langwatch 0.33.1 → 0.34.0

package/dist/chunk-OPDGUP7P.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-OPDGUP7P.js","../src/cli/commands/pull.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;AClBA,+DAAoB;AACpB,uEAAsB;AACtB,4EAAkB;AAClB,oEAAgB;AAgBT,IAAM,YAAA,EAAc,MAAA,CAAO;AAAA,EAChC,MAAA;AAAA,EACA,IAAA;AAAA,EACA,iBAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF,CAAA,EAAA,GAMqB;AA/BrB,EAAA,IAAA,EAAA;AAgCE,EAAA,MAAM,WAAA,EAAa,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA;AAAA,IAChD,CAAC,CAAC,EAAE,UAAU,CAAA,EAAA,GAAM;AAClB,MAAA,GAAA,CAAI,OAAO,WAAA,IAAe,SAAA,GAAY,UAAA,CAAW,IAAA,EAAM;AACrD,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,GAAA,CAAI,OAAO,WAAA,IAAe,SAAA,GAAY,UAAA,CAAW,UAAA,CAAW,OAAO,CAAA,EAAG;AACpE,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA;AAEA,EAAA,GAAA,CAAI,UAAA,CAAW,OAAA,EAAS,CAAA,EAAG;AACzB,IAAA,MAAM,aAAA,EAAe,2BAAA;AAAA,MACnB,CAAA,SAAA,EAAY,UAAA,CAAW,MAAM,CAAA,kBAAA;AAAA,IAC/B,CAAA,CAAE,KAAA,CAAM,CAAA;AAER,IAAA,IAAA,CAAA,MAAW,CAAC,IAAA,EAAM,UAAU,EAAA,GAAK,UAAA,EAAY;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,EACJ,OAAO,WAAA,IAAe,SAAA,EAClB,WAAA,EAAA,CACA,GAAA,EAAA,UAAA,CAAW,OAAA,EAAA,GAAX,KAAA,EAAA,GAAA,EAAsB,QAAA;AAE5B,QAAA,MAAM,YAAA,EAAc,IAAA,GAAA,KAAA,EAAA,IAAA,EAAO,WAAA;AAE3B,QAAA,MAAM,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA;AAEnC,QAAA,MAAM,OAAA,EAAS,IAAA,EACX,MAAM,iBAAA,CAAkB,GAAA,CAAI,IAAA,EAAM,EAAE,IAAI,CAAC,EAAA,EACzC,MAAM,iBAAA,CAAkB,GAAA,CAAI,IAAA,EAAM,EAAE,OAAA,EAAS,YAAY,CAAC,CAAA;AAE9D,QAAA,GAAA,CAAI,MAAA,EAAQ;AACV,UAAA,MAAM,YAAA,EAAA,CACJ,UAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,SAAA,CAAW,OAAA,EAAA,IAAY,MAAA,CAAO,QAAA,GAC9B,CAAC,SAAA,CAAU,aAAA,GACX,CAAI,EAAA,CAAA,UAAA,CAAgB,IAAA,CAAA,OAAA,CAAQ,SAAA,CAAU,YAAY,CAAC,CAAA;AAErD,UAAA,GAAA,CAAI,WAAA,EAAa;AACf,YAAA,MAAM,mBAAA,EACJ,gCAAA,CAAgB,qBAAA,CAAsB,MAAM,CAAA;AAE9C,YAAA,MAAM,UAAA,EAAY,4BAAA,CAAY,sBAAA;AAAA,cAC5B,IAAA;AAAA,cACA;AAAA,YACF,CAAA;AACA,YAAA,MAAM,aAAA,EAAoB,IAAA,CAAA,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,CAAA,EAAG,SAAS,CAAA;AAC3D,YAAA,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK;AAAA,cAClB,IAAA;AAAA,cACA,OAAA,EAAS,MAAA,CAAO,OAAA;AAAA,cAChB,WAAA,EAAa;AAAA,YACf,CAAC,CAAA;AAED,YAAA,4BAAA,CAAY,eAAA;AAAA,cACV,IAAA;AAAA,cACA,IAAA;AAAA,cACA,kBAAA;AAAA,cACA;AAAA,YACF,CAAA;AAEA,YAAA,YAAA,CAAa,KAAA,EAAO,CAAA,QAAA,EAAW,eAAA,CAAM,IAAA;AAAA,cACnC,CAAA,EAAA;AACD,YAAA;AACC,cAAA;AACD,YAAA;AACH,UAAA;AACE,YAAA;AACF,UAAA;AACK,QAAA;AACL,UAAA;AACF,QAAA;AACO,MAAA;AACD,QAAA;AAEC,QAAA;AACT,MAAA;AACF,IAAA;AAEA,IAAA;AACF,EAAA;AAGM,EAAA;AACG,IAAA;AACC,MAAA;AACF,MAAA;AACK,QAAA;AACT,MAAA;AACI,MAAA;AACK,QAAA;AACT,MAAA;AACO,MAAA;AACR,IAAA;AACH,EAAA;AAEM,EAAA;AAEF,EAAA;AACK,IAAA;AACP,IAAA;AACF,EAAA;AACF;AAEM;AACJ,EAAA;AACA,EAAA;AACA,EAAA;AAKU;AACC,EAAA;AACE,IAAA;AACH,MAAA;AACA,MAAA;AAIE,MAAA;AACA,QAAA;AACJ,UAAA;AACE,YAAA;AACD,UAAA;AACH,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEW,EAAA;AACE,IAAA;AACD,MAAA;AACA,QAAA;AACJ,UAAA;AACF,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AAEW,EAAA;AACE,IAAA;AACD,MAAA;AACV,IAAA;AACF,EAAA;AAEM,EAAA;AAEF,EAAA;AACM,IAAA;AACH,EAAA;AACC,IAAA;AACK,IAAA;AACD,MAAA;AACC,IAAA;AACD,MAAA;AACC,IAAA;AACD,MAAA;AAEF,IAAA;AACV,EAAA;AACF;AAEa;AACC,EAAA;AAEN,EAAA;AAEF,EAAA;AACF,IAAA;AAEM,IAAA;AAEA,IAAA;AAEA,IAAA;AACA,IAAA;AAEA,IAAA;AACK,MAAA;AACA,MAAA;AACT,MAAA;AACS,MAAA;AACA,MAAA;AACX,IAAA;AAEM,IAAA;AAEN,IAAA;AAEM,IAAA;AACN,IAAA;AAEW,IAAA;AACD,MAAA;AACV,IAAA;AACO,EAAA;AACH,IAAA;AACM,MAAA;AACH,IAAA;AACG,MAAA;AACA,QAAA;AACJ,UAAA;AAGF,QAAA;AACF,MAAA;AACF,IAAA;AACQ,IAAA;AACV,EAAA;AACF;ADnDe;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-OPDGUP7P.js","sourcesContent":[null,"import * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport { PromptConverter } from \"@/cli/utils/promptConverter\";\nimport {\n  PromptsApiService,\n  PromptsError,\n} from \"@/client-sdk/services/prompts\";\nimport type { PromptsConfig, PromptsLock, SyncResult } from \"../types\";\nimport { FileManager } from \"../utils/fileManager\";\nimport { ensureProjectInitialized } from \"../utils/init\";\nimport { checkApiKey } from \"../utils/apiKey\";\nimport { formatApiErrorMessage } from \"@/client-sdk/services/_shared/format-api-error\";\n\n/**\n * Core pull logic: fetches remote prompts and materializes them locally.\n * Returns the result and mutates the lock object in place.\n */\nexport const pullPrompts = async ({\n  config,\n  lock,\n  promptsApiService,\n  result,\n  tag,\n}: {\n  config: PromptsConfig;\n  lock: PromptsLock;\n  promptsApiService: PromptsApiService;\n  result: SyncResult;\n  tag?: string;\n}): Promise<void> => {\n  const remoteDeps = Object.entries(config.prompts).filter(\n    ([, dependency]) => {\n      if (typeof dependency === \"object\" && dependency.file) {\n        return false;\n      }\n      if (typeof dependency === \"string\" && dependency.startsWith(\"file:\")) {\n        return false;\n      }\n      return true;\n    }\n  );\n\n  if (remoteDeps.length > 0) {\n    const fetchSpinner = ora(\n      `Checking ${remoteDeps.length} remote prompts...`\n    ).start();\n\n    for (const [name, dependency] of remoteDeps) {\n      try {\n        const versionSpec =\n          typeof dependency === \"string\"\n            ? dependency\n            : dependency.version ?? \"latest\";\n\n        const displaySpec = tag ?? versionSpec;\n\n        const lockEntry = lock.prompts[name];\n\n        const prompt = tag\n          ? await promptsApiService.get(name, { tag })\n          : await promptsApiService.get(name, { version: versionSpec });\n\n        if (prompt) {\n          const needsUpdate =\n            lockEntry?.version !== prompt.version ||\n            !lockEntry.materialized ||\n            !fs.existsSync(path.resolve(lockEntry.materialized));\n\n          if (needsUpdate) {\n            const materializedPrompt =\n              PromptConverter.fromApiToMaterialized(prompt);\n\n            const savedPath = FileManager.saveMaterializedPrompt(\n              name,\n              materializedPrompt\n            );\n            const relativePath = path.relative(process.cwd(), savedPath);\n            result.fetched.push({\n              name,\n              version: prompt.version,\n              versionSpec: displaySpec,\n            });\n\n            FileManager.updateLockEntry(\n              lock,\n              name,\n              materializedPrompt,\n              savedPath\n            );\n\n            fetchSpinner.text = `Fetched ${chalk.cyan(\n              `${name}@${displaySpec}`\n            )} ${chalk.gray(`(version ${prompt.version})`)} → ${chalk.gray(\n              relativePath\n            )}`;\n          } else {\n            result.unchanged.push(name);\n          }\n        } else {\n          result.errors.push({ name, error: \"Prompt not found\" });\n        }\n      } catch (error) {\n        const errorMessage =\n          formatApiErrorMessage({ error });\n        result.errors.push({ name, error: errorMessage });\n      }\n    }\n\n    fetchSpinner.stop();\n  }\n\n  // Cleanup orphaned materialized files\n  const currentDependencies = new Set(\n    Object.keys(config.prompts).filter((name) => {\n      const dependency = config.prompts[name];\n      if (typeof dependency === \"object\" && dependency.file) {\n        return false;\n      }\n      if (typeof dependency === \"string\" && dependency.startsWith(\"file:\")) {\n        return false;\n      }\n      return true;\n    })\n  );\n\n  const cleanedFiles =\n    FileManager.cleanupOrphanedMaterializedFiles(currentDependencies);\n  if (cleanedFiles.length > 0) {\n    result.cleaned = cleanedFiles;\n    FileManager.removeFromLock(lock, cleanedFiles);\n  }\n};\n\nconst printPullResults = ({\n  result,\n  lock,\n  duration,\n}: {\n  result: SyncResult;\n  lock: PromptsLock;\n  duration: string;\n}): void => {\n  if (result.fetched.length > 0) {\n    for (const { name, version, versionSpec } of result.fetched) {\n      const lockEntry = lock.prompts[name];\n      const displayPath = lockEntry?.materialized\n        ? `./${lockEntry.materialized}`\n        : `./prompts/.materialized/${name}.prompt.yaml`;\n\n      console.log(\n        chalk.green(\n          `✓ Pulled ${chalk.cyan(`${name}@${versionSpec}`)} ${chalk.gray(\n            `(version ${version})`\n          )} → ${chalk.gray(displayPath)}`\n        )\n      );\n    }\n  }\n\n  if (result.cleaned.length > 0) {\n    for (const name of result.cleaned) {\n      console.log(\n        chalk.yellow(\n          `✓ Cleaned ${chalk.cyan(name)} (no longer in dependencies)`\n        )\n      );\n    }\n  }\n\n  if (result.errors.length > 0) {\n    for (const { name, error } of result.errors) {\n      console.error(chalk.red(`✗ Failed ${chalk.cyan(name)}: ${error}`));\n    }\n  }\n\n  const totalActions = result.fetched.length + result.cleaned.length;\n\n  if (totalActions === 0 && result.errors.length === 0) {\n    console.log(chalk.gray(`Pulled in ${duration}s, no changes`));\n  } else {\n    const summary = [];\n    if (result.fetched.length > 0)\n      summary.push(`${result.fetched.length} fetched`);\n    if (result.cleaned.length > 0)\n      summary.push(`${result.cleaned.length} cleaned`);\n    if (result.errors.length > 0)\n      summary.push(`${result.errors.length} errors`);\n\n    console.log(chalk.gray(`Pulled ${summary.join(\", \")} in ${duration}s`));\n  }\n};\n\nexport const pullCommand = async (options?: { tag?: string }): Promise<void> => {\n  console.log(\"⬇️  Pulling remote prompts...\");\n\n  const startTime = Date.now();\n\n  try {\n    checkApiKey();\n\n    const promptsApiService = new PromptsApiService();\n\n    await ensureProjectInitialized(false);\n\n    const config = FileManager.loadPromptsConfig();\n    const lock = FileManager.loadPromptsLock();\n\n    const result: SyncResult = {\n      fetched: [],\n      pushed: [],\n      unchanged: [],\n      cleaned: [],\n      errors: [],\n    };\n\n    await pullPrompts({ config, lock, promptsApiService, result, tag: options?.tag });\n\n    FileManager.savePromptsLock(lock);\n\n    const duration = ((Date.now() - startTime) / 1000).toFixed(1);\n    printPullResults({ result, lock, duration });\n\n    if (result.errors.length > 0) {\n      process.exit(1);\n    }\n  } catch (error) {\n    if (error instanceof PromptsError) {\n      console.error(chalk.red(`Error: ${error.message}`));\n    } else {\n      console.error(\n        chalk.red(\n          `Unexpected error: ${\n            formatApiErrorMessage({ error })\n          }`\n        )\n      );\n    }\n    process.exit(1);\n  }\n};\n"]}

package/dist/chunk-PDFGYYZY.mjs

@@ -1,76 +0,0 @@
-import {
-  createLangWatchApiClient
-} from "./chunk-VB772C55.mjs";
-import {
-  extractStatusFromResponse,
-  formatApiErrorForOperation
-} from "./chunk-J3KM7ZO7.mjs";
-
-// src/client-sdk/services/scenarios/errors.ts
-var ScenariosApiError = class extends Error {
-  constructor(message, operation, originalError) {
-    super(message);
-    this.operation = operation;
-    this.originalError = originalError;
-    this.name = "ScenariosApiError";
-  }
-};
-
-// src/client-sdk/services/scenarios/scenarios-api.service.ts
-var ScenariosApiService = class {
-  constructor(config) {
-    var _a;
-    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
-  }
-  handleApiError(operation, error) {
-    const message = formatApiErrorForOperation({ operation, error, options: {
-      status: extractStatusFromResponse(error)
-    } });
-    throw new ScenariosApiError(message, operation, error);
-  }
-  async getAll() {
-    const { data, error } = await this.apiClient.GET("/api/scenarios");
-    if (error) this.handleApiError("fetch all scenarios", error);
-    return data;
-  }
-  async get(id) {
-    const { data, error } = await this.apiClient.GET("/api/scenarios/{id}", {
-      params: { path: { id } }
-    });
-    if (error)
-      this.handleApiError(`fetch scenario with ID "${id}"`, error);
-    return data;
-  }
-  async create(params) {
-    const { data, error } = await this.apiClient.POST("/api/scenarios", {
-      body: params
-    });
-    if (error) this.handleApiError("create scenario", error);
-    return data;
-  }
-  async update(id, params) {
-    const { data, error } = await this.apiClient.PUT("/api/scenarios/{id}", {
-      params: { path: { id } },
-      body: params
-    });
-    if (error)
-      this.handleApiError(`update scenario with ID "${id}"`, error);
-    return data;
-  }
-  async delete(id) {
-    const { data, error } = await this.apiClient.DELETE(
-      "/api/scenarios/{id}",
-      {
-        params: { path: { id } }
-      }
-    );
-    if (error)
-      this.handleApiError(`delete scenario with ID "${id}"`, error);
-    return data;
-  }
-};
-
-export {
-  ScenariosApiService
-};
-//# sourceMappingURL=chunk-PDFGYYZY.mjs.map

package/dist/chunk-PHRL2LLK.mjs

@@ -1,63 +0,0 @@
-import {
-  DatasetApiError,
-  DatasetNotFoundError,
-  DatasetPlanLimitError,
-  DatasetService
-} from "./chunk-GF6YHRHI.mjs";
-import {
-  resolveControlPlaneUrl
-} from "./chunk-NEQB4U3F.mjs";
-import {
-  failSpinner
-} from "./chunk-Q7AHHFC3.mjs";
-import {
-  createLangWatchApiClient
-} from "./chunk-VB772C55.mjs";
-import {
-  NoOpLogger
-} from "./chunk-GVFRS2UN.mjs";
-
-// src/cli/commands/dataset/service-factory.ts
-function createDatasetService() {
-  var _a;
-  const apiKey = (_a = process.env.LANGWATCH_API_KEY) != null ? _a : "";
-  const endpoint = resolveControlPlaneUrl().replace(/\/$/, "");
-  return new DatasetService({
-    langwatchApiClient: createLangWatchApiClient(apiKey, endpoint),
-    logger: new NoOpLogger(),
-    endpoint,
-    apiKey
-  });
-}
-
-// src/cli/commands/dataset/error-handler.ts
-import chalk from "chalk";
-function handleDatasetCommandError({
-  spinner,
-  error,
-  context
-}) {
-  if (error instanceof DatasetNotFoundError) {
-    spinner.fail(chalk.red(`Not found: ${error.message}`));
-  } else if (error instanceof DatasetPlanLimitError) {
-    spinner.fail(chalk.red(`Plan limit reached: ${error.message}`));
-    if (error.current !== void 0 && error.max !== void 0) {
-      console.error(
-        chalk.gray(
-          `  Current ${error.limitType}: ${error.current} / ${error.max}`
-        )
-      );
-    }
-  } else if (error instanceof DatasetApiError) {
-    failSpinner({ spinner, error, action: context });
-  } else {
-    failSpinner({ spinner, error, action: context });
-  }
-  process.exit(1);
-}
-
-export {
-  createDatasetService,
-  handleDatasetCommandError
-};
-//# sourceMappingURL=chunk-PHRL2LLK.mjs.map

package/dist/chunk-PLECBOKX.js

@@ -1,103 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunkIQ5CSV4Djs = require('./chunk-IQ5CSV4D.js');
-
-
-var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
-
-
-
-var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
-
-// src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts
-var VirtualKeysApiError = class extends Error {
-  constructor(message, operation, originalError) {
-    super(message);
-    this.operation = operation;
-    this.originalError = originalError;
-    this.name = "VirtualKeysApiError";
-  }
-};
-var VirtualKeysApiService = class {
-  constructor(config) {
-    var _a, _b, _c, _d;
-    this.endpoint = ((_b = (_a = config == null ? void 0 : config.endpoint) != null ? _a : process.env.LANGWATCH_ENDPOINT) != null ? _b : _chunkIQ5CSV4Djs.DEFAULT_ENDPOINT).replace(/\/+$/, "");
-    this.apiKey = (_d = (_c = config == null ? void 0 : config.apiKey) != null ? _c : process.env.LANGWATCH_API_KEY) != null ? _d : "";
-  }
-  headers() {
-    return {
-      Authorization: `Bearer ${this.apiKey}`,
-      "Content-Type": "application/json"
-    };
-  }
-  async request(operation, path, init) {
-    var _a;
-    const response = await fetch(`${this.endpoint}${path}`, _chunkBRPEG3YQjs.__spreadProps.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, init), {
-      headers: _chunkBRPEG3YQjs.__spreadValues.call(void 0, _chunkBRPEG3YQjs.__spreadValues.call(void 0, {}, this.headers()), (_a = init == null ? void 0 : init.headers) != null ? _a : {})
-    }));
-    if (!response.ok) {
-      let parsedBody;
-      try {
-        parsedBody = await response.json();
-      } catch (e) {
-        parsedBody = await response.text();
-      }
-      const message = _chunkC5Y772G7js.formatApiErrorForOperation.call(void 0, {
-        operation,
-        error: parsedBody,
-        options: { status: response.status }
-      });
-      throw new VirtualKeysApiError(message, operation, parsedBody);
-    }
-    return await response.json();
-  }
-  async list() {
-    const { data } = await this.request(
-      "list virtual keys",
-      "/api/gateway/v1/virtual-keys"
-    );
-    return data;
-  }
-  async get(id) {
-    const { virtual_key } = await this.request(
-      `get virtual key "${id}"`,
-      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`
-    );
-    return virtual_key;
-  }
-  async create(input) {
-    return this.request(
-      "create virtual key",
-      "/api/gateway/v1/virtual-keys",
-      { method: "POST", body: JSON.stringify(input) }
-    );
-  }
-  async update(id, input) {
-    const { virtual_key } = await this.request(
-      `update virtual key "${id}"`,
-      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,
-      { method: "PATCH", body: JSON.stringify(input) }
-    );
-    return virtual_key;
-  }
-  async rotate(id) {
-    return this.request(
-      `rotate virtual key "${id}"`,
-      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,
-      { method: "POST" }
-    );
-  }
-  async revoke(id) {
-    const { virtual_key } = await this.request(
-      `revoke virtual key "${id}"`,
-      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,
-      { method: "POST" }
-    );
-    return virtual_key;
-  }
-};
-
-
-
-exports.VirtualKeysApiService = VirtualKeysApiService;
-//# sourceMappingURL=chunk-PLECBOKX.js.map

package/dist/chunk-PLECBOKX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-PLECBOKX.js","../src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACgDO,IAAM,oBAAA,EAAN,MAAA,QAAkC,MAAM;AAAA,EAC7C,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,qBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,sBAAA,EAAN,MAA4B;AAAA,EAIjC,WAAA,CAAY,MAAA,EAAiD;AA1E/D,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA2EI,IAAA,IAAA,CAAK,SAAA,EAAA,CAAA,CAAY,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,QAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAoB,OAAA,CAAQ,GAAA,CAAI,kBAAA,EAAA,GAAhC,KAAA,EAAA,GAAA,EAAsD,iCAAA,CAAA,CAAkB,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC3G,IAAA,IAAA,CAAK,OAAA,EAAA,CAAS,GAAA,EAAA,CAAA,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,MAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAA,GAA9B,KAAA,EAAA,GAAA,EAAmD,EAAA;AAAA,EACnE;AAAA,EAEQ,OAAA,CAAA,EAAkC;AACxC,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,MAAM,CAAA,CAAA;AACpB,MAAA;AAClB,IAAA;AACF,EAAA;AAE0F,EAAA;AAtF5F,IAAA;AAuFyC,IAAA;AAE1B,MAAA;AACV,IAAA;AACiB,IAAA;AACZ,MAAA;AACA,MAAA;AAC+B,QAAA;AAC3B,MAAA;AAC2B,QAAA;AACnC,MAAA;AACgB,MAAA;AACd,QAAA;AACO,QAAA;AAC4B,QAAA;AACpC,MAAA;AAC6B,MAAA;AAChC,IAAA;AAC4B,IAAA;AAC9B,EAAA;AAEoC,EAAA;AACN,IAAA;AAC1B,MAAA;AACA,MAAA;AACF,IAAA;AACO,IAAA;AACT,EAAA;AAE2C,EAAA;AACN,IAAA;AACX,MAAA;AACU,MAAA;AAClC,IAAA;AACO,IAAA;AACT,EAAA;AAE0E,EAAA;AAC5D,IAAA;AACV,MAAA;AACA,MAAA;AAC6B,MAAA;AAC/B,IAAA;AACF,EAAA;AAE4E,EAAA;AACvC,IAAA;AACR,MAAA;AACO,MAAA;AACF,MAAA;AAChC,IAAA;AACO,IAAA;AACT,EAAA;AAEwD,EAAA;AAC1C,IAAA;AACe,MAAA;AACO,MAAA;AACf,MAAA;AACnB,IAAA;AACF,EAAA;AAE8C,EAAA;AACT,IAAA;AACR,MAAA;AACO,MAAA;AACf,MAAA;AACnB,IAAA;AACO,IAAA;AACT,EAAA;AACF;AD3D2C;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-PLECBOKX.js","sourcesContent":[null,"import { formatApiErrorForOperation } from \"@/client-sdk/services/_shared/format-api-error\";\nimport { DEFAULT_ENDPOINT } from \"@/internal/constants\";\n\nexport type VirtualKeyScopeType = \"ORGANIZATION\" | \"TEAM\" | \"PROJECT\";\n\nexport interface VirtualKeyScope {\n  scope_type: VirtualKeyScopeType;\n  scope_id: string;\n}\n\nexport interface VirtualKey {\n  id: string;\n  name: string;\n  description: string | null;\n  environment: \"live\" | \"test\";\n  prefix: string;\n  last_four: string;\n  status: \"ACTIVE\" | \"REVOKED\";\n  principal_user_id: string | null;\n  organization_id: string;\n  /**\n   * Single-PROJECT-scope shorthand: present when the VK has exactly one\n   * PROJECT scope row. Null for ORG/TEAM-only VKs and for multi-project\n   * VKs (use `scopes[]` for the authoritative scope list in those cases).\n   * See vk-config-bundle.feature.\n   */\n  project_id: string | null;\n  scopes: VirtualKeyScope[];\n  routing_policy_id: string | null;\n  config: Record<string, unknown>;\n  created_at: string;\n  updated_at: string;\n  revoked_at: string | null;\n  last_used_at: string | null;\n}\n\nexport interface CreateVirtualKeyInput {\n  name: string;\n  description?: string;\n  environment?: \"live\" | \"test\";\n  principal_user_id?: string | null;\n  scopes: VirtualKeyScope[];\n  routing_policy_id?: string | null;\n  config?: Record<string, unknown>;\n}\n\nexport interface UpdateVirtualKeyInput {\n  name?: string;\n  description?: string | null;\n  scopes?: VirtualKeyScope[];\n  routing_policy_id?: string | null;\n  config?: Record<string, unknown>;\n}\n\nexport interface VirtualKeyWithSecret {\n  virtual_key: VirtualKey;\n  secret: string;\n}\n\nexport class VirtualKeysApiError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"VirtualKeysApiError\";\n  }\n}\n\nexport class VirtualKeysApiService {\n  private readonly endpoint: string;\n  private readonly apiKey: string;\n\n  constructor(config?: { endpoint?: string; apiKey?: string }) {\n    this.endpoint = (config?.endpoint ?? process.env.LANGWATCH_ENDPOINT ?? DEFAULT_ENDPOINT).replace(/\\/+$/, \"\");\n    this.apiKey = config?.apiKey ?? process.env.LANGWATCH_API_KEY ?? \"\";\n  }\n\n  private headers(): Record<string, string> {\n    return {\n      Authorization: `Bearer ${this.apiKey}`,\n      \"Content-Type\": \"application/json\",\n    };\n  }\n\n  private async request<T>(operation: string, path: string, init?: RequestInit): Promise<T> {\n    const response = await fetch(`${this.endpoint}${path}`, {\n      ...init,\n      headers: { ...this.headers(), ...(init?.headers ?? {}) },\n    });\n    if (!response.ok) {\n      let parsedBody: unknown;\n      try {\n        parsedBody = await response.json();\n      } catch {\n        parsedBody = await response.text();\n      }\n      const message = formatApiErrorForOperation({\n        operation,\n        error: parsedBody,\n        options: { status: response.status },\n      });\n      throw new VirtualKeysApiError(message, operation, parsedBody);\n    }\n    return (await response.json()) as T;\n  }\n\n  async list(): Promise<VirtualKey[]> {\n    const { data } = await this.request<{ data: VirtualKey[] }>(\n      \"list virtual keys\",\n      \"/api/gateway/v1/virtual-keys\",\n    );\n    return data;\n  }\n\n  async get(id: string): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `get virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,\n    );\n    return virtual_key;\n  }\n\n  async create(input: CreateVirtualKeyInput): Promise<VirtualKeyWithSecret> {\n    return this.request<VirtualKeyWithSecret>(\n      \"create virtual key\",\n      \"/api/gateway/v1/virtual-keys\",\n      { method: \"POST\", body: JSON.stringify(input) },\n    );\n  }\n\n  async update(id: string, input: UpdateVirtualKeyInput): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `update virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,\n      { method: \"PATCH\", body: JSON.stringify(input) },\n    );\n    return virtual_key;\n  }\n\n  async rotate(id: string): Promise<VirtualKeyWithSecret> {\n    return this.request<VirtualKeyWithSecret>(\n      `rotate virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,\n      { method: \"POST\" },\n    );\n  }\n\n  async revoke(id: string): Promise<VirtualKey> {\n    const { virtual_key } = await this.request<{ virtual_key: VirtualKey }>(\n      `revoke virtual key \"${id}\"`,\n      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,\n      { method: \"POST\" },\n    );\n    return virtual_key;\n  }\n}\n"]}

package/dist/chunk-QBNX5BQW.js

@@ -1,42 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
-
-
-var _chunkIQ5CSV4Djs = require('./chunk-IQ5CSV4D.js');
-
-// src/cli/utils/governance/resolveEndpoint.ts
-function resolveControlPlaneEndpoint(opts = {}) {
-  if (opts.flag) {
-    return { url: stripTrailingSlash(opts.flag), source: "flag" };
-  }
-  const env = process.env.LANGWATCH_ENDPOINT;
-  if (env && env.trim() !== "") {
-    return { url: stripTrailingSlash(env), source: "env" };
-  }
-  let cfg = opts.cfg;
-  if (cfg === void 0) {
-    try {
-      cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
-    } catch (e) {
-      cfg = void 0;
-    }
-  }
-  const persisted = cfg == null ? void 0 : cfg.control_plane_url;
-  if (persisted && persisted !== _chunkIQ5CSV4Djs.DEFAULT_ENDPOINT) {
-    return { url: stripTrailingSlash(persisted), source: "config" };
-  }
-  return { url: stripTrailingSlash(_chunkIQ5CSV4Djs.DEFAULT_ENDPOINT), source: "default" };
-}
-function resolveControlPlaneUrl(opts = {}) {
-  return resolveControlPlaneEndpoint(opts).url;
-}
-function stripTrailingSlash(url) {
-  return url.replace(/\/+$/, "");
-}
-
-
-
-
-exports.resolveControlPlaneEndpoint = resolveControlPlaneEndpoint; exports.resolveControlPlaneUrl = resolveControlPlaneUrl;
-//# sourceMappingURL=chunk-QBNX5BQW.js.map

package/dist/chunk-QBNX5BQW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-QBNX5BQW.js","../src/cli/utils/governance/resolveEndpoint.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACiCO,SAAS,2BAAA,CACd,KAAA,EAA+B,CAAC,CAAA,EACd;AAClB,EAAA,GAAA,CAAI,IAAA,CAAK,IAAA,EAAM;AACb,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG,MAAA,EAAQ,OAAO,CAAA;AAAA,EAC9D;AACA,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,kBAAA;AACxB,EAAA,GAAA,CAAI,IAAA,GAAO,GAAA,CAAI,IAAA,CAAK,EAAA,IAAM,EAAA,EAAI;AAC5B,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,GAAG,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA;AAAA,EACvD;AAGA,EAAA,IAAI,IAAA,EAAM,IAAA,CAAK,GAAA;AACf,EAAA,GAAA,CAAI,IAAA,IAAQ,KAAA,CAAA,EAAW;AACrB,IAAA,IAAI;AACF,MAAA,IAAA,EAAM,yCAAA,CAAW;AAAA,IACnB,EAAA,MAAA,CAAQ,CAAA,EAAA;AACN,MAAA,IAAA,EAAM,KAAA,CAAA;AAAA,IACR;AAAA,EACF;AAKA,EAAA,MAAM,UAAA,EAAY,IAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,GAAA,CAAK,iBAAA;AACvB,EAAA,GAAA,CAAI,UAAA,GAAa,UAAA,IAAc,iCAAA,EAAkB;AAC/C,IAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,SAAS,CAAA,EAAG,MAAA,EAAQ,SAAS,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,EAAE,GAAA,EAAK,kBAAA,CAAmB,iCAAgB,CAAA,EAAG,MAAA,EAAQ,UAAU,CAAA;AACxE;AAOO,SAAS,sBAAA,CACd,KAAA,EAA+B,CAAC,CAAA,EACxB;AACR,EAAA,OAAO,2BAAA,CAA4B,IAAI,CAAA,CAAE,GAAA;AAC3C;AAEA,SAAS,kBAAA,CAAmB,GAAA,EAAqB;AAC/C,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAC/B;ADhDA;AACA;AACE;AACA;AACF,2HAAC","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-QBNX5BQW.js","sourcesContent":[null,"/**\n * Single source of truth for resolving the LangWatch control-plane URL\n * across the CLI. Replaces the previous three drifted readers\n * (`endpoint.ts:getEndpoint`, `governance/config.ts:defaults`, and the\n * inline `process.env.LANGWATCH_ENDPOINT ?? ...` literal in\n * `commands/status.ts`) so every command sees the same value for the\n * same inputs.\n *\n * Priority (highest wins):\n *   1. opts.flag           — per-command override (e.g. `langwatch login --endpoint <url>`)\n *   2. LANGWATCH_ENDPOINT  — env var (CI / scripts)\n *   3. persisted config    — `~/.langwatch/config.json:control_plane_url` (daily driver)\n *   4. DEFAULT_ENDPOINT    — `https://app.langwatch.ai` (cloud default)\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\n\nimport { DEFAULT_ENDPOINT } from \"@/internal/constants\";\nimport { loadConfig } from \"./config\";\n\nexport interface ResolveEndpointOptions {\n  /** Per-command override flag value (e.g. `--endpoint`). NULL/empty ignored. */\n  flag?: string | null;\n  /** Optional pre-loaded config to reuse (skips disk read). */\n  cfg?: ReturnType<typeof loadConfig>;\n}\n\nexport interface ResolvedEndpoint {\n  /** The resolved URL with trailing slashes stripped. */\n  url: string;\n  /** Where the value came from — useful for `langwatch config list`. */\n  source: \"flag\" | \"env\" | \"config\" | \"default\";\n}\n\n/**\n * Resolve the control-plane endpoint per the documented priority order.\n *\n * Returns both the resolved URL and the source that won, so\n * `langwatch config list` can show the user where each value came from.\n */\nexport function resolveControlPlaneEndpoint(\n  opts: ResolveEndpointOptions = {},\n): ResolvedEndpoint {\n  if (opts.flag) {\n    return { url: stripTrailingSlash(opts.flag), source: \"flag\" };\n  }\n  const env = process.env.LANGWATCH_ENDPOINT;\n  if (env && env.trim() !== \"\") {\n    return { url: stripTrailingSlash(env), source: \"env\" };\n  }\n  // Reading the config involves disk I/O; only do it if we need to.\n  // Callers that already have a cfg in scope can pass it in to skip.\n  let cfg = opts.cfg;\n  if (cfg === undefined) {\n    try {\n      cfg = loadConfig();\n    } catch {\n      cfg = undefined;\n    }\n  }\n  // The persisted control_plane_url is populated EITHER by a prior\n  // `langwatch login --device` (snapshot of env at save time) OR by an\n  // explicit `langwatch config set endpoint <url>`. If it differs from\n  // the hardcoded default, treat it as a user choice.\n  const persisted = cfg?.control_plane_url;\n  if (persisted && persisted !== DEFAULT_ENDPOINT) {\n    return { url: stripTrailingSlash(persisted), source: \"config\" };\n  }\n  return { url: stripTrailingSlash(DEFAULT_ENDPOINT), source: \"default\" };\n}\n\n/**\n * Convenience for callers that just want the URL string and don't need\n * the source-attribution. Equivalent to\n * `resolveControlPlaneEndpoint(opts).url`.\n */\nexport function resolveControlPlaneUrl(\n  opts: ResolveEndpointOptions = {},\n): string {\n  return resolveControlPlaneEndpoint(opts).url;\n}\n\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n"]}

package/dist/chunk-S4JKLESF.js

@@ -1,124 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }
-
-var _chunkBRPEG3YQjs = require('./chunk-BRPEG3YQ.js');
-
-// src/cli/utils/governance/device-flow.ts
-var _os = require('os'); var os = _interopRequireWildcard(_os);
-var _promises = require('timers/promises');
-var DeviceFlowError = class extends Error {
-  constructor(kind, message) {
-    super(message);
-    this.kind = kind;
-    this.name = "DeviceFlowError";
-  }
-};
-async function startDeviceCode(opts, init = {}) {
-  const body = {};
-  if (init.credentialType) body.credential_type = init.credentialType;
-  const dc = await postJSON(opts, "/api/auth/cli/device-code", body);
-  if (!dc.interval || dc.interval <= 0) dc.interval = 5;
-  return dc;
-}
-function collectClientInfo() {
-  let hostname2 = "";
-  let uname = "";
-  try {
-    hostname2 = os.hostname();
-  } catch (e) {
-  }
-  try {
-    uname = os.userInfo().username;
-  } catch (e) {
-  }
-  return { hostname: hostname2, uname, platform: process.platform };
-}
-async function exchange(opts, deviceCode) {
-  const res = await rawPost(opts, "/api/auth/cli/exchange", {
-    device_code: deviceCode,
-    client_info: collectClientInfo()
-  });
-  switch (res.status) {
-    case 200: {
-      const body = await res.json();
-      if (!("kind" in body) || !body.kind) {
-        return _chunkBRPEG3YQjs.__spreadValues.call(void 0, { kind: "device_session" }, body);
-      }
-      return body;
-    }
-    case 428:
-      throw new DeviceFlowError("pending", "authorization pending");
-    case 410:
-      throw new DeviceFlowError("denied", "authorization denied");
-    case 408:
-      throw new DeviceFlowError("expired", "authorization request expired");
-    case 429:
-      throw new DeviceFlowError("slow_down", "polling too fast");
-    default: {
-      const body = await res.text().catch(() => "");
-      throw new DeviceFlowError("other", `unexpected status ${res.status}: ${body.slice(0, 256)}`);
-    }
-  }
-}
-async function pollUntilDone(opts, dc) {
-  let interval = dc.interval * 1e3;
-  const ceiling = 6e4;
-  const deadline = Date.now() + dc.expires_in * 1e3;
-  for (; ; ) {
-    if (Date.now() > deadline) {
-      throw new DeviceFlowError("expired", "authorization request expired");
-    }
-    await _promises.setTimeout.call(void 0, interval);
-    try {
-      return await exchange(opts, dc.device_code);
-    } catch (err) {
-      if (!(err instanceof DeviceFlowError)) throw err;
-      if (err.kind === "pending") continue;
-      if (err.kind === "slow_down") {
-        interval = Math.min(interval * 2, ceiling);
-        continue;
-      }
-      throw err;
-    }
-  }
-}
-async function logout(opts, refreshToken, accessToken) {
-  const body = { refresh_token: refreshToken };
-  if (accessToken) body.access_token = accessToken;
-  const res = await rawPost(opts, "/api/auth/cli/logout", body);
-  if (res.status === 200 || res.status === 401 || res.status === 404) return;
-  const text = await res.text().catch(() => "");
-  throw new DeviceFlowError("other", `logout failed (${res.status}): ${text.slice(0, 256)}`);
-}
-async function postJSON(opts, path, body) {
-  const res = await rawPost(opts, path, body);
-  if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new DeviceFlowError("other", `${path} \u2192 ${res.status}: ${text.slice(0, 256)}`);
-  }
-  return await res.json();
-}
-function rawPost(opts, path, body) {
-  var _a;
-  const url = opts.baseUrl.replace(/\/+$/, "") + path;
-  const f = (_a = opts.fetchImpl) != null ? _a : fetch;
-  return f(url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      Accept: "application/json",
-      // Origin enforcement on the server requires this for non-browser
-      // clients. The base URL is the same as the control plane, so
-      // mirroring it as Origin satisfies the same-origin gate.
-      Origin: opts.baseUrl.replace(/\/+$/, "")
-    },
-    body: JSON.stringify(body != null ? body : {})
-  });
-}
-
-
-
-
-
-
-exports.DeviceFlowError = DeviceFlowError; exports.startDeviceCode = startDeviceCode; exports.pollUntilDone = pollUntilDone; exports.logout = logout;
-//# sourceMappingURL=chunk-S4JKLESF.js.map

package/dist/chunk-S4JKLESF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-S4JKLESF.js","../src/cli/utils/governance/device-flow.ts"],"names":["hostname"],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACMA,+DAAoB;AACpB,2CAAmC;AA2F5B,IAAM,gBAAA,EAAN,MAAA,QAA8B,MAAM;AAAA,EACzC,WAAA,CAA4B,IAAA,EAAiF,OAAA,EAAiB;AAC5H,IAAA,KAAA,CAAM,OAAO,CAAA;AADa,IAAA,IAAA,CAAA,KAAA,EAAA,IAAA;AAE1B,IAAA,IAAA,CAAK,KAAA,EAAO,iBAAA;AAAA,EACd;AACF,CAAA;AAiBA,MAAA,SAAsB,eAAA,CACpB,IAAA,EACA,KAAA,EAA4C,CAAC,CAAA,EACxB;AACrB,EAAA,MAAM,KAAA,EAAgC,CAAC,CAAA;AACvC,EAAA,GAAA,CAAI,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,gBAAA,EAAkB,IAAA,CAAK,cAAA;AACrD,EAAA,MAAM,GAAA,EAAK,MAAM,QAAA,CAAqB,IAAA,EAAM,2BAAA,EAA6B,IAAI,CAAA;AAC7E,EAAA,GAAA,CAAI,CAAC,EAAA,CAAG,SAAA,GAAY,EAAA,CAAG,SAAA,GAAY,CAAA,EAAG,EAAA,CAAG,SAAA,EAAW,CAAA;AACpD,EAAA,OAAO,EAAA;AACT;AAYA,SAAS,iBAAA,CAAA,EAIP;AACA,EAAA,IAAIA,UAAAA,EAAW,EAAA;AACf,EAAA,IAAI,MAAA,EAAQ,EAAA;AACZ,EAAA,IAAI;AACF,IAAAA,UAAAA,EAAc,EAAA,CAAA,QAAA,CAAS,CAAA;AAAA,EACzB,EAAA,MAAA,CAAQ,CAAA,EAAA;AAAA,EAER;AACA,EAAA,IAAI;AACF,IAAA,MAAA,EAAW,EAAA,CAAA,QAAA,CAAS,CAAA,CAAE,QAAA;AAAA,EACxB,EAAA,MAAA,CAAQ,CAAA,EAAA;AAAA,EAGR;AACA,EAAA,OAAO,EAAE,QAAA,EAAAA,SAAAA,EAAU,KAAA,EAAO,QAAA,EAAU,OAAA,CAAQ,SAAS,CAAA;AACvD;AAQA,MAAA,SAAsB,QAAA,CACpB,IAAA,EACA,UAAA,EACyB;AACzB,EAAA,MAAM,IAAA,EAAM,MAAM,OAAA,CAAQ,IAAA,EAAM,wBAAA,EAA0B;AAAA,IACxD,WAAA,EAAa,UAAA;AAAA,IACb,WAAA,EAAa,iBAAA,CAAkB;AAAA,EACjC,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ;AAAA,IAClB,KAAK,GAAA,EAAK;AACR,MAAA,MAAM,KAAA,EAAQ,MAAM,GAAA,CAAI,IAAA,CAAK,CAAA;AAK7B,MAAA,GAAA,CAAI,CAAA,CAAE,OAAA,GAAU,IAAA,EAAA,GAAS,CAAC,IAAA,CAAK,IAAA,EAAM;AACnC,QAAA,OAAO,6CAAA,EAAE,IAAA,EAAM,iBAAA,CAAA,EAAsB,IAAA,CAAA;AAAA,MACvC;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,IACA,KAAK,GAAA;AACH,MAAA,MAAM,IAAI,eAAA,CAAgB,SAAA,EAAW,uBAAuB,CAAA;AAAA,IAC9D,KAAK,GAAA;AACH,MAAA,MAAM,IAAI,eAAA,CAAgB,QAAA,EAAU,sBAAsB,CAAA;AAAA,IAC5D,KAAK,GAAA;AACH,MAAA,MAAM,IAAI,eAAA,CAAgB,SAAA,EAAW,+BAA+B,CAAA;AAAA,IACtE,KAAK,GAAA;AACH,MAAA,MAAM,IAAI,eAAA,CAAgB,WAAA,EAAa,kBAAkB,CAAA;AAAA,IAC3D,OAAA,EAAS;AACP,MAAA,MAAM,KAAA,EAAO,MAAM,GAAA,CAAI,IAAA,CAAK,CAAA,CAAE,KAAA,CAAM,CAAA,EAAA,GAAM,EAAE,CAAA;AAC5C,MAAA,MAAM,IAAI,eAAA,CAAgB,OAAA,EAAS,CAAA,kBAAA,EAAqB,GAAA,CAAI,MAAM,CAAA,EAAA,EAAK,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA,CAAA;AAC3F,IAAA;AACF,EAAA;AACF;AAU2B;AACI,EAAA;AACb,EAAA;AAC8B,EAAA;AAErC,EAAA;AACoB,IAAA;AAC2C,MAAA;AACtE,IAAA;AACmB,IAAA;AACf,IAAA;AACwC,MAAA;AAC9B,IAAA;AACiC,MAAA;AACjB,MAAA;AACE,MAAA;AACa,QAAA;AACzC,QAAA;AACF,MAAA;AACM,MAAA;AACR,IAAA;AACF,EAAA;AACF;AAiCiB;AACoD,EAAA;AAC9B,EAAA;AACuB,EAAA;AAEQ,EAAA;AACxB,EAAA;AAC6C,EAAA;AAC3F;AAE6F;AACjD,EAAA;AAC7B,EAAA;AACiC,IAAA;AACuC,IAAA;AACrF,EAAA;AACuB,EAAA;AACzB;AAE0F;AAjS1F,EAAA;AAkSiD,EAAA;AACnB,EAAA;AACd,EAAA;AACJ,IAAA;AACC,IAAA;AACS,MAAA;AACR,MAAA;AAAA;AAAA;AAAA;AAI+B,MAAA;AACzC,IAAA;AAC+B,IAAA;AAChC,EAAA;AACH;AD5LgG;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-S4JKLESF.js","sourcesContent":[null,"/**\n * RFC 8628 device-code OAuth client for the `langwatch login --device`\n * flow. Targets the control plane's `/api/auth/cli/*` endpoints —\n * the same wire surface a custom CLI client would hit (documented in\n * `docs/ai-gateway/governance/admin-setup.mdx#cli-device-flow-rest-api`).\n *\n * Pure stdlib `fetch`, no axios — matches the rest of the typescript\n * CLI's HTTP style.\n */\n\nimport * as os from \"node:os\";\nimport { setTimeout as wait } from \"node:timers/promises\";\n\nexport interface DeviceCode {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete?: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface ExchangeUser {\n  id: string;\n  email: string;\n  name: string;\n}\n\nexport interface ExchangeOrganization {\n  id: string;\n  slug?: string;\n  name: string;\n}\n\nexport interface ExchangePersonalVK {\n  id: string;\n  secret: string;\n  prefix?: string;\n}\n\nexport interface ExchangeProject {\n  id: string;\n  slug: string;\n  name: string;\n}\n\n/**\n * The CLI device-code flow can mint two distinct credential types:\n *   - \"device_session\" — the user-scoped OAuth-style access+refresh\n *     token pair used by `langwatch claude/codex/...` wrappers.\n *   - \"project_api_key\" — the project-scoped SDK key\n *     (`Project.apiKey`) returned verbatim, used by SDK consumers\n *     and `langwatch sync/eval/prompt/...` commands.\n *\n * Caller selects via `startDeviceCode({ credentialType })`. Server\n * stamps the choice on the device-code record + flips the response\n * shape on /exchange. Same browser approval ceremony for both — only\n * the persist target differs (`~/.langwatch/config.json` vs `.env`).\n */\nexport type CredentialType = \"device_session\" | \"project_api_key\";\n\nexport interface ExchangeDeviceSessionResult {\n  kind: \"device_session\";\n  access_token: string;\n  refresh_token: string;\n  expires_in: number;\n  user: ExchangeUser;\n  organization: ExchangeOrganization;\n  default_personal_vk?: ExchangePersonalVK;\n  endpoint?: string;\n}\n\nexport interface ExchangeApiKeyResult {\n  kind: \"api_key\";\n  api_key: string;\n  project: ExchangeProject;\n  user: ExchangeUser;\n  organization: ExchangeOrganization;\n  endpoint?: string;\n}\n\nexport type ExchangeResult =\n  | ExchangeDeviceSessionResult\n  | ExchangeApiKeyResult;\n\n/**\n * Back-compat alias for the device-session shape. Pre-`f9fcc3927` server\n * builds returned the unkinded shape verbatim; the runtime normaliser\n * below maps that to `{ kind: 'device_session', ... }` so callers can\n * always assume the discriminated form.\n */\nexport type LegacyExchangeResult = Omit<\n  ExchangeDeviceSessionResult,\n  \"kind\"\n> & { kind?: \"device_session\" };\n\nexport interface RefreshResult {\n  access_token: string;\n  refresh_token: string;\n  expires_in: number;\n}\n\nexport class DeviceFlowError extends Error {\n  constructor(public readonly kind: \"pending\" | \"denied\" | \"expired\" | \"slow_down\" | \"unauthorized\" | \"other\", message: string) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceFlowOptions {\n  /** Control-plane base URL (e.g. https://app.langwatch.ai). */\n  baseUrl: string;\n  /** Optional fetch override for tests. */\n  fetchImpl?: typeof fetch;\n}\n\n/**\n * `POST /api/auth/cli/device-code` — mint a device-code + user-code pair.\n *\n * Optional `credentialType` selects what `/exchange` will return on\n * approval: a user-scoped device session (default) or a project-scoped\n * API key. Older servers ignore the field and stay on the device-session\n * shape — back-compat is the server's responsibility.\n */\nexport async function startDeviceCode(\n  opts: DeviceFlowOptions,\n  init: { credentialType?: CredentialType } = {},\n): Promise<DeviceCode> {\n  const body: Record<string, unknown> = {};\n  if (init.credentialType) body.credential_type = init.credentialType;\n  const dc = await postJSON<DeviceCode>(opts, \"/api/auth/cli/device-code\", body);\n  if (!dc.interval || dc.interval <= 0) dc.interval = 5;\n  return dc;\n}\n\n/**\n * Device fingerprint stamped onto the CLI session at /exchange time.\n * The control plane persists it on the access + refresh token records\n * so /me/sessions can render \"Mac (rchaves.local)\" instead of\n * \"Unknown device\" — multi-device users need this to revoke\n * individual sessions without nuking every device they're logged in\n * on (Ariana QA finding). See\n * `langwatch/src/server/routes/auth-cli.ts#clientInfoSchema` for the\n * server contract.\n */\nfunction collectClientInfo(): {\n  hostname: string;\n  uname: string;\n  platform: string;\n} {\n  let hostname = \"\";\n  let uname = \"\";\n  try {\n    hostname = os.hostname();\n  } catch {\n    // os.hostname() can throw on locked-down sandboxes; carry empty.\n  }\n  try {\n    uname = os.userInfo().username;\n  } catch {\n    // os.userInfo() throws when the uid has no /etc/passwd entry\n    // (some Docker images, CI sandboxes); carry empty.\n  }\n  return { hostname, uname, platform: process.platform };\n}\n\n/**\n * `POST /api/auth/cli/exchange` — single poll. Returns the access+refresh\n * token bundle on success (200), or throws DeviceFlowError with a\n * categorised `kind` so the caller can decide whether to keep polling\n * (`pending`, `slow_down`) or stop (`denied`, `expired`).\n */\nexport async function exchange(\n  opts: DeviceFlowOptions,\n  deviceCode: string,\n): Promise<ExchangeResult> {\n  const res = await rawPost(opts, \"/api/auth/cli/exchange\", {\n    device_code: deviceCode,\n    client_info: collectClientInfo(),\n  });\n  switch (res.status) {\n    case 200: {\n      const body = (await res.json()) as\n        | ExchangeResult\n        | LegacyExchangeResult;\n      // Pre-f9fcc3927 servers returned the device-session shape without\n      // a `kind` field. Normalise so callers can always discriminate.\n      if (!(\"kind\" in body) || !body.kind) {\n        return { kind: \"device_session\", ...(body) };\n      }\n      return body as ExchangeResult;\n    }\n    case 428:\n      throw new DeviceFlowError(\"pending\", \"authorization pending\");\n    case 410:\n      throw new DeviceFlowError(\"denied\", \"authorization denied\");\n    case 408:\n      throw new DeviceFlowError(\"expired\", \"authorization request expired\");\n    case 429:\n      throw new DeviceFlowError(\"slow_down\", \"polling too fast\");\n    default: {\n      const body = await res.text().catch(() => \"\");\n      throw new DeviceFlowError(\"other\", `unexpected status ${res.status}: ${body.slice(0, 256)}`);\n    }\n  }\n}\n\n/**\n * Poll `exchange` at the cadence the server requested until the user\n * approves, denies, or the device-code expires. Honours RFC 8628 §3.5\n * by doubling the polling interval on `slow_down` responses.\n */\nexport async function pollUntilDone(\n  opts: DeviceFlowOptions,\n  dc: DeviceCode,\n): Promise<ExchangeResult> {\n  let interval = dc.interval * 1000;\n  const ceiling = 60_000;\n  const deadline = Date.now() + dc.expires_in * 1000;\n\n  for (;;) {\n    if (Date.now() > deadline) {\n      throw new DeviceFlowError(\"expired\", \"authorization request expired\");\n    }\n    await wait(interval);\n    try {\n      return await exchange(opts, dc.device_code);\n    } catch (err) {\n      if (!(err instanceof DeviceFlowError)) throw err;\n      if (err.kind === \"pending\") continue;\n      if (err.kind === \"slow_down\") {\n        interval = Math.min(interval * 2, ceiling);\n        continue;\n      }\n      throw err;\n    }\n  }\n}\n\n/**\n * `POST /api/auth/cli/refresh` — rotate access and refresh tokens.\n * 401 means the refresh token has been revoked server-side (admin\n * disable / off-boarding); the caller should clear local state.\n */\nexport async function refresh(\n  opts: DeviceFlowOptions,\n  refreshToken: string,\n): Promise<RefreshResult> {\n  const res = await rawPost(opts, \"/api/auth/cli/refresh\", { refresh_token: refreshToken });\n  if (res.status === 401) {\n    throw new DeviceFlowError(\"unauthorized\", \"session revoked — re-authenticate\");\n  }\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new DeviceFlowError(\"other\", `refresh failed (${res.status}): ${body.slice(0, 256)}`);\n  }\n  return (await res.json()) as RefreshResult;\n}\n\n/**\n * `POST /api/auth/cli/logout` — server-side revoke a refresh token\n * AND its paired access token (per `e7a042c69`: a stolen access\n * token used to survive logout for up to 1h until expiry; sending\n * both closes the gap). Idempotent — 200 on already-revoked or\n * unknown tokens.\n */\nexport async function logout(\n  opts: DeviceFlowOptions,\n  refreshToken: string,\n  accessToken?: string,\n): Promise<void> {\n  const body: Record<string, string> = { refresh_token: refreshToken };\n  if (accessToken) body.access_token = accessToken;\n  const res = await rawPost(opts, \"/api/auth/cli/logout\", body);\n  // 401/404 mean \"already gone\" — that's success for logout.\n  if (res.status === 200 || res.status === 401 || res.status === 404) return;\n  const text = await res.text().catch(() => \"\");\n  throw new DeviceFlowError(\"other\", `logout failed (${res.status}): ${text.slice(0, 256)}`);\n}\n\nasync function postJSON<T>(opts: DeviceFlowOptions, path: string, body: unknown): Promise<T> {\n  const res = await rawPost(opts, path, body);\n  if (!res.ok) {\n    const text = await res.text().catch(() => \"\");\n    throw new DeviceFlowError(\"other\", `${path} → ${res.status}: ${text.slice(0, 256)}`);\n  }\n  return (await res.json()) as T;\n}\n\nfunction rawPost(opts: DeviceFlowOptions, path: string, body: unknown): Promise<Response> {\n  const url = opts.baseUrl.replace(/\\/+$/, \"\") + path;\n  const f = opts.fetchImpl ?? fetch;\n  return f(url, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Accept: \"application/json\",\n      // Origin enforcement on the server requires this for non-browser\n      // clients. The base URL is the same as the control plane, so\n      // mirroring it as Origin satisfies the same-origin gate.\n      Origin: opts.baseUrl.replace(/\\/+$/, \"\"),\n    },\n    body: JSON.stringify(body ?? {}),\n  });\n}\n"]}

package/dist/chunk-SABJA7P6.mjs

@@ -1,40 +0,0 @@
-import {
-  resolveControlPlaneUrl
-} from "./chunk-NEQB4U3F.mjs";
-
-// src/cli/commands/virtual-keys/_shared.ts
-function virtualKeyDetailUrl(vkId) {
-  const uiOverride = process.env.LANGWATCH_UI_ENDPOINT;
-  const base = (uiOverride != null ? uiOverride : resolveControlPlaneUrl()).replace(/\/+$/, "");
-  if (!base) return "";
-  return `${base}/settings/gateway/virtual-keys/${encodeURIComponent(vkId)}`;
-}
-var SCOPE_TYPES = ["ORGANIZATION", "TEAM", "PROJECT"];
-function parseScopeArg(raw) {
-  const trimmed = raw.trim();
-  const colon = trimmed.indexOf(":");
-  if (colon < 1 || colon === trimmed.length - 1) {
-    throw new Error(`--scope value "${raw}" must be in the form TYPE:id (e.g. ORG:acme, TEAM:platform, PROJECT:demo)`);
-  }
-  const typeRaw = trimmed.slice(0, colon).toUpperCase();
-  const scopeId = trimmed.slice(colon + 1).trim();
-  const scopeType = typeRaw === "ORG" ? "ORGANIZATION" : SCOPE_TYPES.includes(typeRaw) ? typeRaw : null;
-  if (!scopeType) {
-    throw new Error(`--scope type "${typeRaw}" must be one of ORG | ORGANIZATION | TEAM | PROJECT`);
-  }
-  if (!scopeId) {
-    throw new Error(`--scope value "${raw}" is missing the id after the colon`);
-  }
-  return { scope_type: scopeType, scope_id: scopeId };
-}
-function formatScope(scope) {
-  const prefix = scope.scope_type === "ORGANIZATION" ? "ORG" : scope.scope_type;
-  return `${prefix}:${scope.scope_id}`;
-}
-
-export {
-  virtualKeyDetailUrl,
-  parseScopeArg,
-  formatScope
-};
-//# sourceMappingURL=chunk-SABJA7P6.mjs.map