langsmith 0.8.10 → 0.8.12

package/dist/sandbox/sandbox.d.ts

@@ -1,7 +1,7 @@
 /**
  * Sandbox class for interacting with a specific sandbox instance.
  */
-import type { CaptureSnapshotOptions, ExecutionResult, RunOptions, Snapshot, StartSandboxOptions } from "./types.js";
+import type { CaptureSnapshotOptions, DownloadURL, ExecutionResult, GenerateDownloadURLOptions, RunOptions, Snapshot, StartSandboxOptions } from "./types.js";
 import { CommandHandle } from "./command_handle.js";
 /**
  * Represents an active sandbox for running commands and file operations.
@@ -155,6 +155,30 @@ export declare class Sandbox {
      * ```
      */
     read(path: string, timeout?: number): Promise<Uint8Array>;
+    /**
+     * Create a link that downloads one file from this sandbox.
+     *
+     * The link carries its own token, so anyone holding the URL can fetch that
+     * one file without a LangSmith credential. Fetching wakes a stopped sandbox.
+     *
+     * Do not modify the file after minting a link for it. The link is pinned to
+     * a path, not to a snapshot of the contents, so a later write to that path
+     * may or may not be reflected in what the link serves. Write a new file and
+     * mint a new link when the contents change.
+     *
+     * @param path - File path inside the sandbox.
+     * @param options - Expiry and response header overrides.
+     * @returns The link and its expiry, if any.
+     *
+     * @example
+     * ```typescript
+     * const link = await sandbox.generateDownloadURL("/tmp/report.pdf", {
+     *   expiresInSeconds: 3600,
+     * });
+     * console.log(link.download_url);
+     * ```
+     */
+    generateDownloadURL(path: string, options?: GenerateDownloadURLOptions): Promise<DownloadURL>;
     /**
      * Delete this sandbox.
      *

package/dist/sandbox/sandbox.js

@@ -2,7 +2,7 @@
  * Sandbox class for interacting with a specific sandbox instance.
  */
 import { uuid7 } from "../uuid.js";
-import { LangSmithDataplaneNotConfiguredError, LangSmithSandboxConnectTimeoutError, LangSmithStreamEndedBeforeStartedError, } from "./errors.js";
+import { LangSmithDataplaneNotConfiguredError, LangSmithSandboxRetryableConnectionError, LangSmithStreamEndedBeforeStartedError, } from "./errors.js";
 import { handleSandboxHttpError } from "./helpers.js";
 import { CommandHandle } from "./command_handle.js";
 import { connectDeadline, isWsAvailable, openTimeoutFor, reconnectWsStream, remainingBudget, runWsStream, } from "./ws_execute.js";
@@ -261,7 +261,7 @@ export class Sandbox {
                 // Idempotent re-issue (same command_id): neither an early close nor a
                 // failed connect can have started a second command.
                 if (!(e instanceof LangSmithStreamEndedBeforeStartedError) &&
-                    !(e instanceof LangSmithSandboxConnectTimeoutError)) {
+                    !(e instanceof LangSmithSandboxRetryableConnectionError)) {
                     throw e;
                 }
                 attempt++;
@@ -407,6 +407,32 @@ export class Sandbox {
         const buffer = await response.arrayBuffer();
         return new Uint8Array(buffer);
     }
+    /**
+     * Create a link that downloads one file from this sandbox.
+     *
+     * The link carries its own token, so anyone holding the URL can fetch that
+     * one file without a LangSmith credential. Fetching wakes a stopped sandbox.
+     *
+     * Do not modify the file after minting a link for it. The link is pinned to
+     * a path, not to a snapshot of the contents, so a later write to that path
+     * may or may not be reflected in what the link serves. Write a new file and
+     * mint a new link when the contents change.
+     *
+     * @param path - File path inside the sandbox.
+     * @param options - Expiry and response header overrides.
+     * @returns The link and its expiry, if any.
+     *
+     * @example
+     * ```typescript
+     * const link = await sandbox.generateDownloadURL("/tmp/report.pdf", {
+     *   expiresInSeconds: 3600,
+     * });
+     * console.log(link.download_url);
+     * ```
+     */
+    async generateDownloadURL(path, options = {}) {
+        return this._client.generateDownloadURL(this.name, path, options);
+    }
     /**
      * Delete this sandbox.
      *

package/dist/sandbox/types.d.ts

@@ -270,6 +270,13 @@ export interface SandboxAwsAuthRule {
     type: "aws";
     /** Whether the rule is enabled. */
     enabled?: boolean;
+    /**
+     * Plaintext environment variables set for every command in the sandbox while
+     * the rule is enabled, for tools that refuse to run unless a credential
+     * variable is present even though the proxy injects the real credential on
+     * the wire.
+     */
+    env_vars?: Record<string, string>;
     /** AWS credentials used by the proxy signer. */
     aws: {
         access_key_id: SandboxProxySecret;
@@ -284,6 +291,13 @@ export interface SandboxGcpAuthRule {
     type: "gcp";
     /** Whether the rule is enabled. */
     enabled?: boolean;
+    /**
+     * Plaintext environment variables set for every command in the sandbox while
+     * the rule is enabled, for tools that refuse to run unless a credential
+     * variable is present even though the proxy injects the real credential on
+     * the wire.
+     */
+    env_vars?: Record<string, string>;
     /** GCP service-account credential and OAuth scopes. */
     gcp: {
         service_account_json: SandboxProxySecret;
@@ -386,8 +400,29 @@ export interface GitMountSpec {
     /** Git mount configuration. */
     git: GitMountConfig;
 }
+/** Context Hub configuration for a sandbox mount. */
+export interface ContextHubMountConfig {
+    /**
+     * Context Hub repository to sync, as `owner/repo` (e.g. `-/my-agent`, where
+     * `-` is the current workspace).
+     */
+    repo: string;
+    /** Sync once at startup instead of polling for updates. */
+    initial_pull_only?: boolean;
+}
+/** Read-only Context Hub-backed sandbox mount specification. */
+export interface ContextHubMountSpec {
+    /** Stable mount identifier. */
+    id: string;
+    /** Mount type. */
+    type: "contexthub";
+    /** Absolute path inside the sandbox where the repo tree appears. */
+    mount_path: string;
+    /** Context Hub mount configuration. */
+    contexthub: ContextHubMountConfig;
+}
 /** Sandbox mount specification. */
-export type SandboxMount = S3MountSpec | GCSMountSpec | GitMountSpec;
+export type SandboxMount = S3MountSpec | GCSMountSpec | GitMountSpec | ContextHubMountSpec;
 /** AWS credentials used by the backend to authenticate S3 mounts. */
 export interface SandboxAwsMountAuthConfig {
     access_key_id: SandboxProxySecret;
@@ -524,6 +559,41 @@ export interface CaptureSnapshotOptions {
     /** AbortSignal for cancellation. */
     signal?: AbortSignal;
 }
+/**
+ * How a download link asks the browser to handle the file.
+ */
+export type DownloadContentDisposition = "attachment" | "inline";
+/**
+ * Options for minting a sandbox file download link.
+ */
+export interface GenerateDownloadURLOptions {
+    /**
+     * Link TTL in seconds. Omit for a link that never expires.
+     */
+    expiresInSeconds?: number;
+    /** Content-Type to serve the file as. */
+    contentType?: string;
+    /** Content-Disposition to serve the file with. */
+    contentDisposition?: DownloadContentDisposition;
+    /** AbortSignal for cancellation. */
+    signal?: AbortSignal;
+}
+/**
+ * A link that downloads one sandbox file with no LangSmith credential.
+ *
+ * The link is pinned to the sandbox, the file path, and the response headers,
+ * so it cannot be repointed at another file. It is pinned to the path rather
+ * than to a snapshot of the contents, so the file must not be modified while
+ * the link is in use.
+ */
+export interface DownloadURL {
+    /** The full URL to fetch. Supports GET, HEAD, and Range. */
+    download_url: string;
+    /** The signed token embedded in `download_url`. */
+    token: string;
+    /** Expiry timestamp, or null for a link that never expires. */
+    expires_at: string | null;
+}
 /**
  * Options for listing snapshots. All fields are optional and independent.
  *

package/dist/sandbox/ws_execute.cjs

@@ -35,6 +35,7 @@ exports.WS_OPEN_TIMEOUT = envTimeout("SANDBOX_WS_TIMEOUT_OPEN", 30);
 // Ceiling on the whole connect phase. Without it, retrying a blackholed
 // handshake costs MAX_AUTO_RECONNECTS + 1 full open timeouts plus backoff.
 exports.WS_CONNECT_BUDGET = envTimeout("SANDBOX_WS_TIMEOUT_CONNECT_BUDGET", 120);
+const RETRYABLE_HANDSHAKE_STATUS_CODES = new Set([500, 502, 503, 504]);
 function nowSeconds() {
     return performance.now() / 1000;
 }
@@ -184,8 +185,8 @@ function raiseForWsError(msg, commandId = "") {
  * Create a ws WebSocket connection and return a promise that resolves when open
  * or rejects on error.
  *
- * A socket-level failure rejects with the retryable connect-timeout error; a
- * non-101 response rejects with the permanent connection error.
+ * Socket-level failures and transient 5xx responses are retryable. Other
+ * non-101 responses are permanent connection errors.
  */
 async function connectWs(url, headers, openTimeout = exports.WS_OPEN_TIMEOUT) {
     const { WebSocket: WS } = await ensureWs();
@@ -210,7 +211,10 @@ async function connectWs(url, headers, openTimeout = exports.WS_OPEN_TIMEOUT) {
             if (settled)
                 return;
             settled = true;
-            reject(new errors_js_1.LangSmithSandboxConnectionError(`WebSocket upgrade to ${url} rejected by server (HTTP ${res.statusCode})`));
+            const ErrorType = RETRYABLE_HANDSHAKE_STATUS_CODES.has(res.statusCode ?? 0)
+                ? errors_js_1.LangSmithSandboxRetryableConnectionError
+                : errors_js_1.LangSmithSandboxConnectionError;
+            reject(new ErrorType(`WebSocket upgrade to ${url} rejected by server (HTTP ${res.statusCode})`));
         });
         // Stays attached after settling so a late error has a listener and cannot
         // become an unhandled 'error' event.

package/dist/sandbox/ws_execute.js

@@ -4,7 +4,7 @@
  * Uses the `ws` npm package (optional peer dependency).
  * Install with: npm install ws
  */
-import { LangSmithCommandTimeoutError, LangSmithSandboxConnectionError, LangSmithSandboxConnectTimeoutError, LangSmithSandboxOperationError, LangSmithSandboxServerReloadError, } from "./errors.js";
+import { LangSmithCommandTimeoutError, LangSmithSandboxConnectionError, LangSmithSandboxConnectTimeoutError, LangSmithSandboxOperationError, LangSmithSandboxRetryableConnectionError, LangSmithSandboxServerReloadError, } from "./errors.js";
 import { getLangSmithEnvironmentVariable } from "../utils/env.js";
 /** Read a WebSocket timeout override, in seconds. `<= 0` disables it. */
 function envTimeout(name, defaultSeconds) {
@@ -23,6 +23,7 @@ export const WS_OPEN_TIMEOUT = envTimeout("SANDBOX_WS_TIMEOUT_OPEN", 30);
 // Ceiling on the whole connect phase. Without it, retrying a blackholed
 // handshake costs MAX_AUTO_RECONNECTS + 1 full open timeouts plus backoff.
 export const WS_CONNECT_BUDGET = envTimeout("SANDBOX_WS_TIMEOUT_CONNECT_BUDGET", 120);
+const RETRYABLE_HANDSHAKE_STATUS_CODES = new Set([500, 502, 503, 504]);
 function nowSeconds() {
     return performance.now() / 1000;
 }
@@ -171,8 +172,8 @@ export function raiseForWsError(msg, commandId = "") {
  * Create a ws WebSocket connection and return a promise that resolves when open
  * or rejects on error.
  *
- * A socket-level failure rejects with the retryable connect-timeout error; a
- * non-101 response rejects with the permanent connection error.
+ * Socket-level failures and transient 5xx responses are retryable. Other
+ * non-101 responses are permanent connection errors.
  */
 async function connectWs(url, headers, openTimeout = WS_OPEN_TIMEOUT) {
     const { WebSocket: WS } = await ensureWs();
@@ -197,7 +198,10 @@ async function connectWs(url, headers, openTimeout = WS_OPEN_TIMEOUT) {
             if (settled)
                 return;
             settled = true;
-            reject(new LangSmithSandboxConnectionError(`WebSocket upgrade to ${url} rejected by server (HTTP ${res.statusCode})`));
+            const ErrorType = RETRYABLE_HANDSHAKE_STATUS_CODES.has(res.statusCode ?? 0)
+                ? LangSmithSandboxRetryableConnectionError
+                : LangSmithSandboxConnectionError;
+            reject(new ErrorType(`WebSocket upgrade to ${url} rejected by server (HTTP ${res.statusCode})`));
         });
         // Stays attached after settling so a late error has a listener and cannot
         // become an unhandled 'error' event.

package/dist/wrappers/anthropic.cjs

@@ -5,7 +5,36 @@ exports.createUsageMetadata = createUsageMetadata;
 const anthropic_managed_js_1 = require("./utils/anthropic_managed.cjs");
 const traceable_js_1 = require("../traceable.cjs");
 const usage_js_1 = require("../utils/usage.cjs");
+const index_js_1 = require("../anonymizer/index.cjs");
 const TRACED_INVOCATION_KEYS = ["top_k", "top_p", "stream", "thinking"];
+/** Keys of an MCP server definition that are safe to trace. */
+const MCP_SERVER_SAFE_KEYS = new Set([
+    "name",
+    "type",
+    "url",
+    "tool_configuration",
+]);
+/**
+ * Mask credentials in `mcp_servers` before tracing. Anything outside
+ * {@link MCP_SERVER_SAFE_KEYS} keeps its name but gets
+ * {@link SECRET_PLACEHOLDER} as its value, so the trace shows the field was set
+ * without exposing it, and fields the API adds later are masked by default.
+ *
+ * Returns new objects; the caller's are also sent to Anthropic.
+ */
+function redactMcpServers(servers) {
+    if (!Array.isArray(servers))
+        return servers;
+    return servers.map((server) => {
+        if (typeof server !== "object" || server == null || Array.isArray(server)) {
+            return server;
+        }
+        return Object.fromEntries(Object.entries(server).map(([key, value]) => [
+            key,
+            MCP_SERVER_SAFE_KEYS.has(key) ? value : index_js_1.SECRET_PLACEHOLDER,
+        ]));
+    });
+}
 /**
  * Create usage metadata from Anthropic's token usage format.
  */
@@ -222,11 +251,15 @@ const wrapAnthropic = (anthropic, options) => {
      * This provides parity with the Python SDK behavior and enables system prompts
      * to be viewed and edited in the LangSmith playground.
      */
-    function processSystemMessage(params) {
+    function processTracedInputs(params) {
+        // Copy first: `params` also goes to the API and must keep its real values.
+        const processed = { ...params };
+        if (processed.mcp_servers != null) {
+            processed.mcp_servers = redactMcpServers(processed.mcp_servers);
+        }
         if (!params.system) {
-            return params;
+            return processed;
         }
-        const processed = { ...params };
         // Handle both string and ContentBlock[] formats
         const systemContent = Array.isArray(params.system)
             ? params.system
@@ -248,7 +281,7 @@ const wrapAnthropic = (anthropic, options) => {
         run_type: "llm",
         aggregator: messageAggregator,
         argsConfigPath: [1, "langsmithExtra"],
-        processInputs: processSystemMessage,
+        processInputs: processTracedInputs,
         getInvocationParams: (payload) => {
             if (typeof payload !== "object" || payload == null)
                 return undefined;
@@ -315,7 +348,7 @@ const wrapAnthropic = (anthropic, options) => {
         run_type: "llm",
         aggregator: messageAggregator,
         argsConfigPath: [1, "langsmithExtra"],
-        processInputs: processSystemMessage,
+        processInputs: processTracedInputs,
         getInvocationParams: messagesCreateConfig.getInvocationParams,
         processOutputs: processMessageOutput,
         ...cleanedOptions,
@@ -341,7 +374,7 @@ const wrapAnthropic = (anthropic, options) => {
                     run_type: "llm",
                     aggregator: messageAggregator,
                     argsConfigPath: [1, "langsmithExtra"],
-                    processInputs: processSystemMessage,
+                    processInputs: processTracedInputs,
                     getInvocationParams: messagesCreateConfig.getInvocationParams,
                     processOutputs: processMessageOutput,
                     ...cleanedOptions,

package/dist/wrappers/anthropic.js

@@ -1,7 +1,36 @@
 import { wrapManagedAgentSessionEvents } from "./utils/anthropic_managed.js";
 import { isTraceableFunction, traceable, } from "../traceable.js";
 import { convertAnthropicUsageToInputTokenDetails } from "../utils/usage.js";
+import { SECRET_PLACEHOLDER } from "../anonymizer/index.js";
 const TRACED_INVOCATION_KEYS = ["top_k", "top_p", "stream", "thinking"];
+/** Keys of an MCP server definition that are safe to trace. */
+const MCP_SERVER_SAFE_KEYS = new Set([
+    "name",
+    "type",
+    "url",
+    "tool_configuration",
+]);
+/**
+ * Mask credentials in `mcp_servers` before tracing. Anything outside
+ * {@link MCP_SERVER_SAFE_KEYS} keeps its name but gets
+ * {@link SECRET_PLACEHOLDER} as its value, so the trace shows the field was set
+ * without exposing it, and fields the API adds later are masked by default.
+ *
+ * Returns new objects; the caller's are also sent to Anthropic.
+ */
+function redactMcpServers(servers) {
+    if (!Array.isArray(servers))
+        return servers;
+    return servers.map((server) => {
+        if (typeof server !== "object" || server == null || Array.isArray(server)) {
+            return server;
+        }
+        return Object.fromEntries(Object.entries(server).map(([key, value]) => [
+            key,
+            MCP_SERVER_SAFE_KEYS.has(key) ? value : SECRET_PLACEHOLDER,
+        ]));
+    });
+}
 /**
  * Create usage metadata from Anthropic's token usage format.
  */
@@ -218,11 +247,15 @@ export const wrapAnthropic = (anthropic, options) => {
      * This provides parity with the Python SDK behavior and enables system prompts
      * to be viewed and edited in the LangSmith playground.
      */
-    function processSystemMessage(params) {
+    function processTracedInputs(params) {
+        // Copy first: `params` also goes to the API and must keep its real values.
+        const processed = { ...params };
+        if (processed.mcp_servers != null) {
+            processed.mcp_servers = redactMcpServers(processed.mcp_servers);
+        }
         if (!params.system) {
-            return params;
+            return processed;
         }
-        const processed = { ...params };
         // Handle both string and ContentBlock[] formats
         const systemContent = Array.isArray(params.system)
             ? params.system
@@ -244,7 +277,7 @@ export const wrapAnthropic = (anthropic, options) => {
         run_type: "llm",
         aggregator: messageAggregator,
         argsConfigPath: [1, "langsmithExtra"],
-        processInputs: processSystemMessage,
+        processInputs: processTracedInputs,
         getInvocationParams: (payload) => {
             if (typeof payload !== "object" || payload == null)
                 return undefined;
@@ -311,7 +344,7 @@ export const wrapAnthropic = (anthropic, options) => {
         run_type: "llm",
         aggregator: messageAggregator,
         argsConfigPath: [1, "langsmithExtra"],
-        processInputs: processSystemMessage,
+        processInputs: processTracedInputs,
         getInvocationParams: messagesCreateConfig.getInvocationParams,
         processOutputs: processMessageOutput,
         ...cleanedOptions,
@@ -337,7 +370,7 @@ export const wrapAnthropic = (anthropic, options) => {
                     run_type: "llm",
                     aggregator: messageAggregator,
                     argsConfigPath: [1, "langsmithExtra"],
-                    processInputs: processSystemMessage,
+                    processInputs: processTracedInputs,
                     getInvocationParams: messagesCreateConfig.getInvocationParams,
                     processOutputs: processMessageOutput,
                     ...cleanedOptions,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "langsmith",
-  "version": "0.8.10",
+  "version": "0.8.12",
   "description": "Client library to connect to the LangSmith Observability and Evaluation Platform.",
   "packageManager": "pnpm@10.33.0",
   "files": [
@@ -481,7 +481,17 @@
   },
   "pnpm": {
     "overrides": {
-      "js-yaml": "^4.1.1",
+      "@hono/node-server": "2.0.10",
+      "brace-expansion@<1.1.16": "1.1.16",
+      "brace-expansion@>=2.0.0 <2.1.2": "2.1.2",
+      "brace-expansion@>=3.0.0 <5.0.7": "5.0.7",
+      "fast-uri": "3.1.5",
+      "postcss": "8.5.23",
+      "js-yaml": "4.3.1",
+      "hono": "4.12.34",
+      "ip-address": "10.3.1",
+      "undici@>=7.0.0 <8.0.0": "7.29.0",
+      "undici@>=8.0.0 <9.0.0": "8.9.0",
       "vite": "^7.3.2",
       "form-data": "4.0.6",
       "langsmith": "0.6.0",