langgraph-api 0.4.47__py3-none-any.whl → 0.5.0__py3-none-any.whl

langgraph_api/__init__.py

@@ -1 +1 @@
-__version__ = "0.4.47"
+__version__ = "0.5.0"

langgraph_api/config.py

@@ -128,6 +128,45 @@ class StoreConfig(TypedDict, total=False):
     ttl: TTLConfig
 
 
+class SerdeConfig(TypedDict, total=False):
+    """Configuration for the built-in serde, which handles checkpointing of state.
+
+    If omitted, no serde is set up (the object store will still be present, however)."""
+
+    allowed_json_modules: list[list[str]] | Literal[True] | None
+    """Optional. List of allowed python modules to de-serialize custom objects from.
+    
+    If provided, only the specified modules will be allowed to be deserialized.
+    If omitted, no modules are allowed, and the object returned will simply be a json object OR
+    a deserialized langchain object.
+    
+    Example:
+    {...
+        "serde": {
+            "allowed_json_modules": [
+                ["my_agent", "my_file", "SomeType"],
+            ]
+        }
+    }
+
+    If you set this to True, any module will be allowed to be deserialized.
+
+    Example:
+    {...
+        "serde": {
+            "allowed_json_modules": true
+        }
+    }
+    
+    """
+    pickle_fallback: bool
+    """Optional. Whether to allow pickling as a fallback for deserialization.
+    
+    If True, pickling will be allowed as a fallback for deserialization.
+    If False, pickling will not be allowed as a fallback for deserialization.
+    Defaults to True if not configured."""
+
+
 class CheckpointerConfig(TypedDict, total=False):
     """Configuration for the built-in checkpointer, which handles checkpointing of state.
 
@@ -140,6 +179,8 @@ class CheckpointerConfig(TypedDict, total=False):
     If provided, the checkpointer will apply TTL settings according to the configuration.
     If omitted, no TTL behavior is configured.
     """
+    serde: SerdeConfig | None
+    """Optional. Defines the configuration for how checkpoints are serialized."""
 
 
 class SecurityConfig(TypedDict, total=False):
@@ -339,6 +380,11 @@ def _parse_thread_ttl(value: str | None) -> ThreadTTLConfig | None:
 CHECKPOINTER_CONFIG = env(
     "LANGGRAPH_CHECKPOINTER", cast=_parse_schema(CheckpointerConfig), default=None
 )
+SERDE: SerdeConfig | None = (
+    CHECKPOINTER_CONFIG["serde"]
+    if CHECKPOINTER_CONFIG and "serde" in CHECKPOINTER_CONFIG
+    else None
+)
 THREAD_TTL: ThreadTTLConfig | None = env(
     "LANGGRAPH_THREAD_TTL", cast=_parse_thread_ttl, default=None
 )

langgraph_api/grpc_ops/generated/core_api_pb2_grpc.py

@@ -6,7 +6,7 @@ import warnings
 from . import core_api_pb2 as core__api__pb2
 from google.protobuf import empty_pb2 as google_dot_protobuf_dot_empty__pb2
 
-GRPC_GENERATED_VERSION = '1.76.0'
+GRPC_GENERATED_VERSION = '1.75.1'
 GRPC_VERSION = grpc.__version__
 _version_not_supported = False
 
@@ -19,7 +19,7 @@ except ImportError:
 if _version_not_supported:
     raise RuntimeError(
         f'The grpc package installed is at version {GRPC_VERSION},'
-        + ' but the generated code in core_api_pb2_grpc.py depends on'
+        + f' but the generated code in core_api_pb2_grpc.py depends on'
         + f' grpcio>={GRPC_GENERATED_VERSION}.'
         + f' Please upgrade your grpc module to grpcio>={GRPC_GENERATED_VERSION}'
         + f' or downgrade your generated code using grpcio-tools<={GRPC_VERSION}.'

langgraph_api/js/package.json

@@ -18,7 +18,7 @@
     "@typescript/vfs": "^1.6.0",
     "dedent": "^1.5.3",
     "exit-hook": "^4.0.0",
-    "hono": "^4.10.2",
+    "hono": "^4.10.3",
     "p-queue": "^8.0.1",
     "p-retry": "^6.2.0",
     "tsx": "^4.19.3",

langgraph_api/js/yarn.lock

@@ -971,10 +971,10 @@ has-flag@^4.0.0:
   resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-4.0.0.tgz#944771fd9c81c81265c4d6941860da06bb59479b"
   integrity sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==
 
-hono@^4.10.2, hono@^4.5.4:
-  version "4.10.2"
-  resolved "https://registry.yarnpkg.com/hono/-/hono-4.10.2.tgz#a78d322f2c5fabebb1887f7ae1632a6524513e74"
-  integrity sha512-p6fyzl+mQo6uhESLxbF5WlBOAJMDh36PljwlKtP5V1v09NxlqGru3ShK+4wKhSuhuYf8qxMmrivHOa/M7q0sMg==
+hono@^4.10.3, hono@^4.5.4:
+  version "4.10.3"
+  resolved "https://registry.yarnpkg.com/hono/-/hono-4.10.3.tgz#4e4063eebaac2b735ca4c7455b4d7a6339afc251"
+  integrity sha512-2LOYWUbnhdxdL8MNbNg9XZig6k+cZXm5IjHn2Aviv7honhBMOHb+jxrKIeJRZJRmn+htUCKhaicxwXuUDlchRA==
 
 icss-utils@^5.0.0, icss-utils@^5.1.0:
   version "5.1.0"

langgraph_api/serde.py

@@ -3,7 +3,7 @@ import re
 import uuid
 from base64 import b64encode
 from collections import deque
-from collections.abc import Mapping
+from collections.abc import Callable, Mapping
 from datetime import timedelta, timezone
 from decimal import Decimal
 from ipaddress import (
@@ -16,7 +16,7 @@ from ipaddress import (
 )
 from pathlib import Path
 from re import Pattern
-from typing import Any, NamedTuple, cast
+from typing import Any, Literal, NamedTuple, cast
 from zoneinfo import ZoneInfo
 
 import cloudpickle
@@ -123,6 +123,14 @@ def _sanitise(o: Any) -> Any:
     if isinstance(o, Mapping):
         return {_sanitise(k): _sanitise(v) for k, v in o.items()}
     if isinstance(o, list | tuple | set):
+        if (
+            isinstance(o, tuple)
+            and hasattr(o, "_asdict")
+            and callable(o._asdict)
+            and hasattr(o, "_fields")
+            and isinstance(o._fields, tuple)
+        ):  # named tuple
+            return {f: _sanitise(ov) for f, ov in zip(o._fields, o, strict=True)}
         ctor = list if isinstance(o, list) else type(o)
         return ctor(_sanitise(x) for x in o)
     return o
@@ -158,18 +166,46 @@ async def ajson_loads(content: bytes | Fragment) -> Any:
 
 
 class Serializer(JsonPlusSerializer):
+    def __init__(
+        self,
+        __unpack_ext_hook__: Callable[[int, bytes], Any] | None = None,
+        pickle_fallback: bool | None = None,
+    ):
+        from langgraph_api.config import SERDE
+
+        allowed_json_modules: list[tuple[str, ...]] | Literal[True] | None = None
+        if SERDE and "allowed_json_modules" in SERDE:
+            allowed_ = SERDE["allowed_json_modules"]
+            if allowed_ is True:
+                allowed_json_modules = True
+            elif allowed_ is None:
+                allowed_json_modules = None
+            else:
+                allowed_json_modules = [tuple(x) for x in allowed_]
+        if pickle_fallback is None:
+            if SERDE and "pickle_fallback" in SERDE:
+                pickle_fallback = SERDE["pickle_fallback"]
+            else:
+                pickle_fallback = True
+
+        super().__init__(
+            allowed_json_modules=allowed_json_modules,
+            __unpack_ext_hook__=__unpack_ext_hook__,
+        )
+        self.pickle_fallback = pickle_fallback
+
     def dumps_typed(self, obj: Any) -> tuple[str, bytes]:
         try:
             return super().dumps_typed(obj)
         except TypeError:
             return "pickle", cloudpickle.dumps(obj)
 
-    def dumps(self, obj: Any) -> bytes:
-        # See comment above (in json_dumpb)
-        return super().dumps(obj).replace(rb"\\u0000", b"").replace(rb"\u0000", b"")
-
     def loads_typed(self, data: tuple[str, bytes]) -> Any:
         if data[0] == "pickle":
+            if not self.pickle_fallback:
+                raise ValueError(
+                    "Pickle fallback is disabled. Cannot deserialize pickled object."
+                )
             try:
                 return cloudpickle.loads(data[1])
             except Exception as e:
@@ -177,8 +213,16 @@ class Serializer(JsonPlusSerializer):
                     "Failed to unpickle object, replacing w None", exc_info=e
                 )
                 return None
-        return super().loads_typed(data)
-
-
-mpack_keys = {"method", "value"}
-SERIALIZER = Serializer()
+        try:
+            return super().loads_typed(data)
+        except Exception:
+            if data[0] == "json":
+                logger.exception(
+                    "Heads up! There was a deserialization error of an item stored using 'json'-type serialization."
+                    ' For security reasons, starting in langgraph-api version 0.5.0, we no longer serialize objects using the "json" type.'
+                    " If you would like to retain the ability to deserialize old checkpoints saved in this format, "
+                    'please set the "allowed_json_modules" option in your langgraph.json configuration to add the'
+                    " necessary module and type paths to an allow-list to be deserialized. You can alkso retain the"
+                    ' ability to insecurely deserialize custom types by setting it to "true".'
+                )
+            raise

{langgraph_api-0.4.47.dist-info → langgraph_api-0.5.0.dist-info}/METADATA

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: langgraph-api
-Version: 0.4.47
-Author-email: Nuno Campos <nuno@langchain.dev>, Will Fu-Hinthorn <will@langchain.dev>
+Version: 0.5.0
+Author-email: Will Fu-Hinthorn <will@langchain.dev>, Josh Rogers <josh@langchain.dev>, Parker Rule <parker@langchain.dev>
 License: Elastic-2.0
 License-File: LICENSE
 Requires-Python: >=3.11
@@ -12,10 +12,10 @@ Requires-Dist: grpcio<2.0.0,>=1.75.0
 Requires-Dist: httpx>=0.25.0
 Requires-Dist: jsonschema-rs<0.30,>=0.20.0
 Requires-Dist: langchain-core>=0.3.64
-Requires-Dist: langgraph-checkpoint>=2.0.23
-Requires-Dist: langgraph-runtime-inmem<0.15.0,>=0.14.0
+Requires-Dist: langgraph-checkpoint<4,>=3
+Requires-Dist: langgraph-runtime-inmem<0.16.0,>=0.15.0
 Requires-Dist: langgraph-sdk>=0.2.0
-Requires-Dist: langgraph>=0.4.0
+Requires-Dist: langgraph<2,>=0.4.10
 Requires-Dist: langsmith>=0.3.45
 Requires-Dist: opentelemetry-api>=1.37.0
 Requires-Dist: opentelemetry-exporter-otlp-proto-http>=1.37.0

{langgraph_api-0.4.47.dist-info → langgraph_api-0.5.0.dist-info}/RECORD

@@ -1,9 +1,9 @@
-langgraph_api/__init__.py,sha256=LTTXCAiugz9gXBwbBhE-nz6e-HjwqO9hh9Ca7XLyWSQ,23
+langgraph_api/__init__.py,sha256=LBK46heutvn3KmsCrKIYu8RQikbfnjZaj2xFrXaeCzQ,22
 langgraph_api/asgi_transport.py,sha256=XtiLOu4WWsd-xizagBLzT5xUkxc9ZG9YqwvETBPjBFE,5161
 langgraph_api/asyncio.py,sha256=FEEkLm_N-15cbElo4vQ309MkDKBZuRqAYV8VJ1DocNw,9860
 langgraph_api/cli.py,sha256=aEI2pfztEEziIwUk2imiLkNVK1LapMp_3dxvcar1org,18341
 langgraph_api/command.py,sha256=Bh-rvuTLwdHCqFWryCjB1M8oWxPBwRBUjMNj_04KPxM,852
-langgraph_api/config.py,sha256=79efOb8cBNNT1geUfVsUPJFycjUBXnIxWwMkMsbl36A,15292
+langgraph_api/config.py,sha256=dETbZVXB7PRsJm1ZNDBSdcsMQGIl3KcltnavVTi2cz4,16791
 langgraph_api/cron_scheduler.py,sha256=25wYzEQrhPEivZrAPYOmzLPDOQa-aFogU37mTXc9TJk,2566
 langgraph_api/errors.py,sha256=zlnl3xXIwVG0oGNKKpXf1an9Rn_SBDHSyhe53hU6aLw,1858
 langgraph_api/executor_entrypoint.py,sha256=CaX813ygtf9CpOaBkfkQXJAHjFtmlScCkrOvTDmu4Aw,750
@@ -20,7 +20,7 @@ langgraph_api/route.py,sha256=EBhELuJ1He-ZYcAnR5YTImcIeDtWthDae5CHELBxPkM,5056
 langgraph_api/schema.py,sha256=spZ_XPT4AMJfw2YatsdnMZZLzgB9Sm3YR8n0SlgGdJ8,8480
 langgraph_api/self_hosted_logs.py,sha256=9ljOz3KH3O1SwsD7eTKnreyJ80NbeR7nj7SuxBlrmCc,4422
 langgraph_api/self_hosted_metrics.py,sha256=3FFezxjU0Vs-bsH39f4Dcwn7fporTLHV9REQ3UQ315A,14004
-langgraph_api/serde.py,sha256=Jkww6ixP5o2YZmnXtM7ihuAYC6YSuNDNPvE-8ILoqVo,5499
+langgraph_api/serde.py,sha256=gNnTO98OVcIsfXJr60bG7GPioKUhTDZYqIWHc97Uyz4,7658
 langgraph_api/server.py,sha256=PExNHgem0tY_KkRFiFzj8m8Np6TrP4M0XJsEw6O2SAU,10112
 langgraph_api/sse.py,sha256=SLdtZmTdh5D8fbWrQjuY9HYLd2dg8Rmi6ZMmFMVc2iE,4204
 langgraph_api/state.py,sha256=AjkLbUQakIwK7oGzJ8oqubazRsXxG3vDMnRa0s0mzDM,4716
@@ -55,7 +55,7 @@ langgraph_api/grpc_ops/ops.py,sha256=OHU1ikDMKJXRSTU7zWDXorEuB6o9czLErijh3mhDYh0
 langgraph_api/grpc_ops/generated/__init__.py,sha256=dRiB_iGscPKdMpuLp9ueLwAmIfRaNjNXC64ABtb4cg8,135
 langgraph_api/grpc_ops/generated/core_api_pb2.py,sha256=l209i8cIazfs-zPTlt2jUg_og82oiDT4QMQCYAhU0P4,42262
 langgraph_api/grpc_ops/generated/core_api_pb2.pyi,sha256=6fnrjKRdN1-jJfHagLHhdlVog1cLkLoAc9fvTBzeFdM,49429
-langgraph_api/grpc_ops/generated/core_api_pb2_grpc.py,sha256=K_bHjM6BDzqIc1N8lc1SaxRLGFp1GUTpSiQEr5-70Oo,52466
+langgraph_api/grpc_ops/generated/core_api_pb2_grpc.py,sha256=Qav2DuCMUSmR8nP4-fVtUBbY0Vc42jqjCs3L4LdIl-0,52467
 langgraph_api/js/.gitignore,sha256=l5yI6G_V6F1600I1IjiUKn87f4uYIrBAYU1MOyBBhg4,59
 langgraph_api/js/.prettierrc,sha256=0es3ovvyNIqIw81rPQsdt1zCQcOdBqyR_DMbFE4Ifms,19
 langgraph_api/js/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -65,14 +65,14 @@ langgraph_api/js/client.http.mts,sha256=FeVM53vduTPCyMPaYs__kmB3iWcz0k0om811DG0J
 langgraph_api/js/client.mts,sha256=8T5wp_114c2wGPfktY77StTnejhYL3ZWBmLwaUvp5XU,32333
 langgraph_api/js/errors.py,sha256=Cm1TKWlUCwZReDC5AQ6SgNIVGD27Qov2xcgHyf8-GXo,361
 langgraph_api/js/global.d.ts,sha256=j4GhgtQSZ5_cHzjSPcHgMJ8tfBThxrH-pUOrrJGteOU,196
-langgraph_api/js/package.json,sha256=besBq5s3c370nNWhHXy8ZxD0X350Xbzx4FNUDxhG-Pk,1330
+langgraph_api/js/package.json,sha256=i6LBt4R-bi70FuMC3lIkZAuWZVJnlDE_CpI0mnArrOA,1330
 langgraph_api/js/remote.py,sha256=gBk273R7esmXg8aR6InxasNFc5E6Qju2bv2DhmmGJyU,38676
 langgraph_api/js/schema.py,sha256=M4fLtr50O1jck8H1hm_0W4cZOGYGdkrB7riLyCes4oY,438
 langgraph_api/js/sse.py,sha256=hHkbncnYnXNIbHhAWneGWYkHp4UhhhGB7-MYtDrY264,4141
 langgraph_api/js/traceblock.mts,sha256=QtGSN5VpzmGqDfbArrGXkMiONY94pMQ5CgzetT_bKYg,761
 langgraph_api/js/tsconfig.json,sha256=imCYqVnqFpaBoZPx8k1nO4slHIWBFsSlmCYhO73cpBs,341
 langgraph_api/js/ui.py,sha256=l9regrvKIxLOjH5SIYE2nhr8QCKLK1Q_1pZgxdL71X4,2488
-langgraph_api/js/yarn.lock,sha256=eWe1iuI634accFo7tumAcG8I7gLrcYKe7OyX0TMfK_s,83943
+langgraph_api/js/yarn.lock,sha256=CV3hl-TyqWBKPLYvnWcn42-95nxVlDJRvUuPcC-CQuo,83943
 langgraph_api/js/src/graph.mts,sha256=9zTQNdtanI_CFnOwNRoamoCVHHQHGbNlbm91aRxDeOc,2675
 langgraph_api/js/src/load.hooks.mjs,sha256=xNVHq75W0Lk6MUKl1pQYrx-wtQ8_neiUyI6SO-k0ecM,2235
 langgraph_api/js/src/preload.mjs,sha256=8m3bYkf9iZLCQzKAYAdU8snxUwAG3dVLwGvAjfGfgIc,959
@@ -110,8 +110,8 @@ langgraph_runtime/store.py,sha256=7mowndlsIroGHv3NpTSOZDJR0lCuaYMBoTnTrewjslw,11
 LICENSE,sha256=ZPwVR73Biwm3sK6vR54djCrhaRiM4cAD2zvOQZV8Xis,3859
 logging.json,sha256=3RNjSADZmDq38eHePMm1CbP6qZ71AmpBtLwCmKU9Zgo,379
 openapi.json,sha256=Oi2tU1b8PsXb-6XNHafQvcZv934vLNQhBNPYXr9e2nU,172620
-langgraph_api-0.4.47.dist-info/METADATA,sha256=Eg-ZE0e8ulDNYt7HYdEUEpmKwOLN7PWCoJAcgXT4EHc,4149
-langgraph_api-0.4.47.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-langgraph_api-0.4.47.dist-info/entry_points.txt,sha256=hGedv8n7cgi41PypMfinwS_HfCwA7xJIfS0jAp8htV8,78
-langgraph_api-0.4.47.dist-info/licenses/LICENSE,sha256=ZPwVR73Biwm3sK6vR54djCrhaRiM4cAD2zvOQZV8Xis,3859
-langgraph_api-0.4.47.dist-info/RECORD,,
+langgraph_api-0.5.0.dist-info/METADATA,sha256=d7BUiRTQvo_lZiqlTNbgpgVeEQBnItS9VqQGp1QeMEQ,4186
+langgraph_api-0.5.0.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+langgraph_api-0.5.0.dist-info/entry_points.txt,sha256=hGedv8n7cgi41PypMfinwS_HfCwA7xJIfS0jAp8htV8,78
+langgraph_api-0.5.0.dist-info/licenses/LICENSE,sha256=ZPwVR73Biwm3sK6vR54djCrhaRiM4cAD2zvOQZV8Xis,3859
+langgraph_api-0.5.0.dist-info/RECORD,,