@langchain/langgraph-cli 1.5.2 → 1.5.4

package/dist/cli/deploy.mjs

@@ -18,11 +18,12 @@ import { withAnalytics } from "./utils/analytics.mjs";
 import { getProjectPath } from "./utils/project.mjs";
 import { getConfig } from "../utils/config.mjs";
 import { assembleLocalDeps, configToDocker, getBaseImage, } from "../docker/docker.mjs";
+import { activeDockerHost } from "../docker/compose.mjs";
 import { DOCKER_NOT_INSTALLED, DOCKER_NOT_RUNNING, isBinaryNotFound, } from "../docker/errors.mjs";
 import { HostBackendClient, HostBackendError, } from "./utils/host-backend.mjs";
 import { Emitter, Spinner } from "./utils/deploy-output.mjs";
 import { createArchive, BYTES_PER_MIB } from "./utils/archive.mjs";
-import { API_KEY_ENV_NAMES, DEFAULT_HOST_URL, DEPLOYMENT_NAME_ENV, TERMINAL_STATUSES, envWithoutDeploymentName, findDeploymentIdByName, formatDeploymentsTable, formatLogEntry, formatRevisionsTable, getDeploymentStatusUrl, hasDisallowedBuildCommandContent, isPathWithin, levelColor, normalizeImageTag, normalizeName, secretsFromEnv, smithDashboardBaseUrl, } from "./utils/deploy-helpers.mjs";
+import { API_KEY_ENV_NAMES, DEFAULT_HOST_URL, DEPLOYMENT_NAME_ENV, TERMINAL_STATUSES, envWithoutDeploymentName, findDeploymentIdByName, formatDeploymentsTable, formatLogEntry, formatRevisionsTable, getDeploymentStatusUrl, hasDisallowedBuildCommandContent, isPathWithin, levelColor, normalizeImageTag, normalizeName, resolvePushTarget, secretsFromEnv, smithDashboardBaseUrl, } from "./utils/deploy-helpers.mjs";
 // ---------------------------------------------------------------------------
 // Module-level state (mirrors the Python globals `_emitter` / `_no_input`).
 // ---------------------------------------------------------------------------
@@ -477,8 +478,8 @@ async function printDeploymentResult(client, deploymentId, lastStatus, options)
 // ---------------------------------------------------------------------------
 // Docker push auth + digest resolution
 // ---------------------------------------------------------------------------
-async function dockerConfigForToken(registryHost, token) {
-    const authB64 = Buffer.from(`oauth2accesstoken:${token}`).toString("base64");
+async function dockerConfigForToken(registryHost, token, username) {
+    const authB64 = Buffer.from(`${username}:${token}`).toString("base64");
     const data = { auths: { [registryHost]: { auth: authB64 } } };
     const dir = await fs.mkdtemp(path.join(os.tmpdir(), "langgraph-docker-"));
     await fs.writeFile(path.join(dir, "config.json"), JSON.stringify(data));
@@ -660,16 +661,17 @@ async function runLocalBuild(args) {
         throw new Error("Push token response missing token or registry_url");
     }
     step += 1;
-    let normalizedRegistry = registryUrl.replace(/\/+$/, "");
-    if (normalizedRegistry.includes("://")) {
-        normalizedRegistry = normalizedRegistry.slice(normalizedRegistry.indexOf("//") + 2);
-    }
     const repoSeed = args.imageName || args.name || path.basename(projectDir);
-    const repoName = normalizeName(repoSeed);
-    const tagValue = normalizeImageTag(args.tag);
-    const remoteImage = `${normalizedRegistry}/${repoName}:${tagValue}`;
-    const registryHost = normalizedRegistry.split("/")[0];
-    const { dir: cfgDir, cleanup } = await dockerConfigForToken(registryHost, deploymentToken);
+    const { image: remoteImage, registryHost, username, } = resolvePushTarget(pushData, normalizeName(repoSeed), normalizeImageTag(args.tag));
+    // A config directory has no current context, so Docker would fall back to
+    // /var/run/docker.sock; keep talking to the daemon the build used.
+    const dockerHost = await activeDockerHost();
+    const { dir: cfgDir, cleanup } = await dockerConfigForToken(registryHost, deploymentToken, username);
+    const dockerArgs = [
+        "--config",
+        cfgDir,
+        ...(dockerHost ? ["--host", dockerHost] : []),
+    ];
     try {
         // -- Login --
         emitter.step(step, `Logging into ${registryHost}`);
@@ -680,7 +682,7 @@ async function runLocalBuild(args) {
             ...baseOpts,
             ...stdio,
             input: tokenInput,
-        }) `docker --config ${cfgDir} login -u oauth2accesstoken --password-stdin ${registryHost}`;
+        }) `docker ${dockerArgs} login -u ${username} --password-stdin ${registryHost}`;
         step += 1;
         // -- Tag + push --
         emitter.step(step, `Pushing image ${remoteImage}`);
@@ -697,7 +699,7 @@ async function runLocalBuild(args) {
                 await $({
                     ...baseOpts,
                     ...stdio,
-                }) `docker --config ${cfgDir} push ${remoteImage}`;
+                }) `docker ${dockerArgs} push ${remoteImage}`;
                 pushSpinner.stop();
                 break;
             }

package/dist/cli/utils/deploy-helpers.mjs

@@ -153,6 +153,40 @@ export function normalizeImageTag(value) {
     }
     return tag;
 }
+// Artifact Registry's username for access tokens. Control planes whose registry
+// needs another one return it as `username`.
+const DEFAULT_REGISTRY_USERNAME = "oauth2accesstoken";
+function stripUrlScheme(url) {
+    const reference = url.replace(/\/+$/, "");
+    return reference.includes("://")
+        ? reference.slice(reference.indexOf("//") + 2)
+        : reference;
+}
+/**
+ * Resolve the push target from a push-token response.
+ *
+ * When the control plane returns `repository_url`, the image goes to exactly
+ * that repository: an ECR repository is a single image name, so nothing may be
+ * appended to it. Otherwise the image goes under `registry_url`.
+ *
+ * @param pushData - The push-token response; `registry_url` must be a string.
+ * @param repoName - Normalized image name used under `registry_url`.
+ * @param tag - Validated image tag.
+ * @returns The image reference, login host, and username.
+ */
+export function resolvePushTarget(pushData, repoName, tag) {
+    const repository = typeof pushData.repository_url === "string" && pushData.repository_url
+        ? stripUrlScheme(pushData.repository_url)
+        : `${stripUrlScheme(String(pushData.registry_url))}/${repoName}`;
+    const username = typeof pushData.username === "string" && pushData.username
+        ? pushData.username
+        : DEFAULT_REGISTRY_USERNAME;
+    return {
+        image: `${repository}:${tag}`,
+        registryHost: repository.split("/")[0],
+        username,
+    };
+}
 /**
  * Convert an env dict to a deployment secrets list, dropping reserved and
  * empty-valued variables.

package/dist/cli/utils/host-backend.mjs

@@ -209,11 +209,17 @@ export class HostBackendClient {
      * Request a short-lived registry push token for a local-build deployment
      * (`POST /v2/deployments/{id}/push-token`).
      *
+     * Tells the control plane this client logs in with the returned `username`
+     * and pushes to `repository_url`. LangSmith AWS requires it.
+     *
      * @param deploymentId - Deployment ID.
-     * @returns A response containing the push `token` and `registry_url`.
+     * @returns A response containing the push `token` and `registry_url`, plus
+     * `username` and `repository_url` when the registry needs them.
      */
     requestPushToken(deploymentId) {
-        return this.request("POST", `/v2/deployments/${deploymentId}/push-token`);
+        return this.request("POST", `/v2/deployments/${deploymentId}/push-token`, {
+            payload: { supports_registry_username: true },
+        });
     }
     /**
      * Request a signed GCS upload URL for the source tarball used by remote

package/dist/docker/compose.mjs

@@ -185,3 +185,23 @@ export function createCompose(capabilities, options) {
     }
     return yaml.stringify(compose, { blockQuote: "literal" });
 }
+/**
+ * The daemon endpoint of the user's active Docker context.
+ *
+ * Undefined when `DOCKER_HOST` is set, which Docker honors with any config
+ * directory. Also undefined when the lookup fails (for example, `DOCKER_CONTEXT`
+ * names a context that doesn't exist) or the context has no Docker endpoint
+ * (Docker prints `<no value>`); that keeps Docker's own default in place.
+ */
+export async function activeDockerHost() {
+    if (process.env.DOCKER_HOST)
+        return undefined;
+    try {
+        const { stdout } = await $ `docker context inspect --format ${"{{.Endpoints.docker.Host}}"}`;
+        const host = String(stdout).trim();
+        return host.includes("://") ? host : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@langchain/langgraph-cli",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "type": "module",
   "engines": {
     "node": "^18.19.0 || >=20.16.0"
@@ -39,7 +39,7 @@
     "winston-console-format": "^1.0.8",
     "yaml": "^2.8.3",
     "zod": "^3.25.76 || ^4",
-    "@langchain/langgraph-api": "1.5.2",
+    "@langchain/langgraph-api": "1.5.4",
     "create-langgraph": "1.1.5"
   },
   "devDependencies": {