
+    process.exit(1);
+  }
+  if (!isProcessAlive(state.pid)) {
+    await clearDaemonState(state.port);
+    console.log(`
+  ${paint.dim("\u25CB")}  Process ${state.pid} already gone. Cleaned up state.
+`);
+    process.exit(0);
+  }
+  try {
+    process.kill(state.pid, "SIGTERM");
+  } catch {
+    console.log(`
+  ${paint.red("\u2717")}  Failed to stop PID ${state.pid}
+`);
+    process.exit(1);
+  }
+  for (let i = 0;i < 30; i++) {
+    await Bun.sleep(100);
+    if (!isProcessAlive(state.pid))
+      break;
+  }
+  await clearDaemonState(state.port);
+  console.log(`
+  ${paint.green("\u2713")}  Stopped :${state.port}  ${paint.dim(`PID ${state.pid}`)}
+`);
+  process.exit(0);
+}
+var init_stop = __esm(() => {
+  init_daemon();
+  init_ui();
+});
+
+// src/commands/status.ts
+var exports_status = {};
+__export(exports_status, {
+  run: () => run4
+});
+function uptime2(startedAt) {
+  const secs = Math.floor((Date.now() - startedAt) / 1000);
+  if (secs < 60)
+    return `${secs}s`;
+  if (secs < 3600)
+    return `${Math.floor(secs / 60)}m`;
+  if (secs < 86400)
+    return `${Math.floor(secs / 3600)}h`;
+  return `${Math.floor(secs / 86400)}d`;
+}
+async function run4() {
+  const args = process.argv.slice(2).filter((a) => a !== "status");
+  const portIdx = args.findIndex((a) => a === "--port" || a === "-p");
+  const portArg = portIdx >= 0 ? parseInt(args[portIdx + 1] ?? "", 10) : undefined;
+  if (portArg) {
+    const state = await readDaemonState(portArg);
+    if (!state || !isProcessAlive(state.pid)) {
+      console.log(`
+  ${paint.dim("\u25CB")}  No instance on :${portArg}
+`);
+      process.exit(1);
+    }
+    await printSingleStatus(state);
+    process.exit(0);
+  }
+  const all = await readAllDaemonStates();
+  if (all.length === 0) {
     printStatus({ running: false });
-    process.exit(state ? 1 : 0);
+    process.exit(0);
+  }
+  if (all.length === 1) {
+    await printSingleStatus(all[0]);
+    process.exit(0);
+  }
+  console.log(`
+  ${paint.green("\u25CF")}  ${paint.bold("wasper")}  ${all.length} instances running
+`);
+  for (const s of all) {
+    const base = s.origin ?? `http://localhost:${s.port}`;
+    let specInfo = "";
+    try {
+      const res = await fetch(`http://localhost:${s.port}/api/server-info`, {
+        headers: s.token ? { Authorization: `Bearer ${s.token}` } : undefined,
+        signal: AbortSignal.timeout(1500)
+      });
+      if (res.ok) {
+        const info = await res.json();
+        if (info.spec)
+          specInfo = `  ${info.spec.title}  ${paint.dim(info.spec.endpointCount + " ep")}`;
+      }
+    } catch {}
+    console.log(`  ${paint.green("\u25CF")}  :${String(s.port).padEnd(5)} ${paint.cyan(base + "/")}${specInfo}`);
+    console.log(`     ${paint.dim(`PID ${s.pid}  up ${uptime2(s.startedAt)}`)}`);
   }
+  console.log(`
+  ${paint.dim("wasper status --port <port>  \u2014  details for one instance")}
+`);
+  process.exit(0);
+}
+async function printSingleStatus(state) {
   let spec = null;
   try {
     const res = await fetch(`http://localhost:${state.port}/api/server-info`, {
@@ -541,9 +1062,9 @@ var init_status = __esm(() => {
 // src/commands/reload.ts
 var exports_reload = {};
 __export(exports_reload, {
-  run: () => run4
+  run: () => run5
 });
-async function run4() {
+async function run5() {
   const state = await readDaemonState();
   if (!state || !isProcessAlive(state.pid)) {
     console.log(`
@@ -566,6 +1087,7 @@ async function run4() {
     }
     spinner.stop("\u2713", `Reloaded "${data.spec}" \xB7 ${paint.green(String(data.endpoints ?? 0) + " endpoints")}`, "green");
     console.log();
+    process.exit(0);
   } catch (e) {
     spinner.stop("\u2717", `Failed: ${e instanceof Error ? e.message : String(e)}`, "red");
     process.exit(1);
@@ -576,365 +1098,921 @@ var init_reload = __esm(() => {
   init_ui();
 });
 
-// src/db/schema.ts
-var SCHEMA = `
-  CREATE TABLE IF NOT EXISTS auth_config (
-    id TEXT PRIMARY KEY DEFAULT 'default',
-    type TEXT NOT NULL DEFAULT 'none',
-    config TEXT NOT NULL DEFAULT '{}',
-    token_cache TEXT,
-    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-
-  CREATE TABLE IF NOT EXISTS request_logs (
-    id TEXT PRIMARY KEY,
-    source TEXT NOT NULL DEFAULT 'mcp',
-    tool_name TEXT,
-    method TEXT NOT NULL,
-    url TEXT NOT NULL,
-    request_headers TEXT,
-    request_body TEXT,
-    status_code INTEGER,
-    response_headers TEXT,
-    response_body TEXT,
-    latency_ms INTEGER,
-    error TEXT,
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-
-  CREATE INDEX IF NOT EXISTS idx_logs_created ON request_logs(created_at DESC);
-
-  CREATE TABLE IF NOT EXISTS settings (
-    key TEXT PRIMARY KEY,
-    value TEXT NOT NULL DEFAULT '{}'
-  );
-
-  CREATE TABLE IF NOT EXISTS intercept_rules (
-    id TEXT PRIMARY KEY,
-    enabled INTEGER NOT NULL DEFAULT 1,
-    name TEXT NOT NULL DEFAULT '',
-    sort_order INTEGER NOT NULL DEFAULT 0,
-    match_path TEXT NOT NULL DEFAULT '',
-    match_method TEXT NOT NULL DEFAULT '',
-    target_host TEXT NOT NULL DEFAULT '',
-    strip_prefix TEXT NOT NULL DEFAULT '',
-    add_prefix TEXT NOT NULL DEFAULT '',
-    add_headers TEXT NOT NULL DEFAULT '{}',
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-  CREATE INDEX IF NOT EXISTS idx_rules_order ON intercept_rules(sort_order, created_at);
-
-  CREATE TABLE IF NOT EXISTS auth_profiles (
-    id TEXT PRIMARY KEY,
-    name TEXT NOT NULL,
-    description TEXT NOT NULL DEFAULT '',
-    type TEXT NOT NULL DEFAULT 'none',
-    config TEXT NOT NULL DEFAULT '{}',
-    token_cache TEXT,
-    is_active INTEGER NOT NULL DEFAULT 0,
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
+// src/commands/logs.ts
+var exports_logs = {};
+__export(exports_logs, {
+  run: () => run6
+});
+async function run6() {
+  const args = process.argv.slice(2).filter((a) => a !== "logs");
+  const follow = args.includes("-f") || args.includes("--follow");
+  const portIdx = args.findIndex((a) => a === "--port" || a === "-p");
+  const portArg = portIdx >= 0 ? parseInt(args[portIdx + 1] ?? "", 10) : undefined;
+  const nIdx = args.findIndex((a) => a === "-n" || a === "--lines");
+  const lines = nIdx >= 0 ? args[nIdx + 1] ?? "100" : "100";
+  let port = portArg;
+  if (!port) {
+    const all = await readAllDaemonStates();
+    if (all.length === 0) {
+      console.log(`
+  ${paint.yellow("\u25CB")}  wasper is not running  ${paint.dim("\u2192 wasper up")}
+`);
+      process.exit(1);
+    }
+    if (all.length > 1) {
+      console.log(`
+  ${paint.yellow("\u25CB")}  Multiple instances \u2014 specify --port:
+`);
+      for (const s of all)
+        console.log(`     :${s.port}  ${paint.dim(s.specUrl ?? "no spec")}`);
+      console.log(`
+  ${paint.dim("wasper logs --port <port> [-f]")}
+`);
+      process.exit(1);
+    }
+    port = all[0].port;
+  }
+  const path = logFile(port);
+  const file = Bun.file(path);
+  if (!await file.exists()) {
+    console.log(`
+  ${paint.yellow("\u25CB")}  No log file for :${port}`);
+    console.log(`  ${paint.dim("Expected: " + path)}
+`);
+    process.exit(1);
+  }
+  const tailArgs = follow ? ["tail", "-f", "-n", lines, path] : ["tail", "-n", lines, path];
+  const proc = Bun.spawn(tailArgs, { stdout: "inherit", stderr: "inherit" });
+  await proc.exited;
+}
+var init_logs = __esm(() => {
+  init_daemon();
+  init_ui();
+});
 
-  CREATE TABLE IF NOT EXISTS saved_requests (
-    id TEXT PRIMARY KEY,
-    name TEXT NOT NULL DEFAULT 'Untitled',
-    folder TEXT NOT NULL DEFAULT '',
-    method TEXT NOT NULL DEFAULT 'GET',
-    url TEXT NOT NULL DEFAULT '',
-    headers TEXT NOT NULL DEFAULT '[]',
-    params TEXT NOT NULL DEFAULT '[]',
-    body TEXT NOT NULL DEFAULT '',
-    body_type TEXT NOT NULL DEFAULT 'none',
-    raw_type TEXT NOT NULL DEFAULT 'text/plain',
-    form_rows TEXT NOT NULL DEFAULT '[]',
-    auth TEXT NOT NULL DEFAULT '{}',
-    notes TEXT NOT NULL DEFAULT '',
-    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
-    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-  CREATE INDEX IF NOT EXISTS idx_saved_folder ON saved_requests(folder, created_at DESC);
+// src/commands/ls.ts
+var exports_ls = {};
+__export(exports_ls, {
+  run: () => run7
+});
+function ago(ts) {
+  const secs = Math.floor(Date.now() / 1000) - ts;
+  if (secs < 60)
+    return "just now";
+  if (secs < 3600)
+    return `${Math.floor(secs / 60)}m ago`;
+  if (secs < 86400)
+    return `${Math.floor(secs / 3600)}h ago`;
+  if (secs < 86400 * 30)
+    return `${Math.floor(secs / 86400)}d ago`;
+  return new Date(ts * 1000).toLocaleDateString();
+}
+async function run7() {
+  const history = dbQueries.getSpecHistory();
+  if (history.length === 0) {
+    console.log(`
+  No saved specs yet.
+`);
+    console.log(`  ${paint.dim("Run:")}  wasper --url <spec-url>
+`);
+    process.exit(0);
+  }
+  const COL_URL = isTTY ? 50 : 60;
+  const COL_TITLE = 28;
+  console.log();
+  if (isTTY) {
+    const header = `  ${"#".padEnd(3)}  ${"URL".padEnd(COL_URL)}  ${"Title".padEnd(COL_TITLE)}  ${"Endpoints".padEnd(10)}  Last used`;
+    console.log(paint.dim(header));
+    console.log(paint.dim("  " + "\u2500".repeat(header.length - 2)));
+  }
+  history.forEach((row, i) => {
+    const num = String(i + 1).padEnd(3);
+    const url = row.url.length > COL_URL ? row.url.slice(0, COL_URL - 1) + "\u2026" : row.url.padEnd(COL_URL);
+    const title = (row.title ?? "\u2014").slice(0, COL_TITLE).padEnd(COL_TITLE);
+    const eps = (row.endpoint_count != null ? String(row.endpoint_count) : "\u2014").padEnd(10);
+    const time = ago(row.last_used);
+    console.log(`  ${paint.cyan(num)}  ${url}  ${paint.dim(title)}  ${eps}  ${paint.dim(time)}`);
+  });
+  console.log();
+  console.log(paint.dim(`  wasper use <number>  \u2014 start server with that spec`));
+  console.log(paint.dim(`  wasper rm  <number>  \u2014 remove a spec from history`));
+  console.log();
+  process.exit(0);
+}
+var init_ls = __esm(() => {
+  init_db();
+  init_ui();
+});
 
-  CREATE TABLE IF NOT EXISTS spec_history (
-    id TEXT PRIMARY KEY,
-    url TEXT NOT NULL UNIQUE,
-    title TEXT,
-    version TEXT,
-    endpoint_count INTEGER,
-    last_used INTEGER NOT NULL DEFAULT (unixepoch()),
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-  CREATE INDEX IF NOT EXISTS idx_spec_history_last_used ON spec_history(last_used DESC);
+// src/commands/use.ts
+var exports_use = {};
+__export(exports_use, {
+  run: () => run8
+});
+async function run8() {
+  const raw = process.argv.slice(2).filter((a) => !a.startsWith("-"));
+  const portIdx = process.argv.findIndex((a) => a === "--port" || a === "-p");
+  const PORT = portIdx >= 0 ? parseInt(process.argv[portIdx + 1] ?? "3388", 10) : parseInt(process.env.WASPER_PORT ?? "3388", 10);
+  const target = raw[1];
+  if (!target) {
+    console.error(`
+  Usage: wasper use <number|url> [--port <port>]
+`);
+    process.exit(1);
+  }
+  const history = dbQueries.getSpecHistory();
+  let url = null;
+  const num = parseInt(target, 10);
+  if (!isNaN(num) && num >= 1 && num <= history.length) {
+    url = history[num - 1]?.url ?? null;
+  } else if (target.startsWith("http")) {
+    url = target;
+  } else {
+    const match = history.find((r) => r.title?.toLowerCase().includes(target.toLowerCase()));
+    if (match)
+      url = match.url;
+  }
+  if (!url) {
+    console.error(`
+  ${paint.red("\u2717")}  Spec not found: ${target}`);
+    console.error(`  Run ${paint.cyan("wasper ls")} to see saved specs.
+`);
+    process.exit(1);
+  }
+  const existing = await readDaemonState(PORT);
+  if (existing && isProcessAlive(existing.pid)) {
+    try {
+      process.kill(existing.pid, "SIGTERM");
+    } catch {}
+    await Bun.sleep(400);
+  }
+  const pid = await spawnDaemon(url, PORT, { features: getFeatures() });
+  await Bun.sleep(600);
+  await writeDaemonState({ pid, port: PORT, specUrl: url, startedAt: Date.now() });
+  console.log(`
+  ${paint.green("\u2713")}  Started on :${PORT}  ${paint.dim(`PID ${pid}`)}`);
+  console.log(`  ${paint.dim("\u21A9")}  ${url}`);
+  console.log(`  ${paint.dim("\u279C")}  ${paint.cyan(`http://localhost:${PORT}/`)}
+`);
+  process.exit(0);
+}
+var init_use = __esm(() => {
+  init_db();
+  init_daemon();
+  init_config();
+  init_ui();
+});
 
-  CREATE TABLE IF NOT EXISTS workflows (
-    id TEXT PRIMARY KEY,
-    name TEXT NOT NULL DEFAULT 'Untitled Workflow',
-    description TEXT NOT NULL DEFAULT '',
-    steps TEXT NOT NULL DEFAULT '[]',
-    created_at INTEGER NOT NULL DEFAULT (unixepoch()),
-    updated_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-  CREATE INDEX IF NOT EXISTS idx_workflows_updated ON workflows(updated_at DESC);
+// src/commands/rm.ts
+var exports_rm = {};
+__export(exports_rm, {
+  run: () => run9
+});
+async function run9() {
+  const args = process.argv.slice(2).filter((a) => !a.startsWith("-"));
+  const target = args[1];
+  if (!target) {
+    console.error(`
+  Usage: wasper rm <number|url>
+`);
+    process.exit(1);
+  }
+  const history = dbQueries.getSpecHistory();
+  let id = null;
+  let label = null;
+  const num = parseInt(target, 10);
+  if (!isNaN(num) && num >= 1 && num <= history.length) {
+    const row = history[num - 1];
+    if (row) {
+      id = row.id;
+      label = row.title ?? row.url;
+    }
+  } else {
+    const match = history.find((r) => r.url === target || r.title?.toLowerCase().includes(target.toLowerCase()));
+    if (match) {
+      id = match.id;
+      label = match.title ?? match.url;
+    }
+  }
+  if (!id) {
+    console.error(`
+  ${paint.red("\u2717")}  Spec not found: ${target}
+`);
+    process.exit(1);
+  }
+  dbQueries.deleteSpec(id);
+  console.log(`
+  ${paint.green("\u2713")}  Removed ${paint.dim(label ?? id)}
+`);
+  process.exit(0);
+}
+var init_rm = __esm(() => {
+  init_db();
+  init_ui();
+});
 
-  CREATE TABLE IF NOT EXISTS capture_bins (
-    id TEXT PRIMARY KEY,
-    name TEXT NOT NULL DEFAULT '',
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
+// src/commands/feature.ts
+var exports_feature = {};
+__export(exports_feature, {
+  run: () => run10
+});
+async function run10() {
+  const args = process.argv.slice(2);
+  const name = args.find((a) => FEATURE_NAMES.includes(a));
+  const value = args.find((a) => a === "on" || a === "off");
+  const portIdx = args.findIndex((a) => a === "--port" || a === "-p");
+  const portArg = portIdx >= 0 ? parseInt(args[portIdx + 1] ?? "", 10) : undefined;
+  const state = portArg ? await readDaemonState(portArg) : await resolveSingleDaemon();
+  if (!state || !isProcessAlive(state.pid)) {
+    const hint = portArg ? `:${portArg}` : "";
+    console.log(`
+  ${paint.yellow("\u25CB")}  wasper${hint} is not running  ${paint.dim("\u2192 wasper up")}
+`);
+    process.exit(1);
+  }
+  const authHdr = state.token ? { Authorization: `Bearer ${state.token}` } : {};
+  const base = `http://localhost:${state.port}`;
+  const cur = await fetch(`${base}/api/features`, {
+    headers: authHdr,
+    signal: AbortSignal.timeout(3000)
+  }).then((r) => r.json());
+  const next = value === "on" ? true : value === "off" ? false : !cur[name];
+  await fetch(`${base}/api/features`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json", ...authHdr },
+    body: JSON.stringify({ [name]: next }),
+    signal: AbortSignal.timeout(3000)
+  });
+  const port = state.port !== 3388 ? `  ${paint.dim(":" + state.port)}` : "";
+  const icon = next ? paint.green("\u2713") : paint.yellow("\u25CB");
+  const status = next ? paint.green("on") : paint.yellow("off");
+  console.log(`
+  ${icon}  ${LABELS[name]}  ${status}${port}
+`);
+  process.exit(0);
+}
+async function resolveSingleDaemon() {
+  const all = await readAllDaemonStates();
+  if (all.length <= 1)
+    return all[0] ?? null;
+  console.log(`
+  ${paint.yellow("\u25CB")}  Multiple instances running \u2014 specify --port:
+`);
+  for (const s of all)
+    console.log(`     :${s.port}  ${paint.dim(s.specUrl ?? "no spec")}`);
+  console.log();
+  process.exit(1);
+}
+var FEATURE_NAMES, LABELS;
+var init_feature = __esm(() => {
+  init_daemon();
+  init_ui();
+  FEATURE_NAMES = ["mcp", "proxy", "ai", "readonly"];
+  LABELS = {
+    mcp: "MCP endpoint",
+    proxy: "HTTP proxy",
+    ai: "AI chat",
+    readonly: "Read-only mode"
+  };
+});
 
-  CREATE TABLE IF NOT EXISTS chat_memory (
-    id INTEGER PRIMARY KEY AUTOINCREMENT,
-    role TEXT NOT NULL,
-    content TEXT NOT NULL,
-    created_at INTEGER NOT NULL DEFAULT (unixepoch())
-  );
-  CREATE INDEX IF NOT EXISTS idx_memory_created ON chat_memory(created_at DESC);
+// src/commands/auth-cmd.ts
+var exports_auth_cmd = {};
+__export(exports_auth_cmd, {
+  run: () => run11
+});
+async function run11() {
+  const args = process.argv.slice(2).filter((a) => a !== "auth");
+  const sub = args[0] ?? "list";
+  const name = args.slice(1).join(" ");
+  if (!sub || sub === "list") {
+    const profiles = dbQueries.getProfiles();
+    if (!profiles.length) {
+      console.log(`
+  ${paint.dim("\u25CB")}  No auth profiles saved`);
+      console.log(`  ${paint.dim("Create them in the studio (Authentication tab)")}
+`);
+      process.exit(0);
+    }
+    console.log();
+    for (const p of profiles) {
+      const mark = p.is_active === 1 ? paint.green("\u25CF") : paint.dim("\u25CB");
+      const desc = p.description ? `  ${paint.dim(p.description)}` : "";
+      console.log(`  ${mark}  ${paint.bold(p.name)}  ${paint.dim(`(${p.type})`)}${desc}`);
+    }
+    console.log(`
+  ${paint.dim("wasper auth use <name>  \xB7  wasper auth none")}
+`);
+    process.exit(0);
+  }
+  if (sub === "use") {
+    if (!name) {
+      console.log(`
+  ${paint.red("\u2717")}  Usage: wasper auth use <name>
+`);
+      process.exit(1);
+    }
+    const profiles = dbQueries.getProfiles();
+    const target = profiles.find((p) => p.name.toLowerCase() === name.toLowerCase()) ?? profiles.find((p) => p.id === name);
+    if (!target) {
+      console.log(`
+  ${paint.red("\u2717")}  Profile not found: "${name}"`);
+      console.log(`  ${paint.dim("wasper auth  \u2014  list profiles")}
+`);
+      process.exit(1);
+    }
+    dbQueries.activateProfile(target.id);
+    console.log(`
+  ${paint.green("\u2713")}  Active auth: ${paint.bold(target.name)}  ${paint.dim(`(${target.type})`)}
+`);
+    const state = await readDaemonState();
+    if (state && isProcessAlive(state.pid)) {
+      try {
+        await fetch(`http://localhost:${state.port}/api/auth/profiles/${encodeURIComponent(target.id)}/activate`, {
+          method: "POST",
+          headers: state.token ? { Authorization: `Bearer ${state.token}` } : undefined,
+          signal: AbortSignal.timeout(2000)
+        });
+      } catch {}
+    }
+    process.exit(0);
+  }
+  if (sub === "none") {
+    dbQueries.setAuthConfig("none", {});
+    console.log(`
+  ${paint.green("\u2713")}  Auth disabled
+`);
+    const state = await readDaemonState();
+    if (state && isProcessAlive(state.pid)) {
+      try {
+        await fetch(`http://localhost:${state.port}/api/auth`, {
+          method: "PUT",
+          headers: {
+            "Content-Type": "application/json",
+            ...state.token ? { Authorization: `Bearer ${state.token}` } : {}
+          },
+          body: JSON.stringify({ type: "none" }),
+          signal: AbortSignal.timeout(2000)
+        });
+      } catch {}
+    }
+    process.exit(0);
+  }
+  console.log(`
+  ${paint.red("\u2717")}  Unknown: wasper auth ${sub}`);
+  console.log(`  ${paint.dim("wasper auth  \xB7  wasper auth use <name>  \xB7  wasper auth none")}
+`);
+  process.exit(1);
+}
+var init_auth_cmd = __esm(() => {
+  init_daemon();
+  init_db();
+  init_ui();
+});
+
+// src/commands/spec-cmd.ts
+var exports_spec_cmd = {};
+__export(exports_spec_cmd, {
+  run: () => run12
+});
+async function run12() {
+  const args = process.argv.slice(2).filter((a) => a !== "spec");
+  const portIdx = args.findIndex((a) => a === "--port" || a === "-p");
+  const portArg = portIdx >= 0 ? parseInt(args[portIdx + 1] ?? "", 10) : undefined;
+  const url = args.find((a) => !a.startsWith("-") && a !== args[portIdx + 1]);
+  if (!url) {
+    console.log(`
+  ${paint.red("\u2717")}  Usage: wasper spec <url> [--port <port>]`);
+    console.log(`  ${paint.dim("Load a new OpenAPI spec on the running daemon")}
+`);
+    process.exit(1);
+  }
+  const state = portArg ? await readDaemonState(portArg) : await resolveSingleDaemon2();
+  if (!state || !isProcessAlive(state.pid)) {
+    console.log(`
+  ${paint.yellow("\u25CB")}  wasper is not running  ${paint.dim("\u2192 wasper up --url " + url)}
+`);
+    process.exit(1);
+  }
+  const port = state.port !== 3388 ? `  ${paint.dim(":" + state.port)}` : "";
+  process.stdout.write(`
+  ${paint.dim("\u2192")}  Loading ${paint.cyan(url)}...${port}
+`);
+  try {
+    const res = await fetch(`http://localhost:${state.port}/api/spec/reload-url`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...state.token ? { Authorization: `Bearer ${state.token}` } : {}
+      },
+      body: JSON.stringify({ url }),
+      signal: AbortSignal.timeout(30000)
+    });
+    const data = await res.json();
+    if (!res.ok || data.error) {
+      console.log(`  ${paint.red("\u2717")}  ${data.error ?? "Failed to load spec"}
+`);
+      process.exit(1);
+    }
+    const title = data.spec?.title ?? url;
+    const ver = data.spec?.version ? `  ${paint.dim("v" + data.spec.version)}` : "";
+    const eps = data.endpointCount != null ? `  ${paint.dim("\xB7")}  ${paint.green(data.endpointCount + " endpoints")}` : "";
+    console.log(`  ${paint.green("\u2713")}  ${paint.bold(title)}${ver}${eps}
+`);
+  } catch (e) {
+    console.log(`  ${paint.red("\u2717")}  ${e instanceof Error ? e.message : String(e)}
+`);
+    process.exit(1);
+  }
+  process.exit(0);
+}
+async function resolveSingleDaemon2() {
+  const all = await readAllDaemonStates();
+  if (all.length <= 1)
+    return all[0] ?? null;
+  console.log(`
+  ${paint.yellow("\u25CB")}  Multiple instances running \u2014 specify --port:
+`);
+  for (const s of all)
+    console.log(`     :${s.port}  ${paint.dim(s.specUrl ?? "no spec")}`);
+  console.log();
+  process.exit(1);
+}
+var init_spec_cmd = __esm(() => {
+  init_daemon();
+  init_ui();
+});
+
+// src/commands/service.ts
+var exports_service = {};
+__export(exports_service, {
+  run: () => run13
+});
+import { join as join3 } from "path";
+import { homedir as homedir3 } from "os";
+import { mkdir as mkdir2, writeFile as writeFile2, unlink as unlink2 } from "fs/promises";
+async function resolveWasperBin() {
+  const exec = process.execPath;
+  if (!exec.endsWith("/bun") && !exec.endsWith("/bun-debug") && !exec.endsWith("/bun-profile")) {
+    return exec;
+  }
+  try {
+    const r = await Bun.$`which wasper`.quiet();
+    const p = r.stdout.toString().trim();
+    if (p)
+      return p;
+  } catch {}
+  return `${exec} ${Bun.main}`;
+}
+async function buildSystemdUnit(wasperBin, port, specUrl) {
+  const wasperDir = join3(homedir3(), ".wasper");
+  const logPath = join3(wasperDir, `server-${port}.log`);
+  const envBlock = [`PORT=${port}`, ...specUrl ? [`WASPER_SPEC_URL=${specUrl}`] : []];
+  const execArgs = ["start", "--_daemon", "--port", String(port), ...specUrl ? ["--url", specUrl] : []];
+  return `[Unit]
+Description=Wasper OpenAPI Agent
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=${wasperBin} ${execArgs.join(" ")}
+Restart=on-failure
+RestartSec=5
+Environment=${envBlock.join(" ")}
+StandardOutput=append:${logPath}
+StandardError=append:${logPath}
+
+[Install]
+WantedBy=default.target
 `;
+}
+async function systemctl(...args) {
+  const proc = Bun.spawn(["systemctl", "--user", ...args], {
+    stdout: "inherit",
+    stderr: "inherit"
+  });
+  return proc.exited;
+}
+async function installLinux(port, specUrl) {
+  const wasperBin = await resolveWasperBin();
+  await mkdir2(SYSTEMD_UNIT_DIR, { recursive: true });
+  await mkdir2(join3(homedir3(), ".wasper"), { recursive: true });
+  const unit = await buildSystemdUnit(wasperBin, port, specUrl);
+  await writeFile2(SYSTEMD_UNIT_FILE, unit);
+  await systemctl("daemon-reload");
+  await systemctl("enable", SYSTEMD_SERVICE);
+  console.log(`
+  ${paint.green("\u2713")}  Service installed`);
+  console.log(`     ${paint.dim(SYSTEMD_UNIT_FILE)}`);
+  console.log(`
+  ${paint.dim("Start now:    wasper service start")}`);
+  console.log(`  ${paint.dim("Auto-starts on login (systemd user session)")}
+`);
+}
+async function uninstallLinux() {
+  await systemctl("stop", SYSTEMD_SERVICE).catch(() => {});
+  await systemctl("disable", SYSTEMD_SERVICE).catch(() => {});
+  try {
+    await unlink2(SYSTEMD_UNIT_FILE);
+  } catch {}
+  await systemctl("daemon-reload");
+  console.log(`
+  ${paint.green("\u2713")}  Service uninstalled
+`);
+}
+function buildPlist(wasperBin, port, specUrl) {
+  const logFile2 = join3(homedir3(), ".wasper", `server-${port}.log`);
+  const args = [wasperBin, "start", "--_daemon", "--port", String(port), ...specUrl ? ["--url", specUrl] : []];
+  const argsXml = args.map((a) => `		<string>${a}</string>`).join(`
+`);
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>Label</key>
+	<string>${LAUNCH_LABEL}</string>
+	<key>ProgramArguments</key>
+	<array>
+${argsXml}
+	</array>
+	<key>RunAtLoad</key>
+	<true/>
+	<key>KeepAlive</key>
+	<true/>
+	<key>StandardOutPath</key>
+	<string>${logFile2}</string>
+	<key>StandardErrorPath</key>
+	<string>${logFile2}</string>
+</dict>
+</plist>
+`;
+}
+async function launchctl(...args) {
+  const proc = Bun.spawn(["launchctl", ...args], { stdout: "inherit", stderr: "inherit" });
+  return proc.exited;
+}
+async function installMac(port, specUrl) {
+  const wasperBin = await resolveWasperBin();
+  await mkdir2(LAUNCH_DIR, { recursive: true });
+  await mkdir2(join3(homedir3(), ".wasper"), { recursive: true });
+  const plist = buildPlist(wasperBin, port, specUrl);
+  await writeFile2(LAUNCH_PLIST, plist);
+  await launchctl("load", "-w", LAUNCH_PLIST);
+  console.log(`
+  ${paint.green("\u2713")}  Launch Agent installed`);
+  console.log(`     ${paint.dim(LAUNCH_PLIST)}`);
+  console.log(`
+  ${paint.dim("Auto-starts on login (macOS LaunchAgent)")}
+`);
+}
+async function uninstallMac() {
+  await launchctl("unload", "-w", LAUNCH_PLIST).catch(() => {});
+  try {
+    await unlink2(LAUNCH_PLIST);
+  } catch {}
+  console.log(`
+  ${paint.green("\u2713")}  Launch Agent uninstalled
+`);
+}
+async function run13() {
+  const rawArgs = process.argv.slice(2).filter((a) => a !== "service");
+  const sub = rawArgs.find((a) => !a.startsWith("-")) ?? "help";
+  const portIdx = rawArgs.findIndex((a) => a === "--port" || a === "-p");
+  const port = portIdx >= 0 ? parseInt(rawArgs[portIdx + 1] ?? "3388", 10) : parseInt(process.env.WASPER_PORT ?? "", 10) || 3388;
+  const urlIdx = rawArgs.findIndex((a) => a === "--url" || a === "-u");
+  const specUrl = urlIdx >= 0 ? rawArgs[urlIdx + 1] : process.env.WASPER_SPEC_URL;
+  if (!IS_LINUX && !IS_MAC) {
+    console.log(`
+  ${paint.yellow("\u25CB")}  Service management is only supported on Linux (systemd) and macOS (launchd)
+`);
+    process.exit(1);
+  }
+  const platform = IS_LINUX ? "Linux (systemd --user)" : "macOS (LaunchAgent)";
+  switch (sub) {
+    case "install": {
+      if (IS_LINUX)
+        await installLinux(port, specUrl);
+      else
+        await installMac(port, specUrl);
+      break;
+    }
+    case "uninstall": {
+      if (IS_LINUX)
+        await uninstallLinux();
+      else
+        await uninstallMac();
+      break;
+    }
+    case "start": {
+      if (IS_LINUX) {
+        await systemctl("start", SYSTEMD_SERVICE);
+      } else {
+        await launchctl("load", "-w", LAUNCH_PLIST);
+      }
+      break;
+    }
+    case "stop": {
+      if (IS_LINUX) {
+        await systemctl("stop", SYSTEMD_SERVICE);
+      } else {
+        await launchctl("unload", LAUNCH_PLIST);
+      }
+      break;
+    }
+    case "restart": {
+      if (IS_LINUX) {
+        await systemctl("restart", SYSTEMD_SERVICE);
+      } else {
+        await launchctl("unload", LAUNCH_PLIST).catch(() => {});
+        await Bun.sleep(500);
+        await launchctl("load", "-w", LAUNCH_PLIST);
+      }
+      break;
+    }
+    case "status": {
+      if (IS_LINUX) {
+        await systemctl("status", SYSTEMD_SERVICE);
+      } else {
+        await launchctl("list", LAUNCH_LABEL);
+      }
+      break;
+    }
+    case "enable": {
+      if (IS_LINUX) {
+        await systemctl("enable", SYSTEMD_SERVICE);
+      } else {
+        console.log(`
+  ${paint.dim("On macOS, RunAtLoad=true in the plist controls auto-start.")}`);
+        console.log(`  ${paint.dim("Use: wasper service install to re-install with auto-start enabled.")}
+`);
+      }
+      break;
+    }
+    case "disable": {
+      if (IS_LINUX) {
+        await systemctl("disable", SYSTEMD_SERVICE);
+      } else {
+        console.log(`
+  ${paint.dim("On macOS, use: wasper service uninstall to remove auto-start.")}
+`);
+      }
+      break;
+    }
+    case "logs": {
+      if (IS_LINUX) {
+        const proc = Bun.spawn(["journalctl", "--user", "-u", SYSTEMD_SERVICE, "-f", "--no-pager"], {
+          stdout: "inherit",
+          stderr: "inherit"
+        });
+        await proc.exited;
+      } else {
+        const logPath = join3(homedir3(), ".wasper", "server.log");
+        const proc = Bun.spawn(["tail", "-f", logPath], { stdout: "inherit", stderr: "inherit" });
+        await proc.exited;
+      }
+      break;
+    }
+    case "cat": {
+      if (IS_LINUX) {
+        const wasperBin = await resolveWasperBin();
+        process.stdout.write(await buildSystemdUnit(wasperBin, port, specUrl));
+      } else {
+        const wasperBin = await resolveWasperBin();
+        process.stdout.write(buildPlist(wasperBin, port, specUrl));
+      }
+      break;
+    }
+    default: {
+      console.log(`
+  ${paint.bold("wasper service")}  \u2014  Manage wasper as a system service  ${paint.dim(`(${platform})`)}
+
+  ${paint.bold("Commands")}
+    wasper service install    Install and enable (auto-start on login)
+    wasper service uninstall  Remove the service
+    wasper service start      Start the service now
+    wasper service stop       Stop the service
+    wasper service restart    Restart the service
+    wasper service status     Show service status
+    wasper service enable     Enable auto-start on login  ${paint.dim("(Linux)")}
+    wasper service disable    Disable auto-start          ${paint.dim("(Linux)")}
+    wasper service logs       Follow service logs
+    wasper service cat        Print the generated unit/plist
+
+  ${paint.bold("Options")}
+    --url <spec>    OpenAPI spec URL to embed in the service definition
+    --port <port>   Port  ${paint.dim("(default: 3388)")}
+`);
+    }
+  }
+}
+var IS_LINUX, IS_MAC, SYSTEMD_SERVICE = "wasper", SYSTEMD_UNIT_DIR, SYSTEMD_UNIT_FILE, LAUNCH_LABEL = "com.wasper.agent", LAUNCH_DIR, LAUNCH_PLIST;
+var init_service = __esm(() => {
+  init_ui();
+  IS_LINUX = process.platform === "linux";
+  IS_MAC = process.platform === "darwin";
+  SYSTEMD_UNIT_DIR = join3(homedir3(), ".config", "systemd", "user");
+  SYSTEMD_UNIT_FILE = join3(SYSTEMD_UNIT_DIR, `${SYSTEMD_SERVICE}.service`);
+  LAUNCH_DIR = join3(homedir3(), "Library", "LaunchAgents");
+  LAUNCH_PLIST = join3(LAUNCH_DIR, `${LAUNCH_LABEL}.plist`);
+});
 
-// src/db/index.ts
-import { Database } from "bun:sqlite";
-import { join as join3 } from "path";
-import { mkdirSync, existsSync } from "fs";
-import { homedir as homedir3 } from "os";
-import { randomUUID } from "crypto";
-function resolveDataDir() {
-  if (process.env.WASPER_DATA_DIR ?? process.env.OPENAPI_AGENT_DATA_DIR) {
-    return process.env.WASPER_DATA_DIR ?? process.env.OPENAPI_AGENT_DATA_DIR;
+// src/commands/update.ts
+var exports_update = {};
+__export(exports_update, {
+  run: () => run14,
+  printUpdateNotice: () => printUpdateNotice,
+  performUpdate: () => performUpdate,
+  fetchLatestVersion: () => fetchLatestVersion,
+  checkForUpdate: () => checkForUpdate
+});
+import { join as join4 } from "path";
+import { homedir as homedir4 } from "os";
+import { chmod, rename, unlink as unlink3, mkdir as mkdir3, readFile as readFile2, writeFile as writeFile3 } from "fs/promises";
+async function fetchLatestVersion() {
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`, {
+      signal: AbortSignal.timeout(5000),
+      headers: { Accept: "application/json" }
+    });
+    if (!res.ok)
+      return null;
+    const data = await res.json();
+    return data.version ?? null;
+  } catch {
+    return null;
   }
+}
+async function checkForUpdate() {
+  if (process.env.WASPER_NO_UPDATE_CHECK)
+    return null;
+  let state = null;
   try {
-    const legacy = join3(import.meta.dir, "../../data");
-    if (!Bun.main.includes("$bunfs") && (existsSync(join3(legacy, "wasper.db")) || existsSync(join3(legacy, "openapi-agent.db"))))
-      return legacy;
+    state = JSON.parse(await readFile2(CHECK_FILE, "utf-8"));
   } catch {}
-  const oldDir = join3(homedir3(), ".openapi-agent", "data");
-  if (existsSync(oldDir))
-    return oldDir;
-  return join3(homedir3(), ".wasper", "data");
+  let latest = state?.latest ?? null;
+  if (!state || Date.now() - state.lastCheck > CHECK_INTERVAL) {
+    latest = await fetchLatestVersion();
+    if (latest) {
+      await mkdir3(join4(homedir4(), ".wasper"), { recursive: true }).catch(() => {});
+      await writeFile3(CHECK_FILE, JSON.stringify({ lastCheck: Date.now(), latest }), "utf-8").catch(() => {});
+    }
+  }
+  if (latest && compareSemver(latest, VERSION) > 0)
+    return latest;
+  return null;
 }
-var DATA_DIR, DB_PATH, db, hasOldSchema, dbQueries;
-var init_db = __esm(() => {
-  DATA_DIR = resolveDataDir();
-  mkdirSync(DATA_DIR, { recursive: true });
-  DB_PATH = join3(DATA_DIR, existsSync(join3(DATA_DIR, "openapi-agent.db")) && !existsSync(join3(DATA_DIR, "wasper.db")) ? "openapi-agent.db" : "wasper.db");
-  db = new Database(DB_PATH, { create: true });
-  db.exec("PRAGMA journal_mode = WAL;");
-  db.exec("PRAGMA foreign_keys = OFF;");
-  hasOldSchema = db.query("SELECT name FROM sqlite_master WHERE type='table' AND name='specs'").get() !== null;
-  if (hasOldSchema) {
-    db.exec("DROP TABLE IF EXISTS tools; DROP TABLE IF EXISTS specs; DROP TABLE IF EXISTS auth_configs; DROP TABLE IF EXISTS request_logs;");
+function printUpdateNotice(latest) {
+  console.log(`  ${paint.yellow("\u25B2")}  Update available ${paint.dim(VERSION)} \u2192 ${paint.green(latest)}  ${paint.dim("\xB7")}  run ${paint.bold("wasper update")}
+`);
+}
+function binaryAssetName() {
+  const os = process.platform === "darwin" ? "darwin" : process.platform === "win32" ? "windows" : "linux";
+  const arch = process.arch === "arm64" ? "arm64" : "x64";
+  return `wasper-${os}-${arch}${os === "windows" ? ".exe" : ""}`;
+}
+async function updateCompiledBinary(latest) {
+  const exe = process.execPath;
+  const asset = binaryAssetName();
+  const url = `https://github.com/${REPO}/releases/download/v${latest}/${asset}`;
+  const res = await fetch(url, { redirect: "follow" });
+  if (!res.ok)
+    throw new Error(`Download failed (HTTP ${res.status}) \u2014 ${url}`);
+  const bytes = new Uint8Array(await res.arrayBuffer());
+  if (bytes.byteLength < 1024 * 100)
+    throw new Error("Downloaded file is suspiciously small \u2014 aborting");
+  const tmp = `${exe}.update`;
+  const old = `${exe}.old`;
+  await Bun.write(tmp, bytes);
+  await chmod(tmp, 493);
+  await rename(exe, old);
+  try {
+    await rename(tmp, exe);
+  } catch (e) {
+    await rename(old, exe).catch(() => {});
+    throw e;
   }
-  db.exec(SCHEMA);
-  dbQueries = {
-    getAuthConfig: () => db.query("SELECT * FROM auth_config WHERE id = 'default'").get(),
-    setAuthConfig: (type, config) => db.query(`INSERT INTO auth_config (id, type, config, updated_at)
-              VALUES ('default', ?, ?, unixepoch())
-              ON CONFLICT(id) DO UPDATE SET type = excluded.type, config = excluded.config, updated_at = unixepoch()`).run(type, JSON.stringify(config)),
-    updateTokenCache: (tokenCache) => db.query("UPDATE auth_config SET token_cache = ? WHERE id = 'default'").run(tokenCache ? JSON.stringify(tokenCache) : null),
-    getRecentLogs: (limit = 500) => db.query("SELECT * FROM request_logs ORDER BY created_at DESC LIMIT ?").all(limit),
-    insertLog: (data) => db.query(`INSERT INTO request_logs
-              (id, source, tool_name, method, url, request_headers, request_body,
-               status_code, response_headers, response_body, latency_ms, error)
-              VALUES ($id, $source, $tool_name, $method, $url, $request_headers, $request_body,
-               $status_code, $response_headers, $response_body, $latency_ms, $error)`).run({
-      $id: data.id,
-      $source: data.source,
-      $tool_name: data.tool_name,
-      $method: data.method,
-      $url: data.url,
-      $request_headers: data.request_headers,
-      $request_body: data.request_body,
-      $status_code: data.status_code,
-      $response_headers: data.response_headers,
-      $response_body: data.response_body,
-      $latency_ms: data.latency_ms,
-      $error: data.error
-    }),
-    clearLogs: () => db.query("DELETE FROM request_logs").run(),
-    getRules: () => db.query("SELECT * FROM intercept_rules ORDER BY sort_order, created_at").all(),
-    insertRule: (rule) => db.query(`INSERT INTO intercept_rules (id,enabled,name,sort_order,match_path,match_method,target_host,strip_prefix,add_prefix,add_headers)
-      VALUES ($id,$enabled,$name,$sort_order,$match_path,$match_method,$target_host,$strip_prefix,$add_prefix,$add_headers)`).run({
-      $id: rule.id,
-      $enabled: rule.enabled,
-      $name: rule.name,
-      $sort_order: rule.sort_order,
-      $match_path: rule.match_path,
-      $match_method: rule.match_method,
-      $target_host: rule.target_host,
-      $strip_prefix: rule.strip_prefix,
-      $add_prefix: rule.add_prefix,
-      $add_headers: rule.add_headers
-    }),
-    updateRule: (id, patch) => {
-      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
-      const params = { $id: id };
-      for (const [k, v] of Object.entries(patch))
-        params[`$${k}`] = v;
-      db.query(`UPDATE intercept_rules SET ${cols} WHERE id = $id`).run(params);
-    },
-    deleteRule: (id) => db.query("DELETE FROM intercept_rules WHERE id = ?").run(id),
-    getSettings: () => db.query("SELECT value FROM settings WHERE key='app' LIMIT 1").get() ?? null,
-    setSettings: (value) => {
-      db.run("INSERT INTO settings(key,value) VALUES('app',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value", [JSON.stringify(value)]);
-    },
-    getProfiles: () => db.query("SELECT * FROM auth_profiles ORDER BY name COLLATE NOCASE").all(),
-    getActiveProfile: () => db.query("SELECT * FROM auth_profiles WHERE is_active = 1 LIMIT 1").get(),
-    insertProfile: (p) => db.query(`INSERT INTO auth_profiles (id,name,description,type,config,token_cache,is_active)
-      VALUES ($id,$name,$description,$type,$config,$token_cache,$is_active)`).run({
-      $id: p.id,
-      $name: p.name,
-      $description: p.description,
-      $type: p.type,
-      $config: p.config,
-      $token_cache: p.token_cache,
-      $is_active: p.is_active
-    }),
-    updateProfile: (id, patch) => {
-      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
-      const params = { $id: id };
-      for (const [k, v] of Object.entries(patch))
-        params[`$${k}`] = v;
-      db.query(`UPDATE auth_profiles SET ${cols} WHERE id = $id`).run(params);
-    },
-    deleteProfile: (id) => db.query("DELETE FROM auth_profiles WHERE id = ?").run(id),
-    activateProfile: (id) => {
-      const profile = db.query("SELECT * FROM auth_profiles WHERE id = ?").get(id);
-      if (!profile)
-        return;
-      db.query("UPDATE auth_profiles SET is_active = 0").run();
-      db.query("UPDATE auth_profiles SET is_active = 1 WHERE id = ?").run(id);
-      db.query(`INSERT INTO auth_config (id, type, config, updated_at) VALUES ('default', $type, $config, unixepoch())
-      ON CONFLICT(id) DO UPDATE SET type=excluded.type, config=excluded.config, updated_at=unixepoch()`).run({ $type: profile.type, $config: profile.config });
-    },
-    getSavedRequests: () => db.query("SELECT * FROM saved_requests ORDER BY folder, name COLLATE NOCASE").all(),
-    getSavedRequest: (id) => db.query("SELECT * FROM saved_requests WHERE id = ?").get(id),
-    insertSavedRequest: (r) => db.query(`INSERT INTO saved_requests
-      (id, name, folder, method, url, headers, params, body, body_type, raw_type, form_rows, auth, notes)
-      VALUES ($id,$name,$folder,$method,$url,$headers,$params,$body,$body_type,$raw_type,$form_rows,$auth,$notes)`).run({
-      $id: r.id,
-      $name: r.name,
-      $folder: r.folder,
-      $method: r.method,
-      $url: r.url,
-      $headers: r.headers,
-      $params: r.params,
-      $body: r.body,
-      $body_type: r.body_type,
-      $raw_type: r.raw_type,
-      $form_rows: r.form_rows,
-      $auth: r.auth,
-      $notes: r.notes
-    }),
-    updateSavedRequest: (id, patch) => {
-      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
-      const params = { $id: id };
-      for (const [k, v] of Object.entries(patch))
-        params[`$${k}`] = v;
-      db.query(`UPDATE saved_requests SET ${cols}, updated_at = unixepoch() WHERE id = $id`).run(params);
-    },
-    deleteSavedRequest: (id) => db.query("DELETE FROM saved_requests WHERE id = ?").run(id),
-    getSpecHistory: () => db.query("SELECT * FROM spec_history ORDER BY last_used DESC").all(),
-    getLastSpec: () => db.query("SELECT * FROM spec_history ORDER BY last_used DESC LIMIT 1").get(),
-    upsertSpec: (url, title, version, endpointCount) => {
-      const existing = db.query("SELECT id FROM spec_history WHERE url = ?").get(url);
-      if (existing) {
-        db.query("UPDATE spec_history SET title=?, version=?, endpoint_count=?, last_used=unixepoch() WHERE url=?").run(title, version, endpointCount, url);
-      } else {
-        db.query(`INSERT INTO spec_history (id, url, title, version, endpoint_count)
-        VALUES (?, ?, ?, ?, ?)`).run(randomUUID(), url, title, version, endpointCount);
-      }
-    },
-    deleteSpec: (id) => {
-      db.query("DELETE FROM spec_history WHERE id = ?").run(id);
-    },
-    getWorkflows: () => db.query("SELECT * FROM workflows ORDER BY updated_at DESC").all(),
-    getWorkflow: (id) => db.query("SELECT * FROM workflows WHERE id = ?").get(id),
-    insertWorkflow: (w) => db.query("INSERT INTO workflows (id, name, description, steps) VALUES ($id, $name, $description, $steps)").run({ $id: w.id, $name: w.name, $description: w.description, $steps: w.steps }),
-    updateWorkflow: (id, patch) => {
-      const cols = Object.keys(patch).map((k) => `${k} = $${k}`).join(", ");
-      const params = { $id: id };
-      for (const [k, v] of Object.entries(patch))
-        params[`$${k}`] = v;
-      db.query(`UPDATE workflows SET ${cols}, updated_at = unixepoch() WHERE id = $id`).run(params);
-    },
-    deleteWorkflow: (id) => db.query("DELETE FROM workflows WHERE id = ?").run(id),
-    getCaptureBins: () => db.query("SELECT * FROM capture_bins ORDER BY created_at DESC").all(),
-    getCaptureBin: (id) => db.query("SELECT * FROM capture_bins WHERE id = ?").get(id),
-    insertCaptureBin: (id, name) => {
-      db.query("INSERT INTO capture_bins (id, name) VALUES (?, ?)").run(id, name);
-    },
-    deleteCaptureBin: (id) => {
-      db.query("DELETE FROM capture_bins WHERE id = ?").run(id);
-    },
-    getSetting: (key) => (db.query("SELECT value FROM settings WHERE key = ?").get(key) ?? null)?.value ?? null,
-    setSetting: (key, value) => {
-      db.run("INSERT INTO settings(key,value) VALUES(?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value", [key, value]);
-    },
-    saveMemory: (role, content) => {
-      db.query("INSERT INTO chat_memory (role, content) VALUES (?, ?)").run(role, content);
-    },
-    getMemory: (limit = 20) => {
-      const rows = db.query("SELECT role, content FROM chat_memory ORDER BY created_at DESC LIMIT ?").all(limit);
-      return rows.reverse();
-    },
-    clearMemory: () => {
-      db.query("DELETE FROM chat_memory").run();
-    },
-    trimMemory: (keepLast = 40) => {
-      db.query("DELETE FROM chat_memory WHERE id NOT IN (SELECT id FROM chat_memory ORDER BY created_at DESC LIMIT ?)").run(keepLast);
+  await unlink3(old).catch(() => {});
+}
+async function updatePackageInstall() {
+  const tryRun = async (cmd) => {
+    try {
+      const p = Bun.spawn(cmd, { stdout: "pipe", stderr: "pipe" });
+      const code = await p.exited;
+      return code === 0;
+    } catch {
+      return false;
     }
   };
-});
-
-// src/commands/ls.ts
-var exports_ls = {};
-__export(exports_ls, {
-  run: () => run5
-});
-function ago(ts) {
-  const secs = Math.floor(Date.now() / 1000) - ts;
-  if (secs < 60)
-    return "just now";
-  if (secs < 3600)
-    return `${Math.floor(secs / 60)}m ago`;
-  if (secs < 86400)
-    return `${Math.floor(secs / 3600)}h ago`;
-  if (secs < 86400 * 30)
-    return `${Math.floor(secs / 86400)}d ago`;
-  return new Date(ts * 1000).toLocaleDateString();
+  if (await tryRun(["bun", "add", "-g", `${PACKAGE_NAME}@latest`]))
+    return;
+  if (await tryRun(["npm", "install", "-g", `${PACKAGE_NAME}@latest`]))
+    return;
+  throw new Error("Neither `bun add -g` nor `npm install -g` succeeded. Update manually.");
 }
-async function run5() {
-  const history = dbQueries.getSpecHistory();
-  if (history.length === 0) {
-    console.log(`
-  No saved specs yet.
-`);
-    console.log(`  ${paint.dim("Run:")}  wasper --url <spec-url>
-`);
-    process.exit(0);
+async function performUpdate(opts = {}) {
+  const spinner = new Spinner;
+  if (!opts.quiet)
+    spinner.start("Checking for updates\u2026");
+  const latest = await fetchLatestVersion();
+  if (!latest) {
+    spinner.stop("\u2717", "Could not reach the npm registry", "red");
+    return false;
   }
-  const COL_URL = isTTY ? 50 : 60;
-  const COL_TITLE = 28;
-  console.log();
-  if (isTTY) {
-    const header = `  ${"#".padEnd(3)}  ${"URL".padEnd(COL_URL)}  ${"Title".padEnd(COL_TITLE)}  ${"Endpoints".padEnd(10)}  Last used`;
-    console.log(paint.dim(header));
-    console.log(paint.dim("  " + "\u2500".repeat(header.length - 2)));
+  if (compareSemver(latest, VERSION) <= 0) {
+    spinner.stop("\u2713", `Already up to date  ${paint.dim("v" + VERSION)}`, "green");
+    return false;
   }
-  history.forEach((row, i) => {
-    const num = String(i + 1).padEnd(3);
-    const url = row.url.length > COL_URL ? row.url.slice(0, COL_URL - 1) + "\u2026" : row.url.padEnd(COL_URL);
-    const title = (row.title ?? "\u2014").slice(0, COL_TITLE).padEnd(COL_TITLE);
-    const eps = (row.endpoint_count != null ? String(row.endpoint_count) : "\u2014").padEnd(10);
-    const time = ago(row.last_used);
-    console.log(`  ${paint.cyan(num)}  ${url}  ${paint.dim(title)}  ${eps}  ${paint.dim(time)}`);
-  });
+  spinner.stop();
+  if (!opts.quiet)
+    spinner.start(`Updating ${paint.dim(VERSION)} \u2192 ${paint.green(latest)}\u2026`);
+  try {
+    if (isCompiledBinary())
+      await updateCompiledBinary(latest);
+    else
+      await updatePackageInstall();
+    spinner.stop("\u2713", `Updated to ${paint.bold("v" + latest)}  ${paint.dim("\u2014 restart any running servers to use it")}`, "green");
+    await writeFile3(CHECK_FILE, JSON.stringify({ lastCheck: Date.now(), latest }), "utf-8").catch(() => {});
+    return true;
+  } catch (e) {
+    spinner.stop("\u2717", `Update failed: ${e instanceof Error ? e.message : String(e)}`, "red");
+    return false;
+  }
+}
+async function run14() {
   console.log();
-  console.log(paint.dim(`  wasper use <number>  \u2014 start server with that spec`));
-  console.log(paint.dim(`  wasper rm  <number>  \u2014 remove a spec from history`));
+  await performUpdate();
   console.log();
 }
-var init_ls = __esm(() => {
-  init_db();
+var CHECK_FILE, CHECK_INTERVAL;
+var init_update = __esm(() => {
+  init_version();
+  init_ui();
+  CHECK_FILE = join4(homedir4(), ".wasper", "update-check.json");
+  CHECK_INTERVAL = 24 * 60 * 60 * 1000;
+});
+
+// src/commands/help.ts
+var exports_help = {};
+__export(exports_help, {
+  run: () => run15
+});
+async function run15() {
+  const b = (s) => paint.bold(s);
+  const d = (s) => paint.dim(s);
+  const c = (s) => paint.cyan(s);
+  console.log(`
+  ${b("wasper")}  ${d("v" + VERSION)}
+
+  ${b("Daemon")}
+  ${c("wasper up")} ${d("[--url <spec>] [--port <port>]")}
+                         Start daemon in background (default port: 3388)
+  ${c("wasper up")} ${d("--url <spec2> --port 3389")}
+                         Run a second instance on a different port
+  ${c("wasper down")} ${d("[--port <port>]")}  Stop one instance
+  ${c("wasper down --all")}         Stop all instances
+  ${c("wasper ps")}                 List all running instances
+  ${c("wasper status")} ${d("[--port <p>]")}   Status of one or all instances
+  ${c("wasper logs")} ${d("[-f] [--port <p>]")}  Tail server logs
+
+  ${b("Spec")}
+  ${c("wasper spec")} ${d("<url> [--port <p>]")}   Load a new spec on the running daemon
+  ${c("wasper reload")} ${d("[--port <p>]")}      Hot-reload current spec
+  ${c("wasper ls")}                List saved spec history
+  ${c("wasper use")} ${d("<n|url> [--port <p>]")}  Restart with a saved spec
+  ${c("wasper rm")}  ${d("<n|url>")}              Remove spec from history
+
+  ${b("Features")}  ${d("toggle on the running daemon")}
+  ${c("wasper mcp")} ${d("[on|off] [--port <p>]")}
+  ${c("wasper proxy")} ${d("[on|off] [--port <p>]")}
+  ${c("wasper ai")} ${d("[on|off] [--port <p>]")}
+  ${c("wasper readonly")} ${d("[on|off] [--port <p>]")}
+
+  ${b("Auth")}
+  ${c("wasper auth")}                List saved auth profiles
+  ${c("wasper auth use")} ${d("<name>")}      Switch active profile
+  ${c("wasper auth none")}           Disable auth
+
+  ${b("Service")}  ${d("auto-start on login")}
+  ${c("wasper service install")} ${d("[--port <p>] [--url <spec>]")}
+  ${c("wasper service uninstall")}
+  ${c("wasper service start")} ${d("|")} ${c("stop")} ${d("|")} ${c("status")} ${d("|")} ${c("logs")}
+
+  ${b("Other")}
+  ${c("wasper update")}      Update to latest version
+  ${c("wasper --version")}   Print version
+
+  ${d("Multi-instance example:")}
+  ${d("  wasper up --url https://api1.com/openapi.json --port 3388")}
+  ${d("  wasper up --url https://api2.com/openapi.json --port 3389")}
+  ${d("  wasper ps")}
+  ${d("  wasper mcp off --port 3389")}
+  ${d("  wasper down --all")}
+`);
+  process.exit(0);
+}
+var init_help = __esm(() => {
   init_ui();
+  init_version();
 });
 
 // ../../node_modules/js-yaml/dist/js-yaml.mjs
@@ -4100,8 +5178,8 @@ async function applyAuth(url, headers, authConfig) {
 function cacheKey(c) {
   return `${c.tokenUrl ?? ""}|${c.clientId ?? ""}|${c.scope ?? ""}`;
 }
-function getCachedToken(config) {
-  const key = cacheKey(config);
+function getCachedToken(config2) {
+  const key = cacheKey(config2);
   const mem = memCaches.get(key);
   if (mem && Date.now() < mem.expires_at - 30000)
     return mem.access_token;
@@ -4120,21 +5198,21 @@ function getCachedToken(config) {
   }
   return null;
 }
-async function getOrRefreshOAuthToken(config) {
-  const cached = getCachedToken(config);
+async function getOrRefreshOAuthToken(config2) {
+  const cached = getCachedToken(config2);
   if (cached)
     return cached;
-  if (!config.tokenUrl || !config.clientId)
+  if (!config2.tokenUrl || !config2.clientId)
     return null;
   const params = new URLSearchParams({
     grant_type: "client_credentials",
-    client_id: config.clientId,
-    client_secret: config.clientSecret ?? ""
+    client_id: config2.clientId,
+    client_secret: config2.clientSecret ?? ""
   });
-  if (config.scope)
-    params.set("scope", config.scope);
+  if (config2.scope)
+    params.set("scope", config2.scope);
   try {
-    const res = await fetch(config.tokenUrl, {
+    const res = await fetch(config2.tokenUrl, {
       method: "POST",
       headers: { "Content-Type": "application/x-www-form-urlencoded" },
       body: params.toString()
@@ -4145,7 +5223,7 @@ async function getOrRefreshOAuthToken(config) {
     if (!data.access_token)
       return null;
     const cache = { access_token: data.access_token, expires_at: Date.now() + (data.expires_in ?? 3600) * 1000 };
-    memCaches.set(cacheKey(config), cache);
+    memCaches.set(cacheKey(config2), cache);
     dbQueries.updateTokenCache(cache);
     return cache.access_token;
   } catch {
@@ -4169,53 +5247,6 @@ var init_engine = __esm(() => {
   memCaches = new Map;
 });
 
-// src/config.ts
-function setServerConfig(c) {
-  config = c;
-}
-function getServerConfig() {
-  return config;
-}
-function updateServerConfig(patch) {
-  config = { ...config, ...patch };
-}
-function getFeatures() {
-  return features;
-}
-function setFeatures(patch) {
-  features = { ...features, ...patch };
-}
-function readonlyViolation(method) {
-  if (!features.readonly)
-    return null;
-  if (SAFE_METHODS.has(method.toUpperCase()))
-    return null;
-  return `Read-only mode is enabled \u2014 ${method.toUpperCase()} requests are blocked. Ask the operator to run /readonly off.`;
-}
-function isAuthorized(req) {
-  if (!config.token)
-    return true;
-  const auth = req.headers.get("authorization");
-  if (auth === `Bearer ${config.token}`)
-    return true;
-  try {
-    return new URL(req.url).searchParams.get("token") === config.token;
-  } catch {
-    return false;
-  }
-}
-var config, features, SAFE_METHODS;
-var init_config = __esm(() => {
-  config = {
-    port: 3388,
-    host: "0.0.0.0",
-    origin: null,
-    token: null
-  };
-  features = { mcp: true, proxy: true, ai: true, readonly: false };
-  SAFE_METHODS = new Set(["GET", "HEAD", "OPTIONS"]);
-});
-
 // src/mcp/server.ts
 function summarizeAuth(type, config2) {
   switch (type) {
@@ -7489,15 +8520,15 @@ var init_repl = __esm(() => {
 // src/commands/start.ts
 var exports_start = {};
 __export(exports_start, {
-  run: () => run6
+  run: () => run16
 });
-import { parseArgs } from "util";
+import { parseArgs as parseArgs2 } from "util";
 import { createInterface } from "readline";
-import { homedir as homedir4 } from "os";
-import { join as join4, dirname } from "path";
+import { homedir as homedir5 } from "os";
+import { join as join5, dirname } from "path";
 import { mkdirSync as mkdirSync2 } from "fs";
-async function run6(overrideOpts) {
-  const { values } = parseArgs({
+async function run16(overrideOpts) {
+  const { values } = parseArgs2({
     args: process.argv.slice(2).filter((a) => a !== "start"),
     options: {
       url: { type: "string" },
@@ -7517,7 +8548,7 @@ async function run6(overrideOpts) {
     strict: false
   });
   if (values.help) {
-    printHelp();
+    printHelp2();
     process.exit(0);
   }
   let specUrl = overrideOpts?.url ?? (values.url ? String(values.url) : null) ?? process.env.WASPER_SPEC_URL ?? null;
@@ -7682,7 +8713,7 @@ async function run6(overrideOpts) {
   ${paint.dim("shutting down")}
 
 `);
-    clearDaemonState().finally(() => {
+    clearDaemonState(PORT).finally(() => {
       db.close();
       server.stop();
       process.exit(0);
@@ -8008,18 +9039,21 @@ function printInteractiveHelp() {
   ${k("/status")}  ${k("/reload")}  ${k("/help")}  ${k("/quit")}
 `);
 }
-function printHelp() {
+function printHelp2() {
   console.log(`
-Usage: wasper [start] [options]
+Usage: wasper start [options]
+
+  Starts wasper in the foreground with an interactive REPL.
+  For background (daemon) mode \u2014 the default \u2014 use: wasper up
 
-  wasper [--url <spec-url>] [--port <port>]    Start in foreground (auto-resumes last spec)
-  wasper start --background                   Start in background
-  wasper stop                                 Stop background server
-  wasper status                               Show server status
+  wasper up [--url <spec>]                    Start daemon in background (default)
+  wasper start [--url <spec>]                 Start in foreground with REPL
+  wasper down                                 Stop the daemon
+  wasper status                               Show daemon status
+  wasper logs [-f]                            Tail server logs
+  wasper service install                      Install as system service (auto-start)
   wasper reload                               Hot-reload the spec
   wasper ls                                   List saved specs (history)
-  wasper use <number|url>                     Start with a saved spec
-  wasper rm  <number|url>                     Remove a spec from history
 
 Options:
   --url, -u        OpenAPI spec URL or local path
@@ -8034,17 +9068,17 @@ Options:
   --no-proxy       Start with the HTTP proxy disabled
   --no-ai          Start with the AI chat endpoint disabled
   --readonly       Block all non-GET upstream requests (agent guardrail)
-  --background, -b Start detached in background
+  --background, -b Start detached in background (same as wasper up)
   --daemon, -d     Same as --background
   -h, --help       Show this help
 
-Interactive mode supports slash commands \u2014 press / and type:
+Interactive REPL slash commands (foreground mode):
   /mcp on|off \xB7 /proxy on|off \xB7 /ai on|off \xB7 /readonly on|off
   /auth use <role> \xB7 /token new \xB7 /spec <url> \xB7 /tail \xB7 /help
 
 Self-hosting:
-  wasper start --url <spec> --origin https://api.example.com --token <secret> -b
-  Then open the studio with ?server=https://api.example.com&token=<secret>
+  wasper up --url <spec> --origin https://api.example.com --token <secret>
+  wasper service install --url <spec> --port 3388
 `);
 }
 function buildScalarHtml(title, req) {
@@ -8079,10 +9113,10 @@ function promptYN(question, defaultYes = true) {
 function claudeDesktopConfigPath() {
   const p = process.platform;
   if (p === "darwin")
-    return join4(homedir4(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
+    return join5(homedir5(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
   if (p === "win32")
-    return join4(process.env.APPDATA ?? join4(homedir4(), "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
-  return join4(homedir4(), ".config", "Claude", "claude_desktop_config.json");
+    return join5(process.env.APPDATA ?? join5(homedir5(), "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+  return join5(homedir5(), ".config", "Claude", "claude_desktop_config.json");
 }
 async function configureClaudeDesktop(mcpUrl) {
   const cfgPath = claudeDesktopConfigPath();
@@ -8156,98 +9190,6 @@ var init_start = __esm(() => {
   SPIN_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 });
 
-// src/commands/use.ts
-var exports_use = {};
-__export(exports_use, {
-  run: () => run7
-});
-async function run7() {
-  const args = process.argv.slice(2).filter((a) => !a.startsWith("-"));
-  const target = args[1];
-  if (!target) {
-    console.error(`
-  Usage: wasper use <number|url>
-`);
-    process.exit(1);
-  }
-  const history = dbQueries.getSpecHistory();
-  let url = null;
-  const num = parseInt(target, 10);
-  if (!isNaN(num) && num >= 1 && num <= history.length) {
-    url = history[num - 1]?.url ?? null;
-  } else if (target.startsWith("http")) {
-    url = target;
-  } else {
-    const match = history.find((r) => r.title?.toLowerCase().includes(target.toLowerCase()));
-    if (match)
-      url = match.url;
-  }
-  if (!url) {
-    console.error(`
-  ${paint.red("\u2717")}  Spec not found: ${target}
-`);
-    console.error(`  Run ${paint.cyan("wasper ls")} to see saved specs.
-`);
-    process.exit(1);
-  }
-  console.log(`
-  ${paint.dim("\u2192")}  Starting with ${paint.cyan(url)}
-`);
-  const { run: startRun } = await Promise.resolve().then(() => (init_start(), exports_start));
-  await startRun({ url });
-}
-var init_use = __esm(() => {
-  init_db();
-  init_ui();
-});
-
-// src/commands/rm.ts
-var exports_rm = {};
-__export(exports_rm, {
-  run: () => run8
-});
-async function run8() {
-  const args = process.argv.slice(2).filter((a) => !a.startsWith("-"));
-  const target = args[1];
-  if (!target) {
-    console.error(`
-  Usage: wasper rm <number|url>
-`);
-    process.exit(1);
-  }
-  const history = dbQueries.getSpecHistory();
-  let id = null;
-  let label = null;
-  const num = parseInt(target, 10);
-  if (!isNaN(num) && num >= 1 && num <= history.length) {
-    const row = history[num - 1];
-    if (row) {
-      id = row.id;
-      label = row.title ?? row.url;
-    }
-  } else {
-    const match = history.find((r) => r.url === target || r.title?.toLowerCase().includes(target.toLowerCase()));
-    if (match) {
-      id = match.id;
-      label = match.title ?? match.url;
-    }
-  }
-  if (!id) {
-    console.error(`
-  ${paint.red("\u2717")}  Spec not found: ${target}
-`);
-    process.exit(1);
-  }
-  dbQueries.deleteSpec(id);
-  console.log(`
-  ${paint.green("\u2713")}  Removed ${paint.dim(label ?? id)}
-`);
-}
-var init_rm = __esm(() => {
-  init_db();
-  init_ui();
-});
-
 // cli.ts
 var rawArgs = process.argv.slice(2);
 if (rawArgs.includes("--version") || rawArgs.includes("-v")) {
@@ -8255,20 +9197,53 @@ if (rawArgs.includes("--version") || rawArgs.includes("-v")) {
   console.log(VERSION2);
   process.exit(0);
 }
-var subcommand = rawArgs.find((a) => !a.startsWith("-")) ?? "start";
+var IS_DAEMON_CHILD = rawArgs.includes("--_daemon");
+var SUBCOMMANDS = new Set([
+  "up",
+  "down",
+  "stop",
+  "status",
+  "ps",
+  "reload",
+  "logs",
+  "ls",
+  "list",
+  "use",
+  "rm",
+  "remove",
+  "mcp",
+  "proxy",
+  "ai",
+  "readonly",
+  "auth",
+  "spec",
+  "service",
+  "update",
+  "start",
+  "help"
+]);
+var firstPositional = rawArgs.find((a) => !a.startsWith("-"));
+var subcommand = firstPositional && SUBCOMMANDS.has(firstPositional) ? firstPositional : IS_DAEMON_CHILD ? "start" : "up";
 switch (subcommand) {
+  case "up":
+    await Promise.resolve().then(() => (init_up(), exports_up)).then((m) => m.run());
+    break;
+  case "ps":
+    await Promise.resolve().then(() => (init_ps(), exports_ps)).then((m) => m.run());
+    break;
+  case "down":
   case "stop":
     await Promise.resolve().then(() => (init_stop(), exports_stop)).then((m) => m.run());
     break;
-  case "update":
-    await Promise.resolve().then(() => (init_update(), exports_update)).then((m) => m.run());
-    break;
   case "status":
     await Promise.resolve().then(() => (init_status(), exports_status)).then((m) => m.run());
     break;
   case "reload":
     await Promise.resolve().then(() => (init_reload(), exports_reload)).then((m) => m.run());
     break;
+  case "logs":
+    await Promise.resolve().then(() => (init_logs(), exports_logs)).then((m) => m.run());
+    break;
   case "ls":
   case "list":
     await Promise.resolve().then(() => (init_ls(), exports_ls)).then((m) => m.run());
@@ -8280,6 +9255,27 @@ switch (subcommand) {
   case "remove":
     await Promise.resolve().then(() => (init_rm(), exports_rm)).then((m) => m.run());
     break;
+  case "mcp":
+  case "proxy":
+  case "ai":
+  case "readonly":
+    await Promise.resolve().then(() => (init_feature(), exports_feature)).then((m) => m.run());
+    break;
+  case "auth":
+    await Promise.resolve().then(() => (init_auth_cmd(), exports_auth_cmd)).then((m) => m.run());
+    break;
+  case "spec":
+    await Promise.resolve().then(() => (init_spec_cmd(), exports_spec_cmd)).then((m) => m.run());
+    break;
+  case "service":
+    await Promise.resolve().then(() => (init_service(), exports_service)).then((m) => m.run());
+    break;
+  case "update":
+    await Promise.resolve().then(() => (init_update(), exports_update)).then((m) => m.run());
+    break;
+  case "help":
+    await Promise.resolve().then(() => (init_help(), exports_help)).then((m) => m.run());
+    break;
   case "start":
   default:
     await Promise.resolve().then(() => (init_start(), exports_start)).then((m) => m.run());