deepagents-code 0.1.71__tar.gz → 0.1.73__tar.gz

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/CHANGELOG.md

@@ -2,6 +2,44 @@
 
 # Deep Agents Code Changelog
 
+## [0.1.73](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.72...deepagents-code==0.1.73) (2026-09-22)
+
+### Features
+
+- Added cache bust timer to the footer. ([#6394](https://github.com/langchain-ai/deepagents/pull/6394))
+- Added a durable Debug Console cost breakdown. ([#6246](https://github.com/langchain-ai/deepagents/pull/6246))
+- Added support for copying the highlighted thread ID with `Ctrl+C`. ([#6431](https://github.com/langchain-ai/deepagents/pull/6431))
+
+### Bug Fixes
+
+- Improved cost-warning behavior by showing session cost warnings in a modal and suppressing historical cost warnings when resuming. ([#6393](https://github.com/langchain-ai/deepagents/pull/6393), [#6471](https://github.com/langchain-ai/deepagents/pull/6471))
+- Made thread browsing and resume flows more resilient with recoverable thread-picker resume failures, loading labels for thread details, and a clearer thread message count header. ([#6476](https://github.com/langchain-ai/deepagents/pull/6476), [#6430](https://github.com/langchain-ai/deepagents/pull/6430), [#6428](https://github.com/langchain-ai/deepagents/pull/6428))
+- Removed contradictory and invalid system-prompt instructions. ([#6072](https://github.com/langchain-ai/deepagents/pull/6072))
+- Preserved `ask_user` consent receipts across user turns and reconciled interrupted tool requests. ([#6307](https://github.com/langchain-ai/deepagents/pull/6307), [#6321](https://github.com/langchain-ai/deepagents/pull/6321))
+- Cleaned up newly created sandboxes when setup fails. ([#6475](https://github.com/langchain-ai/deepagents/pull/6475))
+- Fixed editable refreshes so they stay anchored to the correct checkout. ([#6455](https://github.com/langchain-ai/deepagents/pull/6455))
+- Kept installation locks outside the uv tool directory. ([#6472](https://github.com/langchain-ai/deepagents/pull/6472))
+- Improved workspace and runtime diagnostics, including separating access-policy compatibility from runtime identity. ([#6384](https://github.com/langchain-ai/deepagents/pull/6384), [#6386](https://github.com/langchain-ai/deepagents/pull/6386))
+- Deduplicated mixed-ID model usage. ([#6432](https://github.com/langchain-ai/deepagents/pull/6432))
+- Clarified the compaction prompt. ([#6429](https://github.com/langchain-ai/deepagents/pull/6429))
+- Restricted auto classifier IDs to the review batch enum. ([#6250](https://github.com/langchain-ai/deepagents/pull/6250))
+- Used UTF-8 for prompts and skill files. ([#6474](https://github.com/langchain-ai/deepagents/pull/6474))
+
+## [0.1.72](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.71...deepagents-code==0.1.72) (2026-09-21)
+
+### Features
+
+- Expanded `read_file` calls now show their arguments. ([#6392](https://github.com/langchain-ai/deepagents/pull/6392))
+
+### Bug Fixes
+
+- Aligned debug log formatting between file and console output. ([#6426](https://github.com/langchain-ai/deepagents/pull/6426))
+- Silenced unnecessary decoder traces for non-media paths. ([#6427](https://github.com/langchain-ai/deepagents/pull/6427))
+
+### Performance Improvements
+
+- Skipped transcript scans when submitting prompts for faster prompt submission. ([#6402](https://github.com/langchain-ai/deepagents/pull/6402))
+
 ## [0.1.71](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.70...deepagents-code==0.1.71) (2026-09-18)
 
 ### Features

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: deepagents-code
-Version: 0.1.71
+Version: 0.1.73
 Summary: Terminal coding agent built on the Deep Agents SDK - works with any model, with persistent memory, customizable skills, subagents, and approval controls.
 Project-URL: Homepage, https://www.langchain.com/dcode
 Project-URL: Documentation, https://docs.langchain.com/oss/deepagents/code/overview
@@ -30,21 +30,21 @@ Requires-Python: <4.0,>=3.12
 Requires-Dist: aiosqlite<1.0.0,>=0.22.1
 Requires-Dist: anyio<5.0.0,>=4.14.2
 Requires-Dist: deepagents-acp<1.0.0,>=0.0.10
-Requires-Dist: deepagents==0.7.15
+Requires-Dist: deepagents==0.7.17
 Requires-Dist: fastmcp<5.0.0,>=4.0.0b4
 Requires-Dist: filelock<3.30,>=3.29.7
 Requires-Dist: genai-prices<0.2.0,>=0.1.7
 Requires-Dist: httpx<1.0.0,>=0.28.1
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.2
 Requires-Dist: langchain-google-genai<5.0.0,>=4.4.0
-Requires-Dist: langchain-openai<2.0.0,>=1.6.2
+Requires-Dist: langchain-openai<2.0.0,>=1.6.3
 Requires-Dist: langchain-quickjs<0.4.0,>=0.3.4
-Requires-Dist: langchain<2.0.0,>=1.4.1
+Requires-Dist: langchain<2.0.0,>=1.4.2
 Requires-Dist: langgraph-checkpoint-sqlite<4.0.0,>=3.1.1
 Requires-Dist: langgraph-cli[inmem]<1.0.0,>=0.4.31
 Requires-Dist: langgraph-runtime-inmem<1.0.0,>=0.34.1
-Requires-Dist: langgraph-sdk<1.0.0,>=0.4.4
-Requires-Dist: langsmith[sandbox]>=0.12.6
+Requires-Dist: langgraph-sdk<1.0.0,>=0.4.5
+Requires-Dist: langsmith[sandbox]>=0.14.0
 Requires-Dist: markdownify<2.0.0,>=1.2.3
 Requires-Dist: mcp<3.0.0,>=2.0.0
 Requires-Dist: packaging>=26.2
@@ -67,11 +67,11 @@ Requires-Dist: langchain-agentcore-codeinterpreter<1.0.0,>=0.0.5; extra == 'agen
 Provides-Extra: all-providers
 Requires-Dist: aiohttp<3.15.0,>=3.14.3; extra == 'all-providers'
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.2; extra == 'all-providers'
-Requires-Dist: langchain-aws<2.0.0,>=1.7.8; extra == 'all-providers'
+Requires-Dist: langchain-aws<2.0.0,>=1.7.9; extra == 'all-providers'
 Requires-Dist: langchain-baseten<1.0.0,>=0.2.4; extra == 'all-providers'
 Requires-Dist: langchain-cohere<1.0.0,>=0.6.0; extra == 'all-providers'
-Requires-Dist: langchain-deepseek<2.0.0,>=1.1.0; extra == 'all-providers'
-Requires-Dist: langchain-fireworks<2.0.0,>=1.6.1; extra == 'all-providers'
+Requires-Dist: langchain-deepseek<2.0.0,>=1.1.1; extra == 'all-providers'
+Requires-Dist: langchain-fireworks<2.0.0,>=1.6.2; extra == 'all-providers'
 Requires-Dist: langchain-google-genai<5.0.0,>=4.4.0; extra == 'all-providers'
 Requires-Dist: langchain-google-vertexai<4.0.0,>=3.2.4; extra == 'all-providers'
 Requires-Dist: langchain-groq<2.0.0,>=1.1.3; extra == 'all-providers'
@@ -82,8 +82,8 @@ Requires-Dist: langchain-meta<2.0.0,>=0.5.0; extra == 'all-providers'
 Requires-Dist: langchain-mistralai<2.0.0,>=1.1.6; extra == 'all-providers'
 Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.4.3; extra == 'all-providers'
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'all-providers'
-Requires-Dist: langchain-openai<2.0.0,>=1.6.2; extra == 'all-providers'
-Requires-Dist: langchain-openrouter<2.0.0,>=0.2.8; extra == 'all-providers'
+Requires-Dist: langchain-openai<2.0.0,>=1.6.3; extra == 'all-providers'
+Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'all-providers'
 Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'all-providers'
 Requires-Dist: langchain-together<2.0.0,>=0.4.0; extra == 'all-providers'
 Requires-Dist: langchain-xai<2.0.0,>=1.3.0; extra == 'all-providers'
@@ -98,15 +98,15 @@ Requires-Dist: langchain-anthropic<2.0.0,>=1.7.2; extra == 'anthropic'
 Provides-Extra: baseten
 Requires-Dist: langchain-baseten<1.0.0,>=0.2.4; extra == 'baseten'
 Provides-Extra: bedrock
-Requires-Dist: langchain-aws<2.0.0,>=1.7.8; extra == 'bedrock'
+Requires-Dist: langchain-aws<2.0.0,>=1.7.9; extra == 'bedrock'
 Provides-Extra: cohere
 Requires-Dist: langchain-cohere<1.0.0,>=0.6.0; extra == 'cohere'
 Provides-Extra: daytona
 Requires-Dist: langchain-daytona>=0.0.7; extra == 'daytona'
 Provides-Extra: deepseek
-Requires-Dist: langchain-deepseek<2.0.0,>=1.1.0; extra == 'deepseek'
+Requires-Dist: langchain-deepseek<2.0.0,>=1.1.1; extra == 'deepseek'
 Provides-Extra: fireworks
-Requires-Dist: langchain-fireworks<2.0.0,>=1.6.1; extra == 'fireworks'
+Requires-Dist: langchain-fireworks<2.0.0,>=1.6.2; extra == 'fireworks'
 Provides-Extra: google-genai
 Requires-Dist: langchain-google-genai<5.0.0,>=4.4.0; extra == 'google-genai'
 Provides-Extra: groq
@@ -132,9 +132,9 @@ Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.4.3; extra == 'nvidia'
 Provides-Extra: ollama
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'ollama'
 Provides-Extra: openai
-Requires-Dist: langchain-openai<2.0.0,>=1.6.2; extra == 'openai'
+Requires-Dist: langchain-openai<2.0.0,>=1.6.3; extra == 'openai'
 Provides-Extra: openrouter
-Requires-Dist: langchain-openrouter<2.0.0,>=0.2.8; extra == 'openrouter'
+Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'openrouter'
 Provides-Extra: perplexity
 Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'perplexity'
 Provides-Extra: quickjs

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_build_info.py

@@ -1,3 +1,3 @@
 """Generated at build time. Do not edit or commit."""
 
-BUILD_COMMIT = "d1674e6"
+BUILD_COMMIT = "d5a1896"

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_debug.py

@@ -36,6 +36,10 @@ from deepagents_code._env_vars import (
 
 logger = logging.getLogger(__name__)
 
+DEBUG_LOG_FORMATTER = logging.Formatter(
+    "%(asctime)s %(levelname)s %(name)s %(message)s"
+)
+
 _DEBUG_HANDLER_ATTR = "_deepagents_code_debug_handler"
 _CONFIGURED_LOGGERS: weakref.WeakSet[logging.Logger] = weakref.WeakSet()
 _ACTIVE_THREAD_ID: str | None = None
@@ -362,7 +366,7 @@ def _attach_debug_handler(target: logging.Logger, debug_path: Path, level: int)
         return
     setattr(handler, _DEBUG_HANDLER_ATTR, True)
     handler.setLevel(level)
-    handler.setFormatter(logging.Formatter("%(asctime)s %(name)s %(message)s"))
+    handler.setFormatter(DEBUG_LOG_FORMATTER)
     target.addHandler(handler)
 
 

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_debug_buffer.py

@@ -20,7 +20,7 @@ import os
 from collections import deque
 from dataclasses import dataclass
 
-from deepagents_code._debug import LOG_LEVELS
+from deepagents_code._debug import DEBUG_LOG_FORMATTER, LOG_LEVELS
 from deepagents_code._env_vars import LOG_LEVEL
 
 DEFAULT_CAPACITY = 1000
@@ -36,9 +36,6 @@ one is bounded to *capacity* and evicts oldest-first, so — unlike the standard
 levels, which each get isolated retention — distinct custom levels compete for a
 single budget and can evict one another."""
 
-_DATE_FORMAT = "%H:%M:%S"
-_FORMATTER = logging.Formatter(datefmt=_DATE_FORMAT)
-
 
 def retention_bucket_for_level(level: str) -> str:
     """Return the bounded retention bucket key for a log level name."""
@@ -173,13 +170,13 @@ class InMemoryLogBuffer(logging.Handler):
         message = record.getMessage()
         if record.exc_info:
             if not record.exc_text:
-                record.exc_text = _FORMATTER.formatException(record.exc_info)
+                record.exc_text = DEBUG_LOG_FORMATTER.formatException(record.exc_info)
             if record.exc_text:
                 message = f"{message}\n{record.exc_text}"
         if record.stack_info:
-            message = f"{message}\n{_FORMATTER.formatStack(record.stack_info)}"
+            message = f"{message}\n{DEBUG_LOG_FORMATTER.formatStack(record.stack_info)}"
         return InMemoryLogRecord(
-            timestamp=_FORMATTER.formatTime(record, _DATE_FORMAT),
+            timestamp=DEBUG_LOG_FORMATTER.formatTime(record).partition(" ")[2],
             level=record.levelname,
             levelno=record.levelno,
             logger=record.name,

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_dep_floor_check.py

@@ -363,13 +363,16 @@ def _refresh_args(uv_path: str) -> list[str]:
             root would execute instead of the legitimate binary.
 
     Returns:
-        Arguments for the user-approved `uv pip install` process.
+        Arguments for the user-approved `uv pip install` process, with uv's
+        configuration discovery anchored to the editable checkout.
     """
     checkout = _checkout_root()
     args = [
         uv_path,
         "pip",
         "install",
+        "--directory",
+        str(checkout),
         "--python",
         sys.executable,
         "-e",

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_paths.py

@@ -861,7 +861,12 @@ def _installation_paths() -> InstallationPaths:
     """
     root = _normalize_absolute(Path(sys.prefix), what="sys.prefix")
     resources = root / "share" / "deepagents-code"
-    locks = root.parent / f".{root.name}.deepagents-code-locks"
+    # uv enumerates every directory beside the tool environment as a package.
+    # Keep persistent locks beside that container instead, outside the environment
+    # uv replaces on upgrade. Mirror this in install.sh's acquire_install_lock.
+    locks = (
+        root.parent.parent / f".{root.parent.name}.{root.name}.deepagents-code-locks"
+    )
     return InstallationPaths(
         root=root,
         managed_bin_dir=resources / "bin",

{deepagents_code-0.1.71 → deepagents_code-0.1.73}/deepagents_code/_server_config.py

@@ -79,6 +79,62 @@ execute one directory's configuration against another directory's trust
 decision.
 """
 
+MODEL_COMPATIBLE_FIELDS = frozenset(
+    {
+        "auto_classifier_model",
+        "cli_max_retries",
+        "model",
+        "rubric_model",
+        "summarization_model",
+    }
+)
+"""Cosmetic model settings that do not affect durable access-policy compat.
+
+Changing which model serves a bound thread — or the retry budget or auxiliary
+grader/classifier models — does not change what the thread is *allowed* to do
+(trust, tool, sandbox, and approval policy are unchanged). These fields are
+therefore excluded from the policy fingerprint, so a model switch does not
+invalidate a durable binding. They remain part of the runtime fingerprint so
+the runtime rebuilds. `None` and an empty/unset value are normalized as
+equivalent here.
+"""
+
+RUNTIME_ONLY_FIELDS = frozenset(
+    {
+        "assistant_id",
+        "model_params",
+        "profile_overrides",
+        "recursion_limit",
+        "rubric_max_iterations",
+        "system_prompt",
+    }
+)
+"""Runtime-identity fields that are not durable access policy.
+
+These shape *how* the runtime executes (model kwargs, prompt, step budget,
+graph id) but are not the trust/tool/sandbox/approval policy a binding guards.
+They are fingerprinted into the runtime identity (so changing them rebuilds the
+runtime) yet never persisted or reported — `model_params`, `profile_overrides`,
+and `system_prompt` can carry secrets and prompt material.
+"""
+
+WORKSPACE_IDENTITY_FIELDS = frozenset({"cwd", "project_root"})
+"""Fields that name *which* workspace a binding is for.
+
+Workspace identity is part of durable access-policy compatibility: a binding
+is meaningless if it can be replayed against a different directory. These are
+compared exactly (canonical paths) and are never normalized away.
+"""
+
+
+def _classified_fields() -> frozenset[str]:
+    """Return every field the policy/runtime split accounts for.
+
+    Returns:
+        The union of all classification sets plus workspace identity.
+    """
+    return MODEL_COMPATIBLE_FIELDS | RUNTIME_ONLY_FIELDS | WORKSPACE_IDENTITY_FIELDS
+
 
 def _same_workspace_project(first: str | None, second: str) -> bool:
     """Whether two paths name the same project directory.
@@ -636,8 +692,34 @@ class ServerConfig:
             return replace(self, trust_project_extensions=False)
         return self
 
-    def workspace_fingerprint(self) -> str:
-        """Fingerprint the resolved runtime config except workspace identity.
+    def policy_fingerprint(self) -> str:
+        """Fingerprint durable access policy plus workspace identity.
+
+        Covers the trust/tool/sandbox/approval payload (the
+        `to_workspace_payload()` keys) and the workspace's `cwd`/`project_root`.
+        Cosmetic model settings (`MODEL_COMPATIBLE_FIELDS`) are excluded so a
+        model switch does not invalidate a durable binding; runtime-only fields
+        (`RUNTIME_ONLY_FIELDS`) are excluded because they are not persisted.
+
+        Returns:
+            The canonical SHA-256 fingerprint.
+        """
+        from deepagents_code.workspace import canonical_fingerprint
+
+        return canonical_fingerprint(
+            {
+                "cwd": self.cwd,
+                "policy": self.to_workspace_payload(),
+                "project_root": self.project_root,
+            }
+        )
+
+    def runtime_fingerprint(self) -> str:
+        """Fingerprint the full runtime identity, including model settings.
+
+        Any change to model, model params, prompt, policy, or runtime fields
+        yields a different value, so the runtime cache can rebuild on any of
+        them while the binding only guards the policy fingerprint.
 
         Returns:
             The canonical SHA-256 fingerprint.
@@ -649,6 +731,16 @@ class ServerConfig:
 
         return canonical_fingerprint(values)
 
+    def workspace_fingerprint(self) -> str:
+        """Fingerprint the resolved runtime config except workspace identity.
+
+        Retained for compatibility; equivalent to `runtime_fingerprint()`.
+
+        Returns:
+            The canonical SHA-256 fingerprint.
+        """
+        return self.runtime_fingerprint()
+
     def __post_init__(self) -> None:
         """Normalize fields and validate invariants.
 
@@ -1015,3 +1107,38 @@ def _normalize_path(
             "Ensure the path exists and is accessible."
         )
         raise ValueError(msg) from exc
+
+
+def classified_config_fields() -> dict[str, str]:
+    """Classify every `ServerConfig` field for the policy/runtime split.
+
+    Every dataclass field must land in exactly one bucket so the fingerprint
+    split cannot silently drop a setting. A field missing from a bucket is a
+    programming error and fails closed (raises) rather than being treated as
+    either policy or runtime by default.
+
+    Returns:
+        A mapping of field name to one of `"model"`, `"runtime"`,
+        `"identity"`, or `"policy"`.
+
+    Raises:
+        RuntimeError: If a `ServerConfig` field is not classified.
+    """
+    import dataclasses
+
+    policy_fields = set(ServerConfig().to_workspace_payload())
+    classification: dict[str, str] = {}
+    for field_info in dataclasses.fields(ServerConfig):
+        name = field_info.name
+        if name in MODEL_COMPATIBLE_FIELDS:
+            classification[name] = "model"
+        elif name in RUNTIME_ONLY_FIELDS:
+            classification[name] = "runtime"
+        elif name in WORKSPACE_IDENTITY_FIELDS:
+            classification[name] = "identity"
+        elif name in policy_fields:
+            classification[name] = "policy"
+        else:
+            msg = f"ServerConfig field {name!r} is not classified"
+            raise RuntimeError(msg)
+    return classification