langwatch 1.0.0 → 1.2.0

package/dist/index.js

@@ -1,15 +1,15 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-var _chunkIUSLT65Zjs = require('./chunk-IUSLT65Z.js');
+var _chunkZTOXEWNXjs = require('./chunk-ZTOXEWNX.js');
 
 
 
-var _chunkADJOFPAZjs = require('./chunk-ADJOFPAZ.js');
 
+var _chunkK6KPNTQOjs = require('./chunk-K6KPNTQO.js');
 
-var _chunk52VMSJ4Ojs = require('./chunk-52VMSJ4O.js');
 
 
+var _chunkDTSULVK5js = require('./chunk-DTSULVK5.js');
 
 
 
@@ -19,7 +19,10 @@ var _chunk52VMSJ4Ojs = require('./chunk-52VMSJ4O.js');
 
 
 
-var _chunkWHBCX64Rjs = require('./chunk-WHBCX64R.js');
+
+var _chunkUOFSG6R4js = require('./chunk-UOFSG6R4.js');
+
+
 
 
 
@@ -33,10 +36,21 @@ var _chunkWHBCX64Rjs = require('./chunk-WHBCX64R.js');
 
 
 
-var _chunkTKSTXX3Djs = require('./chunk-TKSTXX3D.js');
 
-// src/client-sdk/services/prompts/prompts-api.service.ts
-var _zod = require('zod');
+
+var _chunkCLTKABMOjs = require('./chunk-CLTKABMO.js');
+
+// src/internal/credentialContext.ts
+var _async_hooks = require('async_hooks');
+var storage = new (0, _async_hooks.AsyncLocalStorage)();
+var fallbackHolder = {};
+function currentHolder() {
+  var _a;
+  return (_a = storage.getStore()) != null ? _a : fallbackHolder;
+}
+function scopedApiKey() {
+  return currentHolder().apiKey;
+}
 
 // src/cli/utils/responseFormat.ts
 var DEFAULT_TEXT_OUTPUT = {
@@ -174,7 +188,7 @@ var PromptTracingDecorator = class {
   }
   traceCompilation(span, variables, compileFn) {
     span.setType("prompt");
-    if (_chunkTKSTXX3Djs.shouldCaptureInput.call(void 0, )) {
+    if (_chunkCLTKABMOjs.shouldCaptureInput.call(void 0, )) {
       span.setInput(this.target);
       if (variables) {
         span.setAttribute(
@@ -193,8 +207,8 @@ var PromptTracingDecorator = class {
         `${result.handle}:${result.version}`
       );
     }
-    if (_chunkTKSTXX3Djs.shouldCaptureOutput.call(void 0, )) {
-      span.setOutput(_chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, result), {
+    if (_chunkCLTKABMOjs.shouldCaptureOutput.call(void 0, )) {
+      span.setOutput(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, result), {
         raw: void 0
         // TODO(afr): Figure out a better way to do this.
       }));
@@ -233,7 +247,7 @@ var PromptServiceTracingDecorator = class {
         );
       }
     }
-    if (result && _chunkTKSTXX3Djs.shouldCaptureOutput.call(void 0, )) {
+    if (result && _chunkCLTKABMOjs.shouldCaptureOutput.call(void 0, )) {
       span.setOutput("json", result);
     }
     return result;
@@ -241,7 +255,7 @@ var PromptServiceTracingDecorator = class {
   async create(span, params) {
     var _a;
     span.setType("prompt");
-    if (_chunkTKSTXX3Djs.shouldCaptureInput.call(void 0, )) {
+    if (_chunkCLTKABMOjs.shouldCaptureInput.call(void 0, )) {
       span.setInput(params);
     }
     const result = await this.target.create(params);
@@ -256,7 +270,7 @@ var PromptServiceTracingDecorator = class {
   }
   async update(span, id, params) {
     var _a;
-    if (_chunkTKSTXX3Djs.shouldCaptureInput.call(void 0, )) {
+    if (_chunkCLTKABMOjs.shouldCaptureInput.call(void 0, )) {
       span.setInput(params);
     }
     const result = await this.target.update(id, params);
@@ -278,7 +292,7 @@ var PromptServiceTracingDecorator = class {
     return result;
   }
   async upsert(span, handle, config) {
-    if (_chunkTKSTXX3Djs.shouldCaptureInput.call(void 0, )) {
+    if (_chunkCLTKABMOjs.shouldCaptureInput.call(void 0, )) {
       span.setInput(config);
     }
     const result = await this.target.upsert(handle, config);
@@ -293,7 +307,7 @@ var PromptServiceTracingDecorator = class {
     return result;
   }
   async sync(span, params) {
-    if (_chunkTKSTXX3Djs.shouldCaptureInput.call(void 0, )) {
+    if (_chunkCLTKABMOjs.shouldCaptureInput.call(void 0, )) {
       span.setInput(params);
     }
     const result = await this.target.sync(params);
@@ -312,7 +326,7 @@ var PromptServiceTracingDecorator = class {
 };
 
 // src/client-sdk/services/prompts/tracing/tracer.ts
-var tracer = _chunkADJOFPAZjs.getLangWatchTracer.call(void 0, `${_chunkWHBCX64Rjs.LANGWATCH_SDK_NAME_CLIENT}.prompts`, _chunkWHBCX64Rjs.LANGWATCH_SDK_VERSION);
+var tracer = _chunkK6KPNTQOjs.getLangWatchTracer.call(void 0, `${_chunkUOFSG6R4js.LANGWATCH_SDK_NAME_CLIENT}.prompts`, _chunkUOFSG6R4js.LANGWATCH_SDK_VERSION);
 
 // src/client-sdk/tracing/create-tracing-proxy.ts
 var _api = require('@opentelemetry/api');
@@ -381,7 +395,7 @@ var isBuiltInMethod = (prop) => {
 // src/internal/api/client.ts
 var _openapifetch = require('openapi-fetch'); var _openapifetch2 = _interopRequireDefault(_openapifetch);
 
-// ../packages/langy/src/cards/handled-error.ts
+// ../../packages/langy/src/cards/handled-error.ts
 var SERVER_ERROR_STATUS = 500;
 var GENERIC_CODES = /* @__PURE__ */ new Set([
   "internal server error",
@@ -395,7 +409,7 @@ var asReasons = (value) => {
   if (!Array.isArray(value)) return void 0;
   const reasons = value.map(asRecord).filter(
     (r) => !!r && (typeof r.code === "string" || typeof r.kind === "string")
-  ).map((r) => _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+  ).map((r) => _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {
     kind: typeof r.code === "string" ? r.code : r.kind
   }, asRecord(r.meta) ? { meta: asRecord(r.meta) } : {}), asReasons(r.reasons) ? { reasons: asReasons(r.reasons) } : {}));
   return reasons.length > 0 ? reasons : void 0;
@@ -450,7 +464,7 @@ var asErrorBody = (value) => {
     tips: tips,
     docsUrl,
     fault: fault
-  } = _c, rest = _chunkTKSTXX3Djs.__objRest.call(void 0, _c, [
+  } = _c, rest = _chunkCLTKABMOjs.__objRest.call(void 0, _c, [
     "error",
     "message",
     "kind",
@@ -524,7 +538,7 @@ var parseHandledError = ({
       isHandled: false
     };
   }
-  return _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+  return _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {
     code: parsed.code,
     // Deprecated back-compat alias — see CliHandledError.kind.
     kind: parsed.code,
@@ -643,16 +657,16 @@ var handledErrorMiddleware = {
     if (handledError) throw handledError;
   }
 };
-var createLangWatchApiClient = (apiKey = ((_a) => (_a = process.env.LANGWATCH_API_KEY) != null ? _a : "")(), endpoint = ((_b) => (_b = process.env.LANGWATCH_ENDPOINT) != null ? _b : (0, _chunkWHBCX64Rjs.DEFAULT_ENDPOINT))(), projectId = process.env.LANGWATCH_PROJECT_ID) => {
+var createLangWatchApiClient = (apiKey = ((_b) => (_b = ((_a) => (_a = scopedApiKey()) != null ? _a : process.env.LANGWATCH_API_KEY)()) != null ? _b : "")(), endpoint, projectId = process.env.LANGWATCH_PROJECT_ID) => {
   const client = _openapifetch2.default.call(void 0, {
-    baseUrl: endpoint,
-    headers: _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey, projectId })), {
+    baseUrl: _chunkDTSULVK5js.resolveEndpoint.call(void 0, endpoint),
+    headers: _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey, projectId })), {
       "content-type": "application/json",
-      "user-agent": `langwatch-sdk-node/${_chunkWHBCX64Rjs.version}`,
-      "x-langwatch-sdk-name": _chunkWHBCX64Rjs.LANGWATCH_SDK_NAME_OBSERVABILITY,
-      "x-langwatch-sdk-language": _chunkWHBCX64Rjs.LANGWATCH_SDK_LANGUAGE,
-      "x-langwatch-sdk-version": _chunkWHBCX64Rjs.LANGWATCH_SDK_VERSION,
-      "x-langwatch-sdk-platform": _chunkWHBCX64Rjs.LANGWATCH_SDK_RUNTIME.call(void 0, )
+      "user-agent": `langwatch-sdk-node/${_chunkUOFSG6R4js.version}`,
+      "x-langwatch-sdk-name": _chunkUOFSG6R4js.LANGWATCH_SDK_NAME_OBSERVABILITY,
+      "x-langwatch-sdk-language": _chunkUOFSG6R4js.LANGWATCH_SDK_LANGUAGE,
+      "x-langwatch-sdk-version": _chunkUOFSG6R4js.LANGWATCH_SDK_VERSION,
+      "x-langwatch-sdk-platform": _chunkUOFSG6R4js.LANGWATCH_SDK_RUNTIME.call(void 0, )
     })
   });
   client.use(handledErrorMiddleware);
@@ -843,22 +857,22 @@ function extractStatusFromResponse(value) {
 }
 
 // src/client-sdk/services/prompts/prompts-api.service.ts
-var syncActionSchema = _zod.z.enum([
+var syncActionSchema = _chunkK6KPNTQOjs.external_exports.enum([
   "created",
   "updated",
   "conflict",
   "up_to_date"
 ]);
-var syncResultSchema = _zod.z.object({
+var syncResultSchema = _chunkK6KPNTQOjs.external_exports.object({
   action: syncActionSchema,
   // `prompt` and `conflictInfo` are passed through untyped — they come from
   // the OpenAPI-derived shape which is already validated on the server side.
-  prompt: _zod.z.unknown().optional(),
-  conflictInfo: _zod.z.object({
-    localVersion: _zod.z.number(),
-    remoteVersion: _zod.z.number(),
-    differences: _zod.z.array(_zod.z.string()),
-    remoteConfigData: _zod.z.unknown()
+  prompt: _chunkK6KPNTQOjs.external_exports.unknown().optional(),
+  conflictInfo: _chunkK6KPNTQOjs.external_exports.object({
+    localVersion: _chunkK6KPNTQOjs.external_exports.number(),
+    remoteVersion: _chunkK6KPNTQOjs.external_exports.number(),
+    differences: _chunkK6KPNTQOjs.external_exports.array(_chunkK6KPNTQOjs.external_exports.string()),
+    remoteConfigData: _chunkK6KPNTQOjs.external_exports.unknown()
   }).passthrough().optional()
 });
 var PromptsApiService = class {
@@ -1159,9 +1173,6 @@ var PromptsApiService = class {
 // src/client-sdk/services/prompts/prompt.ts
 var _liquidjs = require('liquidjs');
 
-// src/client-sdk/services/prompts/schema/prompt.schema.ts
-
-
 // src/client-sdk/services/prompts/constants.ts
 var PromptScope = {
   ORGANIZATION: "ORGANIZATION",
@@ -1169,34 +1180,34 @@ var PromptScope = {
 };
 
 // src/client-sdk/services/prompts/schema/prompt.schema.ts
-var messageSchema = _zod.z.object({
-  role: _zod.z.enum(["user", "assistant", "system"]),
-  content: _zod.z.string()
+var messageSchema = _chunkK6KPNTQOjs.external_exports.object({
+  role: _chunkK6KPNTQOjs.external_exports.enum(["user", "assistant", "system"]),
+  content: _chunkK6KPNTQOjs.external_exports.string()
 });
-var responseFormatSchema = _zod.z.object({
-  type: _zod.z.literal("json_schema"),
-  json_schema: _zod.z.object({
-    name: _zod.z.string(),
-    schema: _zod.z.record(_zod.z.string(), _zod.z.unknown())
+var responseFormatSchema = _chunkK6KPNTQOjs.external_exports.object({
+  type: _chunkK6KPNTQOjs.external_exports.literal("json_schema"),
+  json_schema: _chunkK6KPNTQOjs.external_exports.object({
+    name: _chunkK6KPNTQOjs.external_exports.string(),
+    schema: _chunkK6KPNTQOjs.external_exports.record(_chunkK6KPNTQOjs.external_exports.string(), _chunkK6KPNTQOjs.external_exports.unknown())
   }).nullable()
 }).optional();
-var corePromptDataSchema = _zod.z.object({
-  model: _zod.z.string().min(1, "Model cannot be empty"),
-  messages: _zod.z.array(messageSchema).min(1, "At least one message is required"),
-  prompt: _zod.z.string().optional(),
-  temperature: _zod.z.number().min(0).max(2).optional(),
-  maxTokens: _zod.z.number().positive().optional(),
+var corePromptDataSchema = _chunkK6KPNTQOjs.external_exports.object({
+  model: _chunkK6KPNTQOjs.external_exports.string().min(1, "Model cannot be empty"),
+  messages: _chunkK6KPNTQOjs.external_exports.array(messageSchema).min(1, "At least one message is required"),
+  prompt: _chunkK6KPNTQOjs.external_exports.string().optional(),
+  temperature: _chunkK6KPNTQOjs.external_exports.number().min(0).max(2).optional(),
+  maxTokens: _chunkK6KPNTQOjs.external_exports.number().positive().optional(),
   responseFormat: responseFormatSchema
 });
-var promptMetadataSchema = _zod.z.object({
-  id: _zod.z.string().optional(),
-  handle: _zod.z.string().nullable().optional(),
-  version: _zod.z.number().min(0).optional(),
-  versionId: _zod.z.string().optional(),
-  scope: _zod.z.enum(PromptScope).optional()
+var promptMetadataSchema = _chunkK6KPNTQOjs.external_exports.object({
+  id: _chunkK6KPNTQOjs.external_exports.string().optional(),
+  handle: _chunkK6KPNTQOjs.external_exports.string().nullable().optional(),
+  version: _chunkK6KPNTQOjs.external_exports.number().min(0).optional(),
+  versionId: _chunkK6KPNTQOjs.external_exports.string().optional(),
+  scope: _chunkK6KPNTQOjs.external_exports.enum(PromptScope).optional()
 });
-var promptDataSchema = _zod.z.object(_chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, corePromptDataSchema.shape), promptMetadataSchema.shape), {
-  parameters: _zod.z.record(_zod.z.string(), _zod.z.unknown()).optional()
+var promptDataSchema = _chunkK6KPNTQOjs.external_exports.object(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, corePromptDataSchema.shape), promptMetadataSchema.shape), {
+  parameters: _chunkK6KPNTQOjs.external_exports.record(_chunkK6KPNTQOjs.external_exports.string(), _chunkK6KPNTQOjs.external_exports.unknown()).optional()
 }));
 
 // src/client-sdk/services/prompts/prompt.ts
@@ -1234,12 +1245,12 @@ var Prompt = class {
       const compiledPrompt = this.prompt ? liquid.parseAndRenderSync(this.prompt, variables, {
         strictVariables: strict
       }) : "";
-      const compiledMessages = (this.messages || []).map((message) => _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, message), {
+      const compiledMessages = (this.messages || []).map((message) => _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, message), {
         content: message.content ? liquid.parseAndRenderSync(message.content, variables, {
           strictVariables: strict
         }) : message.content
       }));
-      const compiledData = _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, this), {
+      const compiledData = _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, this), {
         prompt: compiledPrompt,
         messages: compiledMessages
       });
@@ -1288,20 +1299,32 @@ var _jsyaml = require('js-yaml'); var yaml = _interopRequireWildcard(_jsyaml);
 var _chalk = require('chalk'); var _chalk2 = _interopRequireDefault(_chalk);
 
 // src/cli/types-prompt.ts
-
-var localPromptConfigSchema = _zod.z.object({
-  model: _zod.z.string().min(1, "Model is required"),
-  modelParameters: _zod.z.object({
-    temperature: _zod.z.number().optional(),
-    max_tokens: _zod.z.number().optional()
+var jsonValueSchema = _chunkK6KPNTQOjs.external_exports.lazy(
+  () => _chunkK6KPNTQOjs.external_exports.union([
+    _chunkK6KPNTQOjs.external_exports.string(),
+    _chunkK6KPNTQOjs.external_exports.number(),
+    _chunkK6KPNTQOjs.external_exports.boolean(),
+    _chunkK6KPNTQOjs.external_exports.null(),
+    _chunkK6KPNTQOjs.external_exports.array(jsonValueSchema),
+    _chunkK6KPNTQOjs.external_exports.record(_chunkK6KPNTQOjs.external_exports.string(), jsonValueSchema)
+  ])
+);
+var localPromptConfigSchema = _chunkK6KPNTQOjs.external_exports.object({
+  model: _chunkK6KPNTQOjs.external_exports.string().min(1, "Model is required"),
+  modelParameters: _chunkK6KPNTQOjs.external_exports.object({
+    temperature: _chunkK6KPNTQOjs.external_exports.number().optional(),
+    max_tokens: _chunkK6KPNTQOjs.external_exports.number().optional()
   }).loose().optional(),
-  messages: _zod.z.array(
-    _zod.z.object({
-      role: _zod.z.enum(["system", "user", "assistant"]),
-      content: _zod.z.string().min(1, "Message content cannot be empty")
+  messages: _chunkK6KPNTQOjs.external_exports.array(
+    _chunkK6KPNTQOjs.external_exports.object({
+      role: _chunkK6KPNTQOjs.external_exports.enum(["system", "user", "assistant"]),
+      content: _chunkK6KPNTQOjs.external_exports.string().min(1, "Message content cannot be empty")
     }).loose()
   ).min(1, "At least one message is required"),
-  parameters: _zod.z.record(_zod.z.string(), _zod.z.unknown()).optional().default({})
+  // Parameters persist as JSON: parse them AS json so the value's type
+  // matches the API contract (the spec's recursive JsonValue) instead of
+  // laundering unknowns into a typed pipeline.
+  parameters: _chunkK6KPNTQOjs.external_exports.record(_chunkK6KPNTQOjs.external_exports.string(), jsonValueSchema).optional().default({})
 }).loose();
 
 // src/cli/utils/errors/prompt-not-found.error.ts
@@ -1591,7 +1614,7 @@ var LocalPromptsService = class {
   constructor(config) {
     var _a, _b;
     this.fileManager = (_a = config == null ? void 0 : config.fileManager) != null ? _a : FileManager;
-    this.logger = (_b = config == null ? void 0 : config.logger) != null ? _b : new (0, _chunkTKSTXX3Djs.NoOpLogger)();
+    this.logger = (_b = config == null ? void 0 : config.logger) != null ? _b : new (0, _chunkCLTKABMOjs.NoOpLogger)();
   }
   /**
    * Retrieves a prompt using the configured search strategy.
@@ -1614,7 +1637,7 @@ var LocalPromptsService = class {
         if (e instanceof PromptFileNotFoundError) return null;
         throw e;
       });
-      return localPromptConfig ? this.convertToPromptData(_chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, localPromptConfig), {
+      return localPromptConfig ? this.convertToPromptData(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, localPromptConfig), {
         handle: handleOrId
       })) : null;
     } catch (error) {
@@ -1671,8 +1694,8 @@ var LocalPromptsService = class {
    * Converts LocalPromptConfig to PromptData format
    */
   convertToPromptData(config) {
-    const _a = config, { modelParameters } = _a, rest = _chunkTKSTXX3Djs.__objRest.call(void 0, _a, ["modelParameters"]);
-    return _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+    const _a = config, { modelParameters } = _a, rest = _chunkCLTKABMOjs.__objRest.call(void 0, _a, ["modelParameters"]);
+    return _chunkCLTKABMOjs.__spreadValues.call(void 0, {
       maxTokens: modelParameters == null ? void 0 : modelParameters.max_tokens,
       temperature: modelParameters == null ? void 0 : modelParameters.temperature
     }, rest);
@@ -1858,12 +1881,12 @@ var DatasetPlanLimitError = class extends DatasetError {
 };
 
 // src/client-sdk/services/datasets/tracing/tracer.ts
-var tracer2 = _chunkADJOFPAZjs.getLangWatchTracer.call(void 0, `${_chunkWHBCX64Rjs.LANGWATCH_SDK_NAME_CLIENT}.datasets`, _chunkWHBCX64Rjs.LANGWATCH_SDK_VERSION);
+var tracer2 = _chunkK6KPNTQOjs.getLangWatchTracer.call(void 0, `${_chunkUOFSG6R4js.LANGWATCH_SDK_NAME_CLIENT}.datasets`, _chunkUOFSG6R4js.LANGWATCH_SDK_VERSION);
 
 // src/client-sdk/services/datasets/dataset.service.ts
 var DatasetService = class {
   constructor(config) {
-    this.config = config;
+    this.config = _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, config), { endpoint: _chunkDTSULVK5js.resolveEndpoint.call(void 0, config.endpoint) });
     return createTracingProxy(this, tracer2);
   }
   /**
@@ -2141,10 +2164,10 @@ var DatasetService = class {
    */
   async fetchMultipart(path2, formData, operation, slugOrId) {
     const { endpoint, apiKey } = this.config;
-    const url = `${endpoint.replace(/\/$/, "")}${path2}`;
+    const url = `${endpoint}${path2}`;
     const response = await fetch(url, {
       method: "POST",
-      headers: _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey }),
+      headers: _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey }),
       body: formData
     });
     if (!response.ok) {
@@ -2306,7 +2329,7 @@ var DatasetService = class {
 var _datasetService;
 var DatasetsFacade = class {
   constructor(config) {
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _datasetService);
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _datasetService);
     /**
      * Lists all datasets for the project, with optional pagination.
      *
@@ -2314,7 +2337,7 @@ var DatasetsFacade = class {
      * @returns Paginated list of datasets with metadata
      */
     this.list = (options) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).listDatasets(options);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).listDatasets(options);
     };
     /**
      * Creates a new dataset.
@@ -2326,7 +2349,7 @@ var DatasetsFacade = class {
       if (!options.name || options.name.trim().length === 0) {
         throw new DatasetValidationError("Dataset name must not be empty");
       }
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).createDataset(options);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).createDataset(options);
     };
     /**
      * Fetches a dataset by its slug or ID, returning metadata and entries.
@@ -2351,7 +2374,7 @@ var DatasetsFacade = class {
      * ```
      */
     this.get = (slugOrId, options) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).getDataset(slugOrId, options);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).getDataset(slugOrId, options);
     };
     /**
      * Updates a dataset by its slug or ID.
@@ -2366,7 +2389,7 @@ var DatasetsFacade = class {
           "At least one field (name or columnTypes) must be provided for update"
         );
       }
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).updateDataset(slugOrId, options);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).updateDataset(slugOrId, options);
     };
     /**
      * Deletes (archives) a dataset by its slug or ID.
@@ -2375,7 +2398,7 @@ var DatasetsFacade = class {
      * @returns The archived dataset metadata
      */
     this.delete = (slugOrId) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).deleteDataset(slugOrId);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).deleteDataset(slugOrId);
     };
     /**
      * Creates records in a dataset in batch.
@@ -2388,7 +2411,7 @@ var DatasetsFacade = class {
       if (!entries || entries.length === 0) {
         throw new DatasetValidationError("Entries must not be empty");
       }
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).createRecords(slugOrId, entries);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).createRecords(slugOrId, entries);
     };
     /**
      * Updates a single record in a dataset.
@@ -2399,7 +2422,7 @@ var DatasetsFacade = class {
      * @returns The updated record
      */
     this.updateRecord = (slugOrId, recordId, entry) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).updateRecord(slugOrId, recordId, entry);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).updateRecord(slugOrId, recordId, entry);
     };
     /**
      * Deletes records from a dataset by IDs.
@@ -2409,7 +2432,7 @@ var DatasetsFacade = class {
      * @returns Object with the count of deleted records
      */
     this.deleteRecords = (slugOrId, recordIds) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).deleteRecords(slugOrId, recordIds);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).deleteRecords(slugOrId, recordIds);
     };
     /**
      * Lists records in a dataset with optional pagination.
@@ -2428,7 +2451,7 @@ var DatasetsFacade = class {
      * ```
      */
     this.listRecords = (slugOrId, options) => {
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).listRecords(slugOrId, options);
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).listRecords(slugOrId, options);
     };
     /**
      * Uploads a file to a dataset with a configurable strategy for handling existing datasets.
@@ -2462,19 +2485,19 @@ var DatasetsFacade = class {
       if (!file) {
         throw new DatasetValidationError("File must be provided for upload");
       }
-      return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _datasetService).uploadWithStrategy(
+      return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _datasetService).uploadWithStrategy(
         slugOrId,
         file,
         (_a = options == null ? void 0 : options.ifExists) != null ? _a : "append"
       );
     };
-    _chunkTKSTXX3Djs.__privateSet.call(void 0, this, _datasetService, new DatasetService(config));
+    _chunkCLTKABMOjs.__privateSet.call(void 0, this, _datasetService, new DatasetService(config));
   }
 };
 _datasetService = new WeakMap();
 
 // src/client-sdk/services/experiments/experiment.ts
-var _async_hooks = require('async_hooks');
+
 
 
 // src/client-sdk/services/experiments/humanReadableId.ts
@@ -2718,7 +2741,7 @@ var Experiment = class _Experiment {
     this.experimentSlug = name;
     this.runId = (_a = options.runId) != null ? _a : generateHumanReadableId();
     this.apiClient = options.apiClient;
-    this.endpoint = options.endpoint;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, options.endpoint);
     this.apiKey = options.apiKey;
     this.logger = options.logger;
     this.concurrency = (_b = options.concurrency) != null ? _b : DEFAULT_CONCURRENCY;
@@ -2728,7 +2751,7 @@ var Experiment = class _Experiment {
    * Initialize an evaluation session
    */
   static async init(name, options) {
-    _chunk52VMSJ4Ojs.ensureSetup.call(void 0, );
+    _chunkDTSULVK5js.ensureSetup.call(void 0, );
     const experiment = new _Experiment(name, options);
     await experiment.initialize();
     return experiment;
@@ -2745,9 +2768,9 @@ var Experiment = class _Experiment {
     try {
       const response = await fetch(`${this.endpoint}/api/experiment/init`, {
         method: "POST",
-        headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+        headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
           "Content-Type": "application/json"
-        }, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
+        }, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
         body: JSON.stringify({
           experiment_name: this.name,
           experiment_slug: this.experimentSlug,
@@ -2764,7 +2787,7 @@ var Experiment = class _Experiment {
       const data = await response.json();
       this.experimentSlug = data.slug;
       const encodedRunId = encodeURIComponent(this.runId);
-      this.runUrl = `${this.endpoint.replace(/\/$/, "")}${data.path}?runId=${encodedRunId}`;
+      this.runUrl = `${this.endpoint}${data.path}?runId=${encodedRunId}`;
       console.log(`Follow results at: ${this.runUrl}`);
       this.initialized = true;
     } catch (error) {
@@ -2865,7 +2888,7 @@ var Experiment = class _Experiment {
             }
           },
           async (otelSpan) => {
-            const span = _chunkADJOFPAZjs.createLangWatchSpan.call(void 0, otelSpan);
+            const span = _chunkK6KPNTQOjs.createLangWatchSpan.call(void 0, otelSpan);
             const spanContext = otelSpan.spanContext();
             const traceId = spanContext.traceId;
             this.currentTraceId = traceId;
@@ -3035,9 +3058,9 @@ var Experiment = class _Experiment {
         `${this.endpoint}/api/evaluations/${evaluatorSlug}/evaluate`,
         {
           method: "POST",
-          headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+          headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
             "Content-Type": "application/json"
-          }, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
+          }, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
           body: JSON.stringify({
             trace_id: traceId != null ? traceId : null,
             span_id: spanId != null ? spanId : null,
@@ -3128,7 +3151,7 @@ var Experiment = class _Experiment {
       },
       _api.ROOT_CONTEXT,
       async (otelSpan) => {
-        const span = _chunkADJOFPAZjs.createLangWatchSpan.call(void 0, otelSpan);
+        const span = _chunkK6KPNTQOjs.createLangWatchSpan.call(void 0, otelSpan);
         const spanContext = otelSpan.spanContext();
         const rawTraceId = spanContext.traceId;
         spanId = spanContext.spanId;
@@ -3368,7 +3391,7 @@ var Experiment = class _Experiment {
       run_id: this.runId,
       dataset: this.batch.dataset.map((entry) => {
         var _a, _b;
-        return _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+        return _chunkCLTKABMOjs.__spreadValues.call(void 0, {
           index: entry.index,
           entry: entry.entry,
           duration: entry.duration,
@@ -3403,9 +3426,9 @@ var Experiment = class _Experiment {
     };
     this.pendingFlush = fetch(`${this.endpoint}/api/evaluations/batch/log_results`, {
       method: "POST",
-      headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
         "Content-Type": "application/json"
-      }, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
+      }, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })),
       body: JSON.stringify(body)
     }).then((response) => {
       if (!response.ok) {
@@ -3522,7 +3545,7 @@ var ExperimentsApiService = class {
   }) {
     let result;
     try {
-      result = await this.apiClient.POST(path2, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, body !== void 0 ? { body } : {}), {
+      result = await this.apiClient.POST(path2, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, body !== void 0 ? { body } : {}), {
         parseAs: "json"
       }));
     } catch (error) {
@@ -3821,7 +3844,7 @@ var mapRunResultsToRows = (response) => {
     const output = predicted && typeof predicted === "object" && "output" in predicted ? predicted.output : predicted;
     const row = {
       index: (_a2 = entry.index) != null ? _a2 : 0,
-      input: _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, entryData),
+      input: _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, entryData),
       output,
       traceId: (_b2 = entry.traceId) != null ? _b2 : "",
       evaluations: {}
@@ -3881,7 +3904,7 @@ var ExperimentsFacade = class {
    * ```
    */
   async init(name, options) {
-    return Experiment.init(name, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+    return Experiment.init(name, _chunkCLTKABMOjs.__spreadValues.call(void 0, {
       apiClient: this.config.langwatchApiClient,
       endpoint: this.config.endpoint,
       apiKey: this.config.apiKey,
@@ -4206,9 +4229,9 @@ var EvaluationsApiError = class extends EvaluationError {
 var _endpoint, _apiKey, _logger;
 var EvaluationsFacade = class {
   constructor(config) {
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _endpoint);
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _apiKey);
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _logger);
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _endpoint);
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _apiKey);
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _logger);
     /**
      * Run an evaluator or guardrail against provided data
      *
@@ -4265,9 +4288,9 @@ var EvaluationsFacade = class {
         },
         _api.context.active()
       );
-      const langwatchSpan = _chunkADJOFPAZjs.createLangWatchSpan.call(void 0, otelSpan);
+      const langwatchSpan = _chunkK6KPNTQOjs.createLangWatchSpan.call(void 0, otelSpan);
       langwatchSpan.setType(spanType);
-      langwatchSpan.setInput(_chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+      langwatchSpan.setInput(_chunkCLTKABMOjs.__spreadValues.call(void 0, {
         data
       }, settings && { settings }));
       try {
@@ -4279,13 +4302,13 @@ var EvaluationsFacade = class {
           settings,
           as_guardrail: asGuardrail
         };
-        const url = `${_chunkTKSTXX3Djs.__privateGet.call(void 0, this, _endpoint)}/api/evaluations/${slug}/evaluate`;
-        _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _logger).debug(`Calling evaluation API: ${url}`);
+        const url = `${_chunkCLTKABMOjs.__privateGet.call(void 0, this, _endpoint)}/api/evaluations/${slug}/evaluate`;
+        _chunkCLTKABMOjs.__privateGet.call(void 0, this, _logger).debug(`Calling evaluation API: ${url}`);
         const response = await fetch(url, {
           method: "POST",
-          headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+          headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
             "Content-Type": "application/json"
-          }, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _apiKey) })),
+          }, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: _chunkCLTKABMOjs.__privateGet.call(void 0, this, _apiKey) })),
           body: JSON.stringify(requestBody)
         });
         if (!response.ok) {
@@ -4299,7 +4322,7 @@ var EvaluationsFacade = class {
           );
         }
         const responseData = await response.json();
-        const result = _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+        const result = _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {
           status: responseData.status
         }, responseData.passed !== null && responseData.passed !== void 0 && { passed: responseData.passed }), responseData.score !== null && responseData.score !== void 0 && { score: responseData.score }), responseData.details !== null && responseData.details !== void 0 && { details: responseData.details }), responseData.label !== null && responseData.label !== void 0 && { label: responseData.label }), responseData.cost !== null && responseData.cost !== void 0 && { cost: responseData.cost });
         langwatchSpan.setOutput({
@@ -4345,9 +4368,9 @@ var EvaluationsFacade = class {
         otelSpan.end();
       }
     };
-    _chunkTKSTXX3Djs.__privateSet.call(void 0, this, _endpoint, config.endpoint);
-    _chunkTKSTXX3Djs.__privateSet.call(void 0, this, _apiKey, config.apiKey);
-    _chunkTKSTXX3Djs.__privateSet.call(void 0, this, _logger, config.logger);
+    _chunkCLTKABMOjs.__privateSet.call(void 0, this, _endpoint, config.endpoint);
+    _chunkCLTKABMOjs.__privateSet.call(void 0, this, _apiKey, config.apiKey);
+    _chunkCLTKABMOjs.__privateSet.call(void 0, this, _logger, config.logger);
   }
 };
 _endpoint = new WeakMap();
@@ -4590,9 +4613,9 @@ var WorkflowsApiError = class extends Error {
 };
 var WorkflowsApiService = class {
   constructor(config) {
-    var _a, _b, _c;
-    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient();
-    this.endpoint = (_c = (_b = config == null ? void 0 : config.endpoint) != null ? _b : process.env.LANGWATCH_ENDPOINT) != null ? _c : "https://app.langwatch.ai";
+    var _a;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
+    this.apiClient = (_a = config == null ? void 0 : config.langwatchApiClient) != null ? _a : createLangWatchApiClient(void 0, this.endpoint);
     this.experimentsApiService = new ExperimentsApiService({
       langwatchApiClient: this.apiClient
     });
@@ -4610,7 +4633,7 @@ var WorkflowsApiService = class {
   }) {
     let result;
     try {
-      result = await this.apiClient.POST(path2, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, body !== void 0 ? { body } : {}), {
+      result = await this.apiClient.POST(path2, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, body !== void 0 ? { body } : {}), {
         parseAs: "json"
       }));
     } catch (error) {
@@ -5149,14 +5172,14 @@ var MonitorsApiError = class extends Error {
 };
 var MonitorsApiService = class {
   constructor(config) {
-    var _a, _b, _c, _d;
-    this.apiKey = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : process.env.LANGWATCH_API_KEY) != null ? _b : "";
-    this.endpoint = (_d = (_c = config == null ? void 0 : config.endpoint) != null ? _c : process.env.LANGWATCH_ENDPOINT) != null ? _d : _chunkWHBCX64Rjs.DEFAULT_ENDPOINT;
+    var _a, _b, _c;
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
   }
   async request(path2, options) {
     var _a, _b;
-    const response = await fetch(`${this.endpoint}${path2}`, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, options), {
-      headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })), {
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, options), {
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })), {
         "Content-Type": "application/json"
       }), options == null ? void 0 : options.headers)
     }));
@@ -5224,14 +5247,14 @@ var SecretsApiError = class extends Error {
 };
 var SecretsApiService = class {
   constructor(config) {
-    var _a, _b, _c, _d;
-    this.apiKey = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : process.env.LANGWATCH_API_KEY) != null ? _b : "";
-    this.endpoint = (_d = (_c = config == null ? void 0 : config.endpoint) != null ? _c : process.env.LANGWATCH_ENDPOINT) != null ? _d : _chunkWHBCX64Rjs.DEFAULT_ENDPOINT;
+    var _a, _b, _c;
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
   }
   async request(path2, options) {
     var _a, _b;
-    const response = await fetch(`${this.endpoint}${path2}`, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, options), {
-      headers: _chunkTKSTXX3Djs.__spreadValues.call(void 0, _chunkTKSTXX3Djs.__spreadProps.call(void 0, _chunkTKSTXX3Djs.__spreadValues.call(void 0, {}, _chunkWHBCX64Rjs.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })), {
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, options), {
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, _chunkUOFSG6R4js.buildAuthHeaders.call(void 0, { apiKey: this.apiKey })), {
         "Content-Type": "application/json"
       }), options == null ? void 0 : options.headers)
     }));
@@ -5282,6 +5305,1003 @@ var SecretsApiService = class {
   }
 };
 
+// src/client-sdk/services/_shared/collect-cursor-pages.ts
+var CURSOR_WALK_PAGE_SIZE = 200;
+var MAX_CURSOR_WALK_PAGES = 1e3;
+function walkCursorPages(options) {
+  return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+    var _a;
+    const served = /* @__PURE__ */ new Set();
+    let cursor = options.startCursor;
+    let pagesRead = 0;
+    for (; ; ) {
+      const page = yield new (0, _chunkCLTKABMOjs.__await)(options.fetchPage(cursor));
+      pagesRead += 1;
+      yield page;
+      const next = (_a = options.nextCursorOf(page)) != null ? _a : null;
+      if (next === null) return;
+      if (served.has(next)) {
+        throw options.onEndlessWalk(
+          "the endpoint served the same page cursor twice, so the walk cannot advance"
+        );
+      }
+      if (pagesRead >= MAX_CURSOR_WALK_PAGES) {
+        throw options.onEndlessWalk(
+          `the walk passed ${MAX_CURSOR_WALK_PAGES} pages without the cursor coming back null`
+        );
+      }
+      served.add(next);
+      cursor = next;
+    }
+  });
+}
+async function collectCursorPages(options) {
+  const pages = [];
+  try {
+    for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, walkCursorPages(options)), more, temp, error; more = !(temp = await iter.next()).done; more = false) {
+      const page = temp.value;
+      pages.push(page);
+    }
+  } catch (temp) {
+    error = [temp];
+  } finally {
+    try {
+      more && (temp = iter.return) && await temp.call(iter);
+    } finally {
+      if (error)
+        throw error[0];
+    }
+  }
+  return pages;
+}
+
+// src/client-sdk/services/_shared/mutation-options.ts
+var IDEMPOTENCY_KEY_HEADER = "Idempotency-Key";
+var IDEMPOTENT_REPLAY_HEADER = "X-Idempotent-Replay";
+function mutationInit(options) {
+  return (options == null ? void 0 : options.signal) ? { signal: options.signal } : {};
+}
+function idempotentCreateInit(options) {
+  const onIdempotentReplay = options == null ? void 0 : options.onIdempotentReplay;
+  return _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, mutationInit(options)), (options == null ? void 0 : options.idempotencyKey) !== void 0 ? { headers: { [IDEMPOTENCY_KEY_HEADER]: options.idempotencyKey } } : {}), onIdempotentReplay ? {
+    onResponse: (response) => {
+      if (response.headers.get(IDEMPOTENT_REPLAY_HEADER) === "true") {
+        onIdempotentReplay();
+      }
+    }
+  } : {});
+}
+
+// src/client-sdk/services/virtual-keys/virtual-keys-api.service.ts
+var VirtualKeysApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "VirtualKeysApiError";
+  }
+};
+var VirtualKeysApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+    this.projectId = (_d = config == null ? void 0 : config.projectId) != null ? _d : process.env.LANGWATCH_PROJECT_ID;
+  }
+  headers() {
+    return _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    }, this.projectId ? { "X-Project-Id": this.projectId } : {});
+  }
+  async request(operation, path2, init) {
+    var _a, _b, _c;
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, init), {
+      // A hung control plane must fail the command, not freeze it.
+      signal: (_a = init == null ? void 0 : init.signal) != null ? _a : AbortSignal.timeout(3e4),
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, this.headers()), (_b = init == null ? void 0 : init.headers) != null ? _b : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throwIfHandledError({
+        operation,
+        error: parsedBody,
+        status: response.status,
+        message
+      });
+      throw new VirtualKeysApiError(message, operation, parsedBody);
+    }
+    (_c = init == null ? void 0 : init.onResponse) == null ? void 0 : _c.call(init, response);
+    return await response.json();
+  }
+  /**
+   * ONE page of the virtual keys visible to the caller, newest first. Pass
+   * `next_cursor` back as `cursor` for the next page, verbatim: a cursor this
+   * endpoint did not issue answers 400 rather than restarting the walk.
+   *
+   * `limit` is the page size (server default 50, capped at 200), and it caps
+   * the rows READ, not the rows returned: the visibility filter runs on the
+   * page afterwards. Prefer `list()` unless you mean to page deliberately.
+   */
+  async listPage(options) {
+    const params = new URLSearchParams();
+    if (options == null ? void 0 : options.externalId) params.set("external_id", options.externalId);
+    if (options == null ? void 0 : options.cursor) params.set("cursor", options.cursor);
+    if ((options == null ? void 0 : options.limit) !== void 0) params.set("limit", String(options.limit));
+    const query = params.toString() !== "" ? `?${params.toString()}` : "";
+    const { data, next_cursor } = await this.request("list virtual keys", `/api/gateway/v1/virtual-keys${query}`);
+    return { data, next_cursor: next_cursor != null ? next_cursor : null };
+  }
+  /**
+   * Every virtual key visible to the caller: keys scoped to this project, to
+   * its team, or to the whole organization.
+   *
+   * The endpoint pages; this follows `next_cursor` until it comes back null.
+   * Stopping on a short page would be wrong here specifically, because the
+   * server filters each page for visibility after reading it, so a page can
+   * hold fewer rows than the limit with more still to come.
+   *
+   * `limit` sizes each request in the walk, it does NOT cap what comes back.
+   * `cursor` resumes an interrupted walk. Take a single page with
+   * `listPage()`, or stream the walk with `iterate()`.
+   */
+  async list(options) {
+    const pages = await collectCursorPages({
+      startCursor: options == null ? void 0 : options.cursor,
+      nextCursorOf: (page) => page.next_cursor,
+      onEndlessWalk: (reason) => new VirtualKeysApiError(
+        `Failed to list virtual keys: ${reason}.`,
+        "list virtual keys"
+      ),
+      fetchPage: (cursor) => {
+        var _a;
+        return this.listPage({
+          cursor,
+          limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE,
+          externalId: options == null ? void 0 : options.externalId
+        });
+      }
+    });
+    return pages.flatMap((page) => page.data);
+  }
+  /**
+   * Every visible virtual key, one row at a time, fetching each page only
+   * when the consumer reaches it. Stop early and the rest is never read,
+   * which `list()` cannot offer because it materialises the whole listing
+   * first. Raises rather than looping forever on a cursor chain that never
+   * ends, exactly like `list()`.
+   */
+  iterate(options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options == null ? void 0 : options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new VirtualKeysApiError(
+          `Failed to list virtual keys: ${reason}.`,
+          "list virtual keys"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.listPage({
+            cursor,
+            limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE,
+            externalId: options == null ? void 0 : options.externalId
+          });
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  async get(id) {
+    const { virtual_key } = await this.request(
+      `get virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`
+    );
+    return virtual_key;
+  }
+  /**
+   * Mint a key. The response carries the secret ONCE; nothing ever serves it
+   * again, so a create that times out is recovered with `idempotencyKey`
+   * rather than by listing.
+   */
+  async create(input, options) {
+    return this.request(
+      "create virtual key",
+      "/api/gateway/v1/virtual-keys",
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        body: JSON.stringify(input)
+      }, idempotentCreateInit(options))
+    );
+  }
+  async update(id, input, options) {
+    const { virtual_key } = await this.request(
+      `update virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "PATCH", body: JSON.stringify(input) }, mutationInit(options))
+    );
+    return virtual_key;
+  }
+  async rotate(id, options) {
+    return this.request(
+      `rotate virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/rotate`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "POST" }, mutationInit(options))
+    );
+  }
+  async revoke(id, options) {
+    const { virtual_key } = await this.request(
+      `revoke virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/revoke`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "POST" }, mutationInit(options))
+    );
+    return virtual_key;
+  }
+  /** Reversible stop; enable() restores the key exactly as it was. */
+  async disable(id, options = {}) {
+    const { virtual_key } = await this.request(
+      `disable virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/disable`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(options.reason ? { reason: options.reason } : {})
+      }, mutationInit(options))
+    );
+    return virtual_key;
+  }
+  async enable(id, options) {
+    const { virtual_key } = await this.request(
+      `enable virtual key "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/enable`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "POST" }, mutationInit(options))
+    );
+    return virtual_key;
+  }
+  /**
+   * Aggregate spend for one key over a window in epoch milliseconds.
+   * Defaults to the current UTC calendar month server-side. Reads the same
+   * cost path the dashboard reads, so this number and the UI agree by
+   * construction.
+   */
+  async spend(id, options) {
+    const params = new URLSearchParams();
+    if ((options == null ? void 0 : options.from) !== void 0) params.set("from", String(options.from));
+    if ((options == null ? void 0 : options.to) !== void 0) params.set("to", String(options.to));
+    const query = params.size > 0 ? `?${params.toString()}` : "";
+    return this.request(
+      `read virtual key spend "${id}"`,
+      `/api/gateway/v1/virtual-keys/${encodeURIComponent(id)}/spend${query}`
+    );
+  }
+};
+
+// src/client-sdk/services/gateway-budgets/gateway-budgets-api.service.ts
+var GatewayBudgetsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "GatewayBudgetsApiError";
+  }
+};
+var GatewayBudgetsApiService = class {
+  constructor(config) {
+    var _a, _b, _c, _d;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+    this.projectId = (_d = config == null ? void 0 : config.projectId) != null ? _d : process.env.LANGWATCH_PROJECT_ID;
+  }
+  headers() {
+    return _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+      Authorization: `Bearer ${this.apiKey}`,
+      "Content-Type": "application/json"
+    }, this.projectId ? { "X-Project-Id": this.projectId } : {});
+  }
+  async request(operation, path2, init) {
+    var _a, _b, _c;
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, init), {
+      // A hung control plane must fail the command, not freeze it.
+      signal: (_a = init == null ? void 0 : init.signal) != null ? _a : AbortSignal.timeout(3e4),
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, this.headers()), (_b = init == null ? void 0 : init.headers) != null ? _b : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throwIfHandledError({
+        operation,
+        error: parsedBody,
+        status: response.status,
+        message
+      });
+      throw new GatewayBudgetsApiError(message, operation, parsedBody);
+    }
+    (_c = init == null ? void 0 : init.onResponse) == null ? void 0 : _c.call(init, response);
+    return await response.json();
+  }
+  /**
+   * ONE page of non-archived budgets, exactly as the wire serves it. Pass
+   * `next_cursor` back as `cursor` for the next page, verbatim: a cursor this
+   * endpoint did not issue answers 400 rather than restarting the walk.
+   *
+   * `limit` is the page size (server default 50, capped at 200). Prefer
+   * `list()` unless you mean to page deliberately: a full page is not a
+   * promise of more, and a null `next_cursor` is the only end of the walk.
+   */
+  async listPage(options) {
+    var _a;
+    const params = new URLSearchParams();
+    if (options == null ? void 0 : options.externalId) params.set("external_id", options.externalId);
+    if ((_a = options == null ? void 0 : options.scopeTypes) == null ? void 0 : _a.length) {
+      params.set("scope_type", options.scopeTypes.join(","));
+    }
+    if (options == null ? void 0 : options.cursor) params.set("cursor", options.cursor);
+    if ((options == null ? void 0 : options.limit) !== void 0) params.set("limit", String(options.limit));
+    const query = params.toString() !== "" ? `?${params.toString()}` : "";
+    const { data, spend_available, next_cursor } = await this.request("list gateway budgets", `/api/gateway/v1/budgets${query}`);
+    return {
+      data,
+      spend_available,
+      next_cursor: next_cursor != null ? next_cursor : null
+    };
+  }
+  /**
+   * Every non-archived budget in the organization across all seven scope
+   * types, optionally filtered by `scopeTypes`.
+   *
+   * The endpoint pages; this follows `next_cursor` until it comes back null,
+   * so the result is the complete listing and carries no cursor of its own.
+   * Callers that count, total, or decide an all-clear on this list need that
+   * completeness for correctness, not just for display.
+   *
+   * `limit` sizes each request in the walk, it does NOT cap what comes back.
+   * `cursor` resumes an interrupted walk. Take a single page with
+   * `listPage()`, or stream the walk with `iterate()`.
+   *
+   * A plain array, like every other exhaustive `list()` in the SDK: a walk
+   * that ran to the end has no cursor left to report. Null `spent_usd` /
+   * `spent_nano_usd` on a row is not by itself "spend unavailable": an
+   * `attributed_user` template row serves null deliberately, because one
+   * allowance per person has no single total. Use `listPage()` when you need
+   * `spend_available` stated outright.
+   */
+  async list(options) {
+    const pages = await collectCursorPages({
+      startCursor: options == null ? void 0 : options.cursor,
+      nextCursorOf: (page) => page.next_cursor,
+      onEndlessWalk: (reason) => new GatewayBudgetsApiError(
+        `Failed to list gateway budgets: ${reason}.`,
+        "list gateway budgets"
+      ),
+      fetchPage: (cursor) => {
+        var _a;
+        return this.listPage({
+          scopeTypes: options == null ? void 0 : options.scopeTypes,
+          cursor,
+          limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE,
+          externalId: options == null ? void 0 : options.externalId
+        });
+      }
+    });
+    return pages.flatMap((page) => page.data);
+  }
+  /**
+   * Every non-archived budget, one row at a time, fetching each page only
+   * when the consumer reaches it.
+   *
+   * A null `spent_usd` means spend could not be totalled rather than that
+   * nothing was spent.
+   */
+  iterate(options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options == null ? void 0 : options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new GatewayBudgetsApiError(
+          `Failed to list gateway budgets: ${reason}.`,
+          "list gateway budgets"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.listPage({
+            scopeTypes: options == null ? void 0 : options.scopeTypes,
+            cursor,
+            limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE,
+            externalId: options == null ? void 0 : options.externalId
+          });
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  /**
+   * One budget by id, in the same row shape the listing serves.
+   *
+   * Archived budgets are not served, so a budget that existed yesterday can
+   * answer 404 today. A null `spent_usd` means spend could not be totalled
+   * rather than that nothing was spent, which is the same signal the listing
+   * carries as `spend_available`.
+   */
+  async get(id) {
+    const { budget } = await this.request(
+      `get gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}`
+    );
+    return budget;
+  }
+  async create(input, options) {
+    const { budget } = await this.request(
+      "create gateway budget",
+      "/api/gateway/v1/budgets",
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        body: JSON.stringify(input)
+      }, idempotentCreateInit(options))
+    );
+    return budget;
+  }
+  async update(id, input, options) {
+    const { budget } = await this.request(
+      `update gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "PATCH", body: JSON.stringify(input) }, mutationInit(options))
+    );
+    return budget;
+  }
+  async archive(id, options) {
+    const { budget } = await this.request(
+      `archive gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "DELETE" }, mutationInit(options))
+    );
+    return budget;
+  }
+  /**
+   * Move the budget's period boundary to now. Recorded spend is never
+   * mutated; with `endUserId` only that end-user bucket's boundary moves.
+   */
+  async reset(id, options = {}) {
+    const query = options.endUserId ? `?end_user_id=${encodeURIComponent(options.endUserId)}` : "";
+    const { budget } = await this.request(
+      `reset gateway budget "${id}"`,
+      `/api/gateway/v1/budgets/${encodeURIComponent(id)}/reset${query}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(options.reason ? { reason: options.reason } : {})
+      }, mutationInit(options))
+    );
+    return budget;
+  }
+};
+
+// src/client-sdk/services/spend-events/spend-events-api.service.ts
+var SpendEventsApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "SpendEventsApiError";
+  }
+};
+var SpendEventsApiService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+  }
+  async request(operation, path2, init) {
+    var _a, _b;
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, init), {
+      // A hung control plane must fail the command, not freeze it.
+      signal: (_a = init == null ? void 0 : init.signal) != null ? _a : AbortSignal.timeout(3e4),
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        Authorization: `Bearer ${this.apiKey}`,
+        "Content-Type": "application/json"
+      }, (_b = init == null ? void 0 : init.headers) != null ? _b : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throwIfHandledError({
+        operation,
+        error: parsedBody,
+        status: response.status,
+        message
+      });
+      throw new SpendEventsApiError(message, operation, parsedBody);
+    }
+    return await response.json();
+  }
+  /**
+   * ONE page of the per-request spend ledger for a window. Pass `next_cursor`
+   * back as `cursor` for the next page, verbatim.
+   *
+   * A full page does NOT mean there is more and a short page does NOT mean
+   * there is no more: only a null cursor ends the walk. A reconciler that
+   * stops on the first page silently under-counts the window, so read every
+   * page or stream them with `iterate()`.
+   */
+  async listPage(options) {
+    const params = new URLSearchParams();
+    params.set("from", String(options.from));
+    params.set("to", String(options.to));
+    if (options.cursor) params.set("cursor", options.cursor);
+    if (options.limit !== void 0) params.set("limit", String(options.limit));
+    if (options.virtualKeyId) params.set("virtual_key_id", options.virtualKeyId);
+    if (options.endUserId) params.set("end_user_id", options.endUserId);
+    if (options.projectId) params.set("project_id", options.projectId);
+    if (options.model) params.set("model", options.model);
+    if (options.status) params.set("status", options.status);
+    const qs = params.toString() !== "" ? `?${params.toString()}` : "";
+    return await this.request(
+      "list spend events",
+      `/api/gateway/v1/spend-events${qs}`
+    );
+  }
+  /**
+   * Every spend event in the window, one row at a time, fetching each page
+   * only when the consumer reaches it.
+   *
+   * This is how a reconciler reads a whole window without holding it: the
+   * ledger is unbounded, so there is deliberately no eager `list()` to
+   * collect it into an array. Raises rather than looping forever on a cursor
+   * chain that never ends.
+   */
+  iterate(options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new SpendEventsApiError(
+          `Failed to list spend events: ${reason}.`,
+          "list spend events"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.listPage(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, options), {
+            cursor,
+            limit: (_a = options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE
+          }));
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  /**
+   * ONE page of per-key spend rollups for a window, paged by group key
+   * ascending.
+   *
+   * The page is a step of a walk, not a whole answer: follow `next_cursor`
+   * until it comes back null, or stream the walk with `iterSummaries()`. A
+   * reconciler that reads only the first page silently under-counts every
+   * tenant past the limit.
+   */
+  async summariesPage(options) {
+    const params = new URLSearchParams();
+    params.set("group_by", options.groupBy);
+    params.set("from", String(options.from));
+    params.set("to", String(options.to));
+    if (options.projectId) params.set("project_id", options.projectId);
+    if (options.virtualKeyId)
+      params.set("virtual_key_id", options.virtualKeyId);
+    if (options.cursor) params.set("cursor", options.cursor);
+    if (options.limit !== void 0) params.set("limit", String(options.limit));
+    return await this.request(
+      "read spend summaries",
+      `/api/gateway/v1/spend-summaries?${params.toString()}`
+    );
+  }
+  /**
+   * Every rollup row for the window, one at a time, fetching each page only
+   * when the consumer reaches it.
+   *
+   * The rollup has one row per tenant seen in the window, which no bound
+   * covers, so there is deliberately no eager whole-set read here either: a
+   * checksum that quietly covers part of the window is worse than none.
+   */
+  iterSummaries(options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new SpendEventsApiError(
+          `Failed to read spend summaries: ${reason}.`,
+          "read spend summaries"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.summariesPage(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, options), {
+            cursor,
+            limit: (_a = options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE
+          }));
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  /**
+   * Re-deliver a window's spend envelopes to ONE endpoint through the
+   * normal delivery path. Envelope ids are unchanged (your consumer's
+   * dedup key); mind your downstream billing system's finite dedup
+   * window before replaying old ranges. The window is capped server-side
+   * at 7 days per call.
+   */
+  async replay(options) {
+    const response = await this.request(
+      "replay spend events",
+      "/api/gateway/v1/spend-events/replay",
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        body: JSON.stringify({
+          from: options.from,
+          to: options.to,
+          endpoint_id: options.endpointId
+        })
+      }, mutationInit(options))
+    );
+    return response.data;
+  }
+  async endUserSpend(endUserId, options) {
+    const params = new URLSearchParams();
+    if (options == null ? void 0 : options.window) params.set("window", options.window);
+    if ((options == null ? void 0 : options.from) !== void 0) params.set("from", String(options.from));
+    if ((options == null ? void 0 : options.to) !== void 0) params.set("to", String(options.to));
+    if (options == null ? void 0 : options.virtualKeyId) params.set("virtual_key_id", options.virtualKeyId);
+    const qs = params.toString() !== "" ? `?${params.toString()}` : "";
+    const res = await this.request(
+      "read end-user spend",
+      `/api/gateway/v1/end-users/${encodeURIComponent(endUserId)}/spend${qs}`
+    );
+    return res.data;
+  }
+};
+
+// src/client-sdk/services/webhooks/webhooks-api.service.ts
+var WebhooksApiError = class extends Error {
+  constructor(message, operation, originalError) {
+    super(message);
+    this.operation = operation;
+    this.originalError = originalError;
+    this.name = "WebhooksApiError";
+  }
+};
+var WebhooksApiService = class {
+  constructor(config) {
+    var _a, _b, _c;
+    this.endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, config == null ? void 0 : config.endpoint);
+    this.apiKey = (_c = (_b = (_a = config == null ? void 0 : config.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+  }
+  async request(operation, path2, init) {
+    var _a, _b, _c;
+    const response = await fetch(`${this.endpoint}${path2}`, _chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, init), {
+      // A hung control plane must fail the command, not freeze it.
+      signal: (_a = init == null ? void 0 : init.signal) != null ? _a : AbortSignal.timeout(3e4),
+      headers: _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        Authorization: `Bearer ${this.apiKey}`,
+        "Content-Type": "application/json"
+      }, (_b = init == null ? void 0 : init.headers) != null ? _b : {})
+    }));
+    if (!response.ok) {
+      let parsedBody;
+      try {
+        parsedBody = await response.json();
+      } catch (e) {
+        parsedBody = await response.text();
+      }
+      const message = formatApiErrorForOperation({
+        operation,
+        error: parsedBody,
+        options: { status: response.status }
+      });
+      throwIfHandledError({
+        operation,
+        error: parsedBody,
+        status: response.status,
+        message
+      });
+      throw new WebhooksApiError(message, operation, parsedBody);
+    }
+    (_c = init == null ? void 0 : init.onResponse) == null ? void 0 : _c.call(init, response);
+    return await response.json();
+  }
+  async list() {
+    const res = await this.request(
+      "list webhook endpoints",
+      "/api/webhooks/v1/endpoints"
+    );
+    return res.data;
+  }
+  async get(id) {
+    const res = await this.request(
+      "get webhook endpoint",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}`
+    );
+    return res.data;
+  }
+  /**
+   * The signing secret comes back on this response and never again, so a
+   * create that times out is recovered with `idempotencyKey`: the replay
+   * carries the same secret, and nothing else ever will.
+   */
+  async create(input, options) {
+    const res = await this.request(
+      "create webhook endpoint",
+      "/api/webhooks/v1/endpoints",
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, {
+        method: "POST",
+        body: JSON.stringify(input)
+      }, idempotentCreateInit(options))
+    );
+    return res.data;
+  }
+  async update(id, input, options) {
+    const res = await this.request(
+      "update webhook endpoint",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "PATCH", body: JSON.stringify(input) }, mutationInit(options))
+    );
+    return res.data;
+  }
+  /**
+   * Retire an endpoint: the server soft-archives the row, stamping
+   * `archived_at` and dropping the status to disabled, so the delivery
+   * history stays readable for audit while nothing more is ever sent. The
+   * row is archived, not removed, and `gatewayBudgets.archive()` already
+   * names that operation, so the billing surfaces agree on the verb.
+   *
+   * Nothing comes back: the response body carries only an `archived: true`
+   * acknowledgement, and a non-2xx already raises.
+   */
+  async archive(id, options) {
+    await this.request(
+      "archive webhook endpoint",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "DELETE" }, mutationInit(options))
+    );
+  }
+  async rollSecret(id, options) {
+    const res = await this.request(
+      "roll webhook endpoint secret",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}/roll-secret`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "POST" }, mutationInit(options))
+    );
+    return res.data;
+  }
+  async test(id, options) {
+    const res = await this.request(
+      "test webhook endpoint",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}/test`,
+      _chunkCLTKABMOjs.__spreadValues.call(void 0, { method: "POST" }, mutationInit(options))
+    );
+    return res.data;
+  }
+  /**
+   * ONE page of the endpoint's delivery attempts, newest first.
+   *
+   * The cursor is why this is a page: the route has always served one, and
+   * dropping it truncated the delivery log at whatever the first page held,
+   * with nothing in the result to say the rest existed. Pass `next_cursor`
+   * back as `cursor`, or walk the whole log with `iterDeliveries()`.
+   */
+  async deliveriesPage(id, options) {
+    const params = new URLSearchParams();
+    if (options == null ? void 0 : options.cursor) params.set("cursor", options.cursor);
+    if ((options == null ? void 0 : options.limit) !== void 0) params.set("limit", String(options.limit));
+    const qs = params.toString() !== "" ? `?${params.toString()}` : "";
+    const { data, next_cursor } = await this.request(
+      "list webhook deliveries",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}/deliveries${qs}`
+    );
+    return { data, next_cursor: next_cursor != null ? next_cursor : null };
+  }
+  /**
+   * Every recorded delivery attempt for the endpoint, one at a time,
+   * fetching each page only when the consumer reaches it.
+   */
+  iterDeliveries(id, options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options == null ? void 0 : options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new WebhooksApiError(
+          `Failed to list webhook deliveries: ${reason}.`,
+          "list webhook deliveries"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.deliveriesPage(id, {
+            cursor,
+            limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE
+          });
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  async health(id) {
+    const res = await this.request(
+      "read webhook endpoint health",
+      `/api/webhooks/v1/endpoints/${encodeURIComponent(id)}/health`
+    );
+    return res.data;
+  }
+  async eventTypes() {
+    const res = await this.request(
+      "list webhook event types",
+      "/api/webhooks/v1/event-types"
+    );
+    return res.data;
+  }
+  /**
+   * ONE page of the organization's emitted-events log, newest first.
+   *
+   * Webhooks are a push over this log, never the only copy of it: a consumer
+   * that missed a delivery reads the window back from here. Walk the whole
+   * window with `iterEvents()`.
+   */
+  async eventsPage(options) {
+    const params = new URLSearchParams();
+    if (options == null ? void 0 : options.type) params.set("type", options.type);
+    if ((options == null ? void 0 : options.from) !== void 0) params.set("from", String(options.from));
+    if ((options == null ? void 0 : options.to) !== void 0) params.set("to", String(options.to));
+    if (options == null ? void 0 : options.cursor) params.set("cursor", options.cursor);
+    if ((options == null ? void 0 : options.limit) !== void 0) params.set("limit", String(options.limit));
+    const qs = params.toString() !== "" ? `?${params.toString()}` : "";
+    const { data, next_cursor } = await this.request("list emitted events", `/api/webhooks/v1/events${qs}`);
+    return { data, next_cursor: next_cursor != null ? next_cursor : null };
+  }
+  /**
+   * Every emitted event matching the filter, one at a time, fetching each
+   * page only when the consumer reaches it.
+   */
+  iterEvents(options) {
+    return _chunkCLTKABMOjs.__asyncGenerator.call(void 0, this, null, function* () {
+      const pages = walkCursorPages({
+        startCursor: options == null ? void 0 : options.cursor,
+        nextCursorOf: (page) => page.next_cursor,
+        onEndlessWalk: (reason) => new WebhooksApiError(
+          `Failed to list emitted events: ${reason}.`,
+          "list emitted events"
+        ),
+        fetchPage: (cursor) => {
+          var _a;
+          return this.eventsPage(_chunkCLTKABMOjs.__spreadProps.call(void 0, _chunkCLTKABMOjs.__spreadValues.call(void 0, {}, options), {
+            cursor,
+            limit: (_a = options == null ? void 0 : options.limit) != null ? _a : CURSOR_WALK_PAGE_SIZE
+          }));
+        }
+      });
+      try {
+        for (var iter = _chunkCLTKABMOjs.__forAwait.call(void 0, pages), more, temp, error; more = !(temp = yield new (0, _chunkCLTKABMOjs.__await)(iter.next())).done; more = false) {
+          const page = temp.value;
+          yield* _chunkCLTKABMOjs.__yieldStar.call(void 0, page.data);
+        }
+      } catch (temp) {
+        error = [temp];
+      } finally {
+        try {
+          more && (temp = iter.return) && (yield new (0, _chunkCLTKABMOjs.__await)(temp.call(iter)));
+        } finally {
+          if (error)
+            throw error[0];
+        }
+      }
+    });
+  }
+  /**
+   * One emitted event by id, the envelope exactly as it was delivered.
+   *
+   * A 404 covers every reason the log cannot answer: never emitted, past the
+   * retention horizon, or belonging to another organization.
+   */
+  async getEvent(id) {
+    const res = await this.request(
+      "get emitted event",
+      `/api/webhooks/v1/events/${encodeURIComponent(id)}`
+    );
+    return res.data;
+  }
+};
+
 // src/client-sdk/services/traces/types.ts
 var TracesError = class extends Error {
   constructor(message, operation, originalError) {
@@ -5293,7 +6313,7 @@ var TracesError = class extends Error {
 };
 
 // src/client-sdk/services/traces/tracing/tracer.ts
-var tracer3 = _chunkADJOFPAZjs.getLangWatchTracer.call(void 0, `${_chunkWHBCX64Rjs.LANGWATCH_SDK_NAME_CLIENT}.traces`, _chunkWHBCX64Rjs.LANGWATCH_SDK_VERSION);
+var tracer3 = _chunkK6KPNTQOjs.getLangWatchTracer.call(void 0, `${_chunkUOFSG6R4js.LANGWATCH_SDK_NAME_CLIENT}.traces`, _chunkUOFSG6R4js.LANGWATCH_SDK_VERSION);
 
 // src/client-sdk/services/traces/service.ts
 var TracesService = class {
@@ -5347,11 +6367,11 @@ var TracesService = class {
 var _service;
 var TracesFacade = class {
   constructor(config) {
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _service);
-    _chunkTKSTXX3Djs.__privateSet.call(void 0, this, _service, new TracesService(config));
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _service);
+    _chunkCLTKABMOjs.__privateSet.call(void 0, this, _service, new TracesService(config));
   }
   async get(traceId, params) {
-    return _chunkTKSTXX3Djs.__privateGet.call(void 0, this, _service).get(traceId, params);
+    return _chunkCLTKABMOjs.__privateGet.call(void 0, this, _service).get(traceId, params);
   }
 };
 _service = new WeakMap();
@@ -5360,16 +6380,16 @@ _service = new WeakMap();
 var _LangWatch_instances, createInternalConfig_fn;
 var LangWatch = class {
   constructor(options = {}) {
-    _chunkTKSTXX3Djs.__privateAdd.call(void 0, this, _LangWatch_instances);
-    var _a, _b, _c, _d;
-    const apiKey = (_b = (_a = options.apiKey) != null ? _a : process.env.LANGWATCH_API_KEY) != null ? _b : "";
-    const endpoint = (_d = (_c = options.endpoint) != null ? _c : process.env.LANGWATCH_ENDPOINT) != null ? _d : _chunkWHBCX64Rjs.DEFAULT_ENDPOINT;
-    this.config = _chunkTKSTXX3Djs.__privateMethod.call(void 0, this, _LangWatch_instances, createInternalConfig_fn).call(this, {
+    _chunkCLTKABMOjs.__privateAdd.call(void 0, this, _LangWatch_instances);
+    var _a, _b, _c;
+    const apiKey = (_c = (_b = (_a = options.apiKey) != null ? _a : scopedApiKey()) != null ? _b : process.env.LANGWATCH_API_KEY) != null ? _c : "";
+    const endpoint = _chunkDTSULVK5js.resolveEndpoint.call(void 0, options.endpoint);
+    this.config = _chunkCLTKABMOjs.__privateMethod.call(void 0, this, _LangWatch_instances, createInternalConfig_fn).call(this, {
       apiKey,
       endpoint,
       options: options.options
     });
-    this.prompts = new PromptsFacade(_chunkTKSTXX3Djs.__spreadValues.call(void 0, {
+    this.prompts = new PromptsFacade(_chunkCLTKABMOjs.__spreadValues.call(void 0, {
       promptsApiService: new PromptsApiService(this.config),
       localPromptsService: new LocalPromptsService()
     }, this.config));
@@ -5405,6 +6425,10 @@ var LangWatch = class {
     this.simulationRuns = new SimulationRunsApiService(this.config);
     this.monitors = new MonitorsApiService({ apiKey, endpoint });
     this.secrets = new SecretsApiService({ apiKey, endpoint });
+    this.virtualKeys = new VirtualKeysApiService({ apiKey, endpoint });
+    this.gatewayBudgets = new GatewayBudgetsApiService({ apiKey, endpoint });
+    this.spendEvents = new SpendEventsApiService({ apiKey, endpoint });
+    this.webhooks = new WebhooksApiService({ apiKey, endpoint });
   }
   get apiClient() {
     return this.config.langwatchApiClient;
@@ -5418,17 +6442,98 @@ createInternalConfig_fn = function({
 }) {
   var _a;
   return {
-    logger: (_a = options == null ? void 0 : options.logger) != null ? _a : new (0, _chunkTKSTXX3Djs.NoOpLogger)(),
+    logger: (_a = options == null ? void 0 : options.logger) != null ? _a : new (0, _chunkCLTKABMOjs.NoOpLogger)(),
     langwatchApiClient: createLangWatchApiClient(apiKey, endpoint),
     endpoint,
     apiKey
   };
 };
 
+// src/client-sdk/services/webhooks/verify-signature.ts
+var _crypto = require('crypto');
+var WEBHOOK_SIGNATURE_HEADER = "X-LangWatch-Signature";
+var WEBHOOK_DELIVERY_ID_HEADER = "X-LangWatch-Delivery-Id";
+var WEBHOOK_EVENT_ID_HEADER = "X-LangWatch-Event-Id";
+var WEBHOOK_SIGNATURE_DEFAULT_TOLERANCE_SECONDS = 300;
+var WebhookSignatureVerificationError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.name = "WebhookSignatureVerificationError";
+    this.code = code;
+  }
+};
+function parseSignatureHeader(header) {
+  let timestamp;
+  const candidates = [];
+  for (const piece of header.split(",")) {
+    const eq = piece.indexOf("=");
+    if (eq <= 0) continue;
+    const key = piece.slice(0, eq).trim();
+    const value = piece.slice(eq + 1).trim();
+    if (key === "v1") candidates.push(value);
+    else if (key === "t" && value.length > 0) timestamp = Number(value);
+  }
+  return { timestamp, candidates };
+}
+function digestsMatch(expected, candidate) {
+  const a = Buffer.from(expected, "utf8");
+  const b = Buffer.from(candidate, "utf8");
+  return a.length === b.length && _crypto.timingSafeEqual.call(void 0, a, b);
+}
+function signedPayload(timestamp, body) {
+  const prefix = Buffer.from(`${timestamp}.`, "utf8");
+  const bytes = typeof body === "string" ? Buffer.from(body, "utf8") : Buffer.from(body);
+  return Buffer.concat([prefix, bytes]);
+}
+function verifyWebhookSignature(options) {
+  var _a, _b;
+  const secrets = (typeof options.secret === "string" ? [options.secret] : options.secret).filter((secret) => typeof secret === "string" && secret.length > 0);
+  if (secrets.length === 0) {
+    throw new TypeError(
+      "verifyWebhookSignature needs at least one non-empty signing secret"
+    );
+  }
+  const tolerance = (_a = options.toleranceSeconds) != null ? _a : WEBHOOK_SIGNATURE_DEFAULT_TOLERANCE_SECONDS;
+  const now = (_b = options.nowSeconds) != null ? _b : Math.floor(Date.now() / 1e3);
+  const { timestamp, candidates } = parseSignatureHeader(options.header);
+  if (timestamp === void 0 || !Number.isFinite(timestamp)) {
+    throw new WebhookSignatureVerificationError(
+      "malformed_header",
+      `${WEBHOOK_SIGNATURE_HEADER} carries no readable t= timestamp, so the delivery cannot be checked for freshness`
+    );
+  }
+  if (candidates.length === 0) {
+    throw new WebhookSignatureVerificationError(
+      "malformed_header",
+      `${WEBHOOK_SIGNATURE_HEADER} carries no v1= signature, so there is nothing to compare`
+    );
+  }
+  if (Math.abs(now - timestamp) > tolerance) {
+    throw new WebhookSignatureVerificationError(
+      "stale_timestamp",
+      `the delivery was signed ${Math.abs(now - timestamp)}s from now, outside the ${tolerance}s tolerance`
+    );
+  }
+  const payload = signedPayload(timestamp, options.body);
+  let matched = false;
+  for (const secret of secrets) {
+    const expected = _crypto.createHmac.call(void 0, "sha256", secret).update(payload).digest("hex");
+    for (const candidate of candidates) {
+      if (digestsMatch(expected, candidate)) matched = true;
+    }
+  }
+  if (!matched) {
+    throw new WebhookSignatureVerificationError(
+      "invalid_signature",
+      `no v1 signature in ${WEBHOOK_SIGNATURE_HEADER} matched the ${secrets.length === 1 ? "secret" : "secrets"} held, so the body was signed with something else or changed in transit`
+    );
+  }
+}
+
 // src/index.ts
 var logger = {
-  ConsoleLogger: _chunkTKSTXX3Djs.ConsoleLogger,
-  NoOpLogger: _chunkTKSTXX3Djs.NoOpLogger
+  ConsoleLogger: _chunkCLTKABMOjs.ConsoleLogger,
+  NoOpLogger: _chunkCLTKABMOjs.NoOpLogger
 };
 
 
@@ -5462,5 +6567,21 @@ var logger = {
 
 
 
-exports.DatasetApiError = DatasetApiError; exports.DatasetError = DatasetError; exports.DatasetNotFoundError = DatasetNotFoundError; exports.DatasetPlanLimitError = DatasetPlanLimitError; exports.DatasetValidationError = DatasetValidationError; exports.DatasetsFacade = DatasetsFacade; exports.EvaluationError = EvaluationError; exports.EvaluationsApiError = EvaluationsApiError; exports.EvaluationsFacade = EvaluationsFacade; exports.EvaluatorCallError = EvaluatorCallError; exports.EvaluatorError = EvaluatorError; exports.EvaluatorNotFoundError = EvaluatorNotFoundError; exports.EvaluatorsApiError = EvaluatorsApiError; exports.EvaluatorsApiService = EvaluatorsApiService; exports.Experiment = Experiment; exports.ExperimentApiError = ExperimentApiError; exports.ExperimentError = ExperimentError; exports.ExperimentInitError = ExperimentInitError; exports.ExperimentsFacade = ExperimentsFacade; exports.FetchPolicy = FetchPolicy; exports.FilterableBatchSpanProcessor = _chunkIUSLT65Zjs.FilterableBatchSpanProcessor; exports.LangWatch = LangWatch; exports.LangWatchApiError = LangWatchApiError; exports.LangWatchExporter = _chunkWHBCX64Rjs.LangWatchTraceExporter; exports.LangWatchHandledError = LangWatchHandledError; exports.TargetMetadataConflictError = TargetMetadataConflictError; exports.attributes = _chunkTKSTXX3Djs.attributes_exports; exports.getLangWatchLogger = _chunkWHBCX64Rjs.getLangWatchLogger; exports.getLangWatchTracer = _chunkADJOFPAZjs.getLangWatchTracer; exports.isLangWatchHandledError = isLangWatchHandledError; exports.logger = logger;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.DatasetApiError = DatasetApiError; exports.DatasetError = DatasetError; exports.DatasetNotFoundError = DatasetNotFoundError; exports.DatasetPlanLimitError = DatasetPlanLimitError; exports.DatasetValidationError = DatasetValidationError; exports.DatasetsFacade = DatasetsFacade; exports.EvaluationError = EvaluationError; exports.EvaluationsApiError = EvaluationsApiError; exports.EvaluationsFacade = EvaluationsFacade; exports.EvaluatorCallError = EvaluatorCallError; exports.EvaluatorError = EvaluatorError; exports.EvaluatorNotFoundError = EvaluatorNotFoundError; exports.EvaluatorsApiError = EvaluatorsApiError; exports.EvaluatorsApiService = EvaluatorsApiService; exports.Experiment = Experiment; exports.ExperimentApiError = ExperimentApiError; exports.ExperimentError = ExperimentError; exports.ExperimentInitError = ExperimentInitError; exports.ExperimentsFacade = ExperimentsFacade; exports.FetchPolicy = FetchPolicy; exports.FilterableBatchSpanProcessor = _chunkZTOXEWNXjs.FilterableBatchSpanProcessor; exports.GatewayBudgetsApiError = GatewayBudgetsApiError; exports.GatewayBudgetsApiService = GatewayBudgetsApiService; exports.IDEMPOTENCY_KEY_HEADER = IDEMPOTENCY_KEY_HEADER; exports.IDEMPOTENT_REPLAY_HEADER = IDEMPOTENT_REPLAY_HEADER; exports.LangWatch = LangWatch; exports.LangWatchApiError = LangWatchApiError; exports.LangWatchExporter = _chunkUOFSG6R4js.LangWatchTraceExporter; exports.LangWatchHandledError = LangWatchHandledError; exports.SpendEventsApiError = SpendEventsApiError; exports.SpendEventsApiService = SpendEventsApiService; exports.TargetMetadataConflictError = TargetMetadataConflictError; exports.VirtualKeysApiError = VirtualKeysApiError; exports.VirtualKeysApiService = VirtualKeysApiService; exports.WEBHOOK_DELIVERY_ID_HEADER = WEBHOOK_DELIVERY_ID_HEADER; exports.WEBHOOK_EVENT_ID_HEADER = WEBHOOK_EVENT_ID_HEADER; exports.WEBHOOK_SIGNATURE_DEFAULT_TOLERANCE_SECONDS = WEBHOOK_SIGNATURE_DEFAULT_TOLERANCE_SECONDS; exports.WEBHOOK_SIGNATURE_HEADER = WEBHOOK_SIGNATURE_HEADER; exports.WebhookSignatureVerificationError = WebhookSignatureVerificationError; exports.WebhooksApiError = WebhooksApiError; exports.WebhooksApiService = WebhooksApiService; exports.attributes = _chunkCLTKABMOjs.attributes_exports; exports.getLangWatchLogger = _chunkUOFSG6R4js.getLangWatchLogger; exports.getLangWatchTracer = _chunkK6KPNTQOjs.getLangWatchTracer; exports.isLangWatchHandledError = isLangWatchHandledError; exports.logger = logger; exports.verifyWebhookSignature = verifyWebhookSignature;
 //# sourceMappingURL=index.js.map