deepagents-cli 0.0.55__tar.gz → 0.0.56__tar.gz

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Deep Agents CLI Changelog
 
+## [0.0.56](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.55...deepagents-cli==0.0.56) (2026-05-11)
+
+### Features
+
+* Free-text reject reason on HITL approval prompt ([#3344](https://github.com/langchain-ai/deepagents/issues/3344)) ([dcc48f4](https://github.com/langchain-ai/deepagents/commit/dcc48f48d20757f17011e65b61363dd0347af164))
+* Add docs link to project MCP approval prompt ([#3341](https://github.com/langchain-ai/deepagents/issues/3341)) ([b5c1228](https://github.com/langchain-ai/deepagents/commit/b5c12280e47bc37938290a4219317f47c1abfa8a))
+
+### Bug Fixes
+
+* Dedupe MCP servers in project trust approval prompt ([#3342](https://github.com/langchain-ai/deepagents/issues/3342)) ([73484ea](https://github.com/langchain-ai/deepagents/commit/73484ea551189985190f52cb26b299819d3fc37d))
+* Remove legacy shell tool aliases and harden HITL widget cleanup ([#3340](https://github.com/langchain-ai/deepagents/issues/3340)) ([398f7f4](https://github.com/langchain-ai/deepagents/commit/398f7f4512182a8e51cbdfbfb9dc211c77014e2b))
+* Truncate multi-line shell commands in HITL approval ([#3314](https://github.com/langchain-ai/deepagents/issues/3314)) ([7ab6e14](https://github.com/langchain-ai/deepagents/commit/7ab6e14565d6dd9d9c9e76d9d6677e5568a727f7))
+* (Deploy) Add `together` provider to bundler deps and optional extras ([#2670](https://github.com/langchain-ai/deepagents/issues/2670)) ([4290953](https://github.com/langchain-ai/deepagents/commit/4290953e44570ec02399e4d423ab4ffd24e97609))
+
+### Performance Improvements
+
+* Gate dropped-path detection on multi-character insert size ([#3343](https://github.com/langchain-ai/deepagents/issues/3343)) ([06a21e8](https://github.com/langchain-ai/deepagents/commit/06a21e8a69738b7ba055d2f13dae4cd9fab353cd))
+
 ## [0.0.55](https://github.com/langchain-ai/deepagents/compare/deepagents-cli==0.0.54...deepagents-cli==0.0.55) (2026-05-11)
 
 ### Bug Fixes

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deepagents-cli
-Version: 0.0.55
+Version: 0.0.56
 Summary: Terminal interface for Deep Agents - interactive AI agent with file operations, shell access, and sub-agent capabilities.
 Project-URL: Homepage, https://docs.langchain.com/oss/python/deepagents/overview
 Project-URL: Documentation, https://reference.langchain.com/python/deepagents/
@@ -76,6 +76,7 @@ Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'all-providers'
 Requires-Dist: langchain-openai<2.0.0,>=1.2.1; extra == 'all-providers'
 Requires-Dist: langchain-openrouter<2.0.0,>=0.2.3; extra == 'all-providers'
 Requires-Dist: langchain-perplexity<2.0.0,>=1.2.0; extra == 'all-providers'
+Requires-Dist: langchain-together<2.0.0,>=0.4.0; extra == 'all-providers'
 Requires-Dist: langchain-xai<2.0.0,>=1.2.2; extra == 'all-providers'
 Provides-Extra: all-sandboxes
 Requires-Dist: langchain-agentcore-codeinterpreter>=0.0.2; extra == 'all-sandboxes'
@@ -122,6 +123,8 @@ Provides-Extra: perplexity
 Requires-Dist: langchain-perplexity<2.0.0,>=1.2.0; extra == 'perplexity'
 Provides-Extra: runloop
 Requires-Dist: langchain-runloop>=0.0.4; extra == 'runloop'
+Provides-Extra: together
+Requires-Dist: langchain-together<2.0.0,>=0.4.0; extra == 'together'
 Provides-Extra: vertexai
 Requires-Dist: langchain-google-vertexai<4.0.0,>=3.2.3; extra == 'vertexai'
 Provides-Extra: xai

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/_env_vars.py

@@ -47,6 +47,19 @@ as enabled, and `0`, `false`, `no`, `off`, empty string, or unset as disabled.""
 DEBUG_FILE = "DEEPAGENTS_CLI_DEBUG_FILE"
 """Path for the debug log file (default: `/tmp/deepagents_debug.log`)."""
 
+DEBUG_MCP_PROJECT_TRUST = "DEEPAGENTS_CLI_DEBUG_MCP_PROJECT_TRUST"
+"""Force the project MCP approval prompt for manual UI testing.
+
+Set to a truthy value when launching the interactive CLI to render the
+project-level MCP trust prompt without relying on an untrusted config state. If
+project MCP servers are discovered, the prompt shows those real servers;
+otherwise it shows a sample server. The CLI exits after the prompt response so
+the debug run does not continue into TUI or server startup, and it does not
+persist trust decisions.
+
+Parsed by `is_env_truthy`: accepts `1`, `true`, `yes`, `on` as enabled.
+"""
+
 DEBUG_NOTIFICATIONS = "DEEPAGENTS_CLI_DEBUG_NOTIFICATIONS"
 """Inject sample missing-dependency notifications at launch so the notification
 center UI can be exercised without waiting for real conditions. Does not

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/_version.py

@@ -1,6 +1,6 @@
 """Version information and lightweight constants for `deepagents-cli`."""
 
-__version__ = "0.0.55"  # x-release-please-version
+__version__ = "0.0.56"  # x-release-please-version
 
 DOCS_URL = "https://docs.langchain.com/oss/python/deepagents/cli"
 """URL for `deepagents-cli` documentation."""

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/agent.py

@@ -88,11 +88,11 @@ REQUIRE_COMPACT_TOOL_APPROVAL: bool = True
 class ShellAllowListMiddleware(AgentMiddleware):
     """Validate shell commands against an allow-list without HITL interrupts.
 
-    When the agent invokes a shell tool (any tool in `SHELL_TOOL_NAMES`),
-    this middleware checks the command against the configured allow-list
-    **before execution**. Rejected commands are returned as error `ToolMessage`
-    objects — the graph never pauses, so LangSmith traces stay as a single
-    continuous run.
+    When the agent invokes the `execute` shell tool, this middleware checks
+    the command against the configured allow-list **before execution**.
+    Rejected commands are returned as error `ToolMessage` objects — the
+    graph never pauses, so LangSmith traces stay as a single continuous
+    run.
 
     Use this middleware in non-interactive mode to avoid the
     interrupt/resume cycle that fragments traces.
@@ -135,10 +135,9 @@ class ShellAllowListMiddleware(AgentMiddleware):
         """
         from langchain_core.messages import ToolMessage as LCToolMessage
 
-        from deepagents_cli.config import SHELL_TOOL_NAMES, is_shell_command_allowed
+        from deepagents_cli.config import is_shell_command_allowed
 
-        tool_name = request.tool_call["name"]
-        if tool_name not in SHELL_TOOL_NAMES:
+        if request.tool_call["name"] != "execute":
             return None
 
         args = request.tool_call.get("args") or {}
@@ -155,7 +154,7 @@ class ShellAllowListMiddleware(AgentMiddleware):
                 f"Allowed commands: {allowed_str}. "
                 f"Please use an allowed command or try another approach."
             ),
-            name=tool_name,
+            name="execute",
             tool_call_id=request.tool_call["id"],
             status="error",
         )

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/app.py

@@ -3378,7 +3378,6 @@ class DeepAgentsApp(App):
             A Future that resolves to the user's decision.
         """
         from deepagents_cli.config import (
-            SHELL_TOOL_NAMES,
             is_shell_command_allowed,
             settings,
         )
@@ -3392,7 +3391,7 @@ class DeepAgentsApp(App):
             approved_commands = []
 
             for req in action_requests:
-                if req.get("name") in SHELL_TOOL_NAMES:
+                if req.get("name") == "execute":
                     command = req.get("args", {}).get("command", "")
                     if is_shell_command_allowed(command, settings.shell_allow_list):
                         approved_commands.append(command)

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/app.tcss

@@ -224,6 +224,13 @@ ToolCallMessage.-ascii:hover {
     margin-top: 0;
 }
 
+/* Free-text reject reason input (Tab on Reject) */
+.approval-menu .approval-reason-input {
+    margin: 1 0 0 0;
+    border: solid $warning;
+    background: $surface;
+}
+
 /* Ask user widget */
 .ask-user-menu {
     height: auto;

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/config.py

@@ -1464,14 +1464,6 @@ class SessionState:
         return self.auto_approve
 
 
-SHELL_TOOL_NAMES: frozenset[str] = frozenset({"bash", "shell", "execute"})
-"""Tool names recognized as shell/command-execution tools.
-
-Only `'execute'` is registered by the SDK and CLI backends in practice.
-`'bash'` and `'shell'` are legacy names carried over and kept as
-backwards-compatible aliases.
-"""
-
 DANGEROUS_SHELL_PATTERNS = (
     "$(",  # Command substitution
     "`",  # Backtick command substitution

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/deploy/bundler.py

@@ -68,6 +68,7 @@ _MODEL_PROVIDER_DEPS: dict[str, str] = {
     "openai": "langchain-openai",
     "openrouter": "langchain-openrouter",
     "perplexity": "langchain-perplexity",
+    "together": "langchain-together",
     "xai": "langchain-xai",
 }
 """Dependencies inferred from a provider: prefix on the model string."""

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/extras_info.py

@@ -49,6 +49,7 @@ MODEL_PROVIDER_EXTRAS: frozenset[str] = frozenset(
         "openai",
         "openrouter",
         "perplexity",
+        "together",
         "vertexai",
         "xai",
     }

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/main.py

@@ -1432,6 +1432,13 @@ def _print_session_stats(stats: Any, console: Any) -> None:  # noqa: ANN401
     print_usage_table(stats, stats.wall_time_seconds, console)
 
 
+def _debug_mcp_project_trust_enabled() -> bool:
+    """Return whether the project MCP approval prompt debug path is enabled."""
+    from deepagents_cli._env_vars import DEBUG_MCP_PROJECT_TRUST, is_env_truthy
+
+    return is_env_truthy(DEBUG_MCP_PROJECT_TRUST)
+
+
 def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
     """Check whether project-level MCP servers should be trusted.
 
@@ -1457,9 +1464,12 @@ def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
         discover_mcp_configs,
         extract_project_server_summaries,
         load_mcp_config_lenient,
+        merge_mcp_configs,
     )
     from deepagents_cli.project_utils import ProjectContext
 
+    debug_prompt = _debug_mcp_project_trust_enabled()
+
     try:
         project_context = ProjectContext.from_user_cwd(Path.cwd())
         config_paths = discover_mcp_configs(project_context=project_context)
@@ -1467,15 +1477,29 @@ def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
         return None
 
     _, project_configs = classify_discovered_configs(config_paths)
-    if not project_configs:
+    if not project_configs and not debug_prompt:
         return None
 
-    # Collect all servers (stdio + remote) across project configs
-    all_servers: list[tuple[str, str, str]] = []
-    for path in project_configs:
-        cfg = load_mcp_config_lenient(path)
-        if cfg is not None:
-            all_servers.extend(extract_project_server_summaries(cfg))
+    # Merge configs by server name (last wins, matching the loader) so that
+    # a server defined in multiple project configs (for example,
+    # `.deepagents/.mcp.json` and higher-precedence `.mcp.json`) only shows
+    # up once in the prompt.
+    loaded_configs = [
+        cfg
+        for cfg in (load_mcp_config_lenient(path) for path in project_configs)
+        if cfg is not None
+    ]
+    merged_config = merge_mcp_configs(loaded_configs)
+    all_servers = extract_project_server_summaries(merged_config)
+
+    if not all_servers and debug_prompt:
+        all_servers = [
+            (
+                "debug-project-mcp",
+                "stdio",
+                "uvx deepagents-debug-mcp --sample-project-server",
+            )
+        ]
 
     if not all_servers:
         return None
@@ -1495,12 +1519,16 @@ def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
     )
     fingerprint = compute_config_fingerprint(project_configs)
 
-    if is_project_mcp_trusted(project_root, fingerprint):
+    if not debug_prompt and is_project_mcp_trusted(project_root, fingerprint):
         return True
 
     # Interactive prompt
     from rich.console import Console as _Console
 
+    docs_url = (
+        "https://docs.langchain.com/oss/python/deepagents/cli/"
+        "mcp-tools#project-level-trust"
+    )
     prompt_console = _Console(stderr=True)
     prompt_console.print()
     prompt_console.print(
@@ -1509,6 +1537,11 @@ def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
     for name, kind, summary in all_servers:
         prompt_console.print(f'  [bold]"{name}"[/bold] ({kind}):  {summary}')
     prompt_console.print()
+    prompt_console.print(
+        f"[dim]Learn more: [link={docs_url}]{docs_url}[/link][/dim]",
+        highlight=False,
+    )
+    prompt_console.print()
 
     try:
         answer = input("Allow? [y/N]: ").strip().lower()
@@ -1516,7 +1549,8 @@ def _check_mcp_project_trust(*, trust_flag: bool = False) -> bool | None:
         answer = ""
 
     if answer == "y":
-        trust_project_mcp(project_root, fingerprint)
+        if not debug_prompt:
+            trust_project_mcp(project_root, fingerprint)
         return True
     return False
 
@@ -2109,6 +2143,8 @@ def cli_main() -> None:
             mcp_trust_decision = _check_mcp_project_trust(
                 trust_flag=getattr(args, "trust_project_mcp", False),
             )
+            if _debug_mcp_project_trust_enabled():
+                sys.exit(0)
 
             # Run Textual CLI
             return_code = 0

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/non_interactive.py

@@ -41,7 +41,6 @@ from deepagents_cli._version import __version__
 from deepagents_cli.agent import DEFAULT_AGENT_NAME
 from deepagents_cli.config import (
     SHELL_ALLOW_ALL,
-    SHELL_TOOL_NAMES,
     build_langsmith_thread_url,
     create_model,
     is_shell_command_allowed,
@@ -470,7 +469,7 @@ def _make_hitl_decision(
 
     action_name = action_request.get("name", "")
 
-    if action_name in SHELL_TOOL_NAMES:
+    if action_name == "execute":
         if not settings.shell_allow_list:
             command = action_request.get("args", {}).get("command", "")
             console.print(

{deepagents_cli-0.0.55 → deepagents_cli-0.0.56}/deepagents_cli/textual_adapter.py

@@ -1150,10 +1150,32 @@ async def execute_task_textual(
                                 ]
                             },
                         )
-                        future = await adapter._request_approval(
-                            action_requests, assistant_id
-                        )
-                        decision = await future
+                        # Hide shell tool widgets while the approval renders the
+                        # same command; restore before processing the decision
+                        # so subsequent status updates render on the visible
+                        # widget.
+                        suppressed_tool_msgs = [
+                            tool_msg
+                            for tool_msg in adapter._current_tool_messages.values()
+                            if tool_msg.tool_name == "execute"
+                        ]
+                        for tool_msg in suppressed_tool_msgs:
+                            tool_msg.set_awaiting_approval()
+                        try:
+                            future = await adapter._request_approval(
+                                action_requests, assistant_id
+                            )
+                            decision = await future
+                        finally:
+                            for tool_msg in suppressed_tool_msgs:
+                                try:
+                                    tool_msg.clear_awaiting_approval()
+                                except Exception:
+                                    logger.exception(
+                                        "Failed to clear awaiting-approval "
+                                        "state on tool widget %s",
+                                        tool_msg.tool_name,
+                                    )
 
                         if isinstance(decision, dict):
                             decision_type = decision.get("type")
@@ -1206,17 +1228,35 @@ async def execute_task_textual(
                                             )
 
                             elif decision_type == "reject":
-                                decisions = [
-                                    RejectDecision(type="reject")
-                                    for _ in action_requests
-                                ]
+                                reject_message = decision.get("message")
+                                reject_message = (
+                                    reject_message
+                                    if isinstance(reject_message, str)
+                                    and reject_message.strip()
+                                    else None
+                                )
+                                reject_decision: RejectDecision = (
+                                    RejectDecision(
+                                        type="reject", message=reject_message
+                                    )
+                                    if reject_message
+                                    else RejectDecision(type="reject")
+                                )
+                                decisions = [reject_decision for _ in action_requests]
                                 tool_msgs = list(
                                     adapter._current_tool_messages.values()
                                 )
                                 for tool_msg in tool_msgs:
-                                    tool_msg.set_rejected()
+                                    tool_msg.set_rejected(reason=reject_message)
                                 adapter._current_tool_messages.clear()
-                                any_rejected = True
+                                # Bare reject aborts the turn and shows the
+                                # canned "Command rejected" banner so the user
+                                # can redirect. When a reason is supplied, the
+                                # reason itself serves as feedback for the
+                                # agent: keep `any_rejected=False` so the
+                                # stream resumes and the banner is suppressed.
+                                if reject_message is None:
+                                    any_rejected = True
                             else:
                                 logger.warning(
                                     "Unexpected HITL decision type: %s",