arize-phoenix 8.22.1__tar.gz → 8.23.0__tar.gz

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 8.22.1
+Version: 8.23.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://docs.arize.com/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues
@@ -141,7 +141,10 @@ Description-Content-Type: text/markdown
     <a target="_blank" href="https://arize-ai.slack.com/join/shared_invite/zt-11t1vbu4x-xkBIHmOREQnYnYDH1GDfCg?__hstc=259489365.a667dfafcfa0169c8aee4178d115dc81.1733501603539.1733501603539.1733501603539.1&__hssc=259489365.1.1733501603539&__hsfp=3822854628&submissionGuid=381a0676-8f38-437b-96f2-fc10875658df#/shared-invite/email">
         <img src="https://img.shields.io/static/v1?message=Community&logo=slack&labelColor=grey&color=blue&logoColor=white&label=%20"/>
     </a>
-    <a target="_blank" href="https://twitter.com/ArizePhoenix">
+     <a target="_blank" href="https://bsky.app/profile/arize-phoenix.bsky.social">
+        <img src="https://img.shields.io/badge/-phoenix-blue.svg?color=blue&labelColor=gray&logo=bluesky">
+    </a>
+    <a target="_blank" href="https://x.com/ArizePhoenix">
         <img src="https://img.shields.io/badge/-ArizePhoenix-blue.svg?color=blue&labelColor=gray&logo=x">
     </a>
     <a target="_blank" href="https://pypi.org/project/arize-phoenix/">
@@ -156,6 +159,9 @@ Description-Content-Type: text/markdown
     <a target="_blank" href="https://hub.docker.com/r/arizephoenix/phoenix/tags">
         <img src="https://img.shields.io/docker/v/arizephoenix/phoenix?sort=semver&logo=docker&label=image&color=blue">
     </a>
+    <a target="_blank" href="https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-mcp">
+        <img src="https://badge.mcpx.dev?status=on" title="MCP Enabled"/>
+    </a>
 </p>
 
 Phoenix is an open-source AI observability platform designed for experimentation, evaluation, and troubleshooting. It provides:
@@ -181,6 +187,20 @@ pip install arize-phoenix
 
 Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes.
 
+## Packages
+
+The `arize-phoenix` package includes the entire Phoenix platfom. However if you have deployed the Phoenix platform, there are light-weight Python sub-packages and TypeScript packages that can be used in conjunction with the platfrom.
+
+### Subpackages
+
+| Package                                                                                             | Language                                                                                                                                     | Description                                                                                       |
+| --------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| [arize-phoenix-otel](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-otel)           | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-otel)](https://pypi.org/project/arize-phoenix-otel/)                     | Provides a lightweight wrapper around OpenTelemetry primitives with Phoenix-aware defaults        |
+| [arize-phoenix-client](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-client)       | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-client)](https://pypi.org/project/arize-phoenix-client/)                 | Lightweight client for interacting with the Phoenix server via its OpenAPI REST interface         |
+| [arize-phoenix-evals](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-evals)         | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-evals)](https://pypi.org/project/arize-phoenix-evals/)                   | Tooling to evaluate LLM applications including RAG relevance, answer relevance, and more          |
+| [@arizeai/phoenix-client](https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-client) | JavaScript [![NPM Version](https://img.shields.io/npm/v/%40arizeai%2Fphoenix-client)](https://www.npmjs.com/package/@arizeai/phoenix-client) | Client for the Arize Phoenix API                                                                  |
+| [@arizeai/phoenix-mcp](https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-mcp)       | JavaScript [![NPM Version](https://img.shields.io/npm/v/%40arizeai%2Fphoenix-mcp)](https://www.npmjs.com/package/@arizeai/phoenix-mcp)       | MCP server implementation for Arize Phoenix providing unified interface to Phoenix's capabilities |
+
 ## Tracing Integrations
 
 Phoenix is built on top of OpenTelemetry and is vendor, language, and framework agnostic. For details about tracing integrations and example applications, see the [OpenInference](https://github.com/Arize-ai/openinference) project.

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/README.md

@@ -10,7 +10,10 @@
     <a target="_blank" href="https://arize-ai.slack.com/join/shared_invite/zt-11t1vbu4x-xkBIHmOREQnYnYDH1GDfCg?__hstc=259489365.a667dfafcfa0169c8aee4178d115dc81.1733501603539.1733501603539.1733501603539.1&__hssc=259489365.1.1733501603539&__hsfp=3822854628&submissionGuid=381a0676-8f38-437b-96f2-fc10875658df#/shared-invite/email">
         <img src="https://img.shields.io/static/v1?message=Community&logo=slack&labelColor=grey&color=blue&logoColor=white&label=%20"/>
     </a>
-    <a target="_blank" href="https://twitter.com/ArizePhoenix">
+     <a target="_blank" href="https://bsky.app/profile/arize-phoenix.bsky.social">
+        <img src="https://img.shields.io/badge/-phoenix-blue.svg?color=blue&labelColor=gray&logo=bluesky">
+    </a>
+    <a target="_blank" href="https://x.com/ArizePhoenix">
         <img src="https://img.shields.io/badge/-ArizePhoenix-blue.svg?color=blue&labelColor=gray&logo=x">
     </a>
     <a target="_blank" href="https://pypi.org/project/arize-phoenix/">
@@ -25,6 +28,9 @@
     <a target="_blank" href="https://hub.docker.com/r/arizephoenix/phoenix/tags">
         <img src="https://img.shields.io/docker/v/arizephoenix/phoenix?sort=semver&logo=docker&label=image&color=blue">
     </a>
+    <a target="_blank" href="https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-mcp">
+        <img src="https://badge.mcpx.dev?status=on" title="MCP Enabled"/>
+    </a>
 </p>
 
 Phoenix is an open-source AI observability platform designed for experimentation, evaluation, and troubleshooting. It provides:
@@ -50,6 +56,20 @@ pip install arize-phoenix
 
 Phoenix container images are available via [Docker Hub](https://hub.docker.com/r/arizephoenix/phoenix) and can be deployed using Docker or Kubernetes.
 
+## Packages
+
+The `arize-phoenix` package includes the entire Phoenix platfom. However if you have deployed the Phoenix platform, there are light-weight Python sub-packages and TypeScript packages that can be used in conjunction with the platfrom.
+
+### Subpackages
+
+| Package                                                                                             | Language                                                                                                                                     | Description                                                                                       |
+| --------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| [arize-phoenix-otel](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-otel)           | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-otel)](https://pypi.org/project/arize-phoenix-otel/)                     | Provides a lightweight wrapper around OpenTelemetry primitives with Phoenix-aware defaults        |
+| [arize-phoenix-client](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-client)       | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-client)](https://pypi.org/project/arize-phoenix-client/)                 | Lightweight client for interacting with the Phoenix server via its OpenAPI REST interface         |
+| [arize-phoenix-evals](https://github.com/Arize-ai/phoenix/tree/main/packages/phoenix-evals)         | Python [![PyPI Version](https://img.shields.io/pypi/v/arize-phoenix-evals)](https://pypi.org/project/arize-phoenix-evals/)                   | Tooling to evaluate LLM applications including RAG relevance, answer relevance, and more          |
+| [@arizeai/phoenix-client](https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-client) | JavaScript [![NPM Version](https://img.shields.io/npm/v/%40arizeai%2Fphoenix-client)](https://www.npmjs.com/package/@arizeai/phoenix-client) | Client for the Arize Phoenix API                                                                  |
+| [@arizeai/phoenix-mcp](https://github.com/Arize-ai/phoenix/tree/main/js/packages/phoenix-mcp)       | JavaScript [![NPM Version](https://img.shields.io/npm/v/%40arizeai%2Fphoenix-mcp)](https://www.npmjs.com/package/@arizeai/phoenix-mcp)       | MCP server implementation for Arize Phoenix providing unified interface to Phoenix's capabilities |
+
 ## Tracing Integrations
 
 Phoenix is built on top of OpenTelemetry and is vendor, language, and framework agnostic. For details about tracing integrations and example applications, see the [OpenInference](https://github.com/Arize-ai/openinference) project.

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/src/phoenix/config.py

@@ -209,7 +209,11 @@ ENV_PHOENIX_SMTP_VALIDATE_CERTS = "PHOENIX_SMTP_VALIDATE_CERTS"
 """
 Whether to validate SMTP server certificates. Defaults to true.
 """
-
+ENV_PHOENIX_ALLOWED_ORIGINS = "PHOENIX_ALLOWED_ORIGINS"
+"""
+List of allowed origins for CORS. Defaults to None.
+When set to None, CORS is disabled.
+"""
 # API extension settings
 ENV_PHOENIX_FASTAPI_MIDDLEWARE_PATHS = "PHOENIX_FASTAPI_MIDDLEWARE_PATHS"
 ENV_PHOENIX_GQL_EXTENSION_PATHS = "PHOENIX_GQL_EXTENSION_PATHS"
@@ -1049,4 +1053,16 @@ def get_env_disable_migrations() -> bool:
 DEFAULT_PROJECT_NAME = "default"
 _KUBERNETES_PHOENIX_PORT_PATTERN = re.compile(r"^tcp://\d{1,3}[.]\d{1,3}[.]\d{1,3}[.]\d{1,3}:\d+$")
 
+
+def get_env_allowed_origins() -> Optional[list[str]]:
+    """
+    Gets the value of the PHOENIX_ALLOWED_ORIGINS environment variable.
+    """
+    allowed_origins = getenv(ENV_PHOENIX_ALLOWED_ORIGINS)
+    if allowed_origins is None:
+        return None
+
+    return allowed_origins.split(",")
+
+
 SKLEARN_VERSION = cast(tuple[int, int], tuple(map(int, version("scikit-learn").split(".", 2)[:2])))

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/src/phoenix/server/api/routers/v1/__init__.py

@@ -9,6 +9,7 @@ from .evaluations import router as evaluations_router
 from .experiment_evaluations import router as experiment_evaluations_router
 from .experiment_runs import router as experiment_runs_router
 from .experiments import router as experiments_router
+from .projects import router as projects_router
 from .prompts import router as prompts_router
 from .spans import router as spans_router
 from .traces import router as traces_router
@@ -63,4 +64,5 @@ def create_v1_router(authentication_enabled: bool) -> APIRouter:
     router.include_router(spans_router)
     router.include_router(evaluations_router)
     router.include_router(prompts_router)
+    router.include_router(projects_router)
     return router

arize_phoenix-8.23.0/src/phoenix/server/api/routers/v1/projects.py

@@ -0,0 +1,383 @@
+from typing import Optional
+
+from fastapi import APIRouter, HTTPException, Path, Query
+from sqlalchemy import select
+from starlette.requests import Request
+from starlette.status import (
+    HTTP_204_NO_CONTENT,
+    HTTP_403_FORBIDDEN,
+    HTTP_404_NOT_FOUND,
+    HTTP_422_UNPROCESSABLE_ENTITY,
+)
+from strawberry.relay import GlobalID
+
+from phoenix.config import DEFAULT_PROJECT_NAME
+from phoenix.db import models
+from phoenix.db.enums import UserRole
+from phoenix.server.api.routers.v1.models import V1RoutesBaseModel
+from phoenix.server.api.routers.v1.utils import (
+    PaginatedResponseBody,
+    ResponseBody,
+    add_errors_to_responses,
+)
+from phoenix.server.api.types.node import from_global_id_with_expected_type
+from phoenix.server.api.types.Project import Project as ProjectNodeType
+
+router = APIRouter(tags=["projects"])
+
+
+class ProjectData(V1RoutesBaseModel):
+    name: str
+    description: Optional[str] = None
+
+
+class Project(ProjectData):
+    id: str
+
+
+class GetProjectsResponseBody(PaginatedResponseBody[Project]):
+    pass
+
+
+class GetProjectResponseBody(ResponseBody[Project]):
+    pass
+
+
+class CreateProjectRequestBody(V1RoutesBaseModel):
+    project: ProjectData
+
+
+class CreateProjectResponseBody(ResponseBody[Project]):
+    pass
+
+
+class UpdateProjectRequestBody(V1RoutesBaseModel):
+    project: ProjectData
+
+
+class UpdateProjectResponseBody(ResponseBody[Project]):
+    pass
+
+
+@router.get(
+    "/projects",
+    operation_id="getProjects",
+    summary="List all projects",  # noqa: E501
+    description="Retrieve a paginated list of all projects in the system.",  # noqa: E501
+    response_description="A list of projects with pagination information",  # noqa: E501
+    responses=add_errors_to_responses(
+        [
+            HTTP_422_UNPROCESSABLE_ENTITY,
+        ]
+    ),
+)
+async def get_projects(
+    request: Request,
+    cursor: Optional[str] = Query(
+        default=None,
+        description="Cursor for pagination (base64-encoded project ID)",
+    ),
+    limit: int = Query(
+        default=100, description="The max number of projects to return at a time.", gt=0
+    ),
+) -> GetProjectsResponseBody:
+    """
+    Retrieve a paginated list of all projects in the system.
+
+    Args:
+        request (Request): The FastAPI request object.
+        cursor (Optional[str]): Pagination cursor (base64-encoded project ID).
+        limit (int): Maximum number of projects to return per request.
+
+    Returns:
+        GetProjectsResponseBody: Response containing a list of projects and pagination information.
+
+    Raises:
+        HTTPException: If the cursor format is invalid.
+    """  # noqa: E501
+    async with request.app.state.db() as session:
+        stmt = select(models.Project).order_by(models.Project.id.desc())
+
+        if cursor:
+            try:
+                cursor_id = GlobalID.from_id(cursor).node_id
+                stmt = stmt.filter(models.Project.id <= int(cursor_id))
+            except ValueError:
+                raise HTTPException(
+                    detail=f"Invalid cursor format: {cursor}",
+                    status_code=HTTP_422_UNPROCESSABLE_ENTITY,
+                )
+
+        stmt = stmt.limit(limit + 1)
+        result = await session.execute(stmt)
+        orm_projects = result.scalars().all()
+
+        if not orm_projects:
+            return GetProjectsResponseBody(next_cursor=None, data=[])
+
+        next_cursor = None
+        if len(orm_projects) == limit + 1:
+            last_project = orm_projects[-1]
+            next_cursor = str(GlobalID(ProjectNodeType.__name__, str(last_project.id)))
+            orm_projects = orm_projects[:-1]
+
+        projects = [_project_from_orm_project(orm_project) for orm_project in orm_projects]
+    return GetProjectsResponseBody(next_cursor=next_cursor, data=projects)
+
+
+@router.get(
+    "/projects/{project_id}",
+    operation_id="getProject",
+    summary="Get project by ID",  # noqa: E501
+    description="Retrieve a specific project using its unique identifier.",  # noqa: E501
+    response_description="The requested project",  # noqa: E501
+    responses=add_errors_to_responses(
+        [
+            HTTP_404_NOT_FOUND,
+            HTTP_422_UNPROCESSABLE_ENTITY,
+        ]
+    ),
+)
+async def get_project(
+    request: Request,
+    project_id: str = Path(description="The ID of the project."),
+) -> GetProjectResponseBody:
+    """
+    Retrieve a specific project by its ID.
+
+    Args:
+        request (Request): The FastAPI request object.
+        project_id (str): The ID of the project to retrieve.
+
+    Returns:
+        GetProjectResponseBody: Response containing the requested project.
+
+    Raises:
+        HTTPException: If the project ID is invalid or the project is not found.
+    """  # noqa: E501
+    async with request.app.state.db() as session:
+        try:
+            id_ = from_global_id_with_expected_type(
+                GlobalID.from_id(project_id),
+                ProjectNodeType.__name__,
+            )
+            project = await session.get(models.Project, id_)
+        except ValueError:
+            raise HTTPException(
+                status_code=HTTP_422_UNPROCESSABLE_ENTITY,
+                detail=f"Invalid project ID format: {project_id}",
+            )
+
+        if project is None:
+            raise HTTPException(
+                status_code=HTTP_404_NOT_FOUND,
+                detail=f"Project with ID {project_id} not found",
+            )
+
+    data = _project_from_orm_project(project)
+    return GetProjectResponseBody(data=data)
+
+
+@router.post(
+    "/projects",
+    operation_id="createProject",
+    summary="Create a new project",  # noqa: E501
+    description="Create a new project with the specified configuration.",  # noqa: E501
+    response_description="The newly created project",  # noqa: E501
+    responses=add_errors_to_responses(
+        [
+            HTTP_422_UNPROCESSABLE_ENTITY,
+        ]
+    ),
+)
+async def create_project(
+    request: Request,
+    request_body: CreateProjectRequestBody,
+) -> CreateProjectResponseBody:
+    """
+    Create a new project.
+
+    Args:
+        request (Request): The FastAPI request object.
+        request_body (CreateProjectRequestBody): The request body containing project data.
+
+    Returns:
+        CreateProjectResponseBody: Response containing the created project.
+
+    Raises:
+        HTTPException: If any validation error occurs.
+    """
+    project = request_body.project
+    async with request.app.state.db() as session:
+        project_orm = models.Project(
+            name=project.name,
+            description=project.description,
+        )
+        session.add(project_orm)
+        await session.flush()
+    data = _project_from_orm_project(project_orm)
+    return CreateProjectResponseBody(data=data)
+
+
+@router.put(
+    "/projects/{project_id}",
+    operation_id="updateProject",
+    summary="Update a project",  # noqa: E501
+    description="Update an existing project with new configuration. Project names cannot be changed.",  # noqa: E501
+    response_description="The updated project",  # noqa: E501
+    responses=add_errors_to_responses(
+        [
+            HTTP_403_FORBIDDEN,
+            HTTP_404_NOT_FOUND,
+            HTTP_422_UNPROCESSABLE_ENTITY,
+        ]
+    ),
+)
+async def update_project(
+    request: Request,
+    request_body: UpdateProjectRequestBody,
+    project_id: str = Path(description="The ID of the project to update."),
+) -> UpdateProjectResponseBody:
+    """
+    Update an existing project.
+
+    Args:
+        request (Request): The FastAPI request object.
+        request_body (UpdateProjectRequestBody): The request body containing updated project data.
+        project_id (str): The ID of the project to update.
+
+    Returns:
+        UpdateProjectResponseBody: Response containing the updated project.
+
+    Raises:
+        HTTPException: If the project ID is invalid, the project is not found, or the name is changed.
+    """  # noqa: E501
+    if request.app.state.authentication_enabled:
+        async with request.app.state.db() as session:
+            # Check if the user is an admin
+            stmt = (
+                select(models.UserRole.name)
+                .join(models.User)
+                .where(models.User.id == int(request.user.identity))
+            )
+            role_name = await session.scalar(stmt)
+        if role_name != UserRole.ADMIN.value:
+            raise HTTPException(
+                status_code=HTTP_403_FORBIDDEN,
+                detail="Only admins can update projects",
+            )
+    async with request.app.state.db() as session:
+        try:
+            id_ = from_global_id_with_expected_type(
+                GlobalID.from_id(project_id),
+                ProjectNodeType.__name__,
+            )
+            project_orm = await session.get(models.Project, id_)
+        except ValueError:
+            raise HTTPException(
+                status_code=HTTP_422_UNPROCESSABLE_ENTITY,
+                detail=f"Invalid project ID format: {project_id}",
+            )
+
+        if project_orm is None:
+            raise HTTPException(
+                status_code=HTTP_404_NOT_FOUND,
+                detail=f"Project with ID {project_id} not found",
+            )
+
+        # Prevent changing the project name
+        if project_orm.name != request_body.project.name:
+            raise HTTPException(
+                status_code=HTTP_422_UNPROCESSABLE_ENTITY,
+                detail="Project names cannot be changed",
+            )
+
+        # Only update the description
+        project_orm.description = request_body.project.description
+
+    data = _project_from_orm_project(project_orm)
+    return UpdateProjectResponseBody(data=data)
+
+
+@router.delete(
+    "/projects/{project_id}",
+    operation_id="deleteProject",
+    summary="Delete a project",  # noqa: E501
+    description="Delete an existing project and all its associated data.",  # noqa: E501
+    response_description="No content returned on successful deletion",  # noqa: E501
+    status_code=HTTP_204_NO_CONTENT,
+    responses=add_errors_to_responses(
+        [
+            HTTP_403_FORBIDDEN,
+            HTTP_404_NOT_FOUND,
+            HTTP_422_UNPROCESSABLE_ENTITY,
+        ]
+    ),
+)
+async def delete_project(
+    request: Request,
+    project_id: str = Path(description="The ID of the project to delete."),
+) -> None:
+    """
+    Delete an existing project.
+
+    Args:
+        request (Request): The FastAPI request object.
+        project_id (str): The ID of the project to delete.
+
+    Returns:
+        None: Returns a 204 No Content response on success.
+
+    Raises:
+        HTTPException: If the project ID is invalid, the project is not found, or it's the default project.
+    """  # noqa: E501
+    if request.app.state.authentication_enabled:
+        async with request.app.state.db() as session:
+            # Check if the user is an admin
+            stmt = (
+                select(models.UserRole.name)
+                .join(models.User)
+                .where(models.User.id == int(request.user.identity))
+            )
+            role_name = await session.scalar(stmt)
+        if role_name != UserRole.ADMIN.value:
+            raise HTTPException(
+                status_code=HTTP_403_FORBIDDEN,
+                detail="Only admins can delete projects",
+            )
+    async with request.app.state.db() as session:
+        try:
+            id_ = from_global_id_with_expected_type(
+                GlobalID.from_id(project_id),
+                ProjectNodeType.__name__,
+            )
+            project = await session.get(models.Project, id_)
+        except ValueError:
+            raise HTTPException(
+                status_code=HTTP_422_UNPROCESSABLE_ENTITY,
+                detail=f"Invalid project ID format: {project_id}",
+            )
+
+        if project is None:
+            raise HTTPException(
+                status_code=HTTP_404_NOT_FOUND,
+                detail=f"Project with ID {project_id} not found",
+            )
+
+        # The default project must not be deleted - it's forbidden
+        if project.name == DEFAULT_PROJECT_NAME:
+            raise HTTPException(
+                status_code=HTTP_403_FORBIDDEN,
+                detail="The default project cannot be deleted",
+            )
+
+        await session.delete(project)
+    return None
+
+
+def _project_from_orm_project(orm_project: models.Project) -> Project:
+    return Project(
+        id=str(GlobalID(ProjectNodeType.__name__, str(orm_project.id))),
+        name=orm_project.name,
+        description=orm_project.description,
+    )

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/src/phoenix/server/app.py

@@ -24,6 +24,7 @@ from urllib.parse import urlparse
 
 import strawberry
 from fastapi import APIRouter, Depends, FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 from fastapi.middleware.gzip import GZipMiddleware
 from fastapi.utils import is_body_allowed_for_status_code
 from grpc.aio import ServerInterceptor
@@ -765,6 +766,7 @@ def create_app(
     email_sender: Optional[EmailSender] = None,
     oauth2_client_configs: Optional[list[OAuth2ClientConfig]] = None,
     bulk_inserter_factory: Optional[Callable[..., BulkInserter]] = None,
+    allowed_origins: Optional[list[str]] = None,
 ) -> FastAPI:
     if model.embedding_dimensions:
         try:
@@ -948,6 +950,14 @@ def create_app(
         FastAPIInstrumentor().instrument(tracer_provider=tracer_provider)
         FastAPIInstrumentor.instrument_app(app, tracer_provider=tracer_provider)
         shutdown_callbacks_list.append(FastAPIInstrumentor().uninstrument)
+    if allowed_origins:
+        app.add_middleware(
+            CORSMiddleware,
+            allow_origins=allowed_origins,
+            allow_credentials=True,
+            allow_methods=["*"],
+            allow_headers=["*"],
+        )
     return app
 
 

{arize_phoenix-8.22.1 → arize_phoenix-8.23.0}/src/phoenix/server/main.py

@@ -16,6 +16,7 @@ import phoenix.trace.v1 as pb
 from phoenix.config import (
     EXPORT_DIR,
     get_env_access_token_expiry,
+    get_env_allowed_origins,
     get_env_auth_settings,
     get_env_database_connection_str,
     get_env_database_schema,
@@ -98,6 +99,7 @@ _WELCOME_MESSAGE = Environment(loader=BaseLoader()).from_string("""
 |  Phoenix UI: {{ ui_path }}
 |  Authentication: {{ auth_enabled }}
 |  Websockets: {{ websockets_enabled }}
+{%- if allowed_origins %}\n|  Allowed Origins: {{ allowed_origins }}{% endif %}
 |  Log traces:
 |    - gRPC: {{ grpc_path }}
 |    - HTTP: {{ http_path }}
@@ -359,6 +361,8 @@ def main() -> None:
     if enable_websockets is None:
         enable_websockets = True
 
+    allowed_origins = get_env_allowed_origins()
+
     # Print information about the server
     root_path = urljoin(f"http://{host}:{port}", host_root_path)
     msg = _WELCOME_MESSAGE.render(
@@ -370,6 +374,7 @@ def main() -> None:
         schema=get_env_database_schema(),
         auth_enabled=authentication_enabled,
         websockets_enabled=enable_websockets,
+        allowed_origins=allowed_origins,
     )
     if sys.platform.startswith("win"):
         msg = codecs.encode(msg, "ascii", errors="ignore").decode("ascii").strip()
@@ -419,6 +424,7 @@ def main() -> None:
         scaffolder_config=scaffolder_config,
         email_sender=email_sender,
         oauth2_client_configs=get_env_oauth2_settings(),
+        allowed_origins=allowed_origins,
     )
     server = Server(config=Config(app, host=host, port=port, root_path=host_root_path))  # type: ignore
     Thread(target=_write_pid_file_when_ready, args=(server,), daemon=True).start()