Add code execution middleware

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/config.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [
+    [
+      "@langchain/google-common",
+      "@langchain/google-gauth",
+      "@langchain/google-webauth",
+      "@langchain/google-vertexai",
+      "@langchain/google-vertexai-web",
+      "@langchain/google-genai"
+    ]
+  ],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [
+    "examples"
+  ],
+  "___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH": {
+    "onlyUpdatePeerDependentsWhenOutOfRange": true
+  }
+}

.devcontainer/devcontainer.json

@@ -1,29 +1,27 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the
 // README at: https://github.com/devcontainers/templates/tree/main/src/typescript-node
 {
-	"name": "Node.js & TypeScript",
-	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
-	"image": "mcr.microsoft.com/devcontainers/typescript-node:1.1.0-20",
-	"customizations": {
-		"vscode": {
-			"extensions": [
-				"ms-vscode.vscode-typescript-next"
-			]
-		}
-	}
+  "name": "Node.js & TypeScript",
+  // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
+  "image": "mcr.microsoft.com/devcontainers/typescript-node:1.1.0-20",
+  "customizations": {
+    "vscode": {
+      "extensions": ["ms-vscode.vscode-typescript-next"]
+    }
+  }
 
-	// Features to add to the dev container. More info: https://containers.dev/features.
-	// "features": {},
+  // Features to add to the dev container. More info: https://containers.dev/features.
+  // "features": {},
 
-	// Use 'forwardPorts' to make a list of ports inside the container available locally.
-	// "forwardPorts": [],
+  // Use 'forwardPorts' to make a list of ports inside the container available locally.
+  // "forwardPorts": [],
 
-	// Use 'postCreateCommand' to run commands after the container is created.
-	// "postCreateCommand": "yarn install",
+  // Use 'postCreateCommand' to run commands after the container is created.
+  // "postCreateCommand": "pnpm install",
 
-	// Configure tool-specific properties.
-	// "customizations": {},
+  // Configure tool-specific properties.
+  // "customizations": {},
 
-	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
-	// "remoteUser": "root"
+  // Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+  // "remoteUser": "root"
 }

.github/ISSUE_TEMPLATE/bug-report.yml

@@ -6,9 +6,9 @@ body:
     attributes:
       value: |
         Thank you for taking the time to file a bug report. 
-        
+
         Use this to report BUGS in LangChain.js. For usage questions, feature requests and general design questions, please use the [LangChain Forum](https://forum.langchain.com/).
-        
+
         Relevant links to check before filing a bug report to see if your issue has already been reported, fixed or
         if there's another way to solve your problem:
 
@@ -45,19 +45,19 @@ body:
       label: Example Code
       description: |
         Please add a self-contained, [minimal, reproducible, example](https://stackoverflow.com/help/minimal-reproducible-example) with your use case.
-        
+
         If a maintainer can copy it, run it, and see it right away, there's a much higher chance that you'll be able to get help.
-        
+
         **Important!** 
-        
+
         * Use code tags (e.g., ```typescript ... ```) to correctly [format your code](https://help.github.com/en/github/writing-on-github/creating-and-highlighting-code-blocks#syntax-highlighting).
         * INCLUDE the language label (e.g. `typescript`) after the first three backticks to enable syntax highlighting. (e.g., ```typescript rather than ```).
         * Reduce your code to the minimum required to reproduce the issue if possible. This makes it much easier for others to help you.
         * Avoid screenshots when possible, as they are hard to read and (more importantly) don't allow others to copy-and-paste your code.
 
       placeholder: |
         The following code: 
-        
+
         ```typescript
         import { RunnableLambda } from "@langchain/core/runnables"
 
@@ -98,18 +98,18 @@ body:
       label: System Info
       description: |
         Please share your system info with us. 
-        
-        "yarn info langchain" 
+
+        "pnpm info langchain" 
         platform (windows / linux / mac)
         Node version
-        yarn version
+        pnpm --version
       placeholder: |
-        "yarn info langchain"
+        "pnpm info langchain"
         platform
         Node version
-        yarn version
-        
+        pnpm --version
+
         These will only surface LangChain.js packages, don't forget to include any other relevant
-        packages you're using (if you're not sure what's relevant, you can paste the entire output of `yarn info`).
+        packages you're using (if you're not sure what's relevant, you can paste the entire output of `pnpm info`).
     validations:
       required: true

.github/codeql/codeql-config.yml

@@ -0,0 +1,23 @@
+name: CodeQL config
+
+# Needed to customize the security-extended query suite
+disable-default-queries: true
+queries:
+  - uses: security-extended
+query-filters:
+  - exclude:
+      id: actions/missing-workflow-permissions
+threat-models: local
+paths-ignore:
+  - "/release_workspace.js"
+  - "**/create-entrypoints.js"
+  - "examples/*.ts"
+  - "examples/**/*.ts"
+  - "**/*.test.ts"
+  - "**/examples/*.ts"
+  - "**/examples/**/*.ts"
+  - "**/*.test.ts"
+  - "**/tests/**/*.ts"
+  - "**/__tests__/**/*.ts"
+  - "/libs/langchain-scripts/**/*.ts"
+  - "docs/core_docs/scripts/*.js"

.github/contributing/INTEGRATIONS.md

@@ -128,7 +128,7 @@ https://github.com/langchain-ai/langchainjs/tree/main/libs/langchain-scripts/src
 
 ### Linting and formatting
 
-As with all contributions, make sure you run `yarn lint` and `yarn format` so that everything conforms to our established style.
+As with all contributions, make sure you run `pnpm lint` and `pnpm format` so that everything conforms to our established style.
 
 ### Separate integration packages
 

.github/workflows/check-broken-links.yml

@@ -3,21 +3,23 @@ name: Check Broken Links
 on:
   workflow_dispatch:
   schedule:
-    - cron:  '0 13 * * *'
+    - cron: "0 13 * * *"
 
 jobs:
   check-links:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Use Node.js 18.x
-        uses: actions/setup-node@v3
+      - name: Setup pnpm
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda
+      - name: Use Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: 18.x
-          cache: "yarn"
+          node-version-file: ".nvmrc"
+          cache: "pnpm"
       - name: Install dependencies
-        run: yarn install --immutable --mode=skip-build
+        run: pnpm install --frozen-lockfile
       - name: Build scripts
-        run: yarn build --filter=@langchain/scripts
+        run: pnpm build --filter @langchain/scripts
       - name: Check broken links
-        run: yarn workspace core_docs check:broken-links:ci
+        run: pnpm check:broken-links:ci

.github/workflows/ci.yml

@@ -5,14 +5,13 @@ name: CI
 
 on:
   pull_request:
-    paths_ignore:
-      - 'docs/**'
-      - 'dependency_range_tests/**'
-      - 'environment_tests/**'
-      - '.github/**'
-      - '!.github/workflows/ci.yml'
-  workflow_dispatch:  # Allows triggering the workflow manually in GitHub UI
-
+    paths-ignore:
+      - "docs/**"
+      - "dependency_range_tests/**"
+      - "environment_tests/**"
+      - ".github/**"
+      - "!.github/workflows/ci.yml"
+  workflow_dispatch: # Allows triggering the workflow manually in GitHub UI
 
 # If another push to the same PR or branch happens while this workflow is still running,
 # cancel the earlier run in favor of the next run.
@@ -30,12 +29,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Use Node.js 18.x
-        uses: actions/setup-node@v3
+      - name: Setup pnpm
+        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda
+      - name: Use Node.js
+        uses: actions/setup-node@v4
         with:
-          node-version: 18.x
-          cache: "yarn"
+          node-version-file: ".nvmrc"
+          cache: "pnpm"
       - name: Install dependencies
-        run: yarn install --immutable --mode=skip-build
+        run: pnpm install --frozen-lockfile
       - name: Check linting
-        run: yarn run lint
+        run: pnpm run lint

.github/workflows/codeql.yml

@@ -0,0 +1,47 @@
+name: CodeQL
+
+on:
+  workflow_dispatch:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+  schedule:
+    - cron: "36 12 * * 2"
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: "ubuntu-latest"
+    permissions:
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - language: actions
+          - language: javascript-typescript
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          config-file: ./.github/codeql/codeql-config.yml
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"
+          output: results-${{matrix.language}}
+
+      - name: Store sarif file as artifact
+        if: github.event_name != 'pull_request'
+        uses: actions/upload-artifact@v4
+        with:
+          name: codeql-results-${{matrix.language}}
+          path: results-${{matrix.language}}