deepagents-cli 0.0.43__tar.gz → 0.0.44__tar.gz

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/CHANGELOG.md

@@ -1,11 +1,16 @@
 # Changelog
 
-## [0.0.43](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.42...deepagents-cli==0.0.43) (2026-04-29)
+## [0.0.44](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.43...deepagents-cli==0.0.44) (2026-04-29)
+
+### Bug Fixes
 
+* Startup import deadlock ([#3017](https://github.com/langchain-ai/deepagents/issues/3017)) ([d40ab57](https://github.com/langchain-ai/deepagents/commit/d40ab57800a6ad12b0c9a5e249753702ec0832c8))
+
+## [0.0.43](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.42...deepagents-cli==0.0.43) (2026-04-29)
 
 ### Features
 
-* **cli:** bundled chat frontend for deepagent deploy ([#2940](https://github.com/langchain-ai/deepagents/issues/2940)) ([9bde0c7](https://github.com/langchain-ai/deepagents/commit/9bde0c7835ded20e80466d8361f40784141d68d8))
+* Bundled chat frontend for deepagent deploy ([#2940](https://github.com/langchain-ai/deepagents/issues/2940)) ([9bde0c7](https://github.com/langchain-ai/deepagents/commit/9bde0c7835ded20e80466d8361f40784141d68d8))
 
 ## [0.0.42](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.41...deepagents-cli==0.0.42) (2026-04-29)
 

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: deepagents-cli
-Version: 0.0.43
+Version: 0.0.44
 Summary: Terminal interface for Deep Agents - interactive AI agent with file operations, shell access, and sub-agent capabilities.
 Project-URL: Homepage, https://docs.langchain.com/oss/python/deepagents/overview
 Project-URL: Documentation, https://reference.langchain.com/python/deepagents/
 Project-URL: Repository, https://github.com/langchain-ai/deepagents
 Project-URL: Issues, https://github.com/langchain-ai/deepagents/issues
 Project-URL: Changelog, https://github.com/langchain-ai/deepagents/blob/main/libs/cli/CHANGELOG.md
-Project-URL: Twitter, https://x.com/LangChain
+Project-URL: Twitter, https://x.com/langchain_oss
 Project-URL: Slack, https://www.langchain.com/join-community
 Project-URL: Reddit, https://www.reddit.com/r/LangChain/
 License: MIT
@@ -30,9 +30,9 @@ Requires-Dist: deepagents-acp>=0.0.4
 Requires-Dist: deepagents==0.5.4
 Requires-Dist: httpx<1.0.0,>=0.28.1
 Requires-Dist: langchain-anthropic<2.0.0,>=1.4.2
-Requires-Dist: langchain-google-genai<5.0.0,>=4.2.1
-Requires-Dist: langchain-mcp-adapters<1.0.0,>=0.2.0
-Requires-Dist: langchain-openai<2.0.0,>=1.1.12
+Requires-Dist: langchain-google-genai<5.0.0,>=4.2.2
+Requires-Dist: langchain-mcp-adapters<1.0.0,>=0.2.2
+Requires-Dist: langchain-openai<2.0.0,>=1.2.1
 Requires-Dist: langchain<2.0.0,>=1.2.15
 Requires-Dist: langgraph-checkpoint-sqlite<4.0.0,>=3.0.0
 Requires-Dist: langgraph-cli[inmem]<1.0.0,>=0.4.15
@@ -55,76 +55,76 @@ Requires-Dist: textual<9.0.0,>=8.0.0
 Requires-Dist: tomli-w<2.0.0,>=1.0.0
 Requires-Dist: uuid-utils<1.0.0,>=0.10.0
 Provides-Extra: agentcore
-Requires-Dist: langchain-agentcore-codeinterpreter>=0.0.1; extra == 'agentcore'
+Requires-Dist: langchain-agentcore-codeinterpreter>=0.0.2; extra == 'agentcore'
 Provides-Extra: all-providers
 Requires-Dist: langchain-anthropic<2.0.0,>=1.4.2; extra == 'all-providers'
-Requires-Dist: langchain-aws<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-baseten<1.0.0,>=0.1.9; extra == 'all-providers'
-Requires-Dist: langchain-cohere<1.0.0,>=0.5.0; extra == 'all-providers'
-Requires-Dist: langchain-deepseek<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-fireworks<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-google-genai<5.0.0,>=4.2.1; extra == 'all-providers'
-Requires-Dist: langchain-google-vertexai<4.0.0,>=3.0.0; extra == 'all-providers'
-Requires-Dist: langchain-groq<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-huggingface<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-ibm<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-litellm<2.0.0,>=0.6.1; extra == 'all-providers'
-Requires-Dist: langchain-mistralai<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-ollama<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-openai<2.0.0,>=1.1.12; extra == 'all-providers'
-Requires-Dist: langchain-openrouter<2.0.0,>=0.2.0; extra == 'all-providers'
-Requires-Dist: langchain-perplexity<2.0.0,>=1.0.0; extra == 'all-providers'
-Requires-Dist: langchain-xai<2.0.0,>=1.0.0; extra == 'all-providers'
+Requires-Dist: langchain-aws<2.0.0,>=1.4.5; extra == 'all-providers'
+Requires-Dist: langchain-baseten<1.0.0,>=0.2.0; extra == 'all-providers'
+Requires-Dist: langchain-cohere<1.0.0,>=0.5.1; extra == 'all-providers'
+Requires-Dist: langchain-deepseek<2.0.0,>=1.0.1; extra == 'all-providers'
+Requires-Dist: langchain-fireworks<2.0.0,>=1.2.0; extra == 'all-providers'
+Requires-Dist: langchain-google-genai<5.0.0,>=4.2.2; extra == 'all-providers'
+Requires-Dist: langchain-google-vertexai<4.0.0,>=3.2.2; extra == 'all-providers'
+Requires-Dist: langchain-groq<2.0.0,>=1.1.2; extra == 'all-providers'
+Requires-Dist: langchain-huggingface<2.0.0,>=1.2.2; extra == 'all-providers'
+Requires-Dist: langchain-ibm<2.0.0,>=1.0.7; extra == 'all-providers'
+Requires-Dist: langchain-litellm<2.0.0,>=0.6.4; extra == 'all-providers'
+Requires-Dist: langchain-mistralai<2.0.0,>=1.1.2; extra == 'all-providers'
+Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.2.1; extra == 'all-providers'
+Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'all-providers'
+Requires-Dist: langchain-openai<2.0.0,>=1.2.1; extra == 'all-providers'
+Requires-Dist: langchain-openrouter<2.0.0,>=0.2.1; extra == 'all-providers'
+Requires-Dist: langchain-perplexity<2.0.0,>=1.1.0; extra == 'all-providers'
+Requires-Dist: langchain-xai<2.0.0,>=1.2.2; extra == 'all-providers'
 Provides-Extra: all-sandboxes
-Requires-Dist: langchain-agentcore-codeinterpreter>=0.0.1; extra == 'all-sandboxes'
-Requires-Dist: langchain-daytona>=0.0.4; extra == 'all-sandboxes'
-Requires-Dist: langchain-modal>=0.0.2; extra == 'all-sandboxes'
-Requires-Dist: langchain-runloop>=0.0.3; extra == 'all-sandboxes'
+Requires-Dist: langchain-agentcore-codeinterpreter>=0.0.2; extra == 'all-sandboxes'
+Requires-Dist: langchain-daytona>=0.0.5; extra == 'all-sandboxes'
+Requires-Dist: langchain-modal>=0.0.3; extra == 'all-sandboxes'
+Requires-Dist: langchain-runloop>=0.0.4; extra == 'all-sandboxes'
 Provides-Extra: anthropic
 Requires-Dist: langchain-anthropic<2.0.0,>=1.4.2; extra == 'anthropic'
 Provides-Extra: baseten
-Requires-Dist: langchain-baseten<1.0.0,>=0.1.9; extra == 'baseten'
+Requires-Dist: langchain-baseten<1.0.0,>=0.2.0; extra == 'baseten'
 Provides-Extra: bedrock
-Requires-Dist: langchain-aws<2.0.0,>=1.0.0; extra == 'bedrock'
+Requires-Dist: langchain-aws<2.0.0,>=1.4.5; extra == 'bedrock'
 Provides-Extra: cohere
-Requires-Dist: langchain-cohere<1.0.0,>=0.5.0; extra == 'cohere'
+Requires-Dist: langchain-cohere<1.0.0,>=0.5.1; extra == 'cohere'
 Provides-Extra: daytona
-Requires-Dist: langchain-daytona>=0.0.4; extra == 'daytona'
+Requires-Dist: langchain-daytona>=0.0.5; extra == 'daytona'
 Provides-Extra: deepseek
-Requires-Dist: langchain-deepseek<2.0.0,>=1.0.0; extra == 'deepseek'
+Requires-Dist: langchain-deepseek<2.0.0,>=1.0.1; extra == 'deepseek'
 Provides-Extra: fireworks
-Requires-Dist: langchain-fireworks<2.0.0,>=1.0.0; extra == 'fireworks'
+Requires-Dist: langchain-fireworks<2.0.0,>=1.2.0; extra == 'fireworks'
 Provides-Extra: google-genai
-Requires-Dist: langchain-google-genai<5.0.0,>=4.2.1; extra == 'google-genai'
+Requires-Dist: langchain-google-genai<5.0.0,>=4.2.2; extra == 'google-genai'
 Provides-Extra: groq
-Requires-Dist: langchain-groq<2.0.0,>=1.0.0; extra == 'groq'
+Requires-Dist: langchain-groq<2.0.0,>=1.1.2; extra == 'groq'
 Provides-Extra: huggingface
-Requires-Dist: langchain-huggingface<2.0.0,>=1.0.0; extra == 'huggingface'
+Requires-Dist: langchain-huggingface<2.0.0,>=1.2.2; extra == 'huggingface'
 Provides-Extra: ibm
-Requires-Dist: langchain-ibm<2.0.0,>=1.0.0; extra == 'ibm'
+Requires-Dist: langchain-ibm<2.0.0,>=1.0.7; extra == 'ibm'
 Provides-Extra: litellm
-Requires-Dist: langchain-litellm<2.0.0,>=0.6.1; extra == 'litellm'
+Requires-Dist: langchain-litellm<2.0.0,>=0.6.4; extra == 'litellm'
 Provides-Extra: mistralai
-Requires-Dist: langchain-mistralai<2.0.0,>=1.0.0; extra == 'mistralai'
+Requires-Dist: langchain-mistralai<2.0.0,>=1.1.2; extra == 'mistralai'
 Provides-Extra: modal
-Requires-Dist: langchain-modal>=0.0.2; extra == 'modal'
+Requires-Dist: langchain-modal>=0.0.3; extra == 'modal'
 Provides-Extra: nvidia
-Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.0.0; extra == 'nvidia'
+Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.2.1; extra == 'nvidia'
 Provides-Extra: ollama
-Requires-Dist: langchain-ollama<2.0.0,>=1.0.0; extra == 'ollama'
+Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'ollama'
 Provides-Extra: openai
-Requires-Dist: langchain-openai<2.0.0,>=1.1.12; extra == 'openai'
+Requires-Dist: langchain-openai<2.0.0,>=1.2.1; extra == 'openai'
 Provides-Extra: openrouter
-Requires-Dist: langchain-openrouter<2.0.0,>=0.2.0; extra == 'openrouter'
+Requires-Dist: langchain-openrouter<2.0.0,>=0.2.1; extra == 'openrouter'
 Provides-Extra: perplexity
-Requires-Dist: langchain-perplexity<2.0.0,>=1.0.0; extra == 'perplexity'
+Requires-Dist: langchain-perplexity<2.0.0,>=1.1.0; extra == 'perplexity'
 Provides-Extra: runloop
-Requires-Dist: langchain-runloop>=0.0.3; extra == 'runloop'
+Requires-Dist: langchain-runloop>=0.0.4; extra == 'runloop'
 Provides-Extra: vertexai
-Requires-Dist: langchain-google-vertexai<4.0.0,>=3.0.0; extra == 'vertexai'
+Requires-Dist: langchain-google-vertexai<4.0.0,>=3.2.2; extra == 'vertexai'
 Provides-Extra: xai
-Requires-Dist: langchain-xai<2.0.0,>=1.0.0; extra == 'xai'
+Requires-Dist: langchain-xai<2.0.0,>=1.2.2; extra == 'xai'
 Description-Content-Type: text/markdown
 
 # 🧠🤖 Deep Agents CLI
@@ -132,7 +132,7 @@ Description-Content-Type: text/markdown
 [![PyPI - Version](https://img.shields.io/pypi/v/deepagents-cli?label=%20)](https://pypi.org/project/deepagents-cli/#history)
 [![PyPI - License](https://img.shields.io/pypi/l/deepagents-cli)](https://opensource.org/licenses/MIT)
 [![PyPI - Downloads](https://img.shields.io/pepy/dt/deepagents-cli)](https://pypistats.org/packages/deepagents-cli)
-[![Twitter](https://img.shields.io/twitter/url/https/twitter.com/langchain.svg?style=social&label=Follow%20%40LangChain)](https://x.com/langchain)
+[![Twitter](https://img.shields.io/twitter/url/https/twitter.com/langchain_oss.svg?style=social&label=Follow%20%40LangChain)](https://x.com/langchain_oss)
 
 <p align="center">
   <img src="https://raw.githubusercontent.com/langchain-ai/deepagents/main/libs/cli/images/cli.png" alt="Deep Agents CLI" width="600"/>

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/README.md

@@ -3,7 +3,7 @@
 [![PyPI - Version](https://img.shields.io/pypi/v/deepagents-cli?label=%20)](https://pypi.org/project/deepagents-cli/#history)
 [![PyPI - License](https://img.shields.io/pypi/l/deepagents-cli)](https://opensource.org/licenses/MIT)
 [![PyPI - Downloads](https://img.shields.io/pepy/dt/deepagents-cli)](https://pypistats.org/packages/deepagents-cli)
-[![Twitter](https://img.shields.io/twitter/url/https/twitter.com/langchain.svg?style=social&label=Follow%20%40LangChain)](https://x.com/langchain)
+[![Twitter](https://img.shields.io/twitter/url/https/twitter.com/langchain_oss.svg?style=social&label=Follow%20%40LangChain)](https://x.com/langchain_oss)
 
 <p align="center">
   <img src="https://raw.githubusercontent.com/langchain-ai/deepagents/main/libs/cli/images/cli.png" alt="Deep Agents CLI" width="600"/>

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/deepagents_cli/_version.py

@@ -1,6 +1,6 @@
 """Version information and lightweight constants for `deepagents-cli`."""
 
-__version__ = "0.0.43"  # x-release-please-version
+__version__ = "0.0.44"  # x-release-please-version
 
 DOCS_URL = "https://docs.langchain.com/oss/python/deepagents/cli"
 """URL for `deepagents-cli` documentation."""

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/deepagents_cli/app.py

@@ -849,6 +849,13 @@ class DeepAgentsApp(App):
         self._shell_running = False
         """True while a `!` shell command is executing."""
 
+        self._prewarm_worker: Worker[None] | None = None
+        """Background worker that prewarms `deepagents`/LangChain imports.
+
+        Awaited via `_await_prewarm_imports` before any caller on the event
+        loop re-enters the same module graph (see that method for why).
+        """
+
         # Lifecycle flags & re-entry guards
         self._connecting = server_kwargs is not None
         """True while the backing server is being started or restarted.
@@ -1038,6 +1045,39 @@ class DeepAgentsApp(App):
         colors = theme.get_theme_colors(self)
         return theme.get_css_variable_defaults(colors=colors)
 
+    def _fatal_error(self) -> None:
+        """Render an unhandled-exception traceback without leaking secrets.
+
+        Textual's default `_fatal_error` renders with `show_locals=True`,
+        which prints local variables — including resolved API keys carried
+        in `kwargs` dicts on the call path through `create_model`. Locals
+        are only re-enabled when `DEEPAGENTS_CLI_DEBUG` matches a truthy
+        token (`"1"`, `"true"`, `"yes"`); any other value, including `"0"`
+        and `"false"`, leaves them disabled.
+        """
+        try:
+            import rich
+            from rich.segment import Segments
+            from rich.traceback import Traceback
+
+            from deepagents_cli._env_vars import DEBUG
+        except Exception:  # noqa: BLE001  # mid-teardown import errors fall through to Textual's default rather than double-fault and swallow the original crash
+            super()._fatal_error()
+            return
+
+        self.bell()
+        show_locals = os.environ.get(DEBUG, "").lower() in {"1", "true", "yes"}
+        traceback = Traceback(
+            show_locals=show_locals,
+            width=None,
+            locals_max_length=5,
+            suppress=[rich],
+        )
+        self._exit_renderables.append(
+            Segments(self.console.render(traceback, self.console.options))
+        )
+        self._close_messages_no_wait()
+
     def compose(self) -> ComposeResult:
         """Compose the application layout.
 
@@ -1108,7 +1148,8 @@ class DeepAgentsApp(App):
         # Prewarm heavy imports in a thread while the first frame renders.
         # The user can't type yet, so GIL contention is harmless.  By the
         # time _post_paint_init fires its inline imports are dict lookups.
-        self.run_worker(
+        # Handle is captured so `_await_prewarm_imports` can block on it.
+        self._prewarm_worker = self.run_worker(
             asyncio.to_thread(self._prewarm_deferred_imports),
             exclusive=True,
             group="startup-import-prewarm",
@@ -1580,6 +1621,10 @@ class DeepAgentsApp(App):
         # does the heavy langchain import + SDK init and may refine them
         # (e.g., context_limit from the model profile).
         if self._model_kwargs is not None:
+            # Block on prewarm before re-entering the import graph; see
+            # `_await_prewarm_imports` for the deadlock rationale.
+            await self._await_prewarm_imports()
+
             from deepagents_cli.config import create_model
             from deepagents_cli.model_config import ModelConfigError, save_recent_model
 
@@ -1719,6 +1764,30 @@ class DeepAgentsApp(App):
             self._queued_widgets.clear()
         self._deferred_actions.clear()
 
+    async def _await_prewarm_imports(self) -> None:
+        """Wait for prewarm imports before re-entering their module graph.
+
+        Prevents a multi-threaded import deadlock: the prewarm worker runs in
+        `asyncio.to_thread`, and any caller that imports `deepagents` or
+        LangChain from the event-loop thread while it's still running can
+        race on partially-initialized module locks.
+
+        `CancelledError` propagates so app shutdown isn't silently absorbed.
+        """
+        from textual.worker import WorkerFailed
+
+        worker = self._prewarm_worker
+        if worker is None:
+            return
+        try:
+            await worker.wait()
+        except WorkerFailed:
+            # Prewarm body best-efforts third-party imports and already
+            # warns; logging at WARNING here surfaces unexpected failures
+            # (e.g. a regression that breaks a non-optional import) that
+            # the body itself didn't catch.
+            logger.warning("Import prewarm worker failed", exc_info=True)
+
     @staticmethod
     def _prewarm_deferred_imports() -> None:
         """Background-load modules deferred from the startup path.

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "deepagents-cli"
-version = "0.0.43"
+version = "0.0.44"
 description = "Terminal interface for Deep Agents - interactive AI agent with file operations, shell access, and sub-agent capabilities."
 readme = "README.md"
 license = { text = "MIT" }
@@ -38,8 +38,8 @@ dependencies = [
 
     # Core model providers - others are added as optional
     "langchain-anthropic>=1.4.2,<2.0.0",
-    "langchain-google-genai>=4.2.1,<5.0.0",
-    "langchain-openai>=1.1.12,<2.0.0",
+    "langchain-google-genai>=4.2.2,<5.0.0",
+    "langchain-openai>=1.2.1,<2.0.0",
 
     # UI/Terminal
     # Workaround for Textualize/textual#6378 lives in `_textual_patches.py`.
@@ -74,7 +74,7 @@ dependencies = [
     "tomli-w>=1.0.0,<2.0.0",
 
     # MCP
-    "langchain-mcp-adapters>=0.2.0,<1.0.0",
+    "langchain-mcp-adapters>=0.2.2,<1.0.0",
 
     # ACP
     "deepagents-acp>=0.0.4",
@@ -83,33 +83,33 @@ dependencies = [
 [project.optional-dependencies]
 # Model providers
 anthropic = ["langchain-anthropic>=1.4.2,<2.0.0"]
-baseten = ["langchain-baseten>=0.1.9,<1.0.0"]
-bedrock = ["langchain-aws>=1.0.0,<2.0.0"]
-cohere = ["langchain-cohere>=0.5.0,<1.0.0"]
-deepseek = ["langchain-deepseek>=1.0.0,<2.0.0"]
-fireworks = ["langchain-fireworks>=1.0.0,<2.0.0"]
-google-genai = ["langchain-google-genai>=4.2.1,<5.0.0"]
-groq = ["langchain-groq>=1.0.0,<2.0.0"]
-huggingface = ["langchain-huggingface>=1.0.0,<2.0.0"]
-ibm = ["langchain-ibm>=1.0.0,<2.0.0"]
-litellm = ["langchain-litellm>=0.6.1,<2.0.0"]
-mistralai = ["langchain-mistralai>=1.0.0,<2.0.0"]
-nvidia = ["langchain-nvidia-ai-endpoints>=1.0.0,<2.0.0"]
-ollama = ["langchain-ollama>=1.0.0,<2.0.0"]
-openai = ["langchain-openai>=1.1.12,<2.0.0"]
-openrouter = ["langchain-openrouter>=0.2.0,<2.0.0"]
-perplexity = ["langchain-perplexity>=1.0.0,<2.0.0"]
-vertexai = ["langchain-google-vertexai>=3.0.0,<4.0.0"]
-xai = ["langchain-xai>=1.0.0,<2.0.0"]
+baseten = ["langchain-baseten>=0.2.0,<1.0.0"]
+bedrock = ["langchain-aws>=1.4.5,<2.0.0"]
+cohere = ["langchain-cohere>=0.5.1,<1.0.0"]
+deepseek = ["langchain-deepseek>=1.0.1,<2.0.0"]
+fireworks = ["langchain-fireworks>=1.2.0,<2.0.0"]
+google-genai = ["langchain-google-genai>=4.2.2,<5.0.0"]
+groq = ["langchain-groq>=1.1.2,<2.0.0"]
+huggingface = ["langchain-huggingface>=1.2.2,<2.0.0"]
+ibm = ["langchain-ibm>=1.0.7,<2.0.0"]
+litellm = ["langchain-litellm>=0.6.4,<2.0.0"]
+mistralai = ["langchain-mistralai>=1.1.2,<2.0.0"]
+nvidia = ["langchain-nvidia-ai-endpoints>=1.2.1,<2.0.0"]
+ollama = ["langchain-ollama>=1.1.0,<2.0.0"]
+openai = ["langchain-openai>=1.2.1,<2.0.0"]
+openrouter = ["langchain-openrouter>=0.2.1,<2.0.0"]
+perplexity = ["langchain-perplexity>=1.1.0,<2.0.0"]
+vertexai = ["langchain-google-vertexai>=3.2.2,<4.0.0"]
+xai = ["langchain-xai>=1.2.2,<2.0.0"]
 all-providers = [
     "deepagents-cli[anthropic,baseten,bedrock,cohere,deepseek,fireworks,google-genai,groq,huggingface,ibm,litellm,mistralai,nvidia,ollama,openai,openrouter,perplexity,vertexai,xai]",
 ]
 
 # Sandbox providers
-agentcore = ["langchain-agentcore-codeinterpreter>=0.0.1"]
-daytona = ["langchain-daytona>=0.0.4"]
-modal = ["langchain-modal>=0.0.2"]
-runloop = ["langchain-runloop>=0.0.3"]
+agentcore = ["langchain-agentcore-codeinterpreter>=0.0.2"]
+daytona = ["langchain-daytona>=0.0.5"]
+modal = ["langchain-modal>=0.0.3"]
+runloop = ["langchain-runloop>=0.0.4"]
 all-sandboxes = [
     "deepagents-cli[agentcore,daytona,modal,runloop]",
 ]
@@ -125,7 +125,7 @@ Documentation = "https://reference.langchain.com/python/deepagents/"
 Repository = "https://github.com/langchain-ai/deepagents"
 Issues = "https://github.com/langchain-ai/deepagents/issues"
 Changelog = "https://github.com/langchain-ai/deepagents/blob/main/libs/cli/CHANGELOG.md"
-Twitter = "https://x.com/LangChain"
+Twitter = "https://x.com/langchain_oss"
 Slack = "https://www.langchain.com/join-community"
 Reddit = "https://www.reddit.com/r/LangChain/"
 

{deepagents_cli-0.0.43 → deepagents_cli-0.0.44}/tests/unit_tests/test_app.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import asyncio
+import contextlib
 import inspect
 import io
 import os
@@ -5472,3 +5473,187 @@ class TestNotificationCenterIntegration:
             await pilot.pause()
 
             assert isinstance(app.screen, NotificationCenterScreen)
+
+
+class TestFatalErrorRedaction:
+    """`_fatal_error` must not leak local variables (which carry secrets).
+
+    Locals on the `create_model` call path include resolved API keys in a
+    `kwargs` dict. Textual's default rendering uses `show_locals=True`,
+    which would print them. We disable locals unless `DEEPAGENTS_CLI_DEBUG`
+    is set to a truthy token.
+    """
+
+    @staticmethod
+    def _call_fatal_error(app: DeepAgentsApp) -> MagicMock:
+        """Run `_fatal_error` with the rendering pipeline patched out.
+
+        Returns the `Traceback` mock so callers can inspect its kwargs.
+        """
+        with (
+            patch("rich.traceback.Traceback") as mock_traceback,
+            patch("rich.segment.Segments"),
+            patch.object(app, "console", MagicMock()),
+            patch.object(app, "_close_messages_no_wait"),
+            patch.object(app, "bell"),
+        ):
+            app._fatal_error()
+        return mock_traceback
+
+    def test_show_locals_disabled_by_default(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        """Default crash rendering hides locals so secrets don't reach stderr."""
+        monkeypatch.delenv("DEEPAGENTS_CLI_DEBUG", raising=False)
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+
+        mock_traceback = self._call_fatal_error(app)
+
+        mock_traceback.assert_called_once()
+        assert mock_traceback.call_args.kwargs["show_locals"] is False
+
+    def test_show_locals_enabled_when_debug_env_truthy(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        """Truthy `DEEPAGENTS_CLI_DEBUG` re-enables locals for debugging."""
+        monkeypatch.setenv("DEEPAGENTS_CLI_DEBUG", "1")
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+
+        mock_traceback = self._call_fatal_error(app)
+
+        assert mock_traceback.call_args.kwargs["show_locals"] is True
+
+    @pytest.mark.parametrize("falsy", ["0", "false", "no", "", "False", "  "])
+    def test_show_locals_disabled_for_falsy_strings(
+        self, monkeypatch: pytest.MonkeyPatch, falsy: str
+    ) -> None:
+        """`DEEPAGENTS_CLI_DEBUG=0` (or other falsy strings) MUST NOT enable locals.
+
+        Regression guard: an earlier `bool(os.environ.get(...))` check would
+        have flipped to `True` for any non-empty string, leaking the API key
+        whenever a user set the var to `"0"` or `"false"` thinking they were
+        disabling the flag.
+        """
+        monkeypatch.setenv("DEEPAGENTS_CLI_DEBUG", falsy)
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+
+        mock_traceback = self._call_fatal_error(app)
+
+        assert mock_traceback.call_args.kwargs["show_locals"] is False
+
+    def test_falls_back_to_super_on_import_failure(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        """If the override's own imports fail, defer to Textual's default.
+
+        Otherwise the user double-faults during a real crash and never sees
+        any traceback at all.
+        """
+        monkeypatch.delenv("DEEPAGENTS_CLI_DEBUG", raising=False)
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+
+        with (
+            patch.dict("sys.modules", {"rich.traceback": None}),
+            patch("textual.app.App._fatal_error") as super_fatal,
+        ):
+            app._fatal_error()
+
+        super_fatal.assert_called_once()
+
+
+class TestPrewarmAwait:
+    """`_start_server_background` must wait for the prewarm worker first.
+
+    The prewarm worker imports `deepagents`/LangChain in a separate thread
+    via `asyncio.to_thread`. If `_start_server_background` triggers the
+    same module graph from the event-loop thread before prewarm finishes,
+    Python's per-module locks form a cycle and CPython raises
+    `_DeadlockError` from the import system.
+    """
+
+    async def test_await_prewarm_imports_no_worker(self) -> None:
+        """No-op when the prewarm worker handle isn't set."""
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+        assert app._prewarm_worker is None
+        await app._await_prewarm_imports()  # must not raise
+
+    async def test_await_prewarm_imports_waits_for_worker(self) -> None:
+        """Awaits `Worker.wait()` so the import-prewarm thread is fully done."""
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+        worker = MagicMock()
+        worker.wait = AsyncMock()
+        app._prewarm_worker = worker
+
+        await app._await_prewarm_imports()
+
+        worker.wait.assert_awaited_once()
+
+    async def test_await_prewarm_imports_swallows_worker_failure(self) -> None:
+        """`WorkerFailed` is non-fatal; main path proceeds regardless."""
+        from textual.worker import WorkerFailed
+
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+        worker = MagicMock()
+        worker.wait = AsyncMock(side_effect=WorkerFailed(RuntimeError("boom")))
+        app._prewarm_worker = worker
+
+        await app._await_prewarm_imports()  # must not raise
+
+        worker.wait.assert_awaited_once()
+
+    async def test_await_prewarm_imports_propagates_cancellation(self) -> None:
+        """`CancelledError` MUST propagate so app shutdown isn't absorbed."""
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+        worker = MagicMock()
+        worker.wait = AsyncMock(side_effect=asyncio.CancelledError())
+        app._prewarm_worker = worker
+
+        with pytest.raises(asyncio.CancelledError):
+            await app._await_prewarm_imports()
+
+    async def test_start_server_background_awaits_prewarm_before_create_model(
+        self,
+    ) -> None:
+        """Locks the call-order invariant that fixes the deadlock.
+
+        A future refactor that moves the `await _await_prewarm_imports()`
+        after `create_model` (or drops it) silently re-introduces the
+        production crash. This is the only test that catches that.
+        """
+        from deepagents_cli import config as cli_config
+
+        call_order: list[str] = []
+
+        app = DeepAgentsApp(agent=MagicMock(), thread_id="t")
+        app._model_kwargs = {"model_spec": "anthropic:claude-opus-4-7"}
+        app._server_kwargs = None
+        app._mcp_preload_kwargs = None
+        app._resume_thread_intent = None
+        app._assistant_id = None
+
+        async def record_prewarm() -> None:
+            call_order.append("prewarm")
+            await asyncio.sleep(0)  # yield so any out-of-order calls would land first
+
+        def record_create_model(**_: Any) -> MagicMock:
+            call_order.append("create_model")
+            result = MagicMock()
+            result.apply_to_settings = MagicMock()
+            result.provider = "anthropic"
+            result.model_name = "claude-opus-4-7"
+            return result
+
+        with (
+            patch.object(app, "_await_prewarm_imports", side_effect=record_prewarm),
+            patch.object(cli_config, "create_model", side_effect=record_create_model),
+            patch("deepagents_cli.model_config.save_recent_model"),
+            patch.object(app, "post_message"),
+            # `_start_server_background` continues past `create_model` into
+            # server + MCP setup we don't care about for an ordering test.
+            contextlib.suppress(Exception),
+        ):
+            await app._start_server_background()
+
+        assert call_order[:2] == ["prewarm", "create_model"], (
+            f"prewarm must precede create_model; got {call_order}"
+        )