langwatch 0.30.0 → 0.32.0

package/dist/login-PAG22HTJ.js

@@ -0,0 +1,231 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+
+var _chunkBAA4HKOBjs = require('./chunk-BAA4HKOB.js');
+require('./chunk-S4JKLESF.js');
+require('./chunk-724OLLZ4.js');
+
+
+
+var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+require('./chunk-BRPEG3YQ.js');
+
+// src/cli/commands/login.ts
+var _fs = require('fs'); var fs = _interopRequireWildcard(_fs);
+var _path = require('path'); var path = _interopRequireWildcard(_path);
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _prompts = require('prompts'); var _prompts2 = _interopRequireDefault(_prompts);
+function printAgentHintBanner() {
+  console.log(
+    _chalk2.default.gray(
+      "Running interactively. To skip these prompts (CI / agents that already have a credential):"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --device                   AI tools / SSO (browser approval, no paste)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --api-key <KEY>            project SDK key (writes .env)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --token <TOKEN>            pre-minted device session (writes ~/.langwatch/config.json)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --endpoint <URL>           self-hosted instance URL"
+    )
+  );
+  console.log();
+}
+var updateEnvFile = (apiKey) => {
+  const envPath = path.join(process.cwd(), ".env");
+  if (!fs.existsSync(envPath)) {
+    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}
+`);
+    return { created: true, updated: false, path: envPath };
+  }
+  const content = fs.readFileSync(envPath, "utf-8");
+  const lines = content.split("\n");
+  let found = false;
+  const updatedLines = lines.map((line) => {
+    if (line.startsWith("LANGWATCH_API_KEY=")) {
+      found = true;
+      return `LANGWATCH_API_KEY=${apiKey}`;
+    }
+    return line;
+  });
+  if (!found) {
+    if (content.endsWith("\n") || content === "") {
+      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);
+    } else {
+      updatedLines.push("", `LANGWATCH_API_KEY=${apiKey}`);
+    }
+  }
+  fs.writeFileSync(envPath, updatedLines.join("\n"));
+  return { created: false, updated: found, path: envPath };
+};
+var loginCommand = async (options) => {
+  var _a, _b;
+  try {
+    const endpointFromEnv = (_a = process.env.LANGWATCH_ENDPOINT) == null ? void 0 : _a.trim();
+    const presetEndpoint = (_b = options == null ? void 0 : options.endpoint) != null ? _b : endpointFromEnv;
+    if (presetEndpoint) {
+      const trimmed = presetEndpoint.replace(/\/+$/, "");
+      const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+      cfg.control_plane_url = trimmed;
+      _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+    }
+    if (options == null ? void 0 : options.token) {
+      const token = options.token.trim();
+      if (token.length < 10) {
+        console.error(_chalk2.default.red("Error: token seems too short. Please check and try again."));
+        process.exit(1);
+      }
+      const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+      cfg.access_token = token;
+      _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      console.log(_chalk2.default.green("\u2713 device-session token saved"));
+      console.log(_chalk2.default.gray("  ~/.langwatch/config.json"));
+      return;
+    }
+    if (options == null ? void 0 : options.device) {
+      await _chunkBAA4HKOBjs.runDeviceFlowLogin.call(void 0, { browser: options.browser });
+      return;
+    }
+    if (options == null ? void 0 : options.apiKey) {
+      const apiKey = options.apiKey.trim();
+      if (apiKey.length < 10) {
+        console.error(_chalk2.default.red("Error: API key seems too short. Please check and try again."));
+        process.exit(1);
+      }
+      const envResult = updateEnvFile(apiKey);
+      console.log(_chalk2.default.green("API key saved successfully."));
+      if (envResult.created) {
+        console.log(_chalk2.default.gray(`Created .env file at ${envResult.path}`));
+      } else if (envResult.updated) {
+        console.log(_chalk2.default.gray(`Updated existing API key in ${envResult.path}`));
+      } else {
+        console.log(_chalk2.default.gray(`Added API key to ${envResult.path}`));
+      }
+      return;
+    }
+    if (!process.stdin.isTTY) {
+      console.error(
+        _chalk2.default.red(
+          "Error: cannot run interactive `langwatch login` in a non-TTY context."
+        )
+      );
+      console.error(_chalk2.default.gray("Run one of:"));
+      console.error(_chalk2.default.gray("  langwatch login --device                # AI tools / SSO (recommended)"));
+      console.error(_chalk2.default.gray("  langwatch login --api-key <KEY>         # project SDK key (writes .env)"));
+      console.error(_chalk2.default.gray("  langwatch login --token <TOKEN>         # pre-minted device session"));
+      console.error(_chalk2.default.gray("  LANGWATCH_AUTO_LOGIN=1 langwatch <cmd>  # let the wrapper trigger device flow"));
+      process.exit(1);
+    }
+    printAgentHintBanner();
+    console.log(_chalk2.default.blue("\u{1F510} LangWatch Login"));
+    console.log();
+    if (!(options == null ? void 0 : options.endpoint)) {
+      const where = await _prompts2.default.call(void 0, {
+        type: "select",
+        name: "where",
+        message: "Where do you want to log in?",
+        choices: [
+          {
+            title: "LangWatch Cloud",
+            description: "app.langwatch.ai (default)",
+            value: "cloud"
+          },
+          {
+            title: "Self-hosted instance",
+            description: "Custom URL \u2014 your company's LangWatch deployment",
+            value: "self-hosted"
+          }
+        ],
+        initial: 0
+      });
+      if (where.where === "self-hosted") {
+        const url = await _prompts2.default.call(void 0, {
+          type: "text",
+          name: "url",
+          message: "Self-hosted LangWatch URL (e.g. https://lw.acme.internal):",
+          validate: (v) => {
+            try {
+              const parsed = new URL(v);
+              if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+                return "URL must start with http(s)://";
+              }
+              return true;
+            } catch (e) {
+              return "URL must be absolute (https://...)";
+            }
+          }
+        });
+        if (!url.url) {
+          console.log(_chalk2.default.yellow("Login cancelled"));
+          process.exit(0);
+        }
+        const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+        cfg.control_plane_url = url.url.replace(/\/+$/, "");
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      }
+    }
+    const mode = await _prompts2.default.call(void 0, {
+      type: "select",
+      name: "mode",
+      message: "How do you want to use LangWatch?",
+      choices: [
+        {
+          title: "AI tools / agentic flows",
+          description: "claude, codex, cursor, gemini, opencode \u2014 device-flow SSO",
+          value: "device"
+        },
+        {
+          title: "Project / SDK API key",
+          description: "langwatch sync, langwatch eval, SDK auto-instrumentation",
+          value: "api-key"
+        },
+        {
+          title: "Both",
+          description: "Run both flows in sequence",
+          value: "both"
+        }
+      ],
+      initial: 0
+    });
+    if (!mode.mode) {
+      console.log(_chalk2.default.yellow("Login cancelled"));
+      process.exit(0);
+    }
+    if (mode.mode === "device" || mode.mode === "both") {
+      await _chunkBAA4HKOBjs.runDeviceFlowLogin.call(void 0, { browser: options == null ? void 0 : options.browser });
+    }
+    if (mode.mode === "api-key" || mode.mode === "both") {
+      await _chunkBAA4HKOBjs.runUnifiedLoginFlow.call(void 0, {
+        kind: "project_api_key",
+        browser: options == null ? void 0 : options.browser
+      });
+    }
+    return;
+  } catch (error) {
+    console.error(
+      _chalk2.default.red(
+        `Error during login: ${_chunkC5Y772G7js.formatApiErrorMessage.call(void 0, { error })}`
+      )
+    );
+    process.exit(1);
+  }
+};
+
+
+exports.loginCommand = loginCommand;
+//# sourceMappingURL=login-PAG22HTJ.js.map

package/dist/login-PAG22HTJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/login-PAG22HTJ.js","../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,sDAA4B;AAC5B,+BAA4B;AAC5B,+BAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B,+BAA4B;AAC5B;AACA;ACfA,+DAAoB;AACpB,uEAAsB;AACtB,4EAAkB;AAClB,oFAAoB;AAoBpB,SAAS,oBAAA,CAAA,EAA6B;AACpC,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA;AACd;AAEA,IAAM,cAAA,EAAgB,CACpB,MAAA,EAAA,GACyD;AACzD,EAAA,MAAM,QAAA,EAAe,IAAA,CAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,EAAG,MAAM,CAAA;AAG/C,EAAA,GAAA,CAAI,CAAI,EAAA,CAAA,UAAA,CAAW,OAAO,CAAA,EAAG;AAE3B,IAAG,EAAA,CAAA,aAAA,CAAc,OAAA,EAAS,CAAA,kBAAA,EAAqB,MAAM,CAAA;AAAA,CAAI,CAAA;AACzD,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,EACxD;AAGA,EAAA,MAAM,QAAA,EAAa,EAAA,CAAA,YAAA,CAAa,OAAA,EAAS,OAAO,CAAA;AAChD,EAAA,MAAM,MAAA,EAAQ,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA;AAGhC,EAAA,IAAI,MAAA,EAAQ,KAAA;AACZ,EAAA,MAAM,aAAA,EAAe,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAA,GAAS;AACvC,IAAA,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,MAAA,EAAQ,IAAA;AACR,MAAA,OAAO,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA;AACpC,IAAA;AACO,IAAA;AACR,EAAA;AAEW,EAAA;AAEoB,IAAA;AACV,MAAA;AACb,IAAA;AACiB,MAAA;AACxB,IAAA;AACF,EAAA;AAEuC,EAAA;AACL,EAAA;AACpC;AAUoB;AAnGpB,EAAA;AAoGM,EAAA;AAUsB,IAAA;AACD,IAAA;AACH,IAAA;AACa,MAAA;AACR,MAAA;AACC,MAAA;AACV,MAAA;AAChB,IAAA;AAMI,IAAA;AAC+B,MAAA;AACV,MAAA;AACG,QAAA;AACV,QAAA;AAChB,MAAA;AACuB,MAAA;AACJ,MAAA;AAKL,MAAA;AACU,MAAA;AACD,MAAA;AACvB,MAAA;AACF,IAAA;AAMI,IAAA;AACyB,MAAA;AAC3B,MAAA;AACF,IAAA;AAGI,IAAA;AACiC,MAAA;AACX,MAAA;AACE,QAAA;AACV,QAAA;AAChB,MAAA;AAEgC,MAAA;AACR,MAAA;AACD,MAAA;AACE,QAAA;AACK,MAAA;AACL,QAAA;AAClB,MAAA;AACkB,QAAA;AACzB,MAAA;AACA,MAAA;AACF,IAAA;AAM0B,IAAA;AAChB,MAAA;AACA,QAAA;AACJ,UAAA;AACF,QAAA;AACF,MAAA;AACyB,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACX,MAAA;AAChB,IAAA;AAKqB,IAAA;AAEE,IAAA;AACX,IAAA;AAOP,IAAA;AACyB,MAAA;AACpB,QAAA;AACA,QAAA;AACG,QAAA;AACA,QAAA;AACP,UAAA;AACS,YAAA;AACM,YAAA;AACN,YAAA;AACT,UAAA;AACA,UAAA;AACS,YAAA;AACM,YAAA;AACN,YAAA;AACT,UAAA;AACF,QAAA;AACS,QAAA;AACV,MAAA;AACkC,MAAA;AACP,QAAA;AAClB,UAAA;AACA,UAAA;AACG,UAAA;AACgB,UAAA;AACnB,YAAA;AACsB,cAAA;AACA,cAAA;AACf,gBAAA;AACT,cAAA;AACO,cAAA;AACD,YAAA;AACC,cAAA;AACT,YAAA;AACF,UAAA;AACD,QAAA;AACa,QAAA;AACa,UAAA;AACX,UAAA;AAChB,QAAA;AACuB,QAAA;AACqB,QAAA;AAC9B,QAAA;AAChB,MAAA;AACF,IAAA;AAG2B,IAAA;AACnB,MAAA;AACA,MAAA;AACG,MAAA;AACA,MAAA;AACP,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACF,MAAA;AACS,MAAA;AACV,IAAA;AACe,IAAA;AACW,MAAA;AACX,MAAA;AAChB,IAAA;AAEmC,IAAA;AACN,MAAA;AAC7B,IAAA;AACoC,IAAA;AAMR,MAAA;AAClB,QAAA;AACG,QAAA;AACV,MAAA;AACH,IAAA;AACA,IAAA;AACc,EAAA;AACN,IAAA;AACA,MAAA;AAEF,QAAA;AAEJ,MAAA;AACF,IAAA;AACc,IAAA;AAChB,EAAA;AACF;AD1EyC;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/login-PAG22HTJ.js","sourcesContent":[null,"import * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport { formatApiErrorMessage } from \"@/client-sdk/services/_shared/format-api-error\";\nimport {\n  runDeviceFlowLogin,\n  runUnifiedLoginFlow,\n} from \"@/cli/utils/governance/login-flow\";\nimport {\n  loadConfig,\n  saveConfig,\n} from \"@/cli/utils/governance/config\";\n\n/**\n * Always-on agent-hint banner shown above the interactive prompts on\n * `langwatch login` (no flags). Some agent harnesses fake a TTY but can't\n * actually answer prompts — this banner names the escape-hatch flags so\n * the agent (or the human staring at the stuck prompt) can re-invoke\n * with the right flag and proceed.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\nfunction printAgentHintBanner(): void {\n  console.log(\n    chalk.gray(\n      \"Running interactively. To skip these prompts (CI / agents that already have a credential):\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --device                   AI tools / SSO (browser approval, no paste)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --api-key <KEY>            project SDK key (writes .env)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --token <TOKEN>            pre-minted device session (writes ~/.langwatch/config.json)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --endpoint <URL>           self-hosted instance URL\",\n    ),\n  );\n  console.log();\n}\n\nconst updateEnvFile = (\n  apiKey: string,\n): { created: boolean; updated: boolean; path: string } => {\n  const envPath = path.join(process.cwd(), \".env\");\n\n  // Check if .env exists\n  if (!fs.existsSync(envPath)) {\n    // Create new .env file\n    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}\\n`);\n    return { created: true, updated: false, path: envPath };\n  }\n\n  // Read existing .env file\n  const content = fs.readFileSync(envPath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n\n  // Check if LANGWATCH_API_KEY already exists and update it\n  let found = false;\n  const updatedLines = lines.map((line) => {\n    if (line.startsWith(\"LANGWATCH_API_KEY=\")) {\n      found = true;\n      return `LANGWATCH_API_KEY=${apiKey}`;\n    }\n    return line;\n  });\n\n  if (!found) {\n    // Add to end of file\n    if (content.endsWith(\"\\n\") || content === \"\") {\n      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);\n    } else {\n      updatedLines.push(\"\", `LANGWATCH_API_KEY=${apiKey}`);\n    }\n  }\n\n  fs.writeFileSync(envPath, updatedLines.join(\"\\n\"));\n  return { created: false, updated: found, path: envPath };\n};\n\nexport const loginCommand = async (\n  options?: {\n    apiKey?: string;\n    device?: boolean;\n    browser?: string;\n    endpoint?: string;\n    token?: string;\n  },\n): Promise<void> => {\n  try {\n    // Honor `--endpoint` flag OR `LANGWATCH_ENDPOINT` env. Persist the\n    // resolved value BEFORE the chosen flow runs so subsequent reads\n    // (in the device flow, the API-key flow, any sub-command spawned\n    // later) see the right control-plane URL. The 4-source resolver\n    // (flag > env > config > default) honors this value via the\n    // persisted-config layer for any flow that doesn't explicitly take\n    // a flag. The env var has the same precedence as the flag for the\n    // login flow itself so users running `LANGWATCH_ENDPOINT=... langwatch\n    // login` skip the cloud/self-hosted picker.\n    const endpointFromEnv = process.env.LANGWATCH_ENDPOINT?.trim();\n    const presetEndpoint = options?.endpoint ?? endpointFromEnv;\n    if (presetEndpoint) {\n      const trimmed = presetEndpoint.replace(/\\/+$/, \"\");\n      const cfg = loadConfig();\n      cfg.control_plane_url = trimmed;\n      saveConfig(cfg);\n    }\n\n    // --token: pre-minted device-session escape hatch (CI / agent contexts\n    // where the token was minted via the dashboard 'Personal Access Tokens'\n    // surface). No browser, no prompts — just persist the token so\n    // subsequent `langwatch claude/codex/...` invocations can use it.\n    if (options?.token) {\n      const token = options.token.trim();\n      if (token.length < 10) {\n        console.error(chalk.red(\"Error: token seems too short. Please check and try again.\"));\n        process.exit(1);\n      }\n      const cfg = loadConfig();\n      cfg.access_token = token;\n      // No refresh_token / expires_at — that's the trade-off of bypassing\n      // the device flow. The wrapper auto-login will mint a real session\n      // if this token expires, since loadConfig+isLoggedIn only checks\n      // access_token presence.\n      saveConfig(cfg);\n      console.log(chalk.green(\"✓ device-session token saved\"));\n      console.log(chalk.gray(\"  ~/.langwatch/config.json\"));\n      return;\n    }\n\n    // Device-flow mode: SSO via the control plane's RFC 8628 endpoints,\n    // mints a personal virtual key bound to the user. This is the\n    // governance-plane onboarding for enterprise users, distinct from the\n    // single-user API-key flow below.\n    if (options?.device) {\n      await runDeviceFlowLogin({ browser: options.browser });\n      return;\n    }\n\n    // Non-interactive mode: --api-key flag provided\n    if (options?.apiKey) {\n      const apiKey = options.apiKey.trim();\n      if (apiKey.length < 10) {\n        console.error(chalk.red(\"Error: API key seems too short. Please check and try again.\"));\n        process.exit(1);\n      }\n\n      const envResult = updateEnvFile(apiKey);\n      console.log(chalk.green(\"API key saved successfully.\"));\n      if (envResult.created) {\n        console.log(chalk.gray(`Created .env file at ${envResult.path}`));\n      } else if (envResult.updated) {\n        console.log(chalk.gray(`Updated existing API key in ${envResult.path}`));\n      } else {\n        console.log(chalk.gray(`Added API key to ${envResult.path}`));\n      }\n      return;\n    }\n\n    // Interactive mode (no flags). Refuse on non-TTY contexts with an\n    // actionable hint pointing at the escape-hatch flags — agents and CI\n    // pipelines should pass the right flag rather than getting stuck on a\n    // hidden interactive prompt.\n    if (!process.stdin.isTTY) {\n      console.error(\n        chalk.red(\n          \"Error: cannot run interactive `langwatch login` in a non-TTY context.\",\n        ),\n      );\n      console.error(chalk.gray(\"Run one of:\"));\n      console.error(chalk.gray(\"  langwatch login --device                # AI tools / SSO (recommended)\"));\n      console.error(chalk.gray(\"  langwatch login --api-key <KEY>         # project SDK key (writes .env)\"));\n      console.error(chalk.gray(\"  langwatch login --token <TOKEN>         # pre-minted device session\"));\n      console.error(chalk.gray(\"  LANGWATCH_AUTO_LOGIN=1 langwatch <cmd>  # let the wrapper trigger device flow\"));\n      process.exit(1);\n    }\n\n    // Always-on agent-hint banner — fake-TTY agents see this BEFORE the\n    // prompt block so they (or the human watching) can re-invoke with the\n    // right flag instead of staring at a stuck prompt.\n    printAgentHintBanner();\n\n    console.log(chalk.blue(\"🔐 LangWatch Login\"));\n    console.log();\n\n    // Q1 — endpoint (cloud vs self-hosted). Skipped if --endpoint was\n    // passed (already persisted above). On 'self-hosted' the entered\n    // URL is persisted to ~/.langwatch/config.json so subsequent\n    // `runUnifiedLoginFlow` calls (and every CLI command's resolver\n    // read) target the right host.\n    if (!options?.endpoint) {\n      const where = await prompts({\n        type: \"select\",\n        name: \"where\",\n        message: \"Where do you want to log in?\",\n        choices: [\n          {\n            title: \"LangWatch Cloud\",\n            description: \"app.langwatch.ai (default)\",\n            value: \"cloud\",\n          },\n          {\n            title: \"Self-hosted instance\",\n            description: \"Custom URL — your company's LangWatch deployment\",\n            value: \"self-hosted\",\n          },\n        ],\n        initial: 0,\n      });\n      if (where.where === \"self-hosted\") {\n        const url = await prompts({\n          type: \"text\",\n          name: \"url\",\n          message: \"Self-hosted LangWatch URL (e.g. https://lw.acme.internal):\",\n          validate: (v: string) => {\n            try {\n              const parsed = new URL(v);\n              if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n                return \"URL must start with http(s)://\";\n              }\n              return true;\n            } catch {\n              return \"URL must be absolute (https://...)\";\n            }\n          },\n        });\n        if (!url.url) {\n          console.log(chalk.yellow(\"Login cancelled\"));\n          process.exit(0);\n        }\n        const cfg = loadConfig();\n        cfg.control_plane_url = (url.url as string).replace(/\\/+$/, \"\");\n        saveConfig(cfg);\n      }\n    }\n\n    // Q2 — auth mode (AI tools = device-flow vs Project SDK = API key)\n    const mode = await prompts({\n      type: \"select\",\n      name: \"mode\",\n      message: \"How do you want to use LangWatch?\",\n      choices: [\n        {\n          title: \"AI tools / agentic flows\",\n          description: \"claude, codex, cursor, gemini, opencode — device-flow SSO\",\n          value: \"device\",\n        },\n        {\n          title: \"Project / SDK API key\",\n          description: \"langwatch sync, langwatch eval, SDK auto-instrumentation\",\n          value: \"api-key\",\n        },\n        {\n          title: \"Both\",\n          description: \"Run both flows in sequence\",\n          value: \"both\",\n        },\n      ],\n      initial: 0,\n    });\n    if (!mode.mode) {\n      console.log(chalk.yellow(\"Login cancelled\"));\n      process.exit(0);\n    }\n\n    if (mode.mode === \"device\" || mode.mode === \"both\") {\n      await runDeviceFlowLogin({ browser: options?.browser });\n    }\n    if (mode.mode === \"api-key\" || mode.mode === \"both\") {\n      // No-paste convergence (sergey f9fcc3927 + alexis bfef4ebab):\n      // /authorize page shows a project-picker + 'Generate API key'\n      // button; the freshly-minted key flows back to the CLI over the\n      // same RFC 8628 poll endpoint as the device-session flow. No\n      // copy-paste of the credential ever.\n      await runUnifiedLoginFlow({\n        kind: \"project_api_key\",\n        browser: options?.browser,\n      });\n    }\n    return;\n  } catch (error) {\n    console.error(\n      chalk.red(\n        `Error during login: ${\n          formatApiErrorMessage({ error })\n        }`,\n      ),\n    );\n    process.exit(1);\n  }\n};\n\n\n"]}

package/dist/logout-device-J325Y37F.js

@@ -0,0 +1,39 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+
+var _chunkS4JKLESFjs = require('./chunk-S4JKLESF.js');
+
+
+
+
+var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
+require('./chunk-BRPEG3YQ.js');
+
+// src/cli/commands/logout-device.ts
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var logoutDeviceCommand = async () => {
+  const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+  if (!_chunkOGAE7BVQjs.isLoggedIn.call(void 0, cfg)) {
+    _chunkOGAE7BVQjs.clearConfig.call(void 0, );
+    console.log("Not logged in. Local config cleared (idempotent).");
+    return;
+  }
+  if (cfg.refresh_token) {
+    try {
+      await _chunkS4JKLESFjs.logout.call(void 0, 
+        { baseUrl: cfg.control_plane_url },
+        cfg.refresh_token,
+        cfg.access_token
+      );
+    } catch (err) {
+      const msg = err instanceof _chunkS4JKLESFjs.DeviceFlowError ? err.message : String(err);
+      console.error(_chalk2.default.yellow(`warning: server-side revoke failed: ${msg}`));
+    }
+  }
+  _chunkOGAE7BVQjs.clearConfig.call(void 0, );
+  console.log("Logged out \u2014 local credentials cleared.");
+};
+
+
+exports.logoutDeviceCommand = logoutDeviceCommand;
+//# sourceMappingURL=logout-device-J325Y37F.js.map

package/dist/logout-device-J325Y37F.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/logout-device-J325Y37F.js","../src/cli/commands/logout-device.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACA;AACF,sDAA4B;AAC5B,+BAA4B;AAC5B;AACA;ACXA,4EAAkB;AAqBX,IAAM,oBAAA,EAAsB,MAAA,CAAA,EAAA,GAA2B;AAC5D,EAAA,MAAM,IAAA,EAAM,yCAAA,CAAW;AACvB,EAAA,GAAA,CAAI,CAAC,yCAAA,GAAc,CAAA,EAAG;AACpB,IAAA,0CAAA,CAAY;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mDAAmD,CAAA;AAC/D,IAAA,MAAA;AAAA,EACF;AAEA,EAAA,GAAA,CAAI,GAAA,CAAI,aAAA,EAAe;AACrB,IAAA,IAAI;AAGF,MAAA,MAAM,qCAAA;AAAA,QACJ,EAAE,OAAA,EAAS,GAAA,CAAI,kBAAkB,CAAA;AAAA,QACjC,GAAA,CAAI,aAAA;AAAA,QACJ,GAAA,CAAI;AAAA,MACN,CAAA;AAAA,IACF,EAAA,MAAA,CAAS,GAAA,EAAK;AAIZ,MAAA,MAAM,IAAA,EAAM,IAAA,WAAe,iCAAA,EAAkB,GAAA,CAAI,QAAA,EAAU,MAAA,CAAO,GAAG,CAAA;AACrE,MAAA,OAAA,CAAQ,KAAA,CAAM,eAAA,CAAM,MAAA,CAAO,CAAA,oCAAA,EAAuC,GAAG,CAAA,CAAA;AACvE,IAAA;AACF,EAAA;AACY,EAAA;AACyC,EAAA;AACvD;ADb4E;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/logout-device-J325Y37F.js","sourcesContent":[null,"import chalk from \"chalk\";\nimport {\n  loadConfig,\n  clearConfig,\n  isLoggedIn,\n} from \"@/cli/utils/governance/config\";\nimport { logout as serverRevokeLogout, DeviceFlowError } from \"@/cli/utils/governance/device-flow\";\n\n/**\n * `langwatch logout --device` — server-revoke the refresh token\n * AND clear the local config. Best-effort: if the server call\n * fails (network down, 5xx), the local clear still happens —\n * otherwise \"logout\" leaves a usable token on disk and the user\n * has to remember to delete the file manually.\n *\n * Idempotent: safe to run when not logged in.\n *\n * The bare `langwatch logout` (no flag) is reserved by the existing\n * API-key flow; this is namespaced under `--device` to avoid\n * regressing the existing CLI surface.\n */\nexport const logoutDeviceCommand = async (): Promise<void> => {\n  const cfg = loadConfig();\n  if (!isLoggedIn(cfg)) {\n    clearConfig();\n    console.log(\"Not logged in. Local config cleared (idempotent).\");\n    return;\n  }\n\n  if (cfg.refresh_token) {\n    try {\n      // Send both tokens so the access_token is invalidated\n      // immediately (Sergey's e7a042c69 closes the 1h-survival gap).\n      await serverRevokeLogout(\n        { baseUrl: cfg.control_plane_url },\n        cfg.refresh_token,\n        cfg.access_token,\n      );\n    } catch (err) {\n      // Server-side revoke failed; we still want to clear locally\n      // per the spec (\"local wipe must happen even when remote\n      // revoke fails — otherwise leaves a usable token on disk\").\n      const msg = err instanceof DeviceFlowError ? err.message : String(err);\n      console.error(chalk.yellow(`warning: server-side revoke failed: ${msg}`));\n    }\n  }\n  clearConfig();\n  console.log(\"Logged out — local credentials cleared.\");\n};\n"]}

package/dist/logout-device-JOPQKPFL.mjs

@@ -0,0 +1,39 @@
+import {
+  DeviceFlowError,
+  logout
+} from "./chunk-3CPA262Z.mjs";
+import {
+  clearConfig,
+  isLoggedIn,
+  loadConfig
+} from "./chunk-U47MQ6CS.mjs";
+import "./chunk-BAX4W3AY.mjs";
+
+// src/cli/commands/logout-device.ts
+import chalk from "chalk";
+var logoutDeviceCommand = async () => {
+  const cfg = loadConfig();
+  if (!isLoggedIn(cfg)) {
+    clearConfig();
+    console.log("Not logged in. Local config cleared (idempotent).");
+    return;
+  }
+  if (cfg.refresh_token) {
+    try {
+      await logout(
+        { baseUrl: cfg.control_plane_url },
+        cfg.refresh_token,
+        cfg.access_token
+      );
+    } catch (err) {
+      const msg = err instanceof DeviceFlowError ? err.message : String(err);
+      console.error(chalk.yellow(`warning: server-side revoke failed: ${msg}`));
+    }
+  }
+  clearConfig();
+  console.log("Logged out \u2014 local credentials cleared.");
+};
+export {
+  logoutDeviceCommand
+};
+//# sourceMappingURL=logout-device-JOPQKPFL.mjs.map

package/dist/observability-sdk/index.d.mts

@@ -1,9 +1,9 @@
-export { F as FilterableBatchSpanProcessor, L as LangWatchExporter, a as LangWatchExporterOptions, b as LangWatchLogger, L as LangWatchTraceExporter, a as LangWatchTraceExporterOptions, S as SpanProcessingExcludeRule, g as getLangWatchLogger, c as getLangWatchLoggerFromProvider, d as getLangWatchTracer, e as getLangWatchTracerFromProvider } from '../implementation-DVeJmBaC.mjs';
+export { F as FilterableBatchSpanProcessor, L as LangWatchExporter, a as LangWatchExporterOptions, b as LangWatchLogger, L as LangWatchTraceExporter, a as LangWatchTraceExporterOptions, S as SpanProcessingExcludeRule, g as getLangWatchLogger, c as getLangWatchLoggerFromProvider, d as getLangWatchTracer, e as getLangWatchTracerFromProvider } from '../implementation-C99N8Z8M.mjs';
 import { OTLPLogExporter } from '@opentelemetry/exporter-logs-otlp-http';
 import { a as DataCaptureMode } from '../types-Dmazk5Bk.mjs';
 export { b as DataCaptureConfig, c as DataCaptureContext, D as DataCaptureOptions, d as DataCapturePredicate } from '../types-Dmazk5Bk.mjs';
-import { a as LangWatchSpan } from '../types-CdEEWouX.mjs';
-export { I as INPUT_OUTPUT_TYPES, b as InputOutputType, J as JsonSerializable, c as LangWatchSpanMetrics, d as LangWatchSpanOptions, e as LangWatchSpanRAGContext, L as LangWatchTracer, S as SimpleChatMessage, f as SpanType, s as spanTypes } from '../types-CdEEWouX.mjs';
+import { a as LangWatchSpan } from '../types-B9qTksgY.mjs';
+export { I as INPUT_OUTPUT_TYPES, b as InputOutputType, J as JsonSerializable, c as LangWatchSpanMetrics, d as LangWatchSpanOptions, e as LangWatchSpanRAGContext, L as LangWatchTracer, S as SimpleChatMessage, f as SpanType, s as spanTypes } from '../types-B9qTksgY.mjs';
 import { Span } from '@opentelemetry/api';
 export { a as SemConvAttributeKey, S as SemConvAttributes, b as SemConvLogRecordAttributes, l as attributes } from '../types-BvCQH8F1.mjs';
 import '@opentelemetry/sdk-trace-base';

package/dist/observability-sdk/index.d.ts

@@ -1,9 +1,9 @@
-export { F as FilterableBatchSpanProcessor, L as LangWatchExporter, a as LangWatchExporterOptions, b as LangWatchLogger, L as LangWatchTraceExporter, a as LangWatchTraceExporterOptions, S as SpanProcessingExcludeRule, g as getLangWatchLogger, c as getLangWatchLoggerFromProvider, d as getLangWatchTracer, e as getLangWatchTracerFromProvider } from '../implementation-BjKH8hfM.js';
+export { F as FilterableBatchSpanProcessor, L as LangWatchExporter, a as LangWatchExporterOptions, b as LangWatchLogger, L as LangWatchTraceExporter, a as LangWatchTraceExporterOptions, S as SpanProcessingExcludeRule, g as getLangWatchLogger, c as getLangWatchLoggerFromProvider, d as getLangWatchTracer, e as getLangWatchTracerFromProvider } from '../implementation-V2FQ1QKc.js';
 import { OTLPLogExporter } from '@opentelemetry/exporter-logs-otlp-http';
 import { a as DataCaptureMode } from '../types-Dmazk5Bk.js';
 export { b as DataCaptureConfig, c as DataCaptureContext, D as DataCaptureOptions, d as DataCapturePredicate } from '../types-Dmazk5Bk.js';
-import { a as LangWatchSpan } from '../types-SQg9EYOC.js';
-export { I as INPUT_OUTPUT_TYPES, b as InputOutputType, J as JsonSerializable, c as LangWatchSpanMetrics, d as LangWatchSpanOptions, e as LangWatchSpanRAGContext, L as LangWatchTracer, S as SimpleChatMessage, f as SpanType, s as spanTypes } from '../types-SQg9EYOC.js';
+import { a as LangWatchSpan } from '../types-BnNfjAE_.js';
+export { I as INPUT_OUTPUT_TYPES, b as InputOutputType, J as JsonSerializable, c as LangWatchSpanMetrics, d as LangWatchSpanOptions, e as LangWatchSpanRAGContext, L as LangWatchTracer, S as SimpleChatMessage, f as SpanType, s as spanTypes } from '../types-BnNfjAE_.js';
 import { Span } from '@opentelemetry/api';
 export { a as SemConvAttributeKey, S as SemConvAttributes, b as SemConvLogRecordAttributes, l as attributes } from '../types-BvCQH8F1.js';
 import '@opentelemetry/sdk-trace-base';

package/dist/observability-sdk/index.js

@@ -7,15 +7,15 @@ var _chunk2PNM3JZ7js = require('../chunk-2PNM3JZ7.js');
 
 
 
-var _chunkBOTX7OBCjs = require('../chunk-BOTX7OBC.js');
+var _chunkHLWOZ2EBjs = require('../chunk-HLWOZ2EB.js');
 
 
 
 
 
-var _chunkD4TPA4ZMjs = require('../chunk-D4TPA4ZM.js');
+var _chunkHQPK4YD5js = require('../chunk-HQPK4YD5.js');
 require('../chunk-WZTRPR6A.js');
-require('../chunk-DVY534IX.js');
+require('../chunk-Q2JOHFST.js');
 
 
 
@@ -41,5 +41,5 @@ require('../chunk-BRPEG3YQ.js');
 
 
 
-exports.DataCapturePresets = _chunk2PNM3JZ7js.DataCapturePresets; exports.FilterableBatchSpanProcessor = _chunk2PNM3JZ7js.FilterableBatchSpanProcessor; exports.LangWatchExporter = _chunkD4TPA4ZMjs.LangWatchTraceExporter; exports.LangWatchLogsExporter = _chunkD4TPA4ZMjs.LangWatchLogsExporter; exports.LangWatchTraceExporter = _chunkD4TPA4ZMjs.LangWatchTraceExporter; exports.attributes = _chunkVS22JXRYjs.attributes_exports; exports.createLangWatchSpan = _chunkBOTX7OBCjs.createLangWatchSpan; exports.getDataCaptureMode = _chunkIXYZL7U2js.getDataCaptureMode; exports.getLangWatchLogger = _chunkD4TPA4ZMjs.getLangWatchLogger; exports.getLangWatchLoggerFromProvider = _chunkD4TPA4ZMjs.getLangWatchLoggerFromProvider; exports.getLangWatchTracer = _chunkBOTX7OBCjs.getLangWatchTracer; exports.getLangWatchTracerFromProvider = _chunkBOTX7OBCjs.getLangWatchTracerFromProvider; exports.shouldCaptureInput = _chunkIXYZL7U2js.shouldCaptureInput; exports.shouldCaptureOutput = _chunkIXYZL7U2js.shouldCaptureOutput; exports.spanTypes = _chunkBOTX7OBCjs.spanTypes;
+exports.DataCapturePresets = _chunk2PNM3JZ7js.DataCapturePresets; exports.FilterableBatchSpanProcessor = _chunk2PNM3JZ7js.FilterableBatchSpanProcessor; exports.LangWatchExporter = _chunkHQPK4YD5js.LangWatchTraceExporter; exports.LangWatchLogsExporter = _chunkHQPK4YD5js.LangWatchLogsExporter; exports.LangWatchTraceExporter = _chunkHQPK4YD5js.LangWatchTraceExporter; exports.attributes = _chunkVS22JXRYjs.attributes_exports; exports.createLangWatchSpan = _chunkHLWOZ2EBjs.createLangWatchSpan; exports.getDataCaptureMode = _chunkIXYZL7U2js.getDataCaptureMode; exports.getLangWatchLogger = _chunkHQPK4YD5js.getLangWatchLogger; exports.getLangWatchLoggerFromProvider = _chunkHQPK4YD5js.getLangWatchLoggerFromProvider; exports.getLangWatchTracer = _chunkHLWOZ2EBjs.getLangWatchTracer; exports.getLangWatchTracerFromProvider = _chunkHLWOZ2EBjs.getLangWatchTracerFromProvider; exports.shouldCaptureInput = _chunkIXYZL7U2js.shouldCaptureInput; exports.shouldCaptureOutput = _chunkIXYZL7U2js.shouldCaptureOutput; exports.spanTypes = _chunkHLWOZ2EBjs.spanTypes;
 //# sourceMappingURL=index.js.map

package/dist/observability-sdk/index.mjs

@@ -7,15 +7,15 @@ import {
   getLangWatchTracer,
   getLangWatchTracerFromProvider,
   spanTypes
-} from "../chunk-SDUILEFR.mjs";
+} from "../chunk-Y4VNZ6M4.mjs";
 import {
   LangWatchLogsExporter,
   LangWatchTraceExporter,
   getLangWatchLogger,
   getLangWatchLoggerFromProvider
-} from "../chunk-CBKUU3DP.mjs";
+} from "../chunk-ZACVIKN5.mjs";
 import "../chunk-SIXSSID3.mjs";
-import "../chunk-WKK33HHX.mjs";
+import "../chunk-QMULACG7.mjs";
 import {
   getDataCaptureMode,
   shouldCaptureInput,

package/dist/observability-sdk/instrumentation/langchain/index.d.mts

@@ -1,6 +1,6 @@
 import * as _opentelemetry_api from '@opentelemetry/api';
 import { Attributes } from '@opentelemetry/api';
-import { L as LangWatchTracer, a as LangWatchSpan, C as ChatMessage } from '../../../types-CdEEWouX.mjs';
+import { L as LangWatchTracer, a as LangWatchSpan, C as ChatMessage } from '../../../types-B9qTksgY.mjs';
 import { AgentAction, AgentFinish } from '@langchain/core/agents';
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
 import { DocumentInterface } from '@langchain/core/documents';

package/dist/observability-sdk/instrumentation/langchain/index.d.ts

@@ -1,6 +1,6 @@
 import * as _opentelemetry_api from '@opentelemetry/api';
 import { Attributes } from '@opentelemetry/api';
-import { L as LangWatchTracer, a as LangWatchSpan, C as ChatMessage } from '../../../types-SQg9EYOC.js';
+import { L as LangWatchTracer, a as LangWatchSpan, C as ChatMessage } from '../../../types-BnNfjAE_.js';
 import { AgentAction, AgentFinish } from '@langchain/core/agents';
 import { BaseCallbackHandler } from '@langchain/core/callbacks/base';
 import { DocumentInterface } from '@langchain/core/documents';

package/dist/observability-sdk/instrumentation/langchain/index.js

@@ -1,7 +1,7 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkBOTX7OBCjs = require('../../../chunk-BOTX7OBC.js');
+var _chunkHLWOZ2EBjs = require('../../../chunk-HLWOZ2EB.js');
 
 
 
@@ -32,7 +32,7 @@ var LangWatchCallbackHandler = class extends _base.BaseCallbackHandler {
   constructor() {
     super(...arguments);
     this.name = "LangWatchCallbackHandler";
-    this.tracer = _chunkBOTX7OBCjs.getLangWatchTracer.call(void 0, "langwatch.instrumentation.langchain");
+    this.tracer = _chunkHLWOZ2EBjs.getLangWatchTracer.call(void 0, "langwatch.instrumentation.langchain");
     this.spans = {};
     this.parentOf = {};
     this.skipped = {};
@@ -363,7 +363,7 @@ function wrapNonScalarValues(value) {
   if (value === null) return JSON.stringify(null);
   if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
     return value;
-  const chatMessages = _chunkBOTX7OBCjs.chatMessageSchema.array().safeParse(value);
+  const chatMessages = _chunkHLWOZ2EBjs.chatMessageSchema.array().safeParse(value);
   if (Array.isArray(value) && chatMessages.success) {
     return JSON.stringify({ type: "chat_messages", value: chatMessages.data });
   }