langwatch 0.31.0 → 0.32.0

package/dist/chunk-AG7BWPMX.mjs

@@ -0,0 +1,136 @@
+import {
+  createLangWatchApiClient
+} from "./chunk-KMNF7M4B.mjs";
+import {
+  extractStatusFromResponse,
+  formatApiErrorForOperation
+} from "./chunk-J3KM7ZO7.mjs";
+
+// src/client-sdk/services/experiments/experiments-api.service.ts
+var ExperimentsApiServiceError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ExperimentsApiServiceError";
+  }
+};
+var ExperimentsApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
+  }
+  handleApiError(operation, error) {
+    const message = formatApiErrorForOperation({ operation, error, options: {
+      status: extractStatusFromResponse(error)
+    } });
+    throw new ExperimentsApiServiceError(message, operation, error);
+  }
+  async getUndeclaredEndpoint({
+    path,
+    operation
+  }) {
+    let result;
+    try {
+      result = await this.apiClient.GET(path, {
+        parseAs: "json"
+      });
+    } catch (error) {
+      this.handleApiError(operation, error);
+    }
+    if (result.error) this.handleApiError(operation, result.error);
+    return result.data;
+  }
+  async startRun(slug) {
+    const { data, error } = await this.apiClient.POST(
+      "/api/experiments/{slug}/run",
+      {
+        params: { path: { slug } }
+      }
+    );
+    if (error) this.handleApiError(`start experiment run for "${slug}"`, error);
+    return data;
+  }
+  async getRunStatus(runId) {
+    const { data, error } = await this.apiClient.GET(
+      "/api/experiments/runs/{runId}",
+      {
+        params: { path: { runId } }
+      }
+    );
+    if (error) this.handleApiError(`get run status for "${runId}"`, error);
+    return data;
+  }
+  /**
+   * List experiments for the current project.
+   *
+   * Hits `GET /api/experiments` through the configured API client transport.
+   * The route is not yet declared in generated OpenAPI types, so the path is
+   * dispatched through a narrow untyped helper.
+   */
+  async listExperiments({
+    pageSize,
+    page
+  } = {}) {
+    const search = new URLSearchParams();
+    if (pageSize !== void 0) search.set("pageSize", String(pageSize));
+    if (page !== void 0) search.set("page", String(page));
+    const qs = search.toString();
+    return this.getUndeclaredEndpoint({
+      path: `/api/experiments${qs ? `?${qs}` : ""}`,
+      operation: "list experiments"
+    });
+  }
+  /**
+   * List experiment runs for an experiment slug.
+   *
+   * Hits `GET /api/experiments/runs?experimentSlug=...` through the
+   * configured API client transport because the route is not yet declared in
+   * the generated OpenAPI.
+   */
+  async listRuns({
+    experimentSlug,
+    pageSize,
+    page
+  }) {
+    const search = new URLSearchParams();
+    search.set("experimentSlug", experimentSlug);
+    if (pageSize !== void 0) search.set("pageSize", String(pageSize));
+    if (page !== void 0) search.set("page", String(page));
+    return this.getUndeclaredEndpoint({
+      path: `/api/experiments/runs?${search.toString()}`,
+      operation: `list runs for experiment "${experimentSlug}"`
+    });
+  }
+  /**
+   * Fetch per-row results for a completed experiment run.
+   *
+   * Hits `GET /api/experiments/runs/{runId}/results` through the
+   * configured API client transport because the route is not yet declared in
+   * the generated OpenAPI `paths`.
+   */
+  async getRunResults({
+    runId,
+    experimentSlug
+  }) {
+    const search = new URLSearchParams();
+    if (experimentSlug) search.set("experimentSlug", experimentSlug);
+    const qs = search.toString() ? `?${search.toString()}` : "";
+    const body = await this.getUndeclaredEndpoint({
+      path: `/api/experiments/runs/${encodeURIComponent(runId)}/results${qs}`,
+      operation: `get run results for "${runId}"`
+    });
+    if (body === null) {
+      this.handleApiError(`get run results for "${runId}"`, {
+        response: { status: 404 },
+        data: { error: `Run not found: ${runId}` }
+      });
+    }
+    return body;
+  }
+};
+
+export {
+  ExperimentsApiService
+};
+//# sourceMappingURL=chunk-AG7BWPMX.mjs.map

package/dist/chunk-AZ62JJ3B.js

@@ -0,0 +1,42 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkJHNMPNXQjs = require('./chunk-JHNMPNXQ.js');
+
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+
+// src/client-sdk/services/analytics/analytics-api.service.ts
+var AnalyticsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "AnalyticsApiError";
+  }
+};
+var AnalyticsApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : _chunkJHNMPNXQjs.createLangWatchApiClient.call(void 0, );
+  }
+  handleApiError(operation, error) {
+    const message = _chunkC5Y772G7js.formatApiErrorForOperation.call(void 0, { operation, error, options: {
+      status: _chunkC5Y772G7js.extractStatusFromResponse.call(void 0, error)
+    } });
+    throw new AnalyticsApiError(message, operation, error);
+  }
+  async timeseries(params) {
+    const { data, error } = await this.apiClient.POST(
+      "/api/analytics/timeseries",
+      { body: params }
+    );
+    if (error) this.handleApiError("query analytics", error);
+    return data;
+  }
+};
+
+
+
+exports.AnalyticsApiService = AnalyticsApiService;
+//# sourceMappingURL=chunk-AZ62JJ3B.js.map

package/dist/chunk-AZ62JJ3B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-AZ62JJ3B.js","../src/client-sdk/services/analytics/analytics-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACUO,IAAM,kBAAA,EAAN,MAAA,QAAgC,MAAM;AAAA,EAC3C,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,mBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,oBAAA,EAAN,MAA0B;AAAA,EAG/B,WAAA,CAAY,MAAA,EAAqD;AAhCnE,IAAA,IAAA,EAAA;AAiCI,IAAA,IAAA,CAAK,UAAA,EAAA,CAAY,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,kBAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAA8B,uDAAA,CAAyB;AAAA,EAC1E;AAAA,EAEQ,cAAA,CAAe,SAAA,EAAmB,KAAA,EAAuB;AAC/D,IAAA,MAAM,QAAA,EAAU,yDAAA,EAA6B,SAAA,EAAsB,KAAA,EAAc,OAAA,EAAS;AAAA,MACxF,MAAA,EAAQ,wDAAA,KAA+B;AAAA,IACzC,EAAE,CAAC,CAAA;AACH,IAAA,MAAM,IAAI,iBAAA,CAAkB,OAAA,EAAS,SAAA,EAAW,KAAK,CAAA;AAAA,EACvD;AAAA,EAEA,MAAM,UAAA,CAAW,MAAA,EAAuE;AACtF,IAAA,MAAM,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,MAAM,IAAA,CAAK,SAAA,CAAU,IAAA;AAAA,MAC3C,2BAAA;AAAA,MACA,EAAE,IAAA,EAAM,OAAO;AAAA,IACjB,CAAA;AACA,IAAA,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,cAAA,CAAe,iBAAA,EAAmB,KAAK,CAAA;AACvD,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;ADdA;AACA;AACE;AACF,kDAAC","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-AZ62JJ3B.js","sourcesContent":[null,"import type { paths } from \"@/internal/generated/openapi/api-client\";\nimport {\n  createLangWatchApiClient,\n  type LangwatchApiClient,\n} from \"@/internal/api/client\";\nimport { type InternalConfig } from \"@/client-sdk/types\";\nimport {\n  extractStatusFromResponse,\n  formatApiErrorForOperation,\n} from \"@/client-sdk/services/_shared/format-api-error\";\n\nexport type AnalyticsTimeseriesBody = NonNullable<\n  paths[\"/api/analytics/timeseries\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\nexport type AnalyticsTimeseriesResponse =\n  paths[\"/api/analytics/timeseries\"][\"post\"][\"responses\"][\"200\"][\"content\"][\"application/json\"];\n\nexport class AnalyticsApiError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"AnalyticsApiError\";\n  }\n}\n\nexport class AnalyticsApiService {\n  private readonly apiClient: LangwatchApiClient;\n\n  constructor(config?: Pick<InternalConfig, \"langwatchApiClient\">) {\n    this.apiClient = config?.langwatchApiClient ?? createLangWatchApiClient();\n  }\n\n  private handleApiError(operation: string, error: unknown): never {\n    const message = formatApiErrorForOperation({ operation: operation, error: error, options: {\n      status: extractStatusFromResponse(error),\n    } });\n    throw new AnalyticsApiError(message, operation, error);\n  }\n\n  async timeseries(params: AnalyticsTimeseriesBody): Promise<AnalyticsTimeseriesResponse> {\n    const { data, error } = await this.apiClient.POST(\n      \"/api/analytics/timeseries\",\n      { body: params },\n    );\n    if (error) this.handleApiError(\"query analytics\", error);\n    return data;\n  }\n}\n"]}

package/dist/chunk-BAA4HKOB.js

@@ -0,0 +1,277 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+
+
+var _chunkS4JKLESFjs = require('./chunk-S4JKLESF.js');
+
+
+var _chunk724OLLZ4js = require('./chunk-724OLLZ4.js');
+
+
+
+var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
+
+
+
+var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
+
+// src/cli/utils/governance/login-flow.ts
+var _fs = require('fs'); var fs = _interopRequireWildcard(_fs);
+var _path = require('path'); var path = _interopRequireWildcard(_path);
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _ora = require('ora'); var _ora2 = _interopRequireDefault(_ora);
+
+// src/cli/utils/governance/login-ceremony.ts
+var DEFAULT_TOOLS = [
+  { slug: "claude", displayName: "Claude Code" },
+  { slug: "codex", displayName: "Codex" },
+  { slug: "cursor", displayName: "Cursor" }
+];
+function padRight(s, width) {
+  if (s.length >= width) return s;
+  return s + " ".repeat(width - s.length);
+}
+function formatUsd(n) {
+  if (Number.isInteger(n)) return `$${n}`;
+  return `$${n.toFixed(2)}`;
+}
+function formatUsedUsd(n) {
+  return `$${n.toFixed(2)}`;
+}
+function formatLoginCeremony(input) {
+  const lines = [];
+  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : "";
+  lines.push(`\u2713 Logged in as ${input.email}${orgSuffix}`);
+  const tools = input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;
+  lines.push("");
+  lines.push("Your AI tools (run any of these):");
+  const cmdWidth = Math.max(
+    ...tools.map((t) => `langwatch ${t.slug}`.length)
+  );
+  for (const tool of tools) {
+    const cmd = `langwatch ${tool.slug}`;
+    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : "";
+    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);
+  }
+  if (input.providers && input.providers.length > 0) {
+    lines.push("");
+    lines.push("Model providers you can issue a virtual key for:");
+    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));
+    for (const p of input.providers) {
+      const padded = padRight(p.name, nameWidth);
+      const annotations = [];
+      if (p.displayName && p.displayName !== p.name) {
+        annotations.push(p.displayName);
+      }
+      if (p.configured === false) annotations.push("(not configured yet)");
+      const suffix = annotations.length > 0 ? `  ${annotations.join("  ")}` : "";
+      lines.push(`  \u2022 ${padded}${suffix}`);
+    }
+  }
+  if (input.budget) {
+    lines.push("");
+    const period = input.budget.period.charAt(0).toUpperCase() + input.budget.period.slice(1).toLowerCase();
+    lines.push(
+      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`
+    );
+  }
+  if (input.openCommand !== false) {
+    lines.push("");
+    lines.push("Or open the app in your browser:");
+    lines.push("  $ langwatch open");
+  }
+  return lines;
+}
+
+// src/cli/utils/governance/login-flow.ts
+async function runUnifiedLoginFlow(opts = {}) {
+  var _a, _b, _c, _d, _e, _f, _g;
+  const kind = (_a = opts.kind) != null ? _a : "device_session";
+  const cfg = (_b = opts.cfg) != null ? _b : _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+  const baseUrl = cfg.control_plane_url;
+  console.log(_chalk2.default.blue("\u{1F510} LangWatch login"));
+  console.log(_chalk2.default.gray(`Control plane: ${baseUrl}`));
+  console.log(
+    _chalk2.default.gray(
+      kind === "project_api_key" ? "Mode: project SDK API key (will write .env)" : "Mode: device session (will write ~/.langwatch/config.json)"
+    )
+  );
+  const dc = await _chunkS4JKLESFjs.startDeviceCode.call(void 0, { baseUrl }, { credentialType: kind });
+  const verifyURL = (_c = dc.verification_uri_complete) != null ? _c : `${dc.verification_uri.replace(/\/+$/, "")}?user_code=${encodeURIComponent(dc.user_code)}`;
+  console.log();
+  console.log(_chalk2.default.cyan(`Opening: ${verifyURL}`));
+  console.log(
+    _chalk2.default.gray(
+      `If your browser doesn't open, paste the URL above and enter code: ${_chalk2.default.bold(dc.user_code)}`
+    )
+  );
+  console.log();
+  await openInBrowser(verifyURL, opts.browser);
+  const spinner = _ora2.default.call(void 0, {
+    text: "Waiting for you to approve in the browser",
+    discardStdin: false
+  }).start();
+  const onSigint = () => {
+    spinner.stop();
+    console.log(_chalk2.default.gray("\nLogin cancelled."));
+    process.exit(130);
+  };
+  process.once("SIGINT", onSigint);
+  try {
+    const result = await _chunkS4JKLESFjs.pollUntilDone.call(void 0, { baseUrl }, dc);
+    if (result.kind === "device_session") {
+      spinner.succeed(`Logged in as ${result.user.email}`);
+      persistDeviceSession(cfg, result);
+      _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      const bootstrap = await fetchBootstrapSafely(cfg);
+      if (bootstrap == null ? void 0 : bootstrap.gatewayUrl) {
+        cfg.gateway_url = bootstrap.gatewayUrl;
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      }
+      if (bootstrap == null ? void 0 : bootstrap.toolPolicies) {
+        cfg.tool_policies = bootstrap.toolPolicies;
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      }
+      console.log();
+      const ceremonyLines = formatLoginCeremony({
+        email: (_e = (_d = cfg.user) == null ? void 0 : _d.email) != null ? _e : result.user.email,
+        organizationName: (_f = cfg.organization) == null ? void 0 : _f.name,
+        tools: bootstrap == null ? void 0 : bootstrap.tools,
+        providers: bootstrap == null ? void 0 : bootstrap.providers,
+        budget: ((_g = bootstrap == null ? void 0 : bootstrap.budget) == null ? void 0 : _g.monthlyLimitUsd) != null ? {
+          period: bootstrap.budget.period,
+          limitUsd: bootstrap.budget.monthlyLimitUsd,
+          usedUsd: bootstrap.budget.monthlyUsedUsd
+        } : void 0
+      });
+      for (const line of ceremonyLines) {
+        console.log(line);
+      }
+      console.log();
+      console.log(_chalk2.default.gray(`  Dashboard: ${cfg.control_plane_url}`));
+      return cfg;
+    }
+    spinner.succeed(
+      `API key generated for project ${_chalk2.default.bold(result.project.name)}`
+    );
+    const envResult = writeApiKeyToEnv(result.api_key);
+    console.log();
+    console.log(_chalk2.default.green("\u2713 API key saved to .env"));
+    if (envResult.created) {
+      console.log(_chalk2.default.gray(`  \u2022 Created .env file at ${envResult.path}`));
+    } else if (envResult.updated) {
+      console.log(_chalk2.default.gray(`  \u2022 Updated existing API key in ${envResult.path}`));
+    } else {
+      console.log(_chalk2.default.gray(`  \u2022 Added API key to ${envResult.path}`));
+    }
+    console.log();
+    console.log(
+      _chalk2.default.gray(
+        `  Project: ${result.project.name} (${result.project.slug})`
+      )
+    );
+    console.log(_chalk2.default.gray(`  Dashboard: ${cfg.control_plane_url}`));
+    return cfg;
+  } catch (err) {
+    spinner.fail();
+    if (err instanceof _chunkS4JKLESFjs.DeviceFlowError) {
+      switch (err.kind) {
+        case "denied":
+          throw new Error(
+            "authorization denied \u2014 you can retry `langwatch login`"
+          );
+        case "expired":
+          throw new Error(
+            "authorization request expired \u2014 run `langwatch login` again"
+          );
+        default:
+          throw err;
+      }
+    }
+    throw err;
+  } finally {
+    process.removeListener("SIGINT", onSigint);
+  }
+}
+async function runDeviceFlowLogin(opts = {}) {
+  return runUnifiedLoginFlow(_chunkBRPEG3YQjs.__spreadProps.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, opts), { kind: "device_session" }));
+}
+function persistDeviceSession(cfg, result) {
+  cfg.access_token = result.access_token;
+  cfg.refresh_token = result.refresh_token;
+  cfg.expires_at = Math.floor(Date.now() / 1e3) + result.expires_in;
+  cfg.user = {
+    id: result.user.id,
+    email: result.user.email,
+    name: result.user.name
+  };
+  cfg.organization = {
+    id: result.organization.id,
+    slug: result.organization.slug,
+    name: result.organization.name
+  };
+  if (result.default_personal_vk) {
+    cfg.default_personal_vk = {
+      id: result.default_personal_vk.id,
+      secret: result.default_personal_vk.secret,
+      prefix: result.default_personal_vk.prefix
+    };
+  }
+  if (result.endpoint) {
+    cfg.control_plane_url = result.endpoint.replace(/\/+$/, "");
+  }
+}
+function writeApiKeyToEnv(apiKey) {
+  const envPath = path.join(process.cwd(), ".env");
+  if (!fs.existsSync(envPath)) {
+    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}
+`);
+    return { created: true, updated: false, path: envPath };
+  }
+  const content = fs.readFileSync(envPath, "utf-8");
+  const lines = content.split("\n");
+  let found = false;
+  const updatedLines = lines.map((line) => {
+    if (line.startsWith("LANGWATCH_API_KEY=")) {
+      found = true;
+      return `LANGWATCH_API_KEY=${apiKey}`;
+    }
+    return line;
+  });
+  if (!found) {
+    if (content.endsWith("\n") || content === "") {
+      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);
+    } else {
+      updatedLines.push("", `LANGWATCH_API_KEY=${apiKey}`);
+    }
+  }
+  fs.writeFileSync(envPath, updatedLines.join("\n"));
+  return { created: false, updated: found, path: envPath };
+}
+async function fetchBootstrapSafely(cfg) {
+  try {
+    return await _chunk724OLLZ4js.getCliBootstrap.call(void 0, cfg);
+  } catch (e) {
+    return null;
+  }
+}
+async function openInBrowser(url, override) {
+  var _a, _b;
+  const choice = (_b = (_a = override != null ? override : process.env.LANGWATCH_BROWSER) != null ? _a : process.env.BROWSER) != null ? _b : "";
+  if (choice === "none") return;
+  const open = (await Promise.resolve().then(() => _interopRequireWildcard(require("open")))).default;
+  try {
+    if (!choice || choice === "default") {
+      await open(url);
+      return;
+    }
+    await open(url, { app: { name: choice } });
+  } catch (e) {
+  }
+}
+
+
+
+
+exports.runUnifiedLoginFlow = runUnifiedLoginFlow; exports.runDeviceFlowLogin = runDeviceFlowLogin;
+//# sourceMappingURL=chunk-BAA4HKOB.js.map

package/dist/chunk-BAA4HKOB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-BAA4HKOB.js","../src/cli/utils/governance/login-flow.ts","../src/cli/utils/governance/login-ceremony.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACGA,+DAAoB;AACpB,uEAAsB;AACtB,4EAAkB;AAClB,oEAAgB;ADDhB;AACA;AEsDA,IAAM,cAAA,EAAqC;AAAA,EACzC,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,cAAc,CAAA;AAAA,EAC7C,EAAE,IAAA,EAAM,OAAA,EAAS,WAAA,EAAa,QAAQ,CAAA;AAAA,EACtC,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,SAAS;AAC1C,CAAA;AAEA,SAAS,QAAA,CAAS,CAAA,EAAW,KAAA,EAAuB;AAClD,EAAA,GAAA,CAAI,CAAA,CAAE,OAAA,GAAU,KAAA,EAAO,OAAO,CAAA;AAC9B,EAAA,OAAO,EAAA,EAAI,GAAA,CAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,CAAE,MAAM,CAAA;AACxC;AAEA,SAAS,SAAA,CAAU,CAAA,EAAmB;AAEpC,EAAA,GAAA,CAAI,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,CAAC,CAAA,CAAA;AACd,EAAA;AACzB;AAE0C;AACjB,EAAA;AACzB;AAEyE;AAC9C,EAAA;AAED,EAAA;AACK,EAAA;AAKN,EAAA;AACV,EAAA;AACF,EAAA;AACW,EAAA;AACe,IAAA;AACrC,EAAA;AAC0B,EAAA;AACU,IAAA;AACT,IAAA;AACO,IAAA;AAClC,EAAA;AAI6B,EAAA;AACd,IAAA;AACF,IAAA;AACyB,IAAA;AACH,IAAA;AACC,MAAA;AACD,MAAA;AACR,MAAA;AACS,QAAA;AAChC,MAAA;AAC4B,MAAA;AACD,MAAA;AACA,MAAA;AAC7B,IAAA;AACF,EAAA;AAEkB,EAAA;AACH,IAAA;AAES,IAAA;AAEhB,IAAA;AAC2B,MAAA;AACjC,IAAA;AACF,EAAA;AAEiC,EAAA;AAClB,IAAA;AACF,IAAA;AACoB,IAAA;AACjC,EAAA;AAEO,EAAA;AACT;AFtEwC;AACA;AC/BtC;AAtDF,EAAA;AAwD+B,EAAA;AACjB,EAAA;AACQ,EAAA;AAEG,EAAA;AACA,EAAA;AACf,EAAA;AACA,IAAA;AAEA,MAAA;AAEN,IAAA;AACF,EAAA;AAEmC,EAAA;AAE9B,EAAA;AAGO,EAAA;AACuB,EAAA;AAC3B,EAAA;AACA,IAAA;AACJ,MAAA;AACF,IAAA;AACF,EAAA;AACY,EAAA;AAEwB,EAAA;AAOhB,EAAA;AACZ,IAAA;AACQ,IAAA;AACP,EAAA;AACc,EAAA;AACR,IAAA;AACU,IAAA;AACP,IAAA;AAClB,EAAA;AAC+B,EAAA;AAC3B,EAAA;AACiC,IAAA;AACf,IAAA;AACc,MAAA;AACA,MAAA;AAClB,MAAA;AAEU,MAAA;AASpB,MAAA;AAC0B,QAAA;AACd,QAAA;AAChB,MAAA;AAMI,MAAA;AAC4B,QAAA;AAChB,QAAA;AAChB,MAAA;AAEY,MAAA;AACU,MAAA;AACb,QAAA;AACe,QAAA;AACf,QAAA;AACI,QAAA;AAET,QAAA;AAE+B,UAAA;AACE,UAAA;AACD,UAAA;AAE5B,QAAA;AACP,MAAA;AACiC,MAAA;AAChB,QAAA;AAClB,MAAA;AACY,MAAA;AACW,MAAA;AAEhB,MAAA;AACT,IAAA;AAGQ,IAAA;AAC2B,MAAA;AACnC,IAAA;AACmC,IAAA;AACvB,IAAA;AACY,IAAA;AACD,IAAA;AACE,MAAA;AACK,IAAA;AACL,MAAA;AAClB,IAAA;AACkB,MAAA;AACzB,IAAA;AACY,IAAA;AACJ,IAAA;AACA,MAAA;AACyB,QAAA;AAC/B,MAAA;AACF,IAAA;AACuB,IAAA;AAChB,IAAA;AACK,EAAA;AACC,IAAA;AACuB,IAAA;AAChB,MAAA;AACX,QAAA;AACO,UAAA;AACR,YAAA;AACF,UAAA;AACG,QAAA;AACO,UAAA;AACR,YAAA;AACF,UAAA;AACF,QAAA;AACQ,UAAA;AACV,MAAA;AACF,IAAA;AACM,IAAA;AACN,EAAA;AACiC,IAAA;AACnC,EAAA;AACF;AAOE;AAE2B,EAAA;AAC7B;AAIE;AAE0B,EAAA;AACC,EAAA;AACU,EAAA;AAC1B,EAAA;AACO,IAAA;AACG,IAAA;AACD,IAAA;AACpB,EAAA;AACmB,EAAA;AACO,IAAA;AACE,IAAA;AACA,IAAA;AAC5B,EAAA;AACgC,EAAA;AACJ,IAAA;AACO,MAAA;AAChB,MAAA;AACA,MAAA;AACjB,IAAA;AACF,EAAA;AACqB,EAAA;AACY,IAAA;AACjC,EAAA;AACF;AAQ0D;AAClB,EAAA;AACT,EAAA;AACD,IAAA;AAA+B;AACxB,IAAA;AACnC,EAAA;AACgC,EAAA;AACA,EAAA;AACpB,EAAA;AACoB,EAAA;AACV,IAAA;AACV,MAAA;AAC0B,MAAA;AACpC,IAAA;AACO,IAAA;AACR,EAAA;AACW,EAAA;AACoB,IAAA;AACV,MAAA;AACb,IAAA;AACiB,MAAA;AACxB,IAAA;AACF,EAAA;AAC0B,EAAA;AACQ,EAAA;AACpC;AAGE;AAEI,EAAA;AAC8B,IAAA;AAC1B,EAAA;AACC,IAAA;AACT,EAAA;AACF;AAE0C;AAzR1C,EAAA;AA2RI,EAAA;AACqB,EAAA;AACa,EAAA;AAChC,EAAA;AACwB,IAAA;AACV,MAAA;AACd,MAAA;AACF,IAAA;AAC+B,IAAA;AACzB,EAAA;AAER,EAAA;AACF;ADxBwC;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-BAA4HKOB.js","sourcesContent":[null,"/**\n * Shared device-code login implementations. Two entry points:\n *\n *   1. `runUnifiedLoginFlow({ kind })` — the canonical flow used by\n *      `langwatch login` (interactive routes here for both modes). The\n *      same browser-approval ceremony works for either credential type;\n *      only the persist target differs:\n *        kind: 'device_session' → ~/.langwatch/config.json\n *        kind: 'project_api_key' → $CWD/.env (LANGWATCH_API_KEY)\n *      No copy-paste of the credential ever — the server ships it\n *      back to the CLI over the same RFC 8628 poll endpoint.\n *\n *   2. `runDeviceFlowLogin(...)` — back-compat wrapper that calls\n *      `runUnifiedLoginFlow({ kind: 'device_session' })`. Preserved so\n *      `commands/login.ts --device` and `utils/governance/wrapper.ts`\n *      auto-login keep working without churn.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport {\n  startDeviceCode,\n  pollUntilDone,\n  DeviceFlowError,\n  type CredentialType,\n  type ExchangeApiKeyResult,\n  type ExchangeDeviceSessionResult,\n} from \"./device-flow\";\nimport { loadConfig, saveConfig, type GovernanceConfig } from \"./config\";\nimport { formatLoginCeremony } from \"./login-ceremony\";\nimport { getCliBootstrap, type CliBootstrapResponse } from \"./cli-api\";\n\nexport interface RunUnifiedLoginOptions {\n  /** Credential type to mint. Defaults to 'device_session' for back-compat. */\n  kind?: CredentialType;\n  /** Optional browser override (LANGWATCH_BROWSER also honoured). */\n  browser?: string;\n  /** Pre-loaded config to mutate; defaults to `loadConfig()`. */\n  cfg?: GovernanceConfig;\n}\n\nexport type RunDeviceFlowLoginOptions = Omit<RunUnifiedLoginOptions, \"kind\">;\n\n/**\n * Run the canonical device-code login flow end-to-end. Selects what to\n * mint via `kind` (defaults to device_session); the same browser\n * approval ceremony covers both modes. On success, persists to the\n * right store + returns the latest GovernanceConfig.\n */\nexport async function runUnifiedLoginFlow(\n  opts: RunUnifiedLoginOptions = {},\n): Promise<GovernanceConfig> {\n  const kind: CredentialType = opts.kind ?? \"device_session\";\n  const cfg = opts.cfg ?? loadConfig();\n  const baseUrl = cfg.control_plane_url;\n\n  console.log(chalk.blue(\"🔐 LangWatch login\"));\n  console.log(chalk.gray(`Control plane: ${baseUrl}`));\n  console.log(\n    chalk.gray(\n      kind === \"project_api_key\"\n        ? \"Mode: project SDK API key (will write .env)\"\n        : \"Mode: device session (will write ~/.langwatch/config.json)\",\n    ),\n  );\n\n  const dc = await startDeviceCode({ baseUrl }, { credentialType: kind });\n  const verifyURL =\n    dc.verification_uri_complete ??\n    `${dc.verification_uri.replace(/\\/+$/, \"\")}?user_code=${encodeURIComponent(dc.user_code)}`;\n\n  console.log();\n  console.log(chalk.cyan(`Opening: ${verifyURL}`));\n  console.log(\n    chalk.gray(\n      `If your browser doesn't open, paste the URL above and enter code: ${chalk.bold(dc.user_code)}`,\n    ),\n  );\n  console.log();\n\n  await openInBrowser(verifyURL, opts.browser);\n\n  // discardStdin:false is load-bearing. ora's default (true) flips stdin to\n  // raw mode while the spinner runs, so Ctrl+C arrives as a raw 0x03 byte that\n  // ora swallows instead of a SIGINT — the wait becomes unkillable. Keeping\n  // stdin cooked lets the terminal deliver SIGINT; the handler stops the\n  // spinner and exits cleanly so the user can always abort the login wait.\n  const spinner = ora({\n    text: \"Waiting for you to approve in the browser\",\n    discardStdin: false,\n  }).start();\n  const onSigint = () => {\n    spinner.stop();\n    console.log(chalk.gray(\"\\nLogin cancelled.\"));\n    process.exit(130);\n  };\n  process.once(\"SIGINT\", onSigint);\n  try {\n    const result = await pollUntilDone({ baseUrl }, dc);\n    if (result.kind === \"device_session\") {\n      spinner.succeed(`Logged in as ${result.user.email}`);\n      persistDeviceSession(cfg, result);\n      saveConfig(cfg);\n\n      const bootstrap = await fetchBootstrapSafely(cfg);\n\n      // Pick up the server's authoritative gateway URL. Without this,\n      // self-hosted CLI users would see the SaaS default\n      // (https://gateway.langwatch.ai) on whoami / login output even\n      // though the actual gateway is on localhost:5563. The server's\n      // `gatewayUrl` reflects `LW_GATEWAY_BASE_URL` or the IS_SAAS-\n      // aware fallback. Backwards-compatible: older servers (without\n      // this field) leave the local default in place.\n      if (bootstrap?.gatewayUrl) {\n        cfg.gateway_url = bootstrap.gatewayUrl;\n        saveConfig(cfg);\n      }\n\n      // Cache the org's per-tool path policy so the `langwatch <tool>`\n      // wrapper gates path selection on the admin's choices offline.\n      // Older servers omit the field; the wrapper then falls back to\n      // the hardcoded defaults.\n      if (bootstrap?.toolPolicies) {\n        cfg.tool_policies = bootstrap.toolPolicies;\n        saveConfig(cfg);\n      }\n\n      console.log();\n      const ceremonyLines = formatLoginCeremony({\n        email: cfg.user?.email ?? result.user.email,\n        organizationName: cfg.organization?.name,\n        tools: bootstrap?.tools,\n        providers: bootstrap?.providers,\n        budget:\n          bootstrap?.budget?.monthlyLimitUsd != null\n            ? {\n                period: bootstrap.budget.period,\n                limitUsd: bootstrap.budget.monthlyLimitUsd,\n                usedUsd: bootstrap.budget.monthlyUsedUsd,\n              }\n            : undefined,\n      });\n      for (const line of ceremonyLines) {\n        console.log(line);\n      }\n      console.log();\n      console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n\n      return cfg;\n    }\n\n    // kind === 'api_key' — write to project-local .env (NO copy-paste)\n    spinner.succeed(\n      `API key generated for project ${chalk.bold(result.project.name)}`,\n    );\n    const envResult = writeApiKeyToEnv(result.api_key);\n    console.log();\n    console.log(chalk.green(\"✓ API key saved to .env\"));\n    if (envResult.created) {\n      console.log(chalk.gray(`  • Created .env file at ${envResult.path}`));\n    } else if (envResult.updated) {\n      console.log(chalk.gray(`  • Updated existing API key in ${envResult.path}`));\n    } else {\n      console.log(chalk.gray(`  • Added API key to ${envResult.path}`));\n    }\n    console.log();\n    console.log(\n      chalk.gray(\n        `  Project: ${result.project.name} (${result.project.slug})`,\n      ),\n    );\n    console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n    return cfg;\n  } catch (err) {\n    spinner.fail();\n    if (err instanceof DeviceFlowError) {\n      switch (err.kind) {\n        case \"denied\":\n          throw new Error(\n            \"authorization denied — you can retry `langwatch login`\",\n          );\n        case \"expired\":\n          throw new Error(\n            \"authorization request expired — run `langwatch login` again\",\n          );\n        default:\n          throw err;\n      }\n    }\n    throw err;\n  } finally {\n    process.removeListener(\"SIGINT\", onSigint);\n  }\n}\n\n/**\n * Back-compat wrapper. New callers should use `runUnifiedLoginFlow`\n * directly with an explicit `kind`.\n */\nexport async function runDeviceFlowLogin(\n  opts: RunDeviceFlowLoginOptions = {},\n): Promise<GovernanceConfig> {\n  return runUnifiedLoginFlow({ ...opts, kind: \"device_session\" });\n}\n\nfunction persistDeviceSession(\n  cfg: GovernanceConfig,\n  result: ExchangeDeviceSessionResult,\n): void {\n  cfg.access_token = result.access_token;\n  cfg.refresh_token = result.refresh_token;\n  cfg.expires_at = Math.floor(Date.now() / 1000) + result.expires_in;\n  cfg.user = {\n    id: result.user.id,\n    email: result.user.email,\n    name: result.user.name,\n  };\n  cfg.organization = {\n    id: result.organization.id,\n    slug: result.organization.slug,\n    name: result.organization.name,\n  };\n  if (result.default_personal_vk) {\n    cfg.default_personal_vk = {\n      id: result.default_personal_vk.id,\n      secret: result.default_personal_vk.secret,\n      prefix: result.default_personal_vk.prefix,\n    };\n  }\n  if (result.endpoint) {\n    cfg.control_plane_url = result.endpoint.replace(/\\/+$/, \"\");\n  }\n}\n\ninterface EnvWriteResult {\n  created: boolean;\n  updated: boolean;\n  path: string;\n}\n\nfunction writeApiKeyToEnv(apiKey: string): EnvWriteResult {\n  const envPath = path.join(process.cwd(), \".env\");\n  if (!fs.existsSync(envPath)) {\n    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}\\n`);\n    return { created: true, updated: false, path: envPath };\n  }\n  const content = fs.readFileSync(envPath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  let found = false;\n  const updatedLines = lines.map((line) => {\n    if (line.startsWith(\"LANGWATCH_API_KEY=\")) {\n      found = true;\n      return `LANGWATCH_API_KEY=${apiKey}`;\n    }\n    return line;\n  });\n  if (!found) {\n    if (content.endsWith(\"\\n\") || content === \"\") {\n      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);\n    } else {\n      updatedLines.push(\"\", `LANGWATCH_API_KEY=${apiKey}`);\n    }\n  }\n  fs.writeFileSync(envPath, updatedLines.join(\"\\n\"));\n  return { created: false, updated: found, path: envPath };\n}\n\nasync function fetchBootstrapSafely(\n  cfg: GovernanceConfig,\n): Promise<CliBootstrapResponse | null> {\n  try {\n    return await getCliBootstrap(cfg);\n  } catch {\n    return null;\n  }\n}\n\nasync function openInBrowser(url: string, override?: string): Promise<void> {\n  const choice =\n    override ?? process.env.LANGWATCH_BROWSER ?? process.env.BROWSER ?? \"\";\n  if (choice === \"none\") return;\n  const open = (await import(\"open\")).default;\n  try {\n    if (!choice || choice === \"default\") {\n      await open(url);\n      return;\n    }\n    await open(url, { app: { name: choice } });\n  } catch {\n    // browser failure shouldn't break login — user can paste manually\n  }\n}\n\n// The post-login shell-rc persist offer was removed when `langwatch\n// login` became auth-only: the device session in config.json is\n// already authoritative, so login never edits the shell rc. The\n// persist offer now lives in the `langwatch <tool>` wrapper and fires\n// only in ingestion mode (maybeOfferIngestionShellRcPersist in\n// shell-rc.ts), framed as installing telemetry.\n\n// Type-only re-exports so callers can import the shapes from this\n// module without reaching into device-flow.ts.\nexport type { ExchangeApiKeyResult, ExchangeDeviceSessionResult };\n","/**\n * Render the \"You're in!\" ceremony emitted by `langwatch login` after a\n * successful device-flow exchange.\n *\n * Two clearly-separated lists, sourced from the org's AI Tools catalog:\n *\n *   ✓ Logged in as jane@acme.com @ Acme\n *\n *   Your AI tools (run any of these):\n *     $ langwatch claude   # Claude Code\n *     $ langwatch codex    # Codex\n *\n *   Model providers you can issue a virtual key for:\n *     • anthropic   Claude\n *     • openai      (not configured yet)\n *\n *   Monthly budget: $500   |   Used: $0.00\n *\n *   Or open the app in your browser:\n *     $ langwatch open\n *\n * The two sections answer two different questions: which coding assistants\n * can I run right now (`tools`), and which model providers can I mint my own\n * virtual key for (`providers`). They are NOT the same thing — conflating\n * them was the bug this rewrite fixes.\n *\n * Pure function: takes the data, returns an array of lines. Caller applies\n * any chalk colouring + writes to stdout. Lets unit tests assert on the\n * literal output without colour/escape noise.\n */\n\nexport interface LoginCeremonyTool {\n  /** CLI slug the wrapper runs (e.g. \"claude\", \"codex\"). */\n  slug: string;\n  /** Human-readable assistant name (e.g. \"Claude Code\"). */\n  displayName: string;\n}\n\nexport interface LoginCeremonyProvider {\n  /** Provider key (lowercase, e.g. \"anthropic\", \"openai\", \"gemini\"). */\n  name: string;\n  /** Optional human-readable provider label (e.g. \"Anthropic\"). */\n  displayName?: string;\n  /**\n   * Whether the org has a live credential for this provider. When false the\n   * ceremony annotates the row so the user knows the tile still needs setup\n   * before a minted key will work.\n   */\n  configured?: boolean;\n}\n\nexport interface LoginCeremonyBudget {\n  /** Period label (e.g. \"Monthly\"). Capitalised in output. */\n  period: string;\n  /** Spend ceiling in USD (rendered as `$N`). */\n  limitUsd: number;\n  /** Used so far in USD (rendered with two decimals). */\n  usedUsd: number;\n}\n\nexport interface LoginCeremonyInput {\n  email: string;\n  organizationName?: string;\n  /**\n   * Coding assistants the user can run via `langwatch <slug>`, sourced from\n   * the org's catalog. When empty / omitted the ceremony falls back to the\n   * built-in default wrappers so a fresh org still gets a next-step.\n   */\n  tools?: LoginCeremonyTool[];\n  /** Model providers the user can mint their own virtual key for. */\n  providers?: LoginCeremonyProvider[];\n  budget?: LoginCeremonyBudget;\n  /** Whether the `langwatch open` browser-launch command is available. */\n  openCommand?: boolean;\n}\n\n/** Fallback wrappers when the org has not published any coding-assistant tile. */\nconst DEFAULT_TOOLS: LoginCeremonyTool[] = [\n  { slug: \"claude\", displayName: \"Claude Code\" },\n  { slug: \"codex\", displayName: \"Codex\" },\n  { slug: \"cursor\", displayName: \"Cursor\" },\n];\n\nfunction padRight(s: string, width: number): string {\n  if (s.length >= width) return s;\n  return s + \" \".repeat(width - s.length);\n}\n\nfunction formatUsd(n: number): string {\n  // $500 (whole) → \"$500\"; $42.18 → \"$42.18\".\n  if (Number.isInteger(n)) return `$${n}`;\n  return `$${n.toFixed(2)}`;\n}\n\nfunction formatUsedUsd(n: number): string {\n  return `$${n.toFixed(2)}`;\n}\n\nexport function formatLoginCeremony(input: LoginCeremonyInput): string[] {\n  const lines: string[] = [];\n\n  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : \"\";\n  lines.push(`✓ Logged in as ${input.email}${orgSuffix}`);\n\n  // AI tools (coding assistants). Fall back to the built-in wrappers when the\n  // org published none, so the user always gets a runnable next-step.\n  const tools =\n    input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;\n  lines.push(\"\");\n  lines.push(\"Your AI tools (run any of these):\");\n  const cmdWidth = Math.max(\n    ...tools.map((t) => `langwatch ${t.slug}`.length),\n  );\n  for (const tool of tools) {\n    const cmd = `langwatch ${tool.slug}`;\n    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : \"\";\n    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);\n  }\n\n  // Model providers the user can mint a virtual key for — a different concept\n  // from the tools above. Only shown when the org published provider tiles.\n  if (input.providers && input.providers.length > 0) {\n    lines.push(\"\");\n    lines.push(\"Model providers you can issue a virtual key for:\");\n    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));\n    for (const p of input.providers) {\n      const padded = padRight(p.name, nameWidth);\n      const annotations: string[] = [];\n      if (p.displayName && p.displayName !== p.name) {\n        annotations.push(p.displayName);\n      }\n      if (p.configured === false) annotations.push(\"(not configured yet)\");\n      const suffix = annotations.length > 0 ? `  ${annotations.join(\"  \")}` : \"\";\n      lines.push(`  • ${padded}${suffix}`);\n    }\n  }\n\n  if (input.budget) {\n    lines.push(\"\");\n    const period =\n      input.budget.period.charAt(0).toUpperCase() +\n      input.budget.period.slice(1).toLowerCase();\n    lines.push(\n      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`,\n    );\n  }\n\n  if (input.openCommand !== false) {\n    lines.push(\"\");\n    lines.push(\"Or open the app in your browser:\");\n    lines.push(\"  $ langwatch open\");\n  }\n\n  return lines;\n}\n"]}