arize-phoenix 11.16.1__tar.gz → 11.18.0__tar.gz

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 11.16.1
+Version: 11.18.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://arize.com/docs/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues
@@ -191,7 +191,7 @@ Install Phoenix via `pip` or `conda`
 pip install arize-phoenix
 ```
 
-Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes.
+Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes. Arize AI also provides cloud instances at [app.phoenix.arize.com](https://app.phoenix.arize.com/).
 
 ## Packages
 

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/README.md

@@ -58,7 +58,7 @@ Install Phoenix via `pip` or `conda`
 pip install arize-phoenix
 ```
 
-Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes.
+Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes. Arize AI also provides cloud instances at [app.phoenix.arize.com](https://app.phoenix.arize.com/).
 
 ## Packages
 

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/auth.py

@@ -47,6 +47,18 @@ def is_valid_password(*, password: Secret, salt: bytes, password_hash: bytes) ->
     return password_hash == compute_password_hash(password=password, salt=salt)
 
 
+def sanitize_email(email: str) -> str:
+    """
+    Sanitizes an email address by trimming whitespace and converting to lowercase.
+
+    Args:
+        email (str): the email address to sanitize
+    Returns:
+        str: the sanitized email address
+    """
+    return email.strip().lower()
+
+
 def validate_email_format(email: str) -> None:
     """
     Checks that the email has a valid format.

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/config.py

@@ -333,6 +333,10 @@ Whether to verify client certificates for mutual TLS (mTLS) authentication.
 When set to true, clients must provide valid certificates signed by the CA specified in
 PHOENIX_TLS_CA_FILE.
 """
+ENV_PHOENIX_DEFAULT_RETENTION_POLICY_DAYS = "PHOENIX_DEFAULT_RETENTION_POLICY_DAYS"
+"""
+The default retention policy for traces in days.
+"""
 
 
 @dataclass(frozen=True)
@@ -494,6 +498,20 @@ def get_env_tls_verify_client() -> bool:
     return _bool_val(ENV_PHOENIX_TLS_VERIFY_CLIENT, False)
 
 
+def get_env_default_retention_policy_days() -> int:
+    """
+    Returns the number of days for the default retention policy as set by the
+    PHOENIX_DEFAULT_RETENTION_POLICY_DAYS environment variable, defaulting to 0 if not set.
+
+    Returns:
+        int: Number of days for the default retention policy. Defaults to 0 if the environment variable is not set.
+    """  # noqa: E501
+    days = _int_val(ENV_PHOENIX_DEFAULT_RETENTION_POLICY_DAYS, 0)
+    if days < 0:
+        raise ValueError("PHOENIX_DEFAULT_RETENTION_POLICY_DAYS must be non-negative")
+    return days
+
+
 def get_env_tls_config() -> Optional[TLSConfig]:
     """
     Retrieves and validates TLS configuration from environment variables.
@@ -865,6 +883,8 @@ def get_env_admins() -> dict[str, str]:
     """
     if not (env_value := getenv(ENV_PHOENIX_ADMINS)):
         return {}
+    from phoenix.auth import sanitize_email
+
     usernames = set()
     emails = set()
     ans = {}
@@ -881,7 +901,7 @@ def get_env_admins() -> dict[str, str]:
                 f"Expected format: 'username=email'"
             )
         username = pair[:last_equals_pos].strip()
-        email_addr = pair[last_equals_pos + 1 :].strip()
+        email_addr = sanitize_email(pair[last_equals_pos + 1 :])
         try:
             email_addr = validate_email(email_addr, check_deliverability=False).normalized
         except EmailNotValidError:

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/db/facilitator.py

@@ -28,6 +28,7 @@ from phoenix.auth import (
 from phoenix.config import (
     get_env_admins,
     get_env_default_admin_initial_password,
+    get_env_default_retention_policy_days,
     get_env_disable_basic_auth,
 )
 from phoenix.db import models
@@ -334,7 +335,9 @@ async def _ensure_default_project_trace_retention_policy(db: DbSessionFactory) -
         ):
             return
         cron_expression = TraceRetentionCronExpression(root="0 0 * * 0")
-        rule = TraceRetentionRule(root=MaxDaysRule(max_days=0))
+        rule = TraceRetentionRule(
+            root=MaxDaysRule(max_days=get_env_default_retention_policy_days())
+        )
         await session.execute(
             sa.insert(models.ProjectTraceRetentionPolicy),
             [

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/mutations/user_mutations.py

@@ -21,6 +21,7 @@ from phoenix.auth import (
     PASSWORD_REQUIREMENTS,
     PHOENIX_ACCESS_TOKEN_COOKIE_NAME,
     PHOENIX_REFRESH_TOKEN_COOKIE_NAME,
+    sanitize_email,
     validate_email_format,
     validate_password_format,
 )
@@ -115,20 +116,23 @@ class UserMutationMixin:
         info: Info[Context, None],
         input: CreateUserInput,
     ) -> UserMutationPayload:
+        # Sanitize email by trimming and lowercasing
+        email = sanitize_email(input.email)
+
         user: models.User
         if input.auth_method is AuthMethod.OAUTH2:
             user = models.OAuth2User(
-                email=input.email,
+                email=email,
                 username=input.username,
             )
         else:
             assert input.password
-            validate_email_format(input.email)
+            validate_email_format(email)
             validate_password_format(input.password)
             salt = secrets.token_bytes(DEFAULT_SECRET_LENGTH)
             password_hash = await info.context.hash_password(Secret(input.password), salt)
             user = models.LocalUser(
-                email=input.email,
+                email=email,
                 username=input.username,
                 password_hash=password_hash,
                 password_salt=salt,

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/queries.py

@@ -338,19 +338,19 @@ class Query:
     async def compare_experiments(
         self,
         info: Info[Context, None],
-        baseline_experiment_id: GlobalID,
+        base_experiment_id: GlobalID,
         compare_experiment_ids: list[GlobalID],
         first: Optional[int] = 50,
         after: Optional[CursorString] = UNSET,
         filter_condition: Optional[str] = UNSET,
     ) -> Connection[ExperimentComparison]:
-        if baseline_experiment_id in compare_experiment_ids:
-            raise BadRequest("Compare experiment IDs cannot contain the baseline experiment ID")
+        if base_experiment_id in compare_experiment_ids:
+            raise BadRequest("Compare experiment IDs cannot contain the base experiment ID")
         if len(set(compare_experiment_ids)) < len(compare_experiment_ids):
             raise BadRequest("Compare experiment IDs must be unique")
         experiment_ids = [
             from_global_id_with_expected_type(experiment_id, models.Experiment.__name__)
-            for experiment_id in (baseline_experiment_id, *compare_experiment_ids)
+            for experiment_id in (base_experiment_id, *compare_experiment_ids)
         ]
         cursor = Cursor.from_string(after) if after else None
         page_size = first or 50

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/routers/auth.py

@@ -6,7 +6,7 @@ from pathlib import Path
 from urllib.parse import urlencode, urlparse, urlunparse
 
 from fastapi import APIRouter, Depends, HTTPException, Request, Response
-from sqlalchemy import select
+from sqlalchemy import func, select
 from sqlalchemy.orm import joinedload
 from starlette.status import (
     HTTP_204_NO_CONTENT,
@@ -29,6 +29,7 @@ from phoenix.auth import (
     delete_oauth2_state_cookie,
     delete_refresh_token_cookie,
     is_valid_password,
+    sanitize_email,
     set_access_token_cookie,
     set_refresh_token_cookie,
     validate_password_format,
@@ -87,9 +88,14 @@ async def login(request: Request) -> Response:
     if not email or not password:
         raise HTTPException(status_code=HTTP_401_UNAUTHORIZED, detail="Email and password required")
 
+    # Sanitize email by trimming and lowercasing
+    email = sanitize_email(email)
+
     async with request.app.state.db() as session:
         user = await session.scalar(
-            select(models.User).filter_by(email=email).options(joinedload(models.User.role))
+            select(models.User)
+            .where(func.lower(models.User.email) == email)
+            .options(joinedload(models.User.role))
         )
         if (
             user is None
@@ -207,6 +213,10 @@ async def initiate_password_reset(request: Request) -> Response:
     data = await request.json()
     if not (email := data.get("email")):
         raise MISSING_EMAIL
+
+    # Sanitize email by trimming and lowercasing
+    email = sanitize_email(email)
+
     sender: EmailSender = request.app.state.email_sender
     if sender is None:
         raise SMTP_UNAVAILABLE
@@ -214,7 +224,7 @@ async def initiate_password_reset(request: Request) -> Response:
     async with request.app.state.db() as session:
         user = await session.scalar(
             select(models.User)
-            .filter_by(email=email)
+            .where(func.lower(models.User.email) == email)
             .options(
                 joinedload(models.User.password_reset_token).load_only(models.PasswordResetToken.id)
             )

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/routers/oauth2.py

@@ -27,6 +27,7 @@ from phoenix.auth import (
     PHOENIX_OAUTH2_STATE_COOKIE_NAME,
     delete_oauth2_nonce_cookie,
     delete_oauth2_state_cookie,
+    sanitize_email,
     set_access_token_cookie,
     set_oauth2_nonce_cookie,
     set_oauth2_state_cookie,
@@ -217,7 +218,7 @@ class UserInfo:
         if not (idp_user_id := (self.idp_user_id or "").strip()):
             raise ValueError("idp_user_id cannot be empty")
         object.__setattr__(self, "idp_user_id", idp_user_id)
-        if not (email := (self.email or "").strip()):
+        if not (email := sanitize_email(self.email or "")):
             raise ValueError("email cannot be empty")
         object.__setattr__(self, "email", email)
         if username := (self.username or "").strip():
@@ -356,7 +357,7 @@ async def _get_existing_oauth2_user(
             - User has a password set
             - User has mismatched OAuth2 credentials
     """  # noqa: E501
-    if not (email := (user_info.email or "").strip()):
+    if not (email := sanitize_email(user_info.email or "")):
         raise ValueError("Email is required.")
     if not (oauth2_user_id := (user_info.idp_user_id or "").strip()):
         raise ValueError("OAuth2 user ID is required.")
@@ -370,7 +371,7 @@ async def _get_existing_oauth2_user(
         if email and email != user.email:
             user.email = email
     else:
-        user = await session.scalar(stmt.filter_by(email=email))
+        user = await session.scalar(stmt.where(func.lower(models.User.email) == email))
         if user is None or not isinstance(user, models.OAuth2User):
             raise SignInNotAllowed("Sign in is not allowed.")
         # Case 1: Different OAuth2 client - update both client and user IDs
@@ -520,7 +521,7 @@ async def _email_and_username_exist(
             select(
                 cast(
                     func.coalesce(
-                        func.max(case((models.User.email == email, 1), else_=0)),
+                        func.max(case((func.lower(models.User.email) == email, 1), else_=0)),
                         0,
                     ),
                     Boolean,
@@ -532,7 +533,7 @@ async def _email_and_username_exist(
                     ),
                     Boolean,
                 ).label("username_exists"),
-            ).where(or_(models.User.email == email, models.User.username == username))
+            ).where(or_(func.lower(models.User.email) == email, models.User.username == username))
         )
     ).all()
     return email_exists, username_exists

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/routers/v1/traces.py

@@ -24,6 +24,7 @@ from strawberry.relay import GlobalID
 from phoenix.db import models
 from phoenix.db.insertion.helpers import as_kv
 from phoenix.db.insertion.types import Precursors
+from phoenix.server.api.types.node import from_global_id_with_expected_type
 from phoenix.server.authorization import is_not_locked
 from phoenix.server.bearer_auth import PhoenixUser
 from phoenix.server.dml_event import SpanDeleteEvent, TraceAnnotationInsertEvent
@@ -228,11 +229,13 @@ async def _add_spans(req: ExportTraceServiceRequest, state: State) -> None:
 
 
 @router.delete(
-    "/traces/{trace_id}",
+    "/traces/{trace_identifier}",
     operation_id="deleteTrace",
-    summary="Delete a trace by trace_id",
+    summary="Delete a trace by identifier",
     description=(
-        "Delete an entire trace by its OpenTelemetry trace_id. "
+        "Delete an entire trace by its identifier. The identifier can be either:\n"
+        "1. A Relay node ID (base64-encoded)\n"
+        "2. An OpenTelemetry trace_id (hex string)\n\n"
         "This will permanently remove all spans in the trace and their associated data."
     ),
     responses=add_errors_to_responses([HTTP_404_NOT_FOUND]),
@@ -240,33 +243,51 @@ async def _add_spans(req: ExportTraceServiceRequest, state: State) -> None:
 )
 async def delete_trace(
     request: Request,
-    trace_id: str = Path(description="The OpenTelemetry trace_id of the trace to delete"),
+    trace_identifier: str = Path(
+        description="The trace identifier: either a relay GlobalID or OpenTelemetry trace_id"
+    ),
 ) -> None:
     """
-    Delete a trace by trace_id.
+    Delete a trace by identifier (relay GlobalID or OpenTelemetry trace_id).
 
     This endpoint will:
-    1. Find and delete the trace with the given trace_id (and all its spans via CASCADE)
-    2. Trigger cache invalidation events
-    3. Return 204 No Content on success
+    1. Delete the trace by identifier (relay GlobalID or OpenTelemetry trace_id)
+    2. Get project_id from the deletion for cache invalidation
+    3. Trigger cache invalidation events
+    4. Return 204 No Content on success
 
     Note: This deletes the entire trace, including all spans, which maintains data consistency
     and avoids orphaned spans or inconsistent cached cumulative fields.
     """
     async with request.app.state.db() as session:
-        # Delete the trace directly and get project_id for cache invalidation
-        delete_stmt = (
-            delete(models.Trace)
-            .where(models.Trace.trace_id == trace_id)
-            .returning(models.Trace.project_rowid)
-        )
+        # Try to parse as GlobalID first, then fall back to trace_id
+        try:
+            trace_rowid = from_global_id_with_expected_type(
+                GlobalID.from_id(trace_identifier),
+                "Trace",
+            )
+            # Delete by database rowid
+            delete_stmt = (
+                delete(models.Trace)
+                .where(models.Trace.id == trace_rowid)
+                .returning(models.Trace.project_rowid)
+            )
+            error_detail = f"Trace with relay ID '{trace_identifier}' not found"
+        except Exception:
+            # Delete by OpenTelemetry trace_id
+            delete_stmt = (
+                delete(models.Trace)
+                .where(models.Trace.trace_id == trace_identifier)
+                .returning(models.Trace.project_rowid)
+            )
+            error_detail = f"Trace with trace_id '{trace_identifier}' not found"
 
         project_id = await session.scalar(delete_stmt)
 
         if project_id is None:
             raise HTTPException(
                 status_code=HTTP_404_NOT_FOUND,
-                detail=f"Trace with trace_id '{trace_id}' not found",
+                detail=error_detail,
             )
 
     # Trigger cache invalidation event

{arize_phoenix-11.16.1 → arize_phoenix-11.18.0}/src/phoenix/server/api/routers/v1/users.py

@@ -31,6 +31,7 @@ from phoenix.auth import (
     DEFAULT_SYSTEM_EMAIL,
     DEFAULT_SYSTEM_USERNAME,
     compute_password_hash,
+    sanitize_email,
     validate_email_format,
     validate_password_format,
 )
@@ -205,6 +206,8 @@ async def create_user(
 ) -> CreateUserResponseBody:
     user_data = request_body.user
     email, username, role = user_data.email, user_data.username, user_data.role
+    # Sanitize email by trimming and lowercasing
+    email = sanitize_email(email)
     validate_email_format(email)
 
     # Prevent creation of SYSTEM users

arize_phoenix-11.18.0/src/phoenix/server/static/.vite/manifest.json

@@ -0,0 +1,93 @@
+{
+  "_components-B1Ec5V_g.js": {
+    "file": "assets/components-B1Ec5V_g.js",
+    "name": "components",
+    "imports": [
+      "_vendor-BbqekBfb.js",
+      "_pages-B77OHHSB.js",
+      "_vendor-arizeai-CEwHhYfL.js",
+      "_vendor-codemirror-CHApHLLJ.js",
+      "_vendor-three-BLWp5bic.js"
+    ]
+  },
+  "_pages-B77OHHSB.js": {
+    "file": "assets/pages-B77OHHSB.js",
+    "name": "pages",
+    "imports": [
+      "_vendor-BbqekBfb.js",
+      "_vendor-arizeai-CEwHhYfL.js",
+      "_components-B1Ec5V_g.js",
+      "_vendor-codemirror-CHApHLLJ.js",
+      "_vendor-recharts-Bqf7C6Cm.js"
+    ]
+  },
+  "_vendor-BbqekBfb.js": {
+    "file": "assets/vendor-BbqekBfb.js",
+    "name": "vendor",
+    "imports": [
+      "_vendor-three-BLWp5bic.js"
+    ],
+    "css": [
+      "assets/vendor-CqDb5u4o.css"
+    ]
+  },
+  "_vendor-CqDb5u4o.css": {
+    "file": "assets/vendor-CqDb5u4o.css",
+    "src": "_vendor-CqDb5u4o.css"
+  },
+  "_vendor-arizeai-CEwHhYfL.js": {
+    "file": "assets/vendor-arizeai-CEwHhYfL.js",
+    "name": "vendor-arizeai",
+    "imports": [
+      "_vendor-BbqekBfb.js"
+    ]
+  },
+  "_vendor-codemirror-CHApHLLJ.js": {
+    "file": "assets/vendor-codemirror-CHApHLLJ.js",
+    "name": "vendor-codemirror",
+    "imports": [
+      "_vendor-BbqekBfb.js",
+      "_vendor-shiki-BQ88Q1b1.js"
+    ],
+    "dynamicImports": [
+      "_vendor-shiki-BQ88Q1b1.js",
+      "_vendor-shiki-BQ88Q1b1.js",
+      "_vendor-shiki-BQ88Q1b1.js"
+    ]
+  },
+  "_vendor-recharts-Bqf7C6Cm.js": {
+    "file": "assets/vendor-recharts-Bqf7C6Cm.js",
+    "name": "vendor-recharts",
+    "imports": [
+      "_vendor-BbqekBfb.js"
+    ]
+  },
+  "_vendor-shiki-BQ88Q1b1.js": {
+    "file": "assets/vendor-shiki-BQ88Q1b1.js",
+    "name": "vendor-shiki",
+    "isDynamicEntry": true,
+    "imports": [
+      "_vendor-BbqekBfb.js"
+    ]
+  },
+  "_vendor-three-BLWp5bic.js": {
+    "file": "assets/vendor-three-BLWp5bic.js",
+    "name": "vendor-three"
+  },
+  "index.tsx": {
+    "file": "assets/index-DYx39hbu.js",
+    "name": "index",
+    "src": "index.tsx",
+    "isEntry": true,
+    "imports": [
+      "_vendor-BbqekBfb.js",
+      "_vendor-arizeai-CEwHhYfL.js",
+      "_pages-B77OHHSB.js",
+      "_components-B1Ec5V_g.js",
+      "_vendor-three-BLWp5bic.js",
+      "_vendor-codemirror-CHApHLLJ.js",
+      "_vendor-shiki-BQ88Q1b1.js",
+      "_vendor-recharts-Bqf7C6Cm.js"
+    ]
+  }
+}