deepagents-code 0.1.85__tar.gz → 0.1.86__tar.gz

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/AGENTS.md

@@ -143,7 +143,9 @@ Hints that tell the user to run something (for example the teardown `-r <thread>
 
 ## Splash screen tips
 
-When adding a user-facing CLI feature (new slash command, keybinding, workflow), add a corresponding entry to the `_TIPS` dict in `deepagents_code/tui/widgets/startup_tip.py`, mapping the tip text to a relative selection weight (higher = shown more often). One tip is chosen at random above the input on startup to help users discover features. Keep tips short and action-oriented (e.g., `"Press ctrl+g to compose prompts in your external editor"`).
+Treat the `_TIPS` dict in `deepagents_code/tui/widgets/startup_tip.py` as a curated, limited-attention surface, not a feature changelog. Do not add a tip by default when adding a feature. One tip is chosen at random above the chat input on startup, so each addition competes with existing tips.
+
+Add a tip only for a broadly useful, frequently applicable action that is hard to discover through existing help or UI and can be explained accurately in one short, action-oriented sentence (e.g., `"Press ctrl+g to compose prompts in your external editor"`). Niche or advanced configuration, experimental or opt-in tuning, and features requiring caveats about cost, quality, or tradeoffs belong in documentation or contextual help, not startup tips. If the value to most users is unclear, leave the list unchanged. Before adding one, check for overlap and explain why it earns space over existing tips in the PR. Map accepted tip text to a relative selection weight (higher = shown more often); do not increase weight merely because a feature is new.
 
 ## Slash commands
 

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 # Deep Agents Code Changelog
 
+## [0.1.86](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.85...deepagents-code==0.1.86) (2026-10-16)
+
+### Features
+
+- Add NVIDIA OpenShell as a sandbox provider ([#6999](https://github.com/langchain-ai/deepagents/pull/6999)).
+- Show a banner when a prompt cache expires ([#6957](https://github.com/langchain-ai/deepagents/pull/6957)).
+
+### Bug Fixes
+
+- Add `/resume` as an alias and improve how alias matches are ranked ([#6988](https://github.com/langchain-ai/deepagents/pull/6988)).
+- Report workspace refusals accurately when resuming a thread ([#6992](https://github.com/langchain-ai/deepagents/pull/6992)).
+- Replace repeated thread-resume errors ([#6990](https://github.com/langchain-ai/deepagents/pull/6990)).
+- Replace the chat input when recalling a prompt ([#6994](https://github.com/langchain-ai/deepagents/pull/6994)).
+- Show an expired prompt cache in the footer ([#6970](https://github.com/langchain-ai/deepagents/pull/6970)).
+- Provide actionable errors when Groq tool limits are reached ([#6996](https://github.com/langchain-ai/deepagents/pull/6996)).
+- Compare effective interpreter permissions ([#6993](https://github.com/langchain-ai/deepagents/pull/6993)).
+
 ## [0.1.85](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.84...deepagents-code==0.1.85) (2026-10-14)
 
 ### Bug Fixes

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/COMMANDS.md

@@ -49,7 +49,7 @@ aliases, descriptions, visibility, or hidden-command metadata.
 | `/scrollbar` |  | Show or hide the chat scrollbar |
 | `/skill-creator` |  | Create or refine agent skills |
 | `/theme` |  | Change color theme |
-| `/threads` |  | Browse and resume past threads |
+| `/threads` | `/resume` | Browse and resume past threads |
 | `/timestamps` |  | Show or hide message timestamps |
 | `/tokens` |  | Show token usage |
 | `/tools` |  | List the tools available to the agent |

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: deepagents-code
-Version: 0.1.85
+Version: 0.1.86
 Summary: Terminal coding agent built on the Deep Agents SDK - works with any model, with persistent memory, customizable skills, subagents, and approval controls.
 Project-URL: Homepage, https://www.langchain.com/dcode
 Project-URL: Documentation, https://docs.langchain.com/oss/deepagents/code/overview
@@ -30,21 +30,21 @@ Requires-Python: <4.0,>=3.12
 Requires-Dist: aiosqlite<1.0.0,>=0.22.1
 Requires-Dist: anyio<5.0.0,>=4.14.2
 Requires-Dist: deepagents-acp<1.0.0,>=0.0.10
-Requires-Dist: deepagents==0.7.25
+Requires-Dist: deepagents==0.7.28
 Requires-Dist: fastmcp<5.0.0,>=4.0.0b4
 Requires-Dist: filelock<3.30,>=3.29.7
-Requires-Dist: genai-prices<0.2.0,>=0.1.12
+Requires-Dist: genai-prices<0.2.0,>=0.1.13
 Requires-Dist: httpx<1.0.0,>=0.28.1
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.6
 Requires-Dist: langchain-google-genai<5.0.0,>=4.4.2
-Requires-Dist: langchain-openai<2.0.0,>=1.7.1
+Requires-Dist: langchain-openai<2.0.0,>=1.7.2
 Requires-Dist: langchain-quickjs<0.4.0,>=0.3.4
-Requires-Dist: langchain<2.0.0,>=1.4.5
+Requires-Dist: langchain<2.0.0,>=1.4.6
 Requires-Dist: langgraph-checkpoint-sqlite<4.0.0,>=3.1.2
-Requires-Dist: langgraph-cli[inmem]<1.0.0,>=0.4.34
-Requires-Dist: langgraph-runtime-inmem<1.0.0,>=0.36.0
+Requires-Dist: langgraph-cli[inmem]<1.0.0,>=0.4.35
+Requires-Dist: langgraph-runtime-inmem<1.0.0,>=0.36.1
 Requires-Dist: langgraph-sdk<1.0.0,>=0.4.7
-Requires-Dist: langsmith[sandbox]>=0.14.8
+Requires-Dist: langsmith[sandbox]>=0.14.11
 Requires-Dist: markdownify<2.0.0,>=1.2.3
 Requires-Dist: mcp<3.0.0,>=2.0.0
 Requires-Dist: packaging>=26.2
@@ -67,7 +67,7 @@ Requires-Dist: langchain-agentcore-codeinterpreter<1.0.0,>=0.0.5; extra == 'agen
 Provides-Extra: all-providers
 Requires-Dist: aiohttp<3.15.0,>=3.14.3; extra == 'all-providers'
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.6; extra == 'all-providers'
-Requires-Dist: langchain-aws<2.0.0,>=1.8.2; extra == 'all-providers'
+Requires-Dist: langchain-aws<2.0.0,>=1.9.0; extra == 'all-providers'
 Requires-Dist: langchain-baseten<1.0.0,>=0.2.5; extra == 'all-providers'
 Requires-Dist: langchain-cohere<1.0.0,>=0.6.0; extra == 'all-providers'
 Requires-Dist: langchain-deepseek<2.0.0,>=1.1.1; extra == 'all-providers'
@@ -77,12 +77,12 @@ Requires-Dist: langchain-google-vertexai<4.0.0,>=3.2.4; extra == 'all-providers'
 Requires-Dist: langchain-groq<2.0.0,>=1.1.3; extra == 'all-providers'
 Requires-Dist: langchain-huggingface<2.0.0,>=1.2.3; extra == 'all-providers'
 Requires-Dist: langchain-ibm<2.0.0,>=1.1.2; extra == 'all-providers'
-Requires-Dist: langchain-litellm<2.0.0,>=0.11.0; extra == 'all-providers'
+Requires-Dist: langchain-litellm<2.0.0,>=0.11.1; extra == 'all-providers'
 Requires-Dist: langchain-meta<2.0.0,>=0.5.0; extra == 'all-providers'
 Requires-Dist: langchain-mistralai<2.0.0,>=1.1.6; extra == 'all-providers'
-Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.4.3; extra == 'all-providers'
+Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.5.0; extra == 'all-providers'
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'all-providers'
-Requires-Dist: langchain-openai<2.0.0,>=1.7.1; extra == 'all-providers'
+Requires-Dist: langchain-openai<2.0.0,>=1.7.2; extra == 'all-providers'
 Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'all-providers'
 Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'all-providers'
 Requires-Dist: langchain-together<2.0.0,>=0.4.0; extra == 'all-providers'
@@ -91,6 +91,7 @@ Provides-Extra: all-sandboxes
 Requires-Dist: langchain-agentcore-codeinterpreter<1.0.0,>=0.0.5; extra == 'all-sandboxes'
 Requires-Dist: langchain-daytona>=0.0.7; extra == 'all-sandboxes'
 Requires-Dist: langchain-modal>=0.0.5; extra == 'all-sandboxes'
+Requires-Dist: langchain-nvidia-openshell>=0.1.1; extra == 'all-sandboxes'
 Requires-Dist: langchain-runloop>=0.0.6; extra == 'all-sandboxes'
 Requires-Dist: langchain-vercel-sandbox>=0.0.1; extra == 'all-sandboxes'
 Provides-Extra: anthropic
@@ -98,7 +99,7 @@ Requires-Dist: langchain-anthropic<2.0.0,>=1.7.6; extra == 'anthropic'
 Provides-Extra: baseten
 Requires-Dist: langchain-baseten<1.0.0,>=0.2.5; extra == 'baseten'
 Provides-Extra: bedrock
-Requires-Dist: langchain-aws<2.0.0,>=1.8.2; extra == 'bedrock'
+Requires-Dist: langchain-aws<2.0.0,>=1.9.0; extra == 'bedrock'
 Provides-Extra: cohere
 Requires-Dist: langchain-cohere<1.0.0,>=0.6.0; extra == 'cohere'
 Provides-Extra: daytona
@@ -116,7 +117,7 @@ Requires-Dist: langchain-huggingface<2.0.0,>=1.2.3; extra == 'huggingface'
 Provides-Extra: ibm
 Requires-Dist: langchain-ibm<2.0.0,>=1.1.2; extra == 'ibm'
 Provides-Extra: litellm
-Requires-Dist: langchain-litellm<2.0.0,>=0.11.0; extra == 'litellm'
+Requires-Dist: langchain-litellm<2.0.0,>=0.11.1; extra == 'litellm'
 Provides-Extra: media
 Requires-Dist: av<19.0.0,>=18.0.0; extra == 'media'
 Requires-Dist: pillow<13.0.0,>=12.3.0; extra == 'media'
@@ -128,13 +129,15 @@ Provides-Extra: modal
 Requires-Dist: langchain-modal>=0.0.5; extra == 'modal'
 Provides-Extra: nvidia
 Requires-Dist: aiohttp<3.15.0,>=3.14.3; extra == 'nvidia'
-Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.4.3; extra == 'nvidia'
+Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.5.0; extra == 'nvidia'
 Provides-Extra: ollama
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'ollama'
 Provides-Extra: openai
-Requires-Dist: langchain-openai<2.0.0,>=1.7.1; extra == 'openai'
+Requires-Dist: langchain-openai<2.0.0,>=1.7.2; extra == 'openai'
 Provides-Extra: openrouter
 Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'openrouter'
+Provides-Extra: openshell
+Requires-Dist: langchain-nvidia-openshell>=0.1.1; extra == 'openshell'
 Provides-Extra: perplexity
 Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'perplexity'
 Provides-Extra: quickjs

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/_build_info.py

@@ -1,3 +1,3 @@
 """Generated at build time. Do not edit or commit."""
 
-BUILD_COMMIT = "4bfa520"
+BUILD_COMMIT = "577e3f1"

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/_server_config.py

@@ -563,6 +563,12 @@ class ServerConfig:
 
     def to_workspace_payload(self) -> dict[str, Any]:
         """Return non-secret resource policy for a durable workspace binding."""
+        from deepagents_code.configuration.interpreter import InterpreterConfig
+
+        interpreter = InterpreterConfig.from_resolver(
+            ptc=self.interpreter_ptc,
+            ptc_acknowledge_unsafe=self.interpreter_ptc_acknowledge_unsafe,
+        )
         return {
             "assistant_id": self.assistant_id,
             "auto_approve": self.auto_approve,
@@ -574,10 +580,8 @@ class ServerConfig:
             "enable_memory": self.enable_memory,
             "enable_skills": self.enable_skills,
             "enable_interpreter": self.enable_interpreter,
-            "interpreter_ptc": self.interpreter_ptc,
-            "interpreter_ptc_acknowledge_unsafe": (
-                self.interpreter_ptc_acknowledge_unsafe
-            ),
+            "interpreter_ptc": interpreter.ptc,
+            "interpreter_ptc_acknowledge_unsafe": interpreter.ptc_acknowledge_unsafe,
             "allow_fs_tools": self.allow_fs_tools,
             "recursion_limit": self.recursion_limit,
             "sandbox_type": self.sandbox_type,

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/_version.py

@@ -2,7 +2,7 @@
 
 # Keep the `x-release-please-version` annotation — release-please uses it to
 # bump `__version__` in sync with `pyproject.toml` on every release PR.
-__version__ = "0.1.85"  # x-release-please-version
+__version__ = "0.1.86"  # x-release-please-version
 
 DOCS_URL = "https://docs.langchain.com/oss/python/deepagents/code"
 """URL for `deepagents-code` documentation."""

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/app.py

@@ -2641,6 +2641,38 @@ def _langsmith_gateway_key_mismatch(provider: str | None) -> str | None:
     return resolved_env_var_name(key_env)
 
 
+def _build_resume_workspace_error_body(exc: BaseException) -> str | Content:
+    """Return markup-safe workspace refusal guidance with allowlisted field names."""
+    from deepagents_code.client.remote_client import workspace_conflict_diagnostics
+    from deepagents_code.workspace_diagnostics import (
+        SAFE_SNAPSHOT_FIELDS,
+        FieldChange,
+        WorkspaceDiagnostics,
+        format_diagnostics_content,
+    )
+
+    text = (
+        "Couldn't restore this thread's workspace because the server refused its "
+        "configuration. Model restoration was not attempted. Restore the original "
+        "settings or start a separate server with matching configuration, then "
+        "retry resume."
+    )
+    diagnostics = workspace_conflict_diagnostics(exc)
+    if diagnostics is None:
+        return text
+    safe = WorkspaceDiagnostics(
+        category="unknown",
+        reason="workspace configuration conflict",
+        changes=tuple(
+            FieldChange(name=change.name, state="values_unavailable")
+            for change in diagnostics.changes
+            if change.name in SAFE_SNAPSHOT_FIELDS
+        ),
+        snapshot_status=diagnostics.snapshot_status,
+    )
+    return Content.assemble(text, "\n\n", format_diagnostics_content(safe))
+
+
 def _build_agent_error_body(
     text: str, exc: BaseException, *, key_env: str | None = None
 ) -> str | Content:
@@ -2911,6 +2943,7 @@ _SANDBOX_DISPLAY_NAMES: dict[str, str] = {
     "daytona": "Daytona",
     "langsmith": "LangSmith",
     "modal": "Modal",
+    "openshell": "OpenShell",
     "runloop": "Runloop",
 }
 """Human-readable display names for sandbox providers."""
@@ -4340,6 +4373,7 @@ class DeepAgentsApp(App):
         state and must not appear in scrollback or serialized history.
         """
 
+        self._thread_switch_error_widget: ErrorMessage | None = None
         self._startup_failure_widget: ErrorMessage | None = None
         """Transient chat surface for the most recent server-startup failure.
         Mounted by `on_deep_agents_app_server_start_failed`; removed on
@@ -4877,6 +4911,7 @@ class DeepAgentsApp(App):
         header = _StaticHeader(id="app-header")
         header.display = self._header_should_display()
         yield header
+        yield Static("Prompt cache expired", id="cache-expired-banner")
         # Main chat area with scrollable messages
         # VerticalScroll tracks user scroll intent for better auto-scroll behavior.
         # `_ChatScroll` keeps clicks on messages from stealing input focus.
@@ -9716,12 +9751,26 @@ class DeepAgentsApp(App):
         except Exception:
             logger.debug("Cache-expiring notification failed", exc_info=True)
 
+    def _refresh_cache_expiry_banner(self) -> None:
+        """Show reconciled cache expiry independently of handoff preferences."""
+        if not self.screen_stack:
+            return
+        banners = self.screen_stack[0].query("#cache-expired-banner")
+        if banners:
+            expires_at = self._status_bar.cache_expires_at if self._status_bar else None
+            banners.first().display = (
+                not self._cache_reconciliation_pending
+                and expires_at is not None
+                and datetime.now(UTC) >= expires_at
+            )
+
     def _check_cache_expiry(self) -> None:
         """Offer a handoff once per expired cache window, only when idle.
 
         Polled every second from `on_mount`. Acts only when
         `warnings.cache_prompt` is `expiry` and no cold-cache opt-out applies.
         """
+        self._refresh_cache_expiry_banner()
         expires_at = self._status_bar.cache_expires_at if self._status_bar else None
         thread_id = self._lc_thread_id
         if (
@@ -17723,7 +17772,9 @@ class DeepAgentsApp(App):
                 raise
         elif cmd == "/rename" or cmd.startswith("/rename "):
             await self._rename_current_thread(command.partition(" ")[2])
-        elif cmd == "/threads" or cmd.startswith("/threads "):
+        elif cmd in {"/threads", "/resume"} or cmd.startswith(
+            ("/threads ", "/resume ")
+        ):
             await self._handle_threads_command(command)
         elif cmd == "/trace":
             await self._handle_trace_command(command)
@@ -21954,6 +22005,7 @@ class DeepAgentsApp(App):
                 self._last_cache_write = activity
             await self._refresh_cache_timing()
         self._cache_reconciliation_pending = pending
+        self._refresh_cache_expiry_banner()
 
     def _set_active_message(self, message_id: str | None) -> None:
         """Set the active streaming message (won't be pruned).
@@ -24651,7 +24703,7 @@ class DeepAgentsApp(App):
                             severity="warning",
                         )
                     return
-                if result is not None and not current_input.insert_at_cursor(result):
+                if result is not None and not current_input.replace_with_prompt(result):
                     self.notify(
                         "Could not insert the prompt: the composer is unavailable",
                         severity="warning",
@@ -29952,7 +30004,24 @@ class DeepAgentsApp(App):
                 "Use /threads to try again.",
                 exc,
             )
-            await self._mount_message(ErrorMessage(body))
+            await self._mount_thread_switch_error(body)
+
+    async def _mount_thread_switch_error(self, body: str | Content) -> None:
+        """Replace transient thread-switch failures without storing them in history."""
+        async with self._transcript_mutation_lock:
+            prior = self._thread_switch_error_widget
+            self._thread_switch_error_widget = None
+            if prior is not None and prior.is_attached:
+                await prior.remove()
+            try:
+                messages = self.query_one("#messages", Container)
+            except NoMatches:
+                return
+            if not messages.is_attached:
+                return
+            widget = ErrorMessage(body)
+            await self._mount_before_queued(messages, widget)
+            self._thread_switch_error_widget = widget
 
     async def _resolve_threads_resume_target(
         self, requested_id: str | None
@@ -30189,11 +30258,9 @@ class DeepAgentsApp(App):
                     "Failed to prefetch cross-agent thread %s",
                     target.thread_id,
                 )
-                await self._mount_message(
-                    ErrorMessage(
-                        f"Could not load thread {target.thread_id}: {exc}. "
-                        "Staying on the current agent."
-                    )
+                await self._mount_thread_switch_error(
+                    f"Could not load thread {target.thread_id}: {exc}. "
+                    "Staying on the current agent."
                 )
                 return
 
@@ -30233,11 +30300,9 @@ class DeepAgentsApp(App):
                 target.thread_id,
                 target.agent_name,
             )
-            await self._mount_message(
-                ErrorMessage(
-                    f"Could not switch to agent {target.agent_name!r} and resume "
-                    f"thread {target.thread_id}."
-                )
+            await self._mount_thread_switch_error(
+                f"Could not switch to agent {target.agent_name!r} and resume "
+                f"thread {target.thread_id}."
             )
 
     def _open_thread_reference_selector(self, initial_query: str) -> None:
@@ -31468,11 +31533,9 @@ class DeepAgentsApp(App):
                     await self._restore_cwd_after_failed_thread_switch(prev_cwd)
                     if isinstance(exc, asyncio.CancelledError):
                         raise
-                    await self._mount_message(
-                        AppMessage(
-                            f"Failed to switch to thread {thread_id}: {exc}. "
-                            "Use /threads to try again.",
-                        ),
+                    await self._mount_thread_switch_error(
+                        f"Failed to switch to thread {thread_id}: {exc}. "
+                        "Use /threads to try again."
                     )
                     return
                 logger.exception("Failed to switch to thread %s", thread_id)
@@ -31520,7 +31583,7 @@ class DeepAgentsApp(App):
                 if rollback_restore_failed:
                     error_message += " Previous thread history could not be restored."
                 error_message += " Use /threads to try again."
-                await self._mount_message(AppMessage(error_message))
+                await self._mount_thread_switch_error(error_message)
             finally:
                 if self._chat_input:
                     self._chat_input.set_cursor_active(active=not self._agent_running)
@@ -31949,9 +32012,16 @@ class DeepAgentsApp(App):
             except Exception as exc:
                 logger.exception("Failed to resolve model metadata for %s", display)
                 if from_resume:
-                    await self._mount_resume_adoption_failure(
-                        display, "the model could not be initialized"
-                    )
+                    from langgraph_sdk.errors import ConflictError
+
+                    if isinstance(exc, ConflictError):
+                        await self._mount_message(
+                            ErrorMessage(_build_resume_workspace_error_body(exc))
+                        )
+                    else:
+                        await self._mount_resume_adoption_failure(
+                            display, "the model could not be initialized"
+                        )
                 else:
                     await self._mount_message(
                         ErrorMessage(_build_model_switch_error_body(exc)),

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/app.tcss

@@ -19,6 +19,16 @@ Screen {
     visibility: hidden;
 }
 
+#cache-expired-banner {
+    display: none;
+    height: 1;
+    width: 100%;
+    background: $error;
+    color: $text;
+    text-align: center;
+    text-style: bold;
+}
+
 /* Main content goes on base layer by default */
 
 .message-timestamp-footer {

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/command_registry.py

@@ -71,6 +71,7 @@ class SlashCommand:
             description=self.description,
             hidden_keywords=self.hidden_keywords,
             argument_hint=self.argument_hint,
+            aliases=self.aliases,
         )
 
 
@@ -254,6 +255,7 @@ COMMANDS: tuple[SlashCommand, ...] = (
         bypass_tier=BypassTier.IMMEDIATE_UI,
         hidden_keywords="continue history sessions resume back previous",
         argument_hint="[-r [ID]]",
+        aliases=("/resume",),
     ),
     SlashCommand(
         name="/trace",
@@ -482,6 +484,9 @@ class CommandEntry(NamedTuple):
     (e.g. `/skill:my-plugin:review`). Falls back to `name` when empty.
     """
 
+    aliases: tuple[str, ...] = ()
+    """Alternative command names used for autocomplete ranking."""
+
     def label(self) -> str:
         """Return the popup label, preferring `display_name` over `name`.
 

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/configuration/interpreter.py

@@ -6,7 +6,10 @@ from dataclasses import dataclass
 from typing import TYPE_CHECKING, cast
 
 from deepagents_code.config_manifest import _emit_ranked_diagnostics, get_option
-from deepagents_code.configuration.resolver import get_config_resolver
+from deepagents_code.configuration.resolver import (
+    CLI_RANK,
+    get_config_resolver,
+)
 
 if TYPE_CHECKING:
     from collections.abc import Mapping
@@ -77,6 +80,12 @@ class InterpreterConfig:
         """
         values = _resolved_values(resolver or get_config_resolver())
         resolved_ptc = cast("str | bool | list[str]", values["interpreter.ptc"].value)
+        ptc_policy = values["interpreter.ptc"]
+        acknowledgement = values["interpreter.ptc_acknowledge_unsafe"]
+        if any(rank < CLI_RANK for rank in ptc_policy.ranks):
+            ptc = None
+        if any(rank < CLI_RANK for rank in acknowledgement.ranks):
+            ptc_acknowledge_unsafe = False
         return cls(
             timeout_seconds=cast("float", values["interpreter.timeout_seconds"].value),
             memory_limit_mb=cast("int", values["interpreter.memory_limit_mb"].value),

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/extras_info.py

@@ -1027,7 +1027,7 @@ Keep in sync with `[project.optional-dependencies]` in `pyproject.toml`.
 """
 
 SANDBOX_EXTRAS: frozenset[str] = frozenset(
-    {"agentcore", "daytona", "modal", "runloop", "vercel"}
+    {"agentcore", "daytona", "modal", "openshell", "runloop", "vercel"}
 )
 """Optional extras that add sandbox integrations."""
 

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/integrations/sandbox_factory.py

@@ -99,9 +99,9 @@ def create_sandbox(
 
     Args:
         provider: Sandbox provider name. Built-ins (`'agentcore'`, `'daytona'`,
-            `'langsmith'`, `'modal'`, `'runloop'`, `'vercel'`), entry-point
-            providers, and config-declared providers are all resolved through
-            the registry.
+            `'langsmith'`, `'modal'`, `'openshell'`, `'runloop'`, `'vercel'`),
+            entry-point providers, and config-declared providers are all
+            resolved through the registry.
         sandbox_id: Optional existing sandbox ID to reuse
         snapshot_name: Optional sandbox snapshot name to use or create.
             Honored by providers whose metadata sets `supports_snapshot_name`
@@ -1365,6 +1365,113 @@ class _VercelProvider(SandboxProvider):
             raise RuntimeError(msg) from exc
 
 
+_OPENSHELL_DEFAULT_WORKSPACE = "default"
+"""Workspace the OpenShell CLI uses when `OPENSHELL_WORKSPACE` is unset."""
+
+
+class _OpenShellProvider(SandboxProvider):
+    """NVIDIA OpenShell sandbox provider, bound to the active gateway.
+
+    Credentials come from the OpenShell CLI's on-disk gateway state, so no
+    token is read here. `OPENSHELL_GATEWAY` and `OPENSHELL_WORKSPACE` select
+    the gateway and workspace, as they do for the CLI.
+    """
+
+    def __init__(self) -> None:
+        """Connect to the active OpenShell gateway.
+
+        Raises:
+            RuntimeError: If no gateway is configured or it cannot be reached.
+        """
+        openshell = _import_provider_module(
+            "openshell",
+            provider="openshell",
+            package="langchain-nvidia-openshell",
+        )
+
+        from deepagents_code.model_config import resolve_env_var
+
+        try:
+            self._client = openshell.SandboxClient.from_active_cluster(
+                cluster=resolve_env_var("OPENSHELL_GATEWAY")
+            )
+        except Exception as exc:  # OpenShell SDK exception types vary by version
+            # Generic message avoids leaking gateway auth state; chain keeps cause.
+            msg = (
+                "Failed to connect to the active OpenShell gateway. Run "
+                "`openshell gateway select` or set OPENSHELL_GATEWAY."
+            )
+            raise RuntimeError(msg) from exc
+        self._workspace = (
+            resolve_env_var("OPENSHELL_WORKSPACE") or _OPENSHELL_DEFAULT_WORKSPACE
+        )
+        self._names: dict[str, str] = {}
+        """Sandbox name by id; the SDK deletes by name, callers delete by id."""
+
+    def get_or_create(
+        self,
+        *,
+        sandbox_id: str | None = None,
+        timeout: int = 180,
+        **kwargs: Any,  # noqa: ARG002
+    ) -> SandboxBackendProtocol:
+        """Attach to an OpenShell sandbox by name, or create one.
+
+        Args:
+            sandbox_id: Existing sandbox name, as the OpenShell CLI shows it.
+            timeout: Seconds to wait for a new sandbox to become ready.
+            **kwargs: Unused.
+
+        Returns:
+            `OpenShellSandbox` instance.
+        """
+        backend = _import_provider_module(
+            "langchain_nvidia_openshell",
+            provider="openshell",
+            package="langchain-nvidia-openshell",
+        )
+        session = self._attach(sandbox_id) if sandbox_id else self._create(timeout)
+        self._names[session.id] = session.sandbox.name
+        return backend.OpenShellSandbox(sandbox=session)
+
+    def delete(self, *, sandbox_id: str, **kwargs: Any) -> None:  # noqa: ARG002
+        """Delete an OpenShell sandbox by id, or by name if it was not created here."""
+        name = self._names.pop(sandbox_id, sandbox_id)
+        self._client.delete(name, workspace=self._workspace, allow_missing=True)
+
+    def _attach(self, name: str) -> Any:  # noqa: ANN401  # `openshell.SandboxSession`; SDK is optional
+        try:
+            return self._client.get_session(name, workspace=self._workspace)
+        except Exception as exc:
+            code = getattr(exc, "code", None)
+            if callable(code) and getattr(code(), "name", None) == "NOT_FOUND":
+                raise SandboxNotFoundError(name) from exc
+            raise
+
+    def _create(self, timeout: int) -> Any:  # noqa: ANN401  # `openshell.SandboxSession`; SDK is optional
+        session = self._client.create_session(workspace=self._workspace)
+        name = session.sandbox.name
+        try:
+            self._client.wait_ready(
+                name, workspace=self._workspace, timeout_seconds=timeout
+            )
+        except Exception as exc:
+            self._discard(name)
+            msg = (
+                f"OpenShell sandbox {name} did not become ready within "
+                f"{timeout} seconds."
+            )
+            raise RuntimeError(msg) from exc
+        return session
+
+    def _discard(self, name: str) -> None:
+        """Delete a sandbox that failed to start; `create_sandbox` never saw it."""
+        try:
+            self._client.delete(name, workspace=self._workspace, allow_missing=True)
+        except Exception:  # Cleanup must not mask the startup failure
+            logger.warning("Could not delete OpenShell sandbox %s", name, exc_info=True)
+
+
 def _get_provider(
     provider_name: str,
     registry: SandboxRegistry | None = None,

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/integrations/sandbox_registry.py

@@ -62,6 +62,12 @@ BUILTIN_METADATA: dict[str, SandboxProviderMetadata] = {
         install=SandboxInstallHint(kind="extra", name="modal"),
         backend_module="langchain_modal",
     ),
+    "openshell": SandboxProviderMetadata(
+        name="openshell",
+        working_dir="/sandbox",  # `$HOME` in OpenShell's sandbox images
+        install=SandboxInstallHint(kind="extra", name="openshell"),
+        backend_module="langchain_nvidia_openshell",
+    ),
     "runloop": SandboxProviderMetadata(
         name="runloop",
         working_dir="/home/user",
@@ -345,6 +351,7 @@ def _create_builtin_provider(name: str) -> SandboxProvider:
         "daytona": sandbox_factory._DaytonaProvider,
         "langsmith": sandbox_factory._LangSmithProvider,
         "modal": sandbox_factory._ModalProvider,
+        "openshell": sandbox_factory._OpenShellProvider,
         "runloop": sandbox_factory._RunloopProvider,
         "vercel": sandbox_factory._VercelProvider,
     }

{deepagents_code-0.1.85 → deepagents_code-0.1.86}/deepagents_code/main.py

@@ -2740,7 +2740,8 @@ def parse_args() -> argparse.Namespace:
         metavar="TYPE",
         help=(
             "Remote sandbox for code execution (default: none - local only). "
-            "Built-ins: agentcore, daytona, langsmith, modal, runloop, vercel. "
+            "Built-ins: agentcore, daytona, langsmith, modal, openshell, runloop, "
+            "vercel. "
             "Third-party and config-declared providers are also accepted. "
             "Pass --sandbox with no value to use [sandboxes].default from "
             "config (keep the bare form last on the command line so a "