langgraph-api 0.18.0.dev7__tar.gz → 0.18.0.dev8__tar.gz

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: langgraph-api
-Version: 0.18.0.dev7
+Version: 0.18.0.dev8
 Author-email: Will Fu-Hinthorn <will@langchain.dev>, Josh Rogers <josh@langchain.dev>, Parker Rule <parker@langchain.dev>
 License: Elastic-2.0
 License-File: LICENSE

langgraph_api-0.18.0.dev8/langgraph_api/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.18.0.dev8"

langgraph_api-0.18.0.dev8/langgraph_api/api/mcp/_origins.py

@@ -0,0 +1,52 @@
+from __future__ import annotations
+
+import re
+from dataclasses import dataclass
+from typing import TYPE_CHECKING
+from urllib.parse import urlsplit
+
+from langgraph_api.config import ANY_ORIGIN
+
+if TYPE_CHECKING:
+    from langgraph_api.config.schemas import CorsConfig
+
+LOOPBACK_HOSTS = frozenset({"localhost", "127.0.0.1", "::1"})
+WEB_SCHEMES = frozenset({"http", "https"})
+
+
+@dataclass(frozen=True, slots=True)
+class OriginPolicy:
+    listed: frozenset[str]
+    pattern: re.Pattern[str] | None
+
+    @classmethod
+    def of(cls, settings: CorsConfig) -> OriginPolicy:
+        regex = settings.get("allow_origin_regex")
+        return cls(
+            frozenset(settings.get("allow_origins", ())) - {ANY_ORIGIN},
+            re.compile(regex) if regex is not None else None,
+        )
+
+    def allows(self, origin: str | None) -> bool:
+        return (
+            origin is None
+            or origin in self.listed
+            or (self.pattern is not None and self.pattern.fullmatch(origin) is not None)
+            or _bare_origin_host(origin) in LOOPBACK_HOSTS
+        )
+
+
+def _bare_origin_host(origin: str) -> str | None:
+    try:
+        parsed = urlsplit(origin)
+    except ValueError:
+        return None
+    if (
+        parsed.scheme not in WEB_SCHEMES
+        or "@" in parsed.netloc
+        or parsed.path
+        or parsed.query
+        or parsed.fragment
+    ):
+        return None
+    return parsed.hostname or None

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/langgraph_api/api/mcp/_routes.py

@@ -1,22 +1,27 @@
 from __future__ import annotations
 
+from http import HTTPStatus
+
 from starlette.responses import Response
 
 from langgraph_api.api.mcp._handlers import (
+    create_error_response,
     handle_delete_request,
     handle_get_request,
     handle_post_request,
 )
+from langgraph_api.api.mcp._origins import OriginPolicy
+from langgraph_api.config import CORS_SETTINGS
 from langgraph_api.route import ApiRequest, ApiRoute
 
 __all__ = ["mcp_routes"]
 
+ORIGIN_POLICY = OriginPolicy.of(CORS_SETTINGS)
+
 
 async def handle_mcp_endpoint(request: ApiRequest) -> Response:
-    # MCP endpoint handler that implements the Streamable HTTP protocol.
-    # Supports POST (JSON-RPC request) and DELETE (terminate session).
-    # GET (streaming session resumption) and text/event-stream not yet supported.
-    # Route request based on HTTP method
+    if not ORIGIN_POLICY.allows(request.headers.get("origin")):
+        return create_error_response("Origin is not allowed", HTTPStatus.FORBIDDEN)
     if request.method == "DELETE":
         return handle_delete_request()
     elif request.method == "GET":
@@ -24,11 +29,9 @@ async def handle_mcp_endpoint(request: ApiRequest) -> Response:
     elif request.method == "POST":
         return await handle_post_request(request)
     else:
-        # Method not allowed
         return Response(status_code=405)
 
 
-# Define routes for the MCP endpoint
 mcp_routes = [
     ApiRoute("/mcp", handle_mcp_endpoint, methods=["GET", "POST", "DELETE"]),
 ]

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/langgraph_api/config/__init__.py

@@ -1,4 +1,5 @@
 import os
+from collections.abc import Sequence
 from enum import StrEnum
 from os import environ, getenv
 from typing import TYPE_CHECKING, Annotated, Literal, TypeVar, cast
@@ -363,7 +364,10 @@ MOUNT_PREFIX: str | None = _validate_mount_prefix(
     or (HTTP_CONFIG.get("mount_prefix") if HTTP_CONFIG else None)
 )
 
-CORS_ALLOW_ORIGINS = env("CORS_ALLOW_ORIGINS", cast=CommaSeparatedStrings, default="*")
+ANY_ORIGIN = "*"
+CORS_ALLOW_ORIGINS = env(
+    "CORS_ALLOW_ORIGINS", cast=CommaSeparatedStrings, default=ANY_ORIGIN
+)
 CORS_CONFIG = env(
     "CORS_CONFIG", cast=_parse.parse_schema(CorsConfig), default=None
 ) or (HTTP_CONFIG.get("cors") if HTTP_CONFIG else None)
@@ -406,12 +410,35 @@ CORS_CONFIG = env(
     }
 }
 """
-if (
-    CORS_CONFIG is not None
-    and CORS_ALLOW_ORIGINS != "*"
-    and CORS_CONFIG.get("allow_origins") is None
-):
-    CORS_CONFIG["allow_origins"] = CORS_ALLOW_ORIGINS
+
+
+def _cors_settings(
+    cors_config: CorsConfig | None, allow_origins: Sequence[str]
+) -> CorsConfig:
+    origins = list(allow_origins)
+    if cors_config is None:
+        return {
+            "allow_origins": origins,
+            "allow_credentials": ANY_ORIGIN not in origins,
+            "allow_methods": ["*"],
+            "allow_headers": ["*"],
+            "expose_headers": [
+                "x-pagination-total",
+                "x-pagination-next",
+                "content-location",
+                "location",
+            ],
+        }
+    keeps_its_own_origins = cors_config.get("allow_origins") is not None
+    wildcard_would_widen_regex = cors_config.get(
+        "allow_origin_regex"
+    ) is not None and origins == [ANY_ORIGIN]
+    if keeps_its_own_origins or wildcard_would_widen_regex:
+        return cors_config
+    return {**cors_config, "allow_origins": origins}
+
+
+CORS_SETTINGS = _cors_settings(CORS_CONFIG, CORS_ALLOW_ORIGINS)
 
 # queue
 
@@ -794,6 +821,7 @@ traceblock.patch_requests()
 __all__ = [
     "AES_JSON_DISALLOWED_KEYS",
     "ALLOW_PRIVATE_NETWORK",
+    "ANY_ORIGIN",
     "API_VARIANT",
     "BG_JOB_HEARTBEAT",
     "BG_JOB_ISOLATED_LOOPS",
@@ -810,6 +838,7 @@ __all__ = [
     "CHECKPOINT_MAX_BATCH_SIZE",
     "CORS_ALLOW_ORIGINS",
     "CORS_CONFIG",
+    "CORS_SETTINGS",
     "CRON_SCHEDULER_BATCH_SIZE",
     "CRON_SCHEDULER_SLEEP_TIME",
     "DATABASE_URI",

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/langgraph_api/js/client.mts

@@ -670,6 +670,7 @@ const StreamEventsPayload = z.object({
   // keeps the legacy ``on_chain_stream`` behavior used by the older
   // streaming endpoints.
   stream_protocol: z.enum(["v2", "v3"]).nullish(),
+  output_keys: z.union([z.string(), z.array(z.string())]).nullish(),
 });
 
 function reviveCommand(
@@ -798,6 +799,10 @@ async function* streamEventsRequest(
         ...config,
         signal,
         version: "v3",
+        outputKeys:
+          payload.output_keys === undefined
+            ? graph.outputChannels
+            : (payload.output_keys ?? undefined),
         interruptBefore,
         interruptAfter,
         ...(callbacks ? { callbacks } : {}),

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/langgraph_api/server.py

@@ -66,25 +66,7 @@ if JS_PROXY_MIDDLEWARE_ENABLED:
 
 global_middleware.extend(
     [
-        (
-            Middleware(
-                CORSMiddleware,
-                allow_origins=config.CORS_ALLOW_ORIGINS,
-                allow_credentials="*" not in config.CORS_ALLOW_ORIGINS,
-                allow_methods=["*"],
-                allow_headers=["*"],
-                expose_headers=[
-                    "x-pagination-total",
-                    "x-pagination-next",
-                    "content-location",
-                ],
-            )
-            if config.CORS_CONFIG is None
-            else Middleware(
-                CORSMiddleware,
-                **config.CORS_CONFIG,
-            )
-        ),
+        Middleware(CORSMiddleware, **config.CORS_SETTINGS),
         Middleware(AccessLoggerMiddleware, logger=logger),
         Middleware(RequestIdMiddleware, mount_prefix=config.MOUNT_PREFIX),
     ]

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/langgraph_api/stream_v2.py

@@ -226,6 +226,7 @@ async def astream_state_v2(
     # langgraph >=1.2.0a6. ``stream_mode`` was already popped by the
     # caller.
     kwargs.pop("subgraphs", None)
+    kwargs.setdefault("output_keys", graph.output_channels)
     # ``version="v3"`` and the awaitable return are alpha-only;
     # ``capabilities.py`` gates the v3 path at runtime so older
     # langgraph never reaches this call.

{langgraph_api-0.18.0.dev7 → langgraph_api-0.18.0.dev8}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = ">=3.11"
 
 [[package]]

langgraph_api-0.18.0.dev7/langgraph_api/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.18.0.dev7"