langwatch 0.31.0 → 0.32.0

package/dist/chunk-NFDH7SPZ.js

@@ -0,0 +1,136 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkJHNMPNXQjs = require('./chunk-JHNMPNXQ.js');
+
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+
+// src/client-sdk/services/experiments/experiments-api.service.ts
+var ExperimentsApiServiceError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ExperimentsApiServiceError";
+  }
+};
+var ExperimentsApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : _chunkJHNMPNXQjs.createLangWatchApiClient.call(void 0, );
+  }
+  handleApiError(operation, error) {
+    const message = _chunkC5Y772G7js.formatApiErrorForOperation.call(void 0, { operation, error, options: {
+      status: _chunkC5Y772G7js.extractStatusFromResponse.call(void 0, error)
+    } });
+    throw new ExperimentsApiServiceError(message, operation, error);
+  }
+  async getUndeclaredEndpoint({
+    path,
+    operation
+  }) {
+    let result;
+    try {
+      result = await this.apiClient.GET(path, {
+        parseAs: "json"
+      });
+    } catch (error) {
+      this.handleApiError(operation, error);
+    }
+    if (result.error) this.handleApiError(operation, result.error);
+    return result.data;
+  }
+  async startRun(slug) {
+    const { data, error } = await this.apiClient.POST(
+      "/api/experiments/{slug}/run",
+      {
+        params: { path: { slug } }
+      }
+    );
+    if (error) this.handleApiError(`start experiment run for "${slug}"`, error);
+    return data;
+  }
+  async getRunStatus(runId) {
+    const { data, error } = await this.apiClient.GET(
+      "/api/experiments/runs/{runId}",
+      {
+        params: { path: { runId } }
+      }
+    );
+    if (error) this.handleApiError(`get run status for "${runId}"`, error);
+    return data;
+  }
+  /**
+   * List experiments for the current project.
+   *
+   * Hits `GET /api/experiments` through the configured API client transport.
+   * The route is not yet declared in generated OpenAPI types, so the path is
+   * dispatched through a narrow untyped helper.
+   */
+  async listExperiments({
+    pageSize,
+    page
+  } = {}) {
+    const search = new URLSearchParams();
+    if (pageSize !== void 0) search.set("pageSize", String(pageSize));
+    if (page !== void 0) search.set("page", String(page));
+    const qs = search.toString();
+    return this.getUndeclaredEndpoint({
+      path: `/api/experiments${qs ? `?${qs}` : ""}`,
+      operation: "list experiments"
+    });
+  }
+  /**
+   * List experiment runs for an experiment slug.
+   *
+   * Hits `GET /api/experiments/runs?experimentSlug=...` through the
+   * configured API client transport because the route is not yet declared in
+   * the generated OpenAPI.
+   */
+  async listRuns({
+    experimentSlug,
+    pageSize,
+    page
+  }) {
+    const search = new URLSearchParams();
+    search.set("experimentSlug", experimentSlug);
+    if (pageSize !== void 0) search.set("pageSize", String(pageSize));
+    if (page !== void 0) search.set("page", String(page));
+    return this.getUndeclaredEndpoint({
+      path: `/api/experiments/runs?${search.toString()}`,
+      operation: `list runs for experiment "${experimentSlug}"`
+    });
+  }
+  /**
+   * Fetch per-row results for a completed experiment run.
+   *
+   * Hits `GET /api/experiments/runs/{runId}/results` through the
+   * configured API client transport because the route is not yet declared in
+   * the generated OpenAPI `paths`.
+   */
+  async getRunResults({
+    runId,
+    experimentSlug
+  }) {
+    const search = new URLSearchParams();
+    if (experimentSlug) search.set("experimentSlug", experimentSlug);
+    const qs = search.toString() ? `?${search.toString()}` : "";
+    const body = await this.getUndeclaredEndpoint({
+      path: `/api/experiments/runs/${encodeURIComponent(runId)}/results${qs}`,
+      operation: `get run results for "${runId}"`
+    });
+    if (body === null) {
+      this.handleApiError(`get run results for "${runId}"`, {
+        response: { status: 404 },
+        data: { error: `Run not found: ${runId}` }
+      });
+    }
+    return body;
+  }
+};
+
+
+
+exports.ExperimentsApiService = ExperimentsApiService;
+//# sourceMappingURL=chunk-NFDH7SPZ.js.map

package/dist/chunk-NFDH7SPZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NFDH7SPZ.js","../src/client-sdk/services/experiments/experiments-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACuIO,IAAM,2BAAA,EAAN,MAAA,QAAyC,MAAM;AAAA,EACpD,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,4BAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,sBAAA,EAAN,MAA4B;AAAA,EAGjC,WAAA,CAAY,MAAA,EAAqD;AA7JnE,IAAA,IAAA,EAAA;AA8JI,IAAA,IAAA,CAAK,UAAA,EAAA,CAAY,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,kBAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAA8B,uDAAA,CAAyB;AAAA,EAC1E;AAAA,EAEQ,cAAA,CAAe,SAAA,EAAmB,KAAA,EAAuB;AAC/D,IAAA,MAAM,QAAA,EAAU,yDAAA,EAA6B,SAAA,EAAsB,KAAA,EAAc,OAAA,EAAS;AAAA,MACxF,MAAA,EAAQ,wDAAA,KAA+B;AAAA,IACzC,EAAE,CAAC,CAAA;AACH,IAAA,MAAM,IAAI,0BAAA,CAA2B,OAAA,EAAS,SAAA,EAAW,KAAK,CAAA;AAAA,EAChE;AAAA,EAEA,MAAc,qBAAA,CAAyB;AAAA,IACrC,IAAA;AAAA,IACA;AAAA,EACF,CAAA,EAGe;AAQb,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,EAAS,MAAO,IAAA,CAAK,SAAA,CAAuC,GAAA,CAAI,IAAA,EAAM;AAAA,QACpE,OAAA,EAAS;AAAA,MACX,CAAC,CAAA;AAAA,IACH,EAAA,MAAA,CAAS,KAAA,EAAO;AACd,MAAA,IAAA,CAAK,cAAA,CAAe,SAAA,EAAW,KAAK,CAAA;AAAA,IACtC;AAEA,IAAA,GAAA,CAAI,MAAA,CAAO,KAAA,EAAO,IAAA,CAAK,cAAA,CAAe,SAAA,EAAW,MAAA,CAAO,KAAK,CAAA;AAC7D,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AAAA,EAEA,MAAM,QAAA,CAAS,IAAA,EAAmD;AAChE,IAAA,MAAM,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,MAAM,IAAA,CAAK,SAAA,CAAU,IAAA;AAAA,MAC3C,6BAAA;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,KAAK,EAAE;AAAA,MAC3B;AAAA,IACF,CAAA;AACA,IAAA,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,cAAA,CAAe,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AAC1E,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,YAAA,CAAa,KAAA,EAAqD;AACtE,IAAA,MAAM,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA;AAAA,MAC3C,+BAAA;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,MAAM,EAAE;AAAA,MAC5B;AAAA,IACF,CAAA;AACA,IAAA,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,cAAA,CAAe,CAAA,oBAAA,EAAuB,KAAK,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AACrE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,eAAA,CAAgB;AAAA,IACpB,QAAA;AAAA,IACA;AAAA,EACF,EAAA,EAGI,CAAC,CAAA,EAAoC;AACvC,IAAA,MAAM,OAAA,EAAS,IAAI,eAAA,CAAgB,CAAA;AACnC,IAAA,GAAA,CAAI,SAAA,IAAa,KAAA,CAAA,EAAW,MAAA,CAAO,GAAA,CAAI,UAAA,EAAY,MAAA,CAAO,QAAQ,CAAC,CAAA;AACnE,IAAA,GAAA,CAAI,KAAA,IAAS,KAAA,CAAA,EAAW,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AACvD,IAAA,MAAM,GAAA,EAAK,MAAA,CAAO,QAAA,CAAS,CAAA;AAC3B,IAAA,OAAO,IAAA,CAAK,qBAAA,CAA8C;AAAA,MACxD,IAAA,EAAM,CAAA,gBAAA,EAAmB,GAAA,EAAK,CAAA,CAAA,EAAI,EAAE,CAAA,EAAA;AACzB,MAAA;AACZ,IAAA;AACH,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASe,EAAA;AACb,IAAA;AACA,IAAA;AACA,IAAA;AAKsC,EAAA;AACH,IAAA;AACN,IAAA;AACU,IAAA;AACJ,IAAA;AAC2B,IAAA;AAC7B,MAAA;AACpB,MAAA;AACZ,IAAA;AACH,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASoB,EAAA;AAClB,IAAA;AACA,IAAA;AAIwC,EAAA;AACL,IAAA;AACJ,IAAA;AACI,IAAA;AACX,IAAA;AAGS,MAAA;AACI,MAAA;AACpC,IAAA;AACkB,IAAA;AACG,MAAA;AACM,QAAA;AACS,QAAA;AAClC,MAAA;AACH,IAAA;AACO,IAAA;AACT,EAAA;AACF;ADvK2C;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NFDH7SPZ.js","sourcesContent":[null,"import type { paths } from \"@/internal/generated/openapi/api-client\";\nimport {\n  createLangWatchApiClient,\n  type LangwatchApiClient,\n} from \"@/internal/api/client\";\nimport { type InternalConfig } from \"@/client-sdk/types\";\nimport {\n  extractStatusFromResponse,\n  formatApiErrorForOperation,\n} from \"@/client-sdk/services/_shared/format-api-error\";\n\nexport interface ExperimentRunStartResponse {\n  runId: string;\n  status: \"running\";\n  total: number;\n  runUrl?: string;\n}\n\nexport type ExperimentRunStatusResponse =\n  paths[\"/api/experiments/runs/{runId}\"][\"get\"][\"responses\"][\"200\"][\"content\"][\"application/json\"];\n\n/**\n * Summary entry returned by `GET /api/experiments`. Mirrors\n * `experimentSummarySchema` from the control-plane Hono route. Hand-written\n * because the route is not yet exposed via the generated OpenAPI types.\n */\nexport interface ExperimentSummary {\n  id: string;\n  slug: string;\n  name: string | null;\n  type: string;\n  workflowId: string | null;\n  createdAt: string;\n  updatedAt: string;\n  runsCount: number;\n  lastRunAt: string | null;\n}\n\nexport interface ExperimentListPagination {\n  page: number;\n  pageSize: number;\n  totalHits: number;\n  hasMore: boolean;\n}\n\nexport interface ExperimentListResponse {\n  experiments: ExperimentSummary[];\n  pagination: ExperimentListPagination;\n}\n\n/**\n * Per-run entry returned by `GET /api/experiments/runs?experimentSlug=...`.\n * Mirrors `ExperimentRun` from the control plane.\n */\nexport interface ExperimentRunSummaryEntry {\n  experimentId: string;\n  runId: string;\n  workflowVersion: {\n    id: string;\n    version: string;\n    commitMessage: string;\n    author: { name: string | null; image: string | null } | null;\n  } | null;\n  timestamps: {\n    createdAt: number;\n    updatedAt: number;\n    finishedAt?: number | null;\n    stoppedAt?: number | null;\n  };\n  progress?: number | null;\n  total?: number | null;\n  summary: {\n    datasetCost?: number;\n    evaluationsCost?: number;\n    datasetAverageCost?: number;\n    datasetAverageDuration?: number;\n    evaluationsAverageCost?: number;\n    evaluationsAverageDuration?: number;\n    evaluations: Record<\n      string,\n      { name: string; averageScore: number | null; averagePassed?: number }\n    >;\n  };\n}\n\nexport interface ExperimentRunsListResponse {\n  experimentId: string;\n  experimentSlug: string;\n  runs: ExperimentRunSummaryEntry[];\n  pagination: ExperimentListPagination;\n}\n\n/**\n * Per-row results for a completed experiment run.\n *\n * Mirrors `ExperimentRunWithItems` from the control plane\n * (`langwatch/src/server/experiments-v3/services/types.ts`). Hand-written\n * because the `/runs/{runId}/results` route is not yet exposed via the\n * generated OpenAPI types.\n */\nexport interface ExperimentRunDatasetEntry {\n  index: number;\n  targetId?: string | null;\n  entry: Record<string, unknown>;\n  predicted?: Record<string, unknown>;\n  cost?: number | null;\n  duration?: number | null;\n  error?: string | null;\n  traceId?: string | null;\n}\n\nexport interface ExperimentRunEvaluation {\n  evaluator: string;\n  name?: string | null;\n  targetId?: string | null;\n  status: \"processed\" | \"skipped\" | \"error\";\n  index: number;\n  score?: number | null;\n  label?: string | null;\n  passed?: boolean | null;\n  details?: string | null;\n  cost?: number | null;\n  duration?: number | null;\n  inputs?: Record<string, unknown> | null;\n}\n\nexport interface ExperimentRunResultsResponse {\n  experimentId: string;\n  runId: string;\n  projectId: string;\n  workflowVersionId?: string | null;\n  progress?: number | null;\n  total?: number | null;\n  dataset: ExperimentRunDatasetEntry[];\n  evaluations: ExperimentRunEvaluation[];\n  timestamps: {\n    createdAt: number;\n    updatedAt: number;\n    finishedAt?: number | null;\n    stoppedAt?: number | null;\n  };\n}\n\nexport class ExperimentsApiServiceError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"ExperimentsApiServiceError\";\n  }\n}\n\nexport class ExperimentsApiService {\n  private readonly apiClient: LangwatchApiClient;\n\n  constructor(config?: Pick<InternalConfig, \"langwatchApiClient\">) {\n    this.apiClient = config?.langwatchApiClient ?? createLangWatchApiClient();\n  }\n\n  private handleApiError(operation: string, error: unknown): never {\n    const message = formatApiErrorForOperation({ operation: operation, error: error, options: {\n      status: extractStatusFromResponse(error),\n    } });\n    throw new ExperimentsApiServiceError(message, operation, error);\n  }\n\n  private async getUndeclaredEndpoint<T>({\n    path,\n    operation,\n  }: {\n    path: string;\n    operation: string;\n  }): Promise<T> {\n    type UntypedClient = {\n      GET: (\n        path: string,\n        init?: { parseAs?: \"json\" },\n      ) => Promise<{ data?: unknown; error?: unknown; response: Response }>;\n    };\n\n    let result: { data?: unknown; error?: unknown; response: Response };\n    try {\n      result = await (this.apiClient as unknown as UntypedClient).GET(path, {\n        parseAs: \"json\",\n      });\n    } catch (error) {\n      this.handleApiError(operation, error);\n    }\n\n    if (result.error) this.handleApiError(operation, result.error);\n    return result.data as T;\n  }\n\n  async startRun(slug: string): Promise<ExperimentRunStartResponse> {\n    const { data, error } = await this.apiClient.POST(\n      \"/api/experiments/{slug}/run\",\n      {\n        params: { path: { slug } },\n      },\n    );\n    if (error) this.handleApiError(`start experiment run for \"${slug}\"`, error);\n    return data as unknown as ExperimentRunStartResponse;\n  }\n\n  async getRunStatus(runId: string): Promise<ExperimentRunStatusResponse> {\n    const { data, error } = await this.apiClient.GET(\n      \"/api/experiments/runs/{runId}\",\n      {\n        params: { path: { runId } },\n      },\n    );\n    if (error) this.handleApiError(`get run status for \"${runId}\"`, error);\n    return data;\n  }\n\n  /**\n   * List experiments for the current project.\n   *\n   * Hits `GET /api/experiments` through the configured API client transport.\n   * The route is not yet declared in generated OpenAPI types, so the path is\n   * dispatched through a narrow untyped helper.\n   */\n  async listExperiments({\n    pageSize,\n    page,\n  }: {\n    pageSize?: number;\n    page?: number;\n  } = {}): Promise<ExperimentListResponse> {\n    const search = new URLSearchParams();\n    if (pageSize !== undefined) search.set(\"pageSize\", String(pageSize));\n    if (page !== undefined) search.set(\"page\", String(page));\n    const qs = search.toString();\n    return this.getUndeclaredEndpoint<ExperimentListResponse>({\n      path: `/api/experiments${qs ? `?${qs}` : \"\"}`,\n      operation: \"list experiments\",\n    });\n  }\n\n  /**\n   * List experiment runs for an experiment slug.\n   *\n   * Hits `GET /api/experiments/runs?experimentSlug=...` through the\n   * configured API client transport because the route is not yet declared in\n   * the generated OpenAPI.\n   */\n  async listRuns({\n    experimentSlug,\n    pageSize,\n    page,\n  }: {\n    experimentSlug: string;\n    pageSize?: number;\n    page?: number;\n  }): Promise<ExperimentRunsListResponse> {\n    const search = new URLSearchParams();\n    search.set(\"experimentSlug\", experimentSlug);\n    if (pageSize !== undefined) search.set(\"pageSize\", String(pageSize));\n    if (page !== undefined) search.set(\"page\", String(page));\n    return this.getUndeclaredEndpoint<ExperimentRunsListResponse>({\n      path: `/api/experiments/runs?${search.toString()}`,\n      operation: `list runs for experiment \"${experimentSlug}\"`,\n    });\n  }\n\n  /**\n   * Fetch per-row results for a completed experiment run.\n   *\n   * Hits `GET /api/experiments/runs/{runId}/results` through the\n   * configured API client transport because the route is not yet declared in\n   * the generated OpenAPI `paths`.\n   */\n  async getRunResults({\n    runId,\n    experimentSlug,\n  }: {\n    runId: string;\n    experimentSlug?: string;\n  }): Promise<ExperimentRunResultsResponse> {\n    const search = new URLSearchParams();\n    if (experimentSlug) search.set(\"experimentSlug\", experimentSlug);\n    const qs = search.toString() ? `?${search.toString()}` : \"\";\n    const body = await this.getUndeclaredEndpoint<\n      ExperimentRunResultsResponse | null\n    >({\n      path: `/api/experiments/runs/${encodeURIComponent(runId)}/results${qs}`,\n      operation: `get run results for \"${runId}\"`,\n    });\n    if (body === null) {\n      this.handleApiError(`get run results for \"${runId}\"`, {\n        response: { status: 404 },\n        data: { error: `Run not found: ${runId}` },\n      });\n    }\n    return body;\n  }\n}\n"]}

package/dist/chunk-NNMPHEXT.js

@@ -0,0 +1,103 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkQ2JOHFSTjs = require('./chunk-Q2JOHFST.js');
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+
+
+
+var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
+
+// src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts
+var VirtualKeysApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "VirtualKeysApiError";
+  }
+};
+var VirtualKeysApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = ((_b = (_a = config == null ? void 0 : config.endpoint) != null ? _a : process.env.LANGWATCH_ENDPOINT) != null ? _b : _chunkQ2JOHFSTjs.DEFAULT_ENDPOINT).replace(/\/+$/, "");
+    this.apiKey = (_d = (_c = config == null ? void 0 : config.apiKey) != null ? _c : process.env.LANGWATCH_API_KEY) != null ? _d : "";
+  }
+  headers() {
+    return {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    };
+  }
+  async request(operation, path, init) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, _chunkBRPEG3YQjs.__spreadProps.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, init), {
+      headers: _chunkBRPEG3YQjs.__spreadValues.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, this.headers()), (_a = init == null ? void 0 : init.headers) != null ? _a : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = _chunkC5Y772G7js.formatApiErrorForOperation.call(void 0, {
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throw new VirtualKeysApiError(message, operation, parsedBody);
+    }
+    return await response.json();
+  }
+  async list() {
+    const { data } = await this.request(
+      "list virtual keys",
+      "/api/gateway/v1/virtual-keys"
+    );
+    return data;
+  }
+  async get(id) {
+    const { virtual_key } = await this.request(
+      `get virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`
+    );
+    return virtual_key;
+  }
+  async create(input) {
+    return this.request(
+      "create virtual key",
+      "/api/gateway/v1/virtual-keys",
+      { method: "POST", body: JSON.stringify(input) }
+    );
+  }
+  async update(id, input) {
+    const { virtual_key } = await this.request(
+      `update virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,
+      { method: "PATCH", body: JSON.stringify(input) }
+    );
+    return virtual_key;
+  }
+  async rotate(id) {
+    return this.request(
+      `rotate virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,
+      { method: "POST" }
+    );
+  }
+  async revoke(id) {
+    const { virtual_key } = await this.request(
+      `revoke virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,
+      { method: "POST" }
+    );
+    return virtual_key;
+  }
+};
+
+
+
+exports.VirtualKeysApiService = VirtualKeysApiService;
+//# sourceMappingURL=chunk-NNMPHEXT.js.map

package/dist/chunk-NNMPHEXT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NNMPHEXT.js","../src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACgDO,IAAM,oBAAA,EAAN,MAAA,QAAkC,MAAM;AAAA,EAC7C,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,qBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,sBAAA,EAAN,MAA4B;AAAA,EAIjC,WAAA,CAAY,MAAA,EAAiD;AA1E/D,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA2EI,IAAA,IAAA,CAAK,SAAA,EAAA,CAAA,CAAY,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,QAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAoB,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAA,GAAhC,KAAA,EAAA,GAAA,EAAsD,iCAAA,CAAA,CAAkB,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC3G,IAAA,IAAA,CAAK,OAAA,EAAA,CAAS,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,MAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAA,GAA9B,KAAA,EAAA,GAAA,EAAmD,EAAA;AAAA,EACnE;AAAA,EAEQ,OAAA,CAAA,EAAkC;AACxC,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AACpB,MAAA;AAClB,IAAA;AACF,EAAA;AAE0F,EAAA;AAtF5F,IAAA;AAuFyC,IAAA;AAE1B,MAAA;AACV,IAAA;AACiB,IAAA;AACZ,MAAA;AACA,MAAA;AAC+B,QAAA;AAC3B,MAAA;AAC2B,QAAA;AACnC,MAAA;AACgB,MAAA;AACd,QAAA;AACO,QAAA;AAC4B,QAAA;AACpC,MAAA;AAC6B,MAAA;AAChC,IAAA;AAC4B,IAAA;AAC9B,EAAA;AAEoC,EAAA;AACN,IAAA;AAC1B,MAAA;AACA,MAAA;AACF,IAAA;AACO,IAAA;AACT,EAAA;AAE2C,EAAA;AACN,IAAA;AACX,MAAA;AACU,MAAA;AAClC,IAAA;AACO,IAAA;AACT,EAAA;AAE0E,EAAA;AAC5D,IAAA;AACV,MAAA;AACA,MAAA;AAC6B,MAAA;AAC/B,IAAA;AACF,EAAA;AAE4E,EAAA;AACvC,IAAA;AACR,MAAA;AACO,MAAA;AACF,MAAA;AAChC,IAAA;AACO,IAAA;AACT,EAAA;AAEwD,EAAA;AAC1C,IAAA;AACe,MAAA;AACO,MAAA;AACf,MAAA;AACnB,IAAA;AACF,EAAA;AAE8C,EAAA;AACT,IAAA;AACR,MAAA;AACO,MAAA;AACf,MAAA;AACnB,IAAA;AACO,IAAA;AACT,EAAA;AACF;AD3D2C;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NNMPHEXT.js","sourcesContent":[null,"import { formatApiErrorForOperation } from \"@/client-sdk/services/_shared/format-api-error\";\nimport { DEFAULT_ENDPOINT } from \"@/internal/constants\";\n\nexport type VirtualKeyScopeType = \"ORGANIZATION\" | \"TEAM\" | \"PROJECT\";\n\nexport interface VirtualKeyScope {\n  scope_type: VirtualKeyScopeType;\n  scope_id: string;\n}\n\nexport interface VirtualKey {\n  id: string;\n  name: string;\n  description: string | null;\n  environment: \"live\" | \"test\";\n  prefix: string;\n  last_four: string;\n  status: \"ACTIVE\" | \"REVOKED\";\n  principal_user_id: string | null;\n  organization_id: string;\n  /**\n   * Single-PROJECT-scope shorthand: present when the VK has exactly one\n   * PROJECT scope row. Null for ORG/TEAM-only VKs and for multi-project\n   * VKs (use `scopes[]` for the authoritative scope list in those cases).\n   * See vk-config-bundle.feature.\n   */\n  project_id: string | null;\n  scopes: VirtualKeyScope[];\n  routing_policy_id: string | null;\n  config: Record<string, unknown>;\n  created_at: string;\n  updated_at: string;\n  revoked_at: string | null;\n  last_used_at: string | null;\n}\n\nexport interface CreateVirtualKeyInput {\n  name: string;\n  description?: string;\n  environment?: \"live\" | \"test\";\n  principal_user_id?: string | null;\n  scopes: VirtualKeyScope[];\n  routing_policy_id?: string | null;\n  config?: Record<string, unknown>;\n}\n\nexport interface UpdateVirtualKeyInput {\n  name?: string;\n  description?: string | null;\n  scopes?: VirtualKeyScope[];\n  routing_policy_id?: string | null;\n  config?: Record<string, unknown>;\n}\n\nexport interface VirtualKeyWithSecret {\n  virtual_key: VirtualKey;\n  secret: string;\n}\n\nexport class VirtualKeysApiError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"VirtualKeysApiError\";\n  }\n}\n\nexport class VirtualKeysApiService {\n  private readonly endpoint: string;\n  private readonly apiKey: string;\n\n  constructor(config?: { endpoint?: string; apiKey?: string }) {\n    this.endpoint = (config?.endpoint ?? process.env.LANGWATCH_ENDPOINT ?? DEFAULT_ENDPOINT).replace(/\\/+$/, \"\");\n    this.apiKey = config?.apiKey ?? process.env.LANGWATCH_API_KEY ?? \"\";\n  }\n\n  private headers(): Record<string, string> {\n    return {\n      Authorization: `Bearer ${this.apiKey}`,\n      \"Content-Type\": \"application/json\",\n    };\n  }\n\n  private async request<T>(operation: string, path: string, init?: RequestInit): Promise<T> {\n    const response = await fetch(`${this.endpoint}${path}`, {\n      ...init,\n      headers: { ...this.headers(), ...(init?.headers ?? {}) },\n    });\n    if (!response.ok) {\n      let parsedBody: unknown;\n      try {\n        parsedBody = await response.json();\n      } catch {\n        parsedBody = await response.text();\n      }\n      const message = formatApiErrorForOperation({\n        operation,\n        error: parsedBody,\n        options: { status: response.status },\n      });\n      throw new VirtualKeysApiError(message, operation, parsedBody);\n    }\n    return (await response.json()) as T;\n  }\n\n  async list(): Promise<VirtualKey[]> {\n    const { data } = await this.request<{ data: VirtualKey[] }>(\n      \"list virtual keys\",\n      \"/api/gateway/v1/virtual-keys\",\n    );\n    return data;\n  }\n\n  async get(id: string): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `get virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,\n    );\n    return virtual_key;\n  }\n\n  async create(input: CreateVirtualKeyInput): Promise<VirtualKeyWithSecret> {\n    return this.request<VirtualKeyWithSecret>(\n      \"create virtual key\",\n      \"/api/gateway/v1/virtual-keys\",\n      { method: \"POST\", body: JSON.stringify(input) },\n    );\n  }\n\n  async update(id: string, input: UpdateVirtualKeyInput): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `update virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,\n      { method: \"PATCH\", body: JSON.stringify(input) },\n    );\n    return virtual_key;\n  }\n\n  async rotate(id: string): Promise<VirtualKeyWithSecret> {\n    return this.request<VirtualKeyWithSecret>(\n      `rotate virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,\n      { method: \"POST\" },\n    );\n  }\n\n  async revoke(id: string): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `revoke virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,\n      { method: \"POST\" },\n    );\n    return virtual_key;\n  }\n}\n"]}

package/dist/chunk-NTUDKM6T.mjs

@@ -0,0 +1,92 @@
+import {
+  buildAuthHeaders
+} from "./chunk-SIXSSID3.mjs";
+import {
+  DEFAULT_ENDPOINT
+} from "./chunk-QMULACG7.mjs";
+import {
+  formatApiErrorMessage
+} from "./chunk-J3KM7ZO7.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/client-sdk/services/model-defaults/model-defaults-api.service.ts
+var ModelDefaultsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ModelDefaultsApiError";
+  }
+};
+var ModelDefaultsApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.apiKey = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : process.env.LANGWATCH_API_KEY) != null ? _b : "";
+    this.endpoint = (_d = (_c = config == null ? void 0 : config.endpoint) != null ? _c : process.env.LANGWATCH_ENDPOINT) != null ? _d : DEFAULT_ENDPOINT;
+  }
+  async request(path, options) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, __spreadProps(__spreadValues({}, options), {
+      headers: __spreadValues(__spreadProps(__spreadValues({}, buildAuthHeaders({ apiKey: this.apiKey })), {
+        "Content-Type": "application/json"
+      }), options == null ? void 0 : options.headers)
+    }));
+    if (!response.ok) {
+      const errorText = await response.text();
+      let parsed = errorText;
+      try {
+        parsed = JSON.parse(errorText);
+      } catch (e) {
+      }
+      const message = formatApiErrorMessage({
+        error: parsed,
+        options: { status: response.status }
+      });
+      throw new ModelDefaultsApiError(
+        `HTTP ${response.status}: ${message}`,
+        (_a = options == null ? void 0 : options.method) != null ? _a : "GET",
+        parsed
+      );
+    }
+    if (response.status === 204 || (options == null ? void 0 : options.allowNoContent)) {
+      return void 0;
+    }
+    return response.json();
+  }
+  async getSnapshot() {
+    return this.request("/api/model-defaults");
+  }
+  async createConfig(body) {
+    return this.request("/api/model-defaults", {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  }
+  async updateConfig(id, body) {
+    await this.request(
+      `/api/model-defaults/${encodeURIComponent(id)}`,
+      {
+        method: "PUT",
+        body: JSON.stringify(body),
+        allowNoContent: true
+      }
+    );
+  }
+  async deleteConfig(id) {
+    await this.request(
+      `/api/model-defaults/${encodeURIComponent(id)}`,
+      {
+        method: "DELETE",
+        allowNoContent: true
+      }
+    );
+  }
+};
+
+export {
+  ModelDefaultsApiService
+};
+//# sourceMappingURL=chunk-NTUDKM6T.mjs.map

package/dist/chunk-NTWYYCHM.js

@@ -0,0 +1,42 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
+
+
+var _chunkQ2JOHFSTjs = require('./chunk-Q2JOHFST.js');
+
+// src/cli/utils/governance/resolveEndpoint.ts
+function resolveControlPlaneEndpoint(opts = {}) {
+  if (opts.flag) {
+    return { url: stripTrailingSlash(opts.flag), source: "flag" };
+  }
+  const env = process.env.LANGWATCH_ENDPOINT;
+  if (env && env.trim() !== "") {
+    return { url: stripTrailingSlash(env), source: "env" };
+  }
+  let cfg = opts.cfg;
+  if (cfg === void 0) {
+    try {
+      cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+    } catch (e) {
+      cfg = void 0;
+    }
+  }
+  const persisted = cfg == null ? void 0 : cfg.control_plane_url;
+  if (persisted && persisted !== _chunkQ2JOHFSTjs.DEFAULT_ENDPOINT) {
+    return { url: stripTrailingSlash(persisted), source: "config" };
+  }
+  return { url: stripTrailingSlash(_chunkQ2JOHFSTjs.DEFAULT_ENDPOINT), source: "default" };
+}
+function resolveControlPlaneUrl(opts = {}) {
+  return resolveControlPlaneEndpoint(opts).url;
+}
+function stripTrailingSlash(url) {
+  return url.replace(/\/+$/, "");
+}
+
+
+
+
+exports.resolveControlPlaneEndpoint = resolveControlPlaneEndpoint; exports.resolveControlPlaneUrl = resolveControlPlaneUrl;
+//# sourceMappingURL=chunk-NTWYYCHM.js.map

package/dist/chunk-NTWYYCHM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NTWYYCHM.js","../src/cli/utils/governance/resolveEndpoint.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACiCO,SAAS,2BAAA,CACd,KAAA,EAA+B,CAAC,CAAA,EACd;AAClB,EAAA,GAAA,CAAI,IAAA,CAAK,IAAA,EAAM;AACb,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC9D;AACA,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,kBAAA;AACxB,EAAA,GAAA,CAAI,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,EAAA,IAAM,EAAA,EAAI;AAC5B,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,GAAG,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA;AAAA,EACvD;AAGA,EAAA,IAAI,IAAA,EAAM,IAAA,CAAK,GAAA;AACf,EAAA,GAAA,CAAI,IAAA,IAAQ,KAAA,CAAA,EAAW;AACrB,IAAA,IAAI;AACF,MAAA,IAAA,EAAM,yCAAA,CAAW;AAAA,IACnB,EAAA,MAAA,CAAQ,CAAA,EAAA;AACN,MAAA,IAAA,EAAM,KAAA,CAAA;AAAA,IACR;AAAA,EACF;AAKA,EAAA,MAAM,UAAA,EAAY,IAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,GAAA,CAAK,iBAAA;AACvB,EAAA,GAAA,CAAI,UAAA,GAAa,UAAA,IAAc,iCAAA,EAAkB;AAC/C,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,SAAS,CAAA,EAAG,MAAA,EAAQ,SAAS,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,iCAAgB,CAAA,EAAG,MAAA,EAAQ,UAAU,CAAA;AACxE;AAOO,SAAS,sBAAA,CACd,KAAA,EAA+B,CAAC,CAAA,EACxB;AACR,EAAA,OAAO,2BAAA,CAA4B,IAAI,CAAA,CAAE,GAAA;AAC3C;AAEA,SAAS,kBAAA,CAAmB,GAAA,EAAqB;AAC/C,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC/B;ADhDA;AACA;AACE;AACA;AACF,2HAAC","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-NTWYYCHM.js","sourcesContent":[null,"/**\n * Single source of truth for resolving the LangWatch control-plane URL\n * across the CLI. Replaces the previous three drifted readers\n * (`endpoint.ts:getEndpoint`, `governance/config.ts:defaults`, and the\n * inline `process.env.LANGWATCH_ENDPOINT ?? ...` literal in\n * `commands/status.ts`) so every command sees the same value for the\n * same inputs.\n *\n * Priority (highest wins):\n *   1. opts.flag           — per-command override (e.g. `langwatch login --endpoint <url>`)\n *   2. LANGWATCH_ENDPOINT  — env var (CI / scripts)\n *   3. persisted config    — `~/.langwatch/config.json:control_plane_url` (daily driver)\n *   4. DEFAULT_ENDPOINT    — `https://app.langwatch.ai` (cloud default)\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\n\nimport { DEFAULT_ENDPOINT } from \"@/internal/constants\";\nimport { loadConfig } from \"./config\";\n\nexport interface ResolveEndpointOptions {\n  /** Per-command override flag value (e.g. `--endpoint`). NULL/empty ignored. */\n  flag?: string | null;\n  /** Optional pre-loaded config to reuse (skips disk read). */\n  cfg?: ReturnType<typeof loadConfig>;\n}\n\nexport interface ResolvedEndpoint {\n  /** The resolved URL with trailing slashes stripped. */\n  url: string;\n  /** Where the value came from — useful for `langwatch config list`. */\n  source: \"flag\" | \"env\" | \"config\" | \"default\";\n}\n\n/**\n * Resolve the control-plane endpoint per the documented priority order.\n *\n * Returns both the resolved URL and the source that won, so\n * `langwatch config list` can show the user where each value came from.\n */\nexport function resolveControlPlaneEndpoint(\n  opts: ResolveEndpointOptions = {},\n): ResolvedEndpoint {\n  if (opts.flag) {\n    return { url: stripTrailingSlash(opts.flag), source: \"flag\" };\n  }\n  const env = process.env.LANGWATCH_ENDPOINT;\n  if (env && env.trim() !== \"\") {\n    return { url: stripTrailingSlash(env), source: \"env\" };\n  }\n  // Reading the config involves disk I/O; only do it if we need to.\n  // Callers that already have a cfg in scope can pass it in to skip.\n  let cfg = opts.cfg;\n  if (cfg === undefined) {\n    try {\n      cfg = loadConfig();\n    } catch {\n      cfg = undefined;\n    }\n  }\n  // The persisted control_plane_url is populated EITHER by a prior\n  // `langwatch login --device` (snapshot of env at save time) OR by an\n  // explicit `langwatch config set endpoint <url>`. If it differs from\n  // the hardcoded default, treat it as a user choice.\n  const persisted = cfg?.control_plane_url;\n  if (persisted && persisted !== DEFAULT_ENDPOINT) {\n    return { url: stripTrailingSlash(persisted), source: \"config\" };\n  }\n  return { url: stripTrailingSlash(DEFAULT_ENDPOINT), source: \"default\" };\n}\n\n/**\n * Convenience for callers that just want the URL string and don't need\n * the source-attribution. Equivalent to\n * `resolveControlPlaneEndpoint(opts).url`.\n */\nexport function resolveControlPlaneUrl(\n  opts: ResolveEndpointOptions = {},\n): string {\n  return resolveControlPlaneEndpoint(opts).url;\n}\n\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n"]}

package/dist/chunk-OGAE7BVQ.js

@@ -0,0 +1,67 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }
+
+var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
+
+// src/cli/utils/governance/config.ts
+var _fs = require('fs'); var fs = _interopRequireWildcard(_fs);
+var _os = require('os'); var os = _interopRequireWildcard(_os);
+var _path = require('path'); var path = _interopRequireWildcard(_path);
+function defaults() {
+  var _a;
+  const cp = (_a = process.env.LANGWATCH_ENDPOINT) != null ? _a : "https://app.langwatch.ai";
+  const explicitGw = process.env.LANGWATCH_GATEWAY_URL;
+  const gw = explicitGw != null ? explicitGw : /^https?:\/\/(localhost|127\.0\.0\.1)/.test(cp) ? "http://localhost:5563" : "https://gateway.langwatch.ai";
+  return { gateway_url: gw, control_plane_url: cp };
+}
+var VK_SECRET_PREFIX = "vk-lw-";
+function isCanonicalVkSecret(secret) {
+  return !!secret && secret.startsWith(VK_SECRET_PREFIX);
+}
+function configPath() {
+  const env = process.env.LANGWATCH_CLI_CONFIG;
+  if (env) return env;
+  return path.join(os.homedir(), ".langwatch", "config.json");
+}
+function loadConfig() {
+  const p = configPath();
+  if (!fs.existsSync(p)) return defaults();
+  try {
+    const text = fs.readFileSync(p, "utf8");
+    const parsed = JSON.parse(text);
+    const cfg = _chunkBRPEG3YQjs.__spreadValues.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, defaults()), parsed);
+    if (cfg.default_personal_vk && !isCanonicalVkSecret(cfg.default_personal_vk.secret)) {
+      delete cfg.default_personal_vk;
+    }
+    return cfg;
+  } catch (err) {
+    throw new Error(`Failed to parse ${p}: ${err.message}`);
+  }
+}
+function saveConfig(cfg) {
+  const p = configPath();
+  const dir = path.dirname(p);
+  fs.mkdirSync(dir, { recursive: true, mode: 448 });
+  const tmp = p + ".tmp";
+  fs.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { mode: 384 });
+  fs.renameSync(tmp, p);
+}
+function clearConfig() {
+  const p = configPath();
+  try {
+    fs.unlinkSync(p);
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+}
+function isLoggedIn(cfg) {
+  return !!cfg && !!cfg.access_token;
+}
+
+
+
+
+
+
+
+exports.configPath = configPath; exports.loadConfig = loadConfig; exports.saveConfig = saveConfig; exports.clearConfig = clearConfig; exports.isLoggedIn = isLoggedIn;
+//# sourceMappingURL=chunk-OGAE7BVQ.js.map

package/dist/chunk-OGAE7BVQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-OGAE7BVQ.js","../src/cli/utils/governance/config.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACGA,+DAAoB;AACpB,+DAAoB;AACpB,uEAAsB;AA0FtB,SAAS,QAAA,CAAA,EAA6B;AAnGtC,EAAA,IAAA,EAAA;AA0GE,EAAA,MAAM,GAAA,EAAA,CAAK,GAAA,EAAA,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAA,GAAZ,KAAA,EAAA,GAAA,EAAkC,0BAAA;AAC7C,EAAA,MAAM,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,qBAAA;AAU/B,EAAA,MAAM,GAAA,EACJ,WAAA,GAAA,KAAA,EAAA,WAAA,EACC,sCAAA,CAAuC,IAAA,CAAK,EAAE,EAAA,EAC3C,wBAAA,EACA,8BAAA;AACN,EAAA,OAAO,EAAE,WAAA,EAAa,EAAA,EAAI,iBAAA,EAAmB,GAAG,CAAA;AAClD;AASA,IAAM,iBAAA,EAAmB,QAAA;AAOlB,SAAS,mBAAA,CAAoB,MAAA,EAAqC;AACvE,EAAA,OAAO,CAAC,CAAC,OAAA,GAAU,MAAA,CAAO,UAAA,CAAW,gBAAgB,CAAA;AACvD;AAMO,SAAS,UAAA,CAAA,EAAqB;AACnC,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,oBAAA;AACxB,EAAA,GAAA,CAAI,GAAA,EAAK,OAAO,GAAA;AAChB,EAAA,OAAY,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,CAAQ,CAAA,EAAG,YAAA,EAAc,aAAa,CAAA;AAC5D;AAGO,SAAS,UAAA,CAAA,EAA+B;AAC7C,EAAA,MAAM,EAAA,EAAI,UAAA,CAAW,CAAA;AACrB,EAAA,GAAA,CAAI,CAAI,EAAA,CAAA,UAAA,CAAW,CAAC,CAAA,EAAG,OAAO,QAAA,CAAS,CAAA;AACvC,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,EAAU,EAAA,CAAA,YAAA,CAAa,CAAA,EAAG,MAAM,CAAA;AACtC,IAAA,MAAM,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC9B,IAAA,MAAM,IAAA,EAAM,6CAAA,6CAAA,CAAA,CAAA,EAAK,QAAA,CAAS,CAAA,CAAA,EAAM,MAAA,CAAA;AAMhC,IAAA,GAAA,CACE,GAAA,CAAI,oBAAA,GACJ,CAAC,mBAAA,CAAoB,GAAA,CAAI,mBAAA,CAAoB,MAAM,CAAA,EACnD;AACA,MAAA,OAAO,GAAA,CAAI,mBAAA;AAAA,IACb;AACA,IAAA,OAAO,GAAA;AAAA,EACT,EAAA,MAAA,CAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,CAAC,CAAA,EAAA,EAAM,GAAA,CAAc,OAAO,CAAA,CAAA;AACjE,EAAA;AACF;AAGwD;AACjC,EAAA;AACK,EAAA;AACwB,EAAA;AAClC,EAAA;AACsC,EAAA;AAClC,EAAA;AACtB;AAGoC;AACb,EAAA;AACjB,EAAA;AACa,IAAA;AACH,EAAA;AACgD,IAAA;AAC9D,EAAA;AACF;AAG8E;AACtD,EAAA;AACxB;AD/IyD;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-OGAE7BVQ.js","sourcesContent":[null,"/**\n * Persists langwatch CLI governance credentials at\n * ~/.langwatch/config.json. The file is mode 0600 (atomic rename\n * on save). The shape mirrors what `POST /api/auth/cli/exchange`\n * returns plus a few client-side fields.\n */\n\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nimport type { PlatformToolPolicyMap } from \"./platform-tool-policy\";\n\nexport interface GovernanceConfig {\n  /** AI Gateway base URL (e.g. https://gateway.langwatch.ai). */\n  gateway_url: string;\n  /** Control plane base URL (e.g. https://app.langwatch.ai). */\n  control_plane_url: string;\n\n  /** Short-lived bearer for the gateway. */\n  access_token?: string;\n  /** Long-lived token for refreshing access_token. */\n  refresh_token?: string;\n  /** Unix epoch (seconds) when access_token expires. */\n  expires_at?: number;\n\n  user?: { id?: string; email?: string; name?: string };\n  organization?: { id?: string; slug?: string; name?: string };\n  default_personal_vk?: { id?: string; secret?: string; prefix?: string };\n\n  /**\n   * Personal ingest keys (the project-scoped ingest-only ApiKey\n   * `sk-lw-<...>` shape minted by `/api/auth/cli/governance/ingestion-key`),\n   * keyed by the tool's source_type slug (`claude_code` / `codex` /\n   * `gemini` / `opencode`). One key per source so different wrapped\n   * tools surface as their own ingestion source in /me + /messages.\n   *\n   * When the right key is present for a wrapped tool, the\n   * `langwatch <tool>` wrapper injects the standard OTEL_*_EXPORTER\n   * env vars pointing at the OTLP endpoint with this key as the\n   * Authorization bearer (reusing the cache instead of re-minting).\n   *\n   * Unset until the wrapper's first auto-mint for that tool.\n   */\n  default_personal_ingest_keys?: Record<\n    string,\n    { id?: string; secret?: string; prefix?: string }\n  >;\n\n  /**\n   * Persistent answer to the post-login \"save export block to your\n   * shell rc?\" prompt. `skip` = user picked \"never\", stay quiet\n   * forever. `undefined` = ask each login that lands in an\n   * unconfigured shell. The \"not now\" answer doesn't persist — it\n   * lets the next login re-ask on its own.\n   */\n  shell_rc_preference?: \"skip\";\n\n  /**\n   * Per-wrapped-tool routing mode answer.\n   *\n   *   \"gateway\"   — Path A: route the tool's HTTP calls through\n   *                  the AI Gateway via base-URL swap (full server-\n   *                  side I/O + cost capture, no client OTel).\n   *   \"ingestion\" — Path B: enable the tool's native OTel exporter\n   *                  pointed at /api/otel + mint the user's personal\n   *                  ingest key (sk-lw-*). For codex this also writes\n   *                  the [otel] block to ~/.codex/config.toml\n   *                  automatically.\n   *   \"ask\"       — re-prompt on the next `langwatch <tool>`. The\n   *                  default when this key is absent.\n   *\n   * The two modes are mutually exclusive per the no-double-trace\n   * rule — gateway capture + OTel emission on the same call would\n   * double-count both traces and cost. The wrapper picks Path A\n   * by default when a personal VK is configured, and falls back\n   * to Path B when no VK + the user opts in.\n   */\n  tool_mode?: Record<string, \"gateway\" | \"ingestion\" | \"ask\">;\n\n  /**\n   * Per-(org, tool) path policy cached from the login bootstrap\n   * (`/api/auth/cli/bootstrap` → `toolPolicies`). The `langwatch\n   * <tool>` wrapper gates path selection on this map so it only\n   * offers the paths the org admin permits. Absent for a legacy /\n   * offline CLI that never cached it; `resolvePlatformToolPolicy`\n   * then falls back to the hardcoded defaults.\n   */\n  tool_policies?: PlatformToolPolicyMap;\n\n  /**\n   * Most-recent signed `request_increase_url` returned by the\n   * gateway in a 402 budget_exceeded payload — cached so\n   * `langwatch request-increase` opens the exact URL the gateway\n   * produced (with HMAC'd user/limit/spent params).\n   */\n  last_request_increase_url?: string;\n}\n\nfunction defaults(): GovernanceConfig {\n  // Note: the single source of truth for endpoint resolution at command\n  // boundaries is `resolveControlPlaneEndpoint()` in resolveEndpoint.ts.\n  // This function only seeds the *initial* GovernanceConfig shape when\n  // no file exists yet — at boot, before the user has logged in.\n  // `LANGWATCH_URL` legacy alias intentionally NOT read (was undocumented;\n  // dropped per rchaves directive 2026-05-05).\n  const cp = process.env.LANGWATCH_ENDPOINT ?? \"https://app.langwatch.ai\";\n  const explicitGw = process.env.LANGWATCH_GATEWAY_URL;\n  // Self-hosted detection: when the user pointed `LANGWATCH_ENDPOINT` at\n  // localhost (the standard `make dev` shape) and didn't override the\n  // gateway URL, default to the local AI gateway port (5563 per\n  // langwatch/CLAUDE.md `make service svc=aigateway`). Without this,\n  // `langwatch login` + `whoami` printed the production gateway URL on\n  // self-hosted installs and the user's `langwatch claude` calls would\n  // route at the wrong place (Ariana QA — same shape as the /me tile\n  // base-URL bug Sergey c45e69987 / Alexis 30e52a718 fixed on the\n  // control-plane side).\n  const gw =\n    explicitGw ??\n    (/^https?:\\/\\/(localhost|127\\.0\\.0\\.1)/.test(cp)\n      ? \"http://localhost:5563\"\n      : \"https://gateway.langwatch.ai\");\n  return { gateway_url: gw, control_plane_url: cp };\n}\n\n/**\n * Canonical personal-VK secret prefix. Mirrors the control plane's\n * `vk-lw-<ULID>` minting format (langwatch virtualKey.crypto.ts). The\n * gateway rejects anything else as malformed_key before any DB lookup,\n * so a config carrying a legacy-format secret (older `lw_vk_live_*`\n * logins) routes every `langwatch <tool>` call straight to a 401.\n */\nconst VK_SECRET_PREFIX = \"vk-lw-\";\n\n/**\n * Whether a stored secret is in the format the current gateway can\n * parse. Legacy secrets minted before the format change fail this and\n * must be re-issued via a fresh login.\n */\nexport function isCanonicalVkSecret(secret: string | undefined): boolean {\n  return !!secret && secret.startsWith(VK_SECRET_PREFIX);\n}\n\n/**\n * Returns the absolute path to the config file. Override with\n * LANGWATCH_CLI_CONFIG for tests / non-default homes.\n */\nexport function configPath(): string {\n  const env = process.env.LANGWATCH_CLI_CONFIG;\n  if (env) return env;\n  return path.join(os.homedir(), \".langwatch\", \"config.json\");\n}\n\n/** Read the config from disk, merging in defaults for missing keys. */\nexport function loadConfig(): GovernanceConfig {\n  const p = configPath();\n  if (!fs.existsSync(p)) return defaults();\n  try {\n    const text = fs.readFileSync(p, \"utf8\");\n    const parsed = JSON.parse(text) as Partial<GovernanceConfig>;\n    const cfg = { ...defaults(), ...parsed };\n    // Drop a legacy-format personal VK secret on load. Keeping it would\n    // route every `langwatch <tool>` call to a malformed_key 401; once\n    // dropped, the wrapper preflight tells the user to re-login and the\n    // next login persists a fresh `vk-lw-` secret. A valid canonical\n    // secret is never touched, so this won't wipe a working credential.\n    if (\n      cfg.default_personal_vk &&\n      !isCanonicalVkSecret(cfg.default_personal_vk.secret)\n    ) {\n      delete cfg.default_personal_vk;\n    }\n    return cfg;\n  } catch (err) {\n    throw new Error(`Failed to parse ${p}: ${(err as Error).message}`);\n  }\n}\n\n/** Write the config atomically (tmp file + rename) with mode 0600. */\nexport function saveConfig(cfg: GovernanceConfig): void {\n  const p = configPath();\n  const dir = path.dirname(p);\n  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });\n  const tmp = p + \".tmp\";\n  fs.writeFileSync(tmp, JSON.stringify(cfg, null, 2), { mode: 0o600 });\n  fs.renameSync(tmp, p);\n}\n\n/** Delete the config file; idempotent. */\nexport function clearConfig(): void {\n  const p = configPath();\n  try {\n    fs.unlinkSync(p);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n}\n\n/** Whether a loaded config has live credentials. */\nexport function isLoggedIn(cfg: GovernanceConfig | null | undefined): boolean {\n  return !!cfg && !!cfg.access_token;\n}\n"]}

package/dist/chunk-OR6PODSA.mjs

@@ -0,0 +1,90 @@
+import {
+  DEFAULT_ENDPOINT
+} from "./chunk-QMULACG7.mjs";
+import {
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/client-sdk/services/gateway-budgets/gateway-budgets-api.service.ts
+var GatewayBudgetsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "GatewayBudgetsApiError";
+  }
+};
+var GatewayBudgetsApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = ((_b = (_a = config == null ? void 0 : config.endpoint) != null ? _a : process.env.LANGWATCH_ENDPOINT) != null ? _b : DEFAULT_ENDPOINT).replace(/\/+$/, "");
+    this.apiKey = (_d = (_c = config == null ? void 0 : config.apiKey) != null ? _c : process.env.LANGWATCH_API_KEY) != null ? _d : "";
+  }
+  headers() {
+    return {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    };
+  }
+  async request(operation, path, init) {
+    var _a;
+    const response = await fetch(`${this.endpoint}${path}`, __spreadProps(__spreadValues({}, init), {
+      headers: __spreadValues(__spreadValues({}, this.headers()), (_a = init == null ? void 0 : init.headers) != null ? _a : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throw new GatewayBudgetsApiError(message, operation, parsedBody);
+    }
+    return await response.json();
+  }
+  async list() {
+    const { data } = await this.request(
+      "list gateway budgets",
+      "/api/gateway/v1/budgets"
+    );
+    return data;
+  }
+  async create(input) {
+    const { budget } = await this.request(
+      "create gateway budget",
+      "/api/gateway/v1/budgets",
+      { method: "POST", body: JSON.stringify(input) }
+    );
+    return budget;
+  }
+  async update(id, input) {
+    const { budget } = await this.request(
+      `update gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}`,
+      { method: "PATCH", body: JSON.stringify(input) }
+    );
+    return budget;
+  }
+  async archive(id) {
+    const { budget } = await this.request(
+      `archive gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}`,
+      { method: "DELETE" }
+    );
+    return budget;
+  }
+};
+
+export {
+  GatewayBudgetsApiService
+};
+//# sourceMappingURL=chunk-OR6PODSA.mjs.map