arize-phoenix 8.30.0__tar.gz → 8.32.0__tar.gz

{arize_phoenix-8.30.0 → arize_phoenix-8.32.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arize-phoenix
-Version: 8.30.0
+Version: 8.32.0
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://docs.arize.com/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues
@@ -248,6 +248,7 @@ Join our community to connect with thousands of AI builders.
 - 🐞 Report bugs with [GitHub Issues](https://github.com/Arize-ai/phoenix/issues).
 - 𝕏 Follow us on [𝕏](https://twitter.com/ArizePhoenix).
 - 🗺️ Check out our [roadmap](https://github.com/orgs/Arize-ai/projects/45) to see where we're heading next.
+- 🧑‍🏫 Deep dive into everything [Agents](http://arize.com/ai-agents/) and [LLM Evaluations](https://arize.com/llm-evaluation) on Arize's Learning Hubs.
 
 ## Breaking Changes
 

{arize_phoenix-8.30.0 → arize_phoenix-8.32.0}/README.md

@@ -118,6 +118,7 @@ Join our community to connect with thousands of AI builders.
 - 🐞 Report bugs with [GitHub Issues](https://github.com/Arize-ai/phoenix/issues).
 - 𝕏 Follow us on [𝕏](https://twitter.com/ArizePhoenix).
 - 🗺️ Check out our [roadmap](https://github.com/orgs/Arize-ai/projects/45) to see where we're heading next.
+- 🧑‍🏫 Deep dive into everything [Agents](http://arize.com/ai-agents/) and [LLM Evaluations](https://arize.com/llm-evaluation) on Arize's Learning Hubs.
 
 ## Breaking Changes
 

{arize_phoenix-8.30.0 → arize_phoenix-8.32.0}/src/phoenix/db/engines.py

@@ -1,10 +1,13 @@
+from __future__ import annotations
+
 import asyncio
 import json
+import logging
 from collections.abc import Callable
 from datetime import datetime
 from enum import Enum
 from sqlite3 import Connection
-from typing import Any, Mapping
+from typing import Any
 
 import aiosqlite
 import numpy as np
@@ -18,10 +21,13 @@ from phoenix.config import LoggingMode, get_env_database_schema
 from phoenix.db.helpers import SupportedSQLDialect
 from phoenix.db.migrate import migrate_in_thread
 from phoenix.db.models import init_models
+from phoenix.db.pg_config import get_pg_config
 from phoenix.settings import Settings
 
 sqlean.extensions.enable("text", "stats")
 
+logger = logging.getLogger(__name__)
+
 
 def set_sqlite_pragma(connection: Connection, _: Any) -> None:
     cursor = connection.cursor()
@@ -163,15 +169,20 @@ def aio_postgresql_engine(
     log_to_stdout: bool = False,
     log_migrations_to_stdout: bool = True,
 ) -> AsyncEngine:
+    asyncpg_url, asyncpg_args = get_pg_config(url, "asyncpg")
     engine = create_async_engine(
-        url=url.set(query=_asyncpg_url_query(url.query)),
+        url=asyncpg_url,
+        connect_args=asyncpg_args,
         echo=log_to_stdout,
         json_serializer=_dumps,
     )
     if not migrate:
         return engine
+
+    psycopg_url, psycopg_args = get_pg_config(url, "psycopg")
     sync_engine = sqlalchemy.create_engine(
-        url=url.set(drivername="postgresql+psycopg", query=_psycopg_url_query(url.query)),
+        url=psycopg_url,
+        connect_args=psycopg_args,
         echo=log_migrations_to_stdout,
         json_serializer=_dumps,
     )
@@ -181,24 +192,6 @@ def aio_postgresql_engine(
     return engine
 
 
-def _asyncpg_url_query(query: Mapping[str, Any]) -> dict[str, Any]:
-    ans = dict(query)
-    if sslmode := (ans.pop("sslmode", None) or ans.pop("ssl", None)):
-        # https://github.com/MagicStack/asyncpg/issues/737
-        ans["ssl"] = sslmode
-    return ans
-
-
-def _psycopg_url_query(query: Mapping[str, Any]) -> dict[str, Any]:
-    ans = dict(query)
-    if sslmode := (ans.pop("sslmode", None) or ans.pop("ssl", None)):
-        ans["sslmode"] = sslmode
-    # prepared_statement_cache_size is only used by asyncpg, see:
-    # https://docs.sqlalchemy.org/en/20/dialects/postgresql.html#prepared-statement-cache
-    ans.pop("prepared_statement_cache_size", None)
-    return ans
-
-
 def _dumps(obj: Any) -> str:
     return json.dumps(obj, cls=_Encoder)
 

arize_phoenix-8.32.0/src/phoenix/db/pg_config.py

@@ -0,0 +1,197 @@
+from __future__ import annotations
+
+import ssl
+from typing import Any, Container, Final, Literal, Mapping, TypedDict, get_type_hints
+
+from sqlalchemy import URL
+from typing_extensions import assert_never
+
+
+def get_pg_config(
+    url: URL,
+    driver: Literal["psycopg", "asyncpg"],
+) -> tuple[URL, dict[str, Any]]:
+    """Convert SQLAlchemy URL to driver-specific configuration.
+
+    Args:
+        url: SQLAlchemy URL
+        driver: "psycopg" or "asyncpg"
+
+    Returns:
+        Tuple of (base_url, connect_args):
+        - base_url: URL with driver prefix and non-SSL parameters
+        - connect_args: SSL configuration for the driver
+    """
+    # Create new URL with appropriate driver
+    query = url.query
+    ssl_args = _get_ssl_args(query)
+
+    # Create base URL without SSL parameters
+    base_url = url.set(
+        drivername=f"postgresql+{driver}",
+        query={k: v for k, v in query.items() if k not in _SSL_KEYS},
+    )
+
+    # Get appropriate SSL configuration based on driver
+    if driver == "psycopg":
+        connect_args = dict(ssl_args)
+        # Remove asyncpg-specific parameters from base URL
+        base_url = base_url.set(query=_remove_asyncpg_only_params(base_url.query))
+    elif driver == "asyncpg":
+        # Only create SSL context if we have SSL parameters and sslmode is not disable
+        if ssl_args and ssl_args.get("sslmode") != "disable":
+            connect_args = {"ssl": _get_ssl_context(ssl_args)}
+        else:
+            connect_args = {}
+    else:
+        assert_never(driver)
+    return base_url, connect_args
+
+
+class _SSLArgs(TypedDict, total=False):
+    """SSL parameters for PostgreSQL connections.
+
+    All fields are optional. Only includes parameters that can be converted to ssl.SSLContext.
+
+    Attributes:
+        sslmode: SSL mode (disable, allow, prefer, require, verify-ca, verify-full)
+        sslrootcert: Path to root CA certificate
+        sslcert: Path to client certificate
+        sslkey: Path to client private key
+        sslpassword: Password for private key
+        sslcrl: Path to CRL file
+        sslcrldir: Path to CRL directory
+        sslsni: Enable SNI (0 or 1)
+    """
+
+    sslmode: str
+    sslrootcert: str
+    sslcert: str
+    sslkey: str
+    sslpassword: str
+    sslcrl: str
+    sslcrldir: str
+    sslsni: str
+
+
+_SSL_KEYS: Final[Container[str]] = get_type_hints(_SSLArgs).keys()
+
+
+def _get_ssl_args(
+    query_params: Mapping[str, str | tuple[str, ...]],
+) -> _SSLArgs:
+    """Extract SSL parameters from a SQLAlchemy URL query.
+
+    Args:
+        query_params: SQLAlchemy URL query parameters
+
+    Returns:
+        Dictionary of SSL parameters
+    """
+    result: _SSLArgs = {}
+
+    def get_str(key: str) -> str | None:
+        if value := query_params.get(key):
+            if not isinstance(value, str):
+                raise ValueError(f"Invalid value type for {key}: {type(value)}")
+            return value
+        return None
+
+    if sslmode := get_str("sslmode"):
+        result["sslmode"] = sslmode
+
+    if ca_cert := get_str("sslrootcert"):
+        result["sslrootcert"] = ca_cert
+
+    if cert := get_str("sslcert"):
+        result["sslcert"] = cert
+
+    if key := get_str("sslkey"):
+        result["sslkey"] = key
+
+    if password := get_str("sslpassword"):
+        result["sslpassword"] = password
+
+    if crl := get_str("sslcrl"):
+        result["sslcrl"] = crl
+
+    if crl_dir := get_str("sslcrldir"):
+        result["sslcrldir"] = crl_dir
+
+    if sslsni := get_str("sslsni"):
+        result["sslsni"] = sslsni
+
+    return result
+
+
+def _get_ssl_context(ssl_args: _SSLArgs) -> ssl.SSLContext:
+    """Convert PostgreSQL SSL parameters to an SSL context.
+
+    Args:
+        ssl_args: PostgreSQL SSL parameters from _SSLArgs TypedDict
+
+    Returns:
+        Configured SSL context with:
+        - Root CA certificate for server verification (if provided)
+        - Client certificate and key for mutual TLS (if provided)
+        - SSL mode appropriate verification settings
+        - Certificate revocation list checking (if provided)
+    """
+    # Create SSL context
+    ssl_context = ssl.create_default_context()
+
+    # Load CA certificate if provided
+    if ca_cert := ssl_args.get("sslrootcert"):
+        ssl_context.load_verify_locations(cafile=ca_cert)
+
+    # Load client certificates if provided
+    if (cert := ssl_args.get("sslcert")) and (key := ssl_args.get("sslkey")):
+        ssl_context.load_cert_chain(
+            certfile=cert,
+            keyfile=key,
+            password=ssl_args.get("sslpassword"),
+        )
+
+    # Load CRL if provided
+    if crl := ssl_args.get("sslcrl"):
+        ssl_context.load_verify_locations(cafile=crl)
+    if crl_dir := ssl_args.get("sslcrldir"):
+        ssl_context.load_verify_locations(capath=crl_dir)
+
+    # Set verification mode based on sslmode
+    sslmode = ssl_args.get("sslmode", "prefer")
+    if sslmode == "verify-full":
+        # Full verification: certificate and hostname
+        ssl_context.check_hostname = True
+        ssl_context.verify_mode = ssl.CERT_REQUIRED
+    elif sslmode == "verify-ca":
+        # Certificate verification only
+        ssl_context.check_hostname = False
+        ssl_context.verify_mode = ssl.CERT_REQUIRED
+    else:  # require, prefer, allow, disable
+        # No verification, just encryption
+        ssl_context.check_hostname = False
+        ssl_context.verify_mode = ssl.CERT_NONE
+
+    return ssl_context
+
+
+def _remove_asyncpg_only_params(
+    query: Mapping[str, str | tuple[str, ...]],
+) -> dict[str, str | tuple[str, ...]]:
+    """Remove asyncpg-specific parameters from a SQLAlchemy URL query.
+
+    Args:
+        query: SQLAlchemy URL query parameters
+
+    Returns:
+        Dictionary of query parameters with asyncpg-specific parameters removed
+    """
+    return {k: v for k, v in query.items() if k not in _ASYNCPG_ONLY_KEYS}
+
+
+# Asyncpg-specific parameter keys
+_ASYNCPG_ONLY_KEYS: Final[tuple[str, ...]] = (
+    "prepared_statement_cache_size",
+    # Add other asyncpg-specific parameters here if needed
+)

{arize_phoenix-8.30.0 → arize_phoenix-8.32.0}/src/phoenix/server/static/.vite/manifest.json

@@ -1,22 +1,22 @@
 {
-  "_components-BypB0fGT.js": {
-    "file": "assets/components-BypB0fGT.js",
+  "_components-x-gKFJ8C.js": {
+    "file": "assets/components-x-gKFJ8C.js",
     "name": "components",
     "imports": [
       "_vendor-BfhM_F1u.js",
-      "_pages-DGdjQlsy.js",
+      "_pages-BU4VdyeH.js",
       "_vendor-arizeai-CxXYQNUl.js",
       "_vendor-codemirror-B0NIFPOL.js",
       "_vendor-three-C5WAXd5r.js"
     ]
   },
-  "_pages-DGdjQlsy.js": {
-    "file": "assets/pages-DGdjQlsy.js",
+  "_pages-BU4VdyeH.js": {
+    "file": "assets/pages-BU4VdyeH.js",
     "name": "pages",
     "imports": [
       "_vendor-BfhM_F1u.js",
       "_vendor-arizeai-CxXYQNUl.js",
-      "_components-BypB0fGT.js",
+      "_components-x-gKFJ8C.js",
       "_vendor-codemirror-B0NIFPOL.js",
       "_vendor-recharts-CrrDFWK1.js"
     ]
@@ -69,15 +69,15 @@
     "name": "vendor-three"
   },
   "index.tsx": {
-    "file": "assets/index-Ccebc6-h.js",
+    "file": "assets/index-B0CbpsxD.js",
     "name": "index",
     "src": "index.tsx",
     "isEntry": true,
     "imports": [
       "_vendor-BfhM_F1u.js",
       "_vendor-arizeai-CxXYQNUl.js",
-      "_pages-DGdjQlsy.js",
-      "_components-BypB0fGT.js",
+      "_pages-BU4VdyeH.js",
+      "_components-x-gKFJ8C.js",
       "_vendor-three-C5WAXd5r.js",
       "_vendor-codemirror-B0NIFPOL.js",
       "_vendor-shiki-C5bJ-RPf.js",