langsmith 0.7.9 → 0.7.11

package/dist/sandbox/proxy_config.js

@@ -1,8 +1,3 @@
-const DEFAULT_GCP_AUTH_MATCH_HOSTS = [
-    "storage.googleapis.com",
-    "www.googleapis.com",
-];
-const PROVIDER_RULE_TYPES = new Set(["aws", "gcp"]);
 function requireNonEmptyString(value, field) {
     if (typeof value !== "string" || value.trim() === "") {
         throw new Error(`${field} must be a non-empty string`);
@@ -26,9 +21,20 @@ function requireProxyRules(rules) {
         if (rule === null || typeof rule !== "object" || Array.isArray(rule)) {
             throw new Error("rules must be an array of proxy rule objects");
         }
+        validateProxyProviderRule(rule);
         return rule;
     });
 }
+function validateProxyProviderRule(rule) {
+    if (rule.type !== "gcp") {
+        return;
+    }
+    const gcp = rule.gcp;
+    if (gcp === undefined || gcp.scopes === undefined) {
+        throw new Error("gcp proxy auth rules require scopes");
+    }
+    requireNonEmptyStringArray(gcp.scopes, "scopes");
+}
 /** Reference a LangSmith workspace secret in a sandbox proxy configuration. */
 export function workspaceSecret(name) {
     const normalized = requireNonEmptyString(name, "name");
@@ -65,38 +71,6 @@ export function proxyConfig({ rules, noProxy, accessControl, } = {}) {
     }
     return config;
 }
-function providerRuleTypes(config) {
-    const providers = new Set();
-    for (const rule of config.rules ?? []) {
-        if (rule === null || typeof rule !== "object" || Array.isArray(rule)) {
-            continue;
-        }
-        const ruleType = rule.type;
-        if (typeof ruleType === "string" && PROVIDER_RULE_TYPES.has(ruleType)) {
-            providers.add(ruleType);
-        }
-    }
-    return providers;
-}
-export function mergeProxyConfigs(generatedConfig, explicitConfig) {
-    if (generatedConfig === undefined) {
-        return explicitConfig;
-    }
-    if (explicitConfig === undefined) {
-        return generatedConfig;
-    }
-    const generatedProviders = providerRuleTypes(generatedConfig);
-    for (const provider of providerRuleTypes(explicitConfig)) {
-        if (generatedProviders.has(provider)) {
-            throw new Error(`${provider} auth cannot be provided in both mountConfig and proxyConfig`);
-        }
-    }
-    return {
-        ...generatedConfig,
-        ...explicitConfig,
-        rules: [...(generatedConfig.rules ?? []), ...(explicitConfig.rules ?? [])],
-    };
-}
 /** Build a sandbox proxy rule that signs AWS HTTPS requests with SigV4. */
 export function awsAuth({ accessKeyId, secretAccessKey, name = "aws", enabled = true, }) {
     return {
@@ -110,15 +84,17 @@ export function awsAuth({ accessKeyId, secretAccessKey, name = "aws", enabled =
     };
 }
 /** Build a sandbox proxy rule that injects GCP OAuth bearer auth. */
-export function gcpAuth({ serviceAccountJson, scopes, matchHosts = DEFAULT_GCP_AUTH_MATCH_HOSTS, name = "gcp", enabled = true, }) {
+export function gcpAuth({ serviceAccountJson, scopes, name = "gcp", enabled = true, }) {
+    const gcp = {
+        service_account_json: serviceAccountJson,
+    };
+    if (scopes !== undefined) {
+        gcp.scopes = requireNonEmptyStringArray(scopes, "scopes");
+    }
     return {
         name: requireNonEmptyString(name, "name"),
         type: "gcp",
         enabled,
-        match_hosts: requireNonEmptyStringArray(matchHosts, "matchHosts"),
-        gcp: {
-            service_account_json: serviceAccountJson,
-            scopes: requireNonEmptyStringArray(scopes, "scopes"),
-        },
+        gcp,
     };
 }

package/dist/sandbox/types.d.ts

@@ -280,16 +280,14 @@ export interface SandboxAwsAuthRule {
 export interface SandboxGcpAuthRule {
     /** Rule name. */
     name: string;
-    /** GCP auth rules match explicit Google API host patterns. */
+    /** GCP auth rules use the sandbox proxy's built-in Google API host matcher. */
     type: "gcp";
     /** Whether the rule is enabled. */
     enabled?: boolean;
-    /** Google API hosts covered by this rule, such as storage.googleapis.com. */
-    match_hosts: string[];
     /** GCP service-account credential and OAuth scopes. */
     gcp: {
         service_account_json: SandboxProxySecret;
-        scopes: string[];
+        scopes?: string[];
     };
 }
 /** Proxy rule accepted by the sandbox proxy config. */
@@ -307,14 +305,14 @@ export interface SandboxProxyConfig {
     /** Allow/deny list enforced at the proxy sidecar. */
     access_control?: SandboxAccessControl;
 }
-/** Optional per-mount cache configuration supported by all mount providers. */
+/** Optional per-mount cache configuration supported by bucket mounts. */
 export interface MountCacheConfig {
     /** Maximum VFS cache size in bytes. */
     max_size_bytes?: number;
     /** Seconds rclone waits before writing cached changes back. */
     writeback_seconds?: number;
 }
-interface SandboxMountBase {
+interface SandboxBucketMountBase {
     /** Stable mount identifier. */
     id: string;
     /** Absolute path inside the sandbox where the mount appears. */
@@ -341,7 +339,7 @@ export interface S3MountConfig {
     path_style?: boolean;
 }
 /** S3-backed sandbox mount specification. */
-export interface S3MountSpec extends SandboxMountBase {
+export interface S3MountSpec extends SandboxBucketMountBase {
     /** Mount type. */
     type: "s3";
     /** S3 mount configuration. */
@@ -355,20 +353,63 @@ export interface GCSMountConfig {
     prefix?: string;
 }
 /** GCS-backed sandbox mount specification. */
-export interface GCSMountSpec extends SandboxMountBase {
+export interface GCSMountSpec extends SandboxBucketMountBase {
     /** Mount type. */
     type: "gcs";
     /** GCS mount configuration. */
     gcs: GCSMountConfig;
 }
+/** Git ref selected for a sandbox mount. */
+export interface GitMountRefSpec {
+    /** Git ref type. */
+    type: "branch" | "tag";
+    /** Branch or tag name. */
+    name: string;
+}
+/** Git configuration for a sandbox mount. */
+export interface GitMountConfig {
+    /** Public HTTPS Git remote URL. */
+    remote_url: string;
+    /** Optional branch or tag to mount. */
+    ref?: GitMountRefSpec;
+    /** Optional refresh interval for polling the remote. */
+    refresh_interval_seconds?: number;
+}
+/** Git-backed sandbox mount specification. */
+export interface GitMountSpec {
+    /** Stable mount identifier. */
+    id: string;
+    /** Mount type. */
+    type: "git";
+    /** Absolute path inside the sandbox where the mount appears. */
+    mount_path: string;
+    /** Git mount configuration. */
+    git: GitMountConfig;
+}
 /** Sandbox mount specification. */
-export type SandboxMount = S3MountSpec | GCSMountSpec;
-/** SDK-level mount config expanded into backend mounts and proxyConfig. */
+export type SandboxMount = S3MountSpec | GCSMountSpec | GitMountSpec;
+/** AWS credentials used by the backend to authenticate S3 mounts. */
+export interface SandboxAwsMountAuthConfig {
+    access_key_id: SandboxProxySecret;
+    secret_access_key: SandboxProxySecret;
+}
+/** GCP credentials used by the backend to authenticate GCS mounts. */
+export interface SandboxGcpMountAuthConfig {
+    service_account_json: SandboxProxySecret;
+}
+/** Provider auth blocks for sandbox mounts. */
+export interface SandboxMountAuthConfig {
+    aws?: SandboxAwsMountAuthConfig;
+    gcp?: SandboxGcpMountAuthConfig;
+}
+/** Provider auth helper output accepted by mountConfig. */
+export type SandboxMountAuth = SandboxAwsAuthRule | SandboxGcpAuthRule;
+/** Public mount config sent to the sandbox API. */
 export interface SandboxMountConfig {
+    /** Provider auth blocks for bucket-backed mounts. */
+    auth: SandboxMountAuthConfig;
     /** Mounts attached to the sandbox. */
     mounts: SandboxMount[];
-    /** Proxy auth config required by the mounts. */
-    proxyConfig: SandboxProxyConfig;
 }
 /**
  * Options for creating a sandbox.
@@ -417,9 +458,9 @@ export interface CreateSandboxOptions {
     /** Root filesystem capacity in bytes. */
     fsCapacityBytes?: number;
     /**
-     * High-level mount configuration. The SDK expands it into backend `mounts`
-     * and `proxy_config` fields. If `proxyConfig` is also provided, its rules are
-     * merged with the mount-generated proxy auth rules.
+     * Mount configuration forwarded to the server as `mount_config`. The backend
+     * expands mount auth into runtime proxy rules. Explicit AWS/GCP proxy rules
+     * in `proxyConfig` conflict with mount auth for the same provider.
      */
     mountConfig?: SandboxMountConfig;
     /**

package/dist/utils/constants.cjs

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._MIN_BACKEND_VERSION = void 0;
+exports._MIN_BACKEND_VERSION = "0.16.5rc1";

package/dist/utils/constants.d.ts

@@ -0,0 +1 @@
+export declare const _MIN_BACKEND_VERSION = "0.16.5rc1";

package/dist/utils/constants.js

@@ -0,0 +1 @@
+export const _MIN_BACKEND_VERSION = "0.16.5rc1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "langsmith",
-  "version": "0.7.9",
+  "version": "0.7.11",
   "description": "Client library to connect to the LangSmith Observability and Evaluation Platform.",
   "packageManager": "pnpm@10.33.0",
   "files": [
@@ -114,7 +114,7 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "scripts": {
-    "build": "pnpm clean && pnpm build:esm && pnpm build:cjs && node scripts/create-entrypoints.js",
+    "build": "pnpm clean && pnpm build:esm && pnpm build:cjs && node scripts/create-entrypoints.js && node scripts/fix-openapi-client-declarations.js",
     "build:typedoc": "pnpm build && rm -rf ./_build/api_refs && npx typedoc",
     "bump-version": "node scripts/bump-version.js",
     "check-version": "node scripts/check-version.js",

package/dist/_openapi_client/resources/annotation-queues/annotation-queues.cjs

@@ -1,138 +0,0 @@
-"use strict";
-// @ts-nocheck
-// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AnnotationQueues = void 0;
-const resource_js_1 = require("../../core/resource.cjs");
-const RunsAPI = __importStar(require("./runs.cjs"));
-const runs_js_1 = require("./runs.cjs");
-const pagination_js_1 = require("../../core/pagination.cjs");
-const path_js_1 = require("../../internal/utils/path.cjs");
-class AnnotationQueues extends resource_js_1.APIResource {
-    constructor() {
-        super(...arguments);
-        Object.defineProperty(this, "runs", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: new RunsAPI.Runs(this._client)
-        });
-    }
-    /**
-     * Get Annotation Queue
-     */
-    retrieve(queueID, options) {
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}`, options);
-    }
-    /**
-     * Update Annotation Queue
-     */
-    update(queueID, body, options) {
-        return this._client.patch((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}`, { body, ...options });
-    }
-    /**
-     * Delete Annotation Queue
-     */
-    delete(queueID, options) {
-        return this._client.delete((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}`, options);
-    }
-    /**
-     * Create Annotation Queue
-     */
-    annotationQueues(body, options) {
-        return this._client.post('/api/v1/annotation-queues', { body, ...options });
-    }
-    /**
-     * Create Identity Annotation Queue Run Status
-     */
-    createRunStatus(annotationQueueRunID, body, options) {
-        return this._client.post((0, path_js_1.path) `/api/v1/annotation-queues/status/${annotationQueueRunID}`, {
-            body,
-            ...options,
-        });
-    }
-    /**
-     * Export Annotation Queue Archived Runs
-     */
-    export(queueID, body, options) {
-        return this._client.post((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}/export`, { body, ...options });
-    }
-    /**
-     * Populate annotation queue with runs from an experiment.
-     */
-    populate(body, options) {
-        return this._client.post('/api/v1/annotation-queues/populate', { body, ...options });
-    }
-    /**
-     * Get Annotation Queues
-     */
-    retrieveAnnotationQueues(query = {}, options) {
-        return this._client.getAPIList('/api/v1/annotation-queues', (pagination_js_1.OffsetPaginationTopLevelArray), { query, ...options });
-    }
-    /**
-     * Get Annotation Queues For Run
-     */
-    retrieveQueues(runID, options) {
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${runID}/queues`, options);
-    }
-    /**
-     * Get a run from an annotation queue
-     */
-    retrieveRun(index, params, options) {
-        const { queue_id, ...query } = params;
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${queue_id}/run/${index}`, { query, ...options });
-    }
-    /**
-     * Get Size From Annotation Queue
-     */
-    retrieveSize(queueID, query = {}, options) {
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}/size`, { query, ...options });
-    }
-    /**
-     * Get Total Archived From Annotation Queue
-     */
-    retrieveTotalArchived(queueID, query = {}, options) {
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}/total_archived`, { query, ...options });
-    }
-    /**
-     * Get Total Size From Annotation Queue
-     */
-    retrieveTotalSize(queueID, options) {
-        return this._client.get((0, path_js_1.path) `/api/v1/annotation-queues/${queueID}/total_size`, options);
-    }
-}
-exports.AnnotationQueues = AnnotationQueues;
-AnnotationQueues.Runs = runs_js_1.Runs;