@langwatch/mcp-server 1.0.0 → 2.1.0

package/dist/report-issue-DXJ6TPTC.js

@@ -1,412 +0,0 @@
-import {
-  getConfig
-} from "./chunk-KOO5733S.js";
-import "./chunk-BJ7B4R26.js";
-
-// ../langwatch/packages/redaction/src/markers.ts
-var SECRET_MARKER = "[SECRET]";
-function formatPiiMarker(entity) {
-  return `[${entity}]`;
-}
-
-// ../langwatch/packages/redaction/src/secrets.ts
-var SECRETS_REDACTION_MARKER = SECRET_MARKER;
-var REPLACEMENT = SECRETS_REDACTION_MARKER;
-var MAX_SCAN_LENGTH = 25e4;
-var VALUE_RULES = [
-  {
-    id: "pem_private_key",
-    description: "PEM private key block",
-    regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP )?PRIVATE KEY-----/g
-  },
-  {
-    id: "aws_access_key_id",
-    description: "AWS access key id",
-    regex: /\b(?:AKIA|ASIA|AGPA|AIDA|AROA|ANPA|ANVA)[0-9A-Z]{16}\b/g
-  },
-  {
-    id: "github_token",
-    description: "GitHub token",
-    regex: /\b(?:gh[posru]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{60,})\b/g
-  },
-  {
-    // Provider secret keys share the `sk-` namespace: OpenAI (`sk-proj-...`,
-    // legacy `sk-...`), Anthropic (`sk-ant-...`), LangWatch (`sk-lw-...`), and
-    // others. The body is base64url, so it includes `_` and `-` and has no inner
-    // word boundary; matching the whole token and stopping at the next non-key
-    // char catches modern keys a `[A-Za-z0-9]+\b` rule misses.
-    id: "provider_api_key",
-    description: "Provider API key (sk-...)",
-    regex: /\bsk-[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])/g
-  },
-  {
-    id: "stripe_secret_key",
-    description: "Stripe secret key",
-    regex: /\b[rs]k_(?:live|test)_[A-Za-z0-9]{16,}\b/g
-  },
-  {
-    id: "slack_token",
-    description: "Slack token",
-    regex: /\bxox[abposr]-[A-Za-z0-9-]{10,}\b/g
-  },
-  {
-    id: "google_api_key",
-    description: "Google API key",
-    regex: /\bAIza[0-9A-Za-z_-]{35}\b/g
-  },
-  {
-    id: "jwt",
-    description: "JSON Web Token",
-    regex: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g
-  },
-  {
-    id: "url_credentials",
-    description: "Password embedded in a connection URL",
-    // scheme://user:password@host -> keep everything but the password. The
-    // scheme length is bounded (real schemes are short) so a long run of
-    // name-like characters costs constant backtracking per position instead
-    // of a quadratic scan on huge inputs.
-    regex: /([a-z][a-z0-9+.-]{0,30}:\/\/[^\s:@/]+:)([^\s:@/]+)(@)/gi,
-    render: (_m, prefix, _password, at) => `${prefix}${REPLACEMENT}${at}`
-  },
-  {
-    id: "bearer_token",
-    description: "Bearer authorization token",
-    regex: /\b(Bearer\s+)[A-Za-z0-9._~+/-]{10,}=*/gi,
-    render: (_m, prefix) => `${prefix}${REPLACEMENT}`
-  }
-];
-var BUILTIN_SECRET_RULES = VALUE_RULES.map(({ id, description }) => ({ id, description }));
-var SENSITIVE_KEY_REGEX = /(?:^|[._-])(?:password|passwd|pwd|secret|api[_-]?key|apikey|access[_-]?token|auth[_-]?token|authorization|auth|bearer|credentials?|private[_-]?key|client[_-]?secret|db[_-]?password|connection[_-]?string|session[_-]?token|refresh[_-]?token|set[_-]?cookie|cookie|x-api-key)(?:$|[._-])/i;
-function isSensitiveAttributeKey(key) {
-  return SENSITIVE_KEY_REGEX.test(key);
-}
-var VALUE_BOUNDARY = /["'`]/;
-function keptLengthAtBoundary(match) {
-  const index = match.search(VALUE_BOUNDARY);
-  return index === -1 ? match.length : index;
-}
-function redactSecretsInText({
-  text,
-  customPatterns = []
-}) {
-  if (typeof text !== "string" || text.length === 0 || text.length > MAX_SCAN_LENGTH) {
-    return { text, redactedCount: 0 };
-  }
-  let redactedCount = 0;
-  let result = text;
-  for (const rule of VALUE_RULES) {
-    result = result.replace(rule.regex, (...args) => {
-      if (rule.render) {
-        redactedCount++;
-        return rule.render(...args);
-      }
-      const full = args[0] ?? "";
-      const kept = keptLengthAtBoundary(full);
-      if (kept === 0) return full;
-      redactedCount++;
-      return REPLACEMENT + full.slice(kept);
-    });
-  }
-  for (const pattern of customPatterns) {
-    result = result.replace(pattern, (...args) => {
-      const full = args[0] ?? "";
-      const kept = keptLengthAtBoundary(full);
-      if (kept === 0) return full;
-      redactedCount++;
-      return REPLACEMENT + full.slice(kept);
-    });
-  }
-  return { text: result, redactedCount };
-}
-
-// ../langwatch/packages/redaction/src/sessionReport.ts
-var EMAIL_MARKER = formatPiiMarker("EMAIL_ADDRESS");
-var PHONE_MARKER = formatPiiMarker("PHONE_NUMBER");
-var CARD_MARKER = formatPiiMarker("CREDIT_CARD");
-var IP_MARKER = formatPiiMarker("IP_ADDRESS");
-var ENV_SECRET_NAME_REGEX = /(?:^|[._-])(?:key|token|secret|password|passwd|pwd|credentials?|auth)(?:$|[._-])/i;
-var MIN_ENV_SECRET_LENGTH = 8;
-function collectSensitiveEnvValues(env) {
-  const values = /* @__PURE__ */ new Set();
-  for (const [name, value] of Object.entries(env)) {
-    if (!value) continue;
-    const trimmed = value.trim();
-    if (trimmed.length < MIN_ENV_SECRET_LENGTH) continue;
-    if (!ENV_SECRET_NAME_REGEX.test(name)) continue;
-    values.add(trimmed);
-  }
-  return [...values].sort((a, b) => b.length - a.length);
-}
-var EMAIL_REGEX = /[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9.-]{1,253}\.[A-Za-z]{2,24}/g;
-var INTL_PHONE_REGEX = /(?<![\w.+-])\+[1-9]\d{0,2}(?:[\s.-]?(?:\(\d{1,4}\)[\s.-]?)?\d{1,4}){1,5}(?!\d)/g;
-var NATIONAL_PHONE_REGEX = /(?<!\d)(?:\(\d{3}\)[\s.-]?|\d{3}[.-])\d{3}[.-]\d{4}(?!\d)/g;
-var CARD_REGEX = /(?<![\d.-])\d(?:[ -]?\d){12,18}(?![\d.-])/g;
-var IPV4_REGEX = /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\b/g;
-var countDigits = (value) => value.replace(/\D/g, "").length;
-function passesLuhn(digits) {
-  let sum = 0;
-  let double = false;
-  for (let i = digits.length - 1; i >= 0; i--) {
-    let d = digits.charCodeAt(i) - 48;
-    if (double) {
-      d *= 2;
-      if (d > 9) d -= 9;
-    }
-    sum += d;
-    double = !double;
-  }
-  return sum % 10 === 0;
-}
-function isCardNumber(candidate) {
-  const digits = candidate.replace(/[ -]/g, "");
-  if (!/^\d+$/.test(digits)) return false;
-  const separated = /[ -]/.test(candidate);
-  if (!separated && (digits.length < 14 || digits.length > 16)) return false;
-  if (digits.length < 13 || digits.length > 19) return false;
-  return passesLuhn(digits);
-}
-function isPrivateOrLocalIp(ip) {
-  const parts = ip.split(".").map(Number);
-  const [a = 0, b = 0] = parts;
-  if (a === 0 || a === 10 || a === 127) return true;
-  if (a === 192 && b === 168) return true;
-  if (a === 172 && b >= 16 && b <= 31) return true;
-  if (a === 169 && b === 254) return true;
-  if (a === 100 && b >= 64 && b <= 127) return true;
-  if (a >= 224) return true;
-  return false;
-}
-var SLICE_TARGET = 2e5;
-function sliceLongText(text) {
-  if (text.length <= SLICE_TARGET) return [text];
-  const slices = [];
-  let start = 0;
-  while (start < text.length) {
-    let end = Math.min(start + SLICE_TARGET, text.length);
-    if (end < text.length) {
-      const newline = text.lastIndexOf("\n", end);
-      if (newline > start + SLICE_TARGET / 2) end = newline;
-    }
-    slices.push(text.slice(start, end));
-    start = end;
-  }
-  return slices;
-}
-function redactPiiPatterns(text) {
-  let redactedCount = 0;
-  let result = text.replace(EMAIL_REGEX, () => {
-    redactedCount++;
-    return EMAIL_MARKER;
-  });
-  result = result.replace(CARD_REGEX, (match) => {
-    if (!isCardNumber(match)) return match;
-    redactedCount++;
-    return CARD_MARKER;
-  });
-  result = result.replace(INTL_PHONE_REGEX, (match) => {
-    const digits = countDigits(match);
-    if (digits < 7 || digits > 15) return match;
-    redactedCount++;
-    return PHONE_MARKER;
-  });
-  result = result.replace(NATIONAL_PHONE_REGEX, () => {
-    redactedCount++;
-    return PHONE_MARKER;
-  });
-  result = result.replace(IPV4_REGEX, (match) => {
-    if (isPrivateOrLocalIp(match)) return match;
-    redactedCount++;
-    return IP_MARKER;
-  });
-  return { text: result, redactedCount };
-}
-function scrubEnvLiterals(text, envValues) {
-  let result = text;
-  let redactedCount = 0;
-  for (const value of envValues) {
-    if (!result.includes(value)) continue;
-    const parts = result.split(value);
-    redactedCount += parts.length - 1;
-    result = parts.join(SECRET_MARKER);
-  }
-  return { text: result, redactedCount };
-}
-function redactReportText({
-  text,
-  envValues = []
-}) {
-  if (typeof text !== "string" || text.length === 0) {
-    return { text, redactedCount: 0 };
-  }
-  const envPass = scrubEnvLiterals(text, envValues);
-  let redactedCount = envPass.redactedCount;
-  const pieces = sliceLongText(envPass.text).map((slice) => {
-    const secrets = redactSecretsInText({ text: slice });
-    redactedCount += secrets.redactedCount;
-    const pii = redactPiiPatterns(secrets.text);
-    redactedCount += pii.redactedCount;
-    return pii.text;
-  });
-  return { text: pieces.join(""), redactedCount };
-}
-function redactJsonValue(value, envValues, count) {
-  if (typeof value === "string") {
-    const result = redactReportText({ text: value, envValues });
-    count.redacted += result.redactedCount;
-    return result.text;
-  }
-  if (Array.isArray(value)) {
-    return value.map((item) => redactJsonValue(item, envValues, count));
-  }
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [key, entry] of Object.entries(value)) {
-      if (isSensitiveAttributeKey(key) && entry !== null && entry !== void 0) {
-        out[key] = SECRET_MARKER;
-        count.redacted++;
-        continue;
-      }
-      out[key] = redactJsonValue(entry, envValues, count);
-    }
-    return out;
-  }
-  return value;
-}
-function redactSessionJsonl({
-  jsonl,
-  envValues = []
-}) {
-  let redactedCount = 0;
-  const lines = jsonl.split("\n").map((line) => {
-    if (line.trim().length === 0) return line;
-    try {
-      const parsed = JSON.parse(line);
-      const count = { redacted: 0 };
-      const redacted = redactJsonValue(parsed, envValues, count);
-      redactedCount += count.redacted;
-      return JSON.stringify(redacted);
-    } catch {
-      const result = redactReportText({ text: line, envValues });
-      redactedCount += result.redactedCount;
-      return result.text;
-    }
-  });
-  return { text: lines.join("\n"), redactedCount };
-}
-function truncateJsonlToByteBudget({
-  jsonl,
-  maxBytes
-}) {
-  const encoder = new TextEncoder();
-  if (encoder.encode(jsonl).length <= maxBytes) {
-    return { text: jsonl, truncated: false };
-  }
-  const lines = jsonl.split("\n");
-  const kept = [];
-  let used = 0;
-  for (let i = lines.length - 1; i >= 0; i--) {
-    const line = lines[i] ?? "";
-    const size = encoder.encode(line).length + 1;
-    if (used + size > maxBytes) break;
-    kept.unshift(line);
-    used += size;
-  }
-  return { text: kept.join("\n"), truncated: true };
-}
-var REDACTION_AUDIT_URL = "https://github.com/langwatch/langwatch/blob/main/langwatch/packages/redaction/src/sessionReport.ts";
-
-// src/tools/report-issue.ts
-var MAX_SESSION_BYTES = 8 * 1024 * 1024;
-var REQUEST_TIMEOUT_MS = 6e4;
-function redactReport(params) {
-  const envValues = collectSensitiveEnvValues(process.env);
-  let redactedCount = 0;
-  const titleResult = redactReportText({ text: params.title, envValues });
-  redactedCount += titleResult.redactedCount;
-  let summary;
-  if (params.summary) {
-    const result = redactReportText({ text: params.summary, envValues });
-    summary = result.text;
-    redactedCount += result.redactedCount;
-  }
-  let sessionData;
-  let sessionTruncated = false;
-  if (params.session_content) {
-    const redacted = redactSessionJsonl({
-      jsonl: params.session_content,
-      envValues
-    });
-    redactedCount += redacted.redactedCount;
-    const truncated = truncateJsonlToByteBudget({
-      jsonl: redacted.text,
-      maxBytes: MAX_SESSION_BYTES
-    });
-    sessionData = truncated.text;
-    sessionTruncated = truncated.truncated;
-  }
-  return {
-    title: titleResult.text,
-    summary,
-    sessionData,
-    sessionTruncated,
-    redactedCount
-  };
-}
-async function deliverReport(report, params) {
-  const config = getConfig();
-  const endpoint = config.endpoint.replace(/\/+$/, "");
-  const response = await fetch(`${endpoint}/api/bug-reports`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      ...config.apiKey ? { authorization: `Bearer ${config.apiKey}` } : {}
-    },
-    body: JSON.stringify({
-      source: "mcp",
-      kind: report.sessionData ? "full_session" : "summary",
-      title: report.title,
-      ...report.summary ? { summary: report.summary } : {},
-      ...report.sessionData ? { sessionData: report.sessionData, sessionTruncated: report.sessionTruncated } : {},
-      ...params.agent ? { agent: params.agent } : {},
-      ...params.contact_email ? { contactEmail: params.contact_email } : {}
-    }),
-    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-  }).catch(() => {
-    throw new Error(
-      `Could not reach ${endpoint} to deliver the report. Retry in a moment; if it keeps failing, email support@langwatch.ai with the same content.`
-    );
-  });
-  if (!response.ok) {
-    const body = (await response.text().catch(() => "")).slice(0, 300);
-    throw new Error(
-      `The reports endpoint answered HTTP ${response.status}: ${body}. Retry in a moment; if it keeps failing, email support@langwatch.ai.`
-    );
-  }
-  const { id } = await response.json();
-  return id;
-}
-async function handleReportIssue(params) {
-  if (!params.user_approved) {
-    throw new Error(
-      `This sends a report to the LangWatch team, so the user must approve it first. Ask the user: "Can I send this issue report to LangWatch to help them fix it?" If they agree, call again with user_approved=true. Secrets and personal data are redacted locally before sending; audit the rules at ${REDACTION_AUDIT_URL}`
-    );
-  }
-  if (!params.summary?.trim() && !params.session_content?.trim()) {
-    throw new Error(
-      "Nothing to report: pass a summary (what you tried, verbatim errors, what you had to figure out), session_content, or both."
-    );
-  }
-  const report = redactReport(params);
-  const id = await deliverReport(report, params);
-  return [
-    `Report sent to the LangWatch team (${id}). Thank you!`,
-    `Redacted ${report.redactedCount} sensitive value${report.redactedCount === 1 ? "" : "s"} locally before sending.`,
-    ...report.sessionTruncated ? ["The session content was truncated to the most recent activity to fit the upload limit."] : [],
-    "Reports like this directly shape what gets fixed next."
-  ].join(" ");
-}
-export {
-  handleReportIssue
-};
-//# sourceMappingURL=report-issue-DXJ6TPTC.js.map

package/dist/run-agent-RBSIFKRT.js

@@ -1,37 +0,0 @@
-import {
-  runAgent
-} from "./chunk-CE6QMZOP.js";
-import "./chunk-5UWY24RP.js";
-import "./chunk-KOO5733S.js";
-import "./chunk-BJ7B4R26.js";
-
-// src/tools/run-agent.ts
-async function handleRunAgent(params) {
-  let parsedInput = {};
-  if (params.input) {
-    try {
-      parsedInput = JSON.parse(params.input);
-    } catch {
-      return "Error: `input` must be a valid JSON object.";
-    }
-  }
-  const { agentType, result } = await runAgent(params.id, parsedInput);
-  const lines = [];
-  lines.push(`Agent executed successfully (type: ${agentType}).
-`);
-  if (typeof result === "object" && result !== null) {
-    const output = result.output;
-    if (output !== void 0) {
-      lines.push("**Output:**");
-      lines.push(typeof output === "string" ? output : JSON.stringify(output, null, 2));
-    } else {
-      lines.push("**Result:**");
-      lines.push(JSON.stringify(result, null, 2));
-    }
-  }
-  return lines.join("\n");
-}
-export {
-  handleRunAgent
-};
-//# sourceMappingURL=run-agent-RBSIFKRT.js.map

package/dist/run-suite-K3DNQ3SE.js

@@ -1,30 +0,0 @@
-import {
-  runSuite
-} from "./chunk-WDH5P5RF.js";
-import "./chunk-5UWY24RP.js";
-import "./chunk-KOO5733S.js";
-import "./chunk-BJ7B4R26.js";
-
-// src/tools/run-suite.ts
-async function handleRunSuite(params) {
-  const result = await runSuite(params.id);
-  const lines = [];
-  lines.push(`Suite run scheduled successfully.`);
-  lines.push("");
-  lines.push(`**Batch Run ID**: ${result.batchRunId}`);
-  lines.push(`**Jobs**: ${result.jobCount}`);
-  lines.push(`**Set ID**: ${result.setId}`);
-  if (result.skippedArchived.scenarios.length > 0) {
-    lines.push(`
-\u26A0\uFE0F Skipped archived scenarios: ${result.skippedArchived.scenarios.join(", ")}`);
-  }
-  if (result.skippedArchived.targets.length > 0) {
-    lines.push(`\u26A0\uFE0F Skipped archived targets: ${result.skippedArchived.targets.join(", ")}`);
-  }
-  lines.push("\nView results in the LangWatch dashboard under Simulations.");
-  return lines.join("\n");
-}
-export {
-  handleRunSuite
-};
-//# sourceMappingURL=run-suite-K3DNQ3SE.js.map

package/dist/update-prompt-RQFTEO7Y.js

@@ -1,25 +0,0 @@
-import {
-  updatePrompt
-} from "./chunk-5UWY24RP.js";
-import "./chunk-KOO5733S.js";
-import "./chunk-BJ7B4R26.js";
-
-// src/tools/update-prompt.ts
-async function handleUpdatePrompt(params) {
-  const { idOrHandle, ...data } = params;
-  const result = await updatePrompt(idOrHandle, data);
-  const lines = [];
-  lines.push("Prompt updated successfully!\n");
-  if (result.id) lines.push(`**ID**: ${result.id}`);
-  if (result.handle) lines.push(`**Handle**: ${result.handle}`);
-  if (result.latestVersionNumber != null)
-    lines.push(`**Version**: v${result.latestVersionNumber}`);
-  lines.push(`**Commit**: ${params.commitMessage}`);
-  if (params.tags && params.tags.length > 0)
-    lines.push(`**Tags**: ${params.tags.join(", ")}`);
-  return lines.join("\n");
-}
-export {
-  handleUpdatePrompt
-};
-//# sourceMappingURL=update-prompt-RQFTEO7Y.js.map

package/dist/update-suite-TRGGLNR7.js

@@ -1,40 +0,0 @@
-import {
-  updateSuite
-} from "./chunk-WDH5P5RF.js";
-import "./chunk-5UWY24RP.js";
-import "./chunk-KOO5733S.js";
-import "./chunk-BJ7B4R26.js";
-
-// src/tools/update-suite.ts
-async function handleUpdateSuite(params) {
-  let parsedTargets;
-  if (params.targets) {
-    try {
-      parsedTargets = JSON.parse(params.targets);
-    } catch {
-      return "Error: `targets` must be a valid JSON array.";
-    }
-  }
-  const suite = await updateSuite({
-    id: params.id,
-    name: params.name,
-    description: params.description,
-    scenarioIds: params.scenarioIds,
-    targets: parsedTargets,
-    repeatCount: params.repeatCount,
-    labels: params.labels
-  });
-  return [
-    `Suite "${suite.name}" updated successfully.`,
-    "",
-    `**ID**: ${suite.id}`,
-    `**Slug**: ${suite.slug}`,
-    `**Scenarios**: ${suite.scenarioIds.length}`,
-    `**Targets**: ${suite.targets.length}`,
-    `**Repeat**: ${suite.repeatCount}x`
-  ].join("\n");
-}
-export {
-  handleUpdateSuite
-};
-//# sourceMappingURL=update-suite-TRGGLNR7.js.map

package/pnpm-workspace.yaml

@@ -1,34 +0,0 @@
-# Standalone workspace: mcp-server is installed on its own in CI, the
-# release workflow, and its Dockerfile. Shared source-only contract packages
-# are bundled by tsup for publish.
-packages:
-  - .
-  - ../packages/handled-error
-  - ../langwatch/packages/redaction
-  - ../langwatch/packages/ssrf
-
-minimumReleaseAge: 10080
-
-overrides:
-  # Security: protobufjs code execution + prototype-pollution + DoS + Any-expansion DoS + property shadowing
-  # (GHSA-xq3m-2v4x-88gg, GHSA-66ff-xgx4-vchm, GHSA-75px-5xx7-5xc7,
-  # GHSA-jvwf-75h9-cwgg, GHSA-685m-2w69-288q, GHSA-wcpc-wj8m-hjx6, GHSA-f38q-mgvj-vph7)
-  "protobufjs": ">=7.5.6 <8.0.0 || >=8.6.0"
-  # Security: langsmith untrusted manifest deserialization (GHSA-3644-q5cj-c5c7).
-  # langsmith is only a transitive of the @langwatch/scenario devDependency
-  # (via langchain / @langchain/core); pinned to a known-safe version.
-  "langsmith": "0.6.0"
-  # Security: esbuild Deno binary integrity RCE + dev-server file read (GHSA-gv7w-rqvm-qjhr / GHSA-g7r4-m6w7-qqqr)
-  "esbuild@<0.28.1": ">=0.28.1"
-  # Security: vite dev-server file read / middleware path bypass
-  "vite@>=7.0.0 <7.3.5": ">=7.3.5 <8"
-  # Security: hono request smuggling / path confusion
-  "hono@<4.12.25": ">=4.12.25"
-  # Security: fast-uri path traversal + host confusion
-  "fast-uri@<3.1.2": "3.1.2"
-  liquidjs: ">=10.26.0"
-  # Security: uuid missing buffer bounds check in v3/v5/v6 (GHSA-w5hq-g745-h8pq)
-  "uuid@<11.1.1": ">=11.1.1 <12"
-
-onlyBuiltDependencies:
-  - node-pty

package/src/langwatch-api-suites.ts

@@ -1,118 +0,0 @@
-import { makeRequest } from "./langwatch-api.js";
-
-// --- Suite types ---
-
-export interface SuiteTarget {
-  type: "prompt" | "http" | "code" | "workflow";
-  referenceId: string;
-}
-
-export interface SuiteSummary {
-  id: string;
-  name: string;
-  slug: string;
-  description: string | null;
-  scenarioIds: string[];
-  targets: SuiteTarget[];
-  repeatCount: number;
-  labels: string[];
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface SuiteRunResult {
-  scheduled: boolean;
-  batchRunId: string;
-  setId: string;
-  jobCount: number;
-  skippedArchived: {
-    scenarios: string[];
-    targets: string[];
-  };
-  items: Array<{
-    scenarioRunId: string;
-    scenarioId: string;
-    target: SuiteTarget;
-    name: string | null;
-  }>;
-}
-
-export interface SuiteArchiveResponse {
-  id: string;
-  archived: boolean;
-}
-
-// --- Suite API functions ---
-
-/** Lists all suites (run plans) in the project. */
-export async function listSuites(): Promise<SuiteSummary[]> {
-  return makeRequest("GET", "/api/suites") as Promise<SuiteSummary[]>;
-}
-
-/** Retrieves a single suite by ID. */
-export async function getSuite(id: string): Promise<SuiteSummary> {
-  return makeRequest(
-    "GET",
-    `/api/suites/${encodeURIComponent(id)}`
-  ) as Promise<SuiteSummary>;
-}
-
-/** Creates a new suite. */
-export async function createSuite(data: {
-  name: string;
-  description?: string;
-  scenarioIds: string[];
-  targets: SuiteTarget[];
-  repeatCount?: number;
-  labels?: string[];
-}): Promise<SuiteSummary> {
-  return makeRequest("POST", "/api/suites", data) as Promise<SuiteSummary>;
-}
-
-/** Updates an existing suite. */
-export async function updateSuite(params: {
-  id: string;
-  name?: string;
-  description?: string | null;
-  scenarioIds?: string[];
-  targets?: SuiteTarget[];
-  repeatCount?: number;
-  labels?: string[];
-}): Promise<SuiteSummary> {
-  const { id, ...data } = params;
-  return makeRequest(
-    "PATCH",
-    `/api/suites/${encodeURIComponent(id)}`,
-    data
-  ) as Promise<SuiteSummary>;
-}
-
-/** Duplicates a suite. */
-export async function duplicateSuite(id: string): Promise<SuiteSummary> {
-  return makeRequest(
-    "POST",
-    `/api/suites/${encodeURIComponent(id)}/duplicate`
-  ) as Promise<SuiteSummary>;
-}
-
-/** Triggers a suite run. */
-export async function runSuite(
-  id: string,
-  idempotencyKey?: string
-): Promise<SuiteRunResult> {
-  return makeRequest(
-    "POST",
-    `/api/suites/${encodeURIComponent(id)}/run`,
-    { idempotencyKey: idempotencyKey ?? `mcp-${Date.now()}-${Math.random().toString(36).slice(2)}` }
-  ) as Promise<SuiteRunResult>;
-}
-
-/** Archives (soft-deletes) a suite. */
-export async function archiveSuite(
-  id: string
-): Promise<SuiteArchiveResponse> {
-  return makeRequest(
-    "DELETE",
-    `/api/suites/${encodeURIComponent(id)}`
-  ) as Promise<SuiteArchiveResponse>;
-}