arize-phoenix 12.4.0__tar.gz → 12.6.0__tar.gz

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 12.4.0
+Version: 12.6.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://arize.com/docs/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/auth.py

@@ -2,7 +2,7 @@ from __future__ import annotations
 
 import re
 from dataclasses import dataclass
-from datetime import datetime, timedelta
+from datetime import datetime, timedelta, timezone
 from enum import Enum, auto
 from hashlib import pbkdf2_hmac
 from typing import Any, Literal, Optional, Protocol
@@ -331,7 +331,13 @@ class ClaimSet:
 
     @property
     def status(self) -> ClaimSetStatus:
-        if self.expiration_time and self.expiration_time.timestamp() < datetime.now().timestamp():
+        # Per JWT RFC 7519 Section 4.1.4, the expiration time identifies the time
+        # "on or after which" the JWT must not be accepted. Use <= for inclusive check.
+        # https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.4
+        if (
+            self.expiration_time
+            and self.expiration_time.timestamp() <= datetime.now(timezone.utc).timestamp()
+        ):
             return ClaimSetStatus.EXPIRED
         if self.token_id is not None and self.subject is not None:
             return ClaimSetStatus.VALID

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/db/models.py

@@ -1607,7 +1607,7 @@ class PasswordResetToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="password_reset_token")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     __table_args__ = (dict(sqlite_autoincrement=True),)
 
 
@@ -1619,7 +1619,7 @@ class RefreshToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="refresh_tokens")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     __table_args__ = (dict(sqlite_autoincrement=True),)
 
 
@@ -1631,7 +1631,7 @@ class AccessToken(HasId):
     )
     user: Mapped["User"] = relationship("User", back_populates="access_tokens")
     created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
-    expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp, nullable=False, index=True)
+    expires_at: Mapped[datetime] = mapped_column(UtcTimeStamp, nullable=False, index=True)
     refresh_token_id: Mapped[int] = mapped_column(
         ForeignKey("refresh_tokens.id", ondelete="CASCADE"),
         index=True,

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/auth.py

@@ -22,6 +22,15 @@ class IsNotReadOnly(Authorization):
         return not info.context.read_only
 
 
+class IsNotViewer(Authorization):
+    message = "Viewers cannot perform this action"
+
+    def has_permission(self, source: Any, info: Info, **kwargs: Any) -> bool:
+        if not info.context.auth_enabled:
+            return True
+        return isinstance((user := info.context.user), PhoenixUser) and not user.is_viewer
+
+
 class IsLocked(BasePermission):
     """
     Permission class that restricts data-modifying operations when insufficient storage.

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/context.py

@@ -20,6 +20,7 @@ from phoenix.server.api.dataloaders import (
     AverageExperimentRepeatedRunGroupLatencyDataLoader,
     AverageExperimentRunLatencyDataLoader,
     CacheForDataLoaders,
+    DatasetDatasetSplitsDataLoader,
     DatasetExampleRevisionsDataLoader,
     DatasetExamplesAndVersionsByExperimentRunDataLoader,
     DatasetExampleSpansDataLoader,
@@ -101,6 +102,7 @@ class DataLoaders:
     dataset_example_revisions: DatasetExampleRevisionsDataLoader
     dataset_example_spans: DatasetExampleSpansDataLoader
     dataset_labels: DatasetLabelsDataLoader
+    dataset_dataset_splits: DatasetDatasetSplitsDataLoader
     dataset_examples_and_versions_by_experiment_run: (
         DatasetExamplesAndVersionsByExperimentRunDataLoader
     )

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/dataloaders/__init__.py

@@ -10,6 +10,7 @@ from .average_experiment_repeated_run_group_latency import (
     AverageExperimentRepeatedRunGroupLatencyDataLoader,
 )
 from .average_experiment_run_latency import AverageExperimentRunLatencyDataLoader
+from .dataset_dataset_splits import DatasetDatasetSplitsDataLoader
 from .dataset_example_revisions import DatasetExampleRevisionsDataLoader
 from .dataset_example_spans import DatasetExampleSpansDataLoader
 from .dataset_example_splits import DatasetExampleSplitsDataLoader
@@ -84,6 +85,7 @@ __all__ = [
     "AverageExperimentRepeatedRunGroupLatencyDataLoader",
     "AverageExperimentRunLatencyDataLoader",
     "CacheForDataLoaders",
+    "DatasetDatasetSplitsDataLoader",
     "DatasetExampleRevisionsDataLoader",
     "DatasetExampleSpansDataLoader",
     "DatasetExamplesAndVersionsByExperimentRunDataLoader",

arize_phoenix-12.6.0/src/phoenix/server/api/dataloaders/dataset_dataset_splits.py

@@ -0,0 +1,52 @@
+from sqlalchemy import select
+from strawberry.dataloader import DataLoader
+from typing_extensions import TypeAlias
+
+from phoenix.db import models
+from phoenix.server.types import DbSessionFactory
+
+DatasetID: TypeAlias = int
+Key: TypeAlias = DatasetID
+Result: TypeAlias = list[models.DatasetSplit]
+
+
+class DatasetDatasetSplitsDataLoader(DataLoader[Key, Result]):
+    def __init__(self, db: DbSessionFactory) -> None:
+        super().__init__(
+            load_fn=self._load_fn,
+        )
+        self._db = db
+
+    async def _load_fn(self, keys: list[Key]) -> list[Result]:
+        dataset_ids = keys
+        async with self._db() as session:
+            splits: dict[DatasetID, dict[int, models.DatasetSplit]] = {
+                dataset_id: {} for dataset_id in dataset_ids
+            }
+
+            async for dataset_id, split in await session.stream(
+                select(models.DatasetExample.dataset_id, models.DatasetSplit)
+                .select_from(models.DatasetSplit)
+                .join(
+                    models.DatasetSplitDatasetExample,
+                    onclause=(
+                        models.DatasetSplit.id == models.DatasetSplitDatasetExample.dataset_split_id
+                    ),
+                )
+                .join(
+                    models.DatasetExample,
+                    onclause=(
+                        models.DatasetSplitDatasetExample.dataset_example_id
+                        == models.DatasetExample.id
+                    ),
+                )
+                .where(models.DatasetExample.dataset_id.in_(dataset_ids))
+            ):
+                # Use dict to deduplicate splits by split.id
+                if dataset_id in splits:
+                    splits[dataset_id][split.id] = split
+
+            return [
+                sorted(splits.get(dataset_id, {}).values(), key=lambda x: x.name)
+                for dataset_id in keys
+            ]

arize_phoenix-12.6.0/src/phoenix/server/api/input_types/ExperimentRunSort.py

@@ -0,0 +1,237 @@
+import operator
+from enum import Enum, auto
+from typing import Any, Optional
+
+import strawberry
+from sqlalchemy import ColumnElement, Select, and_, func, literal, or_, select, tuple_
+from sqlalchemy.sql.selectable import NamedFromClause
+from strawberry import Maybe
+from typing_extensions import assert_never
+
+from phoenix.db import models
+from phoenix.server.api.types.pagination import (
+    Cursor,
+    CursorSortColumn,
+    CursorSortColumnDataType,
+    CursorSortColumnValue,
+)
+from phoenix.server.api.types.SortDir import SortDir
+
+
+@strawberry.enum
+class ExperimentRunMetric(Enum):
+    latencyMs = auto()
+
+
+@strawberry.input(one_of=True)
+class ExperimentRunColumn:
+    metric: Maybe[ExperimentRunMetric]
+    annotation_name: Maybe[str]
+
+
+@strawberry.input(description="The sort key and direction for experiment run connections")
+class ExperimentRunSort:
+    col: ExperimentRunColumn
+    dir: SortDir
+
+
+def get_experiment_run_cursor(
+    run: models.ExperimentRun, annotation_score: Optional[float], sort: Optional[ExperimentRunSort]
+) -> Cursor:
+    sort_column: Optional[CursorSortColumn] = None
+    if sort:
+        if sort.col.metric:
+            metric = sort.col.metric.value
+            assert metric is not None
+            if metric is ExperimentRunMetric.latencyMs:
+                sort_column = CursorSortColumn(
+                    type=CursorSortColumnDataType.FLOAT,
+                    value=run.latency_ms,
+                )
+            else:
+                assert_never(metric)
+        elif sort.col.annotation_name:
+            data_type = (
+                CursorSortColumnDataType.FLOAT
+                if annotation_score is not None
+                else CursorSortColumnDataType.NULL
+            )
+            sort_column = CursorSortColumn(
+                type=data_type,
+                value=annotation_score,
+            )
+    return Cursor(rowid=run.id, sort_column=sort_column)
+
+
+def add_order_by_and_page_start_to_query(
+    query: Select[Any],
+    sort: Optional[ExperimentRunSort],
+    experiment_rowid: int,
+    after_experiment_run_rowid: Optional[int],
+    after_sort_column_value: Optional[CursorSortColumnValue] = None,
+) -> Select[Any]:
+    mean_annotation_scores: Optional[NamedFromClause] = None
+    if sort and sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        mean_annotation_scores = _get_mean_annotation_scores_subquery(annotation_name)
+    order_by_columns = _get_order_by_columns(
+        sort=sort, experiment_rowid=experiment_rowid, mean_annotation_scores=mean_annotation_scores
+    )
+    query = query.order_by(*order_by_columns)
+    if after_experiment_run_rowid is not None:
+        query = _add_after_expression(
+            query=query,
+            sort=sort,
+            experiment_run_rowid=after_experiment_run_rowid,
+            after_sort_column_value=after_sort_column_value,
+            mean_annotation_scores=mean_annotation_scores,
+        )
+    query = _add_joins_and_selects_to_query(
+        query=query,
+        sort=sort,
+        mean_annotation_scores=mean_annotation_scores,
+    )
+    return query
+
+
+def _get_order_by_columns(
+    sort: Optional[ExperimentRunSort],
+    experiment_rowid: int,
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> tuple[ColumnElement[Any], ...]:
+    if not sort:
+        # Ideally, this would sort the runs by (example_id, repetition_number),
+        # but this would require making the cursor more complex or adding an additional query
+        # to handle the after cursor.
+        return (models.ExperimentRun.id.asc(),)
+    sort_direction = sort.dir
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            if sort_direction is SortDir.asc:
+                return (models.ExperimentRun.latency_ms.asc(), models.ExperimentRun.id.asc())
+            else:
+                return (models.ExperimentRun.latency_ms.desc(), models.ExperimentRun.id.desc())
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        if sort_direction is SortDir.asc:
+            return (
+                mean_annotation_scores.c.score.asc().nulls_last(),
+                models.ExperimentRun.id.asc(),
+            )
+        else:
+            return (
+                mean_annotation_scores.c.score.desc().nulls_last(),
+                models.ExperimentRun.id.desc(),
+            )
+    raise NotImplementedError
+
+
+def _add_after_expression(
+    query: Select[Any],
+    sort: Optional[ExperimentRunSort],
+    experiment_run_rowid: int,
+    after_sort_column_value: Optional[CursorSortColumnValue],
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> Select[Any]:
+    if not sort:
+        # Ideally, this would return the runs sorted by (example_id, repetition_number),
+        # but this would require making the cursor more complex or adding an additional query.
+        return query.where(models.ExperimentRun.id > literal(experiment_run_rowid))
+    sort_direction = sort.dir
+    compare_fn = operator.gt if sort_direction is SortDir.asc else operator.lt
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            assert after_sort_column_value is not None
+            return query.where(
+                compare_fn(
+                    tuple_(models.ExperimentRun.latency_ms, models.ExperimentRun.id),
+                    tuple_(
+                        literal(after_sort_column_value),
+                        literal(experiment_run_rowid),
+                    ),
+                )
+            )
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        if after_sort_column_value is None:
+            return query.where(
+                and_(
+                    compare_fn(models.ExperimentRun.id, literal(experiment_run_rowid)),
+                    mean_annotation_scores.c.score.is_(None),
+                )
+            )
+        else:
+            return query.where(
+                or_(
+                    compare_fn(
+                        tuple_(mean_annotation_scores.c.score, models.ExperimentRun.id),
+                        tuple_(
+                            literal(after_sort_column_value),
+                            literal(experiment_run_rowid),
+                        ),
+                    ),
+                    mean_annotation_scores.c.score.is_(None),
+                )
+            )
+    raise NotImplementedError
+
+
+def _get_mean_annotation_scores_subquery(annotation_name: str) -> NamedFromClause:
+    return (
+        select(
+            func.avg(models.ExperimentRunAnnotation.score).label("score"),
+            models.ExperimentRunAnnotation.experiment_run_id.label("experiment_run_id"),
+        )
+        .select_from(models.ExperimentRunAnnotation)
+        .join(
+            models.ExperimentRun,
+            models.ExperimentRunAnnotation.experiment_run_id == models.ExperimentRun.id,
+        )
+        .where(models.ExperimentRunAnnotation.name == annotation_name)
+        .group_by(models.ExperimentRunAnnotation.experiment_run_id)
+        .subquery()
+        .alias("mean_annotation_scores")
+    )
+
+
+def _add_joins_and_selects_to_query(
+    query: Select[tuple[models.ExperimentRun]],
+    sort: Optional[ExperimentRunSort],
+    mean_annotation_scores: Optional[NamedFromClause],
+) -> Select[tuple[models.ExperimentRun]]:
+    if not sort:
+        return query
+    if sort.col.metric:
+        metric = sort.col.metric.value
+        assert metric is not None
+        if metric is ExperimentRunMetric.latencyMs:
+            return query
+        else:
+            assert_never(metric)
+    elif sort.col.annotation_name:
+        annotation_name = sort.col.annotation_name.value
+        assert annotation_name is not None
+        assert mean_annotation_scores is not None
+        query = query.join(
+            mean_annotation_scores,
+            mean_annotation_scores.c.experiment_run_id == models.ExperimentRun.id,
+            isouter=True,
+        )
+        query = query.add_columns(
+            mean_annotation_scores.c.score.label("score")
+        )  # the score must be in the select so that the value can be included in the cursor
+        return query
+    raise NotImplementedError

arize_phoenix-12.6.0/src/phoenix/server/api/input_types/ProjectSessionSort.py

@@ -0,0 +1,189 @@
+from dataclasses import dataclass
+from enum import Enum, auto
+from typing import Any, Optional
+
+import strawberry
+from sqlalchemy import and_, desc, func, nulls_last, select
+from sqlalchemy.orm import InstrumentedAttribute
+from sqlalchemy.sql.expression import Select
+from strawberry import UNSET
+from typing_extensions import assert_never
+
+from phoenix.db import models
+from phoenix.db.helpers import truncate_name
+from phoenix.server.api.types.pagination import CursorSortColumnDataType
+from phoenix.server.api.types.SortDir import SortDir
+
+
+@strawberry.enum
+class ProjectSessionColumn(Enum):
+    startTime = auto()
+    endTime = auto()
+    tokenCountTotal = auto()
+    numTraces = auto()
+    costTotal = auto()
+
+    @property
+    def column_name(self) -> str:
+        return truncate_name(f"{self.name}_project_session_sort_column")
+
+    def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
+        expr: Any
+        if self is ProjectSessionColumn.startTime:
+            expr = models.ProjectSession.start_time
+        elif self is ProjectSessionColumn.endTime:
+            expr = models.ProjectSession.end_time
+        elif self is ProjectSessionColumn.tokenCountTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.numTraces:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        elif self is ProjectSessionColumn.costTotal:
+            assert joined_table is not None
+            expr = joined_table.c.key
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
+    @property
+    def data_type(self) -> CursorSortColumnDataType:
+        if self is ProjectSessionColumn.tokenCountTotal or self is ProjectSessionColumn.numTraces:
+            return CursorSortColumnDataType.INT
+        if self is ProjectSessionColumn.startTime or self is ProjectSessionColumn.endTime:
+            return CursorSortColumnDataType.DATETIME
+        if self is ProjectSessionColumn.costTotal:
+            return CursorSortColumnDataType.FLOAT
+        assert_never(self)
+
+    def join_tables(self, stmt: Select[Any]) -> tuple[Select[Any], Any]:
+        """
+        If needed, joins tables required for the sort column.
+        """
+        if self is ProjectSessionColumn.tokenCountTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.Span.cumulative_llm_token_count_total).label("key"),
+                )
+                .join_from(models.Trace, models.Span)
+                .where(models.Span.parent_id.is_(None))
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.numTraces:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.count(models.Trace.id).label("key"),
+                ).group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        if self is ProjectSessionColumn.costTotal:
+            sort_subq = (
+                select(
+                    models.Trace.project_session_rowid.label("id"),
+                    func.sum(models.SpanCost.total_cost).label("key"),
+                )
+                .join_from(
+                    models.Trace,
+                    models.SpanCost,
+                    models.Trace.id == models.SpanCost.trace_rowid,
+                )
+                .group_by(models.Trace.project_session_rowid)
+            ).subquery()
+            stmt = stmt.join(sort_subq, models.ProjectSession.id == sort_subq.c.id)
+            return stmt, sort_subq
+        return stmt, None
+
+
+@strawberry.enum
+class ProjectSessionAnnoAttr(Enum):
+    score = "score"
+    label = "label"
+
+    @property
+    def column_name(self) -> str:
+        return f"{self.value}_anno_sort_column"
+
+    @property
+    def orm_expression(self) -> Any:
+        expr: InstrumentedAttribute[Any]
+        if self is ProjectSessionAnnoAttr.score:
+            expr = models.ProjectSessionAnnotation.score
+        elif self is ProjectSessionAnnoAttr.label:
+            expr = models.ProjectSessionAnnotation.label
+        else:
+            assert_never(self)
+        return expr.label(self.column_name)
+
+    @property
+    def data_type(self) -> CursorSortColumnDataType:
+        if self is ProjectSessionAnnoAttr.label:
+            return CursorSortColumnDataType.STRING
+        if self is ProjectSessionAnnoAttr.score:
+            return CursorSortColumnDataType.FLOAT
+        assert_never(self)
+
+
+@strawberry.input
+class ProjectSessionAnnoResultKey:
+    name: str
+    attr: ProjectSessionAnnoAttr
+
+
+@dataclass(frozen=True)
+class ProjectSessionSortConfig:
+    stmt: Select[Any]
+    orm_expression: Any
+    dir: SortDir
+    column_name: str
+    column_data_type: CursorSortColumnDataType
+
+
+@strawberry.input(description="The sort key and direction for ProjectSession connections.")
+class ProjectSessionSort:
+    col: Optional[ProjectSessionColumn] = UNSET
+    anno_result_key: Optional[ProjectSessionAnnoResultKey] = UNSET
+    dir: SortDir
+
+    def update_orm_expr(self, stmt: Select[Any]) -> ProjectSessionSortConfig:
+        if (col := self.col) and not self.anno_result_key:
+            stmt, joined_table = col.join_tables(stmt)
+            expr = col.as_orm_expression(joined_table)
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            return ProjectSessionSortConfig(
+                stmt=stmt.order_by(nulls_last(expr)),
+                orm_expression=col.as_orm_expression(joined_table),
+                dir=self.dir,
+                column_name=col.column_name,
+                column_data_type=col.data_type,
+            )
+        if (anno_result_key := self.anno_result_key) and not col:
+            anno_name = anno_result_key.name
+            anno_attr = anno_result_key.attr
+            expr = anno_result_key.attr.orm_expression
+            stmt = stmt.add_columns(expr)
+            if self.dir == SortDir.desc:
+                expr = desc(expr)
+            stmt = stmt.join(
+                models.ProjectSessionAnnotation,
+                onclause=and_(
+                    models.ProjectSessionAnnotation.project_session_id == models.ProjectSession.id,
+                    models.ProjectSessionAnnotation.name == anno_name,
+                ),
+            ).order_by(nulls_last(expr))
+            return ProjectSessionSortConfig(
+                stmt=stmt,
+                orm_expression=anno_result_key.attr.orm_expression,
+                dir=self.dir,
+                column_name=anno_attr.column_name,
+                column_data_type=anno_attr.data_type,
+            )
+        raise ValueError(
+            "Exactly one of `col` or `annoResultKey` must be specified on `ProjectSessionSort`."
+        )

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/input_types/SpanSort.py

@@ -11,6 +11,7 @@ from typing_extensions import assert_never
 
 import phoenix.trace.v1 as pb
 from phoenix.db import models
+from phoenix.db.helpers import truncate_name
 from phoenix.server.api.types.pagination import CursorSortColumnDataType
 from phoenix.server.api.types.SortDir import SortDir
 from phoenix.trace.schemas import SpanID
@@ -32,7 +33,7 @@ class SpanColumn(Enum):
 
     @property
     def column_name(self) -> str:
-        return f"{self.name}_span_sort_column"
+        return truncate_name(f"{self.name}_span_sort_column")
 
     def as_orm_expression(self, joined_table: Optional[Any] = None) -> Any:
         expr: Any

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/input_types/UserRoleInput.py

@@ -7,3 +7,4 @@ import strawberry
 class UserRoleInput(Enum):
     ADMIN = "ADMIN"
     MEMBER = "MEMBER"
+    VIEWER = "VIEWER"

{arize_phoenix-12.4.0 → arize_phoenix-12.6.0}/src/phoenix/server/api/mutations/annotation_config_mutations.py

@@ -23,7 +23,7 @@ from phoenix.db.types.annotation_configs import (
 from phoenix.db.types.annotation_configs import (
     FreeformAnnotationConfig as FreeformAnnotationConfigModel,
 )
-from phoenix.server.api.auth import IsNotReadOnly
+from phoenix.server.api.auth import IsNotReadOnly, IsNotViewer
 from phoenix.server.api.context import Context
 from phoenix.server.api.exceptions import BadRequest, Conflict, NotFound
 from phoenix.server.api.queries import Query
@@ -197,7 +197,7 @@ def _to_pydantic_freeform_annotation_config(
 
 @strawberry.type
 class AnnotationConfigMutationMixin:
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def create_annotation_config(
         self,
         info: Info[Context, None],
@@ -236,7 +236,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def update_annotation_config(
         self,
         info: Info[Context, None],
@@ -285,7 +285,7 @@ class AnnotationConfigMutationMixin:
             annotation_config=to_gql_annotation_config(annotation_config),
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def delete_annotation_configs(
         self,
         info: Info[Context, None],
@@ -317,7 +317,7 @@ class AnnotationConfigMutationMixin:
             ],
         )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def add_annotation_config_to_project(
         self,
         info: Info[Context, None],
@@ -377,7 +377,7 @@ class AnnotationConfigMutationMixin:
                 project=Project(project_rowid=project_id),
             )
 
-    @strawberry.mutation(permission_classes=[IsNotReadOnly])  # type: ignore[misc]
+    @strawberry.mutation(permission_classes=[IsNotReadOnly, IsNotViewer])  # type: ignore[misc]
     async def remove_annotation_config_from_project(
         self,
         info: Info[Context, None],