@langwatch/mcp-server 2.1.0 → 3.0.0

package/dist/{report-issue-RHZZ33IS.js → report-issue-N7ND5TM6.js}

@@ -1,8 +1,64 @@
+import {
+  LANGWATCH_API_VERSION
+} from "./chunk-7CZQDZ2K.js";
 import {
   getConfig
-} from "./chunk-WT4PO4A3.js";
+} from "./chunk-DULFP3MK.js";
 import "./chunk-SAS5OB7F.js";
 
+// ../../packages/redaction/src/piiEntities.ts
+var ESSENTIAL_PII_ENTITIES = [
+  "EMAIL_ADDRESS",
+  "IP_ADDRESS",
+  "CREDIT_CARD",
+  "IBAN_CODE",
+  "CRYPTO",
+  "PHONE_NUMBER",
+  "US_SSN",
+  "US_ITIN",
+  "US_PASSPORT",
+  "US_BANK_NUMBER",
+  "US_DRIVER_LICENSE",
+  "MEDICAL_LICENSE",
+  "UK_NHS",
+  "SG_NRIC_FIN",
+  "AU_ABN",
+  "AU_TFN",
+  "IN_PAN",
+  "IN_AADHAAR",
+  "BR_CPF"
+];
+var PRESIDIO_STRICT_ENTITIES = [
+  "CREDIT_CARD",
+  "CRYPTO",
+  "EMAIL_ADDRESS",
+  "IBAN_CODE",
+  "IP_ADDRESS",
+  "LOCATION",
+  "PERSON",
+  "PHONE_NUMBER",
+  "MEDICAL_LICENSE",
+  "US_BANK_NUMBER",
+  "US_DRIVER_LICENSE",
+  "US_ITIN",
+  "US_PASSPORT",
+  "US_SSN",
+  "UK_NHS",
+  "SG_NRIC_FIN",
+  "AU_ABN",
+  "AU_ACN",
+  "AU_TFN",
+  "AU_MEDICARE",
+  "IN_PAN",
+  "IN_AADHAAR",
+  "IN_VEHICLE_REGISTRATION",
+  "IN_VOTER",
+  "IN_PASSPORT"
+];
+var STRICT_ONLY_PII_ENTITIES = PRESIDIO_STRICT_ENTITIES.filter(
+  (entity) => !new Set(ESSENTIAL_PII_ENTITIES).has(entity)
+);
+
 // ../../packages/redaction/src/markers.ts
 var SECRET_MARKER = "[SECRET]";
 function formatPiiMarker(entity) {
@@ -42,18 +98,10 @@ function countCharClasses(value) {
 var TOKEN_START = String.raw`(?<![A-Za-z0-9_-])`;
 var TOKEN_END = String.raw`(?![A-Za-z0-9_-])`;
 var VENDOR_KEY_PATTERNS = [
-  // LangWatch's own API, ingest and legacy personal-access tokens, minted as
-  // `{prefix}{lookupId}_{secret}` by
-  // platform/app/src/server/api-key/api-key-token.utils.ts. Matched on the
-  // prefix plus three body characters, like every other known vendor, so a
-  // truncated or short-bodied one still redacts: `sk-lw-` would otherwise reach
-  // only the generic `sk-` rule and its 20-character floor, and `ik-lw-`
-  // nothing at all. The three-character floor is what keeps the bare prefix,
-  // which documentation and error messages print on its own, from reading as a
-  // key.
-  // The prefixes are duplicated rather than imported because this package is
-  // shared with the SDK and stays dependency-free; a test pins them to the
-  // constants so the two cannot drift.
+  // LangWatch's own token prefixes, minted by modules/api-key/contract/src/api-key.tokens.ts.
+  // The 3-body-char floor keeps a bare prefix (printed alone in docs/errors) from matching as a
+  // key. Duplicated here rather than imported so this package stays dependency-free; a test pins
+  // them to the constants so the two cannot drift.
   String.raw`(?:sk|ik|pat|vk)-lw-[A-Za-z0-9_-]{3,}`,
   // GitLab personal, project, deploy, runner and agent tokens.
   String.raw`gl(?:pat|rt|dt|soat|ptt|cbt|imt|agent|ffct)-[A-Za-z0-9_-]{20,}`,
@@ -110,8 +158,30 @@ function isKeyShapedBody(body) {
   }
   const { lower, upper, digit } = countCharClasses(body);
   if (lower < 2 || upper < 2 || digit < 2) return false;
+  if (isWordSlug(body)) return false;
   return shannonEntropyBits(body) >= SHAPED_TOKEN_MIN_ENTROPY;
 }
+var SLUG_MIN_SEGMENTS = 4;
+var SLUG_LETTERS_SEGMENT = /^[A-Za-z]{1,12}$/;
+var SLUG_TAG_SEGMENT = /^[A-Za-z0-9]{1,6}$/;
+var SLUG_WORD_SEGMENT = /^(?:[a-z]{4,}|[A-Z]{4,}|[A-Z][a-z]{3,})$/;
+var SLUG_RANDOM_SEGMENT = /^(?=.*[a-z])(?=.*[A-Z])(?=.*[0-9])/;
+var SLUG_MAX_RANDOM_SEGMENTS = 1;
+var SLUG_MIN_WORDS = 2;
+function isWordSlug(body) {
+  const segments = body.split(/[-_]/);
+  if (segments.length < SLUG_MIN_SEGMENTS) return false;
+  let words = 0;
+  let randomLooking = 0;
+  for (const segment of segments) {
+    if (!SLUG_LETTERS_SEGMENT.test(segment) && !SLUG_TAG_SEGMENT.test(segment)) {
+      return false;
+    }
+    if (SLUG_WORD_SEGMENT.test(segment)) words += 1;
+    if (SLUG_RANDOM_SEGMENT.test(segment)) randomLooking += 1;
+  }
+  return words >= SLUG_MIN_WORDS && randomLooking <= SLUG_MAX_RANDOM_SEGMENTS;
+}
 var DIGEST_PREFIXES = /* @__PURE__ */ new Set([
   "sha1",
   "sha224",
@@ -339,24 +409,15 @@ var VALUE_RULES = [
   {
     id: "url_credentials",
     description: "Password embedded in a connection URL",
-    // scheme://user:password@host -> keep everything but the password. The
-    // scheme length is bounded (real schemes are short) so a long run of
-    // name-like characters costs constant backtracking per position instead
-    // of a quadratic scan on huge inputs.
-    //
-    // The scheme sits in a lookbehind so that the first character the engine
-    // must find is the literal `:`. With the scheme inside the match the
-    // pattern starts with a character class, every lowercase letter in the
-    // text is a candidate start, and each one costs up to 30 characters of
-    // scheme scan before it fails: 6.2 ms on a 200 KB payload, more than every
-    // other rule together. Anchored on `:` the same payload costs 0.09 ms.
-    // The scheme stays outside the match and therefore untouched, which is
-    // what the rule already did with it.
+    // scheme://user:password@host -> keep everything but the password. The scheme sits in a
+    // lookbehind so the engine anchors on the literal `:` instead of scanning from every
+    // lowercase letter: unanchored this cost 6.2ms on a 200KB payload (more than every other
+    // rule combined); anchored, 0.09ms. The scheme stays outside the match and untouched.
     regex: /(?<=[a-z][a-z0-9+.-]{0,30})(:\/\/[^\s:@/]+:)([^\s:@/]+)(@)/gi,
     // The same scheme the lookbehind reads, so a reported match still spans the
     // whole URL rather than starting at the colon.
     precededBy: /[a-z][a-z0-9+.-]{0,30}$/i,
-    render: (_m, prefix, _password, at) => `${prefix}${REPLACEMENT}${at}`
+    render: (...[, prefix = "", , at = ""]) => `${prefix}${REPLACEMENT}${at}`
   },
   {
     id: "bearer_token",
@@ -397,23 +458,13 @@ var VALUE_RULES = [
     precondition: (text) => text.includes("_")
   },
   {
-    // The layer that catches a vendor nobody has heard of. A short prefix, a
-    // separator and a high-entropy body is the shape almost every modern key is
-    // minted in, and it needs no vendor knowledge at all.
-    //
-    // The prefix may be upper, lower or mixed case: plenty of vendors mint
-    // `LW_…` or `Xy_…`, and restricting it to lowercase missed them. That also
-    // makes the prefix the shape of a screaming-snake environment variable
-    // NAME, which must survive as a bare name, and does: `AWS_SECRET_ACCESS_KEY`
-    // and `DATABASE_URL_PRODUCTION` are dictionary words with no digits and no
-    // lowercase, so the length floor and the character-mix gate turn them both
-    // away. The digest check lowercases the prefix so `SHA512-…` is still
-    // recognised as a digest.
-    //
-    // A declined match consumes the text it spanned, so in principle a benign
-    // outer match could hide a secret further inside the same unbroken token.
-    // It cannot in practice: a body containing key material inherits that
-    // material's entropy and character mix, so the outer match is accepted and
+    // The layer that catches a vendor nobody has heard of: a short prefix, a separator and a
+    // high-entropy body, needing no vendor knowledge. The prefix may be upper, lower or mixed
+    // case since plenty of vendors mint `LW_…` or `Xy_…`; that also makes it the shape of a
+    // screaming-snake env var NAME, but the length floor and character-mix gate turn those away.
+    // A declined match consumes the text it spanned, so in principle an outer match could hide
+    // secret material further inside the same token. It cannot in practice: a body containing
+    // key material inherits that material's entropy and mix, so the outer match is accepted and
     // the secret is redacted along with its prefix.
     id: "shaped_api_key",
     description: "High-entropy API key with a vendor-style prefix",
@@ -431,26 +482,14 @@ var VALUE_RULES = [
     // they write "key:".
     id: "sensitive_assignment",
     description: "Value assigned to a credential-named field",
-    // One capture for everything that introduces the value, one for the value
-    // itself, so the replacement puts the sentence back and swaps only the
-    // credential.
-    // `key is <value>` was accepted as a separator too, and across a 236 MB
-    // corpus of real traces it caught zero credentials while being the sole
-    // source of English-prose redactions: "a bare digest of an API key is
-    // offline-checkable" lost the words after "key is". A cue that only ever
-    // fires on prose is not a cue, so the strict separator is `:` or `=`.
-    //
-    // A whitespace separator is accepted on a HIGHER bar instead of not at
-    // all, because `Authorization <token>` and `key <token>` do carry real
-    // credentials. Ungated it matched 5,816 further spans over 309 shapes,
-    // mostly prose; gated on the value looking like key material in its own
-    // right it matches 338 over 19 at roughly 87% precision.
-    //
-    // The value class excludes backslash. Span content arrives JSON-encoded,
-    // so a literal two-character `\n` sits inside the text; letting a value run
-    // through one carried it across logical lines and past the `$VAR` and
-    // code-expression guards, which is why `api_key = $OPENAI_API_KEY` was kept
-    // with a real newline and redacted with an escaped one.
+    // `key is <value>` was rejected as a strict separator: on real traces it caught zero
+    // credentials while being the sole source of prose false-positives. Whitespace is accepted
+    // instead on a higher bar — the value must look like key material (see `isKeyMaterial`) —
+    // which is what keeps `Authorization <token>` and `key <token>` while rejecting prose.
+    // The value class excludes backslash: span content arrives JSON-encoded, so a literal `\n`
+    // is two characters, and letting a value run through one carried it across logical lines and
+    // past the `$VAR`/code-expression guards — `api_key = $OPENAI_API_KEY` was kept with a real
+    // newline and redacted with an escaped one.
     regex: new RegExp(
       `((?:^|[\\W_])(?:${CREDENTIAL_KEYWORD})(?:\\s+[A-Za-z]{1,8}){0,2}["'\`]?(?:\\s*[:=]{1,2}\\s*|[ \\t?-]+)["'\`]?)([^\\s"'\`,;<>(){}\\[\\]\\\\]{${CONTEXT_VALUE_MIN_LENGTH},})`,
       "gi"
@@ -609,7 +648,7 @@ function collectSensitiveEnvValues(env) {
     if (!ENV_SECRET_NAME_REGEX.test(name)) continue;
     values.add(trimmed);
   }
-  return [...values].sort((a, b) => b.length - a.length);
+  return [...values].toSorted((a, b) => b.length - a.length);
 }
 var EMAIL_REGEX = /[A-Za-z0-9._%+-]{1,64}@[A-Za-z0-9.-]{1,253}\.[A-Za-z]{2,24}/g;
 var INTL_PHONE_REGEX = /(?<![\w.+-])\+[1-9]\d{0,2}(?:[\s.-]?(?:\(\d{1,4}\)[\s.-]?)?\d{1,4}){1,5}(?!\d)/g;
@@ -829,10 +868,11 @@ function redactReport(params) {
 async function deliverReport(report, params) {
   const config = getConfig();
   const endpoint = config.endpoint.replace(/\/+$/, "");
-  const response = await fetch(`${endpoint}/api/bug-reports`, {
+  const response = await fetch(`${endpoint}/api/v1/bug-reports`, {
     method: "POST",
     headers: {
       "content-type": "application/json",
+      "x-api-version": LANGWATCH_API_VERSION,
       ...config.apiKey ? { authorization: `Bearer ${config.apiKey}` } : {}
     },
     body: JSON.stringify({
@@ -882,4 +922,4 @@ async function handleReportIssue(params) {
 export {
   handleReportIssue
 };
-//# sourceMappingURL=report-issue-RHZZ33IS.js.map
+//# sourceMappingURL=report-issue-N7ND5TM6.js.map

package/dist/{rerun-run-plan-MUDWJBE4.js → rerun-run-plan-O3VUZ6CG.js}

@@ -1,11 +1,11 @@
 import {
   formatRunPlanRun
-} from "./chunk-JR6DJZOU.js";
+} from "./chunk-RABYBFX5.js";
 import {
   rerunRunPlan
-} from "./chunk-56OGTS24.js";
-import "./chunk-GELJ2MQR.js";
-import "./chunk-WT4PO4A3.js";
+} from "./chunk-VOUGDY2O.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
 import "./chunk-SAS5OB7F.js";
 
 // src/tools/rerun-run-plan.ts
@@ -19,4 +19,4 @@ async function handleRerunRunPlan(params) {
 export {
   handleRerunRunPlan
 };
-//# sourceMappingURL=rerun-run-plan-MUDWJBE4.js.map
+//# sourceMappingURL=rerun-run-plan-O3VUZ6CG.js.map

package/dist/rerun-run-plan-OJTVVGJI.js

@@ -0,0 +1,21 @@
+import {
+  formatRunPlanRun
+} from "./chunk-RABYBFX5.js";
+import {
+  rerunRunPlan
+} from "./chunk-VOUGDY2O.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+
+// src/tools/rerun-run-plan.ts
+async function handleRerunRunPlan(params) {
+  const result = await rerunRunPlan(params.id, {
+    parameters: params.parameters,
+    note: params.note
+  });
+  return formatRunPlanRun(result);
+}
+export {
+  handleRerunRunPlan
+};
+//# sourceMappingURL=rerun-run-plan-OJTVVGJI.js.map

package/dist/{revoke-api-key-6LAZ3QZZ.js → revoke-api-key-BU6BKGCG.js}

@@ -1,8 +1,8 @@
 import {
   revokeApiKey
-} from "./chunk-K37ZNPXK.js";
-import "./chunk-GELJ2MQR.js";
-import "./chunk-WT4PO4A3.js";
+} from "./chunk-SHSVN3SE.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
 import "./chunk-SAS5OB7F.js";
 
 // src/tools/revoke-api-key.ts
@@ -13,4 +13,4 @@ async function handleRevokeApiKey(params) {
 export {
   handleRevokeApiKey
 };
-//# sourceMappingURL=revoke-api-key-6LAZ3QZZ.js.map
+//# sourceMappingURL=revoke-api-key-BU6BKGCG.js.map

package/dist/revoke-api-key-NZNCFOIR.js

@@ -0,0 +1,15 @@
+import {
+  revokeApiKey
+} from "./chunk-SHSVN3SE.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+
+// src/tools/revoke-api-key.ts
+async function handleRevokeApiKey(params) {
+  await revokeApiKey(params.id);
+  return `API key ${params.id} revoked successfully.`;
+}
+export {
+  handleRevokeApiKey
+};
+//# sourceMappingURL=revoke-api-key-NZNCFOIR.js.map

package/dist/run-agent-244O4Y5M.js

@@ -0,0 +1,75 @@
+import {
+  runAgent
+} from "./chunk-4RX3G62A.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+import "./chunk-SAS5OB7F.js";
+
+// src/tools/run-agent.ts
+import { z } from "zod";
+var jsonObjectSchema = z.looseObject({});
+function outputLines(result) {
+  const output = result.output;
+  if (output !== void 0) {
+    return ["**Output:**", typeof output === "string" ? output : JSON.stringify(output, null, 2)];
+  }
+  return ["**Result:**", JSON.stringify(result, null, 2)];
+}
+function connectedLines(result) {
+  const lines = [];
+  const instance = result.instance;
+  const durationMs = result.durationMs;
+  if (instance?.hostname) {
+    const label = instance.label ? ` (${instance.label})` : "";
+    lines.push(`
+**Instance:** ${instance.hostname}${label}`);
+  }
+  if (typeof durationMs === "number") lines.push(`**Duration:** ${durationMs} ms`);
+  const session = result.session;
+  if (session !== void 0 && session !== null) {
+    lines.push("**Session:**");
+    lines.push(JSON.stringify(session, null, 2));
+  }
+  return lines;
+}
+async function handleRunAgent({
+  id,
+  input,
+  message,
+  parameters,
+  threadId
+}) {
+  let parsedInput = {};
+  if (input) {
+    let decoded;
+    try {
+      decoded = JSON.parse(input);
+    } catch {
+      return "Error: `input` must be a valid JSON object.";
+    }
+    const result2 = jsonObjectSchema.safeParse(decoded);
+    if (!result2.success) {
+      return "Error: `input` must be a valid JSON object.";
+    }
+    parsedInput = result2.data;
+  }
+  const { agentType, result } = await runAgent({
+    id,
+    input: parsedInput,
+    message,
+    parameters,
+    threadId
+  });
+  const lines = [];
+  lines.push(`Agent executed successfully (type: ${agentType}).
+`);
+  if (typeof result === "object" && result !== null) {
+    lines.push(...outputLines(result));
+    if (agentType === "connected") lines.push(...connectedLines(result));
+  }
+  return lines.join("\n");
+}
+export {
+  handleRunAgent
+};
+//# sourceMappingURL=run-agent-244O4Y5M.js.map

package/dist/run-agent-HPCGZGYW.js

@@ -0,0 +1,74 @@
+import {
+  runAgent
+} from "./chunk-EYPJBL7P.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+
+// src/tools/run-agent.ts
+import { z } from "zod";
+var jsonObjectSchema = z.looseObject({});
+function outputLines(result) {
+  const output = result.output;
+  if (output !== void 0) {
+    return ["**Output:**", typeof output === "string" ? output : JSON.stringify(output, null, 2)];
+  }
+  return ["**Result:**", JSON.stringify(result, null, 2)];
+}
+function connectedLines(result) {
+  const lines = [];
+  const instance = result.instance;
+  const durationMs = result.durationMs;
+  if (instance?.hostname) {
+    const label = instance.label ? ` (${instance.label})` : "";
+    lines.push(`
+**Instance:** ${instance.hostname}${label}`);
+  }
+  if (typeof durationMs === "number") lines.push(`**Duration:** ${durationMs} ms`);
+  const session = result.session;
+  if (session !== void 0 && session !== null) {
+    lines.push("**Session:**");
+    lines.push(JSON.stringify(session, null, 2));
+  }
+  return lines;
+}
+async function handleRunAgent({
+  id,
+  input,
+  message,
+  parameters,
+  threadId
+}) {
+  let parsedInput = {};
+  if (input) {
+    let decoded;
+    try {
+      decoded = JSON.parse(input);
+    } catch {
+      return "Error: `input` must be a valid JSON object.";
+    }
+    const result2 = jsonObjectSchema.safeParse(decoded);
+    if (!result2.success) {
+      return "Error: `input` must be a valid JSON object.";
+    }
+    parsedInput = result2.data;
+  }
+  const { agentType, result } = await runAgent({
+    id,
+    input: parsedInput,
+    message,
+    parameters,
+    threadId
+  });
+  const lines = [];
+  lines.push(`Agent executed successfully (type: ${agentType}).
+`);
+  if (typeof result === "object" && result !== null) {
+    lines.push(...outputLines(result));
+    if (agentType === "connected") lines.push(...connectedLines(result));
+  }
+  return lines.join("\n");
+}
+export {
+  handleRunAgent
+};
+//# sourceMappingURL=run-agent-HPCGZGYW.js.map

package/dist/run-plan-2ZPGGZ4H.js

@@ -0,0 +1,38 @@
+import {
+  formatRunPlanRun
+} from "./chunk-RABYBFX5.js";
+import {
+  runRunPlan
+} from "./chunk-VOUGDY2O.js";
+import {
+  toWireTargets
+} from "./chunk-O7EMWEVJ.js";
+import {
+  toWireAttachments
+} from "./chunk-U24EACC4.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+
+// src/tools/run-plan.ts
+async function handleRunPlan(params) {
+  const result = await runRunPlan({
+    name: params.name,
+    config: {
+      scope: params.scope,
+      targets: toWireTargets(params.targets),
+      repeatCount: params.repeatCount,
+      simulatorModel: params.simulatorModel,
+      judgeModel: params.judgeModel,
+      scenarioIds: params.scenarioIds,
+      ...params.evaluators !== void 0 ? { evaluators: toWireAttachments(params.evaluators) } : {}
+    },
+    idempotencyKey: params.idempotencyKey,
+    parameters: params.parameters,
+    note: params.note
+  });
+  return formatRunPlanRun(result);
+}
+export {
+  handleRunPlan
+};
+//# sourceMappingURL=run-plan-2ZPGGZ4H.js.map

package/dist/{run-plan-T4ZYOZGA.js → run-plan-KSXUYQT3.js}

@@ -1,17 +1,17 @@
 import {
   formatRunPlanRun
-} from "./chunk-JR6DJZOU.js";
+} from "./chunk-RABYBFX5.js";
 import {
   runRunPlan
-} from "./chunk-56OGTS24.js";
+} from "./chunk-VOUGDY2O.js";
 import {
   toWireTargets
-} from "./chunk-HV4DWKBI.js";
+} from "./chunk-O7EMWEVJ.js";
 import {
   toWireAttachments
-} from "./chunk-CKNAH5TG.js";
-import "./chunk-GELJ2MQR.js";
-import "./chunk-WT4PO4A3.js";
+} from "./chunk-U24EACC4.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
 import "./chunk-SAS5OB7F.js";
 
 // src/tools/run-plan.ts
@@ -36,4 +36,4 @@ async function handleRunPlan(params) {
 export {
   handleRunPlan
 };
-//# sourceMappingURL=run-plan-T4ZYOZGA.js.map
+//# sourceMappingURL=run-plan-KSXUYQT3.js.map

package/dist/run-query-4LMOQ5UW.js

@@ -0,0 +1,47 @@
+import {
+  markdownTable,
+  runQuery
+} from "./chunk-GA5JUSPT.js";
+import "./chunk-FOKVY3BK.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+import "./chunk-SAS5OB7F.js";
+
+// src/tools/run-query.ts
+var RUN_QUERY_ROW_CAP = 50;
+async function handleRunQuery(params) {
+  const result = await runQuery(params);
+  const headers = result.columns.map((column) => column.name);
+  const shown = result.rows.slice(0, RUN_QUERY_ROW_CAP);
+  const lines = [];
+  lines.push(
+    markdownTable({
+      headers,
+      rows: shown,
+      emptyMessage: "The statement ran and returned no rows."
+    })
+  );
+  lines.push("");
+  lines.push(
+    `Returned ${result.rows.length} row${result.rows.length === 1 ? "" : "s"} in ${result.statistics.elapsedMs}ms.`
+  );
+  if (result.rows.length > shown.length) {
+    lines.push(
+      `Showing the first ${shown.length}. Aggregate further, or export every row with \`langwatch query "<statement>" --format jsonl\`.`
+    );
+  }
+  if (result.truncated) {
+    lines.push(
+      "The result hit a response ceiling and was cut short, so this is not the whole answer."
+    );
+  }
+  for (const diagnostic of result.diagnostics) {
+    lines.push(`${diagnostic.code}: ${diagnostic.message}`);
+  }
+  return lines.join("\n");
+}
+export {
+  RUN_QUERY_ROW_CAP,
+  handleRunQuery
+};
+//# sourceMappingURL=run-query-4LMOQ5UW.js.map

package/dist/run-query-BQUHIUC2.js

@@ -0,0 +1,46 @@
+import {
+  markdownTable,
+  runQuery
+} from "./chunk-GA5JUSPT.js";
+import "./chunk-FOKVY3BK.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
+
+// src/tools/run-query.ts
+var RUN_QUERY_ROW_CAP = 50;
+async function handleRunQuery(params) {
+  const result = await runQuery(params);
+  const headers = result.columns.map((column) => column.name);
+  const shown = result.rows.slice(0, RUN_QUERY_ROW_CAP);
+  const lines = [];
+  lines.push(
+    markdownTable({
+      headers,
+      rows: shown,
+      emptyMessage: "The statement ran and returned no rows."
+    })
+  );
+  lines.push("");
+  lines.push(
+    `Returned ${result.rows.length} row${result.rows.length === 1 ? "" : "s"} in ${result.statistics.elapsedMs}ms.`
+  );
+  if (result.rows.length > shown.length) {
+    lines.push(
+      `Showing the first ${shown.length}. Aggregate further, or export every row with \`langwatch query "<statement>" --format jsonl\`.`
+    );
+  }
+  if (result.truncated) {
+    lines.push(
+      "The result hit a response ceiling and was cut short, so this is not the whole answer."
+    );
+  }
+  for (const diagnostic of result.diagnostics) {
+    lines.push(`${diagnostic.code}: ${diagnostic.message}`);
+  }
+  return lines.join("\n");
+}
+export {
+  RUN_QUERY_ROW_CAP,
+  handleRunQuery
+};
+//# sourceMappingURL=run-query-BQUHIUC2.js.map

package/dist/{run-test-suite-L4MZ7G4D.js → run-test-suite-P3WLVPXC.js}

@@ -1,14 +1,14 @@
 import {
   formatRunPlanRun
-} from "./chunk-JR6DJZOU.js";
+} from "./chunk-RABYBFX5.js";
 import {
   toWireTargets
-} from "./chunk-HV4DWKBI.js";
+} from "./chunk-O7EMWEVJ.js";
 import {
   runTestSuite
-} from "./chunk-6DJDEXET.js";
-import "./chunk-GELJ2MQR.js";
-import "./chunk-WT4PO4A3.js";
+} from "./chunk-YCIUEZVK.js";
+import "./chunk-7CZQDZ2K.js";
+import "./chunk-DULFP3MK.js";
 import "./chunk-SAS5OB7F.js";
 
 // src/tools/run-test-suite.ts
@@ -23,4 +23,4 @@ async function handleRunTestSuite(params) {
 export {
   handleRunTestSuite
 };
-//# sourceMappingURL=run-test-suite-L4MZ7G4D.js.map
+//# sourceMappingURL=run-test-suite-P3WLVPXC.js.map