arize-phoenix 4.20.2__py3-none-any.whl → 4.22.0__py3-none-any.whl

{arize_phoenix-4.20.2.dist-info → arize_phoenix-4.22.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: arize-phoenix
-Version: 4.20.2
+Version: 4.22.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://docs.arize.com/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues

{arize_phoenix-4.20.2.dist-info → arize_phoenix-4.22.0.dist-info}/RECORD

@@ -1,11 +1,11 @@
 phoenix/__init__.py,sha256=TGNWqm2UW-l67yIRpOtmqGHVAmdoobSNqUsiTtip7uQ,1542
-phoenix/config.py,sha256=eXciIho_PDh4ZSmq4Gtuo7Qz__yTluDP3_WUwig5OiU,8141
+phoenix/config.py,sha256=wYA_8GSSz5rnpfIWDjeBL9ehKuTy9jqXaMZnxUqRYEU,10131
 phoenix/datetime_utils.py,sha256=yDKjwX2Vtqw9h5F_ProtP-TsXidM43uIvmJ_pOzYc9A,3405
 phoenix/exceptions.py,sha256=n2L2KKuecrdflB9MsCdAYCiSEvGJptIsfRkXMoJle7A,169
 phoenix/py.typed,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
 phoenix/services.py,sha256=aTxhcOA1pZHB6U-B3TEcp6fqDF5oT0xCUvEUNMZVTUQ,5175
 phoenix/settings.py,sha256=cO-qgis_S27nHirTobYI9hHPfZH18R--WMmxNdsVUwc,273
-phoenix/version.py,sha256=hh55rhGJPmETx024BaT0pa35ouf8-J2B1_CJUXY4XFg,23
+phoenix/version.py,sha256=QzEW4rw3knzx0cHKAbjoAdUuGoTl82VIDrnWP2UhHw0,23
 phoenix/core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 phoenix/core/embedding_dimension.py,sha256=zKGbcvwOXgLf-yrJBpQyKtd-LEOPRKHnUToyAU8Owis,87
 phoenix/core/model.py,sha256=km_a--PBHOuA337ClRw9xqhOHhrUT6Rl9pz_zV0JYkQ,4843
@@ -18,7 +18,7 @@ phoenix/db/bulk_inserter.py,sha256=qgg8pt5k4VnHKOE0-KoReXVAfXRhLt-sMZihI-b4X9I,1
 phoenix/db/engines.py,sha256=R3btYTSOSd6BwRA59EmhhojL0HCQ7NnzFIXQrPYS0iU,4812
 phoenix/db/helpers.py,sha256=2zSc4n5IJfu-CaOFoBfqTB35M1nTFcAc8tqLsNtF2Jw,3488
 phoenix/db/migrate.py,sha256=MuhtNWnR24riROvarvKfbRb4_D5xuQi6P760vBUKl1E,2270
-phoenix/db/models.py,sha256=1fSwI9NjXcVv7PT40VEeKGGI13TWbqzrYfIemXV-DYY,20837
+phoenix/db/models.py,sha256=C_s1TAgMRi2eExc48NwInErsfSzVhNZtj4ow23jUKSc,23352
 phoenix/db/insertion/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 phoenix/db/insertion/constants.py,sha256=8wifm7X-1XvroZ__R2Gc96NsgLhTDn0zXl4lehlXtcA,70
 phoenix/db/insertion/dataset.py,sha256=_vxy5e6W5jEuvO2fMKbbNCn9JvHkwI4LRKk_10eKFVg,7171
@@ -32,6 +32,9 @@ phoenix/db/insertion/types.py,sha256=nQYYnpzcPxj2kdUoXfKE8ilOKlx1zpKLPc40OGuBlfk
 phoenix/db/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 phoenix/db/migrations/env.py,sha256=QbzB5zrRs6XQQmrYeUpuzeilcMlM-MsbaAgHHYcIHTI,3626
 phoenix/db/migrations/script.py.mako,sha256=MEqL-2qATlST9TAOeYgscMn1uy6HUS9NFvDgl93dMj8,635
+phoenix/db/migrations/future_versions/README.md,sha256=3QtDx40SAD-IITjbdlKR2N_CBxT5y37C1OQs05EDt7o,184
+phoenix/db/migrations/future_versions/cd164e83824f_users_and_tokens.py,sha256=L3UlrrT9_mgIakkjRl4MfSHd5dNmZi0D0jizi5V4dTI,8795
+phoenix/db/migrations/versions/.gitignore,sha256=chLdMrfkICZvLY7lCEcuqF32sVp61Jml4PodFryEU94,33
 phoenix/db/migrations/versions/10460e46d750_datasets.py,sha256=eZAyz720DmpOd7RnuxDN2dVNXVuMrdlCA7eAOxyMtfs,8695
 phoenix/db/migrations/versions/3be8647b87d8_add_token_columns_to_spans_table.py,sha256=x6oKFwn7Zmite4G0trDQPpMCn0I7jejuBcN3-ivEuDg,3938
 phoenix/db/migrations/versions/cf03bd6bae1d_init.py,sha256=09cpofqje8zi4eQFfUn-i21x7VcsUYOfLKKUlrtKrGc,8662
@@ -227,13 +230,13 @@ phoenix/server/static/apple-touch-icon-76x76.png,sha256=CT_xT12I0u2i0WU8JzBZBuOQ
 phoenix/server/static/apple-touch-icon.png,sha256=fOfpjqGpWYbJ0eAurKsyoZP1EAs6ZVooBJ_SGk2ZkDs,3801
 phoenix/server/static/favicon.ico,sha256=bY0vvCKRftemZfPShwZtE93DiiQdaYaozkPGwNFr6H8,34494
 phoenix/server/static/modernizr.js,sha256=mvK-XtkNqjOral-QvzoqsyOMECXIMu5BQwSVN_wcU9c,2564
-phoenix/server/static/.vite/manifest.json,sha256=f_O0wfSXGRjeXvLiAE1oNla0ADk3X6PTSnCeHtd4xB8,1929
-phoenix/server/static/assets/components-BSw2e1Zr.js,sha256=nvfZM0lYZkeOklzR8VLMikEgIOTpb2jNpF8b9IMMcps,185927
-phoenix/server/static/assets/index-BYUFcdtx.js,sha256=bYcfXq3huGgFkCR0SX2680A1MbACjpdxd5MIbMcOIyY,7362
-phoenix/server/static/assets/pages-p_fuED5k.js,sha256=MA3xlc64hC6bRMJRcXZ1v1sWZdsngaU8bcejbho402A,449363
+phoenix/server/static/.vite/manifest.json,sha256=HOOexYONSka_hn_J9xhFRtKsvGXqttAcXqmC1C9uSLI,1929
+phoenix/server/static/assets/components-Bhx3QVW0.js,sha256=5UWD5GSontt9-H7IMs7lRbds6I4RyCbeRwFJRM52DGw,187118
+phoenix/server/static/assets/index-CZg-95kd.js,sha256=NOPlnhvT31fNg9srw7-kvKfoBLFqVbwlTvUrYKYIYeQ,7362
+phoenix/server/static/assets/pages-DG-5zgoV.js,sha256=m2FGLIvrM7I3uweAC_5YcXZfmdTI3mVeVCgLCcB23B0,452737
 phoenix/server/static/assets/vendor-BMWfu6zp.js,sha256=AAVTM5SjGUI_CmAWFUFmhpp5VDhvCD-MrEoh-pXXADY,1355423
 phoenix/server/static/assets/vendor-DxkFTwjz.css,sha256=nZrkr0u6NNElFGvpWHk9GTHeGoibCXCli1bE7mXZGZg,1816
-phoenix/server/static/assets/vendor-arizeai-CIETbKDq.js,sha256=JYd0o3cIY0av7lzU5LT5GDMMhmMPE3FbbGjtlhKBhLo,304008
+phoenix/server/static/assets/vendor-arizeai-Sj74jm5V.js,sha256=9lD4YeMt5WtyfrqIApcH9WFQxyJJUtth0syWabkzX-I,304008
 phoenix/server/static/assets/vendor-codemirror-DO3VqEcD.js,sha256=M7t6xd6WpgKes25OOeGyxT1MU1dDrEKdmUBHgy5zslw,503031
 phoenix/server/static/assets/vendor-recharts-BGN0SxgJ.js,sha256=L9LAYSjuf0GHh1_PQh9bF4l9euWCDVQcnQN1RgMDMBw,282859
 phoenix/server/static/assets/vendor-three-DwGkEfCM.js,sha256=0D12ZgKzfKCTSdSTKJBFR2RZO_xxeMXrqDp0AszZqHY,620972
@@ -281,8 +284,8 @@ phoenix/utilities/logging.py,sha256=lDXd6EGaamBNcQxL4vP1au9-i_SXe0OraUDiJOcszSw,
 phoenix/utilities/project.py,sha256=8IJuMM4yUMoooPi37sictGj8Etu9rGmq6RFtc9848cQ,436
 phoenix/utilities/re.py,sha256=PDve_OLjRTM8yQQJHC8-n3HdIONi7aNils3ZKRZ5uBM,2045
 phoenix/utilities/span_store.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-arize_phoenix-4.20.2.dist-info/METADATA,sha256=DAffUocQNJm0BONMNSzCucpDNIILl9e2JIdARb3As3c,11902
-arize_phoenix-4.20.2.dist-info/WHEEL,sha256=1yFddiXMmvYK7QYTqtRNtX66WJ0Mz8PYEiEUoOUUxRY,87
-arize_phoenix-4.20.2.dist-info/licenses/IP_NOTICE,sha256=JBqyyCYYxGDfzQ0TtsQgjts41IJoa-hiwDrBjCb9gHM,469
-arize_phoenix-4.20.2.dist-info/licenses/LICENSE,sha256=HFkW9REuMOkvKRACuwLPT0hRydHb3zNg-fdFt94td18,3794
-arize_phoenix-4.20.2.dist-info/RECORD,,
+arize_phoenix-4.22.0.dist-info/METADATA,sha256=knv747RowfHFOmv5WqkavBVG6KBadXQ8kLol_iYJK-Q,11902
+arize_phoenix-4.22.0.dist-info/WHEEL,sha256=1yFddiXMmvYK7QYTqtRNtX66WJ0Mz8PYEiEUoOUUxRY,87
+arize_phoenix-4.22.0.dist-info/licenses/IP_NOTICE,sha256=JBqyyCYYxGDfzQ0TtsQgjts41IJoa-hiwDrBjCb9gHM,469
+arize_phoenix-4.22.0.dist-info/licenses/LICENSE,sha256=HFkW9REuMOkvKRACuwLPT0hRydHb3zNg-fdFt94td18,3794
+arize_phoenix-4.22.0.dist-info/RECORD,,

phoenix/config.py

@@ -2,7 +2,7 @@ import os
 import tempfile
 from logging import getLogger
 from pathlib import Path
-from typing import Dict, List, Optional
+from typing import Dict, List, Optional, Tuple
 
 from .utilities.re import parse_env_headers
 
@@ -60,6 +60,11 @@ ENV_PHOENIX_SERVER_INSTRUMENTATION_OTLP_TRACE_COLLECTOR_GRPC_ENDPOINT = (
     "PHOENIX_SERVER_INSTRUMENTATION_OTLP_TRACE_COLLECTOR_GRPC_ENDPOINT"
 )
 
+# Auth is under active development. Phoenix users are strongly advised not to
+# set these environment variables until the feature is officially released.
+ENV_DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH = "DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH"
+ENV_DANGEROUSLY_SET_PHOENIX_SECRET = "DANGEROUSLY_SET_PHOENIX_SECRET"
+
 
 def server_instrumentation_is_enabled() -> bool:
     return bool(
@@ -100,6 +105,57 @@ def get_working_dir() -> Path:
     return Path.home().resolve() / ".phoenix"
 
 
+def get_boolean_env_var(env_var: str) -> Optional[bool]:
+    """
+    Parses a boolean environment variable, returning None if the variable is not set.
+    """
+    if (value := os.environ.get(env_var)) is None:
+        return None
+    assert (lower := value.lower()) in (
+        "true",
+        "false",
+    ), f"{env_var} must be set to TRUE or FALSE (case-insensitive)"
+    return lower == "true"
+
+
+def get_env_enable_auth() -> bool:
+    """
+    Gets the value of the DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH environment variable.
+    """
+    return get_boolean_env_var(ENV_DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH) is True
+
+
+def get_env_phoenix_secret() -> Optional[str]:
+    """
+    Gets the value of the DANGEROUSLY_SET_PHOENIX_SECRET environment variable
+    and performs validation.
+    """
+    phoenix_secret = os.environ.get(ENV_DANGEROUSLY_SET_PHOENIX_SECRET)
+    if phoenix_secret is None:
+        return None
+    # todo: add validation for the phoenix secret
+    return phoenix_secret
+
+
+def get_auth_settings() -> Tuple[bool, Optional[str]]:
+    """
+    Gets auth settings and performs validation.
+    """
+    enable_auth = get_env_enable_auth()
+    phoenix_secret = get_env_phoenix_secret()
+    if enable_auth:
+        assert phoenix_secret, (
+            "DANGEROUSLY_SET_PHOENIX_SECRET must be set "
+            "when auth is enabled with DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH"
+        )
+    else:
+        assert not phoenix_secret, (
+            "DANGEROUSLY_SET_PHOENIX_SECRET cannot be set "
+            "unless auth is enabled with DANGEROUSLY_SET_PHOENIX_ENABLE_AUTH"
+        )
+    return enable_auth, phoenix_secret
+
+
 PHOENIX_DIR = Path(__file__).resolve().parent
 # Server config
 SERVER_DIR = PHOENIX_DIR / "server"
@@ -123,6 +179,8 @@ EXPORT_DIR = ROOT_DIR / "exports"
 INFERENCES_DIR = ROOT_DIR / "inferences"
 TRACE_DATASETS_DIR = ROOT_DIR / "trace_datasets"
 
+ENABLE_AUTH, PHOENIX_SECRET = get_auth_settings()
+
 
 def ensure_working_dir() -> None:
     """

phoenix/db/migrations/future_versions/README.md

@@ -0,0 +1,4 @@
+# Future Migrations
+
+This folder contains future migrations for unreleased features that are under active development. Do not run these migrations unless you are a Phoenix developer.
+

phoenix/db/migrations/future_versions/cd164e83824f_users_and_tokens.py

@@ -0,0 +1,292 @@
+"""users and tokens
+
+Revision ID: cd164e83824f
+Revises: 10460e46d750
+Create Date: 2024-08-01 18:36:52.157604
+
+"""
+
+from datetime import datetime, timezone
+from typing import Any, Dict, List, Optional, Sequence, TypedDict, Union
+
+import sqlalchemy as sa
+from alembic import op
+from phoenix.datetime_utils import normalize_datetime
+from sqlalchemy import (
+    JSON,
+    TIMESTAMP,
+    CheckConstraint,
+    Dialect,
+    ForeignKey,
+    MetaData,
+    TypeDecorator,
+    func,
+    insert,
+)
+from sqlalchemy.dialects import postgresql
+from sqlalchemy.ext.asyncio.engine import AsyncConnection
+from sqlalchemy.ext.compiler import compiles
+from sqlalchemy.orm import (
+    DeclarativeBase,
+    Mapped,
+    mapped_column,
+)
+
+
+class JSONB(JSON):
+    # See https://docs.sqlalchemy.org/en/20/core/custom_types.html
+    __visit_name__ = "JSONB"
+
+
+@compiles(JSONB, "sqlite")  # type: ignore
+def _(*args: Any, **kwargs: Any) -> str:
+    # See https://docs.sqlalchemy.org/en/20/core/custom_types.html
+    return "JSONB"
+
+
+JSON_ = (
+    JSON()
+    .with_variant(
+        postgresql.JSONB(),  # type: ignore
+        "postgresql",
+    )
+    .with_variant(
+        JSONB(),
+        "sqlite",
+    )
+)
+
+
+class JsonDict(TypeDecorator[Dict[str, Any]]):
+    # See # See https://docs.sqlalchemy.org/en/20/core/custom_types.html
+    cache_ok = True
+    impl = JSON_
+
+    def process_bind_param(self, value: Optional[Dict[str, Any]], _: Dialect) -> Dict[str, Any]:
+        return value if isinstance(value, dict) else {}
+
+
+class JsonList(TypeDecorator[List[Any]]):
+    # See # See https://docs.sqlalchemy.org/en/20/core/custom_types.html
+    cache_ok = True
+    impl = JSON_
+
+    def process_bind_param(self, value: Optional[List[Any]], _: Dialect) -> List[Any]:
+        return value if isinstance(value, list) else []
+
+
+class UtcTimeStamp(TypeDecorator[datetime]):
+    # See # See https://docs.sqlalchemy.org/en/20/core/custom_types.html
+    cache_ok = True
+    impl = TIMESTAMP(timezone=True)
+
+    def process_bind_param(self, value: Optional[datetime], _: Dialect) -> Optional[datetime]:
+        return normalize_datetime(value)
+
+    def process_result_value(self, value: Optional[Any], _: Dialect) -> Optional[datetime]:
+        return normalize_datetime(value, timezone.utc)
+
+
+class ExperimentRunOutput(TypedDict, total=False):
+    task_output: Any
+
+
+class Base(DeclarativeBase):
+    # Enforce best practices for naming constraints
+    # https://alembic.sqlalchemy.org/en/latest/naming.html#integration-of-naming-conventions-into-operations-autogenerate
+    metadata = MetaData(
+        naming_convention={
+            "ix": "ix_%(table_name)s_%(column_0_N_name)s",
+            "uq": "uq_%(table_name)s_%(column_0_N_name)s",
+            "ck": "ck_%(table_name)s_`%(constraint_name)s`",
+            "fk": "fk_%(table_name)s_%(column_0_name)s_%(referred_table_name)s",
+            "pk": "pk_%(table_name)s",
+        }
+    )
+    type_annotation_map = {
+        Dict[str, Any]: JsonDict,
+        List[Dict[str, Any]]: JsonList,
+        ExperimentRunOutput: JsonDict,
+    }
+
+
+class UserRole(Base):
+    __tablename__ = "user_roles"
+    id: Mapped[int] = mapped_column(primary_key=True)
+    role: Mapped[str] = mapped_column(unique=True)
+
+
+class User(Base):
+    __tablename__ = "users"
+    id: Mapped[int] = mapped_column(primary_key=True)
+    user_role_id: Mapped[int] = mapped_column(
+        ForeignKey("user_roles.id"),
+        index=True,
+    )
+    username: Mapped[Optional[str]] = mapped_column(nullable=True, unique=True, index=True)
+    email: Mapped[str] = mapped_column(nullable=False, unique=True, index=True)
+    auth_method: Mapped[str] = mapped_column(
+        CheckConstraint("auth_method IN ('LOCAL')", name="valid_auth_method")
+    )
+    password_hash: Mapped[Optional[str]]
+    reset_password: Mapped[bool]
+    created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
+    updated_at: Mapped[datetime] = mapped_column(
+        UtcTimeStamp, server_default=func.now(), onupdate=func.now()
+    )
+    deleted_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp)
+
+
+# revision identifiers, used by Alembic.
+revision: str = "cd164e83824f"
+down_revision: Union[str, None] = "3be8647b87d8"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+async def insert_roles_and_users(connection: AsyncConnection) -> None:
+    """
+    Populates the `user_roles` table and adds a system user and initial admin
+    user to the `users` table.
+    """
+    await connection.execute(
+        insert(UserRole).values([{"role": "SYSTEM"}, {"role": "ADMIN"}, {"role": "GENERAL"}])
+    )
+    system_user_role_id = sa.select(UserRole.id).where(UserRole.role == "SYSTEM").scalar_subquery()
+    admin_user_role_id = sa.select(UserRole.id).where(UserRole.role == "ADMIN").scalar_subquery()
+    await connection.execute(
+        insert(User).values(
+            [
+                {
+                    "user_role_id": system_user_role_id,
+                    "username": None,
+                    "email": "system@localhost",
+                    "auth_method": "LOCAL",
+                    "password_hash": None,
+                    "reset_password": False,
+                },
+                {
+                    "user_role_id": admin_user_role_id,
+                    "username": "admin",
+                    "email": "admin@localhost",
+                    "auth_method": "LOCAL",
+                    "password_hash": None,  # todo: replace this with the hashed PHOENIX_SECRET
+                    "reset_password": True,
+                },
+            ]
+        )
+    )
+
+
+def upgrade() -> None:
+    op.create_table(
+        "user_roles",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "role",
+            sa.String,
+            nullable=False,
+            unique=True,
+        ),
+    )
+    op.create_table(
+        "users",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "user_role_id",
+            sa.Integer,
+            sa.ForeignKey("user_roles.id"),
+            nullable=False,
+            index=True,
+        ),
+        sa.Column("username", sa.String, nullable=True, unique=True, index=True),
+        sa.Column("email", sa.String, nullable=False, unique=True, index=True),
+        sa.Column(
+            "auth_method",
+            sa.String,
+            sa.CheckConstraint("auth_method IN ('LOCAL')", "valid_auth_method"),
+            nullable=False,
+        ),
+        sa.Column("password_hash", sa.String, nullable=True),
+        sa.Column("reset_password", sa.Boolean, nullable=False),
+        sa.Column(
+            "created_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=False,
+            server_default=sa.func.now(),
+        ),
+        sa.Column(
+            "updated_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=False,
+            server_default=sa.func.now(),
+            onupdate=sa.func.now(),
+        ),
+        sa.Column(
+            "deleted_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=True,
+        ),
+    )
+    op.create_table(
+        "api_keys",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "user_id",
+            sa.Integer,
+            sa.ForeignKey("users.id"),
+            nullable=False,
+            index=True,
+        ),
+        sa.Column("name", sa.String, nullable=False),
+        sa.Column("description", sa.String, nullable=True),
+        sa.Column(
+            "created_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=False,
+            server_default=sa.func.now(),
+        ),
+        sa.Column(
+            "expires_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=True,
+        ),
+    )
+    op.create_table(
+        "audit_api_keys",
+        sa.Column("id", sa.Integer, primary_key=True),
+        sa.Column(
+            "api_key_id",
+            sa.Integer,
+            sa.ForeignKey("api_keys.id"),
+            nullable=False,
+            index=True,
+        ),
+        sa.Column(
+            "user_id",
+            sa.Integer,
+            sa.ForeignKey("users.id"),
+            nullable=False,
+            index=True,
+        ),
+        sa.Column(
+            "action",
+            sa.String,
+            sa.CheckConstraint("action IN ('CREATE', 'DELETE')", "valid_action"),
+            nullable=False,
+        ),
+        sa.Column(
+            "created_at",
+            sa.TIMESTAMP(timezone=True),
+            nullable=False,
+            server_default=sa.func.now(),
+        ),
+    )
+    op.run_async(insert_roles_and_users)
+
+
+def downgrade() -> None:
+    op.drop_table("audit_api_keys")
+    op.drop_table("api_keys")
+    op.drop_table("users")
+    op.drop_table("user_roles")

phoenix/db/migrations/versions/.gitignore

@@ -0,0 +1 @@
+cd164e83824f_users_and_tokens.py

phoenix/db/models.py

@@ -34,6 +34,7 @@ from sqlalchemy.orm import (
 )
 from sqlalchemy.sql import expression
 
+from phoenix.config import ENABLE_AUTH
 from phoenix.datetime_utils import normalize_datetime
 
 
@@ -616,3 +617,63 @@ class ExperimentRunAnnotation(Base):
             "name",
         ),
     )
+
+
+# todo: unnest the following models when auth is released (https://github.com/Arize-ai/phoenix/issues/4183)
+if ENABLE_AUTH:
+
+    class UserRole(Base):
+        __tablename__ = "user_roles"
+        id: Mapped[int] = mapped_column(primary_key=True)
+        role: Mapped[str] = mapped_column(unique=True)
+
+    class User(Base):
+        __tablename__ = "users"
+        id: Mapped[int] = mapped_column(primary_key=True)
+        user_role_id: Mapped[int] = mapped_column(
+            ForeignKey("user_roles.id"),
+            index=True,
+        )
+        username: Mapped[Optional[str]] = mapped_column(nullable=True, unique=True, index=True)
+        email: Mapped[str] = mapped_column(nullable=False, unique=True, index=True)
+        auth_method: Mapped[str] = mapped_column(
+            CheckConstraint("auth_method IN ('LOCAL')", name="valid_auth_method")
+        )
+        password_hash: Mapped[Optional[str]]
+        reset_password: Mapped[bool]
+        created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
+        updated_at: Mapped[datetime] = mapped_column(
+            UtcTimeStamp, server_default=func.now(), onupdate=func.now()
+        )
+        deleted_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp)
+
+    class APIKey(Base):
+        __tablename__ = "api_keys"
+        id: Mapped[int] = mapped_column(primary_key=True)
+        user_id: Mapped[int] = mapped_column(
+            ForeignKey("users.id"),
+            index=True,
+        )
+        name: Mapped[str]
+        description: Mapped[Optional[str]]
+        created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())
+        expires_at: Mapped[Optional[datetime]] = mapped_column(UtcTimeStamp)
+
+    # todo: standardize audit table format (https://github.com/Arize-ai/phoenix/issues/4185)
+    class AuditAPIKey(Base):
+        __tablename__ = "audit_api_keys"
+        id: Mapped[int] = mapped_column(primary_key=True)
+        api_key_id: Mapped[int] = mapped_column(
+            ForeignKey("api_keys.id"),
+            nullable=False,
+            index=True,
+        )
+        user_id: Mapped[int] = mapped_column(
+            ForeignKey("users.id"),
+            nullable=False,
+            index=True,
+        )
+        action: Mapped[str] = mapped_column(
+            CheckConstraint("action IN ('CREATE', 'DELETE')", name="valid_action")
+        )
+        created_at: Mapped[datetime] = mapped_column(UtcTimeStamp, server_default=func.now())

phoenix/server/static/.vite/manifest.json

@@ -1,22 +1,22 @@
 {
-  "_components-BSw2e1Zr.js": {
-    "file": "assets/components-BSw2e1Zr.js",
+  "_components-Bhx3QVW0.js": {
+    "file": "assets/components-Bhx3QVW0.js",
     "name": "components",
     "imports": [
       "_vendor-BMWfu6zp.js",
-      "_vendor-arizeai-CIETbKDq.js",
-      "_pages-p_fuED5k.js",
+      "_vendor-arizeai-Sj74jm5V.js",
+      "_pages-DG-5zgoV.js",
       "_vendor-three-DwGkEfCM.js",
       "_vendor-codemirror-DO3VqEcD.js"
     ]
   },
-  "_pages-p_fuED5k.js": {
-    "file": "assets/pages-p_fuED5k.js",
+  "_pages-DG-5zgoV.js": {
+    "file": "assets/pages-DG-5zgoV.js",
     "name": "pages",
     "imports": [
       "_vendor-BMWfu6zp.js",
-      "_components-BSw2e1Zr.js",
-      "_vendor-arizeai-CIETbKDq.js",
+      "_components-Bhx3QVW0.js",
+      "_vendor-arizeai-Sj74jm5V.js",
       "_vendor-recharts-BGN0SxgJ.js",
       "_vendor-codemirror-DO3VqEcD.js"
     ]
@@ -35,8 +35,8 @@
       "assets/vendor-DxkFTwjz.css"
     ]
   },
-  "_vendor-arizeai-CIETbKDq.js": {
-    "file": "assets/vendor-arizeai-CIETbKDq.js",
+  "_vendor-arizeai-Sj74jm5V.js": {
+    "file": "assets/vendor-arizeai-Sj74jm5V.js",
     "name": "vendor-arizeai",
     "imports": [
       "_vendor-BMWfu6zp.js"
@@ -61,15 +61,15 @@
     "name": "vendor-three"
   },
   "index.tsx": {
-    "file": "assets/index-BYUFcdtx.js",
+    "file": "assets/index-CZg-95kd.js",
     "name": "index",
     "src": "index.tsx",
     "isEntry": true,
     "imports": [
       "_vendor-BMWfu6zp.js",
-      "_vendor-arizeai-CIETbKDq.js",
-      "_components-BSw2e1Zr.js",
-      "_pages-p_fuED5k.js",
+      "_vendor-arizeai-Sj74jm5V.js",
+      "_components-Bhx3QVW0.js",
+      "_pages-DG-5zgoV.js",
       "_vendor-three-DwGkEfCM.js",
       "_vendor-codemirror-DO3VqEcD.js",
       "_vendor-recharts-BGN0SxgJ.js"