agent-tracegraph 0.9.0__tar.gz → 0.9.1__tar.gz

{agent_tracegraph-0.9.0 → agent_tracegraph-0.9.1}/CHANGELOG.md

@@ -6,6 +6,34 @@ The **artifact** schema version and the **report**/**review-candidate** JSON sch
 separate contracts from this version number; changes to any of them are called out
 explicitly.
 
+## 0.9.1 - 2026-11-04
+
+### Fixed
+
+- **A LangGraph failure stored as an allowed constructor call this machine cannot run is no
+  longer dropped** (#184). The checkpoint serializer stores some objects as a call to rebuild
+  them, such as a `pathlib.WindowsPath` written on Windows; read on macOS or Linux, that call
+  raises. langgraph-checkpoint before 4.3.0 read such a value in the error channel as `None`,
+  so the failing step came out `ok`, the trace `ok`, with no capture gap. The new
+  `langgraph-checkpoint>=4.3.0` floor (below) means the serializer returns the call's stored
+  argument instead: the step is recorded as an error whose message is that argument's text
+  (`['C:\\', 'data', 'failed-input.csv']` for the path above).
+
+  Only that case changed. An error value that fails to decode any other way can still read
+  as `None` and be dropped — measured on langgraph-checkpoint 4.3.1 for a `WindowsPath` in an
+  older `json`-format checkpoint — and so can a stored argument that is itself empty or
+  otherwise falsey. Where the error is recorded, nothing in the artifact says the value could
+  not be rebuilt. These are tracked in #188.
+
+### Dependencies
+
+- `langgraph-checkpoint` now requires `>=4.3.0` (was `>=4.1`), for the fix above, and
+  `langgraph-checkpoint-sqlite` requires `>=3.1.2` (was `>=3.1.1`), the first release with the
+  fix for GHSA-6hmw-9432-67qq, where store namespace labels containing `.` reached other
+  namespaces. Tracegraph never uses the store. 3.1.2 itself requires `langgraph-checkpoint>=4.3.0`.
+  The install range is narrower: an environment that pins `langgraph-checkpoint==4.1.1` or
+  `==4.2.0` resolves with 0.9.0 and not with this release.
+
 ## 0.9.0 - 2026-10-24
 
 ### Changed

{agent_tracegraph-0.9.0 → agent_tracegraph-0.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: agent-tracegraph
-Version: 0.9.0
+Version: 0.9.1
 Summary: Time-travel debugging and causal RCA for LangGraph agent traces, on a causal graph.
 Project-URL: Homepage, https://github.com/memtomem/tracegraph
 Project-URL: Repository, https://github.com/memtomem/tracegraph
@@ -21,8 +21,8 @@ Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Debuggers
 Classifier: Typing :: Typed
 Requires-Python: >=3.12
-Requires-Dist: langgraph-checkpoint-sqlite>=3.1.1
-Requires-Dist: langgraph-checkpoint>=4.1
+Requires-Dist: langgraph-checkpoint-sqlite>=3.1.2
+Requires-Dist: langgraph-checkpoint>=4.3.0
 Requires-Dist: pydantic<3,>=2
 Requires-Dist: rich>=13
 Requires-Dist: typer>=0.12

{agent_tracegraph-0.9.0 → agent_tracegraph-0.9.1}/pyproject.toml

@@ -4,7 +4,7 @@
 # the schema `kind` constants and the TRACEGRAPH_* environment variables — those are package
 # identity, not distribution identity, and renaming them would break published contracts.
 name = "agent-tracegraph"
-version = "0.9.0"
+version = "0.9.1"
 description = "Time-travel debugging and causal RCA for LangGraph agent traces, on a causal graph."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -32,15 +32,16 @@ classifiers = [
 
 dependencies = [
     "pydantic>=2,<3",
-    # 3.1.1 fixes GHSA-47pj-3jcm-6whg (store namespace prefixes crossing segment boundaries).
-    # Tracegraph reads only SqliteSaver, never the store; the floor keeps installs off the
-    # flagged versions.
-    "langgraph-checkpoint-sqlite>=3.1.1",
-    # Declared directly, not left transitive, because `ingest` now calls its serializer API:
+    # 3.1.2 fixes GHSA-6hmw-9432-67qq (store namespace labels containing `.`), as 3.1.1 fixed
+    # GHSA-47pj-3jcm-6whg. Tracegraph reads only SqliteSaver, never the store; the floor keeps
+    # installs off the flagged versions. 3.1.2 itself requires langgraph-checkpoint>=4.3.0.
+    "langgraph-checkpoint-sqlite>=3.1.2",
+    # Declared directly, not left transitive, because `ingest` calls its serializer API:
     # `JsonPlusSerializer(allowed_msgpack_modules=...)` is what stops a checkpoint payload
-    # invoking arbitrary callables, and it does not exist before 4.1 (4.0.0 raises TypeError,
-    # verified). A transitive dependency is not a contract.
-    "langgraph-checkpoint>=4.1",
+    # invoking arbitrary callables (absent before 4.1). 4.3.0 is the floor because before it
+    # the serializer read an allowed value it could not rebuild (a Windows path read here) as
+    # `None`, so a failure stored in the error channel was dropped without disclosure (#184).
+    "langgraph-checkpoint>=4.3.0",
     "typer>=0.12",
     "rich>=13",
     # Recomputes a LangGraph task id to name the node behind a native failure. LangGraph