langwatch 0.33.2 → 0.34.0

package/dist/chunk-PQA46YVG.mjs

@@ -0,0 +1,410 @@
+import {
+  extractLookupIdFromToken,
+  getCliBootstrap,
+  listIngestionKeys
+} from "./chunk-YP4LDCP6.mjs";
+import {
+  loadConfig,
+  saveConfig
+} from "./chunk-U47MQ6CS.mjs";
+import {
+  __spreadProps,
+  __spreadValues
+} from "./chunk-BAX4W3AY.mjs";
+
+// src/cli/utils/governance/device-flow.ts
+import * as os from "os";
+import { setTimeout as wait } from "timers/promises";
+var DeviceFlowError = class extends Error {
+  constructor(kind, message) {
+    super(message);
+    this.kind = kind;
+    this.name = "DeviceFlowError";
+  }
+};
+async function startDeviceCode(opts, init = {}) {
+  const body = {};
+  if (init.credentialType) body.credential_type = init.credentialType;
+  const dc = await postJSON(opts, "/api/auth/cli/device-code", body);
+  if (!dc.interval || dc.interval <= 0) dc.interval = 5;
+  return dc;
+}
+function collectClientInfo() {
+  let hostname2 = "";
+  let uname = "";
+  try {
+    hostname2 = os.hostname();
+  } catch (e) {
+  }
+  try {
+    uname = os.userInfo().username;
+  } catch (e) {
+  }
+  return { hostname: hostname2, uname, platform: process.platform };
+}
+async function exchange(opts, deviceCode) {
+  const res = await rawPost(opts, "/api/auth/cli/exchange", {
+    device_code: deviceCode,
+    client_info: collectClientInfo()
+  });
+  switch (res.status) {
+    case 200: {
+      const body = await res.json();
+      if (!("kind" in body) || !body.kind) {
+        return __spreadValues({ kind: "device_session" }, body);
+      }
+      return body;
+    }
+    case 428:
+      throw new DeviceFlowError("pending", "authorization pending");
+    case 410:
+      throw new DeviceFlowError("denied", "authorization denied");
+    case 408:
+      throw new DeviceFlowError("expired", "authorization request expired");
+    case 429:
+      throw new DeviceFlowError("slow_down", "polling too fast");
+    default: {
+      const body = await res.text().catch(() => "");
+      throw new DeviceFlowError("other", `unexpected status ${res.status}: ${body.slice(0, 256)}`);
+    }
+  }
+}
+async function pollUntilDone(opts, dc) {
+  let interval = dc.interval * 1e3;
+  const ceiling = 6e4;
+  const deadline = Date.now() + dc.expires_in * 1e3;
+  for (; ; ) {
+    if (Date.now() > deadline) {
+      throw new DeviceFlowError("expired", "authorization request expired");
+    }
+    await wait(interval);
+    try {
+      return await exchange(opts, dc.device_code);
+    } catch (err) {
+      if (!(err instanceof DeviceFlowError)) throw err;
+      if (err.kind === "pending") continue;
+      if (err.kind === "slow_down") {
+        interval = Math.min(interval * 2, ceiling);
+        continue;
+      }
+      throw err;
+    }
+  }
+}
+async function logout(opts, refreshToken, accessToken) {
+  const body = { refresh_token: refreshToken };
+  if (accessToken) body.access_token = accessToken;
+  const res = await rawPost(opts, "/api/auth/cli/logout", body);
+  if (res.status === 200 || res.status === 401 || res.status === 404) return;
+  const text = await res.text().catch(() => "");
+  throw new DeviceFlowError("other", `logout failed (${res.status}): ${text.slice(0, 256)}`);
+}
+async function postJSON(opts, path2, body) {
+  const res = await rawPost(opts, path2, body);
+  if (!res.ok) {
+    const text = await res.text().catch(() => "");
+    throw new DeviceFlowError("other", `${path2} \u2192 ${res.status}: ${text.slice(0, 256)}`);
+  }
+  return await res.json();
+}
+function rawPost(opts, path2, body) {
+  var _a;
+  const url = opts.baseUrl.replace(/\/+$/, "") + path2;
+  const f = (_a = opts.fetchImpl) != null ? _a : fetch;
+  return f(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json",
+      // Origin enforcement on the server requires this for non-browser
+      // clients. The base URL is the same as the control plane, so
+      // mirroring it as Origin satisfies the same-origin gate.
+      Origin: opts.baseUrl.replace(/\/+$/, "")
+    },
+    body: JSON.stringify(body != null ? body : {})
+  });
+}
+
+// src/cli/utils/governance/login-flow.ts
+import * as fs from "fs";
+import * as path from "path";
+import chalk from "chalk";
+import ora from "ora";
+
+// src/cli/utils/governance/login-ceremony.ts
+var DEFAULT_TOOLS = [
+  { slug: "claude", displayName: "Claude Code" },
+  { slug: "codex", displayName: "Codex" },
+  { slug: "cursor", displayName: "Cursor" }
+];
+function padRight(s, width) {
+  if (s.length >= width) return s;
+  return s + " ".repeat(width - s.length);
+}
+function formatUsd(n) {
+  if (Number.isInteger(n)) return `$${n}`;
+  return `$${n.toFixed(2)}`;
+}
+function formatUsedUsd(n) {
+  return `$${n.toFixed(2)}`;
+}
+function formatLoginCeremony(input) {
+  const lines = [];
+  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : "";
+  lines.push(`\u2713 Logged in as ${input.email}${orgSuffix}`);
+  const tools = input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;
+  lines.push("");
+  lines.push("Your AI tools (run any of these):");
+  const cmdWidth = Math.max(
+    ...tools.map((t) => `langwatch ${t.slug}`.length)
+  );
+  for (const tool of tools) {
+    const cmd = `langwatch ${tool.slug}`;
+    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : "";
+    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);
+  }
+  if (input.providers && input.providers.length > 0) {
+    lines.push("");
+    lines.push("Model providers you can issue a virtual key for:");
+    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));
+    for (const p of input.providers) {
+      const padded = padRight(p.name, nameWidth);
+      const annotations = [];
+      if (p.displayName && p.displayName !== p.name) {
+        annotations.push(p.displayName);
+      }
+      if (p.configured === false) annotations.push("(not configured yet)");
+      const suffix = annotations.length > 0 ? `  ${annotations.join("  ")}` : "";
+      lines.push(`  \u2022 ${padded}${suffix}`);
+    }
+  }
+  if (input.budget) {
+    lines.push("");
+    const period = input.budget.period.charAt(0).toUpperCase() + input.budget.period.slice(1).toLowerCase();
+    lines.push(
+      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`
+    );
+  }
+  if (input.openCommand !== false) {
+    lines.push("");
+    lines.push("Or open the app in your browser:");
+    lines.push("  $ langwatch open");
+  }
+  return lines;
+}
+
+// src/cli/utils/governance/login-flow.ts
+async function runUnifiedLoginFlow(opts = {}) {
+  var _a, _b, _c, _d, _e, _f, _g, _h;
+  const kind = (_a = opts.kind) != null ? _a : "device_session";
+  const cfg = (_b = opts.cfg) != null ? _b : loadConfig();
+  const baseUrl = cfg.control_plane_url;
+  console.log(chalk.blue("\u{1F510} LangWatch login"));
+  console.log(chalk.gray(`Control plane: ${baseUrl}`));
+  console.log(
+    chalk.gray(
+      kind === "project_api_key" ? "Mode: project SDK API key (will write .env)" : "Mode: device session (will write ~/.langwatch/config.json)"
+    )
+  );
+  const dc = await startDeviceCode({ baseUrl }, { credentialType: kind });
+  const verifyURL = (_c = dc.verification_uri_complete) != null ? _c : `${dc.verification_uri.replace(/\/+$/, "")}?user_code=${encodeURIComponent(dc.user_code)}`;
+  console.log();
+  console.log(chalk.cyan(`Opening: ${verifyURL}`));
+  console.log(
+    chalk.gray(
+      `If your browser doesn't open, paste the URL above and enter code: ${chalk.bold(dc.user_code)}`
+    )
+  );
+  console.log();
+  await openInBrowser(verifyURL, opts.browser);
+  const spinner = ora({
+    text: "Waiting for you to approve in the browser",
+    discardStdin: false
+  }).start();
+  const onSigint = () => {
+    spinner.stop();
+    console.log(chalk.gray("\nLogin cancelled."));
+    process.exit(130);
+  };
+  process.once("SIGINT", onSigint);
+  try {
+    const result = await pollUntilDone({ baseUrl }, dc);
+    if (result.kind === "device_session") {
+      spinner.succeed(`Logged in as ${result.user.email}`);
+      persistDeviceSession(cfg, result);
+      saveConfig(cfg);
+      const bootstrap = await fetchBootstrapSafely(cfg);
+      if (bootstrap == null ? void 0 : bootstrap.gatewayUrl) {
+        cfg.gateway_url = bootstrap.gatewayUrl;
+        saveConfig(cfg);
+      }
+      if (bootstrap == null ? void 0 : bootstrap.toolPolicies) {
+        cfg.tool_policies = bootstrap.toolPolicies;
+        saveConfig(cfg);
+      }
+      if (cfg.default_personal_ingest_keys && Object.keys(cfg.default_personal_ingest_keys).length > 0) {
+        try {
+          const liveKeys = await listIngestionKeys(cfg);
+          const liveSet = new Set(liveKeys.map((k) => `${k.sourceType}:${k.lookupId}`));
+          const reconciled = {};
+          let changed = false;
+          for (const [sourceType, entry] of Object.entries(cfg.default_personal_ingest_keys)) {
+            const lookupId = extractLookupIdFromToken((_d = entry.secret) != null ? _d : "");
+            if (lookupId && liveSet.has(`${sourceType}:${lookupId}`)) {
+              reconciled[sourceType] = entry;
+            } else {
+              changed = true;
+            }
+          }
+          if (changed) {
+            cfg.default_personal_ingest_keys = reconciled;
+            saveConfig(cfg);
+          }
+        } catch (e) {
+        }
+      }
+      console.log();
+      const ceremonyLines = formatLoginCeremony({
+        email: (_f = (_e = cfg.user) == null ? void 0 : _e.email) != null ? _f : result.user.email,
+        organizationName: (_g = cfg.organization) == null ? void 0 : _g.name,
+        tools: bootstrap == null ? void 0 : bootstrap.tools,
+        providers: bootstrap == null ? void 0 : bootstrap.providers,
+        budget: ((_h = bootstrap == null ? void 0 : bootstrap.budget) == null ? void 0 : _h.monthlyLimitUsd) != null ? {
+          period: bootstrap.budget.period,
+          limitUsd: bootstrap.budget.monthlyLimitUsd,
+          usedUsd: bootstrap.budget.monthlyUsedUsd
+        } : void 0
+      });
+      for (const line of ceremonyLines) {
+        console.log(line);
+      }
+      console.log();
+      console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));
+      return cfg;
+    }
+    spinner.succeed(
+      `API key generated for project ${chalk.bold(result.project.name)}`
+    );
+    const envResult = writeApiKeyToEnv(result.api_key);
+    console.log();
+    console.log(chalk.green("\u2713 API key saved to .env"));
+    if (envResult.created) {
+      console.log(chalk.gray(`  \u2022 Created .env file at ${envResult.path}`));
+    } else if (envResult.updated) {
+      console.log(chalk.gray(`  \u2022 Updated existing API key in ${envResult.path}`));
+    } else {
+      console.log(chalk.gray(`  \u2022 Added API key to ${envResult.path}`));
+    }
+    console.log();
+    console.log(
+      chalk.gray(
+        `  Project: ${result.project.name} (${result.project.slug})`
+      )
+    );
+    console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));
+    return cfg;
+  } catch (err) {
+    spinner.fail();
+    if (err instanceof DeviceFlowError) {
+      switch (err.kind) {
+        case "denied":
+          throw new Error(
+            "authorization denied \u2014 you can retry `langwatch login`"
+          );
+        case "expired":
+          throw new Error(
+            "authorization request expired \u2014 run `langwatch login` again"
+          );
+        default:
+          throw err;
+      }
+    }
+    throw err;
+  } finally {
+    process.removeListener("SIGINT", onSigint);
+  }
+}
+async function runDeviceFlowLogin(opts = {}) {
+  return runUnifiedLoginFlow(__spreadProps(__spreadValues({}, opts), { kind: "device_session" }));
+}
+function persistDeviceSession(cfg, result) {
+  cfg.access_token = result.access_token;
+  cfg.refresh_token = result.refresh_token;
+  cfg.expires_at = Math.floor(Date.now() / 1e3) + result.expires_in;
+  cfg.user = {
+    id: result.user.id,
+    email: result.user.email,
+    name: result.user.name
+  };
+  cfg.organization = {
+    id: result.organization.id,
+    slug: result.organization.slug,
+    name: result.organization.name
+  };
+  if (result.default_personal_vk) {
+    cfg.default_personal_vk = {
+      id: result.default_personal_vk.id,
+      secret: result.default_personal_vk.secret,
+      prefix: result.default_personal_vk.prefix
+    };
+  }
+  if (result.endpoint) {
+    cfg.control_plane_url = result.endpoint.replace(/\/+$/, "");
+  }
+}
+function writeApiKeyToEnv(apiKey) {
+  const envPath = path.join(process.cwd(), ".env");
+  if (!fs.existsSync(envPath)) {
+    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}
+`);
+    return { created: true, updated: false, path: envPath };
+  }
+  const content = fs.readFileSync(envPath, "utf-8");
+  const lines = content.split("\n");
+  let found = false;
+  const updatedLines = lines.map((line) => {
+    if (line.startsWith("LANGWATCH_API_KEY=")) {
+      found = true;
+      return `LANGWATCH_API_KEY=${apiKey}`;
+    }
+    return line;
+  });
+  if (!found) {
+    if (content.endsWith("\n") || content === "") {
+      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);
+    } else {
+      updatedLines.push("", `LANGWATCH_API_KEY=${apiKey}`);
+    }
+  }
+  fs.writeFileSync(envPath, updatedLines.join("\n"));
+  return { created: false, updated: found, path: envPath };
+}
+async function fetchBootstrapSafely(cfg) {
+  try {
+    return await getCliBootstrap(cfg);
+  } catch (e) {
+    return null;
+  }
+}
+async function openInBrowser(url, override) {
+  var _a, _b;
+  const choice = (_b = (_a = override != null ? override : process.env.LANGWATCH_BROWSER) != null ? _a : process.env.BROWSER) != null ? _b : "";
+  if (choice === "none") return;
+  const open = (await import("open")).default;
+  try {
+    if (!choice || choice === "default") {
+      await open(url);
+      return;
+    }
+    await open(url, { app: { name: choice } });
+  } catch (e) {
+  }
+}
+
+export {
+  DeviceFlowError,
+  logout,
+  runUnifiedLoginFlow,
+  runDeviceFlowLogin
+};
+//# sourceMappingURL=chunk-PQA46YVG.mjs.map

package/dist/chunk-PQA46YVG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/utils/governance/device-flow.ts","../src/cli/utils/governance/login-flow.ts","../src/cli/utils/governance/login-ceremony.ts"],"sourcesContent":["/**\n * RFC 8628 device-code OAuth client for the `langwatch login --device`\n * flow. Targets the control plane's `/api/auth/cli/*` endpoints —\n * the same wire surface a custom CLI client would hit (documented in\n * `docs/ai-gateway/governance/admin-setup.mdx#cli-device-flow-rest-api`).\n *\n * Pure stdlib `fetch`, no axios — matches the rest of the typescript\n * CLI's HTTP style.\n */\n\nimport * as os from \"node:os\";\nimport { setTimeout as wait } from \"node:timers/promises\";\n\nexport interface DeviceCode {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete?: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface ExchangeUser {\n  id: string;\n  email: string;\n  name: string;\n}\n\nexport interface ExchangeOrganization {\n  id: string;\n  slug?: string;\n  name: string;\n}\n\nexport interface ExchangePersonalVK {\n  id: string;\n  secret: string;\n  prefix?: string;\n}\n\nexport interface ExchangeProject {\n  id: string;\n  slug: string;\n  name: string;\n}\n\n/**\n * The CLI device-code flow can mint two distinct credential types:\n *   - \"device_session\" — the user-scoped OAuth-style access+refresh\n *     token pair used by `langwatch claude/codex/...` wrappers.\n *   - \"project_api_key\" — the project-scoped SDK key\n *     (`Project.apiKey`) returned verbatim, used by SDK consumers\n *     and `langwatch sync/eval/prompt/...` commands.\n *\n * Caller selects via `startDeviceCode({ credentialType })`. Server\n * stamps the choice on the device-code record + flips the response\n * shape on /exchange. Same browser approval ceremony for both — only\n * the persist target differs (`~/.langwatch/config.json` vs `.env`).\n */\nexport type CredentialType = \"device_session\" | \"project_api_key\";\n\nexport interface ExchangeDeviceSessionResult {\n  kind: \"device_session\";\n  access_token: string;\n  refresh_token: string;\n  expires_in: number;\n  user: ExchangeUser;\n  organization: ExchangeOrganization;\n  default_personal_vk?: ExchangePersonalVK;\n  endpoint?: string;\n}\n\nexport interface ExchangeApiKeyResult {\n  kind: \"api_key\";\n  api_key: string;\n  project: ExchangeProject;\n  user: ExchangeUser;\n  organization: ExchangeOrganization;\n  endpoint?: string;\n}\n\nexport type ExchangeResult =\n  | ExchangeDeviceSessionResult\n  | ExchangeApiKeyResult;\n\n/**\n * Back-compat alias for the device-session shape. Pre-`f9fcc3927` server\n * builds returned the unkinded shape verbatim; the runtime normaliser\n * below maps that to `{ kind: 'device_session', ... }` so callers can\n * always assume the discriminated form.\n */\nexport type LegacyExchangeResult = Omit<\n  ExchangeDeviceSessionResult,\n  \"kind\"\n> & { kind?: \"device_session\" };\n\nexport interface RefreshResult {\n  access_token: string;\n  refresh_token: string;\n  expires_in: number;\n}\n\nexport class DeviceFlowError extends Error {\n  constructor(public readonly kind: \"pending\" | \"denied\" | \"expired\" | \"slow_down\" | \"unauthorized\" | \"other\", message: string) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceFlowOptions {\n  /** Control-plane base URL (e.g. https://app.langwatch.ai). */\n  baseUrl: string;\n  /** Optional fetch override for tests. */\n  fetchImpl?: typeof fetch;\n}\n\n/**\n * `POST /api/auth/cli/device-code` — mint a device-code + user-code pair.\n *\n * Optional `credentialType` selects what `/exchange` will return on\n * approval: a user-scoped device session (default) or a project-scoped\n * API key. Older servers ignore the field and stay on the device-session\n * shape — back-compat is the server's responsibility.\n */\nexport async function startDeviceCode(\n  opts: DeviceFlowOptions,\n  init: { credentialType?: CredentialType } = {},\n): Promise<DeviceCode> {\n  const body: Record<string, unknown> = {};\n  if (init.credentialType) body.credential_type = init.credentialType;\n  const dc = await postJSON<DeviceCode>(opts, \"/api/auth/cli/device-code\", body);\n  if (!dc.interval || dc.interval <= 0) dc.interval = 5;\n  return dc;\n}\n\n/**\n * Device fingerprint stamped onto the CLI session at /exchange time.\n * The control plane persists it on the access + refresh token records\n * so /me/sessions can render \"Mac (rchaves.local)\" instead of\n * \"Unknown device\" — multi-device users need this to revoke\n * individual sessions without nuking every device they're logged in\n * on (Ariana QA finding). See\n * `langwatch/src/server/routes/auth-cli.ts#clientInfoSchema` for the\n * server contract.\n */\nfunction collectClientInfo(): {\n  hostname: string;\n  uname: string;\n  platform: string;\n} {\n  let hostname = \"\";\n  let uname = \"\";\n  try {\n    hostname = os.hostname();\n  } catch {\n    // os.hostname() can throw on locked-down sandboxes; carry empty.\n  }\n  try {\n    uname = os.userInfo().username;\n  } catch {\n    // os.userInfo() throws when the uid has no /etc/passwd entry\n    // (some Docker images, CI sandboxes); carry empty.\n  }\n  return { hostname, uname, platform: process.platform };\n}\n\n/**\n * `POST /api/auth/cli/exchange` — single poll. Returns the access+refresh\n * token bundle on success (200), or throws DeviceFlowError with a\n * categorised `kind` so the caller can decide whether to keep polling\n * (`pending`, `slow_down`) or stop (`denied`, `expired`).\n */\nexport async function exchange(\n  opts: DeviceFlowOptions,\n  deviceCode: string,\n): Promise<ExchangeResult> {\n  const res = await rawPost(opts, \"/api/auth/cli/exchange\", {\n    device_code: deviceCode,\n    client_info: collectClientInfo(),\n  });\n  switch (res.status) {\n    case 200: {\n      const body = (await res.json()) as\n        | ExchangeResult\n        | LegacyExchangeResult;\n      // Pre-f9fcc3927 servers returned the device-session shape without\n      // a `kind` field. Normalise so callers can always discriminate.\n      if (!(\"kind\" in body) || !body.kind) {\n        return { kind: \"device_session\", ...(body) };\n      }\n      return body as ExchangeResult;\n    }\n    case 428:\n      throw new DeviceFlowError(\"pending\", \"authorization pending\");\n    case 410:\n      throw new DeviceFlowError(\"denied\", \"authorization denied\");\n    case 408:\n      throw new DeviceFlowError(\"expired\", \"authorization request expired\");\n    case 429:\n      throw new DeviceFlowError(\"slow_down\", \"polling too fast\");\n    default: {\n      const body = await res.text().catch(() => \"\");\n      throw new DeviceFlowError(\"other\", `unexpected status ${res.status}: ${body.slice(0, 256)}`);\n    }\n  }\n}\n\n/**\n * Poll `exchange` at the cadence the server requested until the user\n * approves, denies, or the device-code expires. Honours RFC 8628 §3.5\n * by doubling the polling interval on `slow_down` responses.\n */\nexport async function pollUntilDone(\n  opts: DeviceFlowOptions,\n  dc: DeviceCode,\n): Promise<ExchangeResult> {\n  let interval = dc.interval * 1000;\n  const ceiling = 60_000;\n  const deadline = Date.now() + dc.expires_in * 1000;\n\n  for (;;) {\n    if (Date.now() > deadline) {\n      throw new DeviceFlowError(\"expired\", \"authorization request expired\");\n    }\n    await wait(interval);\n    try {\n      return await exchange(opts, dc.device_code);\n    } catch (err) {\n      if (!(err instanceof DeviceFlowError)) throw err;\n      if (err.kind === \"pending\") continue;\n      if (err.kind === \"slow_down\") {\n        interval = Math.min(interval * 2, ceiling);\n        continue;\n      }\n      throw err;\n    }\n  }\n}\n\n/**\n * `POST /api/auth/cli/refresh` — rotate access and refresh tokens.\n * 401 means the refresh token has been revoked server-side (admin\n * disable / off-boarding); the caller should clear local state.\n */\nexport async function refresh(\n  opts: DeviceFlowOptions,\n  refreshToken: string,\n): Promise<RefreshResult> {\n  const res = await rawPost(opts, \"/api/auth/cli/refresh\", { refresh_token: refreshToken });\n  if (res.status === 401) {\n    throw new DeviceFlowError(\"unauthorized\", \"session revoked — re-authenticate\");\n  }\n  if (!res.ok) {\n    const body = await res.text().catch(() => \"\");\n    throw new DeviceFlowError(\"other\", `refresh failed (${res.status}): ${body.slice(0, 256)}`);\n  }\n  return (await res.json()) as RefreshResult;\n}\n\n/**\n * `POST /api/auth/cli/logout` — server-side revoke a refresh token\n * AND its paired access token (per `e7a042c69`: a stolen access\n * token used to survive logout for up to 1h until expiry; sending\n * both closes the gap). Idempotent — 200 on already-revoked or\n * unknown tokens.\n */\nexport async function logout(\n  opts: DeviceFlowOptions,\n  refreshToken: string,\n  accessToken?: string,\n): Promise<void> {\n  const body: Record<string, string> = { refresh_token: refreshToken };\n  if (accessToken) body.access_token = accessToken;\n  const res = await rawPost(opts, \"/api/auth/cli/logout\", body);\n  // 401/404 mean \"already gone\" — that's success for logout.\n  if (res.status === 200 || res.status === 401 || res.status === 404) return;\n  const text = await res.text().catch(() => \"\");\n  throw new DeviceFlowError(\"other\", `logout failed (${res.status}): ${text.slice(0, 256)}`);\n}\n\nasync function postJSON<T>(opts: DeviceFlowOptions, path: string, body: unknown): Promise<T> {\n  const res = await rawPost(opts, path, body);\n  if (!res.ok) {\n    const text = await res.text().catch(() => \"\");\n    throw new DeviceFlowError(\"other\", `${path} → ${res.status}: ${text.slice(0, 256)}`);\n  }\n  return (await res.json()) as T;\n}\n\nfunction rawPost(opts: DeviceFlowOptions, path: string, body: unknown): Promise<Response> {\n  const url = opts.baseUrl.replace(/\\/+$/, \"\") + path;\n  const f = opts.fetchImpl ?? fetch;\n  return f(url, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Accept: \"application/json\",\n      // Origin enforcement on the server requires this for non-browser\n      // clients. The base URL is the same as the control plane, so\n      // mirroring it as Origin satisfies the same-origin gate.\n      Origin: opts.baseUrl.replace(/\\/+$/, \"\"),\n    },\n    body: JSON.stringify(body ?? {}),\n  });\n}\n","/**\n * Shared device-code login implementations. Two entry points:\n *\n *   1. `runUnifiedLoginFlow({ kind })` — the canonical flow used by\n *      `langwatch login` (interactive routes here for both modes). The\n *      same browser-approval ceremony works for either credential type;\n *      only the persist target differs:\n *        kind: 'device_session' → ~/.langwatch/config.json\n *        kind: 'project_api_key' → $CWD/.env (LANGWATCH_API_KEY)\n *      No copy-paste of the credential ever — the server ships it\n *      back to the CLI over the same RFC 8628 poll endpoint.\n *\n *   2. `runDeviceFlowLogin(...)` — back-compat wrapper that calls\n *      `runUnifiedLoginFlow({ kind: 'device_session' })`. Preserved so\n *      `commands/login.ts --device` and `utils/governance/wrapper.ts`\n *      auto-login keep working without churn.\n *\n * Spec: specs/ai-governance/cli-onboarding/login-unified.feature\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport chalk from \"chalk\";\nimport ora from \"ora\";\nimport {\n  startDeviceCode,\n  pollUntilDone,\n  DeviceFlowError,\n  type CredentialType,\n  type ExchangeApiKeyResult,\n  type ExchangeDeviceSessionResult,\n} from \"./device-flow\";\nimport { loadConfig, saveConfig, type GovernanceConfig } from \"./config\";\nimport { formatLoginCeremony } from \"./login-ceremony\";\nimport {\n  extractLookupIdFromToken,\n  getCliBootstrap,\n  listIngestionKeys,\n  type CliBootstrapResponse,\n} from \"./cli-api\";\n\nexport interface RunUnifiedLoginOptions {\n  /** Credential type to mint. Defaults to 'device_session' for back-compat. */\n  kind?: CredentialType;\n  /** Optional browser override (LANGWATCH_BROWSER also honoured). */\n  browser?: string;\n  /** Pre-loaded config to mutate; defaults to `loadConfig()`. */\n  cfg?: GovernanceConfig;\n}\n\nexport type RunDeviceFlowLoginOptions = Omit<RunUnifiedLoginOptions, \"kind\">;\n\n/**\n * Run the canonical device-code login flow end-to-end. Selects what to\n * mint via `kind` (defaults to device_session); the same browser\n * approval ceremony covers both modes. On success, persists to the\n * right store + returns the latest GovernanceConfig.\n */\nexport async function runUnifiedLoginFlow(\n  opts: RunUnifiedLoginOptions = {},\n): Promise<GovernanceConfig> {\n  const kind: CredentialType = opts.kind ?? \"device_session\";\n  const cfg = opts.cfg ?? loadConfig();\n  const baseUrl = cfg.control_plane_url;\n\n  console.log(chalk.blue(\"🔐 LangWatch login\"));\n  console.log(chalk.gray(`Control plane: ${baseUrl}`));\n  console.log(\n    chalk.gray(\n      kind === \"project_api_key\"\n        ? \"Mode: project SDK API key (will write .env)\"\n        : \"Mode: device session (will write ~/.langwatch/config.json)\",\n    ),\n  );\n\n  const dc = await startDeviceCode({ baseUrl }, { credentialType: kind });\n  const verifyURL =\n    dc.verification_uri_complete ??\n    `${dc.verification_uri.replace(/\\/+$/, \"\")}?user_code=${encodeURIComponent(dc.user_code)}`;\n\n  console.log();\n  console.log(chalk.cyan(`Opening: ${verifyURL}`));\n  console.log(\n    chalk.gray(\n      `If your browser doesn't open, paste the URL above and enter code: ${chalk.bold(dc.user_code)}`,\n    ),\n  );\n  console.log();\n\n  await openInBrowser(verifyURL, opts.browser);\n\n  // discardStdin:false is load-bearing. ora's default (true) flips stdin to\n  // raw mode while the spinner runs, so Ctrl+C arrives as a raw 0x03 byte that\n  // ora swallows instead of a SIGINT — the wait becomes unkillable. Keeping\n  // stdin cooked lets the terminal deliver SIGINT; the handler stops the\n  // spinner and exits cleanly so the user can always abort the login wait.\n  const spinner = ora({\n    text: \"Waiting for you to approve in the browser\",\n    discardStdin: false,\n  }).start();\n  const onSigint = () => {\n    spinner.stop();\n    console.log(chalk.gray(\"\\nLogin cancelled.\"));\n    process.exit(130);\n  };\n  process.once(\"SIGINT\", onSigint);\n  try {\n    const result = await pollUntilDone({ baseUrl }, dc);\n    if (result.kind === \"device_session\") {\n      spinner.succeed(`Logged in as ${result.user.email}`);\n      persistDeviceSession(cfg, result);\n      saveConfig(cfg);\n\n      const bootstrap = await fetchBootstrapSafely(cfg);\n\n      // Pick up the server's authoritative gateway URL. Without this,\n      // self-hosted CLI users would see the SaaS default\n      // (https://gateway.langwatch.ai) on whoami / login output even\n      // though the actual gateway is on localhost:5563. The server's\n      // `gatewayUrl` reflects `LW_GATEWAY_BASE_URL` or the IS_SAAS-\n      // aware fallback. Backwards-compatible: older servers (without\n      // this field) leave the local default in place.\n      if (bootstrap?.gatewayUrl) {\n        cfg.gateway_url = bootstrap.gatewayUrl;\n        saveConfig(cfg);\n      }\n\n      // Cache the org's per-tool path policy so the `langwatch <tool>`\n      // wrapper gates path selection on the admin's choices offline.\n      // Older servers omit the field; the wrapper then falls back to\n      // the hardcoded defaults.\n      if (bootstrap?.toolPolicies) {\n        cfg.tool_policies = bootstrap.toolPolicies;\n        saveConfig(cfg);\n      }\n\n      // Reconcile cached ingestion keys (#4755): after a fresh login, drop\n      // any locally cached entries whose token was revoked on the platform.\n      // Errors are swallowed — a login must never fail on reconcile; the\n      // worst outcome is a stale cache entry that the per-invocation wrapper\n      // check will catch anyway.\n      if (cfg.default_personal_ingest_keys && Object.keys(cfg.default_personal_ingest_keys).length > 0) {\n        try {\n          const liveKeys = await listIngestionKeys(cfg);\n          const liveSet = new Set(liveKeys.map((k) => `${k.sourceType}:${k.lookupId}`));\n          const reconciled: GovernanceConfig[\"default_personal_ingest_keys\"] = {};\n          let changed = false;\n          for (const [sourceType, entry] of Object.entries(cfg.default_personal_ingest_keys)) {\n            const lookupId = extractLookupIdFromToken(entry.secret ?? \"\");\n            if (lookupId && liveSet.has(`${sourceType}:${lookupId}`)) {\n              reconciled[sourceType] = entry;\n            } else {\n              // Entry is stale (revoked or lookupId missing) — omit from reconciled\n              changed = true;\n            }\n          }\n          if (changed) {\n            cfg.default_personal_ingest_keys = reconciled;\n            saveConfig(cfg);\n          }\n        } catch {\n          // Network error / older server: keep existing cache untouched\n        }\n      }\n\n      console.log();\n      const ceremonyLines = formatLoginCeremony({\n        email: cfg.user?.email ?? result.user.email,\n        organizationName: cfg.organization?.name,\n        tools: bootstrap?.tools,\n        providers: bootstrap?.providers,\n        budget:\n          bootstrap?.budget?.monthlyLimitUsd != null\n            ? {\n                period: bootstrap.budget.period,\n                limitUsd: bootstrap.budget.monthlyLimitUsd,\n                usedUsd: bootstrap.budget.monthlyUsedUsd,\n              }\n            : undefined,\n      });\n      for (const line of ceremonyLines) {\n        console.log(line);\n      }\n      console.log();\n      console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n\n      return cfg;\n    }\n\n    // kind === 'api_key' — write to project-local .env (NO copy-paste)\n    spinner.succeed(\n      `API key generated for project ${chalk.bold(result.project.name)}`,\n    );\n    const envResult = writeApiKeyToEnv(result.api_key);\n    console.log();\n    console.log(chalk.green(\"✓ API key saved to .env\"));\n    if (envResult.created) {\n      console.log(chalk.gray(`  • Created .env file at ${envResult.path}`));\n    } else if (envResult.updated) {\n      console.log(chalk.gray(`  • Updated existing API key in ${envResult.path}`));\n    } else {\n      console.log(chalk.gray(`  • Added API key to ${envResult.path}`));\n    }\n    console.log();\n    console.log(\n      chalk.gray(\n        `  Project: ${result.project.name} (${result.project.slug})`,\n      ),\n    );\n    console.log(chalk.gray(`  Dashboard: ${cfg.control_plane_url}`));\n    return cfg;\n  } catch (err) {\n    spinner.fail();\n    if (err instanceof DeviceFlowError) {\n      switch (err.kind) {\n        case \"denied\":\n          throw new Error(\n            \"authorization denied — you can retry `langwatch login`\",\n          );\n        case \"expired\":\n          throw new Error(\n            \"authorization request expired — run `langwatch login` again\",\n          );\n        default:\n          throw err;\n      }\n    }\n    throw err;\n  } finally {\n    process.removeListener(\"SIGINT\", onSigint);\n  }\n}\n\n/**\n * Back-compat wrapper. New callers should use `runUnifiedLoginFlow`\n * directly with an explicit `kind`.\n */\nexport async function runDeviceFlowLogin(\n  opts: RunDeviceFlowLoginOptions = {},\n): Promise<GovernanceConfig> {\n  return runUnifiedLoginFlow({ ...opts, kind: \"device_session\" });\n}\n\nfunction persistDeviceSession(\n  cfg: GovernanceConfig,\n  result: ExchangeDeviceSessionResult,\n): void {\n  cfg.access_token = result.access_token;\n  cfg.refresh_token = result.refresh_token;\n  cfg.expires_at = Math.floor(Date.now() / 1000) + result.expires_in;\n  cfg.user = {\n    id: result.user.id,\n    email: result.user.email,\n    name: result.user.name,\n  };\n  cfg.organization = {\n    id: result.organization.id,\n    slug: result.organization.slug,\n    name: result.organization.name,\n  };\n  if (result.default_personal_vk) {\n    cfg.default_personal_vk = {\n      id: result.default_personal_vk.id,\n      secret: result.default_personal_vk.secret,\n      prefix: result.default_personal_vk.prefix,\n    };\n  }\n  if (result.endpoint) {\n    cfg.control_plane_url = result.endpoint.replace(/\\/+$/, \"\");\n  }\n}\n\ninterface EnvWriteResult {\n  created: boolean;\n  updated: boolean;\n  path: string;\n}\n\nfunction writeApiKeyToEnv(apiKey: string): EnvWriteResult {\n  const envPath = path.join(process.cwd(), \".env\");\n  if (!fs.existsSync(envPath)) {\n    fs.writeFileSync(envPath, `LANGWATCH_API_KEY=${apiKey}\\n`);\n    return { created: true, updated: false, path: envPath };\n  }\n  const content = fs.readFileSync(envPath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  let found = false;\n  const updatedLines = lines.map((line) => {\n    if (line.startsWith(\"LANGWATCH_API_KEY=\")) {\n      found = true;\n      return `LANGWATCH_API_KEY=${apiKey}`;\n    }\n    return line;\n  });\n  if (!found) {\n    if (content.endsWith(\"\\n\") || content === \"\") {\n      updatedLines.push(`LANGWATCH_API_KEY=${apiKey}`);\n    } else {\n      updatedLines.push(\"\", `LANGWATCH_API_KEY=${apiKey}`);\n    }\n  }\n  fs.writeFileSync(envPath, updatedLines.join(\"\\n\"));\n  return { created: false, updated: found, path: envPath };\n}\n\nasync function fetchBootstrapSafely(\n  cfg: GovernanceConfig,\n): Promise<CliBootstrapResponse | null> {\n  try {\n    return await getCliBootstrap(cfg);\n  } catch {\n    return null;\n  }\n}\n\nasync function openInBrowser(url: string, override?: string): Promise<void> {\n  const choice =\n    override ?? process.env.LANGWATCH_BROWSER ?? process.env.BROWSER ?? \"\";\n  if (choice === \"none\") return;\n  const open = (await import(\"open\")).default;\n  try {\n    if (!choice || choice === \"default\") {\n      await open(url);\n      return;\n    }\n    await open(url, { app: { name: choice } });\n  } catch {\n    // browser failure shouldn't break login — user can paste manually\n  }\n}\n\n// The post-login shell-rc persist offer was removed when `langwatch\n// login` became auth-only: the device session in config.json is\n// already authoritative, so login never edits the shell rc. The\n// persist offer now lives in the `langwatch <tool>` wrapper and fires\n// only in ingestion mode (maybeOfferIngestionShellRcPersist in\n// shell-rc.ts), framed as installing telemetry.\n\n// Type-only re-exports so callers can import the shapes from this\n// module without reaching into device-flow.ts.\nexport type { ExchangeApiKeyResult, ExchangeDeviceSessionResult };\n","/**\n * Render the \"You're in!\" ceremony emitted by `langwatch login` after a\n * successful device-flow exchange.\n *\n * Two clearly-separated lists, sourced from the org's AI Tools catalog:\n *\n *   ✓ Logged in as jane@acme.com @ Acme\n *\n *   Your AI tools (run any of these):\n *     $ langwatch claude   # Claude Code\n *     $ langwatch codex    # Codex\n *\n *   Model providers you can issue a virtual key for:\n *     • anthropic   Claude\n *     • openai      (not configured yet)\n *\n *   Monthly budget: $500   |   Used: $0.00\n *\n *   Or open the app in your browser:\n *     $ langwatch open\n *\n * The two sections answer two different questions: which coding assistants\n * can I run right now (`tools`), and which model providers can I mint my own\n * virtual key for (`providers`). They are NOT the same thing — conflating\n * them was the bug this rewrite fixes.\n *\n * Pure function: takes the data, returns an array of lines. Caller applies\n * any chalk colouring + writes to stdout. Lets unit tests assert on the\n * literal output without colour/escape noise.\n */\n\nexport interface LoginCeremonyTool {\n  /** CLI slug the wrapper runs (e.g. \"claude\", \"codex\"). */\n  slug: string;\n  /** Human-readable assistant name (e.g. \"Claude Code\"). */\n  displayName: string;\n}\n\nexport interface LoginCeremonyProvider {\n  /** Provider key (lowercase, e.g. \"anthropic\", \"openai\", \"gemini\"). */\n  name: string;\n  /** Optional human-readable provider label (e.g. \"Anthropic\"). */\n  displayName?: string;\n  /**\n   * Whether the org has a live credential for this provider. When false the\n   * ceremony annotates the row so the user knows the tile still needs setup\n   * before a minted key will work.\n   */\n  configured?: boolean;\n}\n\nexport interface LoginCeremonyBudget {\n  /** Period label (e.g. \"Monthly\"). Capitalised in output. */\n  period: string;\n  /** Spend ceiling in USD (rendered as `$N`). */\n  limitUsd: number;\n  /** Used so far in USD (rendered with two decimals). */\n  usedUsd: number;\n}\n\nexport interface LoginCeremonyInput {\n  email: string;\n  organizationName?: string;\n  /**\n   * Coding assistants the user can run via `langwatch <slug>`, sourced from\n   * the org's catalog. When empty / omitted the ceremony falls back to the\n   * built-in default wrappers so a fresh org still gets a next-step.\n   */\n  tools?: LoginCeremonyTool[];\n  /** Model providers the user can mint their own virtual key for. */\n  providers?: LoginCeremonyProvider[];\n  budget?: LoginCeremonyBudget;\n  /** Whether the `langwatch open` browser-launch command is available. */\n  openCommand?: boolean;\n}\n\n/** Fallback wrappers when the org has not published any coding-assistant tile. */\nconst DEFAULT_TOOLS: LoginCeremonyTool[] = [\n  { slug: \"claude\", displayName: \"Claude Code\" },\n  { slug: \"codex\", displayName: \"Codex\" },\n  { slug: \"cursor\", displayName: \"Cursor\" },\n];\n\nfunction padRight(s: string, width: number): string {\n  if (s.length >= width) return s;\n  return s + \" \".repeat(width - s.length);\n}\n\nfunction formatUsd(n: number): string {\n  // $500 (whole) → \"$500\"; $42.18 → \"$42.18\".\n  if (Number.isInteger(n)) return `$${n}`;\n  return `$${n.toFixed(2)}`;\n}\n\nfunction formatUsedUsd(n: number): string {\n  return `$${n.toFixed(2)}`;\n}\n\nexport function formatLoginCeremony(input: LoginCeremonyInput): string[] {\n  const lines: string[] = [];\n\n  const orgSuffix = input.organizationName ? ` @ ${input.organizationName}` : \"\";\n  lines.push(`✓ Logged in as ${input.email}${orgSuffix}`);\n\n  // AI tools (coding assistants). Fall back to the built-in wrappers when the\n  // org published none, so the user always gets a runnable next-step.\n  const tools =\n    input.tools && input.tools.length > 0 ? input.tools : DEFAULT_TOOLS;\n  lines.push(\"\");\n  lines.push(\"Your AI tools (run any of these):\");\n  const cmdWidth = Math.max(\n    ...tools.map((t) => `langwatch ${t.slug}`.length),\n  );\n  for (const tool of tools) {\n    const cmd = `langwatch ${tool.slug}`;\n    const labelSuffix = tool.displayName ? `  # ${tool.displayName}` : \"\";\n    lines.push(`  $ ${padRight(cmd, cmdWidth)}${labelSuffix}`);\n  }\n\n  // Model providers the user can mint a virtual key for — a different concept\n  // from the tools above. Only shown when the org published provider tiles.\n  if (input.providers && input.providers.length > 0) {\n    lines.push(\"\");\n    lines.push(\"Model providers you can issue a virtual key for:\");\n    const nameWidth = Math.max(...input.providers.map((p) => p.name.length));\n    for (const p of input.providers) {\n      const padded = padRight(p.name, nameWidth);\n      const annotations: string[] = [];\n      if (p.displayName && p.displayName !== p.name) {\n        annotations.push(p.displayName);\n      }\n      if (p.configured === false) annotations.push(\"(not configured yet)\");\n      const suffix = annotations.length > 0 ? `  ${annotations.join(\"  \")}` : \"\";\n      lines.push(`  • ${padded}${suffix}`);\n    }\n  }\n\n  if (input.budget) {\n    lines.push(\"\");\n    const period =\n      input.budget.period.charAt(0).toUpperCase() +\n      input.budget.period.slice(1).toLowerCase();\n    lines.push(\n      `${period} budget: ${formatUsd(input.budget.limitUsd)}   |   Used: ${formatUsedUsd(input.budget.usedUsd)}`,\n    );\n  }\n\n  if (input.openCommand !== false) {\n    lines.push(\"\");\n    lines.push(\"Or open the app in your browser:\");\n    lines.push(\"  $ langwatch open\");\n  }\n\n  return lines;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAUA,YAAY,QAAQ;AACpB,SAAS,cAAc,YAAY;AA2F5B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YAA4B,MAAiF,SAAiB;AAC5H,UAAM,OAAO;AADa;AAE1B,SAAK,OAAO;AAAA,EACd;AACF;AAiBA,eAAsB,gBACpB,MACA,OAA4C,CAAC,GACxB;AACrB,QAAM,OAAgC,CAAC;AACvC,MAAI,KAAK,eAAgB,MAAK,kBAAkB,KAAK;AACrD,QAAM,KAAK,MAAM,SAAqB,MAAM,6BAA6B,IAAI;AAC7E,MAAI,CAAC,GAAG,YAAY,GAAG,YAAY,EAAG,IAAG,WAAW;AACpD,SAAO;AACT;AAYA,SAAS,oBAIP;AACA,MAAIA,YAAW;AACf,MAAI,QAAQ;AACZ,MAAI;AACF,IAAAA,YAAc,YAAS;AAAA,EACzB,SAAQ;AAAA,EAER;AACA,MAAI;AACF,YAAW,YAAS,EAAE;AAAA,EACxB,SAAQ;AAAA,EAGR;AACA,SAAO,EAAE,UAAAA,WAAU,OAAO,UAAU,QAAQ,SAAS;AACvD;AAQA,eAAsB,SACpB,MACA,YACyB;AACzB,QAAM,MAAM,MAAM,QAAQ,MAAM,0BAA0B;AAAA,IACxD,aAAa;AAAA,IACb,aAAa,kBAAkB;AAAA,EACjC,CAAC;AACD,UAAQ,IAAI,QAAQ;AAAA,IAClB,KAAK,KAAK;AACR,YAAM,OAAQ,MAAM,IAAI,KAAK;AAK7B,UAAI,EAAE,UAAU,SAAS,CAAC,KAAK,MAAM;AACnC,eAAO,iBAAE,MAAM,oBAAsB;AAAA,MACvC;AACA,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,YAAM,IAAI,gBAAgB,WAAW,uBAAuB;AAAA,IAC9D,KAAK;AACH,YAAM,IAAI,gBAAgB,UAAU,sBAAsB;AAAA,IAC5D,KAAK;AACH,YAAM,IAAI,gBAAgB,WAAW,+BAA+B;AAAA,IACtE,KAAK;AACH,YAAM,IAAI,gBAAgB,aAAa,kBAAkB;AAAA,IAC3D,SAAS;AACP,YAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,YAAM,IAAI,gBAAgB,SAAS,qBAAqB,IAAI,MAAM,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,IAC7F;AAAA,EACF;AACF;AAOA,eAAsB,cACpB,MACA,IACyB;AACzB,MAAI,WAAW,GAAG,WAAW;AAC7B,QAAM,UAAU;AAChB,QAAM,WAAW,KAAK,IAAI,IAAI,GAAG,aAAa;AAE9C,aAAS;AACP,QAAI,KAAK,IAAI,IAAI,UAAU;AACzB,YAAM,IAAI,gBAAgB,WAAW,+BAA+B;AAAA,IACtE;AACA,UAAM,KAAK,QAAQ;AACnB,QAAI;AACF,aAAO,MAAM,SAAS,MAAM,GAAG,WAAW;AAAA,IAC5C,SAAS,KAAK;AACZ,UAAI,EAAE,eAAe,iBAAkB,OAAM;AAC7C,UAAI,IAAI,SAAS,UAAW;AAC5B,UAAI,IAAI,SAAS,aAAa;AAC5B,mBAAW,KAAK,IAAI,WAAW,GAAG,OAAO;AACzC;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AA6BA,eAAsB,OACpB,MACA,cACA,aACe;AACf,QAAM,OAA+B,EAAE,eAAe,aAAa;AACnE,MAAI,YAAa,MAAK,eAAe;AACrC,QAAM,MAAM,MAAM,QAAQ,MAAM,wBAAwB,IAAI;AAE5D,MAAI,IAAI,WAAW,OAAO,IAAI,WAAW,OAAO,IAAI,WAAW,IAAK;AACpE,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,QAAM,IAAI,gBAAgB,SAAS,kBAAkB,IAAI,MAAM,MAAM,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAC3F;AAEA,eAAe,SAAY,MAAyBC,OAAc,MAA2B;AAC3F,QAAM,MAAM,MAAM,QAAQ,MAAMA,OAAM,IAAI;AAC1C,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE;AAC5C,UAAM,IAAI,gBAAgB,SAAS,GAAGA,KAAI,WAAM,IAAI,MAAM,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,EACrF;AACA,SAAQ,MAAM,IAAI,KAAK;AACzB;AAEA,SAAS,QAAQ,MAAyBA,OAAc,MAAkC;AAjS1F;AAkSE,QAAM,MAAM,KAAK,QAAQ,QAAQ,QAAQ,EAAE,IAAIA;AAC/C,QAAM,KAAI,UAAK,cAAL,YAAkB;AAC5B,SAAO,EAAE,KAAK;AAAA,IACZ,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,QAAQ;AAAA;AAAA;AAAA;AAAA,MAIR,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAAA,IACzC;AAAA,IACA,MAAM,KAAK,UAAU,sBAAQ,CAAC,CAAC;AAAA,EACjC,CAAC;AACH;;;AC5RA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,OAAO,WAAW;AAClB,OAAO,SAAS;;;ACsDhB,IAAM,gBAAqC;AAAA,EACzC,EAAE,MAAM,UAAU,aAAa,cAAc;AAAA,EAC7C,EAAE,MAAM,SAAS,aAAa,QAAQ;AAAA,EACtC,EAAE,MAAM,UAAU,aAAa,SAAS;AAC1C;AAEA,SAAS,SAAS,GAAW,OAAuB;AAClD,MAAI,EAAE,UAAU,MAAO,QAAO;AAC9B,SAAO,IAAI,IAAI,OAAO,QAAQ,EAAE,MAAM;AACxC;AAEA,SAAS,UAAU,GAAmB;AAEpC,MAAI,OAAO,UAAU,CAAC,EAAG,QAAO,IAAI,CAAC;AACrC,SAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzB;AAEA,SAAS,cAAc,GAAmB;AACxC,SAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzB;AAEO,SAAS,oBAAoB,OAAqC;AACvE,QAAM,QAAkB,CAAC;AAEzB,QAAM,YAAY,MAAM,mBAAmB,MAAM,MAAM,gBAAgB,KAAK;AAC5E,QAAM,KAAK,uBAAkB,MAAM,KAAK,GAAG,SAAS,EAAE;AAItD,QAAM,QACJ,MAAM,SAAS,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ;AACxD,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,mCAAmC;AAC9C,QAAM,WAAW,KAAK;AAAA,IACpB,GAAG,MAAM,IAAI,CAAC,MAAM,aAAa,EAAE,IAAI,GAAG,MAAM;AAAA,EAClD;AACA,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,aAAa,KAAK,IAAI;AAClC,UAAM,cAAc,KAAK,cAAc,OAAO,KAAK,WAAW,KAAK;AACnE,UAAM,KAAK,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG,WAAW,EAAE;AAAA,EAC3D;AAIA,MAAI,MAAM,aAAa,MAAM,UAAU,SAAS,GAAG;AACjD,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,kDAAkD;AAC7D,UAAM,YAAY,KAAK,IAAI,GAAG,MAAM,UAAU,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AACvE,eAAW,KAAK,MAAM,WAAW;AAC/B,YAAM,SAAS,SAAS,EAAE,MAAM,SAAS;AACzC,YAAM,cAAwB,CAAC;AAC/B,UAAI,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM;AAC7C,oBAAY,KAAK,EAAE,WAAW;AAAA,MAChC;AACA,UAAI,EAAE,eAAe,MAAO,aAAY,KAAK,sBAAsB;AACnE,YAAM,SAAS,YAAY,SAAS,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK;AACxE,YAAM,KAAK,YAAO,MAAM,GAAG,MAAM,EAAE;AAAA,IACrC;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ;AAChB,UAAM,KAAK,EAAE;AACb,UAAM,SACJ,MAAM,OAAO,OAAO,OAAO,CAAC,EAAE,YAAY,IAC1C,MAAM,OAAO,OAAO,MAAM,CAAC,EAAE,YAAY;AAC3C,UAAM;AAAA,MACJ,GAAG,MAAM,YAAY,UAAU,MAAM,OAAO,QAAQ,CAAC,gBAAgB,cAAc,MAAM,OAAO,OAAO,CAAC;AAAA,IAC1G;AAAA,EACF;AAEA,MAAI,MAAM,gBAAgB,OAAO;AAC/B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,kCAAkC;AAC7C,UAAM,KAAK,oBAAoB;AAAA,EACjC;AAEA,SAAO;AACT;;;ADhGA,eAAsB,oBACpB,OAA+B,CAAC,GACL;AA5D7B;AA6DE,QAAM,QAAuB,UAAK,SAAL,YAAa;AAC1C,QAAM,OAAM,UAAK,QAAL,YAAY,WAAW;AACnC,QAAM,UAAU,IAAI;AAEpB,UAAQ,IAAI,MAAM,KAAK,2BAAoB,CAAC;AAC5C,UAAQ,IAAI,MAAM,KAAK,kBAAkB,OAAO,EAAE,CAAC;AACnD,UAAQ;AAAA,IACN,MAAM;AAAA,MACJ,SAAS,oBACL,gDACA;AAAA,IACN;AAAA,EACF;AAEA,QAAM,KAAK,MAAM,gBAAgB,EAAE,QAAQ,GAAG,EAAE,gBAAgB,KAAK,CAAC;AACtE,QAAM,aACJ,QAAG,8BAAH,YACA,GAAG,GAAG,iBAAiB,QAAQ,QAAQ,EAAE,CAAC,cAAc,mBAAmB,GAAG,SAAS,CAAC;AAE1F,UAAQ,IAAI;AACZ,UAAQ,IAAI,MAAM,KAAK,YAAY,SAAS,EAAE,CAAC;AAC/C,UAAQ;AAAA,IACN,MAAM;AAAA,MACJ,qEAAqE,MAAM,KAAK,GAAG,SAAS,CAAC;AAAA,IAC/F;AAAA,EACF;AACA,UAAQ,IAAI;AAEZ,QAAM,cAAc,WAAW,KAAK,OAAO;AAO3C,QAAM,UAAU,IAAI;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA,EAChB,CAAC,EAAE,MAAM;AACT,QAAM,WAAW,MAAM;AACrB,YAAQ,KAAK;AACb,YAAQ,IAAI,MAAM,KAAK,oBAAoB,CAAC;AAC5C,YAAQ,KAAK,GAAG;AAAA,EAClB;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,MAAI;AACF,UAAM,SAAS,MAAM,cAAc,EAAE,QAAQ,GAAG,EAAE;AAClD,QAAI,OAAO,SAAS,kBAAkB;AACpC,cAAQ,QAAQ,gBAAgB,OAAO,KAAK,KAAK,EAAE;AACnD,2BAAqB,KAAK,MAAM;AAChC,iBAAW,GAAG;AAEd,YAAM,YAAY,MAAM,qBAAqB,GAAG;AAShD,UAAI,uCAAW,YAAY;AACzB,YAAI,cAAc,UAAU;AAC5B,mBAAW,GAAG;AAAA,MAChB;AAMA,UAAI,uCAAW,cAAc;AAC3B,YAAI,gBAAgB,UAAU;AAC9B,mBAAW,GAAG;AAAA,MAChB;AAOA,UAAI,IAAI,gCAAgC,OAAO,KAAK,IAAI,4BAA4B,EAAE,SAAS,GAAG;AAChG,YAAI;AACF,gBAAM,WAAW,MAAM,kBAAkB,GAAG;AAC5C,gBAAM,UAAU,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,UAAU,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5E,gBAAM,aAA+D,CAAC;AACtE,cAAI,UAAU;AACd,qBAAW,CAAC,YAAY,KAAK,KAAK,OAAO,QAAQ,IAAI,4BAA4B,GAAG;AAClF,kBAAM,WAAW,0BAAyB,WAAM,WAAN,YAAgB,EAAE;AAC5D,gBAAI,YAAY,QAAQ,IAAI,GAAG,UAAU,IAAI,QAAQ,EAAE,GAAG;AACxD,yBAAW,UAAU,IAAI;AAAA,YAC3B,OAAO;AAEL,wBAAU;AAAA,YACZ;AAAA,UACF;AACA,cAAI,SAAS;AACX,gBAAI,+BAA+B;AACnC,uBAAW,GAAG;AAAA,UAChB;AAAA,QACF,SAAQ;AAAA,QAER;AAAA,MACF;AAEA,cAAQ,IAAI;AACZ,YAAM,gBAAgB,oBAAoB;AAAA,QACxC,QAAO,eAAI,SAAJ,mBAAU,UAAV,YAAmB,OAAO,KAAK;AAAA,QACtC,mBAAkB,SAAI,iBAAJ,mBAAkB;AAAA,QACpC,OAAO,uCAAW;AAAA,QAClB,WAAW,uCAAW;AAAA,QACtB,UACE,4CAAW,WAAX,mBAAmB,oBAAmB,OAClC;AAAA,UACE,QAAQ,UAAU,OAAO;AAAA,UACzB,UAAU,UAAU,OAAO;AAAA,UAC3B,SAAS,UAAU,OAAO;AAAA,QAC5B,IACA;AAAA,MACR,CAAC;AACD,iBAAW,QAAQ,eAAe;AAChC,gBAAQ,IAAI,IAAI;AAAA,MAClB;AACA,cAAQ,IAAI;AACZ,cAAQ,IAAI,MAAM,KAAK,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;AAE/D,aAAO;AAAA,IACT;AAGA,YAAQ;AAAA,MACN,iCAAiC,MAAM,KAAK,OAAO,QAAQ,IAAI,CAAC;AAAA,IAClE;AACA,UAAM,YAAY,iBAAiB,OAAO,OAAO;AACjD,YAAQ,IAAI;AACZ,YAAQ,IAAI,MAAM,MAAM,8BAAyB,CAAC;AAClD,QAAI,UAAU,SAAS;AACrB,cAAQ,IAAI,MAAM,KAAK,iCAA4B,UAAU,IAAI,EAAE,CAAC;AAAA,IACtE,WAAW,UAAU,SAAS;AAC5B,cAAQ,IAAI,MAAM,KAAK,wCAAmC,UAAU,IAAI,EAAE,CAAC;AAAA,IAC7E,OAAO;AACL,cAAQ,IAAI,MAAM,KAAK,6BAAwB,UAAU,IAAI,EAAE,CAAC;AAAA,IAClE;AACA,YAAQ,IAAI;AACZ,YAAQ;AAAA,MACN,MAAM;AAAA,QACJ,cAAc,OAAO,QAAQ,IAAI,KAAK,OAAO,QAAQ,IAAI;AAAA,MAC3D;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,KAAK,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;AAC/D,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,YAAQ,KAAK;AACb,QAAI,eAAe,iBAAiB;AAClC,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF,KAAK;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACE,gBAAM;AAAA,MACV;AAAA,IACF;AACA,UAAM;AAAA,EACR,UAAE;AACA,YAAQ,eAAe,UAAU,QAAQ;AAAA,EAC3C;AACF;AAMA,eAAsB,mBACpB,OAAkC,CAAC,GACR;AAC3B,SAAO,oBAAoB,iCAAK,OAAL,EAAW,MAAM,iBAAiB,EAAC;AAChE;AAEA,SAAS,qBACP,KACA,QACM;AACN,MAAI,eAAe,OAAO;AAC1B,MAAI,gBAAgB,OAAO;AAC3B,MAAI,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,OAAO;AACxD,MAAI,OAAO;AAAA,IACT,IAAI,OAAO,KAAK;AAAA,IAChB,OAAO,OAAO,KAAK;AAAA,IACnB,MAAM,OAAO,KAAK;AAAA,EACpB;AACA,MAAI,eAAe;AAAA,IACjB,IAAI,OAAO,aAAa;AAAA,IACxB,MAAM,OAAO,aAAa;AAAA,IAC1B,MAAM,OAAO,aAAa;AAAA,EAC5B;AACA,MAAI,OAAO,qBAAqB;AAC9B,QAAI,sBAAsB;AAAA,MACxB,IAAI,OAAO,oBAAoB;AAAA,MAC/B,QAAQ,OAAO,oBAAoB;AAAA,MACnC,QAAQ,OAAO,oBAAoB;AAAA,IACrC;AAAA,EACF;AACA,MAAI,OAAO,UAAU;AACnB,QAAI,oBAAoB,OAAO,SAAS,QAAQ,QAAQ,EAAE;AAAA,EAC5D;AACF;AAQA,SAAS,iBAAiB,QAAgC;AACxD,QAAM,UAAe,UAAK,QAAQ,IAAI,GAAG,MAAM;AAC/C,MAAI,CAAI,cAAW,OAAO,GAAG;AAC3B,IAAG,iBAAc,SAAS,qBAAqB,MAAM;AAAA,CAAI;AACzD,WAAO,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM,QAAQ;AAAA,EACxD;AACA,QAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,MAAI,QAAQ;AACZ,QAAM,eAAe,MAAM,IAAI,CAAC,SAAS;AACvC,QAAI,KAAK,WAAW,oBAAoB,GAAG;AACzC,cAAQ;AACR,aAAO,qBAAqB,MAAM;AAAA,IACpC;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI,CAAC,OAAO;AACV,QAAI,QAAQ,SAAS,IAAI,KAAK,YAAY,IAAI;AAC5C,mBAAa,KAAK,qBAAqB,MAAM,EAAE;AAAA,IACjD,OAAO;AACL,mBAAa,KAAK,IAAI,qBAAqB,MAAM,EAAE;AAAA,IACrD;AAAA,EACF;AACA,EAAG,iBAAc,SAAS,aAAa,KAAK,IAAI,CAAC;AACjD,SAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM,QAAQ;AACzD;AAEA,eAAe,qBACb,KACsC;AACtC,MAAI;AACF,WAAO,MAAM,gBAAgB,GAAG;AAAA,EAClC,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAAc,KAAa,UAAkC;AA3T5E;AA4TE,QAAM,UACJ,yCAAY,QAAQ,IAAI,sBAAxB,YAA6C,QAAQ,IAAI,YAAzD,YAAoE;AACtE,MAAI,WAAW,OAAQ;AACvB,QAAM,QAAQ,MAAM,OAAO,MAAM,GAAG;AACpC,MAAI;AACF,QAAI,CAAC,UAAU,WAAW,WAAW;AACnC,YAAM,KAAK,GAAG;AACd;AAAA,IACF;AACA,UAAM,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM,OAAO,EAAE,CAAC;AAAA,EAC3C,SAAQ;AAAA,EAER;AACF;","names":["hostname","path"]}

package/dist/chunk-Q6OMYVNW.js

@@ -0,0 +1,66 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+
+var _chunkZX6VUKK5js = require('./chunk-ZX6VUKK5.js');
+
+
+var _chunkTIAQGDR2js = require('./chunk-TIAQGDR2.js');
+
+// src/cli/commands/dataset/create.ts
+var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
+var _ora = require('ora'); var _ora2 = _interopRequireDefault(_ora);
+var parseColumns = (columnsStr) => {
+  return columnsStr.split(",").map((pair) => {
+    var _a, _b;
+    const parts = pair.trim().split(":");
+    if (parts.length !== 2 || !((_a = parts[0]) == null ? void 0 : _a.trim()) || !((_b = parts[1]) == null ? void 0 : _b.trim())) {
+      throw new Error(
+        `Invalid column format: "${pair.trim()}". Expected "name:type" (e.g. "input:string")`
+      );
+    }
+    return { name: parts[0].trim(), type: parts[1].trim() };
+  });
+};
+var createCommand = async (name, options) => {
+  _chunkTIAQGDR2js.checkApiKey.call(void 0, );
+  let columnTypes = [];
+  if (options.columns) {
+    try {
+      columnTypes = parseColumns(options.columns);
+    } catch (error) {
+      console.error(
+        _chalk2.default.red(error instanceof Error ? error.message : "Invalid columns format")
+      );
+      process.exit(1);
+    }
+  }
+  const service = _chunkZX6VUKK5js.createDatasetService.call(void 0, );
+  const spinner = _ora2.default.call(void 0, `Creating dataset "${name}"...`).start();
+  try {
+    const dataset = await service.createDataset({ name, columnTypes });
+    spinner.succeed(`Dataset created: ${_chalk2.default.cyan(dataset.slug)}`);
+    if (options.format === "json") {
+      console.log(JSON.stringify(dataset, null, 2));
+      return;
+    }
+    console.log();
+    console.log(`  ${_chalk2.default.bold("ID:")}    ${dataset.id}`);
+    console.log(`  ${_chalk2.default.bold("Slug:")}  ${dataset.slug}`);
+    if (dataset.columnTypes.length > 0) {
+      const colStr = dataset.columnTypes.map((c) => `${c.name}:${c.type}`).join(", ");
+      console.log(`  ${_chalk2.default.bold("Columns:")} ${colStr}`);
+    }
+    const viewUrl = dataset.platformUrl;
+    if (viewUrl) {
+      console.log(`  ${_chalk2.default.bold("View:")}  ${_chalk2.default.underline(viewUrl)}`);
+    }
+  } catch (error) {
+    _chunkZX6VUKK5js.handleDatasetCommandError.call(void 0, { spinner, error, context: "create dataset" });
+  }
+};
+
+
+
+
+exports.parseColumns = parseColumns; exports.createCommand = createCommand;
+//# sourceMappingURL=chunk-Q6OMYVNW.js.map

package/dist/chunk-Q6OMYVNW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-Q6OMYVNW.js","../src/cli/commands/dataset/create.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACRA,4EAAkB;AAClB,oEAAgB;AAaT,IAAM,aAAA,EAAe,CAAC,UAAA,EAAA,GAA4C;AACvE,EAAA,OAAO,UAAA,CAAW,KAAA,CAAM,GAAG,CAAA,CAAE,GAAA,CAAI,CAAC,IAAA,EAAA,GAAS;AAf7C,IAAA,IAAA,EAAA,EAAA,EAAA;AAgBI,IAAA,MAAM,MAAA,EAAQ,IAAA,CAAK,IAAA,CAAK,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA;AACnC,IAAA,GAAA,CAAI,KAAA,CAAM,OAAA,IAAW,EAAA,GAAK,CAAA,CAAA,CAAC,GAAA,EAAA,KAAA,CAAM,CAAC,CAAA,EAAA,GAAP,KAAA,EAAA,KAAA,EAAA,EAAA,EAAA,CAAU,IAAA,CAAA,CAAA,EAAA,GAAU,CAAA,CAAA,CAAC,GAAA,EAAA,KAAA,CAAM,CAAC,CAAA,EAAA,GAAP,KAAA,EAAA,KAAA,EAAA,EAAA,EAAA,CAAU,IAAA,CAAA,CAAA,CAAA,EAAQ;AAChE,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,wBAAA,EAA2B,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,6CAAA;AAAA,MACxC,CAAA;AAAA,IACF;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,CAAK,CAAA,EAAG,IAAA,EAAM,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAA;AAAA,EACxD,CAAC,CAAA;AACH,CAAA;AAKO,IAAM,cAAA,EAAgB,MAAA,CAC3B,IAAA,EACA,OAAA,EAAA,GACkB;AAClB,EAAA,0CAAA,CAAY;AAEZ,EAAA,IAAI,YAAA,EAAmC,CAAC,CAAA;AACxC,EAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS;AACnB,IAAA,IAAI;AACF,MAAA,YAAA,EAAc,YAAA,CAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,IAC5C,EAAA,MAAA,CAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,eAAA,CAAM,GAAA,CAAI,MAAA,WAAiB,MAAA,EAAQ,KAAA,CAAM,QAAA,EAAU,wBAAwB;AAAA,MAC7E,CAAA;AACA,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA;AAAA,IAChB;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,EAAU,mDAAA,CAAqB;AACrC,EAAA,MAAM,QAAA,EAAU,2BAAA,CAAI,kBAAA,EAAqB,IAAI,CAAA,IAAA,CAAM,CAAA,CAAE,KAAA,CAAM,CAAA;AAE3D,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,EAAU,MAAM,OAAA,CAAQ,aAAA,CAAc,EAAE,IAAA,EAAM,YAAY,CAAC,CAAA;AAEjE,IAAA,OAAA,CAAQ,OAAA,CAAQ,CAAA,iBAAA,EAAoB,eAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAC,CAAA,CAAA;AAE7B,IAAA;AACe,MAAA;AAC5C,MAAA;AACF,IAAA;AAEY,IAAA;AACyC,IAAA;AACE,IAAA;AACnB,IAAA;AAEP,MAAA;AAEwB,MAAA;AACrD,IAAA;AACwB,IAAA;AACX,IAAA;AAC8C,MAAA;AAC3D,IAAA;AACc,EAAA;AACuC,IAAA;AACvD,EAAA;AACF;ADhBiE;AACA;AACA;AACA;AACA","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-Q6OMYVNW.js","sourcesContent":[null,"import chalk from \"chalk\";\nimport ora from \"ora\";\nimport type { DatasetColumnType } from \"@/client-sdk/services/datasets/types\";\nimport { checkApiKey } from \"../../utils/apiKey\";\nimport { createDatasetService } from \"./service-factory\";\nimport { handleDatasetCommandError } from \"./error-handler\";\n\n/**\n * Parses a comma-separated column spec string into DatasetColumnType[].\n *\n * @param columnsStr - Format: \"name:type,name:type\" (e.g. \"input:string,output:string\")\n * @returns Parsed column type definitions\n * @throws Error if the format is invalid\n */\nexport const parseColumns = (columnsStr: string): DatasetColumnType[] => {\n  return columnsStr.split(\",\").map((pair) => {\n    const parts = pair.trim().split(\":\");\n    if (parts.length !== 2 || !parts[0]?.trim() || !parts[1]?.trim()) {\n      throw new Error(\n        `Invalid column format: \"${pair.trim()}\". Expected \"name:type\" (e.g. \"input:string\")`,\n      );\n    }\n    return { name: parts[0].trim(), type: parts[1].trim() };\n  });\n};\n\n/**\n * Creates a new dataset with the given name and optional column types.\n */\nexport const createCommand = async (\n  name: string,\n  options: { columns?: string; format?: string },\n): Promise<void> => {\n  checkApiKey();\n\n  let columnTypes: DatasetColumnType[] = [];\n  if (options.columns) {\n    try {\n      columnTypes = parseColumns(options.columns);\n    } catch (error) {\n      console.error(\n        chalk.red(error instanceof Error ? error.message : \"Invalid columns format\"),\n      );\n      process.exit(1);\n    }\n  }\n\n  const service = createDatasetService();\n  const spinner = ora(`Creating dataset \"${name}\"...`).start();\n\n  try {\n    const dataset = await service.createDataset({ name, columnTypes });\n\n    spinner.succeed(`Dataset created: ${chalk.cyan(dataset.slug)}`);\n\n    if (options.format === \"json\") {\n      console.log(JSON.stringify(dataset, null, 2));\n      return;\n    }\n\n    console.log();\n    console.log(`  ${chalk.bold(\"ID:\")}    ${dataset.id}`);\n    console.log(`  ${chalk.bold(\"Slug:\")}  ${dataset.slug}`);\n    if (dataset.columnTypes.length > 0) {\n      const colStr = dataset.columnTypes\n        .map((c) => `${c.name}:${c.type}`)\n        .join(\", \");\n      console.log(`  ${chalk.bold(\"Columns:\")} ${colStr}`);\n    }\n    const viewUrl = dataset.platformUrl;\n    if (viewUrl) {\n      console.log(`  ${chalk.bold(\"View:\")}  ${chalk.underline(viewUrl)}`);\n    }\n  } catch (error) {\n    handleDatasetCommandError({ spinner, error, context: \"create dataset\" });\n  }\n};\n"]}

package/dist/chunk-QSMGACTW.js

@@ -0,0 +1,51 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkLSRJHTPLjs = require('./chunk-LSRJHTPL.js');
+
+
+
+var _chunkC5Y772G7js = require('./chunk-C5Y772G7.js');
+
+// src/client-sdk/services/model-providers/model-providers-api.service.ts
+var ModelProvidersApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "ModelProvidersApiError";
+  }
+};
+var ModelProvidersApiService = class {
+  constructor(config) {
+    var _a;
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : _chunkLSRJHTPLjs.createLangWatchApiClient.call(void 0, );
+  }
+  handleApiError(operation, error) {
+    const message = _chunkC5Y772G7js.formatApiErrorForOperation.call(void 0, { operation, error, options: {
+      status: _chunkC5Y772G7js.extractStatusFromResponse.call(void 0, error)
+    } });
+    throw new ModelProvidersApiError(message, operation, error);
+  }
+  async list() {
+    const { data, error } = await this.apiClient.GET("/api/model-providers");
+    if (error) this.handleApiError("list model providers", error);
+    return data;
+  }
+  async set(provider, params) {
+    const { data, error } = await this.apiClient.PUT(
+      "/api/model-providers/{provider}",
+      {
+        params: { path: { provider } },
+        body: params
+      }
+    );
+    if (error)
+      this.handleApiError(`set model provider "${provider}"`, error);
+    return data;
+  }
+};
+
+
+
+exports.ModelProvidersApiService = ModelProvidersApiService;
+//# sourceMappingURL=chunk-QSMGACTW.js.map

package/dist/chunk-QSMGACTW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-QSMGACTW.js","../src/client-sdk/services/model-providers/model-providers-api.service.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACA;ACUO,IAAM,uBAAA,EAAN,MAAA,QAAqC,MAAM;AAAA,EAChD,WAAA,CACE,OAAA,EACgB,SAAA,EACA,aAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAHG,IAAA,IAAA,CAAA,UAAA,EAAA,SAAA;AACA,IAAA,IAAA,CAAA,cAAA,EAAA,aAAA;AAGhB,IAAA,IAAA,CAAK,KAAA,EAAO,wBAAA;AAAA,EACd;AACF,CAAA;AAEO,IAAM,yBAAA,EAAN,MAA+B;AAAA,EAGpC,WAAA,CAAY,MAAA,EAAqD;AAhCnE,IAAA,IAAA,EAAA;AAiCI,IAAA,IAAA,CAAK,UAAA,EAAA,CAAY,GAAA,EAAA,OAAA,GAAA,KAAA,EAAA,KAAA,EAAA,EAAA,MAAA,CAAQ,kBAAA,EAAA,GAAR,KAAA,EAAA,GAAA,EAA8B,uDAAA,CAAyB;AAAA,EAC1E;AAAA,EAEQ,cAAA,CAAe,SAAA,EAAmB,KAAA,EAAuB;AAC/D,IAAA,MAAM,QAAA,EAAU,yDAAA,EAA6B,SAAA,EAAsB,KAAA,EAAc,OAAA,EAAS;AAAA,MACxF,MAAA,EAAQ,wDAAA,KAA+B;AAAA,IACzC,EAAE,CAAC,CAAA;AACH,IAAA,MAAM,IAAI,sBAAA,CAAuB,OAAA,EAAS,SAAA,EAAW,KAAK,CAAA;AAAA,EAC5D;AAAA,EAEA,MAAM,IAAA,CAAA,EAA4C;AAChD,IAAA,MAAM,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,sBAAsB,CAAA;AACvE,IAAA,GAAA,CAAI,KAAA,EAAO,IAAA,CAAK,cAAA,CAAe,sBAAA,EAAwB,KAAK,CAAA;AAC5D,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,GAAA,CAAI,QAAA,EAAkB,MAAA,EAAsE;AAChG,IAAA,MAAM,EAAE,IAAA,EAAM,MAAM,EAAA,EAAI,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA;AAAA,MAC3C,iCAAA;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAS,EAAE,CAAA;AAAA,QAC7B,IAAA,EAAM;AAAA,MACR;AAAA,IACF,CAAA;AACA,IAAA,GAAA,CAAI,KAAA;AACF,MAAA,IAAA,CAAK,cAAA,CAAe,CAAA,oBAAA,EAAuB,QAAQ,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAA;ADfA;AACA;AACE;AACF,4DAAC","file":"/home/runner/work/langwatch/langwatch/typescript-sdk/dist/chunk-QSMGACTW.js","sourcesContent":[null,"import type { paths } from \"@/internal/generated/openapi/api-client\";\nimport {\n  createLangWatchApiClient,\n  type LangwatchApiClient,\n} from \"@/internal/api/client\";\nimport { type InternalConfig } from \"@/client-sdk/types\";\nimport {\n  extractStatusFromResponse,\n  formatApiErrorForOperation,\n} from \"@/client-sdk/services/_shared/format-api-error\";\n\nexport type ModelProvidersListResponse =\n  paths[\"/api/model-providers\"][\"get\"][\"responses\"][\"200\"][\"content\"][\"application/json\"];\n\nexport type UpdateModelProviderBody = NonNullable<\n  paths[\"/api/model-providers/{provider}\"][\"put\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\nexport class ModelProvidersApiError extends Error {\n  constructor(\n    message: string,\n    public readonly operation: string,\n    public readonly originalError?: unknown,\n  ) {\n    super(message);\n    this.name = \"ModelProvidersApiError\";\n  }\n}\n\nexport class ModelProvidersApiService {\n  private readonly apiClient: LangwatchApiClient;\n\n  constructor(config?: Pick<InternalConfig, \"langwatchApiClient\">) {\n    this.apiClient = config?.langwatchApiClient ?? createLangWatchApiClient();\n  }\n\n  private handleApiError(operation: string, error: unknown): never {\n    const message = formatApiErrorForOperation({ operation: operation, error: error, options: {\n      status: extractStatusFromResponse(error),\n    } });\n    throw new ModelProvidersApiError(message, operation, error);\n  }\n\n  async list(): Promise<ModelProvidersListResponse> {\n    const { data, error } = await this.apiClient.GET(\"/api/model-providers\");\n    if (error) this.handleApiError(\"list model providers\", error);\n    return data;\n  }\n\n  async set(provider: string, params: UpdateModelProviderBody): Promise<ModelProvidersListResponse> {\n    const { data, error } = await this.apiClient.PUT(\n      \"/api/model-providers/{provider}\",\n      {\n        params: { path: { provider } },\n        body: params,\n      },\n    );\n    if (error)\n      this.handleApiError(`set model provider \"${provider}\"`, error);\n    return data;\n  }\n}\n"]}