langwatch 0.30.0 → 0.32.0

package/dist/chunk-LMNMFLL2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-LMNMFLL2.js","../src/client-sdk/services/datasets/errors.ts","../src/client-sdk/services/datasets/tracing/tracer.ts","../src/client-sdk/services/datasets/dataset.service.ts","../src/client-sdk/services/datasets/datasets.facade.ts"],"names":["errorMessage"],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACA;ACfO,IAAM,aAAA,EAAN,MAAA,QAA2B,MAAM;AAAA,EACtC,WAAA,CAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,KAAA,EAAO,cAAA;AAAA,EACd;AACF,CAAA;AAKO,IAAM,qBAAA,EAAN,MAAA,QAAmC,aAAa;AAAA,EACrD,WAAA,CAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,QAAQ,CAAA,CAAA;AACxB,IAAA;AACd,EAAA;AACF;AAMqC;AAKU,EAAA;AAC9B,IAAA;AACD,IAAA;AACE,IAAA;AACG,IAAA;AACI,IAAA;AACvB,EAAA;AACF;AAMO;AACwB,EAAA;AACd,IAAA;AACD,IAAA;AACd,EAAA;AACF;AAMO;AAKiD,EAAA;AACvC,IAAA;AACD,IAAA;AAEwB,IAAA;AACtB,MAAA;AACgB,MAAA;AACF,MAAA;AACI,MAAA;AACzB,IAAA;AACY,MAAA;AACnB,IAAA;AACF,EAAA;AACF;ADXyC;AACA;AE9DG;AFgEH;AACA;AGzBb;AAGgB,EAAA;AAC1B,IAAA;AAMoC,IAAA;AACpD,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS0D,EAAA;AACxB,IAAA;AACC,MAAA;AACjC,IAAA;AAEoB,IAAA;AACQ,MAAA;AACMA,MAAAA;AAClC,IAAA;AAE0B,IAAA;AAEhB,IAAA;AACmB,MAAA;AAC3B,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAKoE,EAAA;AACnC,IAAA;AACjC,EAAA;AAAA;AAAA;AAAA;AAAA;AAUE,EAAA;AACoB,IAAA;AACtB,EAAA;AAAA;AAAA;AAAA;AAAA;AASE,EAAA;AAEoB,IAAA;AACa,MAAA;AACjC,IAAA;AACgB,IAAA;AAClB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYuB,EAAA;AACI,IAAA;AAEU,IAAA;AACjC,MAAA;AACA,MAAA;AACU,QAAA;AACA,UAAA;AACJ,YAAA;AACF,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AAEkB,IAAA;AAChB,MAAA;AAC0B,MAAA;AAC1B,MAAA;AACF,IAAA;AAEkD,IAAA;AACvC,MAAA;AACO,MAAA;AACA,MAAA;AACJ,MAAA;AACI,MAAA;AACA,MAAA;AAChB,IAAA;AAEiB,IAAA;AACU,MAAA;AAC7B,IAAA;AAEO,IAAA;AACI,MAAA;AACE,MAAA;AACA,MAAA;AACO,MAAA;AACF,MAAA;AACA,MAAA;AAChB,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAKoF,EAAA;AACzD,IAAA;AAEG,IAAA;AAClB,MAAA;AACC,QAAA;AACC,UAAA;AACC,UAAA;AACT,QAAA;AACF,MAAA;AACD,IAAA;AAEW,IAAA;AACV,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAK6E,EAAA;AAnM/E,IAAA;AAoM6B,IAAA;AAEG,IAAA;AACpB,MAAA;AACU,QAAA;AACO,QAAA;AACvB,MAAA;AACD,IAAA;AAEW,IAAA;AACV,MAAA;AAC+B,MAAA;AACjC,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAK+F,EAAA;AACpE,IAAA;AAEG,IAAA;AAClB,MAAA;AACW,QAAA;AACnB,MAAA;AACM,MAAA;AACP,IAAA;AAEW,IAAA;AACV,MAAA;AAC2B,MAAA;AAC3B,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAKgE,EAAA;AACrC,IAAA;AAEG,IAAA;AAClB,MAAA;AACW,QAAA;AACnB,MAAA;AACD,IAAA;AAEW,IAAA;AACV,MAAA;AAC2B,MAAA;AAC3B,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAQuC,EAAA;AACA,IAAA;AAET,IAAA;AAClB,MAAA;AACW,QAAA;AACnB,MAAA;AACgB,MAAA;AACjB,IAAA;AAEW,IAAA;AACV,MAAA;AAC8B,MAAA;AAC9B,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAQE,EAAA;AAEyB,IAAA;AAEG,IAAA;AAClB,MAAA;AACqB,QAAA;AAC7B,MAAA;AACc,MAAA;AACf,IAAA;AAEW,IAAA;AACV,MAAA;AAC0B,MAAA;AAC1B,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAOE,EAAA;AAEqC,IAAA;AAET,IAAA;AAClB,MAAA;AACW,QAAA;AACnB,MAAA;AACkB,MAAA;AACnB,IAAA;AAEW,IAAA;AACV,MAAA;AACgC,MAAA;AAChC,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYmC,EAAA;AACR,IAAA;AAEG,IAAA;AAClB,MAAA;AACW,QAAA;AACV,QAAA;AACC,UAAA;AACC,UAAA;AACT,QAAA;AACF,MAAA;AACD,IAAA;AAEW,IAAA;AACV,MAAA;AAC4B,MAAA;AAC5B,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBE,EAAA;AAGkC,IAAA;AACF,IAAA;AAEE,IAAA;AACxB,MAAA;AAC2B,MAAA;AAC7B,MAAA;AACP,IAAA;AAEiB,IAAA;AACe,MAAA;AACN,MAAA;AACZ,MAAA;AACP,QAAA;AAC4B,UAAA;AACxB,QAAA;AAER,QAAA;AACF,MAAA;AAE+B,MAAA;AACjC,IAAA;AAE4B,IAAA;AAC9B,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUqC,EAAA;AACV,IAAA;AAEK,IAAA;AACM,IAAA;AACA,IAAA;AAExB,IAAA;AACV,MAAA;AACA,MAAA;AAC+B,MAAA;AACjC,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYE,EAAA;AAGkB,IAAA;AACX,MAAA;AACuB,QAAA;AACvB,MAAA;AACwB,QAAA;AACxB,MAAA;AACsB,QAAA;AAC7B,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAK2E,EAAA;AAClE,IAAA;AACI,MAAA;AACI,QAAA;AACE,QAAA;AACA,QAAA;AACO,QAAA;AACF,QAAA;AACA,QAAA;AACpB,MAAA;AACuB,MAAA;AACL,MAAA;AACpB,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAK0F,EAAA;AACpF,IAAA;AAC2B,MAAA;AACf,IAAA;AACO,MAAA;AACU,QAAA;AAC/B,MAAA;AACM,MAAA;AACR,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAK2F,EAAA;AACrF,IAAA;AAC4B,MAAA;AACD,MAAA;AACA,MAAA;AACf,IAAA;AACO,MAAA;AACU,QAAA;AAC/B,MAAA;AACM,MAAA;AACR,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAKyF,EAAA;AACnE,IAAA;AAChB,IAAA;AAC4B,MAAA;AACd,MAAA;AACF,IAAA;AACS,MAAA;AACf,QAAA;AACR,MAAA;AACF,IAAA;AAEmB,IAAA;AACP,MAAA;AACmB,QAAA;AAC3B,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAEmC,IAAA;AACrC,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOiE,EAAA;AAC5C,IAAA;AACW,IAAA;AAEd,IAAA;AACG,IAAA;AACO,MAAA;AACI,MAAA;AAC1B,QAAA;AACF,MAAA;AAE2B,MAAA;AACQ,MAAA;AACnC,MAAA;AACF,IAAA;AAEU,IAAA;AACR,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAQ2B,EAAA;AACA,IAAA;AAEK,IAAA;AACF,IAAA;AAEhB,IAAA;AACyB,MAAA;AACnC,MAAA;AACmC,MAAA;AACnC,MAAA;AACF,IAAA;AACF,EAAA;AACF;AH7EyC;AACA;AIlezC;AAuE4B;AAGgB,EAAA;AAFjC,IAAA;AAYT;AAAA;AAAA;AAAA;AAAA;AAAA;AAA4E,IAAA;AAC9D,MAAA;AACd,IAAA;AAQA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAsE,IAAA;AAClC,MAAA;AACC,QAAA;AACnC,MAAA;AACY,MAAA;AACd,IAAA;AAwBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAG0B,IAAA;AACZ,MAAA;AACd,IAAA;AASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAwF,IAAA;AAC1D,MAAA;AAChB,QAAA;AACR,UAAA;AACF,QAAA;AACF,MAAA;AACY,MAAA;AACd,IAAA;AAQA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAyD,IAAA;AAC3C,MAAA;AACd,IAAA;AASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEE,IAAA;AAEmC,MAAA;AACA,QAAA;AACnC,MAAA;AACY,MAAA;AACd,IAAA;AAUA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEE,IAAA;AAGY,MAAA;AACd,IAAA;AASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEE,IAAA;AAEY,MAAA;AACd,IAAA;AAkBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEE,IAAA;AAEY,MAAA;AACd,IAAA;AA6BA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGE,IAAA;AAhQJ,MAAA;AAoQe,MAAA;AACwB,QAAA;AACnC,MAAA;AACY,MAAA;AACV,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAjMyB,IAAA;AACzB,EAAA;AAiMF;AArMW;AJokB8B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-LMNMFLL2.js","sourcesContent":[null,"/**\n * Errors for the Dataset API\n */\n\n/**\n * Base error for all dataset operations.\n */\nexport class DatasetError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"DatasetError\";\n  }\n}\n\n/**\n * Thrown when a dataset is not found (404).\n */\nexport class DatasetNotFoundError extends DatasetError {\n  constructor(slugOrId: string) {\n    super(`Dataset not found: ${slugOrId}`);\n    this.name = \"DatasetNotFoundError\";\n  }\n}\n\n/**\n * Error from the Dataset API with operation context.\n * Aligns with PromptsApiError pattern: includes operation and originalError fields.\n */\nexport class DatasetApiError extends DatasetError {\n  readonly status: number;\n  readonly operation: string;\n  readonly originalError?: unknown;\n\n  constructor(message: string, status: number, operation: string, originalError?: unknown) {\n    super(message);\n    this.name = \"DatasetApiError\";\n    this.status = status;\n    this.operation = operation;\n    this.originalError = originalError;\n  }\n}\n\n/**\n * Thrown for client-side validation failures (e.g. empty name, no update fields, empty entries).\n * Distinguished from DatasetApiError which represents server-side errors.\n */\nexport class DatasetValidationError extends DatasetError {\n  constructor(message: string) {\n    super(message);\n    this.name = \"DatasetValidationError\";\n  }\n}\n\n/**\n * Thrown when a dataset operation exceeds the plan limit (403).\n * The message includes the upgrade/subscription URL from the server.\n */\nexport class DatasetPlanLimitError extends DatasetError {\n  readonly limitType: string;\n  readonly current?: number;\n  readonly max?: number;\n\n  constructor(message: string, originalError?: unknown) {\n    super(message);\n    this.name = \"DatasetPlanLimitError\";\n\n    if (originalError != null && typeof originalError === \"object\") {\n      const err = originalError as Record<string, unknown>;\n      this.limitType = typeof err.limitType === \"string\" ? err.limitType : \"datasets\";\n      this.current = typeof err.current === \"number\" ? err.current : undefined;\n      this.max = typeof err.max === \"number\" ? err.max : undefined;\n    } else {\n      this.limitType = \"datasets\";\n    }\n  }\n}\n","import { LANGWATCH_SDK_NAME_CLIENT, LANGWATCH_SDK_VERSION } from \"@/internal/constants\";\nimport { getLangWatchTracer } from \"@/observability-sdk/tracer\";\n\nexport const tracer = getLangWatchTracer(`${LANGWATCH_SDK_NAME_CLIENT}.datasets`, LANGWATCH_SDK_VERSION);\n","import { type LangwatchApiClient } from \"@/internal/api/client\";\nimport { type Logger } from \"@/logger\";\nimport {\n  type Dataset,\n  type DatasetEntry,\n  type DatasetMetadata,\n  type GetDatasetApiResponse,\n  type GetDatasetOptions,\n  type ListDatasetsOptions,\n  type ListDatasetsApiResponse,\n  type ListRecordsOptions,\n  type ListRecordsApiResponse,\n  type CreateDatasetOptions,\n  type UpdateDatasetOptions,\n  type CreateFromUploadOptions,\n  type CreateFromUploadResponse,\n  type BatchCreateRecordsResponse,\n  type DeleteRecordsResponse,\n  type UploadResponse,\n  type DatasetRecordResponse,\n} from \"./types\";\nimport { DatasetApiError, DatasetNotFoundError, DatasetPlanLimitError } from \"./errors\";\nimport { createTracingProxy } from \"@/client-sdk/tracing/create-tracing-proxy\";\nimport { tracer } from \"./tracing\";\nimport { formatApiErrorMessage } from \"@/client-sdk/services/_shared/format-api-error\";\nimport { buildAuthHeaders } from \"@/internal/api/auth\";\n\ntype DatasetServiceConfig = {\n  langwatchApiClient: LangwatchApiClient;\n  logger: Logger;\n  endpoint: string;\n  apiKey: string;\n};\n\n/**\n * Service for managing dataset resources via the LangWatch API.\n *\n * Responsibilities:\n * - CRUD operations for datasets\n * - Record management (create, update, delete)\n * - File upload\n * - Error handling with contextual information\n */\nexport class DatasetService {\n  private readonly config: DatasetServiceConfig;\n\n  constructor(config: DatasetServiceConfig) {\n    this.config = config;\n\n    /**\n     * Wraps the service in a tracing proxy that automatically creates\n     * OpenTelemetry spans for all public methods.\n     */\n    return createTracingProxy(this as DatasetService, tracer);\n  }\n\n  /**\n   * Handles API errors by mapping status codes to appropriate error types.\n   * @param operation - Description of the operation being performed\n   * @param error - The error object from the API response\n   * @param status - The HTTP status code\n   * @param slugOrId - The dataset identifier (only passed for operations targeting an existing resource)\n   */\n  private handleApiError(operation: string, error: unknown, status: number, slugOrId?: string): never {\n    if (status === 404 && slugOrId) {\n      throw new DatasetNotFoundError(slugOrId);\n    }\n\n    if (status === 403) {\n      const errorMessage = this.extractErrorMessage(error, status);\n      throw new DatasetPlanLimitError(errorMessage, error);\n    }\n\n    const errorMessage = this.extractErrorMessage(error, status);\n\n    throw new DatasetApiError(\n      `Failed to ${operation}: ${errorMessage}`,\n      status,\n      operation,\n      error,\n    );\n  }\n\n  /**\n   * Extracts a human-readable error message from an API error response.\n   */\n  private extractErrorMessage(error: unknown, status: number): string {\n    return formatApiErrorMessage({ error: error, options: { status } });\n  }\n\n  /**\n   * Wrapper for API calls to endpoints not yet in the generated OpenAPI types.\n   * Quarantines `as any` casts to a single location.\n   */\n  private untypedRequest<M extends 'GET' | 'POST' | 'PATCH' | 'DELETE'>(\n    method: M,\n    path: string,\n    options?: Record<string, unknown>,\n  ) {\n    return (this.config.langwatchApiClient[method] as any)(path, options);\n  }\n\n  /**\n   * Unwraps an API response, throwing a mapped error if the response contains an error.\n   * Centralizes the repeated `if (error) handleApiError; return data` pattern.\n   */\n  private unwrapResponse<T>(\n    response: { data?: unknown; error?: unknown; response: { status: number } },\n    operation: string,\n    slugOrId?: string,\n  ): T {\n    if (response.error) {\n      this.handleApiError(operation, response.error, response.response.status, slugOrId);\n    }\n    return response.data as T;\n  }\n\n  /**\n   * Fetches a dataset by its slug or ID, returning metadata and entries.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param _options - Optional configuration\n   * @returns The dataset with metadata and entries\n   */\n  async getDataset<T extends Record<string, unknown> = Record<string, unknown>>(\n    slugOrId: string,\n    _options?: GetDatasetOptions\n  ): Promise<Dataset<T>> {\n    this.config.logger.debug(`Fetching dataset: ${slugOrId}`);\n\n    const response = await this.config.langwatchApiClient.GET(\n      \"/api/dataset/{slugOrId}\",\n      {\n        params: {\n          path: {\n            slugOrId,\n          },\n        },\n      }\n    );\n\n    const data = this.unwrapResponse<GetDatasetApiResponse>(\n      response,\n      `fetch dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n\n    const entries: DatasetEntry<T>[] = data.data.map((item) => ({\n      id: item.id,\n      datasetId: item.datasetId,\n      projectId: item.projectId,\n      entry: item.entry as T,\n      createdAt: item.createdAt,\n      updatedAt: item.updatedAt,\n    }));\n\n    this.config.logger.debug(\n      `Fetched dataset ${slugOrId} with ${entries.length} entries`\n    );\n\n    return {\n      id: data.id,\n      name: data.name,\n      slug: data.slug,\n      columnTypes: data.columnTypes,\n      createdAt: data.createdAt,\n      updatedAt: data.updatedAt,\n      entries,\n    };\n  }\n\n  /**\n   * Lists all datasets for the project, with optional pagination.\n   */\n  async listDatasets(options?: ListDatasetsOptions): Promise<ListDatasetsApiResponse> {\n    this.config.logger.debug(\"Listing datasets\");\n\n    const response = await this.untypedRequest('GET', '/api/dataset', {\n      params: {\n        query: {\n          page: options?.page,\n          limit: options?.limit,\n        },\n      },\n    });\n\n    return this.unwrapResponse<ListDatasetsApiResponse>(\n      response,\n      \"list datasets\",\n    );\n  }\n\n  /**\n   * Creates a new dataset.\n   */\n  async createDataset(options: CreateDatasetOptions): Promise<DatasetMetadata> {\n    this.config.logger.debug(`Creating dataset: ${options.name}`);\n\n    const response = await this.untypedRequest('POST', '/api/dataset', {\n      body: {\n        name: options.name,\n        columnTypes: options.columnTypes ?? [],\n      },\n    });\n\n    return this.unwrapResponse<DatasetMetadata>(\n      response,\n      `create dataset \"${options.name}\"`,\n    );\n  }\n\n  /**\n   * Updates a dataset by its slug or ID.\n   */\n  async updateDataset(slugOrId: string, options: UpdateDatasetOptions): Promise<DatasetMetadata> {\n    this.config.logger.debug(`Updating dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('PATCH', '/api/dataset/{slugOrId}', {\n      params: {\n        path: { slugOrId },\n      },\n      body: options,\n    });\n\n    return this.unwrapResponse<DatasetMetadata>(\n      response,\n      `update dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Deletes (archives) a dataset by its slug or ID.\n   */\n  async deleteDataset(slugOrId: string): Promise<DatasetMetadata> {\n    this.config.logger.debug(`Deleting dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('DELETE', '/api/dataset/{slugOrId}', {\n      params: {\n        path: { slugOrId },\n      },\n    });\n\n    return this.unwrapResponse<DatasetMetadata>(\n      response,\n      `delete dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Creates records in a dataset in batch.\n   */\n  async createRecords(\n    slugOrId: string,\n    entries: Record<string, unknown>[],\n  ): Promise<BatchCreateRecordsResponse> {\n    this.config.logger.debug(`Creating ${entries.length} records in dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('POST', '/api/dataset/{slugOrId}/records', {\n      params: {\n        path: { slugOrId },\n      },\n      body: { entries },\n    });\n\n    return this.unwrapResponse<BatchCreateRecordsResponse>(\n      response,\n      `create records in dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Updates a single record in a dataset.\n   */\n  async updateRecord(\n    slugOrId: string,\n    recordId: string,\n    entry: Record<string, unknown>,\n  ): Promise<DatasetRecordResponse> {\n    this.config.logger.debug(`Updating record ${recordId} in dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('PATCH', '/api/dataset/{slugOrId}/records/{recordId}', {\n      params: {\n        path: { slugOrId, recordId },\n      },\n      body: { entry },\n    });\n\n    return this.unwrapResponse<DatasetRecordResponse>(\n      response,\n      `update record \"${recordId}\" in dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Deletes records from a dataset by IDs.\n   */\n  async deleteRecords(\n    slugOrId: string,\n    recordIds: string[],\n  ): Promise<DeleteRecordsResponse> {\n    this.config.logger.debug(`Deleting ${recordIds.length} records from dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('DELETE', '/api/dataset/{slugOrId}/records', {\n      params: {\n        path: { slugOrId },\n      },\n      body: { recordIds },\n    });\n\n    return this.unwrapResponse<DeleteRecordsResponse>(\n      response,\n      `delete records from dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Lists records in a dataset with optional pagination.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param options - Pagination options (page, limit)\n   * @returns Paginated list of records\n   */\n  async listRecords(\n    slugOrId: string,\n    options?: ListRecordsOptions,\n  ): Promise<ListRecordsApiResponse> {\n    this.config.logger.debug(`Listing records for dataset: ${slugOrId}`);\n\n    const response = await this.untypedRequest('GET', '/api/dataset/{slugOrId}/records', {\n      params: {\n        path: { slugOrId },\n        query: {\n          page: options?.page,\n          limit: options?.limit,\n        },\n      },\n    });\n\n    return this.unwrapResponse<ListRecordsApiResponse>(\n      response,\n      `list records in dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n\n  /**\n   * Sends a multipart/form-data request using raw fetch.\n   * openapi-fetch hardcodes content-type: application/json, so file uploads\n   * must bypass it. This helper centralizes URL building, auth headers,\n   * error parsing, and response unwrapping.\n   *\n   * @param path - The API path (appended to the endpoint)\n   * @param formData - The FormData payload\n   * @param operation - Human-readable operation name for error messages\n   * @param slugOrId - Optional dataset identifier (passed to handleApiError for 404 mapping)\n   */\n  private async fetchMultipart<T>(\n    path: string,\n    formData: FormData,\n    operation: string,\n    slugOrId?: string,\n  ): Promise<T> {\n    const { endpoint, apiKey } = this.config;\n    const url = `${endpoint.replace(/\\/$/, \"\")}${path}`;\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: buildAuthHeaders({ apiKey }),\n      body: formData,\n    });\n\n    if (!response.ok) {\n      const rawBody = await response.text();\n      let errorBody: unknown = rawBody;\n      if (rawBody) {\n        try {\n          errorBody = JSON.parse(rawBody);\n        } catch {\n          // Keep the plain-text body.\n        }\n      }\n\n      this.handleApiError(operation, errorBody, response.status, slugOrId);\n    }\n\n    return (await response.json()) as T;\n  }\n\n  /**\n   * Creates a new dataset from a file upload.\n   *\n   * @param options - The dataset name and file to upload\n   * @returns The created dataset metadata with record count\n   */\n  async createDatasetFromUpload(\n    options: CreateFromUploadOptions,\n  ): Promise<CreateFromUploadResponse> {\n    this.config.logger.debug(`Creating dataset from upload: ${options.name}`);\n\n    const formData = new FormData();\n    formData.append(\"name\", options.name);\n    formData.append(\"file\", options.file);\n\n    return this.fetchMultipart<CreateFromUploadResponse>(\n      \"/api/dataset/upload\",\n      formData,\n      `create dataset from upload \"${options.name}\"`,\n    );\n  }\n\n  /**\n   * Uploads a file with a strategy for handling existing datasets.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param file - The file to upload (File or Blob)\n   * @param ifExists - Strategy when dataset exists: \"append\" (default), \"replace\", or \"error\"\n   * @returns The upload result\n   */\n  async uploadWithStrategy(\n    slugOrId: string,\n    file: File | Blob,\n    ifExists: \"append\" | \"replace\" | \"error\" = \"append\",\n  ): Promise<UploadResponse> {\n    switch (ifExists) {\n      case \"append\":\n        return this._uploadAppend(slugOrId, file);\n      case \"replace\":\n        return this._uploadReplace(slugOrId, file);\n      case \"error\":\n        return this._uploadError(slugOrId, file);\n    }\n  }\n\n  /**\n   * Converts a CreateFromUploadResponse to the unified UploadResponse shape.\n   */\n  private toUploadResponse(result: CreateFromUploadResponse): UploadResponse {\n    return {\n      dataset: {\n        id: result.id,\n        name: result.name,\n        slug: result.slug,\n        columnTypes: result.columnTypes,\n        createdAt: result.createdAt,\n        updatedAt: result.updatedAt,\n      },\n      recordsCreated: result.recordsCreated,\n      datasetId: result.id,\n    };\n  }\n\n  /**\n   * Append strategy: try uploading to existing dataset; if not found, create from file.\n   */\n  private async _uploadAppend(slugOrId: string, file: File | Blob): Promise<UploadResponse> {\n    try {\n      return await this.uploadFile(slugOrId, file);\n    } catch (error) {\n      if (error instanceof DatasetNotFoundError) {\n        return this.toUploadResponse(await this.createDatasetFromUpload({ name: slugOrId, file }));\n      }\n      throw error;\n    }\n  }\n\n  /**\n   * Replace strategy: if dataset exists, delete all records then upload; if not found, create from file.\n   */\n  private async _uploadReplace(slugOrId: string, file: File | Blob): Promise<UploadResponse> {\n    try {\n      await this.getDataset(slugOrId);\n      await this._deleteAllRecords(slugOrId);\n      return await this.uploadFile(slugOrId, file);\n    } catch (error) {\n      if (error instanceof DatasetNotFoundError) {\n        return this.toUploadResponse(await this.createDatasetFromUpload({ name: slugOrId, file }));\n      }\n      throw error;\n    }\n  }\n\n  /**\n   * Error strategy: if dataset exists, throw 409; if not found, create from file.\n   */\n  private async _uploadError(slugOrId: string, file: File | Blob): Promise<UploadResponse> {\n    let datasetExists = false;\n    try {\n      await this.getDataset(slugOrId);\n      datasetExists = true;\n    } catch (error) {\n      if (!(error instanceof DatasetNotFoundError)) {\n        throw error;\n      }\n    }\n\n    if (datasetExists) {\n      throw new DatasetApiError(\n        `Dataset already exists: ${slugOrId}`,\n        409,\n        \"upload\",\n      );\n    }\n\n    return this.toUploadResponse(await this.createDatasetFromUpload({ name: slugOrId, file }));\n  }\n\n  /**\n   * Deletes all records from a dataset by iterating through pages.\n   * Always fetches page 1 since records shift after deletion.\n   * Includes a safety valve to prevent infinite loops.\n   */\n  private async _deleteAllRecords(slugOrId: string): Promise<void> {\n    const BATCH_SIZE = 1000;\n    const MAX_DELETE_ITERATIONS = 100;\n\n    let iteration = 0;\n    while (iteration < MAX_DELETE_ITERATIONS) {\n      const page = await this.listRecords(slugOrId, { page: 1, limit: BATCH_SIZE });\n      if (page.data.length === 0) {\n        return;\n      }\n\n      const ids = page.data.map((record) => record.id);\n      await this.deleteRecords(slugOrId, ids);\n      iteration++;\n    }\n\n    throw new DatasetApiError(\n      `Failed to delete all records from dataset \"${slugOrId}\": exceeded ${MAX_DELETE_ITERATIONS} iterations`,\n      0,\n      `delete all records from dataset \"${slugOrId}\"`,\n    );\n  }\n\n  /**\n   * Uploads a file to an existing dataset.\n   */\n  async uploadFile(\n    slugOrId: string,\n    file: File | Blob,\n  ): Promise<UploadResponse> {\n    this.config.logger.debug(`Uploading file to dataset: ${slugOrId}`);\n\n    const formData = new FormData();\n    formData.append(\"file\", file);\n\n    return this.fetchMultipart<UploadResponse>(\n      `/api/dataset/${encodeURIComponent(slugOrId)}/upload`,\n      formData,\n      `upload file to dataset \"${slugOrId}\"`,\n      slugOrId,\n    );\n  }\n}\n","import { type LangwatchApiClient } from \"@/internal/api/client\";\nimport { type Logger } from \"@/logger\";\nimport { DatasetService } from \"./dataset.service\";\nimport { DatasetValidationError } from \"./errors\";\nimport {\n  type Dataset,\n  type DatasetMetadata,\n  type GetDatasetOptions,\n  type ListDatasetsOptions,\n  type ListDatasetsApiResponse,\n  type ListRecordsOptions,\n  type ListRecordsApiResponse,\n  type CreateDatasetOptions,\n  type UpdateDatasetOptions,\n  type BatchCreateRecordsResponse,\n  type DeleteRecordsResponse,\n  type UploadResponse,\n  type DatasetRecordResponse,\n} from \"./types\";\n\ntype DatasetsFacadeConfig = {\n  langwatchApiClient: LangwatchApiClient;\n  logger: Logger;\n  endpoint: string;\n  apiKey: string;\n};\n\n/**\n * Facade for dataset operations in the LangWatch SDK.\n * Provides a simplified interface for managing datasets, records, and file uploads.\n *\n * @example\n * ```typescript\n * const langwatch = new LangWatch({ apiKey: \"your-api-key\" });\n *\n * // List all datasets\n * const datasets = await langwatch.datasets.list();\n *\n * // Get a dataset by slug or ID\n * const dataset = await langwatch.datasets.get(\"my-dataset\");\n *\n * // Create a new dataset\n * const newDataset = await langwatch.datasets.create({\n *   name: \"my-dataset\",\n *   columnTypes: [{ name: \"input\", type: \"string\" }],\n * });\n *\n * // Update a dataset\n * const updated = await langwatch.datasets.update(\"my-dataset\", { name: \"new-name\" });\n *\n * // Delete a dataset\n * const archived = await langwatch.datasets.delete(\"my-dataset\");\n *\n * // Create records\n * const records = await langwatch.datasets.createRecords(\"my-dataset\", [\n *   { input: \"hello\", output: \"world\" },\n * ]);\n *\n * // Update a record\n * const record = await langwatch.datasets.updateRecord(\"my-dataset\", \"rec-1\", { input: \"updated\" });\n *\n * // Delete records\n * const result = await langwatch.datasets.deleteRecords(\"my-dataset\", [\"rec-1\", \"rec-2\"]);\n *\n * // Upload a file (append to existing or create new)\n * const uploadResult = await langwatch.datasets.upload(\"my-dataset\", file);\n *\n * // Upload with replace strategy (delete all records first)\n * await langwatch.datasets.upload(\"my-dataset\", file, { ifExists: \"replace\" });\n * ```\n */\nexport class DatasetsFacade {\n  readonly #datasetService: DatasetService;\n\n  constructor(config: DatasetsFacadeConfig) {\n    this.#datasetService = new DatasetService(config);\n  }\n\n  /**\n   * Lists all datasets for the project, with optional pagination.\n   *\n   * @param options - Pagination options (page, limit)\n   * @returns Paginated list of datasets with metadata\n   */\n  list = (options?: ListDatasetsOptions): Promise<ListDatasetsApiResponse> => {\n    return this.#datasetService.listDatasets(options);\n  };\n\n  /**\n   * Creates a new dataset.\n   *\n   * @param options - Dataset creation options (name, columnTypes)\n   * @returns The created dataset metadata\n   */\n  create = (options: CreateDatasetOptions): Promise<DatasetMetadata> => {\n    if (!options.name || options.name.trim().length === 0) {\n      throw new DatasetValidationError(\"Dataset name must not be empty\");\n    }\n    return this.#datasetService.createDataset(options);\n  };\n\n  /**\n   * Fetches a dataset by its slug or ID, returning metadata and entries.\n   *\n   * @param slugOrId - The slug or ID of the dataset to fetch\n   * @param options - Optional configuration\n   * @returns The dataset with metadata and entries\n   *\n   * @example\n   * ```typescript\n   * // Get dataset by slug\n   * const dataset = await langwatch.datasets.get(\"product-qa\");\n   *\n   * // Typed dataset\n   * type MyDatasetEntry = { input: string; expected_output: string; };\n   * const dataset = await langwatch.datasets.get<MyDatasetEntry>(\"my-dataset\");\n   *\n   * // Iterate over entries\n   * for (const entry of dataset.entries) {\n   *   console.log(entry.entry.input);\n   * }\n   * ```\n   */\n  get = <T extends Record<string, unknown> = Record<string, unknown>>(\n    slugOrId: string,\n    options?: GetDatasetOptions\n  ): Promise<Dataset<T>> => {\n    return this.#datasetService.getDataset<T>(slugOrId, options);\n  };\n\n  /**\n   * Updates a dataset by its slug or ID.\n   *\n   * @param slugOrId - The slug or ID of the dataset to update\n   * @param options - Fields to update (name, columnTypes)\n   * @returns The updated dataset metadata\n   */\n  update = (slugOrId: string, options: UpdateDatasetOptions): Promise<DatasetMetadata> => {\n    if (options.name == null && options.columnTypes == null) {\n      throw new DatasetValidationError(\n        \"At least one field (name or columnTypes) must be provided for update\",\n      );\n    }\n    return this.#datasetService.updateDataset(slugOrId, options);\n  };\n\n  /**\n   * Deletes (archives) a dataset by its slug or ID.\n   *\n   * @param slugOrId - The slug or ID of the dataset to delete\n   * @returns The archived dataset metadata\n   */\n  delete = (slugOrId: string): Promise<DatasetMetadata> => {\n    return this.#datasetService.deleteDataset(slugOrId);\n  };\n\n  /**\n   * Creates records in a dataset in batch.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param entries - Array of record entries to create\n   * @returns The created records with IDs\n   */\n  createRecords = (\n    slugOrId: string,\n    entries: Record<string, unknown>[],\n  ): Promise<BatchCreateRecordsResponse> => {\n    if (!entries || entries.length === 0) {\n      throw new DatasetValidationError(\"Entries must not be empty\");\n    }\n    return this.#datasetService.createRecords(slugOrId, entries);\n  };\n\n  /**\n   * Updates a single record in a dataset.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param recordId - The ID of the record to update\n   * @param entry - The updated entry data\n   * @returns The updated record\n   */\n  updateRecord = (\n    slugOrId: string,\n    recordId: string,\n    entry: Record<string, unknown>,\n  ): Promise<DatasetRecordResponse> => {\n    return this.#datasetService.updateRecord(slugOrId, recordId, entry);\n  };\n\n  /**\n   * Deletes records from a dataset by IDs.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param recordIds - Array of record IDs to delete\n   * @returns Object with the count of deleted records\n   */\n  deleteRecords = (\n    slugOrId: string,\n    recordIds: string[],\n  ): Promise<DeleteRecordsResponse> => {\n    return this.#datasetService.deleteRecords(slugOrId, recordIds);\n  };\n\n  /**\n   * Lists records in a dataset with optional pagination.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param options - Pagination options (page, limit)\n   * @returns Paginated list of records\n   *\n   * @example\n   * ```typescript\n   * // List first page of records\n   * const result = await langwatch.datasets.listRecords(\"my-dataset\");\n   *\n   * // With pagination\n   * const page2 = await langwatch.datasets.listRecords(\"my-dataset\", { page: 2, limit: 25 });\n   * ```\n   */\n  listRecords = (\n    slugOrId: string,\n    options?: ListRecordsOptions,\n  ): Promise<ListRecordsApiResponse> => {\n    return this.#datasetService.listRecords(slugOrId, options);\n  };\n\n  /**\n   * Uploads a file to a dataset with a configurable strategy for handling existing datasets.\n   *\n   * Strategies:\n   * - `\"append\"` (default): Upload to existing dataset; if not found, create a new one.\n   * - `\"replace\"`: Delete all existing records, then upload; if not found, create a new one.\n   * - `\"error\"`: Throw a 409 error if the dataset already exists; if not found, create a new one.\n   *\n   * @param slugOrId - The slug or ID of the dataset\n   * @param file - The file to upload (File or Blob)\n   * @param options - Upload options including the ifExists strategy\n   * @returns The upload result\n   *\n   * @example\n   * ```typescript\n   * const file = new File([\"input,output\\nhello,world\"], \"data.csv\", { type: \"text/csv\" });\n   *\n   * // Append to existing or create new\n   * await langwatch.datasets.upload(\"my-dataset\", file);\n   *\n   * // Replace all records\n   * await langwatch.datasets.upload(\"my-dataset\", file, { ifExists: \"replace\" });\n   *\n   * // Fail if dataset already exists\n   * await langwatch.datasets.upload(\"my-dataset\", file, { ifExists: \"error\" });\n   * ```\n   */\n  upload = (\n    slugOrId: string,\n    file: File | Blob,\n    options?: {\n      ifExists?: \"append\" | \"replace\" | \"error\";\n    },\n  ): Promise<UploadResponse> => {\n    if (!file) {\n      throw new DatasetValidationError(\"File must be provided for upload\");\n    }\n    return this.#datasetService.uploadWithStrategy(\n      slugOrId,\n      file,\n      options?.ifExists ?? \"append\",\n    );\n  };\n}\n"]}

package/dist/chunk-M566XQWU.mjs

@@ -0,0 +1,277 @@
+import {
+  DeviceFlowError,
+  pollUntilDone,
+  startDeviceCode
+} from "./chunk-3CPA262Z.mjs";
+import {
+  getCliBootstrap
+} from "./chunk-KJMU7OIX.mjs";
+import {
+  loadConfig,
+  saveConfig
+} from "./chunk-U47MQ6CS.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/cli/utils/governance/login-flow.ts
+import * as fs from "fs";
+import * as path from "path";
+import chalk from "chalk";
+import ora from "ora";
+
+// src/cli/utils/governance/login-ceremony.ts
+var DEFAULT_TOOLS = [
+  { slug: "claude", displayName: "Claude Code" },
+  { slug: "codex", displayName: "Codex" },
+  { slug: "cursor", displayName: "Cursor" }
+];
+function padRight(s, width) {
+  if (s.length >= width) return s;
+  return s + " ".repeat(width - s.length);
+}
+function formatUsd(n) {
+  if (Number.isInteger(n)) return `$${n}`;
+  return `$${n.toFixed(2)}`;
+}
+function formatUsedUsd(n) {
+  return `$${n.toFixed(2)}`;
+}
+function formatLoginCeremony(input) {
+  const lines = [];
+  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : "";
+  lines.push(`\u2713 Logged in as ${input.email}${orgSuffix}`);
+  const tools = input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;
+  lines.push("");
+  lines.push("Your AI tools (run any of these):");
+  const cmdWidth = Math.max(
+    ...tools.map((t) => `langwatch ${t.slug}`.length)
+  );
+  for (const tool of tools) {
+    const cmd = `langwatch ${tool.slug}`;
+    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : "";
+    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);
+  }
+  if (input.providers && input.providers.length > 0) {
+    lines.push("");
+    lines.push("Model providers you can issue a virtual key for:");
+    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));
+    for (const p of input.providers) {
+      const padded = padRight(p.name, nameWidth);
+      const annotations = [];
+      if (p.displayName && p.displayName !== p.name) {
+        annotations.push(p.displayName);
+      }
+      if (p.configured === false) annotations.push("(not configured yet)");
+      const suffix = annotations.length > 0 ? `  ${annotations.join("  ")}` : "";
+      lines.push(`  \u2022 ${padded}${suffix}`);
+    }
+  }
+  if (input.budget) {
+    lines.push("");
+    const period = input.budget.period.charAt(0).toUpperCase() + input.budget.period.slice(1).toLowerCase();
+    lines.push(
+      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`
+    );
+  }
+  if (input.openCommand !== false) {
+    lines.push("");
+    lines.push("Or open the app in your browser:");
+    lines.push("  $ langwatch open");
+  }
+  return lines;
+}
+
+// src/cli/utils/governance/login-flow.ts
+async function runUnifiedLoginFlow(opts = {}) {
+  var _a, _b, _c, _d, _e, _f, _g;
+  const kind = (_a = opts.kind) != null ? _a : "device_session";
+  const cfg = (_b = opts.cfg) != null ? _b : loadConfig();
+  const baseUrl = cfg.control_plane_url;
+  console.log(chalk.blue("\u{1F510} LangWatch login"));
+  console.log(chalk.gray(`Control plane: ${baseUrl}`));
+  console.log(
+    chalk.gray(
+      kind === "project_api_key" ? "Mode: project SDK API key (will write .env)" : "Mode: device session (will write ~/.langwatch/config.json)"
+    )
+  );
+  const dc = await startDeviceCode({ baseUrl }, { credentialType: kind });
+  const verifyURL = (_c = dc.verification_uri_complete) != null ? _c : `${dc.verification_uri.replace(/\/+$/, "")}?user_code=${encodeURIComponent(dc.user_code)}`;
+  console.log();
+  console.log(chalk.cyan(`Opening: ${verifyURL}`));
+  console.log(
+    chalk.gray(
+      `If your browser doesn't open, paste the URL above and enter code: ${chalk.bold(dc.user_code)}`
+    )
+  );
+  console.log();
+  await openInBrowser(verifyURL, opts.browser);
+  const spinner = ora({
+    text: "Waiting for you to approve in the browser",
+    discardStdin: false
+  }).start();
+  const onSigint = () => {
+    spinner.stop();
+    console.log(chalk.gray("\nLogin cancelled."));
+    process.exit(130);
+  };
+  process.once("SIGINT", onSigint);
+  try {
+    const result = await pollUntilDone({ baseUrl }, dc);
+    if (result.kind === "device_session") {
+      spinner.succeed(`Logged in as ${result.user.email}`);
+      persistDeviceSession(cfg, result);
+      saveConfig(cfg);
+      const bootstrap = await fetchBootstrapSafely(cfg);
+      if (bootstrap == null ? void 0 : bootstrap.gatewayUrl) {
+        cfg.gateway_url = bootstrap.gatewayUrl;
+        saveConfig(cfg);
+      }
+      if (bootstrap == null ? void 0 : bootstrap.toolPolicies) {
+        cfg.tool_policies = bootstrap.toolPolicies;
+        saveConfig(cfg);
+      }
+      console.log();
+      const ceremonyLines = formatLoginCeremony({
+        email: (_e = (_d = cfg.user) == null ? void 0 : _d.email) != null ? _e : result.user.email,
+        organizationName: (_f = cfg.organization) == null ? void 0 : _f.name,
+        tools: bootstrap == null ? void 0 : bootstrap.tools,
+        providers: bootstrap == null ? void 0 : bootstrap.providers,
+        budget: ((_g = bootstrap == null ? void 0 : bootstrap.budget) == null ? void 0 : _g.monthlyLimitUsd) != null ? {
+          period: bootstrap.budget.period,
+          limitUsd: bootstrap.budget.monthlyLimitUsd,
+          usedUsd: bootstrap.budget.monthlyUsedUsd
+        } : void 0
+      });
+      for (const line of ceremonyLines) {
+        console.log(line);
+      }
+      console.log();
+      console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));
+      return cfg;
+    }
+    spinner.succeed(
+      `API key generated for project ${chalk.bold(result.project.name)}`
+    );
+    const envResult = writeApiKeyToEnv(result.api_key);
+    console.log();
+    console.log(chalk.green("\u2713 API key saved to .env"));
+    if (envResult.created) {
+      console.log(chalk.gray(`  \u2022 Created .env file at ${envResult.path}`));
+    } else if (envResult.updated) {
+      console.log(chalk.gray(`  \u2022 Updated existing API key in ${envResult.path}`));
+    } else {
+      console.log(chalk.gray(`  \u2022 Added API key to ${envResult.path}`));
+    }
+    console.log();
+    console.log(
+      chalk.gray(
+        `  Project: ${result.project.name} (${result.project.slug})`
+      )
+    );
+    console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));
+    return cfg;
+  } catch (err) {
+    spinner.fail();
+    if (err instanceof DeviceFlowError) {
+      switch (err.kind) {
+        case "denied":
+          throw new Error(
+            "authorization denied \u2014 you can retry `langwatch login`"
+          );
+        case "expired":
+          throw new Error(
+            "authorization request expired \u2014 run `langwatch login` again"
+          );
+        default:
+          throw err;
+      }
+    }
+    throw err;
+  } finally {
+    process.removeListener("SIGINT", onSigint);
+  }
+}
+async function runDeviceFlowLogin(opts = {}) {
+  return runUnifiedLoginFlow(__spreadProps(__spreadValues({}, opts), { kind: "device_session" }));
+}
+function persistDeviceSession(cfg, result) {
+  cfg.access_token = result.access_token;
+  cfg.refresh_token = result.refresh_token;
+  cfg.expires_at = Math.floor(Date.now() / 1e3) + result.expires_in;
+  cfg.user = {
+    id: result.user.id,
+    email: result.user.email,
+    name: result.user.name
+  };
+  cfg.organization = {
+    id: result.organization.id,
+    slug: result.organization.slug,
+    name: result.organization.name
+  };
+  if (result.default_personal_vk) {
+    cfg.default_personal_vk = {
+      id: result.default_personal_vk.id,
+      secret: result.default_personal_vk.secret,
+      prefix: result.default_personal_vk.prefix
+    };
+  }
+  if (result.endpoint) {
+    cfg.control_plane_url = result.endpoint.replace(/\/+$/, "");
+  }
+}
+function writeApiKeyToEnv(apiKey) {
+  const envPath = path.join(process.cwd(), ".env");
+  if (!fs.existsSync(envPath)) {
+    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}
+`);
+    return { created: true, updated: false, path: envPath };
+  }
+  const content = fs.readFileSync(envPath, "utf-8");
+  const lines = content.split("\n");
+  let found = false;
+  const updatedLines = lines.map((line) => {
+    if (line.startsWith("LANGWATCH_API_KEY=")) {
+      found = true;
+      return `LANGWATCH_API_KEY=${apiKey}`;
+    }
+    return line;
+  });
+  if (!found) {
+    if (content.endsWith("\n") || content === "") {
+      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);
+    } else {
+      updatedLines.push("", `LANGWATCH_API_KEY=${apiKey}`);
+    }
+  }
+  fs.writeFileSync(envPath, updatedLines.join("\n"));
+  return { created: false, updated: found, path: envPath };
+}
+async function fetchBootstrapSafely(cfg) {
+  try {
+    return await getCliBootstrap(cfg);
+  } catch (e) {
+    return null;
+  }
+}
+async function openInBrowser(url, override) {
+  var _a, _b;
+  const choice = (_b = (_a = override != null ? override : process.env.LANGWATCH_BROWSER) != null ? _a : process.env.BROWSER) != null ? _b : "";
+  if (choice === "none") return;
+  const open = (await import("open")).default;
+  try {
+    if (!choice || choice === "default") {
+      await open(url);
+      return;
+    }
+    await open(url, { app: { name: choice } });
+  } catch (e) {
+  }
+}
+
+export {
+  runUnifiedLoginFlow,
+  runDeviceFlowLogin
+};
+//# sourceMappingURL=chunk-M566XQWU.mjs.map

package/dist/chunk-M566XQWU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/utils/governance/login-flow.ts","../src/cli/utils/governance/login-ceremony.ts"],"sourcesContent":["/**\n * Shared device-code login implementations. Two entry points:\n *\n *   1. `runUnifiedLoginFlow({ kind })` — the canonical flow used by\n *      `langwatch login` (interactive routes here for both modes). The\n *      same browser-approval ceremony works for either credential type;\n *      only the persist target differs:\n *        kind: 'device_session' → ~/.langwatch/config.json\n *        kind: 'project_api_key' → $CWD/.env (LANGWATCH_API_KEY)\n *      No copy-paste of the credential ever — the server ships it\n *      back to the CLI over the same RFC 8628 poll endpoint.\n *\n *   2. `runDeviceFlowLogin(...)` — back-compat wrapper that calls\n *      `runUnifiedLoginFlow({ kind: 'device_session' })`. Preserved so\n *      `commands/login.ts --device` and `utils/governance/wrapper.ts`\n *      auto-login keep working without churn.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport {\n  startDeviceCode,\n  pollUntilDone,\n  DeviceFlowError,\n  type CredentialType,\n  type ExchangeApiKeyResult,\n  type ExchangeDeviceSessionResult,\n} from \"./device-flow\";\nimport { loadConfig, saveConfig, type GovernanceConfig } from \"./config\";\nimport { formatLoginCeremony } from \"./login-ceremony\";\nimport { getCliBootstrap, type CliBootstrapResponse } from \"./cli-api\";\n\nexport interface RunUnifiedLoginOptions {\n  /** Credential type to mint. Defaults to 'device_session' for back-compat. */\n  kind?: CredentialType;\n  /** Optional browser override (LANGWATCH_BROWSER also honoured). */\n  browser?: string;\n  /** Pre-loaded config to mutate; defaults to `loadConfig()`. */\n  cfg?: GovernanceConfig;\n}\n\nexport type RunDeviceFlowLoginOptions = Omit<RunUnifiedLoginOptions, \"kind\">;\n\n/**\n * Run the canonical device-code login flow end-to-end. Selects what to\n * mint via `kind` (defaults to device_session); the same browser\n * approval ceremony covers both modes. On success, persists to the\n * right store + returns the latest GovernanceConfig.\n */\nexport async function runUnifiedLoginFlow(\n  opts: RunUnifiedLoginOptions = {},\n): Promise<GovernanceConfig> {\n  const kind: CredentialType = opts.kind ?? \"device_session\";\n  const cfg = opts.cfg ?? loadConfig();\n  const baseUrl = cfg.control_plane_url;\n\n  console.log(chalk.blue(\"🔐 LangWatch login\"));\n  console.log(chalk.gray(`Control plane: ${baseUrl}`));\n  console.log(\n    chalk.gray(\n      kind === \"project_api_key\"\n        ? \"Mode: project SDK API key (will write .env)\"\n        : \"Mode: device session (will write ~/.langwatch/config.json)\",\n    ),\n  );\n\n  const dc = await startDeviceCode({ baseUrl }, { credentialType: kind });\n  const verifyURL =\n    dc.verification_uri_complete ??\n    `${dc.verification_uri.replace(/\\/+$/, \"\")}?user_code=${encodeURIComponent(dc.user_code)}`;\n\n  console.log();\n  console.log(chalk.cyan(`Opening: ${verifyURL}`));\n  console.log(\n    chalk.gray(\n      `If your browser doesn't open, paste the URL above and enter code: ${chalk.bold(dc.user_code)}`,\n    ),\n  );\n  console.log();\n\n  await openInBrowser(verifyURL, opts.browser);\n\n  // discardStdin:false is load-bearing. ora's default (true) flips stdin to\n  // raw mode while the spinner runs, so Ctrl+C arrives as a raw 0x03 byte that\n  // ora swallows instead of a SIGINT — the wait becomes unkillable. Keeping\n  // stdin cooked lets the terminal deliver SIGINT; the handler stops the\n  // spinner and exits cleanly so the user can always abort the login wait.\n  const spinner = ora({\n    text: \"Waiting for you to approve in the browser\",\n    discardStdin: false,\n  }).start();\n  const onSigint = () => {\n    spinner.stop();\n    console.log(chalk.gray(\"\\nLogin cancelled.\"));\n    process.exit(130);\n  };\n  process.once(\"SIGINT\", onSigint);\n  try {\n    const result = await pollUntilDone({ baseUrl }, dc);\n    if (result.kind === \"device_session\") {\n      spinner.succeed(`Logged in as ${result.user.email}`);\n      persistDeviceSession(cfg, result);\n      saveConfig(cfg);\n\n      const bootstrap = await fetchBootstrapSafely(cfg);\n\n      // Pick up the server's authoritative gateway URL. Without this,\n      // self-hosted CLI users would see the SaaS default\n      // (https://gateway.langwatch.ai) on whoami / login output even\n      // though the actual gateway is on localhost:5563. The server's\n      // `gatewayUrl` reflects `LW_GATEWAY_BASE_URL` or the IS_SAAS-\n      // aware fallback. Backwards-compatible: older servers (without\n      // this field) leave the local default in place.\n      if (bootstrap?.gatewayUrl) {\n        cfg.gateway_url = bootstrap.gatewayUrl;\n        saveConfig(cfg);\n      }\n\n      // Cache the org's per-tool path policy so the `langwatch <tool>`\n      // wrapper gates path selection on the admin's choices offline.\n      // Older servers omit the field; the wrapper then falls back to\n      // the hardcoded defaults.\n      if (bootstrap?.toolPolicies) {\n        cfg.tool_policies = bootstrap.toolPolicies;\n        saveConfig(cfg);\n      }\n\n      console.log();\n      const ceremonyLines = formatLoginCeremony({\n        email: cfg.user?.email ?? result.user.email,\n        organizationName: cfg.organization?.name,\n        tools: bootstrap?.tools,\n        providers: bootstrap?.providers,\n        budget:\n          bootstrap?.budget?.monthlyLimitUsd != null\n            ? {\n                period: bootstrap.budget.period,\n                limitUsd: bootstrap.budget.monthlyLimitUsd,\n                usedUsd: bootstrap.budget.monthlyUsedUsd,\n              }\n            : undefined,\n      });\n      for (const line of ceremonyLines) {\n        console.log(line);\n      }\n      console.log();\n      console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n\n      return cfg;\n    }\n\n    // kind === 'api_key' — write to project-local .env (NO copy-paste)\n    spinner.succeed(\n      `API key generated for project ${chalk.bold(result.project.name)}`,\n    );\n    const envResult = writeApiKeyToEnv(result.api_key);\n    console.log();\n    console.log(chalk.green(\"✓ API key saved to .env\"));\n    if (envResult.created) {\n      console.log(chalk.gray(`  • Created .env file at ${envResult.path}`));\n    } else if (envResult.updated) {\n      console.log(chalk.gray(`  • Updated existing API key in ${envResult.path}`));\n    } else {\n      console.log(chalk.gray(`  • Added API key to ${envResult.path}`));\n    }\n    console.log();\n    console.log(\n      chalk.gray(\n        `  Project: ${result.project.name} (${result.project.slug})`,\n      ),\n    );\n    console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n    return cfg;\n  } catch (err) {\n    spinner.fail();\n    if (err instanceof DeviceFlowError) {\n      switch (err.kind) {\n        case \"denied\":\n          throw new Error(\n            \"authorization denied — you can retry `langwatch login`\",\n          );\n        case \"expired\":\n          throw new Error(\n            \"authorization request expired — run `langwatch login` again\",\n          );\n        default:\n          throw err;\n      }\n    }\n    throw err;\n  } finally {\n    process.removeListener(\"SIGINT\", onSigint);\n  }\n}\n\n/**\n * Back-compat wrapper. New callers should use `runUnifiedLoginFlow`\n * directly with an explicit `kind`.\n */\nexport async function runDeviceFlowLogin(\n  opts: RunDeviceFlowLoginOptions = {},\n): Promise<GovernanceConfig> {\n  return runUnifiedLoginFlow({ ...opts, kind: \"device_session\" });\n}\n\nfunction persistDeviceSession(\n  cfg: GovernanceConfig,\n  result: ExchangeDeviceSessionResult,\n): void {\n  cfg.access_token = result.access_token;\n  cfg.refresh_token = result.refresh_token;\n  cfg.expires_at = Math.floor(Date.now() / 1000) + result.expires_in;\n  cfg.user = {\n    id: result.user.id,\n    email: result.user.email,\n    name: result.user.name,\n  };\n  cfg.organization = {\n    id: result.organization.id,\n    slug: result.organization.slug,\n    name: result.organization.name,\n  };\n  if (result.default_personal_vk) {\n    cfg.default_personal_vk = {\n      id: result.default_personal_vk.id,\n      secret: result.default_personal_vk.secret,\n      prefix: result.default_personal_vk.prefix,\n    };\n  }\n  if (result.endpoint) {\n    cfg.control_plane_url = result.endpoint.replace(/\\/+$/, \"\");\n  }\n}\n\ninterface EnvWriteResult {\n  created: boolean;\n  updated: boolean;\n  path: string;\n}\n\nfunction writeApiKeyToEnv(apiKey: string): EnvWriteResult {\n  const envPath = path.join(process.cwd(), \".env\");\n  if (!fs.existsSync(envPath)) {\n    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}\\n`);\n    return { created: true, updated: false, path: envPath };\n  }\n  const content = fs.readFileSync(envPath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  let found = false;\n  const updatedLines = lines.map((line) => {\n    if (line.startsWith(\"LANGWATCH_API_KEY=\")) {\n      found = true;\n      return `LANGWATCH_API_KEY=${apiKey}`;\n    }\n    return line;\n  });\n  if (!found) {\n    if (content.endsWith(\"\\n\") || content === \"\") {\n      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);\n    } else {\n      updatedLines.push(\"\", `LANGWATCH_API_KEY=${apiKey}`);\n    }\n  }\n  fs.writeFileSync(envPath, updatedLines.join(\"\\n\"));\n  return { created: false, updated: found, path: envPath };\n}\n\nasync function fetchBootstrapSafely(\n  cfg: GovernanceConfig,\n): Promise<CliBootstrapResponse | null> {\n  try {\n    return await getCliBootstrap(cfg);\n  } catch {\n    return null;\n  }\n}\n\nasync function openInBrowser(url: string, override?: string): Promise<void> {\n  const choice =\n    override ?? process.env.LANGWATCH_BROWSER ?? process.env.BROWSER ?? \"\";\n  if (choice === \"none\") return;\n  const open = (await import(\"open\")).default;\n  try {\n    if (!choice || choice === \"default\") {\n      await open(url);\n      return;\n    }\n    await open(url, { app: { name: choice } });\n  } catch {\n    // browser failure shouldn't break login — user can paste manually\n  }\n}\n\n// The post-login shell-rc persist offer was removed when `langwatch\n// login` became auth-only: the device session in config.json is\n// already authoritative, so login never edits the shell rc. The\n// persist offer now lives in the `langwatch <tool>` wrapper and fires\n// only in ingestion mode (maybeOfferIngestionShellRcPersist in\n// shell-rc.ts), framed as installing telemetry.\n\n// Type-only re-exports so callers can import the shapes from this\n// module without reaching into device-flow.ts.\nexport type { ExchangeApiKeyResult, ExchangeDeviceSessionResult };\n","/**\n * Render the \"You're in!\" ceremony emitted by `langwatch login` after a\n * successful device-flow exchange.\n *\n * Two clearly-separated lists, sourced from the org's AI Tools catalog:\n *\n *   ✓ Logged in as jane@acme.com @ Acme\n *\n *   Your AI tools (run any of these):\n *     $ langwatch claude   # Claude Code\n *     $ langwatch codex    # Codex\n *\n *   Model providers you can issue a virtual key for:\n *     • anthropic   Claude\n *     • openai      (not configured yet)\n *\n *   Monthly budget: $500   |   Used: $0.00\n *\n *   Or open the app in your browser:\n *     $ langwatch open\n *\n * The two sections answer two different questions: which coding assistants\n * can I run right now (`tools`), and which model providers can I mint my own\n * virtual key for (`providers`). They are NOT the same thing — conflating\n * them was the bug this rewrite fixes.\n *\n * Pure function: takes the data, returns an array of lines. Caller applies\n * any chalk colouring + writes to stdout. Lets unit tests assert on the\n * literal output without colour/escape noise.\n */\n\nexport interface LoginCeremonyTool {\n  /** CLI slug the wrapper runs (e.g. \"claude\", \"codex\"). */\n  slug: string;\n  /** Human-readable assistant name (e.g. \"Claude Code\"). */\n  displayName: string;\n}\n\nexport interface LoginCeremonyProvider {\n  /** Provider key (lowercase, e.g. \"anthropic\", \"openai\", \"gemini\"). */\n  name: string;\n  /** Optional human-readable provider label (e.g. \"Anthropic\"). */\n  displayName?: string;\n  /**\n   * Whether the org has a live credential for this provider. When false the\n   * ceremony annotates the row so the user knows the tile still needs setup\n   * before a minted key will work.\n   */\n  configured?: boolean;\n}\n\nexport interface LoginCeremonyBudget {\n  /** Period label (e.g. \"Monthly\"). Capitalised in output. */\n  period: string;\n  /** Spend ceiling in USD (rendered as `$N`). */\n  limitUsd: number;\n  /** Used so far in USD (rendered with two decimals). */\n  usedUsd: number;\n}\n\nexport interface LoginCeremonyInput {\n  email: string;\n  organizationName?: string;\n  /**\n   * Coding assistants the user can run via `langwatch <slug>`, sourced from\n   * the org's catalog. When empty / omitted the ceremony falls back to the\n   * built-in default wrappers so a fresh org still gets a next-step.\n   */\n  tools?: LoginCeremonyTool[];\n  /** Model providers the user can mint their own virtual key for. */\n  providers?: LoginCeremonyProvider[];\n  budget?: LoginCeremonyBudget;\n  /** Whether the `langwatch open` browser-launch command is available. */\n  openCommand?: boolean;\n}\n\n/** Fallback wrappers when the org has not published any coding-assistant tile. */\nconst DEFAULT_TOOLS: LoginCeremonyTool[] = [\n  { slug: \"claude\", displayName: \"Claude Code\" },\n  { slug: \"codex\", displayName: \"Codex\" },\n  { slug: \"cursor\", displayName: \"Cursor\" },\n];\n\nfunction padRight(s: string, width: number): string {\n  if (s.length >= width) return s;\n  return s + \" \".repeat(width - s.length);\n}\n\nfunction formatUsd(n: number): string {\n  // $500 (whole) → \"$500\"; $42.18 → \"$42.18\".\n  if (Number.isInteger(n)) return `$${n}`;\n  return `$${n.toFixed(2)}`;\n}\n\nfunction formatUsedUsd(n: number): string {\n  return `$${n.toFixed(2)}`;\n}\n\nexport function formatLoginCeremony(input: LoginCeremonyInput): string[] {\n  const lines: string[] = [];\n\n  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : \"\";\n  lines.push(`✓ Logged in as ${input.email}${orgSuffix}`);\n\n  // AI tools (coding assistants). Fall back to the built-in wrappers when the\n  // org published none, so the user always gets a runnable next-step.\n  const tools =\n    input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;\n  lines.push(\"\");\n  lines.push(\"Your AI tools (run any of these):\");\n  const cmdWidth = Math.max(\n    ...tools.map((t) => `langwatch ${t.slug}`.length),\n  );\n  for (const tool of tools) {\n    const cmd = `langwatch ${tool.slug}`;\n    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : \"\";\n    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);\n  }\n\n  // Model providers the user can mint a virtual key for — a different concept\n  // from the tools above. Only shown when the org published provider tiles.\n  if (input.providers && input.providers.length > 0) {\n    lines.push(\"\");\n    lines.push(\"Model providers you can issue a virtual key for:\");\n    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));\n    for (const p of input.providers) {\n      const padded = padRight(p.name, nameWidth);\n      const annotations: string[] = [];\n      if (p.displayName && p.displayName !== p.name) {\n        annotations.push(p.displayName);\n      }\n      if (p.configured === false) annotations.push(\"(not configured yet)\");\n      const suffix = annotations.length > 0 ? `  ${annotations.join(\"  \")}` : \"\";\n      lines.push(`  • ${padded}${suffix}`);\n    }\n  }\n\n  if (input.budget) {\n    lines.push(\"\");\n    const period =\n      input.budget.period.charAt(0).toUpperCase() +\n      input.budget.period.slice(1).toLowerCase();\n    lines.push(\n      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`,\n    );\n  }\n\n  if (input.openCommand !== false) {\n    lines.push(\"\");\n    lines.push(\"Or open the app in your browser:\");\n    lines.push(\"  $ langwatch open\");\n  }\n\n  return lines;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,OAAO,WAAW;AAClB,OAAO,SAAS;;;ACsDhB,IAAM,gBAAqC;AAAA,EACzC,EAAE,MAAM,UAAU,aAAa,cAAc;AAAA,EAC7C,EAAE,MAAM,SAAS,aAAa,QAAQ;AAAA,EACtC,EAAE,MAAM,UAAU,aAAa,SAAS;AAC1C;AAEA,SAAS,SAAS,GAAW,OAAuB;AAClD,MAAI,EAAE,UAAU,MAAO,QAAO;AAC9B,SAAO,IAAI,IAAI,OAAO,QAAQ,EAAE,MAAM;AACxC;AAEA,SAAS,UAAU,GAAmB;AAEpC,MAAI,OAAO,UAAU,CAAC,EAAG,QAAO,IAAI,CAAC;AACrC,SAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzB;AAEA,SAAS,cAAc,GAAmB;AACxC,SAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzB;AAEO,SAAS,oBAAoB,OAAqC;AACvE,QAAM,QAAkB,CAAC;AAEzB,QAAM,YAAY,MAAM,mBAAmB,MAAM,MAAM,gBAAgB,KAAK;AAC5E,QAAM,KAAK,uBAAkB,MAAM,KAAK,GAAG,SAAS,EAAE;AAItD,QAAM,QACJ,MAAM,SAAS,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ;AACxD,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,mCAAmC;AAC9C,QAAM,WAAW,KAAK;AAAA,IACpB,GAAG,MAAM,IAAI,CAAC,MAAM,aAAa,EAAE,IAAI,GAAG,MAAM;AAAA,EAClD;AACA,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,aAAa,KAAK,IAAI;AAClC,UAAM,cAAc,KAAK,cAAc,OAAO,KAAK,WAAW,KAAK;AACnE,UAAM,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG,WAAW,EAAE;AAAA,EAC3D;AAIA,MAAI,MAAM,aAAa,MAAM,UAAU,SAAS,GAAG;AACjD,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,kDAAkD;AAC7D,UAAM,YAAY,KAAK,IAAI,GAAG,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AACvE,eAAW,KAAK,MAAM,WAAW;AAC/B,YAAM,SAAS,SAAS,EAAE,MAAM,SAAS;AACzC,YAAM,cAAwB,CAAC;AAC/B,UAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM;AAC7C,oBAAY,KAAK,EAAE,WAAW;AAAA,MAChC;AACA,UAAI,EAAE,eAAe,MAAO,aAAY,KAAK,sBAAsB;AACnE,YAAM,SAAS,YAAY,SAAS,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK;AACxE,YAAM,KAAK,YAAO,MAAM,GAAG,MAAM,EAAE;AAAA,IACrC;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,UAAM,KAAK,EAAE;AACb,UAAM,SACJ,MAAM,OAAO,OAAO,OAAO,CAAC,EAAE,YAAY,IAC1C,MAAM,OAAO,OAAO,MAAM,CAAC,EAAE,YAAY;AAC3C,UAAM;AAAA,MACJ,GAAG,MAAM,YAAY,UAAU,MAAM,OAAO,QAAQ,CAAC,gBAAgB,cAAc,MAAM,OAAO,OAAO,CAAC;AAAA,IAC1G;AAAA,EACF;AAEA,MAAI,MAAM,gBAAgB,OAAO;AAC/B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,kCAAkC;AAC7C,UAAM,KAAK,oBAAoB;AAAA,EACjC;AAEA,SAAO;AACT;;;ADrGA,eAAsB,oBACpB,OAA+B,CAAC,GACL;AAvD7B;AAwDE,QAAM,QAAuB,UAAK,SAAL,YAAa;AAC1C,QAAM,OAAM,UAAK,QAAL,YAAY,WAAW;AACnC,QAAM,UAAU,IAAI;AAEpB,UAAQ,IAAI,MAAM,KAAK,2BAAoB,CAAC;AAC5C,UAAQ,IAAI,MAAM,KAAK,kBAAkB,OAAO,EAAE,CAAC;AACnD,UAAQ;AAAA,IACN,MAAM;AAAA,MACJ,SAAS,oBACL,gDACA;AAAA,IACN;AAAA,EACF;AAEA,QAAM,KAAK,MAAM,gBAAgB,EAAE,QAAQ,GAAG,EAAE,gBAAgB,KAAK,CAAC;AACtE,QAAM,aACJ,QAAG,8BAAH,YACA,GAAG,GAAG,iBAAiB,QAAQ,QAAQ,EAAE,CAAC,cAAc,mBAAmB,GAAG,SAAS,CAAC;AAE1F,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,YAAY,SAAS,EAAE,CAAC;AAC/C,UAAQ;AAAA,IACN,MAAM;AAAA,MACJ,qEAAqE,MAAM,KAAK,GAAG,SAAS,CAAC;AAAA,IAC/F;AAAA,EACF;AACA,UAAQ,IAAI;AAEZ,QAAM,cAAc,WAAW,KAAK,OAAO;AAO3C,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB,CAAC,EAAE,MAAM;AACT,QAAM,WAAW,MAAM;AACrB,YAAQ,KAAK;AACb,YAAQ,IAAI,MAAM,KAAK,oBAAoB,CAAC;AAC5C,YAAQ,KAAK,GAAG;AAAA,EAClB;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,EAAE,QAAQ,GAAG,EAAE;AAClD,QAAI,OAAO,SAAS,kBAAkB;AACpC,cAAQ,QAAQ,gBAAgB,OAAO,KAAK,KAAK,EAAE;AACnD,2BAAqB,KAAK,MAAM;AAChC,iBAAW,GAAG;AAEd,YAAM,YAAY,MAAM,qBAAqB,GAAG;AAShD,UAAI,uCAAW,YAAY;AACzB,YAAI,cAAc,UAAU;AAC5B,mBAAW,GAAG;AAAA,MAChB;AAMA,UAAI,uCAAW,cAAc;AAC3B,YAAI,gBAAgB,UAAU;AAC9B,mBAAW,GAAG;AAAA,MAChB;AAEA,cAAQ,IAAI;AACZ,YAAM,gBAAgB,oBAAoB;AAAA,QACxC,QAAO,eAAI,SAAJ,mBAAU,UAAV,YAAmB,OAAO,KAAK;AAAA,QACtC,mBAAkB,SAAI,iBAAJ,mBAAkB;AAAA,QACpC,OAAO,uCAAW;AAAA,QAClB,WAAW,uCAAW;AAAA,QACtB,UACE,4CAAW,WAAX,mBAAmB,oBAAmB,OAClC;AAAA,UACE,QAAQ,UAAU,OAAO;AAAA,UACzB,UAAU,UAAU,OAAO;AAAA,UAC3B,SAAS,UAAU,OAAO;AAAA,QAC5B,IACA;AAAA,MACR,CAAC;AACD,iBAAW,QAAQ,eAAe;AAChC,gBAAQ,IAAI,IAAI;AAAA,MAClB;AACA,cAAQ,IAAI;AACZ,cAAQ,IAAI,MAAM,KAAK,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;AAE/D,aAAO;AAAA,IACT;AAGA,YAAQ;AAAA,MACN,iCAAiC,MAAM,KAAK,OAAO,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,UAAM,YAAY,iBAAiB,OAAO,OAAO;AACjD,YAAQ,IAAI;AACZ,YAAQ,IAAI,MAAM,MAAM,8BAAyB,CAAC;AAClD,QAAI,UAAU,SAAS;AACrB,cAAQ,IAAI,MAAM,KAAK,iCAA4B,UAAU,IAAI,EAAE,CAAC;AAAA,IACtE,WAAW,UAAU,SAAS;AAC5B,cAAQ,IAAI,MAAM,KAAK,wCAAmC,UAAU,IAAI,EAAE,CAAC;AAAA,IAC7E,OAAO;AACL,cAAQ,IAAI,MAAM,KAAK,6BAAwB,UAAU,IAAI,EAAE,CAAC;AAAA,IAClE;AACA,YAAQ,IAAI;AACZ,YAAQ;AAAA,MACN,MAAM;AAAA,QACJ,cAAc,OAAO,QAAQ,IAAI,KAAK,OAAO,QAAQ,IAAI;AAAA,MAC3D;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,KAAK,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;AAC/D,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,YAAQ,KAAK;AACb,QAAI,eAAe,iBAAiB;AAClC,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF,KAAK;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACE,gBAAM;AAAA,MACV;AAAA,IACF;AACA,UAAM;AAAA,EACR,UAAE;AACA,YAAQ,eAAe,UAAU,QAAQ;AAAA,EAC3C;AACF;AAMA,eAAsB,mBACpB,OAAkC,CAAC,GACR;AAC3B,SAAO,oBAAoB,iCAAK,OAAL,EAAW,MAAM,iBAAiB,EAAC;AAChE;AAEA,SAAS,qBACP,KACA,QACM;AACN,MAAI,eAAe,OAAO;AAC1B,MAAI,gBAAgB,OAAO;AAC3B,MAAI,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,OAAO;AACxD,MAAI,OAAO;AAAA,IACT,IAAI,OAAO,KAAK;AAAA,IAChB,OAAO,OAAO,KAAK;AAAA,IACnB,MAAM,OAAO,KAAK;AAAA,EACpB;AACA,MAAI,eAAe;AAAA,IACjB,IAAI,OAAO,aAAa;AAAA,IACxB,MAAM,OAAO,aAAa;AAAA,IAC1B,MAAM,OAAO,aAAa;AAAA,EAC5B;AACA,MAAI,OAAO,qBAAqB;AAC9B,QAAI,sBAAsB;AAAA,MACxB,IAAI,OAAO,oBAAoB;AAAA,MAC/B,QAAQ,OAAO,oBAAoB;AAAA,MACnC,QAAQ,OAAO,oBAAoB;AAAA,IACrC;AAAA,EACF;AACA,MAAI,OAAO,UAAU;AACnB,QAAI,oBAAoB,OAAO,SAAS,QAAQ,QAAQ,EAAE;AAAA,EAC5D;AACF;AAQA,SAAS,iBAAiB,QAAgC;AACxD,QAAM,UAAe,UAAK,QAAQ,IAAI,GAAG,MAAM;AAC/C,MAAI,CAAI,cAAW,OAAO,GAAG;AAC3B,IAAG,iBAAc,SAAS,qBAAqB,MAAM;AAAA,CAAI;AACzD,WAAO,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,QAAQ;AAAA,EACxD;AACA,QAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,MAAI,QAAQ;AACZ,QAAM,eAAe,MAAM,IAAI,CAAC,SAAS;AACvC,QAAI,KAAK,WAAW,oBAAoB,GAAG;AACzC,cAAQ;AACR,aAAO,qBAAqB,MAAM;AAAA,IACpC;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI,CAAC,OAAO;AACV,QAAI,QAAQ,SAAS,IAAI,KAAK,YAAY,IAAI;AAC5C,mBAAa,KAAK,qBAAqB,MAAM,EAAE;AAAA,IACjD,OAAO;AACL,mBAAa,KAAK,IAAI,qBAAqB,MAAM,EAAE;AAAA,IACrD;AAAA,EACF;AACA,EAAG,iBAAc,SAAS,aAAa,KAAK,IAAI,CAAC;AACjD,SAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM,QAAQ;AACzD;AAEA,eAAe,qBACb,KACsC;AACtC,MAAI;AACF,WAAO,MAAM,gBAAgB,GAAG;AAAA,EAClC,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAAc,KAAa,UAAkC;AAzR5E;AA0RE,QAAM,UACJ,yCAAY,QAAQ,IAAI,sBAAxB,YAA6C,QAAQ,IAAI,YAAzD,YAAoE;AACtE,MAAI,WAAW,OAAQ;AACvB,QAAM,QAAQ,MAAM,OAAO,MAAM,GAAG;AACpC,MAAI;AACF,QAAI,CAAC,UAAU,WAAW,WAAW;AACnC,YAAM,KAAK,GAAG;AACd;AAAA,IACF;AACA,UAAM,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM,OAAO,EAAE,CAAC;AAAA,EAC3C,SAAQ;AAAA,EAER;AACF;","names":[]}

package/dist/chunk-M5WZJP5D.mjs

@@ -0,0 +1,103 @@
+import {
+  DEFAULT_ENDPOINT
+} from "./chunk-QMULACG7.mjs";
+import {
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts
+var VirtualKeysApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "VirtualKeysApiError";
+  }
+};
+var VirtualKeysApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = ((_b = (_a = config == null ? void 0 : config.endpoint) != null ? _a : process.env.LANGWATCH_ENDPOINT) != null ? _b : DEFAULT_ENDPOINT).replace(/\/+$/, "");
+    this.apiKey = (_d = (_c = config == null ? void 0 : config.apiKey) != null ? _c : process.env.LANGWATCH_API_KEY) != null ? _d : "";
+  }
+  headers() {
+    return {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    };
+  }
+  async request(operation, path, init) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, __spreadProps(__spreadValues({}, init), {
+      headers: __spreadValues(__spreadValues({}, this.headers()), (_a = init == null ? void 0 : init.headers) != null ? _a : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throw new VirtualKeysApiError(message, operation, parsedBody);
+    }
+    return await response.json();
+  }
+  async list() {
+    const { data } = await this.request(
+      "list virtual keys",
+      "/api/gateway/v1/virtual-keys"
+    );
+    return data;
+  }
+  async get(id) {
+    const { virtual_key } = await this.request(
+      `get virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`
+    );
+    return virtual_key;
+  }
+  async create(input) {
+    return this.request(
+      "create virtual key",
+      "/api/gateway/v1/virtual-keys",
+      { method: "POST", body: JSON.stringify(input) }
+    );
+  }
+  async update(id, input) {
+    const { virtual_key } = await this.request(
+      `update virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,
+      { method: "PATCH", body: JSON.stringify(input) }
+    );
+    return virtual_key;
+  }
+  async rotate(id) {
+    return this.request(
+      `rotate virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,
+      { method: "POST" }
+    );
+  }
+  async revoke(id) {
+    const { virtual_key } = await this.request(
+      `revoke virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,
+      { method: "POST" }
+    );
+    return virtual_key;
+  }
+};
+
+export {
+  VirtualKeysApiService
+};
+//# sourceMappingURL=chunk-M5WZJP5D.mjs.map

package/dist/chunk-MGGXWCRG.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkNTWYYCHMjs = require('./chunk-NTWYYCHM.js');
+
+// src/cli/commands/virtual-keys/_shared.ts
+function virtualKeyDetailUrl(vkId) {
+  const uiOverride = process.env.LANGWATCH_UI_ENDPOINT;
+  const base = (uiOverride != null ? uiOverride : _chunkNTWYYCHMjs.resolveControlPlaneUrl.call(void 0, )).replace(/\/+$/, "");
+  if (!base) return "";
+  return `${base}/settings/gateway/virtual-keys/${encodeURIComponent(vkId)}`;
+}
+var SCOPE_TYPES = ["ORGANIZATION", "TEAM", "PROJECT"];
+function parseScopeArg(raw) {
+  const trimmed = raw.trim();
+  const colon = trimmed.indexOf(":");
+  if (colon < 1 || colon === trimmed.length - 1) {
+    throw new Error(`--scope value "${raw}" must be in the form TYPE:id (e.g. ORG:acme, TEAM:platform, PROJECT:demo)`);
+  }
+  const typeRaw = trimmed.slice(0, colon).toUpperCase();
+  const scopeId = trimmed.slice(colon + 1).trim();
+  const scopeType = typeRaw === "ORG" ? "ORGANIZATION" : SCOPE_TYPES.includes(typeRaw) ? typeRaw : null;
+  if (!scopeType) {
+    throw new Error(`--scope type "${typeRaw}" must be one of ORG | ORGANIZATION | TEAM | PROJECT`);
+  }
+  if (!scopeId) {
+    throw new Error(`--scope value "${raw}" is missing the id after the colon`);
+  }
+  return { scope_type: scopeType, scope_id: scopeId };
+}
+function formatScope(scope) {
+  const prefix = scope.scope_type === "ORGANIZATION" ? "ORG" : scope.scope_type;
+  return `${prefix}:${scope.scope_id}`;
+}
+
+
+
+
+
+exports.virtualKeyDetailUrl = virtualKeyDetailUrl; exports.parseScopeArg = parseScopeArg; exports.formatScope = formatScope;
+//# sourceMappingURL=chunk-MGGXWCRG.js.map

package/dist/chunk-MGGXWCRG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-MGGXWCRG.js","../src/cli/commands/virtual-keys/_shared.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACMO,SAAS,mBAAA,CAAoB,IAAA,EAAsB;AACxD,EAAA,MAAM,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,qBAAA;AAC/B,EAAA,MAAM,KAAA,EAAA,CAAQ,WAAA,GAAA,KAAA,EAAA,WAAA,EAAc,qDAAA,CAAuB,CAAA,CAAG,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACxE,EAAA,GAAA,CAAI,CAAC,IAAA,EAAM,OAAO,EAAA;AAClB,EAAA,OAAO,CAAA,EAAA;AACT;AAEM;AASU;AACR,EAAA;AACA,EAAA;AACF,EAAA;AACI,IAAA;AACR,EAAA;AACM,EAAA;AACA,EAAA;AACA,EAAA;AAID,EAAA;AACG,IAAA;AACR,EAAA;AACK,EAAA;AACG,IAAA;AACR,EAAA;AACO,EAAA;AACT;AAMgB;AACR,EAAA;AACC,EAAA;AACT;ADrBU;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-MGGXWCRG.js","sourcesContent":[null,"import type { VirtualKeyScope, VirtualKeyScopeType } from \"@/client-sdk/services/virtual-keys/virtual-keys-api.service\";\nimport { resolveControlPlaneUrl } from \"@/cli/utils/governance/resolveEndpoint\";\n\n/**\n * Build the public-facing LangWatch UI URL for a VK detail page. After the\n * multi-scope refactor (PR #3524), VKs live at the org-scoped settings\n * surface (/settings/gateway/virtual-keys/:id) regardless of their scope\n * rows; the per-project gateway pages are gone. Honours\n * `LANGWATCH_UI_ENDPOINT` for split UI/API hosts.\n */\nexport function virtualKeyDetailUrl(vkId: string): string {\n  const uiOverride = process.env.LANGWATCH_UI_ENDPOINT;\n  const base = (uiOverride ?? resolveControlPlaneUrl()).replace(/\\/+$/, \"\");\n  if (!base) return \"\";\n  return `${base}/settings/gateway/virtual-keys/${encodeURIComponent(vkId)}`;\n}\n\nconst SCOPE_TYPES: VirtualKeyScopeType[] = [\"ORGANIZATION\", \"TEAM\", \"PROJECT\"];\n\n/**\n * Parse a single `--scope <TYPE>:<id>` CLI value into a `VirtualKeyScope`.\n * Accepts the canonical ORGANIZATION/TEAM/PROJECT spellings (case-insensitive)\n * plus the friendly ORG alias for `ORGANIZATION`. Throws an Error with a\n * single-sentence message the CLI can print directly so users see what they\n * mistyped without a stack trace.\n */\nexport function parseScopeArg(raw: string): VirtualKeyScope {\n  const trimmed = raw.trim();\n  const colon = trimmed.indexOf(\":\");\n  if (colon < 1 || colon === trimmed.length - 1) {\n    throw new Error(`--scope value \"${raw}\" must be in the form TYPE:id (e.g. ORG:acme, TEAM:platform, PROJECT:demo)`);\n  }\n  const typeRaw = trimmed.slice(0, colon).toUpperCase();\n  const scopeId = trimmed.slice(colon + 1).trim();\n  const scopeType: VirtualKeyScopeType | null =\n    typeRaw === \"ORG\" ? \"ORGANIZATION\" :\n    (SCOPE_TYPES as readonly string[]).includes(typeRaw) ? (typeRaw as VirtualKeyScopeType) :\n    null;\n  if (!scopeType) {\n    throw new Error(`--scope type \"${typeRaw}\" must be one of ORG | ORGANIZATION | TEAM | PROJECT`);\n  }\n  if (!scopeId) {\n    throw new Error(`--scope value \"${raw}\" is missing the id after the colon`);\n  }\n  return { scope_type: scopeType, scope_id: scopeId };\n}\n\n/**\n * Format a scope for display in CLI tables / get output: `ORG:acme`,\n * `TEAM:platform`, etc. Uses the short `ORG` form for brevity.\n */\nexport function formatScope(scope: VirtualKeyScope): string {\n  const prefix = scope.scope_type === \"ORGANIZATION\" ? \"ORG\" : scope.scope_type;\n  return `${prefix}:${scope.scope_id}`;\n}\n"]}

package/dist/chunk-N7T37JOT.mjs

@@ -0,0 +1,80 @@
+import {
+  DEFAULT_ENDPOINT
+} from "./chunk-QMULACG7.mjs";
+import {
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/client-sdk/services/api-keys/api-keys-api.service.ts
+var ApiKeysApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ApiKeysApiError";
+  }
+};
+var ApiKeysApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = ((_b = (_a = config == null ? void 0 : config.endpoint) != null ? _a : process.env.LANGWATCH_ENDPOINT) != null ? _b : DEFAULT_ENDPOINT).replace(/\/+$/, "");
+    this.apiKey = (_d = (_c = config == null ? void 0 : config.apiKey) != null ? _c : process.env.LANGWATCH_API_KEY) != null ? _d : "";
+  }
+  headers() {
+    return {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    };
+  }
+  async request(operation, path, init) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, __spreadProps(__spreadValues({}, init), {
+      headers: __spreadValues(__spreadValues({}, this.headers()), (_a = init == null ? void 0 : init.headers) != null ? _a : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throw new ApiKeysApiError(message, operation, parsedBody);
+    }
+    return await response.json();
+  }
+  async list() {
+    const { data } = await this.request(
+      "list API keys",
+      "/api/api-keys"
+    );
+    return data;
+  }
+  async create(input) {
+    return this.request(
+      "create API key",
+      "/api/api-keys",
+      { method: "POST", body: JSON.stringify(input) }
+    );
+  }
+  async revoke(id) {
+    return this.request(
+      `revoke API key "${id}"`,
+      `/api/api-keys/${encodeURIComponent(id)}`,
+      { method: "DELETE" }
+    );
+  }
+};
+
+export {
+  ApiKeysApiService
+};
+//# sourceMappingURL=chunk-N7T37JOT.mjs.map