feat(advanced): release the advanced agent changes as 0.16.7.post3 - #1098
Open
radu-mocanu wants to merge 12 commits into
Open
radu-mocanu wants to merge 12 commits into
radu-mocanu wants to merge 12 commits into
Conversation
radu-mocanu
force-pushed
the
hotfix/uipath-langchain-0.16.7.post3
branch
from
September 17, 2026 08:01
b877652 to
64ef583
Compare
Copilot stopped reviewing on behalf of
radu-mocanu due to an error
September 17, 2026 08:03
There was a problem hiding this comment.
Note
Copilot was unable to run its full agentic suite in this review.
Pull request overview
This PR adds first-class support for output-file attachments (discovering file fields in output schemas, injecting a file-publishing tool, and verifying references at termination), while also hardening/expanding the advanced agent runtime (payload handling, max-iteration budgeting, chat attachment hydration, and an optional QuickJS code interpreter with a security-driven allowlist).
Changes:
- Introduces output-file discovery/prompting/verification, plus an internal
create_output_filetool and schema utilities for job attachments. - Adds
SUSPENDS_RUNtool metadata and tests to prevent suspending tools from being reachable via unsafe bridges (notably the code interpreter). - Refactors attachment+JSON utilities into shared modules and updates advanced agent wrapper behavior (runtime prompts, iteration caps, payload handling, and message attachment hydration).
Reviewed changes
Copilot reviewed 58 out of 62 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| tests/runtime/test_chat_message_mapper_workspace.py | Removes standalone workspace/attachment mapping tests (coverage moved/changed elsewhere). |
| tests/runtime/test_chat_message_mapper.py | Adds coverage for assistant external-value attachment mapping. |
| tests/agent/tools/test_suspends_run_metadata.py | Adds AST-based contract test enforcing SUSPENDS_RUN stamping. |
| tests/agent/tools/internal_tools/test_output_file_tool.py | Adds tests for the internal output-file tool, schema, and path safety. |
| tests/agent/react/test_output_files_node.py | Adds tests for the termination gate verifying output file references. |
| tests/agent/react/test_json_utils.py | Updates imports after moving JSON helpers into attachments utilities. |
| tests/agent/attachments/test_output_files.py | Adds tests for output schema file-field discovery, prompting, and verification logic. |
| tests/agent/advanced/test_utils.py | Adds tests for message attachment hydration into workspace paths and attachment-block rendering. |
| tests/agent/advanced/test_payload_handler_middleware.py | Adds coverage for advanced-agent payload middleware (Gemini tool_config, stop reasons, empty answer rejection). |
| tests/agent/advanced/test_max_iterations.py | Adds coverage for per-turn iteration budgeting in advanced agents. |
| tests/agent/advanced/test_main_agent_only_tools.py | Adds contract test ensuring main-agent-only tools never reach subagents. |
| tests/agent/advanced/test_create_advanced_agent_graph.py | Expands wrapper-graph tests (runtime prompt middleware lookup, output-file verification node insertion). |
| tests/agent/advanced/test_create_advanced_agent.py | Updates expectations around built-in tools (files tools present; todo tool absent). |
| tests/agent/advanced/test_conversational_advanced_agent_graph.py | Adds conversational wrapper tests (runtime prompts, alias handling, attachment hydration, custom output extraction). |
| tests/agent/advanced/test_code_interpreter_replay.py | Adds end-to-end replay test validating why task() must be withheld when suspension is possible. |
| tests/agent/advanced/test_code_interpreter_persistence.py | Adds subprocess test for REPL persistence across process restarts via checkpointing. |
| tests/agent/advanced/test_code_interpreter.py | Adds comprehensive tests for code interpreter allowlist policy and sandbox behavior. |
| src/uipath_langchain/runtime/runtime.py | Updates client-side tool info import to a shared contracts module. |
| src/uipath_langchain/runtime/messages.py | Switches to shared attachments-block renderer and changes external-value mapping behavior. |
| src/uipath_langchain/agent/wrappers/job_attachment_wrapper.py | Moves attachment/JSON helper imports and reduces runtime imports via TYPE_CHECKING. |
| src/uipath_langchain/agent/tools/process_tool.py | Stamps SUSPENDS_RUN and updates job attachment helper import. |
| src/uipath_langchain/agent/tools/ixp_escalation_tool.py | Stamps SUSPENDS_RUN metadata on interrupting tool. |
| src/uipath_langchain/agent/tools/internal_tools/schema_utils.py | Extracts JOB_ATTACHMENT_DEFINITION and a reusable single_attachment_schema. |
| src/uipath_langchain/agent/tools/internal_tools/output_file_tool.py | Adds internal create_output_file tool supporting inline content and workspace file paths. |
| src/uipath_langchain/agent/tools/internal_tools/deeprag_tool.py | Stamps SUSPENDS_RUN metadata. |
| src/uipath_langchain/agent/tools/internal_tools/batch_transform_tool.py | Stamps SUSPENDS_RUN metadata. |
| src/uipath_langchain/agent/tools/internal_tools/analyze_files_tool.py | Updates job-attachment error helper import to shared module. |
| src/uipath_langchain/agent/tools/extraction_tool.py | Stamps SUSPENDS_RUN metadata and updates job attachment imports. |
| src/uipath_langchain/agent/tools/escalation_tool.py | Stamps SUSPENDS_RUN metadata. |
| src/uipath_langchain/agent/tools/context_tool.py | Stamps SUSPENDS_RUN metadata in relevant tool variants. |
| src/uipath_langchain/agent/tools/client_side_tool.py | Moves ClientSideToolInfo to shared contracts; stamps SUSPENDS_RUN. |
| src/uipath_langchain/agent/react/types.py | Adds output-file retries state, verification node enum, and config flag. |
| src/uipath_langchain/agent/react/router.py | Adds optional routing through VERIFY_OUTPUT_FILES for end_execution. |
| src/uipath_langchain/agent/react/output_files_node.py | Adds termination gate node that validates output file references and retries. |
| src/uipath_langchain/agent/react/llm_node.py | Factors max-iterations error creation into a shared helper. |
| src/uipath_langchain/agent/react/json_utils.py | Converts module into a backward-compatible re-export shim. |
| src/uipath_langchain/agent/react/job_attachments.py | Converts module into a backward-compatible re-export shim. |
| src/uipath_langchain/agent/react/conversational_output_node.py | Extracts a reusable conversational-output extractor callable. |
| src/uipath_langchain/agent/react/agent.py | Adds output-file verification node wiring and routing option. |
| src/uipath_langchain/agent/exceptions/exceptions.py | Adds max_iterations_error() helper. |
| src/uipath_langchain/agent/exceptions/init.py | Re-exports max_iterations_error. |
| src/uipath_langchain/agent/contracts/client_side_tools.py | Adds shared ClientSideToolInfo TypedDict contract. |
| src/uipath_langchain/agent/attachments/pydantic_json.py | Adds shared JSONPath + coercion helpers (moved from react/json_utils). |
| src/uipath_langchain/agent/attachments/output_files.py | Adds output-file discovery/prompting/verification logic and constants. |
| src/uipath_langchain/agent/attachments/job_attachments.py | Adds shared job-attachment utilities (moved from react/job_attachments). |
| src/uipath_langchain/agent/attachments/constants.py | Adds shared constant for the output-file tool name. |
| src/uipath_langchain/agent/advanced/utils.py | Enhances advanced utils: configurable state merging, message attachment hydration into workspace, shared attachments block rendering. |
| src/uipath_langchain/agent/advanced/types.py | Fixes defaults for message lists and adds alias validation config for conversational input base. |
| src/uipath_langchain/agent/advanced/code_interpreter.py | Adds optional QuickJS interpreter middleware factory with derived allowlist and replay-safety checks. |
| src/uipath_langchain/agent/advanced/agent.py | Adds payload handler middleware, max-iterations middleware, runtime system prompt resolution, output-file verification, conversation output extraction, and main-agent-only tool filtering. |
| src/uipath_langchain/agent/advanced/init.py | Exposes code-interpreter APIs and removes BackendFactory export. |
| src/uipath_langchain/_utils/durable_interrupt/decorator.py | Introduces SUSPENDS_RUN and suspends_run() helper. |
| src/uipath_langchain/_utils/durable_interrupt/init.py | Re-exports SUSPENDS_RUN and suspends_run. |
| src/uipath_langchain/_utils/_attachments.py | Adds shared, escaped rendering for <uip:attachments>...</uip:attachments> blocks. |
| samples/simple-deepagent/pyproject.toml | Pins deepagents version range used by sample. |
| samples/deepagent-storage-buckets/src/deepagent_storage_buckets/buckets_backend.py | Updates bucket backend to deepagents 0.7.x result types and helpers (ls/read/grep/glob signatures & payload shapes). |
| samples/deepagent-storage-buckets/pyproject.toml | Pins deepagents version range used by sample. |
| pyproject.toml | Bumps package version, updates core dependency versions, and adds code-interpreter extra. |
Suppressed comments (2)
src/uipath_langchain/agent/tools/internal_tools/output_file_tool.py:1
- The traversal check
\"..\" in virtual_pathis both too broad (rejects legitimate names like/report..md) and too narrow (it doesn’t reason about path segments). Consider validating using a POSIX path parser and rejecting if any path part is exactly'..'(and similarly handling backslashes if they’re possible inputs), before doing theresolve()+ containment check.
src/uipath_langchain/agent/tools/internal_tools/output_file_tool.py:1 - The MIME type
application/jsonlis not a commonly registered/standard type for JSON Lines; many ecosystems useapplication/x-ndjson(or sometimesapplication/json). If interoperability matters (downstream consumers relying on a standard MIME), consider switching.jsonltoapplication/x-ndjson.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
andreibalas-uipath
approved these changes
Sep 18, 2026
(cherry picked from commit 42fa62d)
… can terminate langchain-quickjs 0.3.7 closes its QuickJS contexts from __del__ by blocking on its daemon worker thread. At interpreter finalization that thread no longer runs, so any process that built the middleware hangs on exit and the robot never learns the job suspended or finished.
radu-mocanu
force-pushed
the
hotfix/uipath-langchain-0.16.7.post3
branch
from
September 18, 2026 08:53
97fe15b to
12909d7
Compare
quickjs_rs compiles its source transform WebAssembly module lazily, inside the first eval of the process, under the same per-call deadline as user code. On a CPU-starved instance the compile alone outlasts the deadline, so the first advanced run on a fresh process fails at its first model call with "interrupted" and a retry on the same process succeeds. Compile it when the graph is built instead, and expose the warm-up so a host that preloads modules at process start can run it earlier. Claude-Session: https://claude.ai/code/session_013CLJG6q56YoHrgNTgm3pA3 (cherry picked from commit 8fd0a1c)
radu-mocanu
force-pushed
the
hotfix/uipath-langchain-0.16.7.post3
branch
from
September 20, 2026 14:45
b984a5d to
ef9f9c1
Compare
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
__del__by blocking on a worker thread that is already gone at interpreter finalization, which left the job process alive forever and the job stuck in Running instead of Suspended. reproduced on the local robot, this affects main as well and needs the same fix thereinterruptedand the retry passed.. the warm-up is exposed so the pooled server can run it at boothttps://claude.ai/code/session_013CLJG6q56YoHrgNTgm3pA3