managed-deepagents 0.0.3-dev.38 → 0.0.3-dev.42
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/connectors/langsmith.d.ts +3 -2
- package/dist/connectors/langsmith.d.ts.map +1 -1
- package/dist/connectors/langsmith.js +10 -4
- package/dist/connectors/langsmith.js.map +1 -1
- package/dist/identity.d.ts +22 -22
- package/dist/identity.d.ts.map +1 -1
- package/dist/identity.js +5 -4
- package/dist/identity.js.map +1 -1
- package/dist/runtime/auth.d.ts +5 -3
- package/dist/runtime/auth.d.ts.map +1 -1
- package/dist/runtime/auth.js +22 -9
- package/dist/runtime/auth.js.map +1 -1
- package/dist/runtime/credentials.d.ts +14 -6
- package/dist/runtime/credentials.d.ts.map +1 -1
- package/dist/runtime/credentials.js +32 -9
- package/dist/runtime/credentials.js.map +1 -1
- package/dist/runtime/identity-http.js +10 -1
- package/dist/runtime/identity-http.js.map +1 -1
- package/dist/runtime/identity-runtime.d.ts +4 -4
- package/dist/runtime/identity-runtime.js +6 -6
- package/dist/runtime/identity-runtime.js.map +1 -1
- package/dist/runtime/langsmith-connector.d.ts +20 -5
- package/dist/runtime/langsmith-connector.d.ts.map +1 -1
- package/dist/runtime/langsmith-connector.js +236 -23
- package/dist/runtime/langsmith-connector.js.map +1 -1
- package/dist/runtime/managed-tools.d.ts +5 -5
- package/dist/runtime/managed-tools.d.ts.map +1 -1
- package/dist/runtime/managed-tools.js +7 -7
- package/dist/runtime/managed-tools.js.map +1 -1
- package/dist/runtime/validated-token.d.ts +9 -3
- package/dist/runtime/validated-token.d.ts.map +1 -1
- package/dist/runtime/validated-token.js +26 -8
- package/dist/runtime/validated-token.js.map +1 -1
- package/dist/types.d.ts +1 -1
- package/package.json +7 -7
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwCjC
|
|
1
|
+
{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/runtime/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAS/B;;;;;;;;;;;;;GAaG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAEzE,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAwCjC,kEAAkE;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxD,kDAAkD;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAIP;IACA;IAJF,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,YACmB,eAAuB,yBAAyB,EAChD,aAAqB,4BAA4B;QADjD,iBAAY,GAAZ,YAAY,CAAoC;QAChD,eAAU,GAAV,UAAU,CAAuC;IACjE,CAAC;IAEJ,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,GAAG,CACD,GAAW,EACX,KAAyB,EACzB,QAAgB,IAAI,CAAC,GAAG,EAAE;QAE1B,IAAI,WAAmB,CAAC;QACxB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM;gBACR,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAE3C,2DAA2D;AAC3D,MAAM,UAAU,4BAA4B;IAC1C,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,QAAqC,EACrC,IAA8B,EAC9B,QAAyB,YAAY;IAErC,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAmB;QAC/B,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK;QAC3B,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,oBAAoB;KAC3D,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO;YACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,sEAAsE;oBACpE,6BAA6B,CAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YACD,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpB,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAmB,EACnB,QAAyB,EACzB,MAAwB,EACxB,IAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAW,EACX,SAAiB,EACjB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,SAAS,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,cAAc,QAAQ,CAAC,MAAM,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,QAAyB,EACzB,MAAwB;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,8DAA8D;YAC5D,GAAG,6BAA6B,iCAAiC,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,IAAI,OAAO,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC3B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;QAC/B,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACxE,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,QAAyB,EAAE,MAAwB;IACnE,OAAO,eAAe,CAAC;QACrB,QAAQ,CAAC,KAAK,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAC3B,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,IAAI;QACX,MAAM,CAAC,MAAM,IAAI,IAAI;QACrB,MAAM,CAAC,QAAQ,IAAI,IAAI;QACvB,MAAM,CAAC,QAAQ,IAAI,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACrD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;SACnE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,KAAc,EACd,WAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,cAAc,WAAW,gCAAgC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAG9B,CAAC;IACF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,sCAAsC,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,YAAY,IAAI,qBAAqB,CAC/D,CAAC;QACJ,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAuB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,cAAc,WAAW,uCAAuC,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -57,6 +57,10 @@ function mountIdentityRoutes(app, identity) {
|
|
|
57
57
|
* Mount a connector's `http` routes on a sub-router namespaced under
|
|
58
58
|
* `/connectors/{kind}`, so connector routes cannot collide with identity/API
|
|
59
59
|
* routes or with each other.
|
|
60
|
+
*
|
|
61
|
+
* The connector's `http` hook must mount synchronously. Async hooks are rejected
|
|
62
|
+
* because LangGraph captures custom routes when the module is imported — a
|
|
63
|
+
* deferred mount leaves those paths as platform 404s.
|
|
60
64
|
*/
|
|
61
65
|
function mountConnectorRoutes(app, connector, cfg, mounted) {
|
|
62
66
|
const sub = new Hono();
|
|
@@ -72,7 +76,12 @@ function mountConnectorRoutes(app, connector, cfg, mounted) {
|
|
|
72
76
|
return resolveRequestIdentity(cfg, request);
|
|
73
77
|
},
|
|
74
78
|
};
|
|
75
|
-
connector.http?.(ctx);
|
|
79
|
+
const result = connector.http?.(ctx);
|
|
80
|
+
if (result != null &&
|
|
81
|
+
typeof result.then === "function") {
|
|
82
|
+
throw new Error(`Connector "${connector.kind}" http() returned a Promise. HTTP hooks must ` +
|
|
83
|
+
`mount routes synchronously so LangGraph can capture them at import time.`);
|
|
84
|
+
}
|
|
76
85
|
app.route(`/connectors/${connector.kind}`, sub);
|
|
77
86
|
}
|
|
78
87
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoBvD,qFAAqF;AACrF,MAAM,0BAA2B,SAAQ,KAAK;IACnC,MAAM,GAAG,GAAG,CAAC;IACtB;QACE,KAAK,CACH,qEAAqE;YACnE,qBAAqB,CACxB,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,GAAS,EAAE,QAA4B;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CACpC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED
|
|
1
|
+
{"version":3,"file":"identity-http.js","sourceRoot":"","sources":["../../src/runtime/identity-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAQnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAoBvD,qFAAqF;AACrF,MAAM,0BAA2B,SAAQ,KAAK;IACnC,MAAM,GAAG,GAAG,CAAC;IACtB;QACE,KAAK,CACH,qEAAqE;YACnE,qBAAqB,CACxB,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,mBAAmB,CAAC,GAAS,EAAE,QAA4B;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CACpC,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAC3B,GAAS,EACT,SAAoB,EACpB,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,GAAG,GAAgB;QACvB,MAAM;QACN,QAAQ,EAAE,GAAG;QACb,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;YAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,6DAA6D;oBAC3D,0DAA0D,CAC7D,CACF,CAAC;YACJ,CAAC;YACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAyB,CAAC;IAC7D,IACE,MAAM,IAAI,IAAI;QACd,OAAQ,MAA4B,CAAC,IAAI,KAAK,UAAU,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,CAAC,IAAI,+CAA+C;YACzE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,eAAe,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,GAAS,EACT,IAAY,EACZ,GAA+B,EAC/B,OAAuB;IAEvB,MAAM,OAAO,GACX,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA4B,EAAE,EAAE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,oBAAoB,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEJ,MAAM,WAAW,GACf,CAAC,MAAkB,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,OAA2B,EAAE,EAAE;QACpE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEJ,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE;YACN,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;YACzB,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC;YACvB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GACV,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;QACxD,CAAC,CAAE,KAA4B,CAAC,MAAM;QACtC,CAAC,CAAC,GAAG,CAAC;IACV,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;QACtD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAuB;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,iCAAiC,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;IAC3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,eAAe,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}
|
|
@@ -7,12 +7,12 @@ import type { ConfigurableCarrier } from "./types.js";
|
|
|
7
7
|
export declare function resolveRuntimeConfigurable(runtime: RuntimeConfigLike | undefined): Record<string, unknown> | undefined;
|
|
8
8
|
/**
|
|
9
9
|
* Build the frozen identity envelope for the current run from the trusted
|
|
10
|
-
* `langgraph_auth_user` the custom-auth handler produced
|
|
10
|
+
* `langgraph_auth_user` the custom-auth handler produced. Returns
|
|
11
11
|
* `undefined` when the deployment has no resolvable actor (identity is opt-in).
|
|
12
12
|
*/
|
|
13
13
|
export declare function buildRuntimeIdentity(configurable: Record<string, unknown> | undefined): RuntimeIdentity | undefined;
|
|
14
14
|
/**
|
|
15
|
-
* The durable Store namespace for the run, per `scoping.memory
|
|
15
|
+
* The durable Store namespace for the run, per `scoping.memory`. A
|
|
16
16
|
* `deploymentId` prefix isolates deployments; identity segments follow. Returns
|
|
17
17
|
* `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
|
|
18
18
|
* no actor already rejects at ingress, so the segments are never empty here.
|
|
@@ -32,7 +32,7 @@ export interface RuntimeConfigLike extends ConfigurableCarrier {
|
|
|
32
32
|
}
|
|
33
33
|
/**
|
|
34
34
|
* Resolve the durable memory namespace for a run directly from the runtime the
|
|
35
|
-
* memory `StoreBackend` receives, per `scoping.memory
|
|
35
|
+
* memory `StoreBackend` receives, per `scoping.memory`. This is the
|
|
36
36
|
* plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
|
|
37
37
|
* namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
|
|
38
38
|
* Returns `undefined` when the run has no durable namespace (`none`, or a
|
|
@@ -47,7 +47,7 @@ export declare function memoryNamespaceFor(runtime: RuntimeConfigLike | undefine
|
|
|
47
47
|
export declare function memoryIdentitySegments(scope: MemoryScope, tenancy: Tenancy, actorId: string | undefined, tenantId: string | undefined): string[];
|
|
48
48
|
/**
|
|
49
49
|
* Strip client-supplied identity keys from an incoming `configurable` so a
|
|
50
|
-
* request body can never spoof the actor/tenant the handler resolved
|
|
50
|
+
* request body can never spoof the actor/tenant the handler resolved. The
|
|
51
51
|
* platform-set `langgraph_auth_user` is preserved — it is the only trusted source.
|
|
52
52
|
*/
|
|
53
53
|
export declare function sanitizeConfigurable(configurable: Record<string, unknown> | undefined): Record<string, unknown>;
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* Identity fields a client must never assert via `config.configurable`; only the
|
|
3
|
-
* custom-auth handler (`langgraph_auth_user`) is trusted
|
|
3
|
+
* custom-auth handler (`langgraph_auth_user`) is trusted.
|
|
4
4
|
*/
|
|
5
5
|
const RESERVED_CONFIGURABLE_KEYS = new Set([
|
|
6
6
|
"actor_id",
|
|
@@ -29,7 +29,7 @@ export function resolveRuntimeConfigurable(runtime) {
|
|
|
29
29
|
}
|
|
30
30
|
/**
|
|
31
31
|
* Build the frozen identity envelope for the current run from the trusted
|
|
32
|
-
* `langgraph_auth_user` the custom-auth handler produced
|
|
32
|
+
* `langgraph_auth_user` the custom-auth handler produced. Returns
|
|
33
33
|
* `undefined` when the deployment has no resolvable actor (identity is opt-in).
|
|
34
34
|
*/
|
|
35
35
|
export function buildRuntimeIdentity(configurable) {
|
|
@@ -55,7 +55,7 @@ export function buildRuntimeIdentity(configurable) {
|
|
|
55
55
|
if (user.mda_claims && typeof user.mda_claims === "object") {
|
|
56
56
|
identity.claims = user.mda_claims;
|
|
57
57
|
}
|
|
58
|
-
// Immutable: tools/middleware get a read-only view they cannot tamper with
|
|
58
|
+
// Immutable: tools/middleware get a read-only view they cannot tamper with.
|
|
59
59
|
return deepFreeze(identity);
|
|
60
60
|
}
|
|
61
61
|
/** Recursively freeze an object graph so the identity envelope is read-only. */
|
|
@@ -69,7 +69,7 @@ function deepFreeze(value) {
|
|
|
69
69
|
return value;
|
|
70
70
|
}
|
|
71
71
|
/**
|
|
72
|
-
* The durable Store namespace for the run, per `scoping.memory
|
|
72
|
+
* The durable Store namespace for the run, per `scoping.memory`. A
|
|
73
73
|
* `deploymentId` prefix isolates deployments; identity segments follow. Returns
|
|
74
74
|
* `undefined` for `none` (no durable memory). Fail-closed: an `actor` scope with
|
|
75
75
|
* no actor already rejects at ingress, so the segments are never empty here.
|
|
@@ -89,7 +89,7 @@ export function memoryNamespace(cfg, ident, deploymentId) {
|
|
|
89
89
|
}
|
|
90
90
|
/**
|
|
91
91
|
* Resolve the durable memory namespace for a run directly from the runtime the
|
|
92
|
-
* memory `StoreBackend` receives, per `scoping.memory
|
|
92
|
+
* memory `StoreBackend` receives, per `scoping.memory`. This is the
|
|
93
93
|
* plug-in point for the (deferred) Store-backed memory: a `StoreBackend`
|
|
94
94
|
* namespace factory becomes `(ctx) => memoryNamespaceFor(ctx.runtime, cfg, id)`.
|
|
95
95
|
* Returns `undefined` when the run has no durable namespace (`none`, or a
|
|
@@ -128,7 +128,7 @@ export function memoryIdentitySegments(scope, tenancy, actorId, tenantId) {
|
|
|
128
128
|
}
|
|
129
129
|
/**
|
|
130
130
|
* Strip client-supplied identity keys from an incoming `configurable` so a
|
|
131
|
-
* request body can never spoof the actor/tenant the handler resolved
|
|
131
|
+
* request body can never spoof the actor/tenant the handler resolved. The
|
|
132
132
|
* platform-set `langgraph_auth_user` is preserved — it is the only trusted source.
|
|
133
133
|
*/
|
|
134
134
|
export function sanitizeConfigurable(configurable) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-runtime.js","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,sBAAsB;CACvB,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsC;IAEtC,OAAO,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAC5D,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,cAAc,CAAC,YAAY,CAAC;YACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAqC,CAAC;IAC/D,CAAC;IACD,
|
|
1
|
+
{"version":3,"file":"identity-runtime.js","sourceRoot":"","sources":["../../src/runtime/identity-runtime.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,UAAU;IACV,WAAW;IACX,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,sBAAsB;CACvB,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM;IACN,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;CACT,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsC;IAEtC,OAAO,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,MAAM,IAAI,GAAG,YAAY,EAAE,mBAA8C,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAoB;QAChC,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YAC5D,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,cAAc,CAAC,YAAY,CAAC;YACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;KACF,CAAC;IACF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3D,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAqC,CAAC;IAC/D,CAAC;IACD,4EAA4E;IAC5E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAmB,EACnB,KAAsB,EACtB,YAAoB;IAEpB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO;QACL,YAAY;QACZ,GAAG,sBAAsB,CACvB,KAAK,EACL,GAAG,CAAC,OAAO,EACX,KAAK,CAAC,KAAK,CAAC,EAAE,EACd,KAAK,CAAC,MAAM,EAAE,EAAE,CACjB;KACF,CAAC;AACJ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAsC,EACtC,GAAmB,EACnB,YAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC;IAC5E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,+EAA+E;IAC/E,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkB,EAClB,OAAgB,EAChB,OAA2B,EAC3B,QAA4B;IAE5B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IACD,uEAAuE;IACvE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAAiD;IAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CACjC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAChD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,YAAiD;IAEjD,MAAM,QAAQ,GAAG,YAAY,EAAE,mBAAmB,CAAC;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,OAAO,QAAiD,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CACf,YAAiD;IAEjD,MAAM,KAAK,GAAG,YAAY,EAAE,SAAS,CAAC;IACtC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC"}
|
|
@@ -8,12 +8,11 @@
|
|
|
8
8
|
*
|
|
9
9
|
* with a JSON body naming the `action` and its parameters. Per request the
|
|
10
10
|
* engine resolves identity (resolve-or-401), checks the caller surface, checks
|
|
11
|
-
* the action,
|
|
12
|
-
* server-side with the workspace
|
|
11
|
+
* the action, proves capability ownership from `runtime.identity`, validates typed
|
|
12
|
+
* constraints, performs the LangSmith operation server-side with the workspace
|
|
13
|
+
* key, and returns an allowlisted response.
|
|
13
14
|
*
|
|
14
|
-
* v0
|
|
15
|
-
* capability, matching the app being replaced), and has no rate limiting, audit,
|
|
16
|
-
* or multi-workspace fan-out.
|
|
15
|
+
* v0 has no rate limiting, audit, or multi-workspace fan-out.
|
|
17
16
|
*/
|
|
18
17
|
import type { Example, Feedback, KVMap, Prompt, Run, ScoreType, ValueType } from "langsmith/schemas";
|
|
19
18
|
import type { IdentityConfig, RuntimeIdentity } from "../identity.js";
|
|
@@ -36,6 +35,7 @@ export interface LangSmithClient {
|
|
|
36
35
|
score?: ScoreType | ValueType;
|
|
37
36
|
comment?: string;
|
|
38
37
|
feedbackId?: string;
|
|
38
|
+
metadata?: KVMap;
|
|
39
39
|
}): Promise<Feedback>;
|
|
40
40
|
updateFeedback(input: {
|
|
41
41
|
feedbackId: string;
|
|
@@ -45,6 +45,9 @@ export interface LangSmithClient {
|
|
|
45
45
|
deleteFeedback(input: {
|
|
46
46
|
feedbackId: string;
|
|
47
47
|
}): Promise<void>;
|
|
48
|
+
listFeedbackForRun(input: {
|
|
49
|
+
runId: string;
|
|
50
|
+
}): Promise<Feedback[]>;
|
|
48
51
|
readRun(input: {
|
|
49
52
|
runId: string;
|
|
50
53
|
}): Promise<Run>;
|
|
@@ -57,7 +60,12 @@ export interface LangSmithClient {
|
|
|
57
60
|
dataset: string;
|
|
58
61
|
inputs: KVMap;
|
|
59
62
|
outputs?: KVMap;
|
|
63
|
+
metadata?: KVMap;
|
|
60
64
|
}): Promise<Example>;
|
|
65
|
+
listExamples(input: {
|
|
66
|
+
dataset: string;
|
|
67
|
+
metadata?: KVMap;
|
|
68
|
+
}): Promise<Example[]>;
|
|
61
69
|
enqueueRun(input: {
|
|
62
70
|
queue: string;
|
|
63
71
|
runId: string;
|
|
@@ -98,8 +106,15 @@ export declare function validateAgainstIdentity(capabilities: LangSmithCapabilit
|
|
|
98
106
|
export declare function handleCapabilityRequest(request: Request, identity: RuntimeIdentity, deps: HandlerDeps): Promise<Response>;
|
|
99
107
|
/** Map the resolved identity + ingress mode to a caller surface. */
|
|
100
108
|
export declare function callerSurface(identity: RuntimeIdentity, identityConfig: IdentityConfig | undefined): LangSmithCallerSurface;
|
|
109
|
+
/**
|
|
110
|
+
* Prove the capability's ownership scope from `runtime.identity` before the
|
|
111
|
+
* LangSmith call.
|
|
112
|
+
*/
|
|
113
|
+
export declare function assertCapabilityScope(capability: LangSmithCapability, identity: RuntimeIdentity, body: Record<string, unknown>, client: LangSmithClient): Promise<void>;
|
|
101
114
|
/** Apply the capability's `include` allowlist, then drop any `redact` roots. */
|
|
102
115
|
export declare function shapeResponse(raw: Record<string, unknown>, capability: LangSmithCapability): Record<string, unknown>;
|
|
116
|
+
/** Read a required string from the body, accepting either camelCase or snake_case. */
|
|
117
|
+
export declare function bodyString(body: Record<string, unknown>, camel: string, snake: string): string;
|
|
103
118
|
/**
|
|
104
119
|
* Default client backed by the `langsmith` SDK {@link Client}. The underlying
|
|
105
120
|
* client is created on first use so building the engine (e.g. for an app with no
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"langsmith-connector.d.ts","sourceRoot":"","sources":["../../src/runtime/langsmith-connector.ts"],"names":[],"mappings":"AAAA
|
|
1
|
+
{"version":3,"file":"langsmith-connector.d.ts","sourceRoot":"","sources":["../../src/runtime/langsmith-connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EACV,OAAO,EACP,QAAQ,EACR,KAAK,EACL,MAAM,EACN,GAAG,EACH,SAAS,EACT,SAAS,EACV,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,KAAK,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;QAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,KAAK,CAAC;KAClB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtB,cAAc,CAAC,KAAK,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;QAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,cAAc,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,kBAAkB,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,aAAa,CAAC,KAAK,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,CAAC,EAAE,KAAK,CAAC;QAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACvB,UAAU,CAAC,KAAK,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5D,UAAU,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,oBAAoB,CAAC,KAAK,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;KACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,0EAA0E;AAC1E,qBAAa,gBAAiB,SAAQ,KAAK;IAEvC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAKlB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACnD,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,WAAW,EAChB,YAAY,EAAE,mBAAmB,EAAE,EACnC,MAAM,GAAE,eAAiC,GACxC,IAAI,CAeN;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,mBAAmB,EAAE,EACnC,QAAQ,EAAE,cAAc,GAAG,SAAS,GACnC,IAAI,CA6CN;AAED,uEAAuE;AACvE,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,QAAQ,CAAC,CAuCnB;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,sBAAsB,CAYxB;AAYD;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,IAAI,CAAC,CAkEf;AA6TD,gFAAgF;AAChF,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,UAAU,EAAE,mBAAmB,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAgDD,sFAAsF;AACtF,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,MAAM,CAMR;AA8GD;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,eAAe,CAiE/C"}
|
|
@@ -8,12 +8,11 @@
|
|
|
8
8
|
*
|
|
9
9
|
* with a JSON body naming the `action` and its parameters. Per request the
|
|
10
10
|
* engine resolves identity (resolve-or-401), checks the caller surface, checks
|
|
11
|
-
* the action,
|
|
12
|
-
* server-side with the workspace
|
|
11
|
+
* the action, proves capability ownership from `runtime.identity`, validates typed
|
|
12
|
+
* constraints, performs the LangSmith operation server-side with the workspace
|
|
13
|
+
* key, and returns an allowlisted response.
|
|
13
14
|
*
|
|
14
|
-
* v0
|
|
15
|
-
* capability, matching the app being replaced), and has no rate limiting, audit,
|
|
16
|
-
* or multi-workspace fan-out.
|
|
15
|
+
* v0 has no rate limiting, audit, or multi-workspace fan-out.
|
|
17
16
|
*/
|
|
18
17
|
import { Client } from "langsmith";
|
|
19
18
|
/** An error carrying an HTTP status the engine surfaces to the caller. */
|
|
@@ -92,7 +91,8 @@ export async function handleCapabilityRequest(request, identity, deps) {
|
|
|
92
91
|
if (!capability.actions.includes(action)) {
|
|
93
92
|
throw new EnforcementError(403, `action "${action}" is not allowed for capability "${capability.id}"`);
|
|
94
93
|
}
|
|
95
|
-
|
|
94
|
+
await assertCapabilityScope(capability, identity, body, deps.client);
|
|
95
|
+
const raw = toRecord(await performLangSmithCall(capability, action, body, deps, identity));
|
|
96
96
|
const shaped = shapeResponse(raw, capability);
|
|
97
97
|
return jsonResponse(200, { data: shaped });
|
|
98
98
|
}
|
|
@@ -118,15 +118,129 @@ export function callerSurface(identity, identityConfig) {
|
|
|
118
118
|
? "trusted_backend"
|
|
119
119
|
: "browser";
|
|
120
120
|
}
|
|
121
|
+
// --- Ownership + constraints -----------------------------------------------
|
|
122
|
+
/** Thread id on the frozen identity envelope (`source.threadId`). */
|
|
123
|
+
function identityThreadId(identity) {
|
|
124
|
+
const threadId = identity.source.threadId;
|
|
125
|
+
return typeof threadId === "string" && threadId.length > 0
|
|
126
|
+
? threadId
|
|
127
|
+
: undefined;
|
|
128
|
+
}
|
|
129
|
+
/**
|
|
130
|
+
* Prove the capability's ownership scope from `runtime.identity` before the
|
|
131
|
+
* LangSmith call.
|
|
132
|
+
*/
|
|
133
|
+
export async function assertCapabilityScope(capability, identity, body, client) {
|
|
134
|
+
switch (capability.scope) {
|
|
135
|
+
case "agent":
|
|
136
|
+
return;
|
|
137
|
+
case "actor": {
|
|
138
|
+
const actorId = identity.actor?.id;
|
|
139
|
+
if (typeof actorId !== "string" || actorId.length === 0) {
|
|
140
|
+
throw new EnforcementError(403, "actor scope requires identity.actor.id");
|
|
141
|
+
}
|
|
142
|
+
return;
|
|
143
|
+
}
|
|
144
|
+
case "tenant": {
|
|
145
|
+
const tenantId = identity.tenant?.id;
|
|
146
|
+
if (typeof tenantId !== "string" || tenantId.length === 0) {
|
|
147
|
+
throw new EnforcementError(403, "tenant scope requires identity.tenant.id");
|
|
148
|
+
}
|
|
149
|
+
return;
|
|
150
|
+
}
|
|
151
|
+
case "thread": {
|
|
152
|
+
const threadId = identityThreadId(identity);
|
|
153
|
+
if (!threadId) {
|
|
154
|
+
throw new EnforcementError(403, "thread scope requires identity thread id");
|
|
155
|
+
}
|
|
156
|
+
const bodyThread = optionalBodyString(body, "threadId", "thread_id");
|
|
157
|
+
if (bodyThread !== undefined && bodyThread !== threadId) {
|
|
158
|
+
throw new EnforcementError(403, "body thread id does not match identity thread");
|
|
159
|
+
}
|
|
160
|
+
return;
|
|
161
|
+
}
|
|
162
|
+
case "run": {
|
|
163
|
+
const threadId = identityThreadId(identity);
|
|
164
|
+
if (!threadId) {
|
|
165
|
+
throw new EnforcementError(403, "run scope requires identity thread id");
|
|
166
|
+
}
|
|
167
|
+
const runId = bodyString(body, "runId", "run_id");
|
|
168
|
+
const run = toRecord(await client.readRun({ runId }));
|
|
169
|
+
const runThread = runThreadId(run);
|
|
170
|
+
if (!runThread || runThread !== threadId) {
|
|
171
|
+
throw new EnforcementError(403, "run does not belong to identity thread");
|
|
172
|
+
}
|
|
173
|
+
return;
|
|
174
|
+
}
|
|
175
|
+
default:
|
|
176
|
+
throw new EnforcementError(400, `unknown capability scope "${String(capability.scope)}"`);
|
|
177
|
+
}
|
|
178
|
+
}
|
|
179
|
+
/** Resolve a run's thread/session id from known LangSmith field locations. */
|
|
180
|
+
function runThreadId(run) {
|
|
181
|
+
const keys = ["session_id", "sessionId", "thread_id", "threadId"];
|
|
182
|
+
for (const key of keys) {
|
|
183
|
+
const value = run[key];
|
|
184
|
+
if (typeof value === "string" && value.length > 0) {
|
|
185
|
+
return value;
|
|
186
|
+
}
|
|
187
|
+
}
|
|
188
|
+
const extra = run.extra;
|
|
189
|
+
if (extra && typeof extra === "object" && !Array.isArray(extra)) {
|
|
190
|
+
const extraRecord = extra;
|
|
191
|
+
const metadata = extraRecord.metadata &&
|
|
192
|
+
typeof extraRecord.metadata === "object" &&
|
|
193
|
+
!Array.isArray(extraRecord.metadata)
|
|
194
|
+
? extraRecord.metadata
|
|
195
|
+
: extraRecord;
|
|
196
|
+
for (const key of keys) {
|
|
197
|
+
const value = metadata[key];
|
|
198
|
+
if (typeof value === "string" && value.length > 0) {
|
|
199
|
+
return value;
|
|
200
|
+
}
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
return undefined;
|
|
204
|
+
}
|
|
205
|
+
function feedbackActorId(feedback) {
|
|
206
|
+
const direct = feedback.metadata;
|
|
207
|
+
if (direct && typeof direct === "object" && !Array.isArray(direct)) {
|
|
208
|
+
const actorId = direct.mda_actor_id;
|
|
209
|
+
if (typeof actorId === "string" && actorId.length > 0) {
|
|
210
|
+
return actorId;
|
|
211
|
+
}
|
|
212
|
+
}
|
|
213
|
+
const source = feedback.feedback_source;
|
|
214
|
+
if (source && typeof source === "object" && !Array.isArray(source)) {
|
|
215
|
+
const metadata = source.metadata;
|
|
216
|
+
if (metadata && typeof metadata === "object" && !Array.isArray(metadata)) {
|
|
217
|
+
const actorId = metadata.mda_actor_id;
|
|
218
|
+
if (typeof actorId === "string" && actorId.length > 0) {
|
|
219
|
+
return actorId;
|
|
220
|
+
}
|
|
221
|
+
}
|
|
222
|
+
}
|
|
223
|
+
return undefined;
|
|
224
|
+
}
|
|
225
|
+
function exampleThreadId(example) {
|
|
226
|
+
const metadata = example.metadata;
|
|
227
|
+
if (metadata && typeof metadata === "object" && !Array.isArray(metadata)) {
|
|
228
|
+
const threadId = metadata.mda_thread_id;
|
|
229
|
+
if (typeof threadId === "string" && threadId.length > 0) {
|
|
230
|
+
return threadId;
|
|
231
|
+
}
|
|
232
|
+
}
|
|
233
|
+
return undefined;
|
|
234
|
+
}
|
|
121
235
|
// --- Call mapping ----------------------------------------------------------
|
|
122
|
-
async function performLangSmithCall(capability, action, body, deps) {
|
|
236
|
+
async function performLangSmithCall(capability, action, body, deps, identity) {
|
|
123
237
|
switch (capability.resource) {
|
|
124
238
|
case "feedback":
|
|
125
|
-
return feedbackCall(capability, action, body, deps.client);
|
|
239
|
+
return feedbackCall(capability, action, body, deps.client, identity);
|
|
126
240
|
case "runs":
|
|
127
241
|
return runsCall(action, body, deps.client);
|
|
128
242
|
case "examples":
|
|
129
|
-
return examplesCall(capability, body, deps.client);
|
|
243
|
+
return examplesCall(capability, body, deps.client, identity);
|
|
130
244
|
case "annotation_queues":
|
|
131
245
|
return annotationQueueCall(capability, body, deps.client);
|
|
132
246
|
case "prompts":
|
|
@@ -137,7 +251,7 @@ async function performLangSmithCall(capability, action, body, deps) {
|
|
|
137
251
|
throw new EnforcementError(400, `resource "${capability.resource}" is not supported in v0`);
|
|
138
252
|
}
|
|
139
253
|
}
|
|
140
|
-
async function feedbackCall(capability, action, body, client) {
|
|
254
|
+
async function feedbackCall(capability, action, body, client, identity) {
|
|
141
255
|
const c = capability.constraints ?? {};
|
|
142
256
|
if (action === "create") {
|
|
143
257
|
const key = requireString(body, "key");
|
|
@@ -149,34 +263,50 @@ async function feedbackCall(capability, action, body, client) {
|
|
|
149
263
|
assertAllowed(c.scores, String(score), "score");
|
|
150
264
|
}
|
|
151
265
|
const comment = optionalComment(body, c.maxCommentChars);
|
|
266
|
+
const runId = bodyString(body, "runId", "run_id");
|
|
267
|
+
const actorId = identity.actor?.id;
|
|
268
|
+
if (c.onePerActor === true) {
|
|
269
|
+
if (typeof actorId !== "string" || actorId.length === 0) {
|
|
270
|
+
throw new EnforcementError(403, "onePerActor requires identity.actor.id");
|
|
271
|
+
}
|
|
272
|
+
const existing = await client.listFeedbackForRun({ runId });
|
|
273
|
+
for (const feedback of existing) {
|
|
274
|
+
if (feedbackActorId(toRecord(feedback)) === actorId) {
|
|
275
|
+
throw new EnforcementError(409, "actor already submitted feedback for this run");
|
|
276
|
+
}
|
|
277
|
+
}
|
|
278
|
+
}
|
|
279
|
+
const metadata = typeof actorId === "string" && actorId.length > 0
|
|
280
|
+
? { mda_actor_id: actorId }
|
|
281
|
+
: undefined;
|
|
282
|
+
const feedbackId = optionalBodyString(body, "feedbackId", "feedback_id");
|
|
152
283
|
return client.createFeedback({
|
|
153
|
-
runId
|
|
284
|
+
runId,
|
|
154
285
|
key,
|
|
155
286
|
...(score !== undefined ? { score } : {}),
|
|
156
287
|
...(comment !== undefined ? { comment } : {}),
|
|
157
|
-
...(
|
|
158
|
-
|
|
159
|
-
: {}),
|
|
288
|
+
...(feedbackId !== undefined ? { feedbackId } : {}),
|
|
289
|
+
...(metadata ? { metadata } : {}),
|
|
160
290
|
});
|
|
161
291
|
}
|
|
162
292
|
if (action === "update") {
|
|
163
293
|
const comment = optionalComment(body, c.maxCommentChars);
|
|
164
294
|
const score = body.score;
|
|
165
295
|
return client.updateFeedback({
|
|
166
|
-
feedbackId:
|
|
296
|
+
feedbackId: bodyString(body, "feedbackId", "feedback_id"),
|
|
167
297
|
...(score !== undefined ? { score } : {}),
|
|
168
298
|
...(comment !== undefined ? { comment } : {}),
|
|
169
299
|
});
|
|
170
300
|
}
|
|
171
301
|
if (action === "delete") {
|
|
172
302
|
return client.deleteFeedback({
|
|
173
|
-
feedbackId:
|
|
303
|
+
feedbackId: bodyString(body, "feedbackId", "feedback_id"),
|
|
174
304
|
});
|
|
175
305
|
}
|
|
176
306
|
throw new EnforcementError(400, `unknown feedback action "${action}"`);
|
|
177
307
|
}
|
|
178
308
|
async function runsCall(action, body, client) {
|
|
179
|
-
const runId =
|
|
309
|
+
const runId = bodyString(body, "runId", "run_id");
|
|
180
310
|
if (action === "read") {
|
|
181
311
|
return client.readRun({ runId });
|
|
182
312
|
}
|
|
@@ -185,7 +315,7 @@ async function runsCall(action, body, client) {
|
|
|
185
315
|
}
|
|
186
316
|
throw new EnforcementError(400, `unknown runs action "${action}"`);
|
|
187
317
|
}
|
|
188
|
-
async function examplesCall(capability, body, client) {
|
|
318
|
+
async function examplesCall(capability, body, client, identity) {
|
|
189
319
|
const c = capability.constraints ?? {};
|
|
190
320
|
const dataset = c.dataset;
|
|
191
321
|
if (!dataset) {
|
|
@@ -203,10 +333,34 @@ async function examplesCall(capability, body, client) {
|
|
|
203
333
|
const outputs = body.outputs && typeof body.outputs === "object"
|
|
204
334
|
? body.outputs
|
|
205
335
|
: undefined;
|
|
336
|
+
const maxExamples = c.maxExamplesPerThread;
|
|
337
|
+
const threadId = identityThreadId(identity);
|
|
338
|
+
if (typeof maxExamples === "number") {
|
|
339
|
+
if (!threadId) {
|
|
340
|
+
throw new EnforcementError(403, "maxExamplesPerThread requires identity thread id");
|
|
341
|
+
}
|
|
342
|
+
const existing = await client.listExamples({
|
|
343
|
+
dataset,
|
|
344
|
+
metadata: { mda_thread_id: threadId },
|
|
345
|
+
});
|
|
346
|
+
const count = existing.filter((example) => exampleThreadId(toRecord(example)) === threadId).length;
|
|
347
|
+
if (count >= maxExamples) {
|
|
348
|
+
throw new EnforcementError(409, `thread already has ${maxExamples} examples in this dataset`);
|
|
349
|
+
}
|
|
350
|
+
}
|
|
351
|
+
const metadata = {};
|
|
352
|
+
if (threadId) {
|
|
353
|
+
metadata.mda_thread_id = threadId;
|
|
354
|
+
}
|
|
355
|
+
const actorId = identity.actor?.id;
|
|
356
|
+
if (typeof actorId === "string" && actorId.length > 0) {
|
|
357
|
+
metadata.mda_actor_id = actorId;
|
|
358
|
+
}
|
|
206
359
|
return client.createExample({
|
|
207
360
|
dataset,
|
|
208
361
|
inputs,
|
|
209
362
|
...(outputs ? { outputs } : {}),
|
|
363
|
+
...(Object.keys(metadata).length > 0 ? { metadata } : {}),
|
|
210
364
|
});
|
|
211
365
|
}
|
|
212
366
|
async function annotationQueueCall(capability, body, client) {
|
|
@@ -222,13 +376,13 @@ async function annotationQueueCall(capability, body, client) {
|
|
|
222
376
|
const note = optionalComment(body, c.maxNoteChars, "note");
|
|
223
377
|
return client.enqueueRun({
|
|
224
378
|
queue,
|
|
225
|
-
runId:
|
|
379
|
+
runId: bodyString(body, "runId", "run_id"),
|
|
226
380
|
...(typeof priority === "string" ? { priority } : {}),
|
|
227
381
|
...(note !== undefined ? { note } : {}),
|
|
228
382
|
});
|
|
229
383
|
}
|
|
230
384
|
async function threadsCall(capability, action, body, client) {
|
|
231
|
-
const threadId =
|
|
385
|
+
const threadId = bodyString(body, "threadId", "thread_id");
|
|
232
386
|
if (action === "read") {
|
|
233
387
|
return client.readThread({ threadId });
|
|
234
388
|
}
|
|
@@ -319,6 +473,25 @@ function requireString(body, key) {
|
|
|
319
473
|
}
|
|
320
474
|
return value;
|
|
321
475
|
}
|
|
476
|
+
/** Read a required string from the body, accepting either camelCase or snake_case. */
|
|
477
|
+
export function bodyString(body, camel, snake) {
|
|
478
|
+
const value = optionalBodyString(body, camel, snake);
|
|
479
|
+
if (value === undefined) {
|
|
480
|
+
throw new EnforcementError(400, `missing or invalid "${camel}"`);
|
|
481
|
+
}
|
|
482
|
+
return value;
|
|
483
|
+
}
|
|
484
|
+
function optionalBodyString(body, camel, snake) {
|
|
485
|
+
const camelValue = body[camel];
|
|
486
|
+
if (typeof camelValue === "string" && camelValue.length > 0) {
|
|
487
|
+
return camelValue;
|
|
488
|
+
}
|
|
489
|
+
const snakeValue = body[snake];
|
|
490
|
+
if (typeof snakeValue === "string" && snakeValue.length > 0) {
|
|
491
|
+
return snakeValue;
|
|
492
|
+
}
|
|
493
|
+
return undefined;
|
|
494
|
+
}
|
|
322
495
|
function requireObject(body, key) {
|
|
323
496
|
const value = body[key];
|
|
324
497
|
if (!value || typeof value !== "object" || Array.isArray(value)) {
|
|
@@ -345,11 +518,28 @@ function optionalComment(body, maxChars, field = "comment") {
|
|
|
345
518
|
return value;
|
|
346
519
|
}
|
|
347
520
|
function jsonResponse(status, body) {
|
|
348
|
-
return new Response(JSON.stringify(body), {
|
|
521
|
+
return new Response(JSON.stringify(jsonSafe(body)), {
|
|
349
522
|
status,
|
|
350
523
|
headers: { "content-type": "application/json" },
|
|
351
524
|
});
|
|
352
525
|
}
|
|
526
|
+
/** Coerce values LangSmith may return (Date, etc.) into JSON-serializable form. */
|
|
527
|
+
function jsonSafe(value) {
|
|
528
|
+
if (value === null || typeof value !== "object") {
|
|
529
|
+
return value;
|
|
530
|
+
}
|
|
531
|
+
if (value instanceof Date) {
|
|
532
|
+
return value.toISOString();
|
|
533
|
+
}
|
|
534
|
+
if (Array.isArray(value)) {
|
|
535
|
+
return value.map(jsonSafe);
|
|
536
|
+
}
|
|
537
|
+
const out = {};
|
|
538
|
+
for (const [key, nested] of Object.entries(value)) {
|
|
539
|
+
out[key] = jsonSafe(nested);
|
|
540
|
+
}
|
|
541
|
+
return out;
|
|
542
|
+
}
|
|
353
543
|
function statusFromUnknownError(error) {
|
|
354
544
|
const status = error?.status;
|
|
355
545
|
if (typeof status === "number" && status >= 400 && status <= 599) {
|
|
@@ -392,16 +582,39 @@ export function defaultClient() {
|
|
|
392
582
|
return value === undefined ? {} : { value };
|
|
393
583
|
};
|
|
394
584
|
return {
|
|
395
|
-
createFeedback: ({ runId, key, score, comment, feedbackId }) => sdk().createFeedback(runId, key, {
|
|
585
|
+
createFeedback: ({ runId, key, score, comment, feedbackId, metadata }) => sdk().createFeedback(runId, key, {
|
|
396
586
|
...scoreOrValue(score),
|
|
397
587
|
comment,
|
|
398
588
|
feedbackId,
|
|
589
|
+
...(metadata ? { sourceInfo: metadata } : {}),
|
|
399
590
|
}),
|
|
400
591
|
updateFeedback: ({ feedbackId, score, comment }) => sdk().updateFeedback(feedbackId, { ...scoreOrValue(score), comment }),
|
|
401
592
|
deleteFeedback: ({ feedbackId }) => sdk().deleteFeedback(feedbackId),
|
|
593
|
+
listFeedbackForRun: async ({ runId }) => {
|
|
594
|
+
const out = [];
|
|
595
|
+
for await (const feedback of sdk().listFeedback({ runIds: [runId] })) {
|
|
596
|
+
out.push(feedback);
|
|
597
|
+
}
|
|
598
|
+
return out;
|
|
599
|
+
},
|
|
402
600
|
readRun: ({ runId }) => sdk().readRun(runId),
|
|
403
601
|
shareRun: async ({ runId }) => ({ url: await sdk().shareRun(runId) }),
|
|
404
|
-
createExample: ({ dataset, inputs, outputs }) => sdk().createExample({
|
|
602
|
+
createExample: ({ dataset, inputs, outputs, metadata }) => sdk().createExample({
|
|
603
|
+
inputs,
|
|
604
|
+
outputs,
|
|
605
|
+
dataset_name: dataset,
|
|
606
|
+
...(metadata ? { metadata } : {}),
|
|
607
|
+
}),
|
|
608
|
+
listExamples: async ({ dataset, metadata }) => {
|
|
609
|
+
const out = [];
|
|
610
|
+
for await (const example of sdk().listExamples({
|
|
611
|
+
datasetName: dataset,
|
|
612
|
+
...(metadata ? { metadata } : {}),
|
|
613
|
+
})) {
|
|
614
|
+
out.push(example);
|
|
615
|
+
}
|
|
616
|
+
return out;
|
|
617
|
+
},
|
|
405
618
|
enqueueRun: ({ queue, runId }) => sdk().addRunsToAnnotationQueue(queue, [runId]),
|
|
406
619
|
readPrompt: ({ name }) => sdk().getPrompt(name),
|
|
407
620
|
readThread: ({ threadId }) => sdk().readRun(threadId),
|