deepagents-code 0.1.88__tar.gz → 0.2.1__tar.gz

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 # Deep Agents Code Changelog
 
+## [0.2.1](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.2.0...deepagents-code==0.2.1) (2026-10-23)
+
+### Features
+
+- Support skill-scoped MCP tools ([#7010](https://github.com/langchain-ai/deepagents/pull/7010)).
+- Default the Anthropic Auto classifier to Claude Sonnet 5.5 ([#7163](https://github.com/langchain-ai/deepagents/pull/7163)).
+
+### Bug Fixes
+
+- Automatically migrate to Python 3.14 when no other session is running ([#7160](https://github.com/langchain-ai/deepagents/pull/7160)).
+- Use native structured output for the Anthropic Auto classifier ([#7162](https://github.com/langchain-ai/deepagents/pull/7162)).
+
+## [0.2.0](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.88...deepagents-code==0.2.0) (2026-10-22)
+
+### ⚠ BREAKING CHANGES
+
+- `deepagents-code` now requires Python 3.14 (`>=3.14,<3.15`). If you have auto-upgrade enabled, this should be handled for you automatically. Otherwise, re-run the dcode installer or recreate your environment with Python 3.14.
+
+### Bug Fixes
+
+- Decode Git output as UTF-8.
+
 ## [0.1.88](https://github.com/langchain-ai/deepagents/compare/deepagents-code==0.1.87...deepagents-code==0.1.88) (2026-10-22)
 
 ### Bug Fixes

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/DEVELOPMENT.md

@@ -219,7 +219,7 @@ That lets you compare released behavior against local, and fall back to a known-
 
 ```bash
 # 1. Create an isolated venv for the dev binary
-uv venv ~/.local/share/dcode-dev --python 3.13
+uv venv ~/.local/share/dcode-dev --python 3.14
 
 # 2. Install your checkout into it, editable
 uv pip install --python ~/.local/share/dcode-dev/bin/python -e <repo>/libs/code
@@ -228,7 +228,7 @@ uv pip install --python ~/.local/share/dcode-dev/bin/python -e <repo>/libs/code
 ln -sf ~/.local/share/dcode-dev/bin/dcode ~/.local/bin/dcode-dev
 ```
 
-The `--python 3.13` is illustrative — any interpreter satisfying the package's `requires-python` (currently `>=3.12`) works; omit the flag to let `uv` pick.
+The `--python 3.14` is illustrative — any interpreter satisfying the package's `requires-python` (currently `>=3.14,<3.15`) works; omit the flag to let `uv` pick.
 
 > **Why `uv venv` + `uv pip install -e` rather than `uv sync` or `uv tool install --editable`?** This builds an isolated venv *outside* the workspace's locked environment, so the dev binary can be re-resolved on demand without disturbing the released tool or the repo's `uv.lock`. (`uv pip` and `uv venv` are first-class `uv` subcommands here, not bare `pip`.)
 

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: deepagents-code
-Version: 0.1.88
+Version: 0.2.1
 Summary: Terminal coding agent built on the Deep Agents SDK - works with any model, with persistent memory, customizable skills, subagents, and approval controls.
 Project-URL: Homepage, https://www.langchain.com/dcode
 Project-URL: Documentation, https://docs.langchain.com/oss/deepagents/code/overview
@@ -20,52 +20,50 @@ Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Topic :: Terminals
-Requires-Python: <4.0,>=3.12
-Requires-Dist: aiosqlite<1.0.0,>=0.22.1
-Requires-Dist: anyio<5.0.0,>=4.14.2
+Requires-Python: <3.15,>=3.14
+Requires-Dist: aiosqlite>=0.22.1
+Requires-Dist: anyio>=4.14.2
 Requires-Dist: deepagents-acp<1.0.0,>=0.0.10
-Requires-Dist: deepagents==0.7.30
-Requires-Dist: fastmcp<5.0.0,>=4.0.0b4
+Requires-Dist: deepagents==0.7.31
+Requires-Dist: fastmcp>=4.0.0b4
 Requires-Dist: filelock<3.30,>=3.29.7
 Requires-Dist: genai-prices<0.2.0,>=0.1.13
-Requires-Dist: httpx<1.0.0,>=0.28.1
+Requires-Dist: httpx>=0.28.1
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.6
 Requires-Dist: langchain-google-genai<5.0.0,>=4.4.2
 Requires-Dist: langchain-openai<2.0.0,>=1.7.2
 Requires-Dist: langchain-quickjs<0.4.0,>=0.3.4
-Requires-Dist: langchain<2.0.0,>=1.4.6
+Requires-Dist: langchain<2.0.0,>=1.4.7
 Requires-Dist: langgraph-checkpoint-sqlite<4.0.0,>=3.1.2
 Requires-Dist: langgraph-cli[inmem]<1.0.0,>=0.4.37
-Requires-Dist: langgraph-runtime-inmem<1.0.0,>=0.36.2
+Requires-Dist: langgraph-runtime-inmem<1.0.0,>=0.36.5
 Requires-Dist: langgraph-sdk<1.0.0,>=0.4.8
-Requires-Dist: langsmith[sandbox]>=0.14.11
-Requires-Dist: markdownify<2.0.0,>=1.2.3
-Requires-Dist: mcp<3.0.0,>=2.0.0
+Requires-Dist: langsmith[sandbox]>=0.14.12
+Requires-Dist: markdownify>=1.2.3
+Requires-Dist: mcp>=2.0.0
 Requires-Dist: packaging>=26.2
-Requires-Dist: pillow<14.0.0,>=13.0.0
-Requires-Dist: prompt-toolkit<4.0.0,>=3.0.53
-Requires-Dist: pydantic<2.14.0a0,>=2.12.5
-Requires-Dist: pyperclip<2.0.0,>=1.11.0
-Requires-Dist: python-dotenv<2.0.0,>=1.2.2
+Requires-Dist: pillow>=13.0.0
+Requires-Dist: prompt-toolkit>=3.0.53
+Requires-Dist: pydantic<3.0.0,>=2.13.0
+Requires-Dist: pyperclip>=1.11.0
+Requires-Dist: python-dotenv>=1.2.2
 Requires-Dist: pyyaml>=6.0.3
-Requires-Dist: requests<3.0.0,>=2.34.2
-Requires-Dist: rich<16.0.0,>=15.0.0
-Requires-Dist: tavily-python<1.0.0,>=0.7.26
-Requires-Dist: textual-autocomplete<5.0.0,>=4.0.6
-Requires-Dist: textual-speedups<1.0.0,>=0.2.1
+Requires-Dist: requests>=2.34.2
+Requires-Dist: rich>=15.0.0
+Requires-Dist: tavily-python>=0.7.26
+Requires-Dist: textual-autocomplete>=4.0.6
+Requires-Dist: textual-speedups>=0.2.1
 Requires-Dist: textual<9.0.0,>=8.2.8
-Requires-Dist: tomli-w<2.0.0,>=1.2.0
-Requires-Dist: uuid-utils<1.0.0,>=0.17.0
+Requires-Dist: tomli-w>=1.2.0
+Requires-Dist: uuid-utils>=0.17.0
 Provides-Extra: agentcore
 Requires-Dist: langchain-agentcore-codeinterpreter<1.0.0,>=0.0.5; extra == 'agentcore'
 Provides-Extra: all-providers
-Requires-Dist: aiohttp<3.15.0,>=3.14.3; extra == 'all-providers'
+Requires-Dist: aiohttp>=3.14.3; extra == 'all-providers'
 Requires-Dist: langchain-anthropic<2.0.0,>=1.7.6; extra == 'all-providers'
 Requires-Dist: langchain-aws<2.0.0,>=1.9.0; extra == 'all-providers'
 Requires-Dist: langchain-baseten<1.0.0,>=0.2.5; extra == 'all-providers'
@@ -84,7 +82,7 @@ Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.5.0; extra == 'all-provid
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'all-providers'
 Requires-Dist: langchain-openai<2.0.0,>=1.7.2; extra == 'all-providers'
 Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'all-providers'
-Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'all-providers'
+Requires-Dist: langchain-perplexity<2.0.0,>=1.4.2; extra == 'all-providers'
 Requires-Dist: langchain-together<2.0.0,>=0.4.0; extra == 'all-providers'
 Requires-Dist: langchain-xai<2.0.0,>=1.3.0; extra == 'all-providers'
 Provides-Extra: all-sandboxes
@@ -119,8 +117,8 @@ Requires-Dist: langchain-ibm<2.0.0,>=1.1.2; extra == 'ibm'
 Provides-Extra: litellm
 Requires-Dist: langchain-litellm<2.0.0,>=0.11.1; extra == 'litellm'
 Provides-Extra: media
-Requires-Dist: av<19.0.0,>=18.0.0; extra == 'media'
-Requires-Dist: pillow<14.0.0,>=13.0.0; extra == 'media'
+Requires-Dist: av>=18.0.0; extra == 'media'
+Requires-Dist: pillow>=13.0.0; extra == 'media'
 Provides-Extra: meta
 Requires-Dist: langchain-meta<2.0.0,>=0.5.0; extra == 'meta'
 Provides-Extra: mistralai
@@ -128,7 +126,7 @@ Requires-Dist: langchain-mistralai<2.0.0,>=1.1.6; extra == 'mistralai'
 Provides-Extra: modal
 Requires-Dist: langchain-modal>=0.0.5; extra == 'modal'
 Provides-Extra: nvidia
-Requires-Dist: aiohttp<3.15.0,>=3.14.3; extra == 'nvidia'
+Requires-Dist: aiohttp>=3.14.3; extra == 'nvidia'
 Requires-Dist: langchain-nvidia-ai-endpoints<2.0.0,>=1.5.0; extra == 'nvidia'
 Provides-Extra: ollama
 Requires-Dist: langchain-ollama<2.0.0,>=1.1.0; extra == 'ollama'
@@ -139,7 +137,7 @@ Requires-Dist: langchain-openrouter<2.0.0,>=0.2.9; extra == 'openrouter'
 Provides-Extra: openshell
 Requires-Dist: langchain-nvidia-openshell>=0.1.1; extra == 'openshell'
 Provides-Extra: perplexity
-Requires-Dist: langchain-perplexity<2.0.0,>=1.4.1; extra == 'perplexity'
+Requires-Dist: langchain-perplexity<2.0.0,>=1.4.2; extra == 'perplexity'
 Provides-Extra: quickjs
 Provides-Extra: runloop
 Requires-Dist: langchain-runloop>=0.0.6; extra == 'runloop'

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_ask_user_types.py

@@ -109,7 +109,7 @@ def decode_multi_select_answer(raw: str) -> list[str] | None:
     """
     try:
         decoded = json.loads(raw)
-    except (json.JSONDecodeError, RecursionError):
+    except json.JSONDecodeError, RecursionError:
         return None
     if not isinstance(decoded, list) or not all(
         isinstance(value, str) for value in decoded

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_build_info.py

@@ -1,3 +1,3 @@
 """Generated at build time. Do not edit or commit."""
 
-BUILD_COMMIT = "0324ff3"
+BUILD_COMMIT = "8f48aab"

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_dep_floor_check.py

@@ -96,7 +96,7 @@ def _load_cli_requirements() -> list[str] | None:
     try:
         data = tomllib.loads(pyproject.read_text(encoding="utf-8"))
         entries = data["project"]["dependencies"]
-    except (OSError, KeyError, TypeError, tomllib.TOMLDecodeError):
+    except OSError, KeyError, TypeError, tomllib.TOMLDecodeError:
         logger.debug(
             "Could not read dependency floors from the source checkout",
             exc_info=True,
@@ -330,7 +330,7 @@ def _workspace_editable_paths() -> list[Path]:
     try:
         data = tomllib.loads(pyproject.read_text(encoding="utf-8"))
         sources = data["tool"]["uv"]["sources"]
-    except (OSError, KeyError, TypeError, tomllib.TOMLDecodeError):
+    except OSError, KeyError, TypeError, tomllib.TOMLDecodeError:
         logger.debug(
             "Could not read workspace sources from the source checkout",
             exc_info=True,
@@ -565,7 +565,7 @@ def _read_dismissed_fingerprints(path: Path) -> dict[str, str]:
     """
     try:
         data = json.loads(path.read_text(encoding="utf-8"))
-    except (OSError, ValueError):
+    except OSError, ValueError:
         return {}
     if not isinstance(data, dict):
         return {}

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_git.py

@@ -173,7 +173,7 @@ def _read_single_git_metadata_line(path: Path) -> str | None:
         return None
     try:
         raw = path.read_text(encoding="utf-8")
-    except (OSError, UnicodeError):
+    except OSError, UnicodeError:
         logger.debug("Failed to read Git metadata from %s", path, exc_info=True)
         return None
 
@@ -204,7 +204,7 @@ def _resolve_git_metadata_path(path: Path, *, relative_to: Path) -> Path | None:
         candidate = relative_to / candidate
     try:
         return candidate.resolve(strict=True)
-    except (OSError, RuntimeError, ValueError):
+    except OSError, RuntimeError, ValueError:
         logger.debug("Failed to resolve Git metadata path from %s", path, exc_info=True)
         return None
 
@@ -227,7 +227,7 @@ def _normalize_git_metadata_path(path: Path, *, relative_to: Path) -> Path | Non
         candidate = relative_to / candidate
     try:
         return Path(os.path.abspath(candidate))  # noqa: PTH100  # do not follow links
-    except (OSError, RuntimeError, ValueError):
+    except OSError, RuntimeError, ValueError:
         logger.debug(
             "Failed to normalize Git metadata path from %s", path, exc_info=True
         )
@@ -254,7 +254,7 @@ def _parse_trusted_git_dir_pointer(git_entry: Path) -> Path | None:
         candidate = git_entry.parent / candidate
     try:
         git_dir = candidate.resolve(strict=True)
-    except (OSError, RuntimeError, ValueError):
+    except OSError, RuntimeError, ValueError:
         logger.debug(
             "Failed to resolve trusted gitdir pointer %s", git_entry, exc_info=True
         )
@@ -328,7 +328,7 @@ def find_git_common_dir(path: str | Path) -> Path | None:
         backlink = _normalize_git_metadata_path(git_dir / "gitdir", relative_to=git_dir)
         if backlink is None or backlink != git_entry:
             return None
-    except (OSError, RuntimeError, ValueError):
+    except OSError, RuntimeError, ValueError:
         logger.debug(
             "Failed to validate Git common directory for %s", path, exc_info=True
         )
@@ -377,7 +377,7 @@ def _submodule_git_dir(root: Path, parent_config_dir: Path) -> Path | None:
         if not candidate.is_absolute():
             candidate = git_dir / candidate
         return git_dir if candidate.resolve(strict=True) == root else None
-    except (OSError, RuntimeError, ValueError):
+    except OSError, RuntimeError, ValueError:
         logger.debug("Failed to validate submodule Git metadata")
         return None
 
@@ -451,6 +451,9 @@ def read_git_branch_via_subprocess(path: str | Path) -> str:
             ["git", "rev-parse", "--abbrev-ref", "HEAD"],  # noqa: S607
             capture_output=True,
             text=True,
+            # Branch names are UTF-8, not in the Windows ANSI code page.
+            encoding="utf-8",
+            errors="replace",
             timeout=2,
             check=False,
             cwd=path,
@@ -653,6 +656,9 @@ def read_git_remote_url_via_subprocess(path: str | Path) -> str:
             ["git", "config", "--get", "remote.origin.url"],  # noqa: S607
             capture_output=True,
             text=True,
+            # Local-path remotes are UTF-8, not in the Windows ANSI code page.
+            encoding="utf-8",
+            errors="replace",
             timeout=2,
             check=False,
             cwd=path,

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_repository_bounds.py

@@ -432,7 +432,7 @@ class RepositoryBounds:
         body, separator, notes = content.partition("\n\n")
         try:
             paths = ast.literal_eval(body)
-        except (SyntaxError, ValueError):
+        except SyntaxError, ValueError:
             return content
         if not isinstance(paths, list) or not all(
             isinstance(path, str) for path in paths

deepagents_code-0.2.1/deepagents_code/_session_lock.py

@@ -0,0 +1,184 @@
+"""Presence lock telling a launch whether other dcode sessions share its install.
+
+A Python migration rebuilds the uv tool environment, which breaks every dcode
+process — and every server it spawned — still running from the old one. Startup
+auto-update may only migrate when no other session uses the installation, and
+it cannot tell that from a process listing: shims, renamed symlinks, and the
+server bootstrap all run under different names.
+
+Instead, each dcode process of a non-editable install (editable installs never
+auto-update) holds a shared `flock` on `SESSION_LOCK_FILE` for its lifetime,
+and hands the descriptor to the servers it spawns so they hold
+the same lock. A process asking "am I alone?" tries to take the lock
+exclusively; that succeeds only when no other session's open file holds it.
+The kernel drops a lock when its last descriptor closes, so a crashed session
+can never leave a stale claim behind.
+
+The answer is a snapshot. It cannot see sessions of versions from before this
+lock existed, and nothing stops a session that launches while the migration
+runs; both are accepted as rare and recoverable by a relaunch.
+
+POSIX only. On Windows, or whenever the lock cannot be taken, a process is
+never reported as alone, so the migration stays deferred to `dcode update`.
+"""
+
+from __future__ import annotations
+
+import logging
+import os
+import sys
+from typing import TYPE_CHECKING
+
+from deepagents_code._paths import PATHS
+
+if sys.platform != "win32":
+    import fcntl
+
+if TYPE_CHECKING:
+    from pathlib import Path
+
+logger = logging.getLogger(__name__)
+
+SESSION_LOCK_FILE: Path = PATHS.installation.locks_dir / "sessions.lock"
+"""Advisory lock held shared by every registered dcode process of one installation.
+
+Lives beside `update.lock`, outside the tool environment, so a migration that
+rebuilds the environment keeps the same file. Carries no data.
+
+Installation-scoped only, with no per-profile fallback: a profile-scoped lock
+would hide sessions of other profiles, and over-reporting "alone" is the one
+failure this lock must not have.
+"""
+
+_held_fd: int | None = None
+"""Descriptor holding this process's shared lock, or `None` when not held."""
+
+
+def hold_session_lock() -> None:
+    """Register this process as a running session for its lifetime.
+
+    Idempotent and fail-soft: when the lock cannot be taken, the process runs
+    unregistered and `is_sole_session` reports `False`. The descriptor is
+    non-inheritable, so the re-exec after an update drops it and the new
+    process registers itself again.
+    """
+    global _held_fd  # noqa: PLW0603  # one registration per process
+    if _held_fd is not None or sys.platform == "win32":
+        return
+    try:
+        SESSION_LOCK_FILE.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+        fd = os.open(SESSION_LOCK_FILE, os.O_RDWR | os.O_CREAT, 0o600)
+    except OSError:
+        logger.warning(
+            "Could not open session lock %s", SESSION_LOCK_FILE, exc_info=True
+        )
+        return
+    try:
+        # Blocks only while another process is inside `is_sole_session`, the
+        # one place the lock is ever held exclusively, and only for an instant.
+        # Failing fast instead would leave this session invisible to that check.
+        fcntl.flock(fd, fcntl.LOCK_SH)
+    except OSError:
+        logger.warning(
+            "Could not take session lock %s", SESSION_LOCK_FILE, exc_info=True
+        )
+        os.close(fd)
+        return
+    _held_fd = fd
+
+
+def session_lock_fds() -> tuple[int, ...]:
+    """Return descriptors a spawned server must inherit to count as this session.
+
+    `flock` locks belong to the open file description, so a child given the
+    descriptor holds the same lock: the server keeps the install marked in use
+    if it outlives its client, and does not count as a second session.
+    """
+    return () if _held_fd is None else (_held_fd,)
+
+
+def session_lock_unavailable() -> bool:
+    """Return whether this POSIX process failed to register as a session.
+
+    Lets callers tell "other sessions are running" apart from "presence cannot
+    be known", which quitting other sessions would never fix.
+    """
+    return sys.platform != "win32" and _held_fd is None
+
+
+def is_sole_session() -> bool:
+    """Return whether no other dcode session holds this installation.
+
+    Converting a `flock` is not atomic: the shared lock is released before the
+    exclusive one is tried, so two processes checking at once could each see
+    the other as absent. An exclusive lock on `sessions.check.lock` beside
+    `SESSION_LOCK_FILE` admits one checker at a time; a process that finds it
+    taken is not alone.
+
+    Returns:
+        `True` only when this process holds the session lock and could take
+            it exclusively. `False` when another session holds it, or when the
+            lock is unavailable and presence cannot be known.
+    """
+    if _held_fd is None:
+        return False
+    check_file = SESSION_LOCK_FILE.with_name("sessions.check.lock")
+    try:
+        guard = os.open(check_file, os.O_RDWR | os.O_CREAT, 0o600)
+    except OSError:
+        logger.warning("Could not open %s", check_file, exc_info=True)
+        return False
+    try:
+        fcntl.flock(guard, fcntl.LOCK_EX | fcntl.LOCK_NB)
+    except OSError:
+        return False
+    else:
+        return _probe_exclusive(_held_fd)
+    finally:
+        os.close(guard)
+
+
+def _probe_exclusive(fd: int) -> bool:
+    """Try to take the session lock exclusively, then hold it shared again.
+
+    Returns:
+        Whether the exclusive attempt succeeded and the shared lock is back.
+    """
+    try:
+        fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+    except BlockingIOError:
+        sole = False
+    except OSError:
+        logger.warning(
+            "Could not check session lock %s", SESSION_LOCK_FILE, exc_info=True
+        )
+        sole = False
+    else:
+        sole = True
+    # Re-take it on both branches: on Linux a failed upgrade attempt has already
+    # released the shared lock.
+    return _restore_shared(fd) and sole
+
+
+def _restore_shared(fd: int) -> bool:
+    """Hold the session lock shared again, or unregister on failure.
+
+    Returns:
+        Whether this process is still registered.
+    """
+    global _held_fd  # noqa: PLW0603  # unregister a lock this process lost
+    try:
+        # Blocking is safe: the check lock is held, so no other process holds
+        # this lock exclusively.
+        fcntl.flock(fd, fcntl.LOCK_SH)
+    except OSError:
+        logger.warning(
+            "Could not restore the shared session lock %s; other dcode sessions "
+            "will not see this one",
+            SESSION_LOCK_FILE,
+            exc_info=True,
+        )
+        _held_fd = None
+        os.close(fd)
+        return False
+    return True

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_session_stats.py

@@ -1311,7 +1311,7 @@ def record_model_usage_event(
                 "model_provider": provider,
             },
         )
-    except (TypeError, ValueError):
+    except TypeError, ValueError:
         logger.debug("Rejected malformed nested model usage", exc_info=True)
         return None
     return record_message_usage(

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_tool_stream.py

@@ -711,7 +711,7 @@ class ToolCallBuffer:
         joined = self._materialize_args()
         try:
             parsed = json.loads(joined)
-        except (json.JSONDecodeError, RecursionError):
+        except json.JSONDecodeError, RecursionError:
             # `RecursionError` is caught alongside the decode error because
             # pathologically nested model output can make `json.loads` exceed
             # the interpreter recursion limit, and that is one malformed call to

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/_version.py

@@ -2,7 +2,7 @@
 
 # Keep the `x-release-please-version` annotation — release-please uses it to
 # bump `__version__` in sync with `pyproject.toml` on every release PR.
-__version__ = "0.1.88"  # x-release-please-version
+__version__ = "0.2.1"  # x-release-please-version
 
 DOCS_URL = "https://docs.langchain.com/oss/python/deepagents/code"
 """URL for `deepagents-code` documentation."""

{deepagents_code-0.1.88 → deepagents_code-0.2.1}/deepagents_code/agent.py

@@ -2772,6 +2772,28 @@ def create_cli_agent(
     ):
         extension_registry = None
     mcp_tools = tuple(mcp_tools or ())
+    skill_tools = tuple(
+        item
+        for item in mcp_tools
+        if (item.metadata or {}).get("_deepagents_code_skill_only") is True
+    )
+    skill_tool_ids = {id(item) for item in skill_tools}
+    tools = [item for item in tools if id(item) not in skill_tool_ids]
+    if skill_tools and mcp_server_info:
+        skill_tool_names = {item.name for item in skill_tools}
+        mcp_server_info = [
+            replace(
+                server,
+                tools=tuple(
+                    item for item in server.tools if item.name not in skill_tool_names
+                ),
+            )
+            for server in mcp_server_info
+        ]
+    if skill_tools and not enable_skills:
+        logger.warning(
+            "Skill-only MCP tools are unavailable because skills are disabled"
+        )
     if auto_mode_enabled and sandbox is not None:
         logger.warning(
             "Classifier-backed Auto is unavailable with a sandbox; using Manual HITL"
@@ -2792,6 +2814,12 @@ def create_cli_agent(
             # Base instructions are loaded fresh from get_system_prompt()
             agent_md.touch()
 
+    skill_sources = (
+        get_skill_sources(assistant_id=assistant_id, project_context=project_context)
+        if enable_skills
+        else []
+    )
+
     # Load custom subagents from filesystem
     custom_subagents: list[SubAgent | CompiledSubAgent] = []
     resolved_shell_allow_list = _resolve_shell_allow_list()
@@ -2892,6 +2920,16 @@ def create_cli_agent(
             middleware.append(
                 ManagedMemoryGuardMiddleware([get_user_agent_md_path(assistant_id)])
             )
+        if enable_skills and skill_tools:
+            middleware.insert(
+                0,
+                PluginSkillsMiddleware(
+                    backend=FilesystemBackend(virtual_mode=False),
+                    sources=skill_sources,
+                    path_base=effective_cwd,
+                    tools=skill_tools,
+                ),
+            )
         return middleware
 
     from deepagents_code._cli_context import INHERIT_CLASSIFIER_MODEL
@@ -3097,14 +3135,11 @@ def create_cli_agent(
 
     # Add skills middleware
     if enable_skills:
-        sources = get_skill_sources(
-            assistant_id=assistant_id,
-            project_context=project_context,
-        )
         skills_middleware = PluginSkillsMiddleware(
             backend=FilesystemBackend(virtual_mode=False),
-            sources=sources,
+            sources=skill_sources,
             path_base=effective_cwd,
+            tools=skill_tools,
         )
         agent_middleware.append(skills_middleware)
         instruction_middleware.append(skills_middleware)