langwatch 0.31.0 → 0.32.0

package/dist/chunk-VYQL5AZX.js

@@ -0,0 +1,34 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+var _chunkNTWYYCHMjs = require('./chunk-NTWYYCHM.js');
+
+// src/cli/utils/apiKey.ts
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _dotenv = require('dotenv');
+
+// src/cli/utils/endpoint.ts
+function getEndpoint() {
+  return _chunkNTWYYCHMjs.resolveControlPlaneUrl.call(void 0, );
+}
+
+// src/cli/utils/apiKey.ts
+var checkApiKey = () => {
+  _dotenv.config.call(void 0, { quiet: true });
+  const apiKey = process.env.LANGWATCH_API_KEY;
+  if (!apiKey || apiKey.trim() === "") {
+    const authUrl = `${getEndpoint()}/authorize`;
+    console.error(_chalk2.default.red("Error: LANGWATCH_API_KEY not found."));
+    console.error(_chalk2.default.gray("Get your API key from:"));
+    console.error(_chalk2.default.cyan(`  ${authUrl}`));
+    console.error(_chalk2.default.gray("Then either run:"));
+    console.error(_chalk2.default.cyan("  langwatch login --api-key <your-key>"));
+    console.error(_chalk2.default.gray("Or add it to your .env file:"));
+    console.error(_chalk2.default.cyan("  echo 'LANGWATCH_API_KEY=<your-key>' >> .env"));
+    process.exit(1);
+  }
+};
+
+
+
+exports.checkApiKey = checkApiKey;
+//# sourceMappingURL=chunk-VYQL5AZX.js.map

package/dist/chunk-VYQL5AZX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-VYQL5AZX.js","../src/cli/utils/apiKey.ts","../src/cli/utils/endpoint.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACJA,4EAAkB;AAClB,gCAAuB;ADMvB;AACA;AEMO,SAAS,WAAA,CAAA,EAAsB;AACpC,EAAA,OAAO,qDAAA,CAAuB;AAChC;AFJA;AACA;ACTO,IAAM,YAAA,EAAc,CAAA,EAAA,GAAY;AAErC,EAAA,4BAAA,EAAS,KAAA,EAAO,KAAK,CAAC,CAAA;AAEtB,EAAA,MAAM,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,iBAAA;AAE3B,EAAA,GAAA,CAAI,CAAC,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,EAAA,IAAM,EAAA,EAAI;AACnC,IAAA,MAAM,QAAA,EAAU,CAAA,EAAA;AACF,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AAChB,EAAA;AACF;ADQqB;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-VYQL5AZX.js","sourcesContent":[null,"import chalk from \"chalk\";\nimport { config } from \"dotenv\";\nimport { getEndpoint } from \"./endpoint\";\n\nexport const checkApiKey = (): void => {\n  // Load environment variables from .env file\n  config({ quiet: true });\n\n  const apiKey = process.env.LANGWATCH_API_KEY;\n\n  if (!apiKey || apiKey.trim() === \"\") {\n    const authUrl = `${getEndpoint()}/authorize`;\n    console.error(chalk.red(\"Error: LANGWATCH_API_KEY not found.\"));\n    console.error(chalk.gray(\"Get your API key from:\"));\n    console.error(chalk.cyan(`  ${authUrl}`));\n    console.error(chalk.gray(\"Then either run:\"));\n    console.error(chalk.cyan(\"  langwatch login --api-key <your-key>\"));\n    console.error(chalk.gray(\"Or add it to your .env file:\"));\n    console.error(chalk.cyan(\"  echo 'LANGWATCH_API_KEY=<your-key>' >> .env\"));\n    process.exit(1);\n  }\n};","import { resolveControlPlaneUrl } from \"@/cli/utils/governance/resolveEndpoint\";\n\n/**\n * Returns the LangWatch endpoint with any trailing slashes stripped, so callers\n * can safely concatenate paths like `${endpoint}/authorize` without producing\n * `https://app.langwatch.ai//authorize`.\n *\n * Delegates to the single 4-source resolver (flag > env > persisted config >\n * default). This is a thin wrapper preserved for callers that don't need the\n * `--flag` axis. New callers should use `resolveControlPlaneEndpoint()`\n * directly so the source attribution is available.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\nexport function getEndpoint(): string {\n  return resolveControlPlaneUrl();\n}\n"]}

package/dist/chunk-WEH25SMX.mjs

@@ -0,0 +1,76 @@
+import {
+  createLangWatchApiClient
+} from "./chunk-KMNF7M4B.mjs";
+import {
+  extractStatusFromResponse,
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+
+// src/client-sdk/services/scenarios/errors.ts
+var ScenariosApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ScenariosApiError";
+  }
+};
+
+// src/client-sdk/services/scenarios/scenarios-api.service.ts
+var ScenariosApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
+  }
+  handleApiError(operation, error) {
+    const message = formatApiErrorForOperation({ operation, error, options: {
+      status: extractStatusFromResponse(error)
+    } });
+    throw new ScenariosApiError(message, operation, error);
+  }
+  async getAll() {
+    const { data, error } = await this.apiClient.GET("/api/scenarios");
+    if (error) this.handleApiError("fetch all scenarios", error);
+    return data;
+  }
+  async get(id) {
+    const { data, error } = await this.apiClient.GET("/api/scenarios/{id}", {
+      params: { path: { id } }
+    });
+    if (error)
+      this.handleApiError(`fetch scenario with ID "${id}"`, error);
+    return data;
+  }
+  async create(params) {
+    const { data, error } = await this.apiClient.POST("/api/scenarios", {
+      body: params
+    });
+    if (error) this.handleApiError("create scenario", error);
+    return data;
+  }
+  async update(id, params) {
+    const { data, error } = await this.apiClient.PUT("/api/scenarios/{id}", {
+      params: { path: { id } },
+      body: params
+    });
+    if (error)
+      this.handleApiError(`update scenario with ID "${id}"`, error);
+    return data;
+  }
+  async delete(id) {
+    const { data, error } = await this.apiClient.DELETE(
+      "/api/scenarios/{id}",
+      {
+        params: { path: { id } }
+      }
+    );
+    if (error)
+      this.handleApiError(`delete scenario with ID "${id}"`, error);
+    return data;
+  }
+};
+
+export {
+  ScenariosApiService
+};
+//# sourceMappingURL=chunk-WEH25SMX.mjs.map

package/dist/chunk-X4BHZH7P.js

@@ -0,0 +1,156 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }// src/cli/utils/codex-config-toml.ts
+var _fs = require('fs'); var fs = _interopRequireWildcard(_fs);
+var _os = require('os'); var os = _interopRequireWildcard(_os);
+var _path = require('path'); var path = _interopRequireWildcard(_path);
+var BEGIN = "# >>> langwatch otel begin >>>";
+var END = "# <<< langwatch otel end <<<";
+function defaultCodexConfigPath() {
+  const codexHome = process.env.CODEX_HOME;
+  if (codexHome) return path.join(codexHome, "config.toml");
+  return path.join(os.homedir(), ".codex", "config.toml");
+}
+function buildCodexOtelBlock(inputs) {
+  var _a;
+  const env = (_a = inputs.environment) != null ? _a : "langwatch";
+  return [
+    BEGIN,
+    `# Managed by 'langwatch ingest install codex'. Re-running the`,
+    `# command updates this block in place; remove the marker pair`,
+    `# above and below to opt back out.`,
+    `# Authorization header lives in OTEL_EXPORTER_OTLP_HEADERS;`,
+    `# this file persists only the endpoint + environment label.`,
+    "[otel]",
+    `environment = "${env}"`,
+    "",
+    "[otel.trace_exporter.otlp-http]",
+    `endpoint = "${inputs.endpoint}"`,
+    `protocol = "json"`,
+    END,
+    ""
+  ].join("\n");
+}
+function writeCodexOtelBlock(inputs, options = {}) {
+  var _a;
+  const filePath = (_a = options.filePath) != null ? _a : defaultCodexConfigPath();
+  const block = buildCodexOtelBlock(inputs);
+  if (!fs.existsSync(filePath)) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, block, { mode: 384 });
+    return { action: "created", path: filePath };
+  }
+  const prior = fs.readFileSync(filePath, "utf8");
+  const re = new RegExp(
+    `${escapeRe(BEGIN)}[\\s\\S]*?${escapeRe(END)}\\n?`,
+    "m"
+  );
+  if (re.test(prior)) {
+    const next = prior.replace(re, block);
+    if (next === prior) return { action: "unchanged", path: filePath };
+    fs.writeFileSync(filePath, next, { mode: 384 });
+    return { action: "updated", path: filePath };
+  }
+  const sep = prior.endsWith("\n") ? "\n" : "\n\n";
+  fs.writeFileSync(filePath, prior + sep + block, { mode: 384 });
+  return { action: "updated", path: filePath };
+}
+function escapeRe(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var GW_BEGIN = "# >>> langwatch gateway begin >>>";
+var GW_END = "# <<< langwatch gateway end <<<";
+var PROFILE_NAME = "langwatch-gateway";
+function buildCodexGatewayBlock(inputs) {
+  var _a;
+  const envKey = (_a = inputs.envKey) != null ? _a : "OPENAI_API_KEY";
+  const cleanedBase = inputs.gatewayUrl.replace(/\/+$/, "");
+  const baseUrl = cleanedBase.endsWith("/v1") ? cleanedBase : `${cleanedBase}/v1`;
+  return [
+    GW_BEGIN,
+    `# Managed by 'langwatch codex' (Path A wrapper). Re-running the`,
+    `# wrapper updates this block in place; remove the marker pair`,
+    `# above and below to opt back out.`,
+    `# The wrapper spawns codex with --profile ${PROFILE_NAME} so this`,
+    `# provider doesn't change codex's default model_provider.`,
+    `# The matching profile body lives at ~/.codex/${PROFILE_NAME}.config.toml`,
+    `# (codex 0.134+ requires the profile in a separate file).`,
+    `[model_providers.langwatch]`,
+    `name = "OpenAI"`,
+    `base_url = "${baseUrl}"`,
+    `env_key = "${envKey}"`,
+    `wire_api = "responses"`,
+    GW_END,
+    ""
+  ].join("\n");
+}
+function buildCodexGatewayProfileFile() {
+  return [
+    `# Managed by 'langwatch codex' (Path A wrapper).`,
+    `# This file is the body of the '${PROFILE_NAME}' codex profile,`,
+    `# selected at spawn time via 'codex --profile ${PROFILE_NAME}'.`,
+    `# The matching [model_providers.langwatch] entry lives in`,
+    `# ~/.codex/config.toml, bracketed by langwatch marker comments.`,
+    `# Re-running 'langwatch codex' regenerates this file in place;`,
+    `# remove it and the [model_providers.langwatch] block in`,
+    `# config.toml to opt back out.`,
+    `model_provider = "langwatch"`,
+    ""
+  ].join("\n");
+}
+function defaultCodexProfilePath(profile = PROFILE_NAME) {
+  const codexHome = process.env.CODEX_HOME;
+  const baseDir = codexHome != null ? codexHome : path.join(os.homedir(), ".codex");
+  return path.join(baseDir, `${profile}.config.toml`);
+}
+function writeCodexGatewayBlock(inputs, options = {}) {
+  var _a, _b;
+  const filePath = (_a = options.filePath) != null ? _a : defaultCodexConfigPath();
+  const profilePath = (_b = options.profilePath) != null ? _b : defaultCodexProfilePath();
+  const block = buildCodexGatewayBlock(inputs);
+  const profileBody = buildCodexGatewayProfileFile();
+  let action;
+  if (!fs.existsSync(filePath)) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, block, { mode: 384 });
+    action = "created";
+  } else {
+    const prior = fs.readFileSync(filePath, "utf8");
+    const re = new RegExp(
+      `${escapeRe(GW_BEGIN)}[\\s\\S]*?${escapeRe(GW_END)}\\n?`,
+      "m"
+    );
+    if (re.test(prior)) {
+      const next = prior.replace(re, block);
+      if (next === prior) {
+        action = "unchanged";
+      } else {
+        fs.writeFileSync(filePath, next, { mode: 384 });
+        action = "updated";
+      }
+    } else {
+      const sep = prior.endsWith("\n") ? "\n" : "\n\n";
+      fs.writeFileSync(filePath, prior + sep + block, { mode: 384 });
+      action = "updated";
+    }
+  }
+  let profileAction;
+  if (!fs.existsSync(profilePath)) {
+    fs.mkdirSync(path.dirname(profilePath), { recursive: true });
+    fs.writeFileSync(profilePath, profileBody, { mode: 384 });
+    profileAction = "created";
+  } else {
+    const priorProfile = fs.readFileSync(profilePath, "utf8");
+    if (priorProfile === profileBody) {
+      profileAction = "unchanged";
+    } else {
+      fs.writeFileSync(profilePath, profileBody, { mode: 384 });
+      profileAction = "updated";
+    }
+  }
+  return { action, path: filePath, profilePath, profileAction, profile: PROFILE_NAME };
+}
+
+
+
+
+exports.writeCodexOtelBlock = writeCodexOtelBlock; exports.writeCodexGatewayBlock = writeCodexGatewayBlock;
+//# sourceMappingURL=chunk-X4BHZH7P.js.map

package/dist/chunk-X4BHZH7P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-X4BHZH7P.js","../src/cli/utils/codex-config-toml.ts"],"names":[],"mappings":"AAAA;ACuBA,+DAAoB;AACpB,+DAAoB;AACpB,uEAAsB;AAEtB,IAAM,MAAA,EAAQ,gCAAA;AACd,IAAM,IAAA,EAAM,8BAAA;AAYL,SAAS,sBAAA,CAAA,EAAiC;AAC/C,EAAA,MAAM,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,UAAA;AAC9B,EAAA,GAAA,CAAI,SAAA,EAAW,OAAY,IAAA,CAAA,IAAA,CAAK,SAAA,EAAW,aAAa,CAAA;AACxD,EAAA,OAAY,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,CAAQ,CAAA,EAAG,QAAA,EAAU,aAAa,CAAA;AACxD;AAWO,SAAS,mBAAA,CAAoB,MAAA,EAAsC;AAvD1E,EAAA,IAAA,EAAA;AAwDE,EAAA,MAAM,IAAA,EAAA,CAAM,GAAA,EAAA,MAAA,CAAO,WAAA,EAAA,GAAP,KAAA,EAAA,GAAA,EAAsB,WAAA;AAKlC,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,CAAA,6DAAA,CAAA;AAAA,IACA,CAAA,6DAAA,CAAA;AAAA,IACA,CAAA,kCAAA,CAAA;AAAA,IACA,CAAA,2DAAA,CAAA;AAAA,IACA,CAAA,2DAAA,CAAA;AAAA,IACA,QAAA;AAAA,IACA,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAA,CAAA;AAAA,IACrB,EAAA;AAAA,IACA,iCAAA;AAAA,IACA,CAAA,YAAA,EAAe,MAAA,CAAO,QAAQ,CAAA,CAAA,CAAA;AAAA,IAC9B,CAAA,iBAAA,CAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,EACF,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACb;AAwBO,SAAS,mBAAA,CACd,MAAA,EACA,QAAA,EAAiC,CAAC,CAAA,EACZ;AAxGxB,EAAA,IAAA,EAAA;AAyGE,EAAA,MAAM,SAAA,EAAA,CAAW,GAAA,EAAA,OAAA,CAAQ,QAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAoB,sBAAA,CAAuB,CAAA;AAC5D,EAAA,MAAM,MAAA,EAAQ,mBAAA,CAAoB,MAAM,CAAA;AAExC,EAAA,GAAA,CAAI,CAAI,EAAA,CAAA,UAAA,CAAW,QAAQ,CAAA,EAAG;AAC5B,IAAG,EAAA,CAAA,SAAA,CAAe,IAAA,CAAA,OAAA,CAAQ,QAAQ,CAAA,EAAG,EAAE,SAAA,EAAW,KAAK,CAAC,CAAA;AACxD,IAAG,EAAA,CAAA,aAAA,CAAc,QAAA,EAAU,KAAA,EAAO,EAAE,IAAA,EAAM,IAAM,CAAC,CAAA;AACjD,IAAA,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,IAAA,EAAM,SAAS,CAAA;AAAA,EAC7C;AAEA,EAAA,MAAM,MAAA,EAAW,EAAA,CAAA,YAAA,CAAa,QAAA,EAAU,MAAM,CAAA;AAC9C,EAAA,MAAM,GAAA,EAAK,IAAI,MAAA;AAAA,IACb,CAAA,EAAA;AACA,IAAA;AACF,EAAA;AACA,EAAA;AACE,IAAA;AACA,IAAA;AACG,IAAA;AACH,IAAA;AACF,EAAA;AAEA,EAAA;AACG,EAAA;AACH,EAAA;AACF;AAEA;AACE,EAAA;AACF;AAEM;AACA;AA2CA;AAcC;AAjMP,EAAA;AAoME,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACE,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,EAAA;AACJ;AAaO;AACL,EAAA;AACE,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,EAAA;AACJ;AAGO;AACL,EAAA;AACA,EAAA;AACA,EAAA;AACF;AAeO;AAxQP,EAAA;AA4QE,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AAEA,EAAA;AACA,EAAA;AACK,IAAA;AACA,IAAA;AACH,IAAA;AACF,EAAA;AACE,IAAA;AACA,IAAA;AAAe,MAAA;AACqC,MAAA;AAEpD,IAAA;AACA,IAAA;AACE,MAAA;AACA,MAAA;AACE,QAAA;AAAS,MAAA;AAET,QAAA;AACA,QAAA;AAAS,MAAA;AAEb,IAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA;AACA,EAAA;AACK,IAAA;AACA,IAAA;AACH,IAAA;AACF,EAAA;AACE,IAAA;AACA,IAAA;AACE,MAAA;AACF,IAAA;AACE,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA;AACF;ADrKK;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-X4BHZH7P.js","sourcesContent":[null,"/**\n * Idempotent merge of the LangWatch [otel] activation block into\n * ~/.codex/config.toml.\n *\n * Codex 0.130+ links the opentelemetry-otlp Rust SDK but its\n * exporter is gated on a `[otel]` block in `~/.codex/config.toml` —\n * env vars alone are a silent no-op. The Path B install flow needs\n * to write this block for the user so the drawer / CLI surface\n * can collapse to a single command.\n *\n * Why a handwritten merger and not a TOML library: the file may\n * contain valid TOML the user authored by hand, and we want to\n * preserve ordering + comments verbatim. The merger only ever\n * appends a marker-bracketed block at the end of the file and\n * regex-replaces the same block on re-runs. No structural rewrite\n * of the existing TOML.\n *\n * Marker comments:\n *   # >>> langwatch otel begin >>>\n *   …\n *   # <<< langwatch otel end <<<\n */\n\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nconst BEGIN = \"# >>> langwatch otel begin >>>\";\nconst END = \"# <<< langwatch otel end <<<\";\n\nexport interface CodexOtelBlockInputs {\n  /** Full OTLP endpoint, e.g. https://app.langwatch.ai/api/otel */\n  endpoint: string;\n  /** Plaintext personal ingest key (sk-lw-<...>). */\n  ingestionToken: string;\n  /** Logical environment label (e.g. user@org). Lands on resource.deployment.environment.name. */\n  environment?: string;\n}\n\n/** Default config.toml path under the user's home directory. */\nexport function defaultCodexConfigPath(): string {\n  const codexHome = process.env.CODEX_HOME;\n  if (codexHome) return path.join(codexHome, \"config.toml\");\n  return path.join(os.homedir(), \".codex\", \"config.toml\");\n}\n\n/**\n * Build the bracketed [otel] + [otel.trace_exporter.otlp-http] block.\n * Returned WITH leading + trailing markers and a trailing newline.\n *\n * codex 0.137+ separates `trace_exporter` (spans) from `exporter`\n * (logs) in its config schema. We emit the trace_exporter form so\n * Path B span ingestion fires; the older `[otel.exporter.otlp-http]`\n * form is silently ignored on traces in the current schema.\n */\nexport function buildCodexOtelBlock(inputs: CodexOtelBlockInputs): string {\n  const env = inputs.environment ?? \"langwatch\";\n  // The header key is sent via OTEL_EXPORTER_OTLP_HEADERS at runtime so\n  // the toml block never persists the secret; the user only commits\n  // the endpoint + environment. We embed a note pointing at the env\n  // var so a reader of config.toml can audit the wiring.\n  return [\n    BEGIN,\n    `# Managed by 'langwatch ingest install codex'. Re-running the`,\n    `# command updates this block in place; remove the marker pair`,\n    `# above and below to opt back out.`,\n    `# Authorization header lives in OTEL_EXPORTER_OTLP_HEADERS;`,\n    `# this file persists only the endpoint + environment label.`,\n    \"[otel]\",\n    `environment = \"${env}\"`,\n    \"\",\n    \"[otel.trace_exporter.otlp-http]\",\n    `endpoint = \"${inputs.endpoint}\"`,\n    `protocol = \"json\"`,\n    END,\n    \"\",\n  ].join(\"\\n\");\n}\n\n/**\n * Merge result returned by writeCodexOtelBlock so callers can\n * report which action was taken without re-reading the file.\n */\nexport type CodexOtelWriteAction = \"created\" | \"updated\" | \"unchanged\";\n\nexport interface CodexOtelWriteResult {\n  action: CodexOtelWriteAction;\n  path: string;\n}\n\n/**\n * Idempotent merge into the codex config.toml. Behaviour:\n *\n * - If the file does not exist: create the parent dir if needed,\n *   write the block as the entire file contents.\n * - If the file exists with NO marker pair: append the block + a\n *   leading blank line so it doesn't fuse with the prior section.\n * - If the file exists WITH a marker pair: regex-replace the\n *   bracketed region. The replacement is byte-for-byte the same\n *   when the inputs haven't changed → returns 'unchanged'.\n */\nexport function writeCodexOtelBlock(\n  inputs: CodexOtelBlockInputs,\n  options: { filePath?: string } = {},\n): CodexOtelWriteResult {\n  const filePath = options.filePath ?? defaultCodexConfigPath();\n  const block = buildCodexOtelBlock(inputs);\n\n  if (!fs.existsSync(filePath)) {\n    fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    fs.writeFileSync(filePath, block, { mode: 0o600 });\n    return { action: \"created\", path: filePath };\n  }\n\n  const prior = fs.readFileSync(filePath, \"utf8\");\n  const re = new RegExp(\n    `${escapeRe(BEGIN)}[\\\\s\\\\S]*?${escapeRe(END)}\\\\n?`,\n    \"m\",\n  );\n  if (re.test(prior)) {\n    const next = prior.replace(re, block);\n    if (next === prior) return { action: \"unchanged\", path: filePath };\n    fs.writeFileSync(filePath, next, { mode: 0o600 });\n    return { action: \"updated\", path: filePath };\n  }\n\n  const sep = prior.endsWith(\"\\n\") ? \"\\n\" : \"\\n\\n\";\n  fs.writeFileSync(filePath, prior + sep + block, { mode: 0o600 });\n  return { action: \"updated\", path: filePath };\n}\n\nfunction escapeRe(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nconst GW_BEGIN = \"# >>> langwatch gateway begin >>>\";\nconst GW_END = \"# <<< langwatch gateway end <<<\";\n\nexport interface CodexGatewayBlockInputs {\n  /** Gateway base URL, e.g. https://gateway.langwatch.ai */\n  gatewayUrl: string;\n  /**\n   * Env var name codex should read the API key from. Defaults to\n   * OPENAI_API_KEY because that's the standard codex env. The\n   * wrapper still sets OPENAI_API_KEY to the user's VK before\n   * spawning codex, so this matches the wrapper's env injection\n   * out of the box.\n   */\n  envKey?: string;\n}\n\nexport interface CodexGatewayWriteResult {\n  action: CodexOtelWriteAction;\n  /**\n   * The ~/.codex/config.toml path that received the\n   * [model_providers.langwatch] block.\n   */\n  path: string;\n  /**\n   * The separate ~/.codex/<profile>.config.toml path that received\n   * the profile body. codex 0.134+ rejects [profiles.X] entries\n   * inside config.toml when the user passes --profile X, requiring\n   * a sibling file named <profile>.config.toml.\n   */\n  profilePath: string;\n  /**\n   * Result of the profile-file write. Independent of `action` so\n   * callers can report both writes accurately.\n   */\n  profileAction: CodexOtelWriteAction;\n  /**\n   * The profile name codex must be invoked with to actually route\n   * through the langwatch provider — e.g. `codex --profile\n   * langwatch-gateway`. Returned so the wrapper doesn't have to\n   * hardcode the name in two places.\n   */\n  profile: string;\n}\n\nconst PROFILE_NAME = \"langwatch-gateway\";\n\n/**\n * Build the additive [model_providers.langwatch] block that lives\n * in ~/.codex/config.toml. Codex 0.130+ defaults to ChatGPT OAuth\n * and ignores OPENAI_API_KEY unless an explicit model_provider\n * config is selected with `name = \"OpenAI\"`, `env_key`, and\n * `wire_api = \"responses\"` (the \"chat\" wire_api is no longer\n * supported per the codex binary strings dump).\n *\n * Codex 0.134+ rejects a [profiles.<name>] entry inside\n * config.toml when the user passes --profile <name>; the profile\n * body is now written to a sibling file (see buildCodexGatewayProfileFile).\n */\nexport function buildCodexGatewayBlock(\n  inputs: CodexGatewayBlockInputs,\n): string {\n  const envKey = inputs.envKey ?? \"OPENAI_API_KEY\";\n  const cleanedBase = inputs.gatewayUrl.replace(/\\/+$/, \"\");\n  const baseUrl = cleanedBase.endsWith(\"/v1\") ? cleanedBase : `${cleanedBase}/v1`;\n  return [\n    GW_BEGIN,\n    `# Managed by 'langwatch codex' (Path A wrapper). Re-running the`,\n    `# wrapper updates this block in place; remove the marker pair`,\n    `# above and below to opt back out.`,\n    `# The wrapper spawns codex with --profile ${PROFILE_NAME} so this`,\n    `# provider doesn't change codex's default model_provider.`,\n    `# The matching profile body lives at ~/.codex/${PROFILE_NAME}.config.toml`,\n    `# (codex 0.134+ requires the profile in a separate file).`,\n    `[model_providers.langwatch]`,\n    `name = \"OpenAI\"`,\n    `base_url = \"${baseUrl}\"`,\n    `env_key = \"${envKey}\"`,\n    `wire_api = \"responses\"`,\n    GW_END,\n    \"\",\n  ].join(\"\\n\");\n}\n\n/**\n * Build the contents of the sibling profile file\n * (~/.codex/langwatch-gateway.config.toml). The filename IS the\n * profile name; the body holds the settings that previously went\n * under [profiles.langwatch-gateway] inside config.toml.\n *\n * We DO NOT bracket this file with langwatch markers because the\n * file is entirely owned by langwatch — the wrapper creates it\n * fresh on every invocation. Hand-edits to it will be overwritten\n * (a header comment explains this to anyone reading the file).\n */\nexport function buildCodexGatewayProfileFile(): string {\n  return [\n    `# Managed by 'langwatch codex' (Path A wrapper).`,\n    `# This file is the body of the '${PROFILE_NAME}' codex profile,`,\n    `# selected at spawn time via 'codex --profile ${PROFILE_NAME}'.`,\n    `# The matching [model_providers.langwatch] entry lives in`,\n    `# ~/.codex/config.toml, bracketed by langwatch marker comments.`,\n    `# Re-running 'langwatch codex' regenerates this file in place;`,\n    `# remove it and the [model_providers.langwatch] block in`,\n    `# config.toml to opt back out.`,\n    `model_provider = \"langwatch\"`,\n    \"\",\n  ].join(\"\\n\");\n}\n\n/** Default path for the sibling profile file. */\nexport function defaultCodexProfilePath(profile: string = PROFILE_NAME): string {\n  const codexHome = process.env.CODEX_HOME;\n  const baseDir = codexHome ?? path.join(os.homedir(), \".codex\");\n  return path.join(baseDir, `${profile}.config.toml`);\n}\n\n/**\n * Idempotent merge of the gateway provider block into config.toml\n * + write of the sibling profile file. Both writes happen in one\n * call so the wrapper can't end up with a half-installed state.\n *\n * config.toml: regex-replace inside the marker pair or append. The\n * [otel] marker pair (Path B) coexists independently — a user who\n * runs both Path A and Path B keeps both blocks; only one fires per\n * invocation per the no-double-trace rule.\n *\n * <profile>.config.toml: full-file replace. The file is entirely\n * owned by langwatch.\n */\nexport function writeCodexGatewayBlock(\n  inputs: CodexGatewayBlockInputs,\n  options: { filePath?: string; profilePath?: string } = {},\n): CodexGatewayWriteResult {\n  const filePath = options.filePath ?? defaultCodexConfigPath();\n  const profilePath = options.profilePath ?? defaultCodexProfilePath();\n  const block = buildCodexGatewayBlock(inputs);\n  const profileBody = buildCodexGatewayProfileFile();\n\n  let action: CodexOtelWriteAction;\n  if (!fs.existsSync(filePath)) {\n    fs.mkdirSync(path.dirname(filePath), { recursive: true });\n    fs.writeFileSync(filePath, block, { mode: 0o600 });\n    action = \"created\";\n  } else {\n    const prior = fs.readFileSync(filePath, \"utf8\");\n    const re = new RegExp(\n      `${escapeRe(GW_BEGIN)}[\\\\s\\\\S]*?${escapeRe(GW_END)}\\\\n?`,\n      \"m\",\n    );\n    if (re.test(prior)) {\n      const next = prior.replace(re, block);\n      if (next === prior) {\n        action = \"unchanged\";\n      } else {\n        fs.writeFileSync(filePath, next, { mode: 0o600 });\n        action = \"updated\";\n      }\n    } else {\n      const sep = prior.endsWith(\"\\n\") ? \"\\n\" : \"\\n\\n\";\n      fs.writeFileSync(filePath, prior + sep + block, { mode: 0o600 });\n      action = \"updated\";\n    }\n  }\n\n  let profileAction: CodexOtelWriteAction;\n  if (!fs.existsSync(profilePath)) {\n    fs.mkdirSync(path.dirname(profilePath), { recursive: true });\n    fs.writeFileSync(profilePath, profileBody, { mode: 0o600 });\n    profileAction = \"created\";\n  } else {\n    const priorProfile = fs.readFileSync(profilePath, \"utf8\");\n    if (priorProfile === profileBody) {\n      profileAction = \"unchanged\";\n    } else {\n      fs.writeFileSync(profilePath, profileBody, { mode: 0o600 });\n      profileAction = \"updated\";\n    }\n  }\n\n  return { action, path: filePath, profilePath, profileAction, profile: PROFILE_NAME };\n}\n\n/** Exported so callers + tests can reference the profile name from one place. */\nexport const CODEX_GATEWAY_PROFILE_NAME = PROFILE_NAME;\n"]}