arize-phoenix 8.15.0__tar.gz → 8.17.0__tar.gz

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 8.15.0
+Version: 8.17.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://docs.arize.com/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues
@@ -25,6 +25,7 @@ Requires-Dist: arize-phoenix-evals>=0.13.1
 Requires-Dist: arize-phoenix-otel>=0.5.1
 Requires-Dist: authlib
 Requires-Dist: cachetools
+Requires-Dist: email-validator
 Requires-Dist: fastapi
 Requires-Dist: grpc-interceptor
 Requires-Dist: grpcio

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/pyproject.toml

@@ -59,6 +59,7 @@ dependencies = [
   "authlib",
   "websockets",
   "arize-phoenix-client",
+  "email-validator",
 ]
 dynamic = ["version"]
 

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/src/phoenix/config.py

@@ -10,6 +10,8 @@ from pathlib import Path
 from typing import Optional, cast, overload
 from urllib.parse import quote_plus, urlparse
 
+from email_validator import EmailNotValidError, validate_email
+
 from phoenix.utilities.logging import log_a_list
 
 from .utilities.re import parse_env_headers
@@ -161,6 +163,17 @@ password reset emails. If this variable is left unspecified or contains no origi
 protection will not be enabled. In such cases, when a request includes `origin` or `referer`
 headers, those values will not be validated.
 """
+ENV_PHOENIX_ADMINS = "PHOENIX_ADMINS"
+"""
+A semicolon-separated list of username and email address pairs to create as admin users on startup.
+The format is `username=email`, e.g., `John Doe=john@example.com;Doe, Jane=jane@example.com`.
+The password for each user will be randomly generated and will need to be reset. The application
+will not start if this environment variable is set but cannot be parsed or contains invalid emails.
+If the username or email address already exists in the database, the user record will not be
+modified, e.g., changed from non-admin to admin. Changing this environment variable for the next
+startup will not undo any records created in previous startups.
+"""
+
 
 # SMTP settings
 ENV_PHOENIX_SMTP_HOSTNAME = "PHOENIX_SMTP_HOSTNAME"
@@ -429,6 +442,51 @@ def get_env_csrf_trusted_origins() -> list[str]:
     return sorted(set(origins))
 
 
+def get_env_admins() -> dict[str, str]:
+    """
+    Parse the PHOENIX_ADMINS environment variable to extract the comma separated pairs of
+    username and email. The last equal sign (=) in each pair is used to separate the username from
+    the email.
+
+    Returns:
+        dict: A dictionary mapping email addresses to usernames
+
+    Raises:
+        ValueError: If the environment variable cannot be parsed or contains invalid email addresses
+    """
+    if not (env_value := getenv(ENV_PHOENIX_ADMINS)):
+        return {}
+    usernames = set()
+    emails = set()
+    ans = {}
+    for pair in env_value.split(";"):
+        pair = pair.strip()
+        if not pair:
+            continue
+        # Find the last equals sign to separate username from email
+        # This allows usernames to contain equals signs
+        last_equals_pos = pair.rfind("=")
+        if last_equals_pos == -1:
+            raise ValueError(
+                f"Invalid format in {ENV_PHOENIX_ADMINS}: '{pair}'. "
+                f"Expected format: 'username=email'"
+            )
+        username = pair[:last_equals_pos].strip()
+        email_addr = pair[last_equals_pos + 1 :].strip()
+        try:
+            email_addr = validate_email(email_addr, check_deliverability=False).normalized
+        except EmailNotValidError:
+            raise ValueError(f"Invalid email in {ENV_PHOENIX_ADMINS}: '{email_addr}'")
+        if username in usernames:
+            raise ValueError(f"Duplicate username in {ENV_PHOENIX_ADMINS}: '{username}'")
+        if email_addr in emails:
+            raise ValueError(f"Duplicate email in {ENV_PHOENIX_ADMINS}: '{email_addr}'")
+        usernames.add(username)
+        emails.add(email_addr)
+        ans[email_addr] = username
+    return ans
+
+
 def get_env_smtp_username() -> str:
     return getenv(ENV_PHOENIX_SMTP_USERNAME, "")
 

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/src/phoenix/db/facilitator.py

@@ -19,7 +19,10 @@ from phoenix.auth import (
     DEFAULT_SYSTEM_USERNAME,
     compute_password_hash,
 )
-from phoenix.config import get_env_default_admin_initial_password
+from phoenix.config import (
+    get_env_admins,
+    get_env_default_admin_initial_password,
+)
 from phoenix.db import models
 from phoenix.db.enums import COLUMN_ENUMS, UserRole
 from phoenix.server.types import DbSessionFactory
@@ -37,13 +40,13 @@ class Facilitator:
         self._db = db
 
     async def __call__(self) -> None:
-        async with self._db() as session:
-            for fn in (
-                _ensure_enums,
-                _ensure_user_roles,
-            ):
-                async with session.begin_nested():
-                    await fn(session)
+        for fn in (
+            _ensure_enums,
+            _ensure_user_roles,
+            _ensure_admins,
+        ):
+            async with self._db() as session:
+                await fn(session)
 
 
 async def _ensure_enums(session: AsyncSession) -> None:
@@ -111,3 +114,42 @@ async def _ensure_user_roles(session: AsyncSession) -> None:
         )
         session.add(admin_user)
     await session.flush()
+
+
+async def _ensure_admins(session: AsyncSession) -> None:
+    """
+    Ensure that all startup admin users are present in the database. If any are missing, they will
+    be added. Existing records will not be modified.
+    """
+    if not (admins := get_env_admins()):
+        return
+    existing_emails = set(
+        await session.scalars(select(models.User.email).where(models.User.email.in_(admins.keys())))
+    )
+    admins = {email: username for email, username in admins.items() if email not in existing_emails}
+    if not admins:
+        return
+    existing_usernames = set(
+        await session.scalars(
+            select(models.User.username).where(models.User.username.in_(admins.values()))
+        )
+    )
+    admins = {
+        email: username for email, username in admins.items() if username not in existing_usernames
+    }
+    if not admins:
+        return
+    admin_role_id = await session.scalar(
+        select(models.UserRole.id).filter_by(name=UserRole.ADMIN.value)
+    )
+    assert admin_role_id is not None, "Admin role not found in database"
+    for email, username in admins.items():
+        values = dict(
+            user_role_id=admin_role_id,
+            username=username,
+            email=email,
+            password_salt=secrets.token_bytes(DEFAULT_SECRET_LENGTH),
+            password_hash=secrets.token_bytes(DEFAULT_SECRET_LENGTH),
+            reset_password=True,
+        )
+        await session.execute(insert(models.User).values(values))

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/src/phoenix/server/api/types/Project.py

@@ -37,6 +37,8 @@ from phoenix.server.api.types.Trace import Trace
 from phoenix.server.api.types.ValidationResult import ValidationResult
 from phoenix.trace.dsl import SpanFilter
 
+DEFAULT_PAGE_SIZE = 30
+
 
 @strawberry.type
 class Project(Node):
@@ -215,7 +217,7 @@ class Project(Node):
         self,
         info: Info[Context, None],
         time_range: Optional[TimeRange] = UNSET,
-        first: Optional[int] = 50,
+        first: Optional[int] = DEFAULT_PAGE_SIZE,
         last: Optional[int] = UNSET,
         after: Optional[CursorString] = UNSET,
         before: Optional[CursorString] = UNSET,
@@ -299,7 +301,7 @@ class Project(Node):
         self,
         info: Info[Context, None],
         time_range: Optional[TimeRange] = UNSET,
-        first: Optional[int] = 50,
+        first: Optional[int] = DEFAULT_PAGE_SIZE,
         after: Optional[CursorString] = UNSET,
         sort: Optional[ProjectSessionSort] = UNSET,
         filter_io_substring: Optional[str] = UNSET,

{arize_phoenix-8.15.0 → arize_phoenix-8.17.0}/src/phoenix/server/static/.vite/manifest.json

@@ -1,22 +1,22 @@
 {
-  "_components-B1h2vIB3.js": {
-    "file": "assets/components-B1h2vIB3.js",
+  "_components-Q7vebP-x.js": {
+    "file": "assets/components-Q7vebP-x.js",
     "name": "components",
     "imports": [
       "_vendor-BT2CVKel.js",
-      "_pages-DV4OMLyH.js",
+      "_pages-_MY_UD-t.js",
       "_vendor-arizeai-Dzsaenki.js",
       "_vendor-codemirror-D2R3PB3i.js",
       "_vendor-three-C5WAXd5r.js"
     ]
   },
-  "_pages-DV4OMLyH.js": {
-    "file": "assets/pages-DV4OMLyH.js",
+  "_pages-_MY_UD-t.js": {
+    "file": "assets/pages-_MY_UD-t.js",
     "name": "pages",
     "imports": [
       "_vendor-BT2CVKel.js",
       "_vendor-arizeai-Dzsaenki.js",
-      "_components-B1h2vIB3.js",
+      "_components-Q7vebP-x.js",
       "_vendor-codemirror-D2R3PB3i.js",
       "_vendor-recharts-DetvdWCF.js"
     ]
@@ -69,15 +69,15 @@
     "name": "vendor-three"
   },
   "index.tsx": {
-    "file": "assets/index-D27y64mn.js",
+    "file": "assets/index-BhL6cAT9.js",
     "name": "index",
     "src": "index.tsx",
     "isEntry": true,
     "imports": [
       "_vendor-BT2CVKel.js",
       "_vendor-arizeai-Dzsaenki.js",
-      "_pages-DV4OMLyH.js",
-      "_components-B1h2vIB3.js",
+      "_pages-_MY_UD-t.js",
+      "_components-Q7vebP-x.js",
       "_vendor-three-C5WAXd5r.js",
       "_vendor-codemirror-D2R3PB3i.js",
       "_vendor-shiki-dzrzjP7E.js",