feat(code): add Hooks v2 capability snapshots by johannes117 · Pull Request #4916 · langchain-ai/deepagents

Johannes du Plessis (johannes117) · 2026-07-21T23:10:08Z

Related DCD-70

Hooks v2 now validates and freezes configuration into deterministic session snapshots backed by one authoritative event capability registry.

This is 1/3 in the DCD-70 stack.

Defines event ownership, matching, timeout, output, and aggregation capabilities.
Loads project and user configuration in stable precedence order with semantic-only legacy migration.
Computes canonical snapshot hashes and rejects unsupported matcher or handler combinations before execution.

Test plan

uv run --group test pytest tests/unit_tests/hooks — 81 passed at this stack layer
make lint

main
- johannes117/code/dcd-70-hooks-capabilities 👈
  - johannes117/code/dcd-70-hooks-execution
    - johannes117/code/dcd-70-hooks-transcripts

^{Stack generated by Git Town}

corridor-security

The PR introduces a Hooks v2 loading module that includes project-scoped hook configs by default, which could allow a malicious repository to execute arbitrary commands via hook handlers — however, this new loader is not yet wired into the live app dispatch path, which still uses the legacy user-only loader.

Freeze validated hook configuration into deterministic session snapshots backed by one event capability registry.

Alexander Olsen (aolsenjazz)

remaining questiosn were answered in slack

Alexander Olsen (aolsenjazz) · 2026-07-22T19:06:33Z

+    snapshot_id: str
+
+
+def project_hooks_path(cwd: Path) -> Path:


I guess another concern I have here is when running from I non-project root - wdyt? any concerns here?

Alexander Olsen (aolsenjazz) · 2026-07-22T19:06:47Z

+    snapshot_id: str
+
+
+def project_hooks_path(cwd: Path) -> Path:


e.g. I often run dcode from ~/workspace

Depends on #4916 Related DCD-70 Hooks v2 command handlers now execute with event-aware policies, bounded terminal output, sanitized environments, and complete process cleanup. --- This is 2/3 in the DCD-70 stack. - Applies plain-output, exit-code, continuation, permission, and deferred-field policies without discarding sibling diagnostics. - Validates terminal sequences and removes ambient secret and telemetry environment values. - Cleans up complete process groups on timeout or cancellation and maps native/MCP tool calls only from trustworthy metadata. - Keeps materialized filesystem paths outside domain and transport state. <details> <summary>Test plan</summary> - `uv run --group test pytest tests/unit_tests/hooks` — 95 passed at this stack layer - `make lint` </details>  ------------------------- - main - **fix(code): harden Hooks v2 command execution** 👈 - #4918 - #4971 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)

> [!CAUTION] > Merging this PR will automatically publish to **PyPI** and create a **GitHub release**. For the full release process, see [`.github/RELEASING.md`](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md). --- _Release notes preview: keep this section in sync with the package `CHANGELOG.md`. The published GitHub release body is extracted from the merged `CHANGELOG.md` by `release.yml`, not from this PR description._ --- ## [0.1.46](deepagents-code==0.1.45...deepagents-code==0.1.46) (2026-07-24) ### Highlights - Auto mode is now generally available. [#4957](#4957) - Added configurable Auto goal-criteria acceptance. [#4940](#4940) - Improved Auto behavior by authorizing actions from active goal/rubric directives, avoiding redundant approval prompts, showing the enable notice only on first global enable, deduplicating classifier-unavailable transcript spam, logging underlying classifier failures, and reporting classifier timeout budgets. [#5017](#5017) [#4993](#4993) [#5012](#5012) [#5013](#5013) [#5011](#5011) [#5025](#5025) - Added Hooks v2 capability snapshots and session transcripts, and hardened Hooks v2 command execution. [#4916](#4916) [#4918](#4918) [#4917](#4917) - Raised the agent recursion limit to 2000 and made it configurable. [#4994](#4994) ### Improvements and fixes - Let the rubric grader inspect working-directory files, show rubric grader defaults, and improved `/rubric` help and empty-state messaging. [#4835](#4835) [#4966](#4966) [#5015](#5015) - Unified goal activation signaling. [#4980](#4980) - Made Version, Model, and CWD copyable in the Debug Console. [#4975](#4975) - Improved `config get` output when a key is missing. [#4976](#4976) - Aborted YOLO launch on `Ctrl+C`/`Ctrl+D` and made the YOLO warning friendlier for new users. [#4953](#4953) [#4950](#4950) - Updated LangSmith handling: secret redaction is disabled by default, `/trace` now flags empty env overrides that shadow the LangSmith key, and the default US endpoint is no longer treated as a custom target. [#4970](#4970) [#4996](#4996) [#5022](#5022) - Injected OpenAI `prompt_cache_key` for any OpenAI-provider endpoint. [#4995](#4995) - Improved tool and schema presentation: finished calls stay on the live tool-group line, first-party tool schemas now include field descriptions, and `web_search`/`fetch_url` tool descriptions were trimmed. [#4927](#4927) [#5019](#5019) [#5016](#5016) - Omitted `plugins/` and `conversation_history/` from the `/agent` picker. [#4991](#4991) - Made selector modal backdrop dimming consistent. [#4990](#4990) - Restored the `"Server log preserved at:"` notice on exit. [#4999](#4999) - Used the SDK pin as the effective editable version. [#4949](#4949) _End release notes preview._ --- > [!NOTE] > A **New Contributors** section is appended to the GitHub release notes automatically at publish time (see [Release Pipeline](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md#release-pipeline), step 2). --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: langchain-oss-automated-triage[bot] <248757908+langchain-oss-automated-triage[bot]@users.noreply.github.com>

Related DCD-70 Hooks v2 now validates and freezes configuration into deterministic session snapshots backed by one authoritative event capability registry. --- This is 1/3 in the DCD-70 stack. - Defines event ownership, matching, timeout, output, and aggregation capabilities. - Loads project and user configuration in stable precedence order with semantic-only legacy migration. - Computes canonical snapshot hashes and rejects unsupported matcher or handler combinations before execution. <details> <summary>Test plan</summary> - `uv run --group test pytest tests/unit_tests/hooks` — 81 passed at this stack layer - `make lint` </details>  ------------------------- - main - **johannes117/code/dcd-70-hooks-capabilities** 👈 - [johannes117/code/dcd-70-hooks-execution](langchain-ai#4917) - [johannes117/code/dcd-70-hooks-transcripts](langchain-ai#4918) [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)

Depends on langchain-ai#4916 Related DCD-70 Hooks v2 command handlers now execute with event-aware policies, bounded terminal output, sanitized environments, and complete process cleanup. --- This is 2/3 in the DCD-70 stack. - Applies plain-output, exit-code, continuation, permission, and deferred-field policies without discarding sibling diagnostics. - Validates terminal sequences and removes ambient secret and telemetry environment values. - Cleans up complete process groups on timeout or cancellation and maps native/MCP tool calls only from trustworthy metadata. - Keeps materialized filesystem paths outside domain and transport state. <details> <summary>Test plan</summary> - `uv run --group test pytest tests/unit_tests/hooks` — 95 passed at this stack layer - `make lint` </details>  ------------------------- - main - **fix(code): harden Hooks v2 command execution** 👈 - langchain-ai#4918 - langchain-ai#4971 [Stack](https://www.git-town.com/how-to/proposal-breadcrumb.html) generated by [Git Town](https://github.com/git-town/git-town)

> [!CAUTION] > Merging this PR will automatically publish to **PyPI** and create a **GitHub release**. For the full release process, see [`.github/RELEASING.md`](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md). --- _Release notes preview: keep this section in sync with the package `CHANGELOG.md`. The published GitHub release body is extracted from the merged `CHANGELOG.md` by `release.yml`, not from this PR description._ --- ## [0.1.46](langchain-ai/deepagents@deepagents-code==0.1.45...deepagents-code==0.1.46) (2026-07-24) ### Highlights - Auto mode is now generally available. [langchain-ai#4957](langchain-ai#4957) - Added configurable Auto goal-criteria acceptance. [langchain-ai#4940](langchain-ai#4940) - Improved Auto behavior by authorizing actions from active goal/rubric directives, avoiding redundant approval prompts, showing the enable notice only on first global enable, deduplicating classifier-unavailable transcript spam, logging underlying classifier failures, and reporting classifier timeout budgets. [langchain-ai#5017](langchain-ai#5017) [langchain-ai#4993](langchain-ai#4993) [langchain-ai#5012](langchain-ai#5012) [langchain-ai#5013](langchain-ai#5013) [langchain-ai#5011](langchain-ai#5011) [langchain-ai#5025](langchain-ai#5025) - Added Hooks v2 capability snapshots and session transcripts, and hardened Hooks v2 command execution. [langchain-ai#4916](langchain-ai#4916) [langchain-ai#4918](langchain-ai#4918) [langchain-ai#4917](langchain-ai#4917) - Raised the agent recursion limit to 2000 and made it configurable. [langchain-ai#4994](langchain-ai#4994) ### Improvements and fixes - Let the rubric grader inspect working-directory files, show rubric grader defaults, and improved `/rubric` help and empty-state messaging. [langchain-ai#4835](langchain-ai#4835) [langchain-ai#4966](langchain-ai#4966) [langchain-ai#5015](langchain-ai#5015) - Unified goal activation signaling. [langchain-ai#4980](langchain-ai#4980) - Made Version, Model, and CWD copyable in the Debug Console. [langchain-ai#4975](langchain-ai#4975) - Improved `config get` output when a key is missing. [langchain-ai#4976](langchain-ai#4976) - Aborted YOLO launch on `Ctrl+C`/`Ctrl+D` and made the YOLO warning friendlier for new users. [langchain-ai#4953](langchain-ai#4953) [langchain-ai#4950](langchain-ai#4950) - Updated LangSmith handling: secret redaction is disabled by default, `/trace` now flags empty env overrides that shadow the LangSmith key, and the default US endpoint is no longer treated as a custom target. [langchain-ai#4970](langchain-ai#4970) [langchain-ai#4996](langchain-ai#4996) [langchain-ai#5022](langchain-ai#5022) - Injected OpenAI `prompt_cache_key` for any OpenAI-provider endpoint. [langchain-ai#4995](langchain-ai#4995) - Improved tool and schema presentation: finished calls stay on the live tool-group line, first-party tool schemas now include field descriptions, and `web_search`/`fetch_url` tool descriptions were trimmed. [langchain-ai#4927](langchain-ai#4927) [langchain-ai#5019](langchain-ai#5019) [langchain-ai#5016](langchain-ai#5016) - Omitted `plugins/` and `conversation_history/` from the `/agent` picker. [langchain-ai#4991](langchain-ai#4991) - Made selector modal backdrop dimming consistent. [langchain-ai#4990](langchain-ai#4990) - Restored the `"Server log preserved at:"` notice on exit. [langchain-ai#4999](langchain-ai#4999) - Used the SDK pin as the effective editable version. [langchain-ai#4949](langchain-ai#4949) _End release notes preview._ --- > [!NOTE] > A **New Contributors** section is appended to the GitHub release notes automatically at publish time (see [Release Pipeline](https://github.com/langchain-ai/deepagents/blob/main/.github/RELEASING.md#release-pipeline), step 2). --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: langchain-oss-automated-triage[bot] <248757908+langchain-oss-automated-triage[bot]@users.noreply.github.com>

Johannes du Plessis (johannes117) mentioned this pull request Jul 21, 2026

fix(code): harden Hooks v2 command execution #4917

Merged

github-actions Bot added dcode Related to `deepagents-code` feature New feature/enhancement or request for one internal User is a member of the `langchain-ai` GitHub organization size: L 500-999 LOC labels Jul 21, 2026

Johannes du Plessis (johannes117) mentioned this pull request Jul 21, 2026

feat(code): add Hooks v2 session runtime #4915

Closed

corridor-security Bot reviewed Jul 21, 2026

View reviewed changes

Comment thread libs/code/deepagents_code/hooks/loading.py

feat(code): add Hooks v2 capability snapshots

32e7e97

Freeze validated hook configuration into deterministic session snapshots backed by one event capability registry.

Johannes du Plessis (johannes117) force-pushed the johannes117/code/dcd-70-hooks-capabilities branch from 4d9b10f to 32e7e97 Compare July 21, 2026 23:19

Johannes du Plessis (johannes117) mentioned this pull request Jul 21, 2026

feat(code): add Hooks v2 session transcripts #4918

Merged

fix(code): gate project hooks on workspace trust

3fd18f1

Alexander Olsen (aolsenjazz) requested changes Jul 22, 2026

View reviewed changes

cr

8d44e5a

github-actions Bot added size: XL 1000+ LOC and removed size: L 500-999 LOC labels Jul 22, 2026

Johannes du Plessis (johannes117) requested a review from Alexander Olsen (aolsenjazz) July 22, 2026 20:03

Johannes du Plessis (johannes117) enabled auto-merge (squash) July 22, 2026 20:04

Merge branch 'main' into johannes117/code/dcd-70-hooks-capabilities

f8b2540

Alexander Olsen (aolsenjazz) approved these changes Jul 22, 2026

View reviewed changes

Johannes du Plessis (johannes117) disabled auto-merge July 22, 2026 20:06

Johannes du Plessis (johannes117) enabled auto-merge (squash) July 22, 2026 20:06

Johannes du Plessis (johannes117) merged commit 8b4e508 into main Jul 22, 2026
54 checks passed

Johannes du Plessis (johannes117) deleted the johannes117/code/dcd-70-hooks-capabilities branch July 22, 2026 20:10

github-actions Bot mentioned this pull request Jul 22, 2026

release(deepagents-code): 0.1.46 #4965

Merged

Navigation Menu

Uh oh!

feat(code): add Hooks v2 capability snapshots - #4916

feat(code): add Hooks v2 capability snapshots#4916
Johannes du Plessis (johannes117) merged 4 commits into
mainfrom
johannes117/code/dcd-70-hooks-capabilities

Johannes du Plessis (johannes117) commented Jul 21, 2026 •

edited

Loading

Uh oh!

corridor-security Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) Jul 22, 2026

Uh oh!

Alexander Olsen (aolsenjazz) Jul 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

Johannes du Plessis (johannes117) commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

corridor-security Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Alexander Olsen (aolsenjazz) Jul 22, 2026

Choose a reason for hiding this comment

Uh oh!

Alexander Olsen (aolsenjazz) Jul 22, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Johannes du Plessis (johannes117) commented Jul 21, 2026 •

edited

Loading