langchain-ai/docs
1
0
Fork 0
mirror of https://github.com/langchain-ai/docs.git synced 2026-07-22 12:25:55 -04:00
Code Issues 490 Packages Projects Releases Wiki Activity

[PR #3936] [MERGED] docs(sandboxes): add sandbox runtime access permissions page #3944

New Issue
Closed
opened 2026-06-05 18:53:40 -04:00 by yindo · 0 comments
yindo commented 2026-06-05 18:53:40 -04:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/langchain-ai/docs/pull/3936
Author: @langchain-infra
Created: 5/9/2026
Status: ✅ Merged
Merged: 5/9/2026
Merged by: @langchain-infra

Base: main ← Head: mukil/sandbox-permissions-doc

📝 Commits (1)

  • 4c049c2 docs(sandboxes): add sandbox runtime access permissions page

📊 Changes

3 files changed (+57 additions, -0 deletions)

View changed files

📝 src/docs.json (+1 -0)
➕ src/langsmith/sandbox-permissions.mdx (+52 -0)
📝 src/langsmith/sandboxes.mdx (+4 -0)

📄 Description

Summary

Documents the creator-private runtime authz mode that's now on for sandboxes across dev / staging / prod (us) / eu-prod (rolled out via langchain-ai/langchainplus#24496-#24498 and langchain-ai/deployments#29249, #29260, #29261).

Adds a new dedicated page (/langsmith/sandbox-permissions) covering:

  • Who can interact with a sandbox at runtime by default (creator only) and how to broaden access (sandboxes:exec workspace permission).
  • The four runtime actions covered: exec, file, tunnel, proxy.
  • Cross-workspace isolation (sandboxes in another workspace surface as 404).
  • Denied-request shape (HTTP 403 with reason).
  • Sharing patterns: sandboxes:exec for broad access, service URLs for ad-hoc HTTP sharing.

Also adds a Permissions card on the Sandboxes overview and registers the page in the Sandboxes sidebar group in src/docs.json.

Test plan

  • make lint_prose passes locally (✅).
  • Preview build renders the new page under Tools > Sandboxes > Permissions.
  • Cross-link to /langsmith/rbac (for the sandboxes:exec permission concept) and /langsmith/sandbox-service-urls (for the alternative sharing path) resolves.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langchain-ai/docs/pull/3936 **Author:** [@langchain-infra](https://github.com/langchain-infra) **Created:** 5/9/2026 **Status:** ✅ Merged **Merged:** 5/9/2026 **Merged by:** [@langchain-infra](https://github.com/langchain-infra) **Base:** `main` ← **Head:** `mukil/sandbox-permissions-doc` --- ### 📝 Commits (1) - [`4c049c2`](https://github.com/langchain-ai/docs/commit/4c049c21edcc59659b1d4b8089e91e447813a8bf) docs(sandboxes): add sandbox runtime access permissions page ### 📊 Changes **3 files changed** (+57 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `src/docs.json` (+1 -0) ➕ `src/langsmith/sandbox-permissions.mdx` (+52 -0) 📝 `src/langsmith/sandboxes.mdx` (+4 -0) </details> ### 📄 Description ## Summary Documents the creator-private runtime authz mode that's now on for sandboxes across dev / staging / prod (us) / eu-prod (rolled out via langchain-ai/langchainplus#24496-#24498 and langchain-ai/deployments#29249, #29260, #29261). Adds a new dedicated page (`/langsmith/sandbox-permissions`) covering: - Who can interact with a sandbox at runtime by default (creator only) and how to broaden access (`sandboxes:exec` workspace permission). - The four runtime actions covered: exec, file, tunnel, proxy. - Cross-workspace isolation (sandboxes in another workspace surface as 404). - Denied-request shape (`HTTP 403` with reason). - Sharing patterns: `sandboxes:exec` for broad access, service URLs for ad-hoc HTTP sharing. Also adds a Permissions card on the Sandboxes overview and registers the page in the Sandboxes sidebar group in `src/docs.json`. ## Test plan - [x] `make lint_prose` passes locally (✅). - [x] Preview build renders the new page under `Tools > Sandboxes > Permissions`. - [x] Cross-link to `/langsmith/rbac` (for the `sandboxes:exec` permission concept) and `/langsmith/sandbox-service-urls` (for the alternative sharing path) resolves. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 18:53:40 -04:00
yindo closed this issue 2026-06-05 18:53:40 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
deepagents
docs-infra
external
external
help wanted
integration
internal
internal
javascript
js/ts
langchain
langgraph
langsmith
needs-title
pull-request
Mirrored from GitHub Pull Request
 python
reference
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langchain-ai/docs#3944
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?