langgraph-api 0.14.0.dev9__tar.gz → 0.14.0.dev10__tar.gz

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/Makefile

@@ -1,4 +1,4 @@
-.PHONY: build release lint format test test_watch start start-inmem start-inmem-license-oss start start-js-server build-go-server start-go-server stop-go-server check-version check-base-imports test-a2a-tck test-a2a-tck-mandatory start-test-a2a-tck start-test-a2a-tck-mandatory start-test-a2a-tck-watch test-mcp-conformance start-test-mcp-conformance list-mcp-scenarios test-auth-read-only-assistant
+.PHONY: build release lint format test test_watch start start-inmem start-inmem-license-oss start build-go-server start-go-server stop-go-server check-version check-base-imports test-a2a-tck test-a2a-tck-mandatory start-test-a2a-tck start-test-a2a-tck-mandatory start-test-a2a-tck-watch test-mcp-conformance start-test-mcp-conformance list-mcp-scenarios test-auth-read-only-assistant
 
 # Environment variables
 LANGSERVE_GRAPHS_ALL = '{"agent": {"path": "./tests/graphs/agent.py:graph", "description": "agent"}, "assistant_id_runtime": "./tests/graphs/assistant_id_runtime.py:graph", "custom_lifespan": "./tests/graphs/my_router.py:graph", "single_node": "./tests/graphs/single_node.py:graph", "benchmark": "./tests/graphs/benchmark.py:graph", "config_graph": "./tests/graphs/config_graph.py:graph", "other": "./tests/graphs/other.py:make_graph", "weather": "./tests/graphs/weather.py:mk_weather_graph", "searchy": "./tests/graphs/searchy.py:graph", "agent_simple": "./tests/graphs/agent_simple.py:graph", "simple_runtime": "./tests/graphs/simple_runtime.py:graph", "agent_interrupt": "./tests/graphs/agent_interrupt.py:graph", "agent_parallel_interrupt": "./tests/graphs/agent_parallel_interrupt.py:graph", "message_type_test": "./tests/graphs/message_type_test.py:graph", "remote_subgraph_parent": "./tests/graphs/remote_subgraph_parent.py:graph", "simple_remote": "./tests/graphs/simple_remote.py:graph", "nested_subgraphs": "./tests/graphs/nested_subgraphs.py:graph", "functional_fibonacci": "./tests/graphs/functional_fibonacci.py:fibonacci", "state_graph_fibonacci": "./tests/graphs/state_graph_fibonacci.py:fibonacci", "max_concurrency_graph": "./tests/graphs/max_concurrency_graph.py:graph", "unserializable_subgraph": "./tests/graphs/unserializable_subgraph.py:graph", "agent_interrupt_text": "./tests/graphs/agent_interrupt_text.py:graph", "agent_echo_stream": "./tests/graphs/agent_echo_stream.py:graph", "agent_tool_stream": "./tests/graphs/agent_tool_stream.py:graph", "runtime_graph": "./tests/graphs/runtime_graph.py:graph", "tool_call_chunk_stream": "./tests/graphs/tool_call_chunk_stream.py:graph", "ui_tool_call_stream": "./tests/graphs/ui_tool_call_stream.py:graph", "agent_metrics_stream": "./tests/graphs/agent_metrics_stream.py:graph", "agent_multimodal_stream": "./tests/graphs/agent_multimodal_stream.py:graph", "agent_bedtime_story": "./tests/graphs/agent_bedtime_story.py:graph", "delta_channel": "./tests/graphs/delta_channel.py:graph", "delta_channel_freq": "./tests/graphs/delta_channel_freq.py:graph", "delta_channel_files": "./tests/graphs/delta_channel_files.py:graph", "delta_channel_files_freq": "./tests/graphs/delta_channel_files_freq.py:graph", "delta_channel_legacy": "./tests/graphs/delta_channel_migration.py:graph_legacy", "delta_channel_delta": "./tests/graphs/delta_channel_migration.py:graph_delta", "delta_channel_delta_filter": "./tests/graphs/delta_channel_migration.py:graph_delta_filter", "delta_channel_messages_freq": "./tests/graphs/delta_channel_messages.py:graph_freq", "delta_channel_messages": "./tests/graphs/delta_channel_messages.py:graph", "delta_channel_messages_legacy": "./tests/graphs/delta_channel_messages.py:graph_legacy", "delta_channel_messages_remove": "./tests/graphs/delta_channel_messages.py:graph_remove", "delta_channel_messages_update": "./tests/graphs/delta_channel_messages.py:graph_update", "delta_channel_messages_delta": "./tests/graphs/delta_channel_messages.py:graph_delta", "store_e2e_async": "./tests/graphs/store_e2e.py:graph_async", "store_e2e_sync": "./tests/graphs/store_e2e.py:graph_sync"}'
@@ -292,22 +292,6 @@ start-auth-fastapi-jwt--after-custom-middleware--custom-route-auth:
 	$(call RUN_FASTAPI_JWT_MW_ORDERING,middleware_first,true)
 
 
-start-js-server:
-	@echo "Building and starting Go gRPC server..."
-	$(MAKE) build-go-server
-	$(MAKE) start-go-server
-	@trap '$(MAKE) -C $(CURDIR) stop-go-server' INT TERM EXIT; \
-	echo "Installing JS server dependencies..."; \
-	cd ../public-api-server-js && yarn install; \
-	echo "Building JS server..."; \
-	cd ../public-api-server-js && yarn run build; \
-	echo "Starting JS server on port 9123..."; \
-	cd ../public-api-server-js && \
-	LANGSERVE_GRAPHS=$(LANGSERVE_GRAPHS_ALL) \
-	LANGGRAPH_CONFIG='{"agent": {"configurable": {"model_name": "openai"}}}' \
-	FF_USE_JS_API=true \
-	PORT=9123 yarn start
-
 VERSION_KIND ?= patch
 
 bump-version:

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: langgraph-api
-Version: 0.14.0.dev9
+Version: 0.14.0.dev10
 Author-email: Will Fu-Hinthorn <will@langchain.dev>, Josh Rogers <josh@langchain.dev>, Parker Rule <parker@langchain.dev>
 License: Elastic-2.0
 License-File: LICENSE

langgraph_api-0.14.0.dev10/langgraph_api/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.14.0.dev10"

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/langgraph_api/encryption/custom.py

@@ -9,10 +9,21 @@ from __future__ import annotations
 import functools
 import importlib.util
 import sys
+from dataclasses import dataclass
 from typing import TYPE_CHECKING, Any, Literal, get_args
 
 import structlog
 
+try:
+    from langgraph_sdk import DecryptResult
+except ImportError:  # minimum-deps image predates SDK re-encryption support
+
+    @dataclass
+    class DecryptResult:
+        plaintext: Any
+        replacement: Any | None = None
+
+
 from langgraph_api import timing
 from langgraph_api.config import LANGGRAPH_ENCRYPTION
 from langgraph_api.encryption.shared import (
@@ -33,6 +44,10 @@ SUPPORTED_ENCRYPTION_MODELS: frozenset[str] = frozenset(get_args(ModelType))
 logger = structlog.stdlib.get_logger(__name__)
 
 
+def normalize_decrypt_result(result: Any) -> DecryptResult:
+    return result if isinstance(result, DecryptResult) else DecryptResult(result)
+
+
 @functools.lru_cache(maxsize=1)
 def get_custom_encryption_instance() -> Encryption | None:
     """Get the custom (SDK-injected) encryption instance if configured.
@@ -232,7 +247,9 @@ class JsonEncryptionWrapper:
 
         return encryptor
 
-    def get_json_decryptor(self, model_type: ModelType) -> JsonDecryptor:
+    def get_json_decryptor(
+        self, model_type: ModelType, *, with_replacement: bool = False
+    ) -> JsonDecryptor:
         """Return an async decryptor that routes based on encryption type.
 
         The decryptor routes based on __encryption_context__ marker:
@@ -287,8 +304,21 @@ class JsonEncryptionWrapper:
 
             # Strip marker and decrypt
             data = strip_encryption_metadata(data)
-            decrypted = await custom_decryptor(ctx, data)
-            return strip_encryption_metadata(decrypted)
+            decrypted = normalize_decrypt_result(await custom_decryptor(ctx, data))
+            plaintext = strip_encryption_metadata(decrypted.plaintext)
+            replacement = decrypted.replacement
+            if replacement is not None:
+                try:
+                    replacement = dict(replacement)
+                    replacement[ENCRYPTION_CONTEXT_KEY] = context_dict
+                except (TypeError, ValueError):
+                    await logger.aerror(
+                        "Ignoring invalid re-encryption replacement",
+                        model=model_type,
+                    )
+                    replacement = None
+            result = DecryptResult(plaintext, replacement)
+            return result if with_replacement else result.plaintext
 
         return decryptor
 

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/langgraph_api/feature_flags.py

@@ -17,12 +17,6 @@ USE_DURABILITY = LANGGRAPH_PY_MINOR >= (0, 6)
 _RUNTIME_EDITION = os.getenv("LANGGRAPH_RUNTIME_EDITION", "inmem")
 IS_POSTGRES_BACKEND = _RUNTIME_EDITION == "postgres"
 IS_POSTGRES_OR_GRPC_BACKEND = IS_POSTGRES_BACKEND
-# Not in public docs: internal feature flag
-FF_USE_JS_API = os.getenv("FF_USE_JS_API", "false").lower() in (
-    "true",
-    "1",
-    "yes",
-)
 # Server-side kill switch for the Protocol v2 event-streaming surface
 # (#3296). When false, the v2 routes are not registered (clients hit a
 # 404), and ``_create_or_resume_run`` rejects any direct call with a

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/langgraph_api/grpc/servicers/encryption.py

@@ -19,7 +19,12 @@ from langgraph_grpc_common.proto.encryption_pb2 import (
 from langgraph_grpc_common.proto.encryption_pb2_grpc import EncryptionServicer
 from langgraph_sdk import EncryptionContext
 
-from langgraph_api.encryption.custom import get_custom_encryption_instance
+from langgraph_api.encryption.custom import (
+    DecryptResult,
+    JsonEncryptionWrapper,
+    get_custom_encryption_instance,
+    normalize_decrypt_result,
+)
 from langgraph_api.encryption.middleware import _extract_skip_fields
 from langgraph_api.encryption.shared import BLOB_ENCRYPTION_CONTEXT_KEY, get_encryption
 from langgraph_api.schema import NESTED_ENCRYPTED_SUBFIELDS
@@ -103,7 +108,7 @@ class EncryptionServicerImpl(EncryptionServicer):
         metadata: dict[str, bytes],
         encryptor,
         path: str | None = None,
-    ) -> dict[str, Any]:
+    ) -> Any:
         """Encrypt a field, handling nested subfields defined in NESTED_ENCRYPTED_SUBFIELDS.
 
         This mirrors the middleware's _encrypt_field behavior:
@@ -182,6 +187,8 @@ class EncryptionServicerImpl(EncryptionServicer):
         model_type: str | None,
         field_name: str,
         decryptor,
+        *,
+        with_replacement: bool = False,
     ) -> dict[str, Any]:
         """Decrypt a field, handling nested subfields defined in NESTED_ENCRYPTED_SUBFIELDS.
 
@@ -196,7 +203,9 @@ class EncryptionServicerImpl(EncryptionServicer):
         stored_ctx = data.get(ENCRYPTION_CONTEXT_KEY)
         metadata = stored_ctx if isinstance(stored_ctx, dict) else {}
         ctx = EncryptionContext(model=model_type, field=field_name, metadata=metadata)
-        decrypted = await decryptor(ctx, data)
+        result = normalize_decrypt_result(await decryptor(ctx, data))
+        decrypted = result.plaintext
+        replacement = result.replacement
 
         # Check for nested subfields that need recursive decryption
         # Only look up in NESTED_ENCRYPTED_SUBFIELDS when model_type is defined
@@ -214,7 +223,11 @@ class EncryptionServicerImpl(EncryptionServicer):
                     subfield_names.append(sf_name)
                     subfield_tasks.append(
                         self._decrypt_field_recursive(
-                            sf_value, model_type, sf_name, decryptor
+                            sf_value,
+                            model_type,
+                            sf_name,
+                            decryptor,
+                            with_replacement=True,
                         )
                     )
 
@@ -223,9 +236,14 @@ class EncryptionServicerImpl(EncryptionServicer):
                 for sf_name, sf_decrypted in zip(
                     subfield_names, subfield_results, strict=True
                 ):
-                    decrypted[sf_name] = sf_decrypted
+                    decrypted[sf_name] = sf_decrypted.plaintext
+                    if sf_decrypted.replacement is not None:
+                        if replacement is None:
+                            replacement = dict(data)
+                        replacement[sf_name] = sf_decrypted.replacement
 
-        return decrypted
+        result = DecryptResult(decrypted, replacement)
+        return result if with_replacement else result.plaintext
 
     async def EncryptJSON(
         self,
@@ -300,26 +318,50 @@ class EncryptionServicerImpl(EncryptionServicer):
             model_type: ModelType | None = request.model or None
             field = request.field or None
 
-            decryptor = encryption_instance.get_json_decryptor(model_type)
+            decryptor = (
+                encryption_instance.get_json_decryptor(
+                    model_type, with_replacement=True
+                )
+                if isinstance(encryption_instance, JsonEncryptionWrapper)
+                else encryption_instance.get_json_decryptor(model_type)
+            )
             if decryptor is None:
                 model_err = f"No decryptor configured for model type: {model_type}"
                 context.set_code(grpc.StatusCode.INVALID_ARGUMENT)
                 context.set_details(model_err)
                 raise RuntimeError(model_err)
 
-            decrypted = await self._decrypt_field_recursive(
-                data, model_type, field or "", decryptor
+            result = await self._decrypt_field_recursive(
+                data,
+                model_type,
+                field or "",
+                decryptor,
+                with_replacement=True,
             )
+            decrypted = result.plaintext
+            replacement = result.replacement
 
             # Restore __blob_encryption_context__ so that internal consumers
             # (e.g., the cron scheduler) can recover the original encryption
             # context when creating downstream runs.
             if blob_enc_ctx is not None and isinstance(decrypted, dict):
                 decrypted[BLOB_ENCRYPTION_CONTEXT_KEY] = blob_enc_ctx
+            if blob_enc_ctx is not None and isinstance(replacement, dict):
+                replacement[BLOB_ENCRYPTION_CONTEXT_KEY] = blob_enc_ctx
 
             decrypted_bytes = orjson.dumps(decrypted)
+            replacement_bytes = None
+            if replacement is not None:
+                try:
+                    replacement_bytes = orjson.dumps(replacement)
+                except (TypeError, ValueError):
+                    await logger.aerror(
+                        "Ignoring unserializable re-encryption replacement",
+                        model=model_type,
+                        field=field,
+                    )
 
-            return DecryptResponse(data=decrypted_bytes)
+            return DecryptResponse(data=decrypted_bytes, replacement=replacement_bytes)
 
         except Exception as e:
             await logger.aerror("DecryptJSON failed", error=str(e), exc_info=True)
@@ -379,8 +421,12 @@ class EncryptionServicerImpl(EncryptionServicer):
                 request.context.field or None,
                 dict(request.context.metadata),
             )
-            decrypted = await encryption_instance._blob_decryptor(enc_ctx, request.data)
-            return DecryptResponse(data=decrypted)
+            result = normalize_decrypt_result(
+                await encryption_instance._blob_decryptor(enc_ctx, request.data)
+            )
+            return DecryptResponse(
+                data=result.plaintext, replacement=result.replacement
+            )
         except Exception as e:
             await logger.aerror("DecryptBlob failed", error=str(e), exc_info=True)
             if context.code() is None:

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/langgraph_api/js/package.json

@@ -10,9 +10,9 @@
     "@hono/node-server": "^2.1.0",
     "@hono/zod-validator": "^0.9.0",
     "@langchain/core": "^1.2.3",
-    "@langchain/langgraph": "^1.4.9",
+    "@langchain/langgraph": "^1.4.12",
     "@langchain/langgraph-api": "^1.0.3",
-    "@langchain/langgraph-checkpoint": "^1.1.3",
+    "@langchain/langgraph-checkpoint": "^1.1.5",
     "@langchain/langgraph-ui": "^1.4.3",
     "@types/json-schema": "^7.0.15",
     "dedent": "^1.7.2",

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/langgraph_api/js/yarn.lock

@@ -315,12 +315,12 @@
     winston-console-format "^1.0.8"
     zod "^3.25.76 || ^4"
 
-"@langchain/langgraph-checkpoint@^1.1.3":
-  version "1.1.3"
-  resolved "https://registry.yarnpkg.com/@langchain/langgraph-checkpoint/-/langgraph-checkpoint-1.1.3.tgz#891f2f9a2e96cf2ab0920f9240f9ad1e0a86a4ab"
-  integrity sha512-wgzdQNeEsdw1e+4lvlj0tdq/RYR/k1vPin10g0ymGoehZDDgd9nvIllGXSXN4TFgF9sf5qQP/KTkOcLfeseIhA==
+"@langchain/langgraph-checkpoint@^1.1.5":
+  version "1.1.5"
+  resolved "https://registry.yarnpkg.com/@langchain/langgraph-checkpoint/-/langgraph-checkpoint-1.1.5.tgz#c793177f9afcce31a1e9922f317f88fec1254282"
+  integrity sha512-BwDwl5VeTOh6CVuiIPgsUgfK51vTJDMSbFcSCUfjJWsl8/DPdK/mbv+ejxJstkSk/BlSPMP4JfXWcN6jD2ea2Q==
 
-"@langchain/langgraph-sdk@^1.5.4", "@langchain/langgraph-sdk@~1.9.28":
+"@langchain/langgraph-sdk@^1.5.4":
   version "1.9.28"
   resolved "https://registry.yarnpkg.com/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.28.tgz#1664cc7b6f2c1509ddffecf17d805a26e70a7e1a"
   integrity sha512-4j3XuM0PvtmAbL8mPfBS99ez3+ytRfgbOpAR/nOeaejTRF3Q9dNw2QnaGLGng8wLPtGLoSj+SYgUOVxy9Bv9vg==
@@ -330,6 +330,16 @@
     p-queue "^9.0.1"
     p-retry "^7.1.1"
 
+"@langchain/langgraph-sdk@~1.9.30":
+  version "1.9.31"
+  resolved "https://registry.yarnpkg.com/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.31.tgz#4dad28c89a74014288f3b6ceadfda2cd42094715"
+  integrity sha512-y1sSdq39IPb6mOX43+JiSezVbUdA8EBEJ1gvn91GP0jrLG0EcSApeRDCjRouyDpPXZ51bQXEQhA8CiHM0mzcAw==
+  dependencies:
+    "@langchain/protocol" "^0.0.18"
+    "@types/json-schema" "^7.0.15"
+    p-queue "^9.0.1"
+    p-retry "^7.1.1"
+
 "@langchain/langgraph-ui@1.4.3", "@langchain/langgraph-ui@^1.4.3":
   version "1.4.3"
   resolved "https://registry.yarnpkg.com/@langchain/langgraph-ui/-/langgraph-ui-1.4.3.tgz#41f1405a33dab70a9994484f8ec5b7dcf788ae7b"
@@ -341,13 +351,13 @@
     esbuild-plugin-tailwindcss "^2.0.1"
     zod "^3.25.76 || ^4"
 
-"@langchain/langgraph@^1.4.9":
-  version "1.4.9"
-  resolved "https://registry.yarnpkg.com/@langchain/langgraph/-/langgraph-1.4.9.tgz#8ec6f2ab1200f56dcf7b9e44d838c956b23b7a73"
-  integrity sha512-EvD9rS66Cya09y6rbMgD3Ir8miAkJQFo7FyJOPRPO736Kz3y5TeyeBDOS8ctff/jRc788bPijHx2NVFM79Qqig==
+"@langchain/langgraph@^1.4.12":
+  version "1.4.12"
+  resolved "https://registry.yarnpkg.com/@langchain/langgraph/-/langgraph-1.4.12.tgz#0870f26fc6a903c57feb6ad039bcf2f2a0c6ebc4"
+  integrity sha512-63iH/igH5Fh5fHqmWp09YYWaDKKB9v4RCmYNJBrnQ224rFRbjebgyYW6o5RCczN5FZxIhQj+xT51rrNmG0zi5A==
   dependencies:
-    "@langchain/langgraph-checkpoint" "^1.1.3"
-    "@langchain/langgraph-sdk" "~1.9.28"
+    "@langchain/langgraph-checkpoint" "^1.1.5"
+    "@langchain/langgraph-sdk" "~1.9.30"
     "@langchain/protocol" "^0.0.18"
     "@standard-schema/spec" "1.1.0"
 

{langgraph_api-0.14.0.dev9 → langgraph_api-0.14.0.dev10}/uv.lock

@@ -958,7 +958,7 @@ dev = [
 
 [[package]]
 name = "langgraph-sdk"
-version = "0.4.2"
+version = "0.4.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
@@ -967,9 +967,9 @@ dependencies = [
     { name = "orjson" },
     { name = "websockets" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/b4/2b/bd8ac26d4e97f6df88ef05ce5b6a38945a3903e1025d926f4752aa88aa97/langgraph_sdk-0.4.2.tar.gz", hash = "sha256:b88f0f5f6328ac0680d6790614a905b2bcfa257f2276dba4e38f0e86db0aa738", size = 348327, upload-time = "2026-06-01T17:51:19.856Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/bd/0e/3c0347fd517390e807d9772d2037f9cc65c0227af27f07052ba9c8ebdfa2/langgraph_sdk-0.4.3.tar.gz", hash = "sha256:f101cc043ddd7400ceaef66d934c42fa2f0e7d4ea5029754d286260d39038251", size = 344145, upload-time = "2026-08-19T18:05:21.838Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a0/05/aac507337cceae773c2cc9ab91eb6301963af7aeeb55b4217a00e15aff17/langgraph_sdk-0.4.2-py3-none-any.whl", hash = "sha256:75fa5096c1177ce39c847096a8fe3745ffd480ddb412995f836e9f5f884c43dd", size = 160521, upload-time = "2026-06-01T17:51:18.849Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/a0/f3bc44b46ef730588f66fdf9e9ddc54189db78482a9e914ae6a554a2b2e0/langgraph_sdk-0.4.3-py3-none-any.whl", hash = "sha256:1b7920b39b6dc439843d122a06f04a0cb8b65c02fd086ddf68e18596a230a0e7", size = 161794, upload-time = "2026-08-19T18:05:20.495Z" },
 ]
 
 [[package]]

langgraph_api-0.14.0.dev9/langgraph_api/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.14.0.dev9"