langgraph-runtime-inmem 0.29.0.dev6__tar.gz → 0.29.0.dev8__tar.gz

{langgraph_runtime_inmem-0.29.0.dev6 → langgraph_runtime_inmem-0.29.0.dev8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: langgraph-runtime-inmem
-Version: 0.29.0.dev6
+Version: 0.29.0.dev8
 Summary: Inmem implementation for the LangGraph API server.
 Author-email: Will Fu-Hinthorn <will@langchain.dev>
 License: Elastic-2.0

{langgraph_runtime_inmem-0.29.0.dev6 → langgraph_runtime_inmem-0.29.0.dev8}/langgraph_runtime_inmem/__init__.py

@@ -10,7 +10,7 @@ from langgraph_runtime_inmem import (
     store,
 )
 
-__version__ = "0.29.0.dev6"
+__version__ = "0.29.0.dev8"
 __all__ = [
     "ops",
     "database",

{langgraph_runtime_inmem-0.29.0.dev6 → langgraph_runtime_inmem-0.29.0.dev8}/langgraph_runtime_inmem/ops.py

@@ -2494,10 +2494,13 @@ class Runs(Authenticated):
                 (t for t in conn.store["threads"] if t["thread_id"] == thread_id), None
             )
         # Automatically enforce assistant ownership for non-system assistants
-        # by calling the user's assistant search auth handler.
+        # by calling the user's assistant read auth handler.
         if assistant.get("metadata", {}).get("created_by") != "system":
+            assistant_request_data = Auth.types.AssistantsRead(
+                assistant_id=assistant_id
+            )
             assistant_filters = await Assistants.handle_event(
-                ctx, "search", {"metadata": {}}
+                ctx, "read", assistant_request_data
             )
             if assistant_filters and not _check_filter_match(
                 assistant.get("metadata", {}), assistant_filters
@@ -3282,10 +3285,14 @@ class Crons(Authenticated):
 
         assistant_filters: list[Any] = []
         if assistant_id not in SYSTEM_ASSISTANT_IDS:
+            # Do not populate `metadata` on the AssistantsRead request value:
+            # client-supplied cron metadata must not influence the auth
+            # decision (defense vs. forged payloads), and the gRPC/postgres
+            # path also omits it — keeping handler behavior consistent across
+            # runtimes and mirroring Runs.put.
             assistant_request_data = Auth.types.AssistantsRead(
                 assistant_id=payload["assistant_id"]
             )
-            assistant_request_data["metadata"] = metadata  # type: ignore
             assistant_filters = await Assistants.handle_event(
                 ctx, "read", assistant_request_data
             )