langwatch 0.30.0 → 0.32.0

package/dist/chunk-TLCLBKRY.mjs

@@ -0,0 +1,346 @@
+import {
+  checkApiKey
+} from "./chunk-DYXCAWQR.mjs";
+import {
+  PromptsApiService,
+  PromptsError
+} from "./chunk-BOOZEXYC.mjs";
+import {
+  ensureProjectInitialized
+} from "./chunk-4AG4UVAE.mjs";
+import {
+  FileManager,
+  PromptConverter,
+  responseFormatToOutputs
+} from "./chunk-YKGQVSLF.mjs";
+import {
+  formatApiErrorMessage
+} from "./chunk-J3KM7ZO7.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/cli/commands/push.ts
+import * as fs from "fs";
+import * as path from "path";
+import chalk from "chalk";
+import ora from "ora";
+import * as yaml from "js-yaml";
+import readline from "readline";
+var handleConflict = async (promptName, conflictInfo, forceResolution) => {
+  console.log(
+    chalk.yellow(`
+\u26A0 Conflict detected for prompt: ${chalk.cyan(promptName)}`)
+  );
+  console.log(
+    chalk.gray(
+      `Local version: ${conflictInfo.localVersion}, Remote version: ${conflictInfo.remoteVersion}`
+    )
+  );
+  if (conflictInfo.differences.length > 0) {
+    console.log(chalk.yellow("\nDifferences:"));
+    conflictInfo.differences.forEach((diff) => {
+      console.log(chalk.gray(`  \u2022 ${diff}`));
+    });
+  }
+  if (forceResolution) {
+    console.log(chalk.yellow(`
+Auto-resolving conflict: using ${forceResolution} version (--force-${forceResolution})`));
+    return forceResolution;
+  }
+  console.log(chalk.yellow("\nOptions:"));
+  console.log("  [l] Use local version (overwrite remote)");
+  console.log("  [r] Use remote version (overwrite local)");
+  console.log("  [a] Abort push for this prompt");
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+  return new Promise((resolve) => {
+    rl.question("Choose resolution (l/r/a): ", (answer) => {
+      rl.close();
+      const choice = answer.toLowerCase();
+      if (choice === "l" || choice === "local") {
+        resolve("local");
+      } else if (choice === "r" || choice === "remote") {
+        resolve("remote");
+      } else {
+        resolve("abort");
+      }
+    });
+  });
+};
+var pushPrompts = async ({
+  config,
+  lock,
+  promptsApiService,
+  result,
+  forceResolution
+}) => {
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q;
+  const localFileRefs = Object.entries(config.prompts).filter(
+    ([, dependency]) => {
+      return typeof dependency === "string" && dependency.startsWith("file:");
+    }
+  );
+  if (localFileRefs.length > 0) {
+    const pushSpinner = ora(
+      `Pushing ${localFileRefs.length} local prompts...`
+    ).start();
+    for (const [promptName, dependency] of localFileRefs) {
+      try {
+        const filePath = dependency.slice(5);
+        const localConfig = FileManager.loadLocalPrompt(filePath);
+        const currentVersion = (_a = lock.prompts[promptName]) == null ? void 0 : _a.version;
+        const outputs = (_b = responseFormatToOutputs(
+          localConfig.response_format
+        )) != null ? _b : [{ identifier: "output", type: "str" }];
+        const configData = {
+          model: localConfig.model,
+          prompt: PromptConverter.extractSystemPrompt(localConfig.messages),
+          messages: PromptConverter.filterNonSystemMessages(
+            localConfig.messages
+          ),
+          temperature: (_c = localConfig.modelParameters) == null ? void 0 : _c.temperature,
+          max_tokens: (_d = localConfig.modelParameters) == null ? void 0 : _d.max_tokens,
+          inputs: [{ identifier: "input", type: "str" }],
+          outputs
+          // response_format is derived from outputs on the server side
+        };
+        const syncResult = await promptsApiService.sync({
+          name: promptName,
+          configData,
+          localVersion: currentVersion,
+          commitMessage: `Synced from local file: ${path.basename(filePath)}`
+        });
+        const relativePath = path.relative(process.cwd(), filePath);
+        let conflictResolution = null;
+        if (syncResult.action === "conflict") {
+          pushSpinner.stop();
+          conflictResolution = await handleConflict(
+            promptName,
+            syncResult.conflictInfo,
+            forceResolution
+          );
+          if (conflictResolution === "abort") {
+            result.errors.push({
+              name: promptName,
+              error: "Push aborted due to conflict"
+            });
+            continue;
+          }
+          if (conflictResolution === "remote" && syncResult.conflictInfo) {
+            const remoteConfig = {
+              model: syncResult.conflictInfo.remoteConfigData.model,
+              modelParameters: {
+                temperature: syncResult.conflictInfo.remoteConfigData.temperature,
+                max_tokens: syncResult.conflictInfo.remoteConfigData.max_tokens
+              },
+              messages: [
+                {
+                  role: "system",
+                  content: syncResult.conflictInfo.remoteConfigData.prompt
+                },
+                ...(_e = syncResult.conflictInfo.remoteConfigData.messages) != null ? _e : []
+              ]
+            };
+            const yamlContent = yaml.dump(remoteConfig, {
+              lineWidth: -1,
+              noRefs: true,
+              sortKeys: false
+            });
+            fs.writeFileSync(filePath, yamlContent);
+          }
+          pushSpinner.start();
+        }
+        if (syncResult.prompt) {
+          lock.prompts[promptName] = {
+            version: syncResult.prompt.version,
+            versionId: syncResult.prompt.versionId,
+            materialized: filePath
+          };
+        } else if (syncResult.action === "conflict") {
+          const remoteVersion = (_g = (_f = syncResult.conflictInfo) == null ? void 0 : _f.remoteVersion) != null ? _g : 0;
+          if (conflictResolution === "remote") {
+            lock.prompts[promptName] = {
+              version: remoteVersion,
+              versionId: "remote_version",
+              materialized: filePath
+            };
+          } else {
+            const formattedConfig = PromptConverter.fromLocalToApiFormat(localConfig);
+            const updatedPrompt = await promptsApiService.update(promptName, __spreadProps(__spreadValues({}, formattedConfig), {
+              commitMessage: `Updated via CLI: synced from local file`
+            }));
+            lock.prompts[promptName] = {
+              version: updatedPrompt.version,
+              versionId: updatedPrompt.versionId,
+              materialized: filePath
+            };
+          }
+        }
+        let actionText;
+        if (syncResult.action === "conflict") {
+          if (conflictResolution === "remote") {
+            actionText = "Pulled";
+            result.fetched.push({
+              name: promptName,
+              version: (_i = (_h = syncResult.conflictInfo) == null ? void 0 : _h.remoteVersion) != null ? _i : 0,
+              versionSpec: "latest"
+            });
+          } else {
+            actionText = "Pushed";
+            result.pushed.push({
+              name: promptName,
+              version: ((_k = (_j = syncResult.conflictInfo) == null ? void 0 : _j.remoteVersion) != null ? _k : 0) + 1
+            });
+          }
+        } else if (syncResult.action === "up_to_date") {
+          actionText = "Up-to-date";
+          result.unchanged.push(promptName);
+        } else {
+          const actionMap = {
+            created: "Created",
+            updated: "Updated",
+            conflict: "Conflict resolved",
+            up_to_date: "Up to date"
+          };
+          actionText = actionMap[syncResult.action] || "Pushed";
+          result.pushed.push({
+            name: promptName,
+            version: (_m = (_l = syncResult.prompt) == null ? void 0 : _l.version) != null ? _m : 0
+          });
+        }
+        pushSpinner.text = `${actionText} ${chalk.cyan(
+          promptName
+        )} ${chalk.gray(
+          `(version ${(_q = (_p = (_n = syncResult.prompt) == null ? void 0 : _n.version) != null ? _p : (_o = syncResult.conflictInfo) == null ? void 0 : _o.remoteVersion) != null ? _q : "unknown"})`
+        )} ${conflictResolution === "remote" ? "to" : "from"} ${chalk.gray(
+          relativePath
+        )}`;
+      } catch (error) {
+        const errorMessage = formatApiErrorMessage({ error });
+        result.errors.push({ name: promptName, error: errorMessage });
+      }
+    }
+    pushSpinner.stop();
+  }
+  const discoveredLocalFiles = FileManager.getLocalPromptFiles();
+  const orphanFiles = discoveredLocalFiles.filter((filePath) => {
+    const promptName = FileManager.promptNameFromPath(filePath);
+    return !config.prompts[promptName];
+  });
+  if (orphanFiles.length > 0) {
+    console.log(
+      chalk.yellow(
+        `
+\u26A0 Found ${orphanFiles.length} orphan prompt file${orphanFiles.length > 1 ? "s" : ""}:`
+      )
+    );
+    for (const filePath of orphanFiles) {
+      const promptName = FileManager.promptNameFromPath(filePath);
+      const relativePath = path.relative(process.cwd(), filePath);
+      console.log(chalk.yellow(`  ${relativePath}`));
+      console.log(
+        chalk.gray(
+          `    Add to prompts.json: "${promptName}": "file:${relativePath}"`
+        )
+      );
+    }
+    console.log(
+      chalk.gray(
+        `
+Tip: Add these to prompts.json to include them in push operations.`
+      )
+    );
+  }
+};
+var printPushResults = ({
+  result,
+  duration
+}) => {
+  if (result.pushed.length > 0) {
+    for (const { name, version } of result.pushed) {
+      const localPath = `./prompts/${name}.prompt.yaml`;
+      console.log(
+        chalk.green(
+          `\u2713 Pushed ${chalk.cyan(name)} ${chalk.gray(
+            `(version ${version})`
+          )} from ${chalk.gray(localPath)}`
+        )
+      );
+    }
+  }
+  if (result.fetched.length > 0) {
+    for (const { name, version } of result.fetched) {
+      console.log(
+        chalk.green(
+          `\u2713 Pulled ${chalk.cyan(name)} ${chalk.gray(
+            `(version ${version})`
+          )} (resolved conflict with remote)`
+        )
+      );
+    }
+  }
+  if (result.errors.length > 0) {
+    for (const { name, error } of result.errors) {
+      console.error(chalk.red(`\u2717 Failed ${chalk.cyan(name)}: ${error}`));
+    }
+  }
+  const totalActions = result.fetched.length + result.pushed.length;
+  if (totalActions === 0 && result.errors.length === 0) {
+    console.log(chalk.gray(`Pushed in ${duration}s, no changes`));
+  } else {
+    const summary = [];
+    if (result.pushed.length > 0)
+      summary.push(`${result.pushed.length} pushed`);
+    if (result.fetched.length > 0)
+      summary.push(`${result.fetched.length} pulled (conflict resolution)`);
+    if (result.errors.length > 0)
+      summary.push(`${result.errors.length} errors`);
+    console.log(chalk.gray(`Pushed ${summary.join(", ")} in ${duration}s`));
+  }
+};
+var pushCommand = async (options) => {
+  console.log("\u2B06\uFE0F  Pushing local prompts...");
+  const startTime = Date.now();
+  try {
+    checkApiKey();
+    const promptsApiService = new PromptsApiService();
+    await ensureProjectInitialized(false);
+    const config = FileManager.loadPromptsConfig();
+    const lock = FileManager.loadPromptsLock();
+    const result = {
+      fetched: [],
+      pushed: [],
+      unchanged: [],
+      cleaned: [],
+      errors: []
+    };
+    await pushPrompts({ config, lock, promptsApiService, result, forceResolution: (options == null ? void 0 : options.forceLocal) ? "local" : (options == null ? void 0 : options.forceRemote) ? "remote" : void 0 });
+    FileManager.savePromptsLock(lock);
+    const duration = ((Date.now() - startTime) / 1e3).toFixed(1);
+    printPushResults({ result, duration });
+    if (result.errors.length > 0) {
+      process.exit(1);
+    }
+  } catch (error) {
+    if (error instanceof PromptsError) {
+      console.error(chalk.red(`Error: ${error.message}`));
+    } else {
+      console.error(
+        chalk.red(
+          `Unexpected error: ${formatApiErrorMessage({ error })}`
+        )
+      );
+    }
+    process.exit(1);
+  }
+};
+
+export {
+  pushPrompts,
+  pushCommand
+};
+//# sourceMappingURL=chunk-TLCLBKRY.mjs.map

package/dist/chunk-TYUGFAL7.js

@@ -0,0 +1,92 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkWZTRPR6Ajs = require('./chunk-WZTRPR6A.js');
+
+
+var _chunkQ2JOHFSTjs = require('./chunk-Q2JOHFST.js');
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+
+
+
+var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
+
+// src/client-sdk/services/model-defaults/model-defaults-api.service.ts
+var ModelDefaultsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ModelDefaultsApiError";
+  }
+};
+var ModelDefaultsApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.apiKey = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : process.env.LANGWATCH_API_KEY) != null ? _b : "";
+    this.endpoint = (_d = (_c = config == null ? void 0 : config.endpoint) != null ? _c : process.env.LANGWATCH_ENDPOINT) != null ? _d : _chunkQ2JOHFSTjs.DEFAULT_ENDPOINT;
+  }
+  async request(path, options) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, _chunkBRPEG3YQjs.__spreadProps.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, options), {
+      headers: _chunkBRPEG3YQjs.__spreadValues.call(void 0, _chunkBRPEG3YQjs.__spreadProps.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, _chunkWZTRPR6Ajs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })), {
+        "Content-Type": "application/json"
+      }), options == null ? void 0 : options.headers)
+    }));
+    if (!response.ok) {
+      const errorText = await response.text();
+      let parsed = errorText;
+      try {
+        parsed = JSON.parse(errorText);
+      } catch (e) {
+      }
+      const message = _chunkC5Y772G7js.formatApiErrorMessage.call(void 0, {
+        error: parsed,
+        options: { status: response.status }
+      });
+      throw new ModelDefaultsApiError(
+        `HTTP ${response.status}: ${message}`,
+        (_a = options == null ? void 0 : options.method) != null ? _a : "GET",
+        parsed
+      );
+    }
+    if (response.status === 204 || (options == null ? void 0 : options.allowNoContent)) {
+      return void 0;
+    }
+    return response.json();
+  }
+  async getSnapshot() {
+    return this.request("/api/model-defaults");
+  }
+  async createConfig(body) {
+    return this.request("/api/model-defaults", {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  }
+  async updateConfig(id, body) {
+    await this.request(
+      `/api/model-defaults/${encodeURIComponent(id)}`,
+      {
+        method: "PUT",
+        body: JSON.stringify(body),
+        allowNoContent: true
+      }
+    );
+  }
+  async deleteConfig(id) {
+    await this.request(
+      `/api/model-defaults/${encodeURIComponent(id)}`,
+      {
+        method: "DELETE",
+        allowNoContent: true
+      }
+    );
+  }
+};
+
+
+
+exports.ModelDefaultsApiService = ModelDefaultsApiService;
+//# sourceMappingURL=chunk-TYUGFAL7.js.map

package/dist/chunk-TYUGFAL7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-TYUGFAL7.js","../src/client-sdk/services/model-defaults/model-defaults-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACoCO,IAAM,sBAAA,EAAN,MAAA,QAAoC,MAAM;AAAA,EAC/C,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,uBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,wBAAA,EAAN,MAA8B;AAAA,EAInC,WAAA,CAAY,MAAA,EAAiD;AAjE/D,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAkEI,IAAA,IAAA,CAAK,OAAA,EAAA,CAAS,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,MAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAA,GAA9B,KAAA,EAAA,GAAA,EAAmD,EAAA;AACjE,IAAA,IAAA,CAAK,SAAA,EAAA,CACH,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,QAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAoB,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAA,GAAhC,KAAA,EAAA,GAAA,EAAsD,iCAAA;AAAA,EAC1D;AAAA,EAEA,MAAc,OAAA,CACZ,IAAA,EACA,OAAA,EACY;AA1EhB,IAAA,IAAA,EAAA;AA2EI,IAAA,MAAM,SAAA,EAAW,MAAM,KAAA,CAAM,CAAA,EAAA;AAElB,MAAA;AAES,QAAA;AACb,MAAA;AAEN,IAAA;AAEiB,IAAA;AACQ,MAAA;AACF,MAAA;AAClB,MAAA;AACkB,QAAA;AACd,MAAA;AAER,MAAA;AACgB,MAAA;AACP,QAAA;AACY,QAAA;AACpB,MAAA;AACS,MAAA;AACe,QAAA;AACvB,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAEwB,IAAA;AACf,MAAA;AACT,IAAA;AACqB,IAAA;AACvB,EAAA;AAEoD,EAAA;AACP,IAAA;AAC7C,EAAA;AAEoE,EAAA;AAC9B,IAAA;AAC1B,MAAA;AACiB,MAAA;AAC1B,IAAA;AACH,EAAA;AAEsE,EAAA;AACzD,IAAA;AACc,MAAA;AACvB,MAAA;AACU,QAAA;AACiB,QAAA;AACT,QAAA;AAClB,MAAA;AACF,IAAA;AACF,EAAA;AAE8C,EAAA;AACjC,IAAA;AACc,MAAA;AACvB,MAAA;AACU,QAAA;AACQ,QAAA;AAClB,MAAA;AACF,IAAA;AACF,EAAA;AACF;ADrDkC;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-TYUGFAL7.js","sourcesContent":[null,"import { DEFAULT_ENDPOINT } from \"@/internal/constants\";\nimport { buildAuthHeaders } from \"@/internal/api/auth\";\nimport { formatApiErrorMessage } from \"@/client-sdk/services/_shared/format-api-error\";\n\nexport type ModelDefaultScopeType = \"ORGANIZATION\" | \"TEAM\" | \"PROJECT\";\n\nexport interface ModelDefaultScopeRef {\n  scopeType: ModelDefaultScopeType;\n  scopeId: string;\n}\n\nexport interface ConfigRow {\n  id: string;\n  config: Record<string, string>;\n  scopes: Array<{ type: ModelDefaultScopeType; id: string; name: string }>;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface EffectiveResolution {\n  model: string;\n  source: string;\n  scope: string | null;\n}\n\nexport interface ModelDefaultsSnapshot {\n  scope: {\n    projectId: string;\n    teamId: string | null;\n    organizationId: string | null;\n    organizationName: string | null;\n  };\n  effective: {\n    DEFAULT: EffectiveResolution | null;\n    FAST: EffectiveResolution | null;\n    EMBEDDINGS: EffectiveResolution | null;\n  };\n  configs: ConfigRow[];\n}\n\nexport interface CreateConfigBody {\n  config: Record<string, string>;\n  scopes: ModelDefaultScopeRef[];\n}\n\nexport interface UpdateConfigBody {\n  config?: Record<string, string>;\n  scopes?: ModelDefaultScopeRef[];\n}\n\nexport class ModelDefaultsApiError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"ModelDefaultsApiError\";\n  }\n}\n\nexport class ModelDefaultsApiService {\n  private readonly apiKey: string;\n  private readonly endpoint: string;\n\n  constructor(config?: { apiKey?: string; endpoint?: string }) {\n    this.apiKey = config?.apiKey ?? process.env.LANGWATCH_API_KEY ?? \"\";\n    this.endpoint =\n      config?.endpoint ?? process.env.LANGWATCH_ENDPOINT ?? DEFAULT_ENDPOINT;\n  }\n\n  private async request<T>(\n    path: string,\n    options?: RequestInit & { allowNoContent?: boolean },\n  ): Promise<T> {\n    const response = await fetch(`${this.endpoint}${path}`, {\n      ...options,\n      headers: {\n        ...buildAuthHeaders({ apiKey: this.apiKey }),\n        \"Content-Type\": \"application/json\",\n        ...options?.headers,\n      },\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      let parsed: unknown = errorText;\n      try {\n        parsed = JSON.parse(errorText);\n      } catch {\n        // leave as raw text\n      }\n      const message = formatApiErrorMessage({\n        error: parsed,\n        options: { status: response.status },\n      });\n      throw new ModelDefaultsApiError(\n        `HTTP ${response.status}: ${message}`,\n        options?.method ?? \"GET\",\n        parsed,\n      );\n    }\n\n    if (response.status === 204 || options?.allowNoContent) {\n      return undefined as T;\n    }\n    return response.json() as Promise<T>;\n  }\n\n  async getSnapshot(): Promise<ModelDefaultsSnapshot> {\n    return this.request<ModelDefaultsSnapshot>(\"/api/model-defaults\");\n  }\n\n  async createConfig(body: CreateConfigBody): Promise<{ id: string }> {\n    return this.request<{ id: string }>(\"/api/model-defaults\", {\n      method: \"POST\",\n      body: JSON.stringify(body),\n    });\n  }\n\n  async updateConfig(id: string, body: UpdateConfigBody): Promise<void> {\n    await this.request<void>(\n      `/api/model-defaults/${encodeURIComponent(id)}`,\n      {\n        method: \"PUT\",\n        body: JSON.stringify(body),\n        allowNoContent: true,\n      },\n    );\n  }\n\n  async deleteConfig(id: string): Promise<void> {\n    await this.request<void>(\n      `/api/model-defaults/${encodeURIComponent(id)}`,\n      {\n        method: \"DELETE\",\n        allowNoContent: true,\n      },\n    );\n  }\n}\n"]}

package/dist/chunk-U47MQ6CS.mjs

@@ -0,0 +1,67 @@
+import {
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/cli/utils/governance/config.ts
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+function defaults() {
+  var _a;
+  const cp = (_a = process.env.LANGWATCH_ENDPOINT) != null ? _a : "https://app.langwatch.ai";
+  const explicitGw = process.env.LANGWATCH_GATEWAY_URL;
+  const gw = explicitGw != null ? explicitGw : /^https?:\/\/(localhost|127\.0\.0\.1)/.test(cp) ? "http://localhost:5563" : "https://gateway.langwatch.ai";
+  return { gateway_url: gw, control_plane_url: cp };
+}
+var VK_SECRET_PREFIX = "vk-lw-";
+function isCanonicalVkSecret(secret) {
+  return !!secret && secret.startsWith(VK_SECRET_PREFIX);
+}
+function configPath() {
+  const env = process.env.LANGWATCH_CLI_CONFIG;
+  if (env) return env;
+  return path.join(os.homedir(), ".langwatch", "config.json");
+}
+function loadConfig() {
+  const p = configPath();
+  if (!fs.existsSync(p)) return defaults();
+  try {
+    const text = fs.readFileSync(p, "utf8");
+    const parsed = JSON.parse(text);
+    const cfg = __spreadValues(__spreadValues({}, defaults()), parsed);
+    if (cfg.default_personal_vk && !isCanonicalVkSecret(cfg.default_personal_vk.secret)) {
+      delete cfg.default_personal_vk;
+    }
+    return cfg;
+  } catch (err) {
+    throw new Error(`Failed to parse ${p}: ${err.message}`);
+  }
+}
+function saveConfig(cfg) {
+  const p = configPath();
+  const dir = path.dirname(p);
+  fs.mkdirSync(dir, { recursive: true, mode: 448 });
+  const tmp = p + ".tmp";
+  fs.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { mode: 384 });
+  fs.renameSync(tmp, p);
+}
+function clearConfig() {
+  const p = configPath();
+  try {
+    fs.unlinkSync(p);
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+}
+function isLoggedIn(cfg) {
+  return !!cfg && !!cfg.access_token;
+}
+
+export {
+  configPath,
+  loadConfig,
+  saveConfig,
+  clearConfig,
+  isLoggedIn
+};
+//# sourceMappingURL=chunk-U47MQ6CS.mjs.map

package/dist/chunk-U47MQ6CS.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/utils/governance/config.ts"],"sourcesContent":["/**\n * Persists langwatch CLI governance credentials at\n * ~/.langwatch/config.json. The file is mode 0600 (atomic rename\n * on save). The shape mirrors what `POST /api/auth/cli/exchange`\n * returns plus a few client-side fields.\n */\n\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nimport type { PlatformToolPolicyMap } from \"./platform-tool-policy\";\n\nexport interface GovernanceConfig {\n  /** AI Gateway base URL (e.g. https://gateway.langwatch.ai). */\n  gateway_url: string;\n  /** Control plane base URL (e.g. https://app.langwatch.ai). */\n  control_plane_url: string;\n\n  /** Short-lived bearer for the gateway. */\n  access_token?: string;\n  /** Long-lived token for refreshing access_token. */\n  refresh_token?: string;\n  /** Unix epoch (seconds) when access_token expires. */\n  expires_at?: number;\n\n  user?: { id?: string; email?: string; name?: string };\n  organization?: { id?: string; slug?: string; name?: string };\n  default_personal_vk?: { id?: string; secret?: string; prefix?: string };\n\n  /**\n   * Personal ingest keys (the project-scoped ingest-only ApiKey\n   * `sk-lw-<...>` shape minted by `/api/auth/cli/governance/ingestion-key`),\n   * keyed by the tool's source_type slug (`claude_code` / `codex` /\n   * `gemini` / `opencode`). One key per source so different wrapped\n   * tools surface as their own ingestion source in /me + /messages.\n   *\n   * When the right key is present for a wrapped tool, the\n   * `langwatch <tool>` wrapper injects the standard OTEL_*_EXPORTER\n   * env vars pointing at the OTLP endpoint with this key as the\n   * Authorization bearer (reusing the cache instead of re-minting).\n   *\n   * Unset until the wrapper's first auto-mint for that tool.\n   */\n  default_personal_ingest_keys?: Record<\n    string,\n    { id?: string; secret?: string; prefix?: string }\n  >;\n\n  /**\n   * Persistent answer to the post-login \"save export block to your\n   * shell rc?\" prompt. `skip` = user picked \"never\", stay quiet\n   * forever. `undefined` = ask each login that lands in an\n   * unconfigured shell. The \"not now\" answer doesn't persist — it\n   * lets the next login re-ask on its own.\n   */\n  shell_rc_preference?: \"skip\";\n\n  /**\n   * Per-wrapped-tool routing mode answer.\n   *\n   *   \"gateway\"   — Path A: route the tool's HTTP calls through\n   *                  the AI Gateway via base-URL swap (full server-\n   *                  side I/O + cost capture, no client OTel).\n   *   \"ingestion\" — Path B: enable the tool's native OTel exporter\n   *                  pointed at /api/otel + mint the user's personal\n   *                  ingest key (sk-lw-*). For codex this also writes\n   *                  the [otel] block to ~/.codex/config.toml\n   *                  automatically.\n   *   \"ask\"       — re-prompt on the next `langwatch <tool>`. The\n   *                  default when this key is absent.\n   *\n   * The two modes are mutually exclusive per the no-double-trace\n   * rule — gateway capture + OTel emission on the same call would\n   * double-count both traces and cost. The wrapper picks Path A\n   * by default when a personal VK is configured, and falls back\n   * to Path B when no VK + the user opts in.\n   */\n  tool_mode?: Record<string, \"gateway\" | \"ingestion\" | \"ask\">;\n\n  /**\n   * Per-(org, tool) path policy cached from the login bootstrap\n   * (`/api/auth/cli/bootstrap` → `toolPolicies`). The `langwatch\n   * <tool>` wrapper gates path selection on this map so it only\n   * offers the paths the org admin permits. Absent for a legacy /\n   * offline CLI that never cached it; `resolvePlatformToolPolicy`\n   * then falls back to the hardcoded defaults.\n   */\n  tool_policies?: PlatformToolPolicyMap;\n\n  /**\n   * Most-recent signed `request_increase_url` returned by the\n   * gateway in a 402 budget_exceeded payload — cached so\n   * `langwatch request-increase` opens the exact URL the gateway\n   * produced (with HMAC'd user/limit/spent params).\n   */\n  last_request_increase_url?: string;\n}\n\nfunction defaults(): GovernanceConfig {\n  // Note: the single source of truth for endpoint resolution at command\n  // boundaries is `resolveControlPlaneEndpoint()` in resolveEndpoint.ts.\n  // This function only seeds the *initial* GovernanceConfig shape when\n  // no file exists yet — at boot, before the user has logged in.\n  // `LANGWATCH_URL` legacy alias intentionally NOT read (was undocumented;\n  // dropped per rchaves directive 2026-05-05).\n  const cp = process.env.LANGWATCH_ENDPOINT ?? \"https://app.langwatch.ai\";\n  const explicitGw = process.env.LANGWATCH_GATEWAY_URL;\n  // Self-hosted detection: when the user pointed `LANGWATCH_ENDPOINT` at\n  // localhost (the standard `make dev` shape) and didn't override the\n  // gateway URL, default to the local AI gateway port (5563 per\n  // langwatch/CLAUDE.md `make service svc=aigateway`). Without this,\n  // `langwatch login` + `whoami` printed the production gateway URL on\n  // self-hosted installs and the user's `langwatch claude` calls would\n  // route at the wrong place (Ariana QA — same shape as the /me tile\n  // base-URL bug Sergey c45e69987 / Alexis 30e52a718 fixed on the\n  // control-plane side).\n  const gw =\n    explicitGw ??\n    (/^https?:\\/\\/(localhost|127\\.0\\.0\\.1)/.test(cp)\n      ? \"http://localhost:5563\"\n      : \"https://gateway.langwatch.ai\");\n  return { gateway_url: gw, control_plane_url: cp };\n}\n\n/**\n * Canonical personal-VK secret prefix. Mirrors the control plane's\n * `vk-lw-<ULID>` minting format (langwatch virtualKey.crypto.ts). The\n * gateway rejects anything else as malformed_key before any DB lookup,\n * so a config carrying a legacy-format secret (older `lw_vk_live_*`\n * logins) routes every `langwatch <tool>` call straight to a 401.\n */\nconst VK_SECRET_PREFIX = \"vk-lw-\";\n\n/**\n * Whether a stored secret is in the format the current gateway can\n * parse. Legacy secrets minted before the format change fail this and\n * must be re-issued via a fresh login.\n */\nexport function isCanonicalVkSecret(secret: string | undefined): boolean {\n  return !!secret && secret.startsWith(VK_SECRET_PREFIX);\n}\n\n/**\n * Returns the absolute path to the config file. Override with\n * LANGWATCH_CLI_CONFIG for tests / non-default homes.\n */\nexport function configPath(): string {\n  const env = process.env.LANGWATCH_CLI_CONFIG;\n  if (env) return env;\n  return path.join(os.homedir(), \".langwatch\", \"config.json\");\n}\n\n/** Read the config from disk, merging in defaults for missing keys. */\nexport function loadConfig(): GovernanceConfig {\n  const p = configPath();\n  if (!fs.existsSync(p)) return defaults();\n  try {\n    const text = fs.readFileSync(p, \"utf8\");\n    const parsed = JSON.parse(text) as Partial<GovernanceConfig>;\n    const cfg = { ...defaults(), ...parsed };\n    // Drop a legacy-format personal VK secret on load. Keeping it would\n    // route every `langwatch <tool>` call to a malformed_key 401; once\n    // dropped, the wrapper preflight tells the user to re-login and the\n    // next login persists a fresh `vk-lw-` secret. A valid canonical\n    // secret is never touched, so this won't wipe a working credential.\n    if (\n      cfg.default_personal_vk &&\n      !isCanonicalVkSecret(cfg.default_personal_vk.secret)\n    ) {\n      delete cfg.default_personal_vk;\n    }\n    return cfg;\n  } catch (err) {\n    throw new Error(`Failed to parse ${p}: ${(err as Error).message}`);\n  }\n}\n\n/** Write the config atomically (tmp file + rename) with mode 0600. */\nexport function saveConfig(cfg: GovernanceConfig): void {\n  const p = configPath();\n  const dir = path.dirname(p);\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  const tmp = p + \".tmp\";\n  fs.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { mode: 0o600 });\n  fs.renameSync(tmp, p);\n}\n\n/** Delete the config file; idempotent. */\nexport function clearConfig(): void {\n  const p = configPath();\n  try {\n    fs.unlinkSync(p);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n}\n\n/** Whether a loaded config has live credentials. */\nexport function isLoggedIn(cfg: GovernanceConfig | null | undefined): boolean {\n  return !!cfg && !!cfg.access_token;\n}\n"],"mappings":";;;;;AAOA,YAAY,QAAQ;AACpB,YAAY,QAAQ;AACpB,YAAY,UAAU;AA0FtB,SAAS,WAA6B;AAnGtC;AA0GE,QAAM,MAAK,aAAQ,IAAI,uBAAZ,YAAkC;AAC7C,QAAM,aAAa,QAAQ,IAAI;AAU/B,QAAM,KACJ,kCACC,uCAAuC,KAAK,EAAE,IAC3C,0BACA;AACN,SAAO,EAAE,aAAa,IAAI,mBAAmB,GAAG;AAClD;AASA,IAAM,mBAAmB;AAOlB,SAAS,oBAAoB,QAAqC;AACvE,SAAO,CAAC,CAAC,UAAU,OAAO,WAAW,gBAAgB;AACvD;AAMO,SAAS,aAAqB;AACnC,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,IAAK,QAAO;AAChB,SAAY,UAAQ,WAAQ,GAAG,cAAc,aAAa;AAC5D;AAGO,SAAS,aAA+B;AAC7C,QAAM,IAAI,WAAW;AACrB,MAAI,CAAI,cAAW,CAAC,EAAG,QAAO,SAAS;AACvC,MAAI;AACF,UAAM,OAAU,gBAAa,GAAG,MAAM;AACtC,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,UAAM,MAAM,kCAAK,SAAS,IAAM;AAMhC,QACE,IAAI,uBACJ,CAAC,oBAAoB,IAAI,oBAAoB,MAAM,GACnD;AACA,aAAO,IAAI;AAAA,IACb;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,UAAM,IAAI,MAAM,mBAAmB,CAAC,KAAM,IAAc,OAAO,EAAE;AAAA,EACnE;AACF;AAGO,SAAS,WAAW,KAA6B;AACtD,QAAM,IAAI,WAAW;AACrB,QAAM,MAAW,aAAQ,CAAC;AAC1B,EAAG,aAAU,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAClD,QAAM,MAAM,IAAI;AAChB,EAAG,iBAAc,KAAK,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACnE,EAAG,cAAW,KAAK,CAAC;AACtB;AAGO,SAAS,cAAoB;AAClC,QAAM,IAAI,WAAW;AACrB,MAAI;AACF,IAAG,cAAW,CAAC;AAAA,EACjB,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,EAC9D;AACF;AAGO,SAAS,WAAW,KAAmD;AAC5E,SAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI;AACxB;","names":[]}

package/dist/chunk-UTTNPIDQ.mjs

@@ -0,0 +1,42 @@
+import {
+  loadConfig
+} from "./chunk-U47MQ6CS.mjs";
+import {
+  DEFAULT_ENDPOINT
+} from "./chunk-QMULACG7.mjs";
+
+// src/cli/utils/governance/resolveEndpoint.ts
+function resolveControlPlaneEndpoint(opts = {}) {
+  if (opts.flag) {
+    return { url: stripTrailingSlash(opts.flag), source: "flag" };
+  }
+  const env = process.env.LANGWATCH_ENDPOINT;
+  if (env && env.trim() !== "") {
+    return { url: stripTrailingSlash(env), source: "env" };
+  }
+  let cfg = opts.cfg;
+  if (cfg === void 0) {
+    try {
+      cfg = loadConfig();
+    } catch (e) {
+      cfg = void 0;
+    }
+  }
+  const persisted = cfg == null ? void 0 : cfg.control_plane_url;
+  if (persisted && persisted !== DEFAULT_ENDPOINT) {
+    return { url: stripTrailingSlash(persisted), source: "config" };
+  }
+  return { url: stripTrailingSlash(DEFAULT_ENDPOINT), source: "default" };
+}
+function resolveControlPlaneUrl(opts = {}) {
+  return resolveControlPlaneEndpoint(opts).url;
+}
+function stripTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+
+export {
+  resolveControlPlaneEndpoint,
+  resolveControlPlaneUrl
+};
+//# sourceMappingURL=chunk-UTTNPIDQ.mjs.map

package/dist/chunk-VIN5IMHD.mjs

@@ -0,0 +1,42 @@
+import {
+  createLangWatchApiClient
+} from "./chunk-KMNF7M4B.mjs";
+import {
+  extractStatusFromResponse,
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+
+// src/client-sdk/services/analytics/analytics-api.service.ts
+var AnalyticsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "AnalyticsApiError";
+  }
+};
+var AnalyticsApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
+  }
+  handleApiError(operation, error) {
+    const message = formatApiErrorForOperation({ operation, error, options: {
+      status: extractStatusFromResponse(error)
+    } });
+    throw new AnalyticsApiError(message, operation, error);
+  }
+  async timeseries(params) {
+    const { data, error } = await this.apiClient.POST(
+      "/api/analytics/timeseries",
+      { body: params }
+    );
+    if (error) this.handleApiError("query analytics", error);
+    return data;
+  }
+};
+
+export {
+  AnalyticsApiService
+};
+//# sourceMappingURL=chunk-VIN5IMHD.mjs.map

package/dist/chunk-VJQ224UL.mjs

@@ -0,0 +1,54 @@
+import {
+  createLangWatchApiClient
+} from "./chunk-KMNF7M4B.mjs";
+import {
+  extractStatusFromResponse,
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+
+// src/client-sdk/services/traces/traces-api.service.ts
+var TracesApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "TracesApiError";
+  }
+};
+var TracesApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
+  }
+  handleApiError(operation, error) {
+    const message = formatApiErrorForOperation({ operation, error, options: {
+      status: extractStatusFromResponse(error)
+    } });
+    throw new TracesApiError(message, operation, error);
+  }
+  async search(params) {
+    const { data, error } = await this.apiClient.POST("/api/traces/search", {
+      body: params
+    });
+    if (error) this.handleApiError("search traces", error);
+    return data;
+  }
+  async get(traceId, options) {
+    const { data, error } = await this.apiClient.GET(
+      "/api/traces/{traceId}",
+      {
+        params: {
+          path: { traceId },
+          query: options
+        }
+      }
+    );
+    if (error) this.handleApiError(`get trace "${traceId}"`, error);
+    return data;
+  }
+};
+
+export {
+  TracesApiService
+};
+//# sourceMappingURL=chunk-VJQ224UL.mjs.map