@langchain/langgraph-api 1.4.1 → 1.4.2

package/dist/api/runs.mjs

@@ -9,6 +9,7 @@ import { logError, logger } from "../logging.mjs";
 import * as schemas from "../schemas.mjs";
 import { runs, threads } from "../storage/context.mjs";
 import { getDisconnectAbortSignal, jsonExtra, waitKeepAlive, } from "../utils/hono.mjs";
+import { applyAuthToRunConfig, applyRequestHeadersToRunConfig, } from "../utils/run-auth.mjs";
 import { serialiseAsDict } from "../utils/serde.mjs";
 const api = new Hono();
 const createValidRun = async (threadId, payload, kwargs) => {
@@ -40,30 +41,8 @@ const createValidRun = async (threadId, payload, kwargs) => {
             langsmith_example_id: run.langsmith_tracer.example_id,
         });
     }
-    if (headers) {
-        for (const [rawKey, value] of headers.entries()) {
-            const key = rawKey.toLowerCase();
-            if (key.startsWith("x-")) {
-                if (["x-api-key", "x-tenant-id", "x-service-key"].includes(key)) {
-                    continue;
-                }
-                config.configurable ??= {};
-                config.configurable[key] = value;
-            }
-            else if (key === "user-agent") {
-                config.configurable ??= {};
-                config.configurable[key] = value;
-            }
-        }
-    }
-    let userId;
-    if (auth) {
-        userId = auth.user.identity ?? auth.user.id;
-        config.configurable ??= {};
-        config.configurable["langgraph_auth_user"] = auth.user;
-        config.configurable["langgraph_auth_user_id"] = userId;
-        config.configurable["langgraph_auth_permissions"] = auth.scopes;
-    }
+    applyRequestHeadersToRunConfig(config, headers);
+    const userId = applyAuthToRunConfig(config, auth);
     let feedbackKeys = run.feedback_keys != null
         ? Array.isArray(run.feedback_keys)
             ? run.feedback_keys

package/dist/protocol/service.mjs

@@ -1,6 +1,7 @@
 import { inferChannel, isPrefixMatch } from "@langchain/langgraph/stream";
 import { v7 as uuid7 } from "@langchain/core/utils/uuid";
 import { getAssistantId } from "../graph/load.mjs";
+import { applyAuthToRunConfig } from "../utils/run-auth.mjs";
 import { PROTOCOL_STREAM_RUN_KEY } from "./constants.mjs";
 import { RunProtocolSession } from "./session/index.mjs";
 const DEFAULT_RUN_STREAM_MODES = [
@@ -326,6 +327,7 @@ export class ProtocolService {
                 thread_id: record.threadId,
             },
         };
+        const userId = applyAuthToRunConfig(runConfig, record.auth);
         const runPayload = {
             assistant_id: assistantId,
             input: isResume ? null : params.input,
@@ -366,6 +368,7 @@ export class ProtocolService {
             [PROTOCOL_STREAM_RUN_KEY]: true,
         }, {
             threadId: record.threadId,
+            userId,
             metadata: runPayload.metadata,
             status: "pending",
             multitaskStrategy: runPayload.multitask_strategy,

package/dist/utils/run-auth.d.mts

@@ -0,0 +1,13 @@
+import type { AuthContext } from "../auth/index.mjs";
+import type { RunnableConfig } from "../storage/types.mjs";
+/**
+ * Copy allowed request headers into `config.configurable`, matching the REST
+ * runs API (`createValidRun`). Used by both REST and protocol-v2 run creation.
+ */
+export declare function applyRequestHeadersToRunConfig(config: RunnableConfig, headers: Headers | undefined): void;
+/**
+ * Stamp the authenticated user onto `config.configurable` so graph nodes and
+ * tools can read `langgraph_auth_user`. Returns the resolved user id for run
+ * metadata when auth is present.
+ */
+export declare function applyAuthToRunConfig(config: RunnableConfig, auth: AuthContext | undefined): string | undefined;

package/dist/utils/run-auth.mjs

@@ -0,0 +1,42 @@
+const BLOCKED_CONFIGURABLE_HEADERS = new Set([
+    "x-api-key",
+    "x-tenant-id",
+    "x-service-key",
+]);
+/**
+ * Copy allowed request headers into `config.configurable`, matching the REST
+ * runs API (`createValidRun`). Used by both REST and protocol-v2 run creation.
+ */
+export function applyRequestHeadersToRunConfig(config, headers) {
+    if (!headers)
+        return;
+    for (const [rawKey, value] of headers.entries()) {
+        const key = rawKey.toLowerCase();
+        if (key.startsWith("x-")) {
+            if (BLOCKED_CONFIGURABLE_HEADERS.has(key))
+                continue;
+            config.configurable ??= {};
+            config.configurable[key] = value;
+        }
+        else if (key === "user-agent") {
+            config.configurable ??= {};
+            config.configurable[key] = value;
+        }
+    }
+}
+/**
+ * Stamp the authenticated user onto `config.configurable` so graph nodes and
+ * tools can read `langgraph_auth_user`. Returns the resolved user id for run
+ * metadata when auth is present.
+ */
+export function applyAuthToRunConfig(config, auth) {
+    if (!auth)
+        return undefined;
+    const userId = auth.user.identity ??
+        (typeof auth.user.id === "string" ? auth.user.id : undefined);
+    config.configurable ??= {};
+    config.configurable.langgraph_auth_user = auth.user;
+    config.configurable.langgraph_auth_user_id = userId;
+    config.configurable.langgraph_auth_permissions = auth.scopes;
+    return userId;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langchain/langgraph-api",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "type": "module",
   "engines": {
     "node": "^18.19.0 || >=20.16.0"
@@ -71,7 +71,7 @@
     "winston": "^3.17.0",
     "winston-console-format": "^1.0.8",
     "zod": "^3.25.76 || ^4",
-    "@langchain/langgraph-ui": "1.4.1"
+    "@langchain/langgraph-ui": "1.4.2"
   },
   "peerDependencies": {
     "@langchain/core": "^1.1.48",
@@ -93,20 +93,20 @@
     "@langchain/core": "^1.2.1",
     "@types/babel__code-frame": "^7.0.6",
     "@types/node": "^18.15.11",
-    "@types/react": "^19.2.16",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^19.0.3",
     "@types/semver": "^7.7.0",
     "deepagents": "^1.10.5",
     "jose": "^6.0.10",
-    "langchain": "^1.5.1",
+    "langchain": "^1.5.2",
     "postgres": "^3.4.5",
     "ts-node": "^10.9.2",
     "typescript": "^4.9.5 || ^5.4.5",
-    "vitest": "^4.1.0",
+    "vitest": "^4.1.9",
     "wait-port": "^1.1.0",
-    "@langchain/langgraph": "1.4.6",
-    "@langchain/langgraph-checkpoint": "1.1.3",
-    "@langchain/langgraph-sdk": "1.9.25"
+    "@langchain/langgraph": "1.4.7",
+    "@langchain/langgraph-sdk": "1.9.25",
+    "@langchain/langgraph-checkpoint": "1.1.3"
   },
   "scripts": {
     "clean": "rm -rf dist/ .turbo/ ./tests/graphs/.langgraph_api/ ./tests/protocol-v2/graphs/.langgraph_api/",