@langchain/langgraph-api 0.0.63 → 0.0.65

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @langchain/langgraph-api
 
+## 0.0.65
+
+### Patch Changes
+
+- 0aefafe: Skip auth middleware when requesting JS/CSS assets for built-in generative UI
+  - @langchain/langgraph-ui@0.0.65
+
+## 0.0.64
+
+### Patch Changes
+
+- 30bcfcd: Assume `http` protocol only when accessing UI components from frontend served from `localhost` or `127.0.0.1` (#1596, #1573)
+- 572de43: feat(threads): add `ids` filter to Threads.search
+
+  - SDK: `ThreadsClient.search` now accepts `ids?: string[]` and forwards it to `/threads/search`.
+  - API: `/threads/search` schema accepts `ids` and storage filters by provided thread IDs.
+
+  This enables fetching a specific set of threads directly via the search endpoint, while remaining backward compatible.
+
+  - @langchain/langgraph-ui@0.0.64
+
 ## 0.0.63
 
 ### Patch Changes

package/dist/api/threads.mjs

@@ -26,6 +26,7 @@ api.post("/threads/search", zValidator("json", schemas.ThreadSearchRequest), asy
         status: payload.status,
         values: payload.values,
         metadata: payload.metadata,
+        ids: payload.ids,
         limit: payload.limit ?? 10,
         offset: payload.offset ?? 0,
         sort_by: payload.sort_by ?? "created_at",

package/dist/auth/custom.mjs

@@ -13,6 +13,9 @@ export const auth = () => {
         // skip for /info
         if (c.req.path === "/info")
             return next();
+        // skip for UI asset requests
+        if (c.req.path.startsWith("/ui") && c.req.method === "GET")
+            return next();
         if (!isStudioAuthDisabled() &&
             c.req.header("x-auth-scheme") === "langsmith") {
             c.set("auth", {

package/dist/schemas.d.mts

@@ -1110,6 +1110,7 @@ export declare const ThreadCountRequest: z.ZodObject<{
 }>;
 export declare const ThreadSearchRequest: z.ZodObject<{
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    ids: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     status: z.ZodOptional<z.ZodEnum<["idle", "busy", "interrupted", "error"]>>;
     values: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     limit: z.ZodOptional<z.ZodNumber>;
@@ -1122,6 +1123,7 @@ export declare const ThreadSearchRequest: z.ZodObject<{
     metadata?: Record<string, unknown> | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
+    ids?: string[] | undefined;
     sort_by?: "status" | "thread_id" | "created_at" | "updated_at" | undefined;
     sort_order?: "asc" | "desc" | undefined;
 }, {
@@ -1130,6 +1132,7 @@ export declare const ThreadSearchRequest: z.ZodObject<{
     metadata?: Record<string, unknown> | undefined;
     limit?: number | undefined;
     offset?: number | undefined;
+    ids?: string[] | undefined;
     sort_by?: "status" | "thread_id" | "created_at" | "updated_at" | undefined;
     sort_order?: "asc" | "desc" | undefined;
 }>;

package/dist/schemas.mjs

@@ -305,6 +305,10 @@ export const ThreadSearchRequest = z
         .record(z.unknown())
         .describe("Metadata to search for.")
         .optional(),
+    ids: z
+        .array(z.string().uuid())
+        .describe("Filter by thread IDs.")
+        .optional(),
     status: z
         .enum(["idle", "busy", "interrupted", "error"])
         .describe("Filter by thread status.")

package/dist/storage/ops.d.mts

@@ -92,6 +92,7 @@ export declare class FileSystemThreads implements ThreadsRepo {
     constructor(conn: FileSystemPersistence<Store>);
     search(options: {
         metadata?: Metadata;
+        ids?: string[];
         status?: ThreadStatus;
         values?: Record<string, unknown>;
         limit: number;

package/dist/storage/ops.mjs

@@ -425,6 +425,7 @@ export class FileSystemThreads {
     async *search(options, auth) {
         const [filters] = await handleAuthEvent(auth, "threads:search", {
             metadata: options.metadata,
+            ids: options.ids,
             status: options.status,
             values: options.values,
             limit: options.limit,
@@ -433,6 +434,10 @@ export class FileSystemThreads {
         yield* this.conn.withGenerator(async function* (STORE) {
             const filtered = Object.values(STORE.threads)
                 .filter((thread) => {
+                if (options.ids != null && options.ids.length > 0) {
+                    if (!options.ids.includes(thread["thread_id"]))
+                        return false;
+                }
                 if (options.metadata != null &&
                     !isJsonbContained(thread["metadata"], options.metadata))
                     return false;

package/dist/storage/types.d.mts

@@ -183,6 +183,7 @@ export interface RunsStreamRepo {
 export interface ThreadsRepo {
     search(options: {
         metadata?: Metadata;
+        ids?: string[];
         status?: ThreadStatus;
         values?: Record<string, unknown>;
         limit: number;

package/dist/ui/load.mjs

@@ -18,18 +18,24 @@ api.post("/ui/:agent", zValidator("json", z.object({ name: z.string() })), async
     const agent = c.req.param("agent");
     const host = c.req.header("host");
     const message = await c.req.valid("json");
+    const isHost = (needle) => {
+        if (!host)
+            return false;
+        return host.startsWith(needle + ":") || host === needle;
+    };
+    const protocol = isHost("localhost") || isHost("127.0.0.1") ? "http:" : "";
     const files = GRAPH_UI[agent];
     if (!files?.length)
         return c.text(`UI not found for agent "${agent}"`, 404);
     const messageName = JSON.stringify(message.name);
     const result = [];
     for (const css of files.filter((i) => path.extname(i.basename) === ".css")) {
-        result.push(`<link rel="stylesheet" href="http://${host}/ui/${agent}/${css.basename}" />`);
+        result.push(`<link rel="stylesheet" href="${protocol}//${host}/ui/${agent}/${css.basename}" />`);
     }
     const stableName = agent.replace(/[^a-zA-Z0-9]/g, "_");
     const js = files.find((i) => path.extname(i.basename) === ".js");
     if (js) {
-        result.push(`<script src="http://${host}/ui/${agent}/${js.basename}" onload='__LGUI_${stableName}.render(${messageName}, "{{shadowRootId}}")'></script>`);
+        result.push(`<script src="${protocol}//${host}/ui/${agent}/${js.basename}" onload='__LGUI_${stableName}.render(${messageName}, "{{shadowRootId}}")'></script>`);
     }
     return c.text(result.join("\n"), {
         headers: { "Content-Type": "text/html" },

package/dist/utils/hono.d.mts

@@ -1,5 +1,5 @@
 import type { Context } from "hono";
 import { StreamingApi } from "hono/utils/stream";
-export declare function jsonExtra<T>(c: Context, object: T): Response & import("hono").TypedResponse<unknown, import("hono/utils/http-status").ContentfulStatusCode, "body">;
+export declare function jsonExtra<T>(c: Context, object: T): Response & import("hono").TypedResponse<string, import("hono/utils/http-status").ContentfulStatusCode, "body">;
 export declare function waitKeepAlive(c: Context, promise: Promise<unknown>): Response;
 export declare const getDisconnectAbortSignal: (c: Context, stream: StreamingApi) => AbortSignal;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langchain/langgraph-api",
-  "version": "0.0.63",
+  "version": "0.0.65",
   "type": "module",
   "engines": {
     "node": "^18.19.0 || >=20.16.0"
@@ -64,7 +64,7 @@
     "@babel/code-frame": "^7.26.2",
     "@hono/node-server": "^1.12.0",
     "@hono/zod-validator": "^0.2.2",
-    "@langchain/langgraph-ui": "0.0.63",
+    "@langchain/langgraph-ui": "0.0.65",
     "@types/json-schema": "^7.0.15",
     "@typescript/vfs": "^1.6.0",
     "dedent": "^1.5.3",
@@ -96,9 +96,9 @@
   },
   "devDependencies": {
     "@langchain/core": "^0.3.59",
-    "@langchain/langgraph": "0.4.7",
-    "@langchain/langgraph-checkpoint": "0.1.0",
-    "@langchain/langgraph-sdk": "0.0.112",
+    "@langchain/langgraph": "0.4.9",
+    "@langchain/langgraph-checkpoint": "0.1.1",
+    "@langchain/langgraph-sdk": "0.1.1",
     "@types/babel__code-frame": "^7.0.6",
     "@types/node": "^18.15.11",
     "@types/react": "^19.0.8",