langwatch 0.33.1 → 0.34.0

package/dist/login-Y3TEPZOC.js

@@ -0,0 +1,279 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+
+var _chunk5M6GLAIGjs = require('./chunk-5M6GLAIG.js');
+require('./chunk-ZA5BH7IZ.js');
+
+
+var _chunkSNKGSX5Ijs = require('./chunk-SNKGSX5I.js');
+
+
+
+var _chunkOGAE7BVQjs = require('./chunk-OGAE7BVQ.js');
+
+
+var _chunkGPGJNBPPjs = require('./chunk-GPGJNBPP.js');
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+require('./chunk-BRPEG3YQ.js');
+
+// src/cli/commands/login.ts
+var _fs = require('fs'); var fs = _interopRequireWildcard(_fs);
+var _path = require('path'); var path = _interopRequireWildcard(_path);
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _prompts = require('prompts'); var _prompts2 = _interopRequireDefault(_prompts);
+function printAgentHintBanner() {
+  console.log(
+    _chalk2.default.gray(
+      "Running interactively. To skip these prompts (CI / agents that already have a credential):"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --device                   AI tools / SSO (claude, codex, gemini, opencode)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --project                  project SDK key into .env via browser (SDK, evals, prompts)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --api-key <KEY>            project SDK key you already have, into .env"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --token <TOKEN>            pre-minted device session (writes ~/.langwatch/config.json)"
+    )
+  );
+  console.log(
+    _chalk2.default.gray(
+      "  --endpoint <URL>           self-hosted instance URL"
+    )
+  );
+  console.log();
+}
+var updateEnvFile = (apiKey) => {
+  const envPath = path.join(process.cwd(), ".env");
+  if (!fs.existsSync(envPath)) {
+    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}
+`);
+    return { created: true, updated: false, path: envPath };
+  }
+  const content = fs.readFileSync(envPath, "utf-8");
+  const lines = content.split("\n");
+  let found = false;
+  const updatedLines = lines.map((line) => {
+    if (line.startsWith("LANGWATCH_API_KEY=")) {
+      found = true;
+      return `LANGWATCH_API_KEY=${apiKey}`;
+    }
+    return line;
+  });
+  if (!found) {
+    if (content.endsWith("\n") || content === "") {
+      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);
+    } else {
+      updatedLines.push("", `LANGWATCH_API_KEY=${apiKey}`);
+    }
+  }
+  fs.writeFileSync(envPath, updatedLines.join("\n"));
+  return { created: false, updated: found, path: envPath };
+};
+var loginCommand = async (options) => {
+  var _a, _b;
+  try {
+    const endpointFromEnv = (_a = process.env.LANGWATCH_ENDPOINT) == null ? void 0 : _a.trim();
+    const presetEndpoint = (_b = options == null ? void 0 : options.endpoint) != null ? _b : endpointFromEnv;
+    if (presetEndpoint) {
+      const trimmed = presetEndpoint.replace(/\/+$/, "");
+      const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+      cfg.control_plane_url = trimmed;
+      _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+    }
+    if (options == null ? void 0 : options.token) {
+      const token = options.token.trim();
+      if (token.length < 10) {
+        console.error(_chalk2.default.red("Error: token seems too short. Please check and try again."));
+        process.exit(1);
+      }
+      const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+      cfg.access_token = token;
+      _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      console.log(_chalk2.default.green("\u2713 device-session token saved"));
+      console.log(_chalk2.default.gray("  ~/.langwatch/config.json"));
+      return;
+    }
+    if (options == null ? void 0 : options.device) {
+      await _chunk5M6GLAIGjs.runDeviceFlowLogin.call(void 0, { browser: options.browser });
+      return;
+    }
+    if (options == null ? void 0 : options.project) {
+      await _chunk5M6GLAIGjs.runUnifiedLoginFlow.call(void 0, {
+        kind: "project_api_key",
+        browser: options.browser
+      });
+      return;
+    }
+    if (options == null ? void 0 : options.apiKey) {
+      const apiKey = options.apiKey.trim();
+      if (apiKey.length < 10) {
+        console.error(_chalk2.default.red("Error: API key seems too short. Please check and try again."));
+        process.exit(1);
+      }
+      const envResult = updateEnvFile(apiKey);
+      console.log(_chalk2.default.green("API key saved successfully."));
+      if (envResult.created) {
+        console.log(_chalk2.default.gray(`Created .env file at ${envResult.path}`));
+      } else if (envResult.updated) {
+        console.log(_chalk2.default.gray(`Updated existing API key in ${envResult.path}`));
+      } else {
+        console.log(_chalk2.default.gray(`Added API key to ${envResult.path}`));
+      }
+      return;
+    }
+    if (!process.stdin.isTTY) {
+      console.log(
+        _chalk2.default.gray(
+          "No login mode given. Defaulting to project login (writes LANGWATCH_API_KEY to .env). Force it with --project."
+        )
+      );
+      console.log(
+        _chalk2.default.gray(
+          "For AI-tools login (claude, codex, gemini, opencode), re-run: langwatch login --device"
+        )
+      );
+      console.log();
+      await _chunk5M6GLAIGjs.runUnifiedLoginFlow.call(void 0, {
+        kind: "project_api_key",
+        browser: options == null ? void 0 : options.browser
+      });
+      return;
+    }
+    printAgentHintBanner();
+    console.log(_chalk2.default.blue("\u{1F510} LangWatch Login"));
+    console.log();
+    if (!(options == null ? void 0 : options.endpoint)) {
+      const current = _chunkSNKGSX5Ijs.resolveControlPlaneEndpoint.call(void 0, );
+      const hasCustomEndpoint = current.url !== _chunkGPGJNBPPjs.DEFAULT_ENDPOINT;
+      const cloudChoice = {
+        title: "LangWatch Cloud",
+        description: "app.langwatch.ai",
+        value: "cloud"
+      };
+      const choices = hasCustomEndpoint ? [
+        {
+          title: `Self-hosted instance (${current.url})`,
+          description: "Keep using your current endpoint",
+          value: "keep"
+        },
+        {
+          title: "Self-hosted instance (different endpoint)",
+          description: "Point at another LangWatch deployment",
+          value: "self-hosted"
+        },
+        cloudChoice
+      ] : [
+        cloudChoice,
+        {
+          title: "Self-hosted instance",
+          description: "Your company's LangWatch deployment (custom URL)",
+          value: "self-hosted"
+        }
+      ];
+      const where = await _prompts2.default.call(void 0, {
+        type: "select",
+        name: "where",
+        message: "Where do you want to log in?",
+        choices,
+        initial: 0
+      });
+      if (!where.where) {
+        console.log(_chalk2.default.yellow("Login cancelled"));
+        process.exit(0);
+      }
+      const cfg = _chunkOGAE7BVQjs.loadConfig.call(void 0, );
+      if (where.where === "cloud") {
+        cfg.control_plane_url = _chunkGPGJNBPPjs.DEFAULT_ENDPOINT;
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      } else if (where.where === "keep") {
+        cfg.control_plane_url = current.url;
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      } else if (where.where === "self-hosted") {
+        const url = await _prompts2.default.call(void 0, {
+          type: "text",
+          name: "url",
+          message: "Self-hosted LangWatch URL (e.g. https://lw.acme.internal):",
+          validate: (v) => {
+            try {
+              const parsed = new URL(v);
+              if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+                return "URL must start with http(s)://";
+              }
+              return true;
+            } catch (e) {
+              return "URL must be absolute (https://...)";
+            }
+          }
+        });
+        if (!url.url) {
+          console.log(_chalk2.default.yellow("Login cancelled"));
+          process.exit(0);
+        }
+        cfg.control_plane_url = url.url.replace(/\/+$/, "");
+        _chunkOGAE7BVQjs.saveConfig.call(void 0, cfg);
+      }
+    }
+    const mode = await _prompts2.default.call(void 0, {
+      type: "select",
+      name: "mode",
+      message: "How do you want to use LangWatch?",
+      choices: [
+        {
+          title: "AI tools / agentic flows",
+          description: "claude, codex, cursor, gemini, opencode - device-flow SSO",
+          value: "device"
+        },
+        {
+          title: "Project / SDK API key",
+          description: "langwatch eval, sync, prompts, SDK auto-instrumentation - writes .env",
+          value: "api-key"
+        },
+        {
+          title: "Both",
+          description: "Run both flows in sequence",
+          value: "both"
+        }
+      ],
+      initial: 0
+    });
+    if (!mode.mode) {
+      console.log(_chalk2.default.yellow("Login cancelled"));
+      process.exit(0);
+    }
+    if (mode.mode === "device" || mode.mode === "both") {
+      await _chunk5M6GLAIGjs.runDeviceFlowLogin.call(void 0, { browser: options == null ? void 0 : options.browser });
+    }
+    if (mode.mode === "api-key" || mode.mode === "both") {
+      await _chunk5M6GLAIGjs.runUnifiedLoginFlow.call(void 0, {
+        kind: "project_api_key",
+        browser: options == null ? void 0 : options.browser
+      });
+    }
+    return;
+  } catch (error) {
+    console.error(
+      _chalk2.default.red(
+        `Error during login: ${_chunkC5Y772G7js.formatApiErrorMessage.call(void 0, { error })}`
+      )
+    );
+    process.exit(1);
+  }
+};
+
+
+exports.loginCommand = loginCommand;
+//# sourceMappingURL=login-Y3TEPZOC.js.map

package/dist/login-Y3TEPZOC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/login-Y3TEPZOC.js","../src/cli/commands/login.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,sDAA4B;AAC5B,+BAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B,+BAA4B;AAC5B;AACA;ACpBA,+DAAoB;AACpB,uEAAsB;AACtB,4EAAkB;AAClB,oFAAoB;AAsBpB,SAAS,oBAAA,CAAA,EAA6B;AACpC,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA;AAAA,IACN,eAAA,CAAM,IAAA;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAA;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA;AACd;AAEA,IAAM,cAAA,EAAgB,CACpB,MAAA,EAAA,GACyD;AACzD,EAAA,MAAM,QAAA,EAAe,IAAA,CAAA,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,CAAA,EAAG,MAAM,CAAA;AAG/C,EAAA,GAAA,CAAI,CAAI,EAAA,CAAA,UAAA,CAAW,OAAO,CAAA,EAAG;AAE3B,IAAG,EAAA,CAAA,aAAA,CAAc,OAAA,EAAS,CAAA,kBAAA,EAAqB,MAAM,CAAA;AAAA,CAAI,CAAA;AACzD,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AAAA,EACxD;AAGA,EAAA,MAAM,QAAA,EAAa,EAAA,CAAA,YAAA,CAAa,OAAA,EAAS,OAAO,CAAA;AAChD,EAAA,MAAM,MAAA,EAAQ,OAAA,CAAQ,KAAA,CAAM,IAAI,CAAA;AAGhC,EAAA,IAAI,MAAA,EAAQ,KAAA;AACZ,EAAA,MAAM,aAAA,EAAe,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAA,GAAS;AACvC,IAAA,GAAA,CAAI,IAAA,CAAK,UAAA,CAAW,oBAAoB,CAAA,EAAG;AACzC,MAAA,MAAA,EAAQ,IAAA;AACR,MAAA,OAAO,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA;AACpC,IAAA;AACO,IAAA;AACR,EAAA;AAEW,EAAA;AAEoB,IAAA;AACV,MAAA;AACb,IAAA;AACiB,MAAA;AACxB,IAAA;AACF,EAAA;AAEuC,EAAA;AACL,EAAA;AACpC;AAWoB;AA3GpB,EAAA;AA4GM,EAAA;AAUsB,IAAA;AACD,IAAA;AACH,IAAA;AACa,MAAA;AACR,MAAA;AACC,MAAA;AACV,MAAA;AAChB,IAAA;AAMI,IAAA;AAC+B,MAAA;AACV,MAAA;AACG,QAAA;AACV,QAAA;AAChB,MAAA;AACuB,MAAA;AACJ,MAAA;AAKL,MAAA;AACU,MAAA;AACD,MAAA;AACvB,MAAA;AACF,IAAA;AAMI,IAAA;AACyB,MAAA;AAC3B,MAAA;AACF,IAAA;AAQI,IAAA;AACwB,MAAA;AAClB,QAAA;AACW,QAAA;AAClB,MAAA;AACD,MAAA;AACF,IAAA;AAGI,IAAA;AACiC,MAAA;AACX,MAAA;AACE,QAAA;AACV,QAAA;AAChB,MAAA;AAEgC,MAAA;AACR,MAAA;AACD,MAAA;AACE,QAAA;AACK,MAAA;AACL,QAAA;AAClB,MAAA;AACkB,QAAA;AACzB,MAAA;AACA,MAAA;AACF,IAAA;AAS0B,IAAA;AAChB,MAAA;AACA,QAAA;AACJ,UAAA;AACF,QAAA;AACF,MAAA;AACQ,MAAA;AACA,QAAA;AACJ,UAAA;AACF,QAAA;AACF,MAAA;AACY,MAAA;AACc,MAAA;AAClB,QAAA;AACG,QAAA;AACV,MAAA;AACD,MAAA;AACF,IAAA;AAKqB,IAAA;AAEE,IAAA;AACX,IAAA;AAQP,IAAA;AAKa,MAAA;AACkB,MAAA;AAEd,MAAA;AACX,QAAA;AACM,QAAA;AACN,QAAA;AACT,MAAA;AACgB,MAAA;AAEV,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AAEF,MAAA;AACE,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACF,MAAA;AAEwB,MAAA;AACpB,QAAA;AACA,QAAA;AACG,QAAA;AACT,QAAA;AACS,QAAA;AACV,MAAA;AACiB,MAAA;AACS,QAAA;AACX,QAAA;AAChB,MAAA;AAEuB,MAAA;AACM,MAAA;AAIH,QAAA;AACV,QAAA;AACmB,MAAA;AACD,QAAA;AAClB,QAAA;AACW,MAAA;AACC,QAAA;AAClB,UAAA;AACA,UAAA;AACG,UAAA;AACgB,UAAA;AACnB,YAAA;AACsB,cAAA;AACA,cAAA;AACf,gBAAA;AACT,cAAA;AACO,cAAA;AACD,YAAA;AACC,cAAA;AACT,YAAA;AACF,UAAA;AACD,QAAA;AACa,QAAA;AACa,UAAA;AACX,UAAA;AAChB,QAAA;AAC4C,QAAA;AAC9B,QAAA;AAChB,MAAA;AACF,IAAA;AAG2B,IAAA;AACnB,MAAA;AACA,MAAA;AACG,MAAA;AACA,MAAA;AACP,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACA,QAAA;AACS,UAAA;AACM,UAAA;AACN,UAAA;AACT,QAAA;AACF,MAAA;AACS,MAAA;AACV,IAAA;AACe,IAAA;AACW,MAAA;AACX,MAAA;AAChB,IAAA;AAEmC,IAAA;AACN,MAAA;AAC7B,IAAA;AACoC,IAAA;AAMR,MAAA;AAClB,QAAA;AACG,QAAA;AACV,MAAA;AACH,IAAA;AACA,IAAA;AACc,EAAA;AACN,IAAA;AACA,MAAA;AAEF,QAAA;AAEJ,MAAA;AACF,IAAA;AACc,IAAA;AAChB,EAAA;AACF;AD/FyC;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/login-Y3TEPZOC.js","sourcesContent":[null,"import * as fs from \"fs\";\nimport * as path from \"path\";\nimport chalk from \"chalk\";\nimport prompts from \"prompts\";\nimport { formatApiErrorMessage } from \"@/client-sdk/services/_shared/format-api-error\";\nimport {\n  runDeviceFlowLogin,\n  runUnifiedLoginFlow,\n} from \"@/cli/utils/governance/login-flow\";\nimport {\n  loadConfig,\n  saveConfig,\n} from \"@/cli/utils/governance/config\";\nimport { resolveControlPlaneEndpoint } from \"@/cli/utils/governance/resolveEndpoint\";\nimport { DEFAULT_ENDPOINT } from \"@/internal/constants\";\n\n/**\n * Always-on agent-hint banner shown above the interactive prompts on\n * `langwatch login` (no flags). Some agent harnesses fake a TTY but can't\n * actually answer prompts — this banner names the escape-hatch flags so\n * the agent (or the human staring at the stuck prompt) can re-invoke\n * with the right flag and proceed.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\nfunction printAgentHintBanner(): void {\n  console.log(\n    chalk.gray(\n      \"Running interactively. To skip these prompts (CI / agents that already have a credential):\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --device                   AI tools / SSO (claude, codex, gemini, opencode)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --project                  project SDK key into .env via browser (SDK, evals, prompts)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --api-key <KEY>            project SDK key you already have, into .env\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --token <TOKEN>            pre-minted device session (writes ~/.langwatch/config.json)\",\n    ),\n  );\n  console.log(\n    chalk.gray(\n      \"  --endpoint <URL>           self-hosted instance URL\",\n    ),\n  );\n  console.log();\n}\n\nconst updateEnvFile = (\n  apiKey: string,\n): { created: boolean; updated: boolean; path: string } => {\n  const envPath = path.join(process.cwd(), \".env\");\n\n  // Check if .env exists\n  if (!fs.existsSync(envPath)) {\n    // Create new .env file\n    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}\\n`);\n    return { created: true, updated: false, path: envPath };\n  }\n\n  // Read existing .env file\n  const content = fs.readFileSync(envPath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n\n  // Check if LANGWATCH_API_KEY already exists and update it\n  let found = false;\n  const updatedLines = lines.map((line) => {\n    if (line.startsWith(\"LANGWATCH_API_KEY=\")) {\n      found = true;\n      return `LANGWATCH_API_KEY=${apiKey}`;\n    }\n    return line;\n  });\n\n  if (!found) {\n    // Add to end of file\n    if (content.endsWith(\"\\n\") || content === \"\") {\n      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);\n    } else {\n      updatedLines.push(\"\", `LANGWATCH_API_KEY=${apiKey}`);\n    }\n  }\n\n  fs.writeFileSync(envPath, updatedLines.join(\"\\n\"));\n  return { created: false, updated: found, path: envPath };\n};\n\nexport const loginCommand = async (\n  options?: {\n    apiKey?: string;\n    device?: boolean;\n    project?: boolean;\n    browser?: string;\n    endpoint?: string;\n    token?: string;\n  },\n): Promise<void> => {\n  try {\n    // Honor `--endpoint` flag OR `LANGWATCH_ENDPOINT` env. Persist the\n    // resolved value BEFORE the chosen flow runs so subsequent reads\n    // (in the device flow, the API-key flow, any sub-command spawned\n    // later) see the right control-plane URL. The 4-source resolver\n    // (flag > env > config > default) honors this value via the\n    // persisted-config layer for any flow that doesn't explicitly take\n    // a flag. The env var has the same precedence as the flag for the\n    // login flow itself so users running `LANGWATCH_ENDPOINT=... langwatch\n    // login` skip the cloud/self-hosted picker.\n    const endpointFromEnv = process.env.LANGWATCH_ENDPOINT?.trim();\n    const presetEndpoint = options?.endpoint ?? endpointFromEnv;\n    if (presetEndpoint) {\n      const trimmed = presetEndpoint.replace(/\\/+$/, \"\");\n      const cfg = loadConfig();\n      cfg.control_plane_url = trimmed;\n      saveConfig(cfg);\n    }\n\n    // --token: pre-minted device-session escape hatch (CI / agent contexts\n    // where the token was minted via the dashboard 'Personal Access Tokens'\n    // surface). No browser, no prompts — just persist the token so\n    // subsequent `langwatch claude/codex/...` invocations can use it.\n    if (options?.token) {\n      const token = options.token.trim();\n      if (token.length < 10) {\n        console.error(chalk.red(\"Error: token seems too short. Please check and try again.\"));\n        process.exit(1);\n      }\n      const cfg = loadConfig();\n      cfg.access_token = token;\n      // No refresh_token / expires_at — that's the trade-off of bypassing\n      // the device flow. The wrapper auto-login will mint a real session\n      // if this token expires, since loadConfig+isLoggedIn only checks\n      // access_token presence.\n      saveConfig(cfg);\n      console.log(chalk.green(\"✓ device-session token saved\"));\n      console.log(chalk.gray(\"  ~/.langwatch/config.json\"));\n      return;\n    }\n\n    // Device-flow mode: SSO via the control plane's RFC 8628 endpoints,\n    // mints a personal virtual key bound to the user. This is the\n    // governance-plane onboarding for enterprise users, distinct from the\n    // single-user API-key flow below.\n    if (options?.device) {\n      await runDeviceFlowLogin({ browser: options.browser });\n      return;\n    }\n\n    // --project: force PROJECT login (mint a project SDK key via the browser,\n    // write it to $CWD/.env). Symmetric to --device, and the explicit form of\n    // what a non-TTY context already defaults to. Use this when you want a\n    // real project's key for the SDK / `langwatch eval` / prompts rather than\n    // a personal device session. No \"where\"/\"how\" prompts; the project is\n    // picked in the browser.\n    if (options?.project) {\n      await runUnifiedLoginFlow({\n        kind: \"project_api_key\",\n        browser: options.browser,\n      });\n      return;\n    }\n\n    // Non-interactive mode: --api-key flag provided\n    if (options?.apiKey) {\n      const apiKey = options.apiKey.trim();\n      if (apiKey.length < 10) {\n        console.error(chalk.red(\"Error: API key seems too short. Please check and try again.\"));\n        process.exit(1);\n      }\n\n      const envResult = updateEnvFile(apiKey);\n      console.log(chalk.green(\"API key saved successfully.\"));\n      if (envResult.created) {\n        console.log(chalk.gray(`Created .env file at ${envResult.path}`));\n      } else if (envResult.updated) {\n        console.log(chalk.gray(`Updated existing API key in ${envResult.path}`));\n      } else {\n        console.log(chalk.gray(`Added API key to ${envResult.path}`));\n      }\n      return;\n    }\n\n    // Interactive mode (no flags). On a non-TTY context (CI, an agent's\n    // piped stdin) we cannot prompt. Erroring here used to nudge agents\n    // toward `--device`, which signs them into a personal device-session and\n    // silently routed their evaluations to a personal project. Default to\n    // PROJECT login instead: it writes a real project's key to `.env`, which\n    // is what the SDK, `langwatch eval`, and the skills expect. AI-tools\n    // login stays explicit behind `--device`.\n    if (!process.stdin.isTTY) {\n      console.log(\n        chalk.gray(\n          \"No login mode given. Defaulting to project login (writes LANGWATCH_API_KEY to .env). Force it with --project.\",\n        ),\n      );\n      console.log(\n        chalk.gray(\n          \"For AI-tools login (claude, codex, gemini, opencode), re-run: langwatch login --device\",\n        ),\n      );\n      console.log();\n      await runUnifiedLoginFlow({\n        kind: \"project_api_key\",\n        browser: options?.browser,\n      });\n      return;\n    }\n\n    // Always-on agent-hint banner — fake-TTY agents see this BEFORE the\n    // prompt block so they (or the human watching) can re-invoke with the\n    // right flag instead of staring at a stuck prompt.\n    printAgentHintBanner();\n\n    console.log(chalk.blue(\"🔐 LangWatch Login\"));\n    console.log();\n\n    // Q1 — endpoint (cloud vs self-hosted). Skipped if --endpoint was\n    // passed (already persisted above). The chosen endpoint is persisted to\n    // ~/.langwatch/config.json on EVERY branch so the subsequent\n    // `runUnifiedLoginFlow`/`runDeviceFlowLogin` call (which reads\n    // control_plane_url directly) and every later CLI command's resolver read\n    // target the right host with no env-vs-config ambiguity.\n    if (!options?.endpoint) {\n      // When the user already resolved a non-cloud endpoint (local dev or a\n      // self-hosted deployment via LANGWATCH_ENDPOINT or persisted config),\n      // default to keeping it but still offer to switch endpoint or jump to\n      // Cloud. On a fresh install Cloud stays the priority default.\n      const current = resolveControlPlaneEndpoint();\n      const hasCustomEndpoint = current.url !== DEFAULT_ENDPOINT;\n\n      const cloudChoice = {\n        title: \"LangWatch Cloud\",\n        description: \"app.langwatch.ai\",\n        value: \"cloud\",\n      };\n      const choices = hasCustomEndpoint\n        ? [\n            {\n              title: `Self-hosted instance (${current.url})`,\n              description: \"Keep using your current endpoint\",\n              value: \"keep\",\n            },\n            {\n              title: \"Self-hosted instance (different endpoint)\",\n              description: \"Point at another LangWatch deployment\",\n              value: \"self-hosted\",\n            },\n            cloudChoice,\n          ]\n        : [\n            cloudChoice,\n            {\n              title: \"Self-hosted instance\",\n              description: \"Your company's LangWatch deployment (custom URL)\",\n              value: \"self-hosted\",\n            },\n          ];\n\n      const where = await prompts({\n        type: \"select\",\n        name: \"where\",\n        message: \"Where do you want to log in?\",\n        choices,\n        initial: 0,\n      });\n      if (!where.where) {\n        console.log(chalk.yellow(\"Login cancelled\"));\n        process.exit(0);\n      }\n\n      const cfg = loadConfig();\n      if (where.where === \"cloud\") {\n        // Always repoint to cloud, overriding any stale local control_plane_url.\n        // Otherwise the device flow would dial the old localhost host and fail\n        // with ECONNREFUSED.\n        cfg.control_plane_url = DEFAULT_ENDPOINT;\n        saveConfig(cfg);\n      } else if (where.where === \"keep\") {\n        cfg.control_plane_url = current.url;\n        saveConfig(cfg);\n      } else if (where.where === \"self-hosted\") {\n        const url = await prompts({\n          type: \"text\",\n          name: \"url\",\n          message: \"Self-hosted LangWatch URL (e.g. https://lw.acme.internal):\",\n          validate: (v: string) => {\n            try {\n              const parsed = new URL(v);\n              if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") {\n                return \"URL must start with http(s)://\";\n              }\n              return true;\n            } catch {\n              return \"URL must be absolute (https://...)\";\n            }\n          },\n        });\n        if (!url.url) {\n          console.log(chalk.yellow(\"Login cancelled\"));\n          process.exit(0);\n        }\n        cfg.control_plane_url = (url.url as string).replace(/\\/+$/, \"\");\n        saveConfig(cfg);\n      }\n    }\n\n    // Q2 — auth mode (AI tools = device-flow vs Project SDK = API key)\n    const mode = await prompts({\n      type: \"select\",\n      name: \"mode\",\n      message: \"How do you want to use LangWatch?\",\n      choices: [\n        {\n          title: \"AI tools / agentic flows\",\n          description: \"claude, codex, cursor, gemini, opencode - device-flow SSO\",\n          value: \"device\",\n        },\n        {\n          title: \"Project / SDK API key\",\n          description: \"langwatch eval, sync, prompts, SDK auto-instrumentation - writes .env\",\n          value: \"api-key\",\n        },\n        {\n          title: \"Both\",\n          description: \"Run both flows in sequence\",\n          value: \"both\",\n        },\n      ],\n      initial: 0,\n    });\n    if (!mode.mode) {\n      console.log(chalk.yellow(\"Login cancelled\"));\n      process.exit(0);\n    }\n\n    if (mode.mode === \"device\" || mode.mode === \"both\") {\n      await runDeviceFlowLogin({ browser: options?.browser });\n    }\n    if (mode.mode === \"api-key\" || mode.mode === \"both\") {\n      // No-paste convergence (sergey f9fcc3927 + alexis bfef4ebab):\n      // /authorize page shows a project-picker + 'Generate API key'\n      // button; the freshly-minted key flows back to the CLI over the\n      // same RFC 8628 poll endpoint as the device-session flow. No\n      // copy-paste of the credential ever.\n      await runUnifiedLoginFlow({\n        kind: \"project_api_key\",\n        browser: options?.browser,\n      });\n    }\n    return;\n  } catch (error) {\n    console.error(\n      chalk.red(\n        `Error during login: ${\n          formatApiErrorMessage({ error })\n        }`,\n      ),\n    );\n    process.exit(1);\n  }\n};\n\n\n"]}

package/dist/logout-RTWQU22E.mjs

@@ -0,0 +1,181 @@
+import {
+  GATEWAY_RC_MARKERS,
+  appEnvHasAnyVar,
+  appSettingsTargetFor,
+  rcHasLangwatchBlock,
+  rcPath,
+  removeAppEnvVars,
+  removeBlockFromRc,
+  telemetryEnvVarNames,
+  toolMarkers
+} from "./chunk-XGULH63G.mjs";
+import {
+  codexHasGatewayBlock,
+  codexHasOtelBlock,
+  defaultCodexConfigPath,
+  defaultCodexProfilePath,
+  displayCodexConfigPath,
+  removeCodexGatewayBlock,
+  removeCodexGatewayProfileFile,
+  removeCodexOtelBlock
+} from "./chunk-YK55ZGRQ.mjs";
+import {
+  DeviceFlowError,
+  logout
+} from "./chunk-PQA46YVG.mjs";
+import "./chunk-YP4LDCP6.mjs";
+import {
+  clearConfig,
+  isLoggedIn,
+  loadConfig
+} from "./chunk-U47MQ6CS.mjs";
+import "./chunk-BAX4W3AY.mjs";
+
+// src/cli/commands/logout.ts
+import * as readline from "readline";
+import chalk from "chalk";
+
+// src/cli/utils/governance/telemetry-targets.ts
+import * as fs from "fs";
+import * as os from "os";
+var SHELLS = ["zsh", "bash", "fish"];
+var SHELL_FUNCTION_TOOLS = ["gemini", "opencode"];
+function tildify(p) {
+  const home = os.homedir();
+  return p.startsWith(home) ? `~${p.slice(home.length)}` : p;
+}
+function scanTelemetryTargets() {
+  const targets = [];
+  const claudeTarget = appSettingsTargetFor("claude");
+  if (claudeTarget) {
+    const keys = telemetryEnvVarNames("claude");
+    targets.push({
+      label: `claude telemetry env (${claudeTarget.displayPath})`,
+      present: appEnvHasAnyVar(claudeTarget, keys),
+      remove: () => removeAppEnvVars(claudeTarget, keys)
+    });
+  }
+  const codexConfig = defaultCodexConfigPath();
+  targets.push({
+    label: `codex [otel] block (${displayCodexConfigPath()})`,
+    present: codexHasOtelBlock(codexConfig),
+    remove: () => removeCodexOtelBlock(codexConfig)
+  });
+  targets.push({
+    label: `codex gateway block (${displayCodexConfigPath()})`,
+    present: codexHasGatewayBlock(codexConfig),
+    remove: () => removeCodexGatewayBlock(codexConfig)
+  });
+  const codexProfile = defaultCodexProfilePath();
+  targets.push({
+    label: `codex langwatch profile file (${tildify(codexProfile)})`,
+    present: fs.existsSync(codexProfile),
+    remove: () => removeCodexGatewayProfileFile(codexProfile)
+  });
+  for (const shell of SHELLS) {
+    targets.push({
+      label: `gateway shell block (${tildify(rcPath(shell))})`,
+      present: rcHasLangwatchBlock({ shell, markers: GATEWAY_RC_MARKERS }),
+      remove: () => removeBlockFromRc(shell, GATEWAY_RC_MARKERS)
+    });
+    for (const tool of SHELL_FUNCTION_TOOLS) {
+      const markers = toolMarkers(tool);
+      targets.push({
+        label: `${tool} shell function (${tildify(rcPath(shell))})`,
+        present: rcHasLangwatchBlock({ shell, markers }),
+        remove: () => removeBlockFromRc(shell, markers)
+      });
+    }
+  }
+  return targets;
+}
+
+// src/cli/commands/logout.ts
+var revokeAndClearSession = async () => {
+  const cfg = loadConfig();
+  if (!isLoggedIn(cfg)) {
+    clearConfig();
+    return;
+  }
+  if (cfg.refresh_token) {
+    try {
+      await logout(
+        { baseUrl: cfg.control_plane_url },
+        cfg.refresh_token,
+        cfg.access_token
+      );
+    } catch (err) {
+      const msg = err instanceof DeviceFlowError ? err.message : String(err);
+      console.error(chalk.yellow(`warning: server-side revoke failed: ${msg}`));
+    }
+  }
+  clearConfig();
+};
+var confirmProceed = async (question) => {
+  if (!process.stdin.isTTY) return true;
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+  const ans = await new Promise((resolve) => {
+    rl.question(`${question} [Y/n] `, (a) => resolve(a));
+  });
+  rl.close();
+  const norm = ans.trim().toLowerCase();
+  return norm === "" || norm === "y" || norm === "yes";
+};
+var logoutCommand = async (options = {}) => {
+  const present = scanTelemetryTargets().filter((t) => t.present);
+  const willRevoke = !options.keepCredentials;
+  const loggedIn = isLoggedIn(loadConfig());
+  if (present.length === 0 && !(willRevoke && loggedIn)) {
+    console.log(
+      "Nothing to clean up \u2014 no telemetry wiring or device session found."
+    );
+    return;
+  }
+  console.log("This will remove:");
+  if (willRevoke && loggedIn) {
+    console.log("  \u2022 the LangWatch device session (~/.langwatch/config.json)");
+  }
+  for (const t of present) {
+    console.log(`  \u2022 ${t.label}`);
+  }
+  console.log();
+  if (!options.yes) {
+    const ok = await confirmProceed("Proceed?");
+    if (!ok) {
+      console.log("Aborted. Nothing was changed.");
+      return;
+    }
+  }
+  const removed = [];
+  for (const t of present) {
+    try {
+      if (t.remove()) removed.push(t.label);
+    } catch (err) {
+      console.log(
+        chalk.yellow(
+          `  ! Couldn't remove ${t.label}: ${err.message}`
+        )
+      );
+    }
+  }
+  if (willRevoke) {
+    await revokeAndClearSession();
+    if (loggedIn) removed.push("LangWatch device session");
+  }
+  console.log();
+  if (removed.length === 0) {
+    console.log("Done \u2014 nothing needed removing.");
+    return;
+  }
+  console.log(chalk.green("Removed:"));
+  for (const label of removed) {
+    console.log(chalk.green(`  \u2713 ${label}`));
+  }
+};
+export {
+  logoutCommand
+};
+//# sourceMappingURL=logout-RTWQU22E.mjs.map

package/dist/logout-RTWQU22E.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/logout.ts","../src/cli/utils/governance/telemetry-targets.ts"],"sourcesContent":["import * as readline from \"node:readline\";\n\nimport chalk from \"chalk\";\n\nimport {\n  clearConfig,\n  isLoggedIn,\n  loadConfig,\n} from \"@/cli/utils/governance/config\";\nimport {\n  DeviceFlowError,\n  logout as serverRevokeLogout,\n} from \"@/cli/utils/governance/device-flow\";\nimport { scanTelemetryTargets } from \"@/cli/utils/governance/telemetry-targets\";\n\nexport interface LogoutOptions {\n  /** Skip the confirmation prompt. */\n  yes?: boolean;\n  /** Remove telemetry wiring but keep the device session on disk. */\n  keepCredentials?: boolean;\n}\n\n/**\n * Server-revoke the device refresh token AND clear the local\n * ~/.langwatch/config.json. Best-effort: the local clear happens even\n * when the remote revoke fails, so \"logout\" never leaves a usable token\n * on disk. Idempotent — safe when not logged in.\n *\n * Only the device session is cleared; the project SDK key in `$CWD/.env`\n * (`LANGWATCH_API_KEY`) is a separate, user-managed store and is never\n * touched.\n */\nconst revokeAndClearSession = async (): Promise<void> => {\n  const cfg = loadConfig();\n  if (!isLoggedIn(cfg)) {\n    clearConfig();\n    return;\n  }\n  if (cfg.refresh_token) {\n    try {\n      // Send both tokens so the access_token is invalidated immediately,\n      // not just at its 1h expiry.\n      await serverRevokeLogout(\n        { baseUrl: cfg.control_plane_url },\n        cfg.refresh_token,\n        cfg.access_token,\n      );\n    } catch (err) {\n      const msg = err instanceof DeviceFlowError ? err.message : String(err);\n      console.error(chalk.yellow(`warning: server-side revoke failed: ${msg}`));\n    }\n  }\n  clearConfig();\n};\n\nconst confirmProceed = async (question: string): Promise<boolean> => {\n  // Non-interactive logout proceeds: it's an explicit destructive command,\n  // so blocking a scripted `langwatch logout` on a prompt would be worse.\n  if (!process.stdin.isTTY) return true;\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stdout,\n  });\n  const ans = await new Promise<string>((resolve) => {\n    rl.question(`${question} [Y/n] `, (a) => resolve(a));\n  });\n  rl.close();\n  const norm = ans.trim().toLowerCase();\n  return norm === \"\" || norm === \"y\" || norm === \"yes\";\n};\n\n/**\n * `langwatch logout` — the full un-wire. Revokes + clears the device\n * session (unless --keep-credentials) AND discovers and removes every\n * langwatch-authored telemetry block across the wrapped tools. Scans\n * first, shows exactly what it found, confirms (unless --yes), then\n * removes; only marker-bracketed blocks / known key sets are touched, so\n * surrounding user config is preserved.\n */\nexport const logoutCommand = async (\n  options: LogoutOptions = {},\n): Promise<void> => {\n  const present = scanTelemetryTargets().filter((t) => t.present);\n  const willRevoke = !options.keepCredentials;\n  const loggedIn = isLoggedIn(loadConfig());\n\n  if (present.length === 0 && !(willRevoke && loggedIn)) {\n    console.log(\n      \"Nothing to clean up — no telemetry wiring or device session found.\",\n    );\n    return;\n  }\n\n  console.log(\"This will remove:\");\n  if (willRevoke && loggedIn) {\n    console.log(\"  • the LangWatch device session (~/.langwatch/config.json)\");\n  }\n  for (const t of present) {\n    console.log(`  • ${t.label}`);\n  }\n  console.log();\n\n  if (!options.yes) {\n    const ok = await confirmProceed(\"Proceed?\");\n    if (!ok) {\n      console.log(\"Aborted. Nothing was changed.\");\n      return;\n    }\n  }\n\n  const removed: string[] = [];\n  for (const t of present) {\n    try {\n      if (t.remove()) removed.push(t.label);\n    } catch (err) {\n      console.log(\n        chalk.yellow(\n          `  ! Couldn't remove ${t.label}: ${(err as Error).message}`,\n        ),\n      );\n    }\n  }\n\n  if (willRevoke) {\n    await revokeAndClearSession();\n    if (loggedIn) removed.push(\"LangWatch device session\");\n  }\n\n  console.log();\n  if (removed.length === 0) {\n    console.log(\"Done — nothing needed removing.\");\n    return;\n  }\n  console.log(chalk.green(\"Removed:\"));\n  for (const label of removed) {\n    console.log(chalk.green(`  ✓ ${label}`));\n  }\n};\n","/**\n * Enumerate every place `langwatch <tool>` persists telemetry wiring, so\n * `langwatch logout` can discover and remove all of it. Each target knows\n * whether it is currently present on disk and how to remove itself, and\n * every remover only ever touches the langwatch-authored region (a\n * marker-bracketed block or a known key set), never surrounding user\n * config.\n *\n * This is the inverse of the install surface:\n *   - claude   → OTEL keys in ~/.claude/settings.json's `env`\n *   - codex    → the [otel] + gateway marker blocks in ~/.codex/config.toml\n *                and the sibling langwatch profile file\n *   - gemini / opencode → a scoped shell function under the tool's marker\n *                pair in the shell rc\n *   - the global gateway export block in the shell rc (init-shell / legacy)\n *\n * Shell rc files are scanned for ALL supported shells (zsh/bash/fish), not\n * just $SHELL, so a block written to ~/.zshrc is still found from a bash\n * session — the user asked it to \"go and find it\".\n */\n\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\n\nimport {\n  codexHasGatewayBlock,\n  codexHasOtelBlock,\n  defaultCodexConfigPath,\n  defaultCodexProfilePath,\n  displayCodexConfigPath,\n  removeCodexGatewayBlock,\n  removeCodexGatewayProfileFile,\n  removeCodexOtelBlock,\n} from \"../codex-config-toml\";\nimport {\n  appEnvHasAnyVar,\n  appSettingsTargetFor,\n  removeAppEnvVars,\n} from \"./app-settings\";\nimport {\n  type DetectedShell,\n  GATEWAY_RC_MARKERS,\n  rcHasLangwatchBlock,\n  rcPath,\n  removeBlockFromRc,\n  toolMarkers,\n} from \"./shell-rc\";\nimport { telemetryEnvVarNames } from \"./wrapper-mode\";\n\nexport interface TelemetryTarget {\n  /** Human label for the confirm list + removal summary. */\n  label: string;\n  /** Whether the wiring is currently present on disk. */\n  present: boolean;\n  /** Remove it. Returns true when something was actually removed. */\n  remove: () => boolean;\n}\n\nconst SHELLS: DetectedShell[] = [\"zsh\", \"bash\", \"fish\"];\n\n/** Tools whose Path B telemetry rides on a scoped shell function. */\nconst SHELL_FUNCTION_TOOLS = [\"gemini\", \"opencode\"];\n\n/** Render an absolute path with the home dir collapsed to `~`. */\nfunction tildify(p: string): string {\n  const home = os.homedir();\n  return p.startsWith(home) ? `~${p.slice(home.length)}` : p;\n}\n\n/**\n * Enumerate every telemetry-persist target with a present flag and a\n * remover. Callers filter to `present` targets for display + removal.\n */\nexport function scanTelemetryTargets(): TelemetryTarget[] {\n  const targets: TelemetryTarget[] = [];\n\n  // claude — OTEL keys inside ~/.claude/settings.json's `env` object.\n  const claudeTarget = appSettingsTargetFor(\"claude\");\n  if (claudeTarget) {\n    const keys = telemetryEnvVarNames(\"claude\");\n    targets.push({\n      label: `claude telemetry env (${claudeTarget.displayPath})`,\n      present: appEnvHasAnyVar(claudeTarget, keys),\n      remove: () => removeAppEnvVars(claudeTarget, keys),\n    });\n  }\n\n  // codex — [otel] + gateway marker blocks in config.toml + the profile file.\n  const codexConfig = defaultCodexConfigPath();\n  targets.push({\n    label: `codex [otel] block (${displayCodexConfigPath()})`,\n    present: codexHasOtelBlock(codexConfig),\n    remove: () => removeCodexOtelBlock(codexConfig),\n  });\n  targets.push({\n    label: `codex gateway block (${displayCodexConfigPath()})`,\n    present: codexHasGatewayBlock(codexConfig),\n    remove: () => removeCodexGatewayBlock(codexConfig),\n  });\n  const codexProfile = defaultCodexProfilePath();\n  targets.push({\n    label: `codex langwatch profile file (${tildify(codexProfile)})`,\n    present: fs.existsSync(codexProfile),\n    remove: () => removeCodexGatewayProfileFile(codexProfile),\n  });\n\n  // shell rc files — the global gateway block + per-tool scoped functions.\n  for (const shell of SHELLS) {\n    targets.push({\n      label: `gateway shell block (${tildify(rcPath(shell))})`,\n      present: rcHasLangwatchBlock({ shell, markers: GATEWAY_RC_MARKERS }),\n      remove: () => removeBlockFromRc(shell, GATEWAY_RC_MARKERS),\n    });\n    for (const tool of SHELL_FUNCTION_TOOLS) {\n      const markers = toolMarkers(tool);\n      targets.push({\n        label: `${tool} shell function (${tildify(rcPath(shell))})`,\n        present: rcHasLangwatchBlock({ shell, markers }),\n        remove: () => removeBlockFromRc(shell, markers),\n      });\n    }\n  }\n\n  return targets;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,YAAY,cAAc;AAE1B,OAAO,WAAW;;;ACmBlB,YAAY,QAAQ;AACpB,YAAY,QAAQ;AAoCpB,IAAM,SAA0B,CAAC,OAAO,QAAQ,MAAM;AAGtD,IAAM,uBAAuB,CAAC,UAAU,UAAU;AAGlD,SAAS,QAAQ,GAAmB;AAClC,QAAM,OAAU,WAAQ;AACxB,SAAO,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,KAAK;AAC3D;AAMO,SAAS,uBAA0C;AACxD,QAAM,UAA6B,CAAC;AAGpC,QAAM,eAAe,qBAAqB,QAAQ;AAClD,MAAI,cAAc;AAChB,UAAM,OAAO,qBAAqB,QAAQ;AAC1C,YAAQ,KAAK;AAAA,MACX,OAAO,yBAAyB,aAAa,WAAW;AAAA,MACxD,SAAS,gBAAgB,cAAc,IAAI;AAAA,MAC3C,QAAQ,MAAM,iBAAiB,cAAc,IAAI;AAAA,IACnD,CAAC;AAAA,EACH;AAGA,QAAM,cAAc,uBAAuB;AAC3C,UAAQ,KAAK;AAAA,IACX,OAAO,uBAAuB,uBAAuB,CAAC;AAAA,IACtD,SAAS,kBAAkB,WAAW;AAAA,IACtC,QAAQ,MAAM,qBAAqB,WAAW;AAAA,EAChD,CAAC;AACD,UAAQ,KAAK;AAAA,IACX,OAAO,wBAAwB,uBAAuB,CAAC;AAAA,IACvD,SAAS,qBAAqB,WAAW;AAAA,IACzC,QAAQ,MAAM,wBAAwB,WAAW;AAAA,EACnD,CAAC;AACD,QAAM,eAAe,wBAAwB;AAC7C,UAAQ,KAAK;AAAA,IACX,OAAO,iCAAiC,QAAQ,YAAY,CAAC;AAAA,IAC7D,SAAY,cAAW,YAAY;AAAA,IACnC,QAAQ,MAAM,8BAA8B,YAAY;AAAA,EAC1D,CAAC;AAGD,aAAW,SAAS,QAAQ;AAC1B,YAAQ,KAAK;AAAA,MACX,OAAO,wBAAwB,QAAQ,OAAO,KAAK,CAAC,CAAC;AAAA,MACrD,SAAS,oBAAoB,EAAE,OAAO,SAAS,mBAAmB,CAAC;AAAA,MACnE,QAAQ,MAAM,kBAAkB,OAAO,kBAAkB;AAAA,IAC3D,CAAC;AACD,eAAW,QAAQ,sBAAsB;AACvC,YAAM,UAAU,YAAY,IAAI;AAChC,cAAQ,KAAK;AAAA,QACX,OAAO,GAAG,IAAI,oBAAoB,QAAQ,OAAO,KAAK,CAAC,CAAC;AAAA,QACxD,SAAS,oBAAoB,EAAE,OAAO,QAAQ,CAAC;AAAA,QAC/C,QAAQ,MAAM,kBAAkB,OAAO,OAAO;AAAA,MAChD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;AD5FA,IAAM,wBAAwB,YAA2B;AACvD,QAAM,MAAM,WAAW;AACvB,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,gBAAY;AACZ;AAAA,EACF;AACA,MAAI,IAAI,eAAe;AACrB,QAAI;AAGF,YAAM;AAAA,QACJ,EAAE,SAAS,IAAI,kBAAkB;AAAA,QACjC,IAAI;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,IACF,SAAS,KAAK;AACZ,YAAM,MAAM,eAAe,kBAAkB,IAAI,UAAU,OAAO,GAAG;AACrE,cAAQ,MAAM,MAAM,OAAO,uCAAuC,GAAG,EAAE,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,cAAY;AACd;AAEA,IAAM,iBAAiB,OAAO,aAAuC;AAGnE,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO;AACjC,QAAM,KAAc,yBAAgB;AAAA,IAClC,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,QAAM,MAAM,MAAM,IAAI,QAAgB,CAAC,YAAY;AACjD,OAAG,SAAS,GAAG,QAAQ,WAAW,CAAC,MAAM,QAAQ,CAAC,CAAC;AAAA,EACrD,CAAC;AACD,KAAG,MAAM;AACT,QAAM,OAAO,IAAI,KAAK,EAAE,YAAY;AACpC,SAAO,SAAS,MAAM,SAAS,OAAO,SAAS;AACjD;AAUO,IAAM,gBAAgB,OAC3B,UAAyB,CAAC,MACR;AAClB,QAAM,UAAU,qBAAqB,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO;AAC9D,QAAM,aAAa,CAAC,QAAQ;AAC5B,QAAM,WAAW,WAAW,WAAW,CAAC;AAExC,MAAI,QAAQ,WAAW,KAAK,EAAE,cAAc,WAAW;AACrD,YAAQ;AAAA,MACN;AAAA,IACF;AACA;AAAA,EACF;AAEA,UAAQ,IAAI,mBAAmB;AAC/B,MAAI,cAAc,UAAU;AAC1B,YAAQ,IAAI,kEAA6D;AAAA,EAC3E;AACA,aAAW,KAAK,SAAS;AACvB,YAAQ,IAAI,YAAO,EAAE,KAAK,EAAE;AAAA,EAC9B;AACA,UAAQ,IAAI;AAEZ,MAAI,CAAC,QAAQ,KAAK;AAChB,UAAM,KAAK,MAAM,eAAe,UAAU;AAC1C,QAAI,CAAC,IAAI;AACP,cAAQ,IAAI,+BAA+B;AAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,UAAI,EAAE,OAAO,EAAG,SAAQ,KAAK,EAAE,KAAK;AAAA,IACtC,SAAS,KAAK;AACZ,cAAQ;AAAA,QACN,MAAM;AAAA,UACJ,uBAAuB,EAAE,KAAK,KAAM,IAAc,OAAO;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY;AACd,UAAM,sBAAsB;AAC5B,QAAI,SAAU,SAAQ,KAAK,0BAA0B;AAAA,EACvD;AAEA,UAAQ,IAAI;AACZ,MAAI,QAAQ,WAAW,GAAG;AACxB,YAAQ,IAAI,sCAAiC;AAC7C;AAAA,EACF;AACA,UAAQ,IAAI,MAAM,MAAM,UAAU,CAAC;AACnC,aAAW,SAAS,SAAS;AAC3B,YAAQ,IAAI,MAAM,MAAM,YAAO,KAAK,EAAE,CAAC;AAAA,EACzC;AACF;","names":[]}